terraform-aws-tfstate-backend icon indicating copy to clipboard operation
terraform-aws-tfstate-backend copied to clipboard

Adding support for setting permissions boundary on IAM-role

Open jannyg opened this issue 3 years ago • 0 comments

This is my first PR to Cloudposse projects. Thanks for all the good contributions and please let me know if there's any adjustments needed.

what

  • This will add support for setting a permission boundary for the IAM role
  • This is needed for master payer accounts through resellers that restricts access to the master payer accunt.
  • The value is optional

why

  • This is needed for master payer accounts through resellers that restricts access to the master payer account and require the permissions boundary to be set on all new IAM roles to restrict access to certain resources.

references

  • AWS documentation: https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html
  • https://registry.terraform.io/providers/hashicorp/aws%20%20/latest/docs/resources/iam_role#permissions_boundary

jannyg avatar Jul 05 '22 11:07 jannyg