[decommission] Removal Of Unused IAM Roles in tvlk-prod

In relation to the deprecation of tvlk-prod shared AWS Account. Cloud Infra is cleaning up unused resources in tvlk-prod. This time we are cleaning up unused IAM roles.

What Will Be Done?

Using data from IAM Access Advisor we will remove IAM role that match the following criteria

Last used role before 1 July, 2020
Last used role more than 200 days (empty value in RoleLastUsedDate column)

You can see list of roles that will be removed on the following Google Sheet

https://docs.google.com/spreadsheets/d/1dEhe6JQ3e3odKoWCSCWXKaO6cTZ36ZmSX1HDktPmLVM/edit#gid=1844296761

What Do You Need To Do?

Please take a look at the google sheets above to check if there are roles that still being used and mistakenly added to the list of roles to be removed, and do comment on the spreadsheet.

Schedule

We will remove the IAM Roles listed on the google sheet above on:

Wednesday, 2020-10-28 13:00:00 (UTC+7)

Should you have any concerns regarding this plan do let cloud infra know in #site-infra-channel