Comments (2)
Thanks for asking.
Try running the SAM deploy with an assumed role with no privileges. You will gradually discover all the missing privileges. When you fix all the missing privileges with least-privilege, you will have a policy document you can share with this project that a naive user can attach to his or her assumed role.
This is the process the naive user needs to undergo to make this demo successfully deploy. However, the naive user may be unaware of least-privilege, or may simply not have the time to scope down roles. The naive user will do things like give the assumed role much broader permissions.
Some of these quick starts suggest the work be undertaken in an "admin" account. Which is the ultimate in ignoring least-privilege.
I'd like for you to take on the responsibility of guiding the naive user to
- use an assumed role for CLI
(I am attaching ar.py that I use to assume a role)
[ar.py.txt](https://github.com/aws-samples/aws-plaid-demo-app/files/14001519/ar.py.txt - Assign least privileges to that role
- Be able to successfully run the SAM deploy out of the box.
Thanks for listening.
from aws-plaid-demo-app.
The Lambda functions are using scoped down roles and the Amplify role is only used for deployment. Is there another area you’d like to see least privileged followed?
from aws-plaid-demo-app.
Related Issues (12)
- Amplify Creation Failing due to "Bad Credentials" HOT 1
- Balances sync, Transactions dont.
- Accounts and Transaction Page Flickers HOT 2
- template.yml does not work with localstack. HOT 2
- instructions HOT 1
- App URL leads to "Your app will appear here once you complete your first deployment." HOT 2
- Creating new account doesn't work out of the box HOT 2
- Handle Plaid Item updates
- Cloud Formation Error on AWS Lambda HOT 1
- Frontend url not displaying the app HOT 6
- Development Version HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from aws-plaid-demo-app.