adj cluster iam-policy
Print the IAM policy document 'cluster provision' requires
Print the minimal IAM policy document the provisioning module needs, generated from the same action list the provision preflight simulates — the printed policy and the verified policy cannot drift.
The action set is representative, not exhaustive: the module may exercise further read/describe/tag actions within these same services during an apply.
Note: STS session-token credentials (aws sts get-session-token) cannot call any IAM API regardless of policy, and provisioning must create IAM roles — use permanent access keys, an assumed role, or SSO.
Usage
adj cluster iam-policy
Global flags
| Flag | Shorthand | Default | Description |
|---|---|---|---|
--context |
— |
config context to use (overrides current-context) | |
--output |
-o | table |
output format: table|json|yaml |
--server |
— |
server base URL (overrides the active context) | |
--token |
— |
access token (overrides the active context) | |
--verbose |
-v | false |
log requests to stderr |