<div dir="ltr">Hi <span style="font-size:12.8px">Devdatta, excellent post on IAM models.</span><div><span style="font-size:12.8px">Thank you!</span><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Oct 4, 2017 at 10:59 PM, Devdatta Kulkarni <span dir="ltr"><<a href="mailto:kulkarni.devdatta@gmail.com" target="_blank">kulkarni.devdatta@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div>+1<br><br></div>I spent some time recently studying IAM models of AWS and GCP. <br></div>Based on this I had created following post comparing and summarizing the two models at high-level:<br><br><a href="http://devcentric.io/2017/07/13/comparing-iam-models-of-aws-and-gcp/" target="_blank">http://devcentric.io/2017/07/<wbr>13/comparing-iam-models-of-<wbr>aws-and-gcp/</a><br><div><br></div><div>Thought of sharing it here as it may help with big-picture comparison of the two models.<br></div><div><br></div><div>Best regards,<br></div><div>Devdatta<br></div><div><br></div></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Oct 4, 2017 at 11:12 AM, Kristi Nikolla <span dir="ltr"><<a href="mailto:kristi@nikolla.me" target="_blank">kristi@nikolla.me</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">+1<br>
<span class="m_8372939751148729921HOEnZb"><font color="#888888"><br>
--<br>
  Kristi Nikolla<br>
  Software Engineer @ massopen.cloud<br>
  <a href="mailto:kristi@nikolla.me" target="_blank">kristi@nikolla.me</a><br>
</font></span><div class="m_8372939751148729921HOEnZb"><div class="m_8372939751148729921h5"><br>
On Wed, Oct 4, 2017, at 10:08 AM, Zane Bitter wrote:<br>
> On 03/10/17 16:08, Lance Bragstad wrote:<br>
> > Hey all,<br>
> ><br>
> > It was mentioned in today's keystone meeting [0] that it would be useful<br>
> > to go through AWS IAM (or even GKE) as a group. With all the recent<br>
> > policy discussions and work, it seems useful to get our eyes on another<br>
> > system. The idea would be to spend time using a video conference/screen<br>
> > share to go through and play with policy together. The end result should<br>
> > keep us focused on the implementations we're working on today, but also<br>
> > provide clarity for the long-term vision of OpenStack's RBAC system.<br>
> ><br>
> > Are you interested in attending? If so, please respond to the thread.<br>
> > Once we have some interest, we can gauge when to hold the meeting, which<br>
> > tools we can use, and setting up a test IAM account.<br>
><br>
> +1, I'd like to attend this.<br>
><br>
> Also I highly recommend<br>
> <a href="http://start.jcolemorrison.com/aws-iam-policies-in-a-nutshell/" rel="noreferrer" target="_blank">http://start.jcolemorrison.com<wbr>/aws-iam-policies-in-a-nutshel<wbr>l/</a> over the<br>
> actual AWS docs as a compact reference.<br>
><br>
> - ZB<br>
><br>
> > Thanks,<br>
> ><br>
> > Lance<br>
> ><br>
> > [0]<br>
> > <a href="http://eavesdrop.openstack.org/meetings/keystone/2017/keystone.2017-10-03-18.00.log.html#l-119" rel="noreferrer" target="_blank">http://eavesdrop.openstack.org<wbr>/meetings/keystone/2017/keysto<wbr>ne.2017-10-03-18.00.log.html#<wbr>l-119</a><br>
> ><br>
> ><br>
> ><br>
> ><br>
> > ______________________________<wbr>______________________________<wbr>______________<br>
> > OpenStack Development Mailing List (not for usage questions)<br>
> > Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.op<wbr>enstack.org?subject:unsubscrib<wbr>e</a><br>
> > <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi<wbr>-bin/mailman/listinfo/openstac<wbr>k-dev</a><br>
> ><br>
><br>
><br>
> ______________________________<wbr>______________________________<wbr>______________<br>
> OpenStack Development Mailing List (not for usage questions)<br>
> Unsubscribe:<br>
> <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.op<wbr>enstack.org?subject:unsubscrib<wbr>e</a><br>
> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi<wbr>-bin/mailman/listinfo/openstac<wbr>k-dev</a><br>
<br>
______________________________<wbr>______________________________<wbr>______________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.op<wbr>enstack.org?subject:unsubscrib<wbr>e</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi<wbr>-bin/mailman/listinfo/openstac<wbr>k-dev</a><br>
</div></div></blockquote></div><br></div>
</div></div><br>______________________________<wbr>______________________________<wbr>______________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.<wbr>openstack.org?subject:<wbr>unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/<wbr>cgi-bin/mailman/listinfo/<wbr>openstack-dev</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div style="color:rgb(136,136,136);font-size:12.8000001907349px">Adam Heczko</div><div style="color:rgb(136,136,136);font-size:12.8000001907349px">Security Engineer @ Mirantis Inc.</div></div></div>
</div>