hashicorp / hashicorp/packer-plugin-amazon

AWS Builder Does Not Support IAM Permission Boundaries

Open
#229 1 comment 6 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
91
Forks
141
Avg merge
2d 18h
Merged PRs (30d)
3

Description

_This issue was originally opened by @dylanmtaylor in https://github.com/hashicorp/packer/issues/11820 and has been migrated to this repository. The original issue description is below._

---
#### Description

Packer in its current state does not seem to support IAM permissions boundaries for creating a role while building into an account. This feature is highly desirable to us.

#### Use Case(s)

This allows controlled builds using packer that can create roles but can't escalate their privileges.

#### Potential configuration

source "amazon-ebs" "amazon_linux" {

...
iam_permissions_boundary = "[some arn]"
}

#### Potential References

https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.