Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Switch to STS GetCallerIdentity rather than using IAM GetUser to acquire AWS account ID #19

Open
plombardi89 opened this issue May 9, 2017 · 0 comments
Assignees

Comments

@plombardi89
Copy link
Contributor

The IAM GetUser call requires additional IAM permissions for users that the STS call does not require therefore the less friction-y approach for getting this information is to rely on the STS service to acquire the credentials.

This issue was discovered during some on-site user testing where we learned that the AWS credentials some users were issued by their AWS admin did not have the necessary IAM permissions thus requiring the admin to begrudgingly modify their AWS accounts permissions to proceed.

@plombardi89 plombardi89 self-assigned this May 9, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant