3 ms·
Isn't there a way to basically give your project root in a separate account, then use cloudtrail to figure out what policies it actually needs? I've not been ab
by glzone1 2y ago
Isn't there a way to basically give your project root in a separate account, then use cloudtrail to figure out what policies it actually needs? I've not been able to get that going myself but it seems like a more efficient approach potentially.
- turtlebits 2y agoYou can use Access advisor to see which service your IAM role/user has accessed and when. You can then prune permissions which haven't been recently used.