Skip to content

CloudFront Invalidation IAM Policy (Least Privilege) #70

Open
Task
Open
CloudFront Invalidation IAM Policy (Least Privilege)#70
Task
Assignees
Tuburni
Labels
awsAmazon Web Services & cloud resourcesci/cdContinuous Integration & Continuous DeploymentgovernancePolicies & standardshacktoberfestSpecial issue for Hacktoberfesthacktoberfest-2025Special issue for Hacktoberfest 2025infraInfrastructurepriority: highNeeds attention ASAPsecuritySecurity & compliance
Milestone
Hacktoberfest 2025

Description

@Alexandrbig1
Alexandrbig1
opened on Oct 4, 2025

Priority: High
Difficulty: Easy

Description:
Create an IAM policy that grants CI/CD workflows only the cloudfront:CreateInvalidation permission, scoped to the specific CloudFront distribution ARN.

  • Ensure the policy follows the principle of least privilege.

Acceptance Criteria:

  • IAM policy allows only cloudfront:CreateInvalidation for the exact distribution ARN
  • Policy is attached to the CI/CD role or user

Activity

  1. Alexandrbig1
    assigned
    Tuburni
    on Oct 4, 2025
  2. Alexandrbig1
    moved this to Todo in CoreX E-Commerce — Hacktoberfest 2025on Oct 4, 2025
  3. Alexandrbig1
    added this to CoreX E-Commerce — Hacktoberfest 2025on Oct 4, 2025
  4. Alexandrbig1
    added
    hacktoberfest-2025Special issue for Hacktoberfest 2025
    hacktoberfestSpecial issue for Hacktoberfest
    priority: highNeeds attention ASAP
    securitySecurity & compliance
    ci/cdContinuous Integration & Continuous Deployment
    infraInfrastructure
    governancePolicies & standards
    awsAmazon Web Services & cloud resources
    on Oct 4, 2025
  5. Alexandrbig1
    added the
    Task
    issue type on Oct 4, 2025
  6. Alexandrbig1
    moved this from Todo to In Progress in CoreX E-Commerce — Hacktoberfest 2025on Oct 5, 2025
  7. Alexandrbig1
    added this to the Hacktoberfest 2025 milestone on Oct 8, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

awsAmazon Web Services & cloud resourcesci/cdContinuous Integration & Continuous DeploymentgovernancePolicies & standardshacktoberfestSpecial issue for Hacktoberfesthacktoberfest-2025Special issue for Hacktoberfest 2025infraInfrastructurepriority: highNeeds attention ASAPsecuritySecurity & compliance

Type

Task

Projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions