juho
Maybe it is too soon to spend too much time on it. You would probably need to do main provisioning in the cloudformation provisioner, and set some general permissions in the ftl-aws
mtoohey
That'll help fiddling with IAM perms i guess?
juho
Yeah. That should allow us to create targeted IAM perms, rather than blanket rules as we do now