AWS permissions for terraform

[camgatz87]

Hi, could you please let me know what are the permissions needed on the AWS side to create resources using Terraform? We would like to avoid granting excessive permissions to the AWS user but it seems we are on an endless journey of adjusting policy for each error that pops up with the terraform plan/apply command.

[dhagash2310]

Check this out[
https://support.hashicorp.com/hc/en-us/articles/360041289933-Using-AWS-AssumeRole-with-the-AWS-Terraform-Provider

[camgatz87]

How is this relevant to my question?

…

On Sep 13, 2023, 8:54 PM -0400, dhagash2310 ***@***.***>, wrote: Check this out[ https://support.hashicorp.com/hc/en-us/articles/360041289933-Using-AWS-AssumeRole-with-the-AWS-Terraform-Provider — Reply to this email directly, view it on GitHub, or unsubscribe. You are receiving this because you authored the thread.Message ID: ***@***.***>

[hostirosti]

Hi @camgatz87, thank you for reporting this issue.
We are working on a list of permissions required for the role to deploy the aggregation service with terraform. We'll add those to our documentation in the https://github.com/privacysandbox/aggregation-service repository as soon as available.