fpco / terraform-aws-foundation

Establish a solid Foundation on AWS with these modules for Terraform
MIT License
204 stars 98 forks source link

modules/stp-m-infra: Add iam:Get{User,Role,Policy} for power-users #251

Closed aniketd closed 4 years ago

aniketd commented 4 years ago

Background: The power-user role may have access to change, modify all parts of the infrastructure except only all IAM related configuration. In certain situations, like having to modify S3 buckets created by it's own user the "iam:Get{User,Role,Policy}" permissions become necessary.

This commit grants only those three permission to the power-user role, or, members of that group.


ketzacoatl commented 4 years ago

I addressed the conflict with the changelog update and rebased to merge and close.