provider-aws
provider-aws copied to clipboard
Huge API calls to `iam.amazonaws.com`
What happened?
We're observed the increase API calls to iam.amazonaws.com
with event UpdateAssumeRolePolicy
How can we reproduce it?
Provisioning the IAM Role, IAM Attach Policy and a IAM Policy.
What environment did it happen in?
Crossplane version: Crossplane-UXP: v1.14.7-up.1 Crossplane-provider version: v0.47.2
Part of CloudTrail event
...
"eventSource": "iam.amazonaws.com",
"eventName": "UpdateAssumeRolePolicy",
"awsRegion": "us-east-1",
"userAgent": "aws-sdk-go-v2/1.19.0 os/linux lang/go#1.21.2 md/GOOS#linux md/GOARCH#amd64 api/iam#1.14.0 crossplane-provider-aws/v0.47.2",
"requestParameters": {
"roleName": "role-application",
"policyDocument": "{\n \"Version\": \"2012-10-17\",\n \"Statement\":\n [\n {\n \"Effect\": \"Allow\",\n \"Principal\": {\n \"Service\": [\n \"apigateway.amazonaws.com\",\n \"lambda.amazonaws.com\",\n \"states.amazonaws.com\"\n ]\n },\n \"Action\": [\n \"sts:AssumeRole\"\n ]\n }\n ]\n}\n"
},
...