02 iam demo

Unit testing IAM policies across multiple accounts

Managing AWS Organizations using the open source org-formation tool — Part 1

Managing AWS Organizations using the open source org-formation too

Install org-formation

npm i aws-organization-formation -g

Initialize an organization.yml

org-formation init organization.yml --region us-east-1

Make changes to the organization.yml

org-formation update organization.yml

Unit testing IAM policies across multiple accounts

cd iam-policy-tester-pipeline

aws codecommit create-repository --repository-name sample-lambda --repository-description "Sample Lambda Function"

git init && git remote add AWSCodeCommit https://git-codecommit.us-east-1.amazonaws.com/v1/repos/sample-lambda

You need to specify the user, group, or role whose policies you want to include in the simulation. To do this, within the sample-lambda directory, modify the value in scripts/source.txt file.

git add *

git commit -am "Initialize the Sample Lambda repository"

git push AWSCodeCommit master

chmod +x single-click-cross-account-pipeline.sh && ./single-click-cross-account-pipeline.sh