Enforcing specific cloud parameters for cloubreak template

[#1]

Hello,

I'm looking for ways of enforcing specific cloud configurations for CB template to limit and simplify user experience. We'd like to pre-configure regions, VPCs, subnets, encryption configuration and so on. We are using rc-2.9 branch of Cloudbreak.

Thanks!

[#2 · Accepted solution]

Hi @Anton Zadorozhniy

Currently there is no such fine grained authorization implemented in Cloudbreak and regions, VPC-s and subnets are fetched on the fly from the cloud provider.

What you can do is to create role based credential with a specific AWS role constrained to only specific resources (instead of "Resource": [ "*" ])

You can specify resource type level authorization permissions in Cloudbreak with the help of workspaces, resources will be shared inside a workspace.

Hope this helps!