For least privilege access control, example AWS IAM policies are provided:
- domain-protect audit policy - attach to domain-protect audit role in every AWS account
- domain-protect audit trust relationship for domain-protect audit role in every AWS account
- domain-protect audit trust relationship with External ID for domain-protect audit role in every AWS account
- domain-protect deploy policy - attach to IAM group or role assumed by CI/CD pipeline