3 ms·
As an indie SaaS developer, I know I need to add group-based access control and I was looking for an off the shelf solution but I was surprised how complicated
by dandare 9y ago
As an indie SaaS developer, I know I need to add group-based access control and I was looking for an off the shelf solution but I was surprised how complicated this is. I have tried to grok the AWS IAM documentation but I got lost very soon.
- dcosson 9y agoYeah, I've been on that side of it as well and also didn't find anything. Feels like something that could even be formalized into a standard and make things a lot easier and more secure for everyone. IAM in AWS is mostly for internal permissions, to implement principle of least privilege within your account. For user accounts, look at AWS Cognito. I believe they have SAML and Google based login options, or you can implement your own. It's kind of convoluted to get your head around but it is pretty flexible and powerful (like most things AWS).