Skip to main content
DevOps

Return to Answer

obligatory disclosure of affiliation added (see https://devops.stackexchange.com/help/promotion)
Source Link
edit approved Jun 28, 2020 at 17:05
Glorfindel
edit approved Jun 28, 2020 at 17:05
Glorfindel
  • 169
  • 1
  • 2
  • 12
  1. Create an IAM role in prod with all the permissions you'd like the devs to have.
  2. When you want devs to have prod access, add the sts:AssumeRole permission to their IAM group.
  3. When it's time to revoke access, remove the sts:AssumeRole permission.

More details in my blog article here.

  1. Create an IAM role in prod with all the permissions you'd like the devs to have.
  2. When you want devs to have prod access, add the sts:AssumeRole permission to their IAM group.
  3. When it's time to revoke access, remove the sts:AssumeRole permission.

More details here.

  1. Create an IAM role in prod with all the permissions you'd like the devs to have.
  2. When you want devs to have prod access, add the sts:AssumeRole permission to their IAM group.
  3. When it's time to revoke access, remove the sts:AssumeRole permission.

More details in my blog article here.

Source Link
Harish KM
Harish KM
  • 311
  • 1
  • 6

  1. Create an IAM role in prod with all the permissions you'd like the devs to have.
  2. When you want devs to have prod access, add the sts:AssumeRole permission to their IAM group.
  3. When it's time to revoke access, remove the sts:AssumeRole permission.

More details here.