Permission levels for Team Members

L1: Join HfLA and DevOps

Fundamentals and Concepts

• Learn Terraform
  • Setup personal AWS (we need to find a tutorial for that, currently being worked on here in this issue: Research AWS setup tutorials
  • Do HashiCorp Terraform Tutorials
• Get Access and Submit your first PRs
  • Create a PR to Create user account in the https://github.com/hackforla/devops-security repo
    • open an issue to Request AWS IAM user or service account
    • fork the repo
    • create a new branch
    • edit the aws-users.tf file
      • copy a module block
      • update it with your user info and group
  • Add your user to the read-only-group to get read access to infrastructure organization (see resources)

L2: Get assigned to project as their DevOps person

• Administration
  • get access to do stuff to that projects' deployment
  • Resource groups to group resources

L3: Become a mentor across all projects DevOps people

• expert level
  • Ability to do stuff to any project

L4: Permissions and Resources management

• IAM supervisor / Services Supervisor (is added to the Management Group on AWS)
  • Dispenses new permissions and removes permissions for user
  • Add new services in partnership with Owner
• Billing (owner) (is added to the Cost Management Group)