This message was deleted.
# atlantis-communitys
Slackbot
02/15/2024, 1:55 PMThis message was deleted.
r
RB
02/15/2024, 1:55 PMUse case: id like to add infosec as reviewers whenever an iam resource is added, subtracted, or modified
RB
02/15/2024, 1:57 PMThe implementation, i imagine
• Install gh in container
• Generate the plan json
• Use conftest to check if there is an iam resource modified or created or destroyed
• If so, use gh cli to add infosec as reviewers
• If not, do nothing
a
Andre Ziviani
02/15/2024, 2:20 PMisn't it easier to add them as approvers os the conftest policy? thats what we do
r
RB
02/15/2024, 2:29 PMHow does that work
a
Andre Ziviani
02/15/2024, 2:32 PMyou can define policy owners, whenever that policy fails the owner need to approve it via
atlantis approve_policiesAndre Ziviani
02/15/2024, 2:36 PMif a user who is not the owner tries to approve the policies the following error is returned
Copy code
policy set: conftest-policies user <redacted> is not a policy owner - please contact policy owners to approve failing policiesAndre Ziviani
02/15/2024, 2:37 PMthey don't actually get added as reviewers but works for us
Andre Ziviani
02/15/2024, 2:54 PMr
RB
02/15/2024, 3:03 PMoh wow I need to implement this. Thank you
👍 1
a
Andre Ziviani
02/15/2024, 3:04 PMThe owner can also be a group on GitHub
❤️ 1
Andre Ziviani
02/15/2024, 3:07 PMAnd if the user pushes a new commit to the PR it will automatically revoke a previously approved command
v
Vinicius Oliveira
02/15/2024, 5:59 PM@Andre Ziviani do you know if this approval process works with bitbucket cloud? I've been trying to implement something similar with no luck so far
a
Andre Ziviani
02/15/2024, 6:13 PMthis is an atlantis feature so I guess it should work, but I'm not sure
✅ 1
v
Vinicius Oliveira
02/15/2024, 6:14 PMThe user base it uses is from the VCS, right?
a
Andre Ziviani
02/15/2024, 6:14 PMyes
✅ 1