search

jenkins-x / terraform-aws-eks-jx

A Terraform module for creating Jenkins X infrastructure on AWS
Apache License 2.0
63 stars 41 forks source link

Improve S3 IAM access #347

Open chrislovecnm opened 2 years ago

chrislovecnm commented 2 years ago

Summary

I am noticing that we are using iam::aws:policy/AmazonS3FullAccess for the build-ctlr. These permission see a bit broad.

Steps to reproduce the behavior

Install

Expected behavior

We only allow the build-ctr iam role to have full access to the buckets that we create.

Actual behavior

We are giving it iam::aws:policy/AmazonS3FullAccess