Skip to content

[ELI-702] consolidating s3 perms, security perms and streaming perms#634

Merged
TOEL2 merged 1 commit intomainfrom
fix/consolidate-policies
Apr 10, 2026
Merged

[ELI-702] consolidating s3 perms, security perms and streaming perms#634
TOEL2 merged 1 commit intomainfrom
fix/consolidate-policies

Conversation

@TOEL2
Copy link
Copy Markdown
Contributor

@TOEL2 TOEL2 commented Apr 10, 2026

Description

Context

Type of changes

  • Refactoring (non-breaking change)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would change existing functionality)
  • Bug fix (non-breaking change which fixes an issue)

Checklist

  • I am familiar with the contributing guidelines
  • I have followed the code style of the project
  • I have added tests to cover my changes
  • I have updated the documentation accordingly
  • This PR is a result of pair or mob programming

Sensitive Information Declaration

To ensure the utmost confidentiality and protect your and others privacy, we kindly ask you to NOT including PII (Personal Identifiable Information) / PID (Personal Identifiable Data) or any other sensitive data in this PR (Pull Request) and the codebase changes. We will remove any PR that do contain any sensitive information. We really appreciate your cooperation in this matter.

  • I confirm that neither PII/PID nor sensitive data are included in this PR and the codebase changes.

@TOEL2 TOEL2 requested a review from a team as a code owner April 10, 2026 10:29
@eddalmond1 eddalmond1 requested a review from Copilot April 10, 2026 10:30
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR consolidates GitHub Actions IAM policies in the iams-developer-roles Terraform stack, reducing the number of separate policy resources by merging related permissions (S3 + Terraform state, KMS + code signing, Firehose + Kinesis).

Changes:

  • Merged Terraform state S3 permissions into the existing s3_management policy and removed the dedicated Terraform state policy/attachment.
  • Combined KMS key management and Lambda code-signing permissions into a new security_management policy and updated attachments accordingly.
  • Consolidated Firehose and Kinesis permissions into a single stream_management policy and updated attachments accordingly.


tags = merge(local.tags, { Name = "github-actions-kms-creation" })
tags = merge(local.tags, { Name = "security-management" })
}
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We've skipped this intentionally as the scopes of the actions are at account level, not resource level

@TOEL2 TOEL2 merged commit 05e69da into main Apr 10, 2026
30 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants