News for hackers. Stuff that matters.

A comment on AWS IAM Roles, a tale of unnecessary complexity. Parent comment

Re:AWS IAM Roles, a tale of unnecessary complexity by insanitybit on Friday November 11, 2022 @08:53PM (#33569207)
Roll ups have their own problems. In particular, you really don't want them changing over time. I have banned all of the "managed policies" at my company because AWS is free to add new permissions and you have no way of knowing.
[ Parent | on HN ]
Re:AWS IAM Roles, a tale of unnecessary complexity by SkyPuncher on Friday November 11, 2022 @11:27PM (#33569947)
Well that can be solved with versioning.

Rollups can simply be a suggested collection of permissions. When they change, view a diff, and accept what you need.

[ Parent | on HN ]