Write IAM guidance and review existing setup

[sudhara]

Overview

We need to figure out Industry Guidance and document what should be in the IAM policies, and review what we currently, so that we can write recommendations of what to fix and create actionable HfLA best practices.

Action Items

• Research, review and document existing IAM setup
• Identify and document in a comment who is the authoritative source for guidance (might be multiple places), e.g., AWS, etc.
• Write up the recommendations in the document alongside findings
  • Add to DevOps team agenda (resource 1.02) for review and approval
• Create new issues from the recommendations.

Resources/Instructions

Used during issue

• 1.01 Decision Records Implemented
• 1.02 2024 DevOps Community of Practice Agendas devops#100
• 1.03 Decision Records

created by issue

2.01 Decision Record for [name of thing]