Questions tagged [aws-iam]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
6
votes
4answers
2k views

How to provide a user to access only a particular bucket in AWS S3?

I have a list of buckets in AWS S3. I have created an IAM user. I have an option to provide S3 full or read only access for a user using groups. Is there any options to provide access only to a ...
6
votes
1answer
5k views

How to get the ARN for an arbitrary Amazon Resource?

I am creating an AWS IAM policy for a Serverless Framework project, I am applying the Principle of Least Privilege to ensure the policy is as tight as possible. To restrict the scope of the policy I ...
5
votes
2answers
2k views

What is the purpose of AssumeRolePolicyDocument in IAM?

I'm confused as to what the purpose of AssumeRolePolicyDocument is. It seems like to create a role all you need is a parent name that you can attach policies to. It seems like AssumeRolePolicyDocument ...
4
votes
2answers
334 views

Impact on policy after deleting IAM user

I have created one IAM User named "test" with S3 and Glacier Permission. Now with user "test" i created one life cycle policy to move data from S3 to Glacier at every 5 days. Now, i delete IAM user "...
4
votes
1answer
286 views

Preventing an IAM user from overriding launch template parameters on RunInstance

I'm trying to set up an IAM policy that allows a user to run an instance (ec2:RunInstances), but only from a specific launch template - and without making any changes to that launch template's ...
2
votes
3answers
43 views

Find appropriate AWS policy

I have created a user group in AWS ("developers"). Now I want to attach a policy to the group which will grant the users permission to list, create and update Amplify apps. I am struggling to ...
1
vote
2answers
39 views

How to get the AWS Access key of an already created Access ID

Inside IAM management, I navigate to Users - User and got to the Security Credentials tab, It looks like this: I see no link to show the access key of the already generated access ID, how to get it?
1
vote
2answers
2k views

What is the AWS user permission that allows attaching and detaching IAM Roles to instances?

My coworker is trying to attach IAM roles to EC2 instances and doesn’t have permissions. I’m trying to work out which permissions to give him. My question is: What is the AWS user permission that ...
1
vote
1answer
30 views

How can I 'aws s3 sync' two buckets, which are located in different accounts

I'm trying to use 'aws s3 sync' on the awscli between two accounts. Account A, I own. Account B, Owned by a third party. Account B has given a user:jon on account A permission to a bucket through ...
1
vote
1answer
29 views

Cross account access from ec2 to other accounts

Is it possible to run aws cli from ec2 to create some resources in another account without using aws_secret_key and aws_access_key?
1
vote
1answer
32 views

How to override default aws region credentials for Terraform?

I am using Terraform to create aws resources. I practiced with a single region and with my aws cli credentials being used. worked great! however when I tried to override the region in the Terraform ....
0
votes
0answers
35 views

AWS IAM policy and reduce access to only the latest services used

I want to limit the user access to all the last services used: But I want to remove the Administrator Access privilege from the user "circleci'. I started to add policies in the user group "circleci"...
0
votes
1answer
28 views

What is a secure way for storing AWS IAM credentials?

When creating a new user in AWS IAM, it generates access keys for that user. Where is a secure and readily accessible location to store these credentials?
0
votes
0answers
30 views

Can Terraform S3 remote state be kept in a different AWS account?

I am currently using Terraform with S3 remote state. The IAM user that I'm using to run Terraform exists in the same AWS account as the S3 bucket holding the remote state files. This is all working ...
0
votes
1answer
24 views

Which S3 buckets is Lambda allowed to read code from?

There doesn't seem to be any way to define a policy about which S3 buckets Lambda is allowed to run code from. With most services in AWS, the usual practice is to define an IAM role that can be ...
0
votes
0answers
26 views

Managing IAM policies with Terraform to implement CRUD of AWS resources

Recently I have discovered this feature request for Terraform to support advanced management of AWS IAM policies, specifically to implement the CRUD (Create, Read, Update, Delete) method. In the ...