amazon-web-services - 无服务器部署命令所需的权限

Question

创建 IAM 用户/组以在 aws lambda 上运行 AWS_ACCESS_KEY_ID=x AWS_SECRET_ACCESS_KEY=y serverless deploy -v 时，应向该用户/组授予什么角色/权限？

Answer 1

根据无服务器框架文档，

To let the Serverless Framework access your AWS account, we're going to create an IAM User with Admin access, which can configure the services in your AWS account.

Note: In a production environment, we recommend reducing the permissions to the IAM User which the Framework uses. Unfortunately, the Framework's functionality is growing so fast, we can't yet offer you a finite set of permissions it needs (we're working on this).

在生产环境中，IAMFullAccess、AWSLambdaFullAccess 和 CloudFormationFullAccess 应该足够了。