2 ms·
One thing I wish AWS would do. Allow admins to "down feature" the account. Ie, simple mode. Basically, allow admins to toggle OFF S3 ACL's and even S3 Bucket
by donor20 6y ago
One thing I wish AWS would do.
Allow admins to "down feature" the account. Ie, simple mode.
Basically, allow admins to toggle OFF S3 ACL's and even S3 Bucket Policies - zero those out. Then let users use IAM policies for access which may be a more familiar / more used mental model.
- codeduck 6y agoA better approach is simply not to grant normal users modify access to IAM, VPC, or anything else potentially destructive, and force them to make all changes via a ci/cd pipeline with ops/sre oversight and review.