<div dir="ltr"><div><div>+1<br><br></div>I spent some time recently studying IAM models of AWS and GCP. <br></div>Based on this I had created following post comparing and summarizing the two models at high-level:<br><br><a href="http://devcentric.io/2017/07/13/comparing-iam-models-of-aws-and-gcp/">http://devcentric.io/2017/07/13/comparing-iam-models-of-aws-and-gcp/</a><br><div><br></div><div>Thought of sharing it here as it may help with big-picture comparison of the two models.<br></div><div><br></div><div>Best regards,<br></div><div>Devdatta<br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Oct 4, 2017 at 11:12 AM, Kristi Nikolla <span dir="ltr"><<a href="mailto:kristi@nikolla.me" target="_blank">kristi@nikolla.me</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">+1<br>
<span class="HOEnZb"><font color="#888888"><br>
--<br>
  Kristi Nikolla<br>
  Software Engineer @ massopen.cloud<br>
  <a href="mailto:kristi@nikolla.me">kristi@nikolla.me</a><br>
</font></span><div class="HOEnZb"><div class="h5"><br>
On Wed, Oct 4, 2017, at 10:08 AM, Zane Bitter wrote:<br>
> On 03/10/17 16:08, Lance Bragstad wrote:<br>
> > Hey all,<br>
> ><br>
> > It was mentioned in today's keystone meeting [0] that it would be useful<br>
> > to go through AWS IAM (or even GKE) as a group. With all the recent<br>
> > policy discussions and work, it seems useful to get our eyes on another<br>
> > system. The idea would be to spend time using a video conference/screen<br>
> > share to go through and play with policy together. The end result should<br>
> > keep us focused on the implementations we're working on today, but also<br>
> > provide clarity for the long-term vision of OpenStack's RBAC system.<br>
> ><br>
> > Are you interested in attending? If so, please respond to the thread.<br>
> > Once we have some interest, we can gauge when to hold the meeting, which<br>
> > tools we can use, and setting up a test IAM account.<br>
><br>
> +1, I'd like to attend this.<br>
><br>
> Also I highly recommend<br>
> <a href="http://start.jcolemorrison.com/aws-iam-policies-in-a-nutshell/" rel="noreferrer" target="_blank">http://start.jcolemorrison.<wbr>com/aws-iam-policies-in-a-<wbr>nutshell/</a> over the<br>
> actual AWS docs as a compact reference.<br>
><br>
> - ZB<br>
><br>
> > Thanks,<br>
> ><br>
> > Lance<br>
> ><br>
> > [0]<br>
> > <a href="http://eavesdrop.openstack.org/meetings/keystone/2017/keystone.2017-10-03-18.00.log.html#l-119" rel="noreferrer" target="_blank">http://eavesdrop.openstack.<wbr>org/meetings/keystone/2017/<wbr>keystone.2017-10-03-18.00.log.<wbr>html#l-119</a><br>
> ><br>
> ><br>
> ><br>
> ><br>
> > ______________________________<wbr>______________________________<wbr>______________<br>
> > OpenStack Development Mailing List (not for usage questions)<br>
> > Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.<wbr>openstack.org?subject:<wbr>unsubscribe</a><br>
> > <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/<wbr>cgi-bin/mailman/listinfo/<wbr>openstack-dev</a><br>
> ><br>
><br>
><br>
> ______________________________<wbr>______________________________<wbr>______________<br>
> OpenStack Development Mailing List (not for usage questions)<br>
> Unsubscribe:<br>
> <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.<wbr>openstack.org?subject:<wbr>unsubscribe</a><br>
> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/<wbr>cgi-bin/mailman/listinfo/<wbr>openstack-dev</a><br>
<br>
______________________________<wbr>______________________________<wbr>______________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.<wbr>openstack.org?subject:<wbr>unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/<wbr>cgi-bin/mailman/listinfo/<wbr>openstack-dev</a><br>
</div></div></blockquote></div><br></div>