DataDog / cloudformation-template

Easily set up the Datadog AWS integration using CloudFormation
Apache License 2.0
34 stars 43 forks source link

[aws-ints] switching to managed policy for resource permissions #24

Closed jvanbrie closed 3 years ago

jvanbrie commented 3 years ago

Note: Please remember to review the contribution guidelines if you have not yet done so.

What does this PR do?

Change from the current list of permissions to use resource crawlers to a new managed AWS policy.

Motivation

Our current permissions will prevent us from easily making updates with additional crawled resources. This change allows us to have a future proof set of permissions based on a policy managed by AWS.

Testing Guidelines

I ran the cloudformation policy on the demo account both with and without the resource crawler policy enabled