Comments (4)
Following up on my most recent comment, I believe in rough order of priority we'll need:
- Everything that is included in #141
- A managed resource that represents an IAM policy.
- A managed resource that represents an IAM user.
- A managed resource that represents the attachment of an IAM policy to an IAM user.
I believe this will enable our current use cases, the ability to grant a user access to an S3 bucket, and the ability to grant a pod (role) access to an RDS instance per #126 (comment). Once those three resources are added I think we can safely pause work on IAM until the community comes forward with additional use cases for IAM.
from provider-aws.
- A managed resource that represents the attachment of an IAM policy to an IAM user.
@negz Should this have a managed policy (arn) or an inline policy (JSON document) or both?
from provider-aws.
My suspicion is that we might be able to deprioritise IAM once #141 is merged. We started with IAM mostly because it was (in theory) a simple service, rather than because it was super high priority. My suspicion is that now we have IAM roles, policles, and attachments modelled we've probably got most of the IAM use cases covered.
IAMUser may be the one additional thing we need; I believe S3 buckets frequently make use of them.
from provider-aws.
completed via:
from provider-aws.
Related Issues (20)
- Update-Loop when setting `awsAccountId` to just account ID HOT 1
- Issue "failed to satisfy constraint: Member must have length greater than or equal to 20" while creating Policy HOT 1
- diskSize of an EKS managed Node Group is not being updated HOT 1
- RolePolicy required field no data type, breaks things HOT 1
- LogGroup - allow updating kmsKeyID parameter
- domain.opensearchservice: vpc endpoint URI does not appear in status.atProvider HOT 1
- server.transfer: Add vpc endpoint URI to status.atProvider HOT 1
- Updating RolePolicyAttachment policyArn does not detach policy HOT 2
- Cannot create RDS DBInstance when autogeneratePassword - clean instance HOT 3
- s3 bucket settings not defined in the MR are removed after upgrade to v0.46.0 HOT 4
- RDSInstance doesn't set username in `writeConnectionSecretToRef` if you are importing an existing resource
- [documentation] Missing `required` tag in SecurityGrou `region` parameter
- CannotConnectToProvider
- CannotConnectToProvider while trying to create BucketVersioning using Composition HOT 1
- Validation error updating Cloudfront distribution HOT 3
- Release v0.48.0 May 2, 2024
- Time parse issue in compareTimeRanges (maintenanceWindow) HOT 2
- Dynamically referencing the ARN of Lambda Layer in Lambda Function HOT 2
- S3 Bucket constantly calls PutBucketNotification with NotificationConfiguration HOT 1
- Unable to set poll-interval time for EFS mount target beyond default
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from provider-aws.