Support inline IAM policies

[muvaf]

What problem are you facing?

Today, it's possible to refer to an existing policy in IAMRolePolicyAttachment to attach it to a role. But it's not possible to attach an inline policy as described here.

The use-case that this will enable is finer granularity in IAM policies like described here where you aim one specific resource, i.e. the cases where it doesn't make much sense to create a standalone policy.

How could Crossplane help solve your problem?

Support addition of inline policies as a managed resource, essentially the equivalent of aws cli put-role-policy command. For more context, see the discussion in #141 (comment)

[jbilliau-rcd]

I concur with this; we are in the midst of POC'ing Crossplane for deploying AWS resources for our developers, and the lack of inline policy support could possibly be deal-breaking. Are there plans to add this?

[dfallert-rcd]

I know this is an old thread, but has there been any traction on adding support for inline policies? We have a few use cases for inline policies that, while they can be solved via managed policies, an inline policy will be a much cleaner solution.

[avdhoot]

@muvaf Any luck with this?

[github-actions]

Crossplane does not currently have enough maintainers to address every issue and pull request. This issue has been automatically marked as stale because it has had no activity in the last 90 days. It will be closed in 14 days if no further activity occurs. Leaving a comment starting with /fresh will mark this issue as not stale.