Priority: High
Difficulty: Easy
Description:
Create an IAM policy that grants CI/CD workflows only the cloudfront:CreateInvalidation permission, scoped to the specific CloudFront distribution ARN.
- Ensure the policy follows the principle of least privilege.
Acceptance Criteria:
- IAM policy allows only
cloudfront:CreateInvalidation for the exact distribution ARN
- Policy is attached to the CI/CD role or user
Priority: High
Difficulty: Easy
Description:
Create an IAM policy that grants CI/CD workflows only the
cloudfront:CreateInvalidationpermission, scoped to the specific CloudFront distribution ARN.Acceptance Criteria:
cloudfront:CreateInvalidationfor the exact distribution ARN