Hi everyone. I am playing around with kotless. So ...

# kotless

[Álvaro Blázquez Checa]

Hi everyone. I am playing around with kotless. So far so good. And I am deploying my test project to aws. In order to do that I am trying to use an aws role with minimal permissions. In a real project could be problematic to use a role with full admin permissions.

[Álvaro Blázquez Checa]

For the most basic project kotless creates roles to enable lambada execution etc. But if you give iam:CreateRole permissions to “deployer role” you are giving pretty much everything to it.

[Álvaro Blázquez Checa]

has anyone faced this problem. Is there anyway to approach this without using roles or users with too broad permissions?

[Álvaro Blázquez Checa]

One solution I was thinking about is creating roles beforehand and importing them with terraform

[Álvaro Blázquez Checa]

this would imply manual step configuration before statarting with your CI/CD automation

[Álvaro Blázquez Checa]

but it is assumable