Create AWS IAM user with minimum permissions needed to provision and manage a geoprocessing stack

[twelch]

Requirements:

• Admin AWS account should no longer be required to be able to deploy and manage a geoprocessing project.

Currently anyone can create SeaSketch reports in their own Amazon Web Services (AWS) account and plug them into their SeaSketch project. This is by design. But many organizations don’t have the expertise or even approval to be able to create and manage their own Amazon Web Services account.

The proposed solution is that SeaSketch can provide AWS accounts as-needed to groups to build and deploy their own reports. This would also be effective for a workshop setting.

This task is to develop the user permission mechanism that would allow a person to create and publish SeaSketch reports but limit them from accessing resources they should not and incurring unnecessary costs.
Risk of not doing: contribution to SeaSketch reports by outside partners/collaborators could be limited. Someone may have the skills and funding to code the reports, but not the expertise or permission to setup and pay for an Amazon Web Services Account to host them.