wf setup roles
wf setup roles​
Creates the access privileges required in your cloud provider to use Wayfinder features
Synopsis​
Ensures a cloud account has the right cloud roles (permissions) in the cloud provider.
For these commands to work, you must be logged into the specific cloud account you are setting up roles for:
- AWS: Ensure you have a profile configured and selected before running these commands. https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-quickstart.html
wf setup roles [flags]
Examples​
# To set up the roles required for a feature, run with no parameters:
$ wf setup roles
# Set up all enabled features for an organisation account called awsorg-myorg
$ wf setup roles --cloud-account awsorg-myorg
# Set up the roles for account management on an organisation account
$ wf setup roles --cloud-account awsorg-myorg --feature AccountManagement
# Set up the roles for Cost Estimates for an account
$ wf setup roles --cloud-account aws-myawsaccount --feature CostsEstimates
# Remove all roles (and associated cloud IAM objects) for an organisation account called awsorg-myorg
$ wf setup roles --cloud-account awsorg-myorg --remove
Options​
--aws-ou-name string the name of the OU to use for managed AWS accounts
--cloud-account string the name of the cloudaccount in Wayfinder
--feature string the name of a feature in Wayfinder to enable on this account
-h, --help help for roles
--list-features list the features supported by Wayfinder
--remove removes all IAM resources created and removes the associated Wayfinder role entries
Options inherited from parent commands​
--debug Indicates we should use debug / trace logging (default: false)
--force Used to force an operation to happen (default: false)
--no-wait Indicates we should not wait for resources to provision
-o, --output string Output format of the resource (json,yaml,table,template) (default "table")
--profile string Use a profile other than your default for this command
--show-headers Indicates we should display headers on table out (default true)
--verbose Enables verbose logging for debugging purposes (default: false)
-w, --workspace string The workspace you are operating within
SEE ALSO​
- wf setup - Initialises dependencies required to run wayfinder