#27 Record AWS API calls to improve IAM Policies
cloudonaut - Ein Podcast von Andreas Wittig and Michael Wittig focusing on AWS Cloud
Kategorien:
Have you ever looked at an IAM policy and wondered: Is it really necessary to grant access to this specific action? Or do you need to know which API calls a legacy or 3rd party application is actually sending to come up with a secure IAM policy? CloudTrail can help here, but there is something better: Record API calls with the AWS SDKs and CLI (including the stuff that is not visible in CloudTrail).
