Update IAM Policy Statements to support multiple resources #143
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This should make writing policy statements that affect multiple resources a lot cleaner. Right now, AFAICT you have to break them out into multiple statements, which is hard to read in the generated template and, eventually, the generated policy. Multiple resources are supported by IAM.
This should be backwards-compatible with the exception that one has to
to get the implicits. I'm open to moving them to another location that is more likely to already be imported if someone has an idea of where that might be.
The generated JSON will now always contain an array for the
Resource
field, but that should have no impact as far as CloudFormation/IAM are concerned, and matches the behavior of the Python AWACS library.