cloudposse/terraform-aws-iam-role

Option to use an inline policy instead of a managed policy

Closed this issue · 0 comments

Describe the Feature

Managed policies can be accidentally reused. If the policy is intended to be single purpose then a managed policy is unnecessary. Instead of a managed policy, id like to use a non reusable inline policy that is role specific

Expected Behavior

It would be nice if inline was the default , however, for backwards compatibility, a new input can be exposed such as

  managed_policy_enabled = true

And if it's false, then we can use inline

Use Case

See above

Describe Ideal Solution

See above

Alternatives Considered

No response

Additional Context

No response