Difference between revisions of "AWS policy"
Jump to navigation
Jump to search
| (15 intermediate revisions by 3 users not shown) | |||
| Line 2: | Line 2: | ||
* <code>[[iam]]:ChangePassword</code> (Policy) | * <code>[[iam]]:ChangePassword</code> (Policy) | ||
* <code>[[AmazonS3FullAccess]]</code> | * <code>[[AmazonS3FullAccess]]</code> | ||
| + | * <code>[[AmazonRoute53FullAccess]]</code> | ||
* <code>[[AmazonDynamoDBFullAccess]]</code> | * <code>[[AmazonDynamoDBFullAccess]]</code> | ||
* <code>[[AmazonInspectorReadOnlyAccess]]</code> | * <code>[[AmazonInspectorReadOnlyAccess]]</code> | ||
| Line 8: | Line 9: | ||
* <code>[[ClientVPNServiceRolePolicy]]</code> | * <code>[[ClientVPNServiceRolePolicy]]</code> | ||
* <code>[[ClientVPNServiceConnectionsRolePolicy]]</code> | * <code>[[ClientVPNServiceConnectionsRolePolicy]]</code> | ||
| + | * <code>[[arn:aws:iam::aws:policy/service-role/AmazonEBSCSIDriverPolicy]]</code> | ||
== Errors == | == Errors == | ||
| Line 22: | Line 24: | ||
== [[aws iam]] policy commands == | == [[aws iam]] policy commands == | ||
* {{aws iam policy TOC}} | * {{aws iam policy TOC}} | ||
| + | |||
| + | == Activities == | ||
| + | * [[How to revoke federated users’ active AWS sessions]] | ||
| + | * [[AWS: Denies access to AWS based on the requested Region]] | ||
== Related terms == | == Related terms == | ||
| Line 29: | Line 35: | ||
* [[Resource-based policies]] and [[Identity-based policies]] | * [[Resource-based policies]] and [[Identity-based policies]] | ||
* [[List of AWS policies]] | * [[List of AWS policies]] | ||
| + | * [[Service role]] | ||
| + | * [[AWS EC2 Instance Connect]] (Jun 2019) | ||
| + | * [[Permission sets]] | ||
| + | * [[AWS Policy Generator]] | ||
| + | * <code>[[s3:]], [[s3:ListBucket]], [[s3:ListAllMyBuckets]]</code> | ||
| + | * <code>[[s3:]], [[lambda:]], [[cloudwatch:]]</code> | ||
== See also == | == See also == | ||
| + | * {{aws iam policies}} | ||
* {{AWS managed policies}} | * {{AWS managed policies}} | ||
* {{AWS policies}} | * {{AWS policies}} | ||
[[Category:AWS]] | [[Category:AWS]] | ||
Latest revision as of 14:41, 19 February 2024
iam:ChangePassword(Policy)AmazonS3FullAccessAmazonRoute53FullAccessAmazonDynamoDBFullAccessAmazonInspectorReadOnlyAccessAmazonInspector2ReadOnlyAccessReadOnlyAccessClientVPNServiceRolePolicyClientVPNServiceConnectionsRolePolicyarn:aws:iam::aws:policy/service-role/AmazonEBSCSIDriverPolicy
Errors[edit]
Cannot attach a Service Role Policy to a Customer Role.An error occurred (NoSuchBucketPolicy) when calling the GetBucketPolicy operation: The bucket policy does not exist
Type[edit]
aws iam policy commands[edit]
aws iam create-policyaws iam list-policiesaws iam list-attached-user-policies --user-nameaws iam list-group-policiesaws iam list-role-policiesaws iam put-group-policyaws iam put-role-policyaws iam put-user-policyaws iam attach-role-policyaws iam attach-group-policy
Activities[edit]
- How to revoke federated users’ active AWS sessions
- AWS: Denies access to AWS based on the requested Region
Related terms[edit]
- AWS Role:
OrganizationAccountAccessRole - AWS managed policy: AmazonS3ReadOnlyAcces
- Terraform resources:
aws_iam_policy - Resource-based policies and Identity-based policies
- List of AWS policies
- Service role
- AWS EC2 Instance Connect (Jun 2019)
- Permission sets
- AWS Policy Generator
s3:, s3:ListBucket, s3:ListAllMyBucketss3:, lambda:, cloudwatch:
See also[edit]
aws iam [ list-policies | list-attached-user-policies | list-group-policies | list-role-policies | put-group-policy | put-role-policy | put-user-policy | create-policy | attach-role-policy ]- AWS managed policies:
ReadOnlyAccess, ViewOnlyAccess, AdministratorAccess, SecurityAudit, ViewBilling, AmazonEKSClusterPolicy, List of AWS policies - AWS policies: managed policies, AWS trust policy, AWS Service Control Policy (SCP), Resource-based policies, Identity-based policies,
"Resource":, Job function, AWS Policy Generator,s3:, lambda:, cloudwatch:
Advertising:
