serverless/examples

Lock Down Permissions

Open

#49 建立於 2017年1月5日

在 GitHub 查看
 (5 留言) (0 反應) (0 負責人)JavaScript (11,176 star) (4,496 fork)batch import
help wanted

描述

Currently, some of the examples have very open permissions.

Example: https://github.com/serverless/examples/blob/master/aws-node-fetch-file-and-store-in-s3/serverless.yml#L13-L17

For the sake of those less-than-knowledgeable with AWS permissioning, we should probably lock these instances down a bit more.

貢獻者指南

技術棧
awsnodejs
領域
security
議題類型
security
難度面向新貢獻者的預計實作難度，1 表示很小改動，5 表示專家級工作。
3
預計時間有經驗貢獻者完成調查、實作、測試並準備 pull request 的粗略時間範圍。
1-3 hours
活動狀態議題目前的可參與程度：新鮮、活躍、陳舊、阻塞或等待維護者輸入。
stale
清晰度議題是否清楚說明預期改動、驗收標準和下一步。
mostly clear
前置要求
basic AWS IAM knowledgeserverless framework
新手友善度1-100 的估計分數，表示該議題對首次貢獻者的友善程度。
40
研究方向
Examine the referenced file aws node fetch file and store in s3/serverless.yml lines 13-17 to understand the current permissive IAM policy. Research AWS IAM policy syntax and the principle of least privilege. Propose a more restrictive policy that only grants the necessary actions (e.g., s3:PutObject) on the specific bucket. Review comments in the issue for any previous suggestions or concerns.
Lock Down Permissions · serverless/examples#49 | Good First Issue