Research How Terraform is Handling JSON Policies

[mtp1376]

We can check how Terraform or other IaC apps are detecting the changes in JSON Policies and how are they checking if two policies are the same thing. We can read their codes to gain an understanding of their logic.

[mtp1376]

OK seems this issue with the AWS API has been known. Terraform has these checks for it:

• This one which itself has a call to:
  • This one

The overall logic can be translated to TypeScript and I think this can help us find a way to handle it properly. I'll put the steps it's taking here.

[dfellis]

Examples of our current ad-hoc handling of this issue are:

• ECR
• IAM
• RDS (sort of, not a policy doc per se, but a similar issue)
• S3 (not actually dealing with the issue, the module and its tests are just too simple to run into problems, yet)
• VPC (also just haven't run into the issues, yet, because we're not stretching this in the test suite for this module)