Implement least privilege access on AWS for OpenShift
Issue
OpenShift for AWS Ships with CredentialsRequest definitions that are very broad in their scope. AWS IAM Policies should contain Permission + Resource combinations that are the most restrictive possible while still allowing the required functionality to operate correctly. Specifically, there is rarely a need to apply a set of Policy permissions for “*” wildcard resources. Resources should be specifically identified such that only the resources specifically needed, with the fewest and least permissions given, for the platform to function correctly.
Environment
- OpenShift Container Platform 4.4
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.