backend icon indicating copy to clipboard operation
backend copied to clipboard

Ability to provide existing role

Open avinasherupaka opened this issue 5 years ago • 0 comments

Issue: Getting AccessDenied: User: arn:aws:sts::XXXXXXXXXXXXXX:assumed-role/XXXXXXXX is not authorized to perform: iam:CreateRole on resource: arn:aws:iam::XXXXXXXXXX:role/<RANDOM_NAME>

I think it is ideal to provide an ability for specifying a role name that already exists. In certain organizations the role creation might have restriction. Ex: Allow creation of new roles only if a standard permission boundary is attached to it.

In those lines custom role creation will always run into issues.. So if an IAM role is provided, on the fly role creation should be skipped and provided role should be attached to the resources.

@eahefnawy Thoughts ?

avinasherupaka avatar Jan 02 '20 15:01 avinasherupaka