Skip to content

Conversation

@Veetaha
Copy link
Contributor

@Veetaha Veetaha commented Mar 24, 2025

This PR introduces the elastio-iam-policies module with the initial IAM policy code generated via the TypeScript code.
The first policy that I added lists the IAM permissions required to deploy the Elastio Asset Account stack.

I did the codegen here for several reasons:

  • I expect that we'll extend the set of IAM policies with permission boundaries in the future and it'll be very important to have shared code that handles them by taking subsets of the golden ElastioCloudConnector role policy. Plus we may need to support CFN variant of the same stack in the future.
  • I found an amazing npm package that adds type definitions for IAM actions making it impossible to fuck up the IAM actions in IAM policy definitions

@Veetaha Veetaha merged commit f00e273 into master Mar 25, 2025
18 checks passed
@Veetaha Veetaha deleted the feat/elastio-managed-policies branch March 25, 2025 11:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants