Hey everyone. I wrote a blog post for those of us that might struggle to manage permissions in AWS Identity Center (SSO), and who find that existing tooling like Terraform and CloudFormation
lack visibility into your actual IAM state, and require too much work to manage for permissions. Would love your feedback: https://www.noq.dev/blog/tailor-aws-identity-center-sso-perm...
The tutorial shows how to do the following with IAMbic:
- Get a complete, eventually-consistent accounting of your cloud IAM in version control in under an hour, all without writing any code
- Customize Permission Set Access Rules and IAM permissions per account, in a centralized GitOps workflow
- Prevent drift on IAM resources you want to be exclusively managed via IAMbic, like sensitive permission sets
1 comment
[ 2.6 ms ] story [ 11.5 ms ] threadThe tutorial shows how to do the following with IAMbic: - Get a complete, eventually-consistent accounting of your cloud IAM in version control in under an hour, all without writing any code - Customize Permission Set Access Rules and IAM permissions per account, in a centralized GitOps workflow - Prevent drift on IAM resources you want to be exclusively managed via IAMbic, like sensitive permission sets
Hope you find this helpful!