aws / aws/chalice

Variables in policy doc

Open
#1,071 1 comment 0 reactions 0 assignees View on GitHub
feature-request
Dominant language
Python
Stars
11.1k
Forks
1k
Avg merge
1d 22h
Merged PRs (30d)
2

Description

Rather than having separate policy docs for each stage, just have one with variables. Like so:

**./.chalice/policy.json**

```json
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"s3:DeleteObject",
"s3:GetObject",
"s3:ListBucket",
"s3:PutObject"
],
"Resource": [
"arn:aws:s3:::my-bucket-${stage}"
]
}
]
}
```

^^^ See the `${stage}`. That would be neat.

Contributor guide

Open the contributing guide

Research direction

Start with the proposed ./.chalice/policy.json example and review how the current separate policy documents are handled for each stage. Done means a single policy document can use ${stage} to produce the appropriate stage-specific resource values, with the behavior verified by the project’s existing checks.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, python
Domain
cloud, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.