Minimum deployment account privileges

dawson-org / dawson-cli

A serverless web framework for Node.js on AWS (CloudFormation, CloudFront, API Gateway, Lambda)

https://dawson.sh

GNU General Public License v3.0

713 stars 25 forks source link

Minimum deployment account privileges #183

Closed nateabele closed 7 years ago

nateabele commented 7 years ago

The docs recommend creating a machine user with AdministratorAccess privileges for deployment. This is fine for getting started, but isn't a production best practice. Would it be possible to provide a list of the minimum privileges the account actually needs to deploy (or better yet, ship a policy doc)?

Thanks.

lusentis commented 7 years ago

Thank you for your comment and sorry for answering so late, I'm planning to fix this (see #159) and shipping a policy document seems a great fit.

Simone

lusentis commented 7 years ago

Closing as duplicate of #159