Is there an example of an AWS policy that's been w...
# ask-metaflow
d
Is there an example of an AWS policy that's been written that could grant least privilege but all privileges needed to developers using metaflow?
1
a
when deployed with AWS Batch / Step Functions ? or Kubernetes / Argo
d
Batch/Step
a
for Kubernetes it should be just S3 perms, for AWS Batch I have a tf file somewhere you could use as a starter, let me see...
Untitled
ok so its not really minimal and its copy&paste from one of my internal terraform files, so you'll need to do some extra work to adopt it. but at least its a comprehensive permission list
d
Awesome, thank you!