Optimize Role and Policy Deployment to Targeted Accounts Based on Usage

[sukeshreddyg]

User Story

As a Modernisation Platform Engineer I want to ensure that roles and policies are deployed only to the member accounts that actively require them, so that we can avoid unnecessary role deployments in accounts where they are not being used. The accounts are categorized into three types: member, member-unrestricted, and core. The goal is to streamline role deployment to only the accounts that need them to reduce unnecessary resource allocation and simplify maintenance.

Value / Purpose

• Minimize unnecessary role and policy deployments, optimizing resource usage.
• Simplify the maintenance and management of roles across accounts.
• Reduce security risks associated with unused roles and policies in accounts.
• Improve operational efficiency by focusing on deploying roles only where they are required.

Useful Contacts

No response

Additional Information

No response

Definition of Done

• [ ] Explore options to filter and identify specific accounts where roles and policies are actively required.
• [ ] Present the various options to the team for discussion.
• [ ] Confirm with the team that the proposed solution aligns with the organization's security, compliance, and operational policies.
• [ ] If agreed raise further tickets to progress