3 ms·
Everything you said is wise advice but has nothing to do with whether or not, or how, to use perm boundaries. IAM delegation and role/policy creation is indepen
by unethical_ban 4y ago
Everything you said is wise advice but has nothing to do with whether or not, or how, to use perm boundaries. IAM delegation and role/policy creation is independent of whether it's created manually or through Terraform.
- Spivak 4y agoI could be the one missing something but I’m saying to not use permission boundaries at all until you’re at a scale where it’s unavoidable due to the complexity of your corporate structure. The thing rolling out changes to your infra once merged is god. Boundaries don’t do anything in this model because “asking for the permission boundary to be changed so I can make X change” is the same as “ask to make X change.” Both require approval of the same people. Once you graduate to polytheism is when you need boundaries.