saayam-for-all / saayam-for-all/devsecops
Standardize IAM user and role setup for development environments
@Samunnisa01 is already working on this.
Since Sep 17, 2026.
- Dominant language
- Python
- Stars
- 2
- Forks
- 17
- Avg merge
- 1m
- Merged PRs (30d)
- 1
Description
Currently, creating IAM users and roles for local development (e.g. for the Volunteer Microservices project) requires manual steps. This issue proposes standardizing and automating that process.
Proposed Implementation
-
Create a CloudFormation or Terraform template that:
-
Creates a dev IAM user with programmatic access.
-
Grants permission to assume the project role (e.g. VolunteerMicroServices-S3-ProfilePicUpload).
-
Attaches required S3 access permissions.
-
Optionally rotates or stores credentials securely in Secrets Manager.
-
Parameterize environment, username, and buckets.
-
Add CI/CD automation to validate IAM policies via Access Analyzer before deployment.
-
Include documentation and CLI setup instructions for developers.
Acceptance Criteria
-
One standardized IaC template for IAM user + role setup.
-
CI/CD automation for validation and deployment.
-
Documented setup for local AWS SDK authentication.
-
Optional key rotation automation.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.