diff --git a/modules/security_identity_compliance/five-deployer-roles/README.md b/modules/security_identity_compliance/five-deployer-roles/README.md index 0a1d732..f007c21 100644 --- a/modules/security_identity_compliance/five-deployer-roles/README.md +++ b/modules/security_identity_compliance/five-deployer-roles/README.md @@ -1,6 +1,13 @@ -# Deployer roles -The roles are created based on the design in *CICD High Level Architecture-RevisedWithRoles.pptx* +# five-deployer-roles +This module create IAM roles for use with IAC execution. 5 roles are created and each role has permissions to perform +different tasks. The 5 roles are: + +* NetworkDeployer: Role with access to manage network related resources +* SecurityDeployer: Role with access to manage IAM related resources +* DatabaseDeployer: Role with access to manage database related resources +* StorageDeployer: Role with access to manage storage related resources +* CommonDeployer: Role with access to manage all resources, excluding access granted to the 4 other roles # Changelog -20230313: Initial release -20230929: Added iam:PassRole to NetworkDeployer for creating vpc flowlogs +* 20230313: Initial release +* 20230929: Added iam:PassRole to NetworkDeployer for creating vpc flowlogs