hashicorp / hashicorp/packer

Manage temporary_iam_instance_profile_policy_document for SSM config

Open
#13,491 0 comments 1 reaction 0 assignees View on GitHub
enhancement
Dominant language
Go
Stars
15.8k
Forks
3.3k
PR merge metrics
PR metrics pending

Description

#### Community Note

* Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request
* Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
* If you are interested in working on this issue or have submitted a pull request, please leave a comment

Please search the existing issues for relevant feature requests, and use the
reaction feature
(https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/)
to add upvotes to pre-existing requests.

#### Description

When the parameter for ssh_interface is set to "session_manager" we obvouslly admit that the SSM session is used.
The temporary_iam_instance_profile_policy_document can be created to attache some other references such as s3 bucket or secret_manager....

In my mind it could be a great things if the packer temporary role have the SSM Managed Core Policy attached by default in the case of SSM use case.

Could be a great option if we can use some existing policy in the accont.

#### Use Case(s)

If ssh_interface is set to "session_manager" so temporary_iam_instance_profile_policy_document have a temporary role with AmazonSSMManagedInstanceCore Policy attached.

#### Potential configuration

```
temporary_iam_instance_profile_policy_document use a JSON policy
temporary_iam_instance_profile_policies could a List[string] parameter with policies arns to attache on temporary role.
```

#### Potential References

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.