Home Esplora Aiuto
Registrati Accedi
AFS
/
xdr-terraform-modules
2
0
Forka 0
File Problemi 0 Pull Requests 0 Wiki
Albero (Tree): 2e4dd1f5cd
Rami (Branch) Tag
xdr-terraform-m...
/
submodules
/
iam
/
standard_iam_policies
Brad Poulton 579feedaab Initial Commit to add Threatq_lambda 3 anni fa
..
README.md ffc81e90b9 Decouples IAM terraform from the `live` repository 5 anni fa
datasources.tf ffc81e90b9 Decouples IAM terraform from the `live` repository 5 anni fa
locals.tf ffc81e90b9 Decouples IAM terraform from the `live` repository 5 anni fa
outputs.tf ffc81e90b9 Decouples IAM terraform from the `live` repository 5 anni fa
policy-mdr_engineer.tf ffc81e90b9 Decouples IAM terraform from the `live` repository 5 anni fa
policy-mdr_iam_admin.tf ffc81e90b9 Decouples IAM terraform from the `live` repository 5 anni fa
policy-mdr_readonly_assumerole.tf ffc81e90b9 Decouples IAM terraform from the `live` repository 5 anni fa
policy-mdr_terraformer.tf 579feedaab Initial Commit to add Threatq_lambda 3 anni fa

README.md

Standard IAM Policies module

Defines several well-known IAM policies.

Providers

Name Version
aws ~2.0?
okta ?

Inputs

(none)

Policies created

Policy Name Description
mdr_engineer "legacy" policy. Gives effectively PowerUserAccess but with limitations on iam:PassRole and sts:AssumeRole.
iam_admin_kms "legacy" policy. Gives several kms:* actions related to creating, destroying, and managing keys. Encrypt and Decrypt are noticeably absent.
mdr_engineer_readonly_assumerole Read only access to AWS console with ability to escalate to Terraformer role
mdr_terraformer Full read/write access to (almost) everything. Has some limitations around PassRole and AssumeRole