aws-samples / aws-iam-permissions-guardrails

AWS IAM Permissions Guardrails https://aws-samples.github.io/aws-iam-permissions-guardrails/
https://aws-samples.github.io/aws-iam-permissions-guardrails/
Apache License 2.0
122 stars 43 forks source link

Protect shield and shield resources #49

Open 0xjjoyy opened 3 years ago

0xjjoyy commented 3 years ago

Use Case - Is your feature request related to a problem? Please describe. A clear and concise description of what the problem is.

Protect shield and shield resources.

Expected Outcome - Describe the solution you'd like A clear and concise description of what you want to happen.

      "shield:DeleteProtection",
      "shield:DeleteSubscription",
      "shield:DisassociateDRTLogBucket",
      "shield:DisassociateDRTRole",
      "shield:UpdateEmergencyContactSettings"

Describe alternatives you've considered A clear and concise description of any alternative solutions or features you've considered.

Affected AWS resource Mention the AWS resources which is affected

Impact High: The issue makes a service level improvement which affects all users of AWS Medium: Single feature which affects a single functionality which is optionally enabled in the AWS service Low: Niche use case which is particularly affecting the AWS resources if it is configured in a certain way

Supported material Can be either logs, screenshots or documentation links which provide evidence of need of this issue

I can contribute: Yes/No If you are able to contribute towards resolving this request.

Additional context Add any other context or screenshots about the feature request here.

Pull Request number If a pull request has already been created.