awslabs / awslabs/amazon-redshift-utils

ASSUMEROLE permission on IAM roles can't be listed by v_generate_user_grant_revoke_ddl

Open
#620 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
2.8k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

User owns ASSUMEROLE permission on IAM roles can't be listed by https://github.com/awslabs/amazon-redshift-utils/blob/master/src/AdminViews/v_generate_user_grant_revoke_ddl.sql

So, if admin doesn't know of assumerole permission to revoke it first, user can't be dropped and receiving this error:
"SQL Error [55006]: ERROR: user "" cannot be dropped because the user has a privilege on some object"

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.