salesforce / aws-allowlister

Automatically compile an AWS Service Control Policy that ONLY allows AWS services that are compliant with your preferred compliance frameworks.
MIT License
221 stars 34 forks source link

Remove all whitespace flag #34

Closed jdyke closed 3 years ago

jdyke commented 3 years ago

Due to the byte limit of SCPs (5120 bytes (not characters)) we should add an optional flag to remove all whitespaces in the JSON policies. Important note from the docs:

Note: If you save the policy by using the AWS Management Console, extra white space (such as spaces and line breaks) between JSON elements and outside of quotation marks, is removed and not counted. If you save the policy using an SDK operation or the AWS CLI, then the policy is saved exactly as you provided and no automatic removal of characters occurs.

jdyke commented 3 years ago

I can take this one since its non-urgent and not a req for publicizing the repo.

kmcquade commented 3 years ago

Oh hell yeah. Great idea. Please do.

jdyke commented 3 years ago

Closed via #45