Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: implement dynamodb without creation IAM users #1200

Closed
wants to merge 1 commit into from

Conversation

fnaranjo-vmw
Copy link
Contributor

@fnaranjo-vmw fnaranjo-vmw commented Oct 25, 2023

Related PR (needed for this PR to work):

Checklist:

  • Have you added Release Notes in the docs repositories?
  • Have you ran make run-integration-tests and make run-terraform-tests?
  • Have you ran acceptance tests for the service under change?
  • Have you followed the Conventional Commits specification?

@cf-gitbot
Copy link

We have created an issue in Pivotal Tracker to manage this:

https://www.pivotaltracker.com/story/show/186333076

The labels on this github issue will be updated when the story is started.

@fnaranjo-vmw
Copy link
Contributor Author

This change introduces a new property role_name.
In the ideal scenario, this role should exists and be configured with the following trust policy:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "allow-iam-arn-user-to-assume-this-role",
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::000000000000:user/the-user-specified-in-the-iam-arn-property"
            },
            "Action": [
                "sts:AssumeRole",
                "sts:TagSession"
            ]
        }
    ]
}

The user corresponding to the iam-arn property should have the following additional permissions:

iam:GetRole
iam:GetRolePolicy
iam:DeleteRolePolicy
iam:PutRolePolicy

@blgm
Copy link
Member

blgm commented Jun 7, 2024

Closed due to no recent activity

@blgm blgm closed this Jun 7, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Development

Successfully merging this pull request may close these issues.

3 participants