ansible

Commit Graph

Author	SHA1	Message	Date
Will Thames	1ca0c0e7f7	Consolidate IAM policies into fewer, larger policies (#33122 ) Due to IAM limits allowing at most 10 policies per group, need to reduce the number of total policies in use.	9 years ago
Will Thames	f3bc8b84b6	[cloud] Fix setup_iam to use policy_name, not PolicyName (#26880 ) Update setup_iam.yml to work with latest iam_managed_policies module, which correctly snakifies the results	9 years ago
Will Thames	0ed1c3ba9c	Split up testing IAM policies and automate creating them (#26223 ) * Split up testing IAM policies and automate creating them Move to managed policies to avoid the 5KB limit on policies for an IAM entity. The policy file is templated, so need to make sure that there is an easy mechanism to populate the templates and push the new policies. * Update IAM policies for ec2_scaling_policy tests * Fix RouteTable policies DescribeRouteTable should be plural ModifyRouteTable does not exist, but ReplaceRouteTableAssociation does. * Some IAM policies do not allow specified Resources Various IAM policies do not allow Resources to be specified and should just use ``. This differs per service [Autoscaling](http://docs.aws.amazon.com/autoscaling/latest/userguide/control-access-using-iam.html#policy-auto-scaling-resources) * [EC2](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/ec2-api-permissions.html#ec2-api-unsupported-resource-permissions) * [ECR](http://docs.aws.amazon.com/AmazonECR/latest/userguide/ecr-supported-iam-actions-resources.html) * [ELB](http://docs.aws.amazon.com/elasticloadbalancing/latest/userguide/load-balancer-authentication-access-control.html) * Finish fixing AWS IAM resource specifications for testing Update Lambda and RDS policies	9 years ago

Author

SHA1

Message

Date

Will Thames

1ca0c0e7f7

Consolidate IAM policies into fewer, larger policies (#33122 )

Due to IAM limits allowing at most 10 policies per group,
need to reduce the number of total policies in use.

Will Thames

f3bc8b84b6

[cloud] Fix setup_iam to use policy_name, not PolicyName (#26880 )

Update setup_iam.yml to work with latest iam_managed_policies
module, which correctly snakifies the results

Will Thames

0ed1c3ba9c

Split up testing IAM policies and automate creating them (#26223 )

* Split up testing IAM policies and automate creating them

Move to managed policies to avoid the 5KB limit on policies
for an IAM entity.

The policy file is templated, so need to make sure that there
is an easy mechanism to populate the templates and push the
new policies.

* Update IAM policies for ec2_scaling_policy tests

* Fix RouteTable policies

DescribeRouteTable should be plural
ModifyRouteTable does not exist, but ReplaceRouteTableAssociation
does.

* Some IAM policies do not allow specified Resources

Various IAM policies do not allow Resources
to be specified and should just use `*`. This differs
per service

* [Autoscaling](http://docs.aws.amazon.com/autoscaling/latest/userguide/control-access-using-iam.html#policy-auto-scaling-resources)
* [EC2](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/ec2-api-permissions.html#ec2-api-unsupported-resource-permissions)
* [ECR](http://docs.aws.amazon.com/AmazonECR/latest/userguide/ecr-supported-iam-actions-resources.html)
* [ELB](http://docs.aws.amazon.com/elasticloadbalancing/latest/userguide/load-balancer-authentication-access-control.html)

* Finish fixing AWS IAM resource specifications for testing

Update Lambda and RDS policies

3 Commits (eae23d2dbdd26b738a1702e6a064d02df391d48e)