search

scopely-devops / skew

Apache License 2.0
242 stars 70 forks source link

What kind for permissions are required for running skew? #148

Closed twitu closed 5 years ago

twitu commented 5 years ago

I tested a skew script in god_mode and it worked perfectly as it should. However, it would be great to know the permissions required so I can create an IAM role for the script. Instead you could also mention the kind of operations skew performs and I can make a policy accordingly. Thank you for the help.

avram commented 5 years ago

Skew makes various read requests against every service you have it scanning-- it would be hard to define any narrower policy than the built-in global read policy.

twitu commented 5 years ago

Thanks I think that should do it. For reference I have included a link to the ReadOnlyAccess policy.