Score:0

What policies or rights to be provided for a user with which we will run the terraform scripts?

uz flag

We are creating eks clusters and other resources from terraform.

What are the policies to be given to that user account?

Score:2
in flag

The answer is: it fully depends on your needs.

If you're running Terraform on CodeBuild or ECS and have configured an IAM Task Role, Terraform will use the container's Task Role.

If you're running Terraform on EKS and have configured IAM Roles for Service Accounts (IRSA), Terraform will use the pod's role.

See AWS Identity and Access Management Documentation for always up to date information and test your policies with the help of IAM policy simulator.

However, from my experience it is much easier to use AWS managed policies than to write policies yourself - see AWS managed policies for Amazon Elastic Kubernetes Service for an overview.

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.