News for hackers. Stuff that matters.

A comment on Awsviz.dev simplifying AWS IAM policies. Parent comment

Re:Awsviz.dev simplifying AWS IAM policies by icedchai on Wednesday July 10, 2024 @09:11AM (#40926494)
They basically are optional. You can use wildcards in the action. (Nobody will go back and tighten them up though.)
[ Parent | on HN ]
Re:Awsviz.dev simplifying AWS IAM policies by egorfine on Thursday July 11, 2024 @05:42AM (#40934977)
They aren't. To have wildcards I still have to go to IAM and learn how to create a wildcard policy.
[ Parent | on HN ]
Re:Awsviz.dev simplifying AWS IAM policies by icedchai on Thursday July 11, 2024 @09:22AM (#40936508)
But you don't have to list each and every permission, which was my point. This is far easier than investigating what your app does, mapping it to permissions, missing some of them, and iterating...
[ Parent | on HN ]