search

aws-samples / amazon-dynamodb-labs

Hands on workshop and design scenarios for Amazon DynamoDB
https://catalog.workshops.aws/dynamodb-labs
Apache License 2.0
165 stars 114 forks source link

LEDA: Switch to resource based identity policies for scoreboard #110

Closed switch180 closed 7 months ago

switch180 commented 7 months ago

At present, the LEDA scoreboard is updated by assuming a role in each team account. This is done in a loop, assuming credentials via WS who then gather those for us from STS.

We need to switch to RBAC, passing the central account ID to each team stack.

switch180 commented 7 months ago

Complete with #107 - changes pushed to WS in latest build and published. However we didn't use RBAC; that was blocked. Instead we made a class to cache the STS credentials.