feat: add Textract analysis operations to supported services SCP#73
feat: add Textract analysis operations to supported services SCP#73chrisns wants to merge 1 commit into
Conversation
|
Thanks for opening this PR @chrisns, because of updates potentially overriding changes to the default SCPs we are delaying making these types of changes in patch releases for now. We plan on implementing better SCP and global configuration management in 1.3.0. Also just an disclaimer, because of policy we are unable to directly merge PRs on github without going through some internal processes, but we still provide credit in changelog entries for PRs that were incorporated into the release. When we make this change we will make sure to credit you with changes to these SCPs! |
|
Early access to 1.3.0 would be amazing, we're developing so much code and complexity I'd LOVE to throw away :) My PR to awsnuke got merged so this can now just be textract:* if you update that Thanks for the offer of recognition, aware of AWS policy so this is appreciated. |
Add Amazon Textract read and analysis operations to the list of allowed AWS services in the InnovationSandboxAWSNukeSupportedServicesScp. Limited to specific actions to prevent creation of adapter resources that are not managed by aws-nuke: - AnalyzeDocument, AnalyzeExpense, AnalyzeID, DetectDocumentText - GetAdapter, GetAdapterVersion, GetDocumentAnalysis - GetDocumentTextDetection, GetExpenseAnalysis, GetLendingAnalysis - GetLendingAnalysisSummary, ListAdapters, ListAdapterVersions - ListTagsForResource
a7ffd12 to
a93048d
Compare
Summary
Details
This PR adds the following Textract actions to
InnovationSandboxAWSNukeSupportedServicesScp:AnalyzeDocument,AnalyzeExpense,AnalyzeID,DetectDocumentTextGetAdapter,GetAdapterVersion,GetDocumentAnalysis,GetDocumentTextDetectionGetExpenseAnalysis,GetLendingAnalysis,GetLendingAnalysisSummaryListAdapters,ListAdapterVersions,ListTagsForResourceThe actions are intentionally scoped to read and analysis operations only. This prevents users from creating Textract Adapters and Adapter Versions, which are not currently cleaned up by aws-nuke.
Note: Once ekristen/aws-nuke#829 is merged and incorporated into this solution, this could be simplified to
textract:*as adapter resources would then be properly managed during cleanup.