Skip to content
This repository was archived by the owner on Feb 12, 2026. It is now read-only.

feat: scope down over-privileged roles#627

Open
xuezhma wants to merge 6 commits intoawslabs:mainfrom
xuezhma:security-patches
Open

feat: scope down over-privileged roles#627
xuezhma wants to merge 6 commits intoawslabs:mainfrom
xuezhma:security-patches

Conversation

@xuezhma
Copy link
Contributor

@xuezhma xuezhma commented Dec 18, 2025

Issue #, if available:

Description of changes:
feat: scope down over-privileged roles

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

name=f"{dep_mod}-EMRCluster",
)

# policy to let Lambda invoke the api
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

the lambda doesn't need this blob of permission. the EMR service role does these work and already have them

@xuezhma xuezhma marked this pull request as ready for review December 18, 2025 20:45
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants