Shorthands for actions commonly used together?

[mrtj]

It might be even easier to use the generator if it provided some shorthands for grouping together commonly used actions. I am thinking about for example an s3 bucket "read only" action group that could include LIST_BUCKET, GET_OBJECT and similar actions. I feel that at least a read only / read write action group could be defined for most of AWS resources, but there might be other interesting use cases as well.

[aletheia]

Nice idea! Could we try to liste common use cases?

[aletheia]

• S3 Bucker Read Only

[sopel]

As for use cases, the AWS SAM Policy Templates provide an ever growing collection of readily usable and vetted IAM policy 'shorthands' for real-world use cases.

Given the context, those are obviously geared towards serverless use cases, but there is quite some overlap (see e.g. S3ReadOnly as discussed above), so they should provide a nice starting point regardless.

[aletheia]

Other approaches to commonly used policy generation are used by

• Salesforce Policy Sentry https://github.com/salesforce/policy_sentry
• Netflix PolicyUniverse https://github.com/Netflix-Skunkworks/policyuniverse

They should be analyzed and considered to address this issue