feat: Extend self-management policy to read account summary (iam-group-with-policies)

terraform-aws-modules / terraform-aws-iam

Terraform module to create AWS IAM resources 🇺🇦

https://registry.terraform.io/modules/terraform-aws-modules/iam/aws

Apache License 2.0

787 stars 996 forks source link

feat: Extend self-management policy to read account summary (iam-group-with-policies) #462

Closed vutny closed 7 months ago

vutny commented 7 months ago

Description

This PR extends default self-management policy for IAM group with permissions to read account summary.

Motivation and Context

This change is necessary to have a clean view of IAM Dashboard in AWS Console for authenticated IAM user with self-management policy. It allows to:

see AWS account general security recommendations, which is always good to have
see current AWS account ID and Alias in AWS Console, it is useful when using "Switch Role" wizard with account alias

Breaking Changes

None.

How Has This Been Tested?

Applied default policy and checked through AWS Console.

antonbabenko commented 7 months ago

Could you please upgrade pre-commit-terraform version to the latest (more than 1.87.0)?

bryantbiggs commented 7 months ago

pre-commit has been updated to latest in #459 - :shipit:

antonbabenko commented 7 months ago

This PR is included in version 5.37.0 :tada:

vutny commented 7 months ago

Thanks!

vutny commented 7 months ago

@antonbabenko , @bryantbiggs The version 5.37.0 is still missing in the registry: https://registry.terraform.io/modules/terraform-aws-modules/iam/aws/latest Can you upload please? :pray:

antonbabenko commented 7 months ago

Weird. I have raised a ticket with the Terraform Registry to figure out what has been happening with it, but they still have not replied during the last 3 days. This has been an issue in many other repositories. Manually clicking "resync module" doesn't work anymore.

/cc @bryantbiggs FYI

vutny commented 7 months ago

Now it is there, thank you.

antonbabenko commented 7 months ago

They said there was an incident - https://status.hashicorp.com/incidents/jsp31wyh8mhl

github-actions[bot] commented 6 months ago

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.