Terraform with AWS

Question

I want an engineer to only use Terraform to provision the infrastructure in AWS and to verify if provisioning was successful he/she should have read-only access in the AWS console. So that the engineer should not make changes to resources at the console inadvertently.

What are the possible ways to achieve this?

Answer 1

为您的用户授予对控制台的只读访问权限 - 并使用 IAM 策略只允许特定的 EC2 实例适当地访问配置基础设施，并强制从这些 EC2 实例执行您的所有 terraform。