Service Control Policies

TannerWeinacker / Capstone

Tanner Weinacker's College Capstone

0 stars 0 forks source link

Open TannerWeinacker opened 1 year ago

TannerWeinacker commented 1 year ago

[ ] Create SCP Policy to Prevent Member account deletion
[ ] Create SCP Policy to prevent IAM Policy Deletion and find a way to streamline it
[ ] Create a script to create IAM Policy Deletion for Trusted Advisors
[ ] Create IAM policy to prevent users from seeing Member accounts
[ ] Create IAM group for AWS Class
[ ] Create IAM group for Admin accounts
[ ] Create Service Accounts

TannerWeinacker commented 1 year ago

"iam:DeleteUser", "iam:DeleteUser", "iam:DeleteRole", "iam:DeletePolicy", "iam:UnTag", "iam:UntagUser",

Each of these will need a group or role associated with it in the ARN