-
Notifications
You must be signed in to change notification settings - Fork 4.5k
IAM/Secrets Manager/ECS: Consolidate IAM policies under path #18458
Copy link
Copy link
Closed
Labels
@aws-cdk/aws-iamRelated to AWS Identity and Access ManagementRelated to AWS Identity and Access Managementclosed-for-stalenessThis issue was automatically closed because it hadn't received any attention in a while.This issue was automatically closed because it hadn't received any attention in a while.effort/mediumMedium work item – several days of effortMedium work item – several days of effortfeature-requestA feature should be added or improved.A feature should be added or improved.p2
Description
Description
Best practice of Secrets Manager recommends the use of using an env/ path pattern for secrets naming. CDK should detect the use of this pattern and consolidate IAM policies under env/*, especially when using the aws_ecs.secret construct.
Use Case
Simplify IAM policies, but also to solve this bug: #18457
Proposed Solution
Switch from inline policies to managed policies: #7448
Other information
No response
Acknowledge
- I may be able to implement this feature request
- This feature might incur a breaking change
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
@aws-cdk/aws-iamRelated to AWS Identity and Access ManagementRelated to AWS Identity and Access Managementclosed-for-stalenessThis issue was automatically closed because it hadn't received any attention in a while.This issue was automatically closed because it hadn't received any attention in a while.effort/mediumMedium work item – several days of effortMedium work item – several days of effortfeature-requestA feature should be added or improved.A feature should be added or improved.p2