[PR #16] [MERGED] Add resource cutoff #179

New issue

Closed

opened 2026-03-15 11:51:46 +03:00 by kerem · 0 comments

kerem commented

2026-03-15 11:51:46 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/awslabs/iam-policy-autopilot/pull/16
Author: @mschlaipfer
Created: 11/21/2025
Status: ✅ Merged
Merged: 11/24/2025
Merged by: @mschlaipfer

Base: prerelease ← Head: resource-cutoff

📝 Commits (1)

9bf72ff Add resource cutoff

📊 Changes

1 file changed (+9 additions, -0 deletions)

View changed files

📝 iam-policy-autopilot-policy-generation/src/enrichment/resource_matcher.rs (+9 -0)

📄 Description

Issue #, if available:

Description of changes: Do not add resources when there are more than RESOURCE_CUTOFF (currently set to 5). This prevents creating overly verbose policies at the expense of less precision. Particularly ec2:CreateTags was affected (see https://servicereference.us-east-1.amazonaws.com/v1/ec2/ec2.json)

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/awslabs/iam-policy-autopilot/pull/16 **Author:** [@mschlaipfer](https://github.com/mschlaipfer) **Created:** 11/21/2025 **Status:** ✅ Merged **Merged:** 11/24/2025 **Merged by:** [@mschlaipfer](https://github.com/mschlaipfer) **Base:** `prerelease` ← **Head:** `resource-cutoff` --- ### 📝 Commits (1) - [`9bf72ff`](https://github.com/awslabs/iam-policy-autopilot/commit/9bf72ffae72ae1d5b820392523e0536422f17cb1) Add resource cutoff ### 📊 Changes **1 file changed** (+9 additions, -0 deletions) <details> <summary>View changed files</summary> 📝 `iam-policy-autopilot-policy-generation/src/enrichment/resource_matcher.rs` (+9 -0) </details> ### 📄 Description *Issue #, if available:* *Description of changes:* Do not add resources when there are more than `RESOURCE_CUTOFF` (currently set to `5`). This prevents creating overly verbose policies at the expense of less precision. Particularly `ec2:CreateTags` was affected (see https://servicereference.us-east-1.amazonaws.com/v1/ec2/ec2.json) By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>