haven-secrets-core/src/aws/iam/policies/addInlinePolicyToUser.js

Core for Haven, the easy to use centralized secrets manager.

import { createHavenIam } from "../../services.js";
import fetchHavenAccountInfo from "../../../utils/fetchHavenAccountInfo.js";

const addInlinePolicyToUser = (policyName, username, path) => {
  const {
    accountNumber,
  } = fetchHavenAccountInfo();

  const policy = {
    Version: "2012-10-17",
    Statement: [
      {
        "Effect": "Allow",
        "Action": "iam:ListGroupsForUser",
        "Resource": `arn:aws:iam::${accountNumber}:user/${path}/${username}`
      },
    ],
  };

  const params = {
    PolicyDocument: JSON.stringify(policy),
    PolicyName: policyName + username,
    UserName: username,
  };

  return createHavenIam().putUserPolicy(params).promise();
};

export default addInlinePolicyToUser;