Permission boundary support

[jegadeshs]

Do we have option to specify permission boundary ?

source: arn:aws:iam::143384653512:role/PowerTunerWebsiteStack-CustomCDKBucketDeployment86-1K0D6JG63Y5UY because no permissions boundary allows the iam:CreateRole act
ion

[mattymoomoo]

Hi, I do not atm but very happy to accept a PR if you would like to contribute to the project? Thanks, Matthew

On Tue, 20 Sep 2022 at 13:32, jegadeshs ***@***.***> wrote: Do we have option to specify permission boundary ? source: arn:aws:iam::143384653512:role/PowerTunerWebsiteStack-CustomCDKBucketDeployment86-1K0D6JG63Y5UY because no permissions boundary allows the iam:CreateRole act ion — Reply to this email directly, view it on GitHub <#36>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ADDYVLHXXNJP7NNHPQYJMQDV7GVERANCNFSM6AAAAAAQRA3NTI> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

-- Thank you Matthew

[mattdronen]

This is what I did in the file cdk\lib\power-tuner-stack.ts...

setupLambdaRole(scope: any): iam.Role {
const boundary = iam.ManagedPolicy.fromManagedPolicyArn(this, 'Boundary', '');
let iamRole = new iam.Role(scope, 'DefaultLambdaHanderRole', {
assumedBy: new iam.ServicePrincipal('lambda.amazonaws.com'),
});
iam.PermissionsBoundary.of(iamRole).apply(boundary);