aws / aws/aws-parallelcluster

Feature Request: Support "ResourcePrefix:" argument for image-builder pipeline

Open
#6,929 5 comments 0 reactions 0 assignees View on GitHub
3.x Backlog Feature Request
Dominant language
Python
Stars
888
Forks
314
Avg merge
1d 10h
Merged PRs (30d)
43

Description

```
Iam:
ResourcePrefix:
```

... has been invaluable in deploying parallelcluster stacks in environments where the deploy user has an IAM Permission Boundary constraining certain actions, especially IAM roles or instance profiles made without a specific prefix pattern when naming the created resource.

However, in the same account with the same IAM Permission Boundary, we cannot generate custom parallelcluster AMIs using the native image builder process because image-builder does not support the IAM ResourcePrefix parameter and thus tries to create IAM roles beginning with prefix path `"/parallelcluster"` -- an action that is prohibited by the IAM Permission Boundary because the IAM role does not begin with the "authorized" prefix pattern.

If possible it would be great if the image building pipeline would also support a custom IAM: ResourcePrefix parameter!

Thanks!

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.