Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Document permissions required for main.py describe #7

Open
Zeebrow opened this issue Jun 29, 2022 · 2 comments
Open

Document permissions required for main.py describe #7

Zeebrow opened this issue Jun 29, 2022 · 2 comments

Comments

@Zeebrow
Copy link
Owner

Zeebrow commented Jun 29, 2022

Before starting, do #6 create first and see if those permissions work


Parent

@Zeebrow Zeebrow changed the title Holy crap - (read) setup aws credentials for ci - main.py make Holy crap - (read) setup aws credentials for ci - main.py describe Jul 1, 2022
@Zeebrow
Copy link
Owner Author

Zeebrow commented Jul 3, 2022

#6 does work, but should be done with AssumeRole via STS sessions in the future. This is the policy for such a role.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "quickhostDescribe",
            "Effect": "Allow",
            "Action": [
                "iam:ListUsers",
                "iam:GetUser",
                "ec2:DescribeSecurityGroups",
                "ec2:DescribeKeyPairs",
                "ec2:DescribeInstances",
                "ec2:DescribeVpcs",
                "ec2:DescribeSubnets",
                "ec2:DescribeInternetGateways",
                "ec2:DescribeRouteTables",
                "ec2:DescribeImages"
            ],
            "Resource": "*"
        }
    ]
}

@Zeebrow
Copy link
Owner Author

Zeebrow commented Jul 8, 2022

Need to specify something better than "Resource": "*"

@Zeebrow Zeebrow changed the title Holy crap - (read) setup aws credentials for ci - main.py describe Document permissions required for main.py describe Jul 8, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant