An IAM permissions 'calculator' that generates a custom/baseline policy for external Skill Devs
Solely to address 'least permissive' practices during the engagement of a developer with an AWS account having been engaged to work to create a Alexa skill(s) on behalf of another AWS account.
Although some of the role templates in IAM are comprehensive, the concept of "Least permissive is always the best approach." 'could' be strengthened by being verifiable to a posted AWS best practice set of specific outlined activities.
The benefit is that a 3rd party sees that AWS has published those permission sets; the Dev. is able to refer to AWS distilling a best-practices starting point, and 'least permissive' being always assumable at onset.
1
vote
AJ
shared this idea