Clarify Readme regarding access key about confetti HOT 3 CLOSED

Hey Jay, thanks for your comments!

Confetti requires an access/secret key pair to create all the necessary resources. One of the resources that will be created is a keypair that allows modifying the S3 bucket and invalidating Cloudfront caches. The idea behind this is that you can share this restricted key with a friend/your team without giving access to the entirety of your AWS account.

So for the initial creation you could use your root keypair or similar and for anything beyond that you only need the generated keypair.

Does that make sense?

from confetti.

Yes, upon reviewing the Readme with your comments in mind, it all makes sense to me now. Thank you, Martin!

It might be helpful to future readers to add the essence of your comments above to the Readme in the "Creating a site" section. Specifically, the need to use an account with admin privileges for the execution of create-site. What do you think?

from confetti.

@webappzero just pushed a change for this, let me know if you have any other ideas how this could be communicated better. 🙂

from confetti.