Clarify the IAM requirements and best practices #838
Description
Is your feature request related to a problem? Please describe.
- 2 weeks ago, Update docs for additional tags feature #830 update the IAM policy requirement.
- 1 week ago, https://github.com/aws/aws-application-networking-k8s/releases/tag/v1.1.6 released
I can see config/iam/recommended-inline-policy.json got updated, but not for files/controller-installation/recommended-inline-policy.json.
Describe the solution you'd like
It is confuse to have two almost identical file named recommended-inline-policy.json for user who don't familiar with the project here.
- https://github.com/aws/aws-application-networking-k8s/blob/v1.1.6/files/controller-installation/recommended-inline-policy.json
- https://github.com/aws/aws-application-networking-k8s/blob/v1.1.6/config/iam/recommended-inline-policy.json
Describe alternatives you've considered
Might need to clarify the usage case for the policy more, or merge them into one.
If possible, better to have an example for least privilege best practice.
Additional context
n/a