Skip to content

Switch to STS GetCallerIdentity rather than using IAM GetUser to acquire AWS account ID #19

Open

Description

@plombardi89

The IAM GetUser call requires additional IAM permissions for users that the STS call does not require therefore the less friction-y approach for getting this information is to rely on the STS service to acquire the credentials.

This issue was discovered during some on-site user testing where we learned that the AWS credentials some users were issued by their AWS admin did not have the necessary IAM permissions thus requiring the admin to begrudgingly modify their AWS accounts permissions to proceed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions