#27 Record AWS API calls to improve IAM Policies

cloudonaut - A podcast by Andreas Wittig and Michael Wittig focusing on AWS Cloud

Categories:

Technology

Have you ever looked at an IAM policy and wondered: Is it really necessary to grant access to this specific action? Or do you need to know which API calls a legacy or 3rd party application is actually sending to come up with a secure IAM policy? CloudTrail can help here, but there is something better: Record API calls with the AWS SDKs and CLI (including the stuff that is not visible in CloudTrail).