Implement least privilege access on AWS for OpenShift

Solution Unverified - Updated -

Issue

OpenShift for AWS Ships with CredentialsRequest definitions that are very broad in their scope.  AWS IAM Policies should contain Permission + Resource combinations that are the most restrictive possible while still allowing the required functionality to operate correctly.  Specifically, there is rarely a need to apply a set of Policy permissions for “*” wildcard resources. Resources should be specifically identified such that only the resources specifically needed, with the fewest and least permissions given, for the platform to function correctly.

Environment

  • OpenShift Container Platform 4.4

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content