3 ms·
One thing I really appreciate from companies is when they give me a policy with just the permissions they absolutely need to function (or a reference to a cross
by theossuary 9y ago
One thing I really appreciate from companies is when they give me a policy with just the permissions they absolutely need to function (or a reference to a cross-account policy). That way I can review it and I'm not dicking around with trying to figure out the right permissions, and I know what all you may have access to. Getting s3 objects may be a deal breaker for example, unless the action is properly scoped to a bucket.
- mrkurt 9y agoYeah agreed. We should make that explicit, or even give people a CloudFormation template to set up a restricted policy. And to be clear, we don't need s3 access unless you want to serve files from a private s3 bucket. Most sites don't use that at all.