Merge pull request #121 from leakingtapan/iam-policy

Scope down recommended IAM policy
kubernetes-sigs · Dec 17, 2019 · 0117032 · 0117032
2 parents 7f84b2c + a5d4ab2
commit 0117032
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 4 deletions.
diff --git a/docs/README.md b/docs/README.md
@@ -74,8 +74,10 @@ kubectl apply -f secret.yaml
     {
       "Effect": "Allow",
       "Action": [
-        "s3:*",
-        "fsx:*"
+        "s3:ListBucket",
+        "fsx:CreateFileSystem",
+        "fsx:DeleteFileSystem",
+        "fsx:DescribeFileSystems"
       ],
       "Resource": ["*"]
     }

diff --git a/tester/e2e-test-config.yaml b/tester/e2e-test-config.yaml
@@ -21,8 +21,10 @@ cluster:
               {
                 "Effect": "Allow",
                 "Action": [
-                  "s3:*",
-                  "fsx:*"
+                  "s3:ListBucket",
+                  "fsx:CreateFileSystem",
+                  "fsx:DeleteFileSystem",
+                  "fsx:DescribeFileSystems"
                 ],
                 "Resource": ["*"]
               }