hashicorp / hashicorp/packer-plugin-amazon
AWS Builder Does Not Support IAM Permission Boundaries
- Dominant language
- Go
- Stars
- 91
- Forks
- 141
- Avg merge
- 2d 18h
- Merged PRs (30d)
- 3
Description
_This issue was originally opened by @dylanmtaylor in https://github.com/hashicorp/packer/issues/11820 and has been migrated to this repository. The original issue description is below._
---
#### Description
Packer in its current state does not seem to support IAM permissions boundaries for creating a role while building into an account. This feature is highly desirable to us.
#### Use Case(s)
This allows controlled builds using packer that can create roles but can't escalate their privileges.
#### Potential configuration
source "amazon-ebs" "amazon_linux" {
...
iam_permissions_boundary = "[some arn]"
}
#### Potential References
https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html
Contributor guide
Assessment
This issue has not been assessed yet.