awslabs / awslabs/amazon-redshift-utils
ASSUMEROLE permission on IAM roles can't be listed by v_generate_user_grant_revoke_ddl
Open
- Dominant language
- Python
- Stars
- 2.8k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
User owns ASSUMEROLE permission on IAM roles can't be listed by https://github.com/awslabs/amazon-redshift-utils/blob/master/src/AdminViews/v_generate_user_grant_revoke_ddl.sql
So, if admin doesn't know of assumerole permission to revoke it first, user can't be dropped and receiving this error:
"SQL Error [55006]: ERROR: user "" cannot be dropped because the user has a privilege on some object"
Contributor guide
Assessment
This issue has not been assessed yet.