How to limit access to (deploying) AWS resources for CodeCatalyst users after the carte blanche was given by linking a CodeCatalyst space?

0

After linking a CodeCatalyst space to a AWS account, the account becomes responsible for all costs caused by the space. From the documentation, this seems like a de facto cart blanche. How to limit the abilities of the users with access to the space so they cannot just deploy anything the want. This is not clear to me from the documentation. Limiting developer access to dev environments and not production environments also seems like a challenge, but also a must.

1 個回答
0

Hey Maarten,

please check the documentation of the CodeCatalyst - IAM integration: https://docs.aws.amazon.com/codecatalyst/latest/userguide/ipa-iam-roles.html

You can limit the resources that can be deployed through CodeCatalyst by updating the IAM role and "Deny" access to the resources you do not want to get updated.

Let me know if this helps Regards Johannes

profile picture
已回答 9 個月前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南