Support Questions
Find answers, ask questions, and share your expertise

Enforcing specific cloud parameters for cloubreak template

New Contributor

Hello,

I'm looking for ways of enforcing specific cloud configurations for CB template to limit and simplify user experience. We'd like to pre-configure regions, VPCs, subnets, encryption configuration and so on. We are using rc-2.9 branch of Cloudbreak.

Thanks!

1 ACCEPTED SOLUTION

Hi @Anton Zadorozhniy

Currently there is no such fine grained authorization implemented in Cloudbreak and regions, VPC-s and subnets are fetched on the fly from the cloud provider.

What you can do is to create role based credential with a specific AWS role constrained to only specific resources (instead of "Resource": [ "*" ])

You can specify resource type level authorization permissions in Cloudbreak with the help of workspaces, resources will be shared inside a workspace.

Hope this helps!

View solution in original post

1 REPLY 1

Hi @Anton Zadorozhniy

Currently there is no such fine grained authorization implemented in Cloudbreak and regions, VPC-s and subnets are fetched on the fly from the cloud provider.

What you can do is to create role based credential with a specific AWS role constrained to only specific resources (instead of "Resource": [ "*" ])

You can specify resource type level authorization permissions in Cloudbreak with the help of workspaces, resources will be shared inside a workspace.

Hope this helps!

; ;