serverless/examples

Lock Down Permissions

Open

#49 创建于 2017年1月5日

在 GitHub 查看
 (5 评论) (0 反应) (0 负责人)JavaScript (11,176 star) (4,496 fork)batch import
help wanted

描述

Currently, some of the examples have very open permissions.

Example: https://github.com/serverless/examples/blob/master/aws-node-fetch-file-and-store-in-s3/serverless.yml#L13-L17

For the sake of those less-than-knowledgeable with AWS permissioning, we should probably lock these instances down a bit more.

贡献者指南

技术栈
awsnodejs
领域
security
议题类型
security
难度面向新贡献者的预计实现难度，1 表示很小改动，5 表示专家级工作。
3
预计时间有经验贡献者完成调查、实现、测试并准备 pull request 的粗略时间范围。
1-3 hours
活动状态议题当前的可参与程度：新鲜、活跃、陈旧、阻塞或等待维护者输入。
stale
清晰度议题是否清楚说明期望改动、验收标准和下一步。
mostly clear
前置要求
basic AWS IAM knowledgeserverless framework
新手友好度1-100 的估计分数，表示该议题对首次贡献者的友好程度。
40
研究方向
Examine the referenced file aws node fetch file and store in s3/serverless.yml lines 13-17 to understand the current permissive IAM policy. Research AWS IAM policy syntax and the principle of least privilege. Propose a more restrictive policy that only grants the necessary actions (e.g., s3:PutObject) on the specific bucket. Review comments in the issue for any previous suggestions or concerns.