Comments (1)
Hi @sandeephs1 thanks for the issue. This is a good feature that would harden security. The roles you were not able to find in the stack are CDK-auto created roles that are not explicitly declared in the stack. We could go to each of the CDK constructs to check the parameters, but I think an easier way of implementing permission boundaries is to apply them to all roles (including the weird-CDK created ones). We could use something like what is explained in the CDK docs.
Let us know if that helps out, we can always look at other alternatives. @SofiaSazonova
from dataall.
Related Issues (20)
- Better handling of "out of sync" Tables HOT 1
- Allow cross region shares with a feature flag
- Introduce Persistent Email Reminders for Producers of Datasets HOT 8
- Email notifications for share failures HOT 1
- Simplify Classification Config and Add more customizablity into it HOT 1
- More robust handling of exceptions inside share manager ECS task HOT 2
- Update documentation after v2.5 release for dataset related changes HOT 1
- UI: add spinner, when the group is deleted or invited to ENV
- Data.all allows 2 or more datasets with same s3 bucket HOT 2
- Create generic shares_base and s3_datasets_shares modules from current dataset_sharing HOT 1
- Automated Share Correction with Re-Apply Share ECS Task
- Give access to re-apply share button to consumers
- UI Inconsistency: Failure to Reflect Updated Table Location
- Unable to load consumption roles on request modal page for large number of consumption roles HOT 2
- Reject Reason should not be editable when the share is already approved
- No effect on session after setting cognito_user_session_timeout_inmins HOT 5
- Send alerts when share verifier ECS task fails
- ECS task fails and crashes when RDS queries return error HOT 2
- Bulk share re-apply UI for a dataset
- Investigate whether search lambda (search_handler.py ) can be combined with api_handler.py HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from dataall.