René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Role/User changes in AIM should be run separately","articleBody":"Several of the TF actions in the `infrastructure/terraform/environments/shared` folder make changes to the Roles and Policies in AIM, and require to essentially run the `zero apply` with an `Admin`-level user; this is probably unnecessary for most of the other deployment actions, where a much lover permission level is required.\r\n\r\nAlso, deploying resources with such a high privilege level may complicate matters when tearing them down.\r\n\r\nIt would be great if those could be separated out (`zero prepare`?) with a separate, admin-level user; also bearing in mind that they won't probably change much over the course of a project's life, so could easily be only run once.","author":{"url":"https://github.com/massenz","@type":"Person","name":"massenz"},"datePublished":"2021-10-13T01:33:17.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":3},"url":"https://github.com/423/zero/issues/423"}