4 ms·
for what its worth, there is a much better scoped ViewOnlyAccess managed policy that makes a much better distinction about what is reasonable read-only access (
by dastbe 6y ago
for what its worth, there is a much better scoped ViewOnlyAccess managed policy that makes a much better distinction about what is reasonable read-only access (ecs:listClusters) and not reasonable read-only access (dynamodb:Query)
- StratusBen 6y agoThat's good feedback. Customers can also give us a Cross Account IAM role with whatever permissions they'd like and Vantage should work accordingly in a gracefully degraded fashion. For example: If you only want to give us access to EC2, things should theoretically work. To use a custom cross account IAM role all you need to do is email support@vantage.sh and we can help out with some other configuration details to get it going.