IAM Permissions
To use Resoto with all it's features—including cleanup—it requires wide permissions to collect resources, perform tag validations and updates, as well as delete resources.
To use Resoto in a read-only capacity, you can limit access to your cloud provider accordingly.
Resoto will not delete resources marked for deletion by default, even with the neccessary permissions.
Resoto will silently ignore collecting specific resources if it does not have the required permissions.
Amazon Web Services
Each version of Resoto programmatically generates the specific IAM permissions it requires to collect (and optionally, manipulate) AWS resources.
Google Cloud
Each version of Resoto programmatically generates the specific IAM permissions it requires to collect (and optionally, manipulate) Google Cloud resources.
