Restrict permissions for PBCore group - Githubissues

PBCore-AV-Metadata / PBCore_2.1

Update to the Public Broadcasting Metadata Dictionary project

Creative Commons Zero v1.0 Universal

23 stars 6 forks source link

Restrict permissions for PBCore group #25

Open afred opened 8 years ago

afred commented 8 years ago

Done when the permissions for the PBCore admin group are limited to manipulating resources associated with the PBCore website.

This requires:

crafting an IAM policy with a subset of permissions that at least allows
- starting, stopping, rebooting the PBCore prod instance.
- creating snapshots of the volume attached to the PBCore prod instance
applying the IAM policy to the PBCore admin group