mirror of
https://github.com/gravitational/teleport.git
synced 2026-11-01 21:52:02 +08:00
Paul Gottschling
20e6037acd
* Refresh the AWS app access guide Issues closed: -------------- Add a statement of benefits, a brief architecture overview, more troubleshooting information, and a summary of IAM resources created in this guide. Closes #10853 Add troubleshooting re: trust relationships and checking logs. Closes #17880 Add more explicit trust relationship guidance and uses CLI examples instead of console screenshots. Closes #34167 Add more context re: the trust relationship instructions. Closes #11797 Add instructions that a user can follow to deploy the Application Service on EKS. Closes #24373 Other changes to make the guide easier to follow: ------------------------------------------------- - Only show one IAM role. Remove the `ExamplePowerUser` role for simplicity. - Use the `aws` CLI for creating IAM resources. This is faster to follow than the current approach, takes up less page real estate, and doesn't require screenshots. Using the CLI also makes the trust relationship instructions more explicit. - Move external links to a "Further reading" section so readers can get through the guide more quickly. - Remove the video, since it's long out of date. - Reduce the number of steps: Convert steps into H3s in order to make it easier to form a mental model of the guide and make the step count less intimidating. - Add EC2 instance profile instructions. - Add a quick boto3 python example for `tsh proxy aws` * Respond to greedy52 feedback - Say "EKS" instead of just "Kubernetes" in the prerequisites. - Edit the trust policy for the `ExampleReadOnlyAccess` role in the cross-account use case to include an external ID and require a specific role for the principal. * Respond to kimlisa feedback - Fix unclear subsection intro sentence. - Fix a potentially confusing reference to Step 1. - Fix an unclear use of "configuration". - Clarify a heading. - Minor clarity/accuracy improvements. - Use a Var component for the Proxy Service address in the Linux server config file snippet.
