search

tnc-br / TimberID-Bugs

0 stars 0 forks source link

Service Accounts with Basic IAM permissions #62

Open kazob1998 opened 1 year ago

kazob1998 commented 1 year ago

Permissions should be changed to Predefined roles or custom, assigning Basic roles to SA are not best practices

benwulfe commented 1 year ago

Narrow authorization for service accounts to only have the required permissions. This is a delicate change as it can easily break things.
Lets change before next Monday if we do it -- enough time to see breaks before offsite on wednesday.

benwulfe commented 1 year ago

Part of security review. Reduce scope of service account to recommended levels