[services][terraform] Set up IAM for feature-flags service
ClosedPublic
Actions

Authored by bartek on Jul 26 2023, 2:08 AM.

Details

Reviewers

tomek
michal
• jon
varun

Commits

rCOMM5011835a4474: [services][terraform] Set up IAM for feature-flags service

Summary

Sets up IAM for feature-flags service. Also this is example of how to set up IAM to give minimum required permissions to a service.

Created a role that:

Can be assumed by EC2 instances and ECS tasks - basically they are allowed to use it
Allows read operations on feature-flags DDB table

Depends on D8583

Test Plan

Tested together with next diff - they're live on AWS now.

Diff Detail

Repository

rCOMM Comm

Lint

No Lint Coverage

Unit

No Test Coverage

Event Timeline

bartek created this revision.Jul 26 2023, 2:08 AM

bartek held this revision as a draft.

Herald added a subscriber: ashoat. · View Herald TranscriptJul 26 2023, 2:08 AM

bartek added a child revision: D8636: [services][terraform] Add feature-flags service.Jul 26 2023, 2:12 AM

bartek published this revision for review.Jul 26 2023, 2:15 AM

Harbormaster completed remote builds in B21203: Diff 29040.Jul 26 2023, 2:25 AM

Been a couple years, but this looks mostly like what I remember

This revision is now accepted and ready to land.Jul 26 2023, 5:15 PM

Rebase

Harbormaster completed remote builds in B21352: Diff 29248.Jul 31 2023, 1:49 AM

Closed by commit rCOMM5011835a4474: [services][terraform] Set up IAM for feature-flags service (authored by bartek). · Explain WhyJul 31 2023, 3:42 AM

This revision was automatically updated to reflect the committed changes.

bartek added a commit: rCOMM5011835a4474: [services][terraform] Set up IAM for feature-flags service.

Revision Contents
Changeset List

Path

Size

services/

terraform/

remote/

aws_iam.tf

53 lines

Diff 29248

View Options

services/terraform/remote/aws_iam.tf

[services][terraform] Set up IAM for feature-flags serviceClosedPublicActions