Deny DCE from support, deny DCE from editing KMS policies - Githubissues

Optum / dce

Disposable Cloud Environment

Apache License 2.0

322 stars 85 forks source link

Deny DCE from support, deny DCE from editing KMS policies #494

Closed bjfish25 closed 5 months ago

bjfish25 commented 5 months ago

Proposed changes

Deny DCE users from editing KMS policy, which very often can lead to unrecoverable keys via the nuke process
Deny DCE users from creating support tickets

Types of changes

[x] Bugfix (non-breaking change which fixes an issue)
[x] New feature (non-breaking change which adds functionality)
[ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)
[ ] Refactor (changes to code, which do not change application behavior)

Checklist

[x] I have filled out this PR template
[x] I have read the CONTRIBUTING doc
[x] I have added automated tests that prove my fix is effective or that my feature works
[x] I have added necessary documentation (README.md, inline comments, etc.)
[x] I have updated the CHANGELOG.md under a ## next release, with a short summary of my changes

Relevant Links

Further comments