Access to the AWS cloud is managed by the user's root level AWS credentials
and as configured in -- TODO --
However, for team efforts, and/or managing multiple projects, a finer level of
user control is desired.
The AWS user management is sufficent for this, but there needs to be command-level
access to these features that are easy to use.
The vision for this is to create a lift user command with subcommands for each action,
such as:
lift user create - create a user within the account, with minimal or default access
lift user destroy - destroy a user from the account
lift user grant - grant access permissions
lift user revoke - revoke access permissions
lift user show - show user details
lift user list - list active users
lift user login - login as a user
Best practices and security considerations for the above are important to research
and consider.
Access to the AWS cloud is managed by the user's root level AWS credentials
and as configured in -- TODO --
However, for team efforts, and/or managing multiple projects, a finer level of
user control is desired.
The AWS user management is sufficent for this, but there needs to be command-level
access to these features that are easy to use.
The vision for this is to create a
lift usercommand with subcommands for each action,such as:
lift user create- create a user within the account, with minimal or default accesslift user destroy- destroy a user from the accountlift user grant- grant access permissionslift user revoke- revoke access permissionslift user show- show user detailslift user list- list active userslift user login- login as a userBest practices and security considerations for the above are important to research
and consider.