Validate IAM policies
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 74
- Forks
- 10
- PR merge metrics
- No merged PRs in 30d
Description
Right now, template validation will accept a template with IAM policies that are completely invalid. It could be interesting to try mixing in calls to `iam.simulateCustomPolicy()` with template validation. The goal wouldn't be to actually test that the policies provide some permission, but just that if you provide this API with a policy that contains invalid syntax, it will fail.
This could help prevent the horrible cycle of deploy-fail-debug-deploy that plagues everyone from time to time.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Locate the template validation entry point and review AWS IAM's simulateCustomPolicy API. Add validation for invalid IAM policy syntax without checking permissions, then verify that invalid policies fail during template validation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, javascript
- Domain
- cloud, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100