2 ms·
I honestly can't imagine a situation where this would be a good advice. Can you give an example of such an IAM policy?
by laurent_du 2y ago
I honestly can't imagine a situation where this would be a good advice. Can you give an example of such an IAM policy?
- cyberax 2y agoFor example, if you want your CI/CD to deploy to CloudFormation and allow it to generate IAM resources, then it's essentially root-level access. Because you can simply create an IAM role that gives admin permissions to you. Or even without that, there are plenty of footguns. AWS has a good blog post: https://aws.amazon.com/blogs/security/protect-sensitive-data-in-the-cloud-with-automated-reasoning-zelkova/ https://aws.amazon.com/blogs/security/protect-sensitive-data...