News for hackers. Stuff that matters.

A comment on AWS Creates New Policy-Based Access Control Language Cedar. Parent comment

Re:AWS Creates New Policy-Based Access Control Language Cedar by kapilvt on Monday February 20, 2023 @07:58AM (#34867665)
All of the sdks support client side monitoring (CSM), so these sort of tools can be built client side. https://boto3.amazonaws.com/v1/documentation/api/1.10.46/gui...

afaics the only challenge is mapping some of the apis to iam as its only 85% 1:1

There's also tools for helping with iam like (generator, and linter)

https://github.com/salesforce/policy_sentry

https://github.com/duo-labs/parliament

[ Parent | on HN ]
Re:AWS Creates New Policy-Based Access Control Language Cedar by krab on Monday February 20, 2023 @08:02AM (#34867688)
> mapping some of the apis to iam as its only 85% 1:1

Yeah. Try to create an Elastic beanstalk app with only EB permissions.

[ Parent | on HN ]
Re:AWS Creates New Policy-Based Access Control Language Cedar by kapilvt on Monday February 20, 2023 @08:49AM (#34868016)
actually Ian (aws hero) has a tool that does exactly this

https://github.com/iann0036/iamlive

[ Parent | on HN ]
Re:AWS Creates New Policy-Based Access Control Language Cedar by krab on Monday February 20, 2023 @12:00PM (#34870026)
Oh, thanks a lot!
[ Parent | on HN ]