IAM Policy Docs

[sean-smith]

Signed-off-by: Sean Smith [email protected]

Description

Changes IAM Policy docs to scope down the required permissions.
See #384

Changes

• update docs to scope down required IAM permissions needed to attach additional iam policies to a cluster

Changelog entry

• update docs to scope down required IAM permissions needed to attach additional iam policies to a cluster

How Has This Been Tested?

Create a cluster with a policy, arn:aws:iam::aws:policy/AmazonS3FullAccess that's not allowed by the API and observed that it created successfully.

References

PR Quality Checklist

• I added tests to new or existing code
• I removed hardcoded strings and used our i18n solution instead (see here)
• I made sure no sensitive info gets logged at any time in the codebase (see here) (e.g. no user info or details, no stacktraces, etc.)
• I checked that infrastructure/update_infrastructure.sh runs without any error
• I checked that npm run build builds without any error
• I checked that clusters are listed correctly
• I checked that a new cluster can be created (config is produced and dry run passes)
• I checked that login and logout work as expected

In order to increase the likelihood of your contribution being accepted, please make sure you have read both the Contributing Guidelines and the Project Guidelines

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.