Comments (5)
So so excited by all of this!! Here's a thought, but I haven't fully thought it through yet. I'll install this and actually get it running to think about the possibilities asap.
aws_users_list() %>%
filter(Tag %in% c("A", "B")) %>%
pull("Usernames") %>%
aws_group_add_users(group = "testers")
from sixtyfour.
Just copying this from above with no modifications:
# in each case below aws_policy_attach determines from input whether
# its a group, role, or user. And prefixes policy with `arn:aws:iam::aws:policy`
aws_group_create("testers") %>% aws_policy_attach("ReadOnlyAccess")
aws_role_create("ReadOnlyRole") %>% aws_policy_attach("ReadOnlyAccess")
aws_user_create("jane") %>% aws_policy_attach("AdministratorAccess")
# or if already created, then:
aws_role("ReadOnlyRole") %>% aws_policy_attach("ReadOnlyAccess")
I really like this. What should aws_policy_attach
return? I'm thinking about how the pipeline could continue (this is likely not too important at this point)
from sixtyfour.
right now aws_policy_attach
returns an empty list. it's the result of a call to a paws
method, e.g., attach_user_policy that always returns an empty list.
Instead of returning whatever is returned from the paws method, we could return the updated object that the various create
functions output? So for example,
aws_user_create("jane")
returns a tibble with user information, including any policiesaws_user_create("jane") %>% aws_policy_attach("AdministratorAccess")
is run and returns the same tibble returned above but with any changes made to policies
thoughts (when you're back)?
from sixtyfour.
aws_group_create("testers") %>% aws_policy_attach("ReadOnlyAccess")
and similar now returns the same thing that aws_group_create
and aws_group
returns - via the merged PR #19 - among other changes.
I'll leave this open until we're happy with the interface for these fxns.
from sixtyfour.
@seankross Any further thoughts on the permissions fxns for now?
from sixtyfour.
Related Issues (20)
- Allow users to set their AWS account within exported functions?
- aws_bucket_delete visibly returns an empty list on successful bucket deletion HOT 1
- repo tidying
- RDS IAM flow function aws_user_add_to_rds
- use minio for s3 testing at least on gh actions HOT 1
- Impersonate for admins?
- Document minio usage in more detail
- Localstack HOT 1
- Magic functions HOT 1
- Fill out Description field in DESCRIPTION file
- Simulate user
- RDS list and create throwing errors HOT 2
- Is return value of aws_bucket_upload correct? HOT 4
- Return value for aws_file_delete HOT 2
- Users can see buckets they haven't been granted permissions for HOT 5
- aws_file_upload changes file w/o extension into a directory within the s3 bucket HOT 1
- magic function idea: six_bucket_delete HOT 5
- aws_secrets_all errors when there are no secrets HOT 2
- user with write permissions for bucket unable to upload folders or files HOT 5
- magic function: six_file_upload HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from sixtyfour.