terraform: reduce SSO permissions to AWSPowerUserAccess
Also fix the README, `aws sso login` is pretty good.
zimbatm committed
Oct 17, 2023 at 20:32 UTC
04c78559d124d7fbed9af7b9abc55b9b555e2594
2 files changed
+2
-7
terraform/README.md
+1
-6
@@ -17,12 +17,7 @@ related keys.
17
18
Then run `direnv allow` to load the environment with the runtime dependencies.
19
20
-Run `aws configure sso` to acquire a temporary token:
21
-
22
-* Leave `SSO session name` **empty** (this is needed for legacy SSO).
23
-* Select account `LBNixOS_Dev_PDX (080433136561)`.
24
-* Select role `AWSAdministratorAccess`.
25
-* Leave all the rest with the default options.
20
+Run `aws sso login` to acquire a temporary token.
21
22
## Usage
23
terraform/aws-config
+1
-1
@@ -2,4 +2,4 @@
2
sso_start_url = https://nixos.awsapps.com/start
3
sso_region = eu-north-1
4
sso_account_id = 080433136561
5
-sso_role_name = AWSAdministratorAccess
5
+sso_role_name = AWSPowerUserAccess