aws / aws/aws-cli

Provide Required IAM Permissions for Command in "Help"

Open
#5,312 5 comments 14 reactions 0 assignees View on GitHub
feature-request needs-discussion p2
Dominant language
Python
Stars
17.3k
Forks
4.6k
Avg merge
1d 2h
Merged PRs (30d)
13

Description

**Is your feature request related to a problem? Please describe.**
Not a blocker type problem, but in many situations, users like to limit a role or custom policy to only the **required** permissions for the resource invoking it. Generally the SDK's methods lineup with the AWS CLI commands (which is a great thing!), however this often leads to sometimes messing around with permissions found in the policy permissions tables in the AWS docs (such as a lot of permissions to `get` things like EC2 instance information, also require the `list` permission etc etc).

**Describe the solution you'd like**
When invoking `aws RESOURCE ACTION help` it would be nice if in the man page documentation, there was a note or section of `required IAM permissions`, so that it is easy to see what permissions you, or your role may need to execute this.

**Describe alternatives you've considered**
NA

**Additional context**
NA

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.