Posted On: Jun 16, 2021
AWS Amplify CLI now supports IAM permission boundaries to limit Amplify-generated IAM roles. The AWS Amplify CLI is a command line toolchain that helps frontend developers create app backends in the cloud that include IAM roles controlling access to AWS resources. With IAM permissions boundaries, Amplify-generated IAM roles can perform only the actions that are allowed by both the roles’ policies and permissions boundary.
With today’s launch, IT admins can ensure that their developers and Amplify backends have access only to the services that they need. In addition, organizations that require every IAM role to have a permissions boundary assigned can now adopt AWS Amplify CLI. Learn more about how to setup IAM permissions boundaries for Amplify-generated IAM roles in the Amplify documentation.