Write IAM guidance and review existing setup

[sudhara]

Overview

We need to figure out Industry Guidance and document what should be in the IAM policies, and review what we currently, so that we can write recommendations of what to fix and create actionable HfLA best practices.

Action Items

• Research, review and document existing IAM setup
• Identify and document in a comment who is the authoritative source for guidance (might be multiple places), e.g., AWS, etc.
• Write up the recommendation in the form of a Decision Record as a draft comment. Use template on (resource 1.01) and reference the source
  • Add to DevOps team agenda (resource 1.02) for review and approval
• write recommendations on how to fix what we currently have to meet the standards that have now been approved
  • Add to DevOps team agenda (resource 1.02) for review and approval
• Add the decision record to the wiki and link to (resource 1.01 and 1.03)
• Create new issues from the recommendations.

Resources/Instructions

Used during issue

• 1.01 Decision Records Implemented
• 1.02 2024 DevOps Community of Practice Agendas ops#100
• 1.03 Decision Records

created by issue

2.01 Decision Record for [name of thing]