aws-quickstart/quickstart-hashicorp-vault

Adjust all IAM policies to Least privilege and review security controls

Closed this issue · 1 comments

gargana commented
  • Ensure all IAM Policies need to be reviewed and adjusted for least privilege.
    • Review Server Instance IAM Role Policies
    • Review Client Instance IAM Role Policies
  • review all access to AWS Secrets Manager Secrets
  • review all access to KMS Keys
  • review instance hardening guidance (https://learn.hashicorp.com/vault/day-one/production-hardening)
gargana commented

Closing since this is complete