Minimal IAM role doesn't include permissions for the service map

[jangaraj]

Could you include permissions for the service map into minimal IAM role, please? It looks like xray:GetServiceGraph is not enough.

Thank you.

[iwysiu]

Hi @jangaraj ! The minimal policy for x-ray can be found here: https://github.com/grafana/x-ray-datasource#iam-policies

[jangaraj]

@iwysiu Yes, but when you use that minimal policy from the doc/readme, then you will get 403 when you will try to show service map. So that is a reason why I asked to include more permissions there - it will be disappointed for the users, when they follow doc and it won't work.

[iwysiu]

Sorry, I misunderstood. I'll add it to the documentation. Though when I tested it, adding xray:GetServiceGraph was enough for service map. Did that not work for you?

[jangaraj]

xray:GetServiceGraph wasn't enough. I used lazy approach xray:Get*, but it will be fine if all permissions will be listed explicitly.

[jangaraj]

xray:GetServiceGraph wasn't enough. I used lazy approach xray:Get*, but it will be fine if all permissions will be listed explicitly.