Adding support for setting permissions boundary on IAM-role - Githubissues

cloudposse / terraform-aws-tfstate-backend

Terraform module that provision an S3 bucket to store the `terraform.tfstate` file and a DynamoDB table to lock the state file to prevent concurrent modifications and state corruption.

https://cloudposse.com/accelerate

Apache License 2.0

408 stars 177 forks source link

Adding support for setting permissions boundary on IAM-role #117

Closed jannyg closed 1 year ago

jannyg commented 2 years ago

This is my first PR to Cloudposse projects. Thanks for all the good contributions and please let me know if there's any adjustments needed.

what

This will add support for setting a permission boundary for the IAM role
This is needed for master payer accounts through resellers that restricts access to the master payer accunt.
The value is optional

why

This is needed for master payer accounts through resellers that restricts access to the master payer account and require the permissions boundary to be set on all new IAM roles to restrict access to certain resources.

references

Nuru commented 1 year ago

/test all

Nuru commented 1 year ago

/rebuild-readme

Nuru commented 1 year ago

/test all