It's hard to strike the right balance with admin rights--either the rights are too strict and people can't get work done or they're too lenient and you have security issues.
As a compromise, AWS provides the
AssumeRole feature which lets admins temporarily escalate their role to perform a task.
It's important when setting this up that you alert the team when it's used. Here we'll talk about how to set up the roles, give teams access to the roles and create an alert system when the roles are assumed.
Create The Temporary Admin Role
Use the IAM console to create …Continue reading