coilysiren
commented
1 year ago Foundational updates here:
- fix the acronyms… it was silly to redefine “ACID” !!!
- adopt L2 / L3 constructs pattern https://docs.aws.amazon.com/cdk/v2/guide/constructs.html
- default to GCP’s role based access pattern https://cloud.google.com/iam/docs/roles-overview
- work off an example database where the permissions model can include accessing objects within the database itself, akin to how you can do so via the RDS data API https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/data-api.html
- Use OpenAPI as the theoretical code generation baseline
- Create Pulumi / AWS CDK style example code
V2 of this: https://lynncyrin.me/posts/on-permissions-models-for-cloud-platform-providers/