Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [aws-iam]

The tag has no usage guidance.

0
votes
0answers
22 views

AWS IAM policy and reduce access to only the latest services used

I want to limit the user access to all the last services used: But I want to remove the Administrator Access privilege from the user "circleci'. I started to add policies in the user group "circleci"...
0
votes
1answer
23 views

How to override default aws region credentials for Terraform?

I am using Terraform to create aws resources. I practiced with a single region and with my aws cli credentials being used. worked great! however when I tried to override the region in the Terraform ....
0
votes
3answers
27 views

Find appropriate AWS policy

I have created a user group in AWS ("developers"). Now I want to attach a policy to the group which will grant the users permission to list, create and update Amplify apps. I am struggling to ...
1
vote
1answer
25 views

Cross account access from ec2 to other accounts

Is it possible to run aws cli from ec2 to create some resources in another account without using aws_secret_key and aws_access_key?
0
votes
1answer
27 views

What is a secure way for storing AWS IAM credentials?

When creating a new user in AWS IAM, it generates access keys for that user. Where is a secure and readily accessible location to store these credentials?
0
votes
0answers
21 views

Can Terraform S3 remote state be kept in a different AWS account?

I am currently using Terraform with S3 remote state. The IAM user that I'm using to run Terraform exists in the same AWS account as the S3 bucket holding the remote state files. This is all working ...
0
votes
1answer
22 views

Which S3 buckets is Lambda allowed to read code from?

There doesn't seem to be any way to define a policy about which S3 buckets Lambda is allowed to run code from. With most services in AWS, the usual practice is to define an IAM role that can be ...
5
votes
2answers
326 views

Impact on policy after deleting IAM user

I have created one IAM User named "test" with S3 and Glacier Permission. Now with user "test" i created one life cycle policy to move data from S3 to Glacier at every 5 days. Now, i delete IAM user "...
0
votes
0answers
23 views

Managing IAM policies with Terraform to implement CRUD of AWS resources

Recently I have discovered this feature request for Terraform to support advanced management of AWS IAM policies, specifically to implement the CRUD (Create, Read, Update, Delete) method. In the ...
3
votes
2answers
1k views

What is the purpose of AssumeRolePolicyDocument in IAM?

I'm confused as to what the purpose of AssumeRolePolicyDocument is. It seems like to create a role all you need is a parent name that you can attach policies to. It seems like AssumeRolePolicyDocument ...
4
votes
0answers
198 views

Preventing an IAM user from overriding launch template parameters on RunInstance

I'm trying to set up an IAM policy that allows a user to run an instance (ec2:RunInstances), but only from a specific launch template - and without making any changes to that launch template's ...
1
vote
2answers
1k views

What is the AWS user permission that allows attaching and detaching IAM Roles to instances?

My coworker is trying to attach IAM roles to EC2 instances and doesn’t have permissions. I’m trying to work out which permissions to give him. My question is: What is the AWS user permission that ...
6
votes
4answers
2k views

How to provide a user to access only a particular bucket in AWS S3?

I have a list of buckets in AWS S3. I have created an IAM user. I have an option to provide S3 full or read only access for a user using groups. Is there any options to provide access only to a ...
6
votes
1answer
4k views

How to get the ARN for an arbitrary Amazon Resource?

I am creating an AWS IAM policy for a Serverless Framework project, I am applying the Principle of Least Privilege to ensure the policy is as tight as possible. To restrict the scope of the policy I ...