Skip to content

(iam) Role policies are frequently exceeding 10kB #14261

@Larkenx

Description

@Larkenx

private readonly managedPolicies: IManagedPolicy[] = [];
private readonly attachedPolicies = new AttachedPolicies();
private readonly inlinePolicies: { [name: string]: PolicyDocument };

In order to support better flexibility when cleaning up the inline policy statements after creating large AWS CDK Stacks with several inline IAM policies, we'd like to be able to have read access on these fields so that we can de-dupe action & resource in line policies that are the same, but repeated numerous times.

We're frequently exceeding the 10kb policy limit size, and looking for ways to improve this.

Metadata

Metadata

Assignees

Labels

@aws-cdk/aws-iamRelated to AWS Identity and Access ManagementbugThis issue is a bug.effort/mediumMedium work item – several days of effortp1

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions