search

cloud-gov / aws-broker

Cloud Foundry AWS RDS Service Broker
Other
15 stars 15 forks source link

Update broker to use parameterized IAM group policy #252

Open markdboyd opened 2 years ago

markdboyd commented 2 years ago

In order to reduce the number of IAM users created/managed by the broker, the broker should have a parameterized group policy and add the user/role to that group instead of the broker making an individual policy for each instance.

Recommendation came out of security consulting from AWS. See the meeting notes

POC

Ask @rbogle for further details if necessary

pburkholder commented 1 year ago

Should this be included with broader AWS security recommendations issue?

markdboyd commented 1 year ago

@pburkholder Yes, it is tracked in that epic: https://github.com/cloud-gov/private/issues/1204