3 ms·
AWS is good at building abstractions on top of their already existing features, e.g. AWS App Runner. Maybe there could be an abstraction on top of IAM that does
by randomtoast 2y ago
AWS is good at building abstractions on top of their already existing features, e.g. AWS App Runner. Maybe there could be an abstraction on top of IAM that does not allow for all the fine-grained permissions settings and options that IAM has, but has much simpler predefined roles which are very well suited for a small startup.
- nerdjon 2y agoFor a lot of situations they already have this. They have managed (AWS Created and Managed) policies that if you want a basic level of security you can use. A lot of services will create policies for you, for example you can go to RDS and click setup connection to lambda, or ec2 and it will create the policy. A lot of things will give you the policy to copy and paste. Another UI to further abstract IAM would likely just complicate things, and then make it harder later if/when you need to leave that abstraction.