I have created a user group in AWS ("developers"). Now I want to attach a policy to the group which will grant the users permission to list, create and update Amplify apps. I am struggling to determine the appropriate policy.

I see that the "AdministratorAccess" policy includes access to the AWS Amplify service, but I don't want the developers to have administrator level access. What are my options?

Edit: When the specific user accesses the Amplify console the following error is displayed

List apps call failed User: arn:aws:iam::XXXXXXXXXX:user/myUser is not authorized to perform: amplify:ListApps on resource: arn:aws:amplify:eu-west-1:XXXXXXXXXX:apps/*

3 Answers 3


If you want to create your own IAM policy, you can use the visual editor present in IAM. Using visual editor, you can construct a new policy from scratch using the very intuitive GUI.

Goto IAM, then policies, then use visual editor.

  • This does not answer the question.
    – Will
    Aug 21, 2019 at 17:48
  • The question asks how to restrict access for developers. Visual editor provides you a GUI for creating custom policies.
    – Vishal
    Aug 22, 2019 at 15:30

I had to log in as root user, then access the IAM service.

Under policies click "Create Policy", then select "Amplify" under the Select a service.


This link detail how we can create role for providing access to applications in aws and you can grant these role to your group .


Another way you can create your own policy and assign to group .


  • Thanks, but just to clarify. I want to grant access to users (via a group), not EC2 instances. The other part of the question is how do I determine the appropriate policy to assign fromthe existing AWS policies. Apr 23, 2019 at 8:10

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.