Minimum permission required to fully operate the provider

[smrutimandal]

Hi,

I am doing a PoC to run MSK with IAM authentication and using provider 0.7.0 works like a charm. However, to make it work I have granted very high privileges to the role sasl_aws_role_arn. I don't have a straight forward way to find the minimum permission required to make it work.

Do you have any documentation on the minimum permission required to use the provider fully?

Thanks

[smrutimandal]

The IAM services the role requires permissions are:

AWS Security Token Service
Apache Kafka APIs for Amazon MSK clusters

I will try to find the minimum permissions later.