Questions tagged [amazon-iam]

AWS Identity and Access Management (IAM) enables you to securely control access to AWS services and resources for your users. Using IAM you can create and manage AWS users and groups and use permissions to allow and deny their permissions to AWS resources

Amazon AWS Identity and Access Management (IAM) enables you to securely control access to AWS services and resources for your users. Using IAM you can create and manage AWS users and groups and use permissions to allow and deny their permissions to AWS resources.

IAM also enables identity federation between your corporate directory and AWS services. This lets you use existing corporate identities to grant secure access to AWS resources, such as Amazon S3 buckets, without creating new AWS identities for those users.

Resources:

3730 questions
1
vote
0 answers

S3 Bucket Policy to Allow access to specific AWS services and users and restrict other all

I have a bucket policy which is restricting other users to access. But I want, For aws services it should be accessible like EMR etc. I found same question is asked here: S3 Bucket Policy to Allow access to specific users and restrict all . But I…
1
vote
1 answer

aws cross account dynamodb access with IAM role

I have an aws ecs ec2 instance in one account and it is trying to access the dynamob db tables on another aws account. I am not using any aws access key and id, instead using AWS iam role attached to the ec2 instance. This is a .net project and my…
1
vote
1 answer

Change User Agent of AWS SDK in Java

Is it possible to change the user-agent of AWS SDK services when we initiate services such as S3 or IAM? The reason is that using the SDK any activities from my application will be logged as "Java 1.8.....". Instead of that, I would like to change…
Ihsan Haikal
  • 917
  • 2
  • 11
  • 28
1
vote
0 answers

AWS Organization - How Linked accounts can access S3 resources present in Master account

Want to view, list, modify the S3 bucket (s) and objects (s) in the linked account for manipulation purpose, but not able to. Description: I have a master account and three member account. I have logged in with the user 'Jagdish' to my master…
1
vote
0 answers

Is there any option to query and get ARN of IAM policy?

I am trying to query ARN of individual IAM policy. Tried below command as per AWS tech document but not getting correct output. Is this option --query available currently to fetch the ARN of policies? Is there any other command or option in…
Jijina
  • 31
  • 3
1
vote
3 answers

modify the Access policy SNS for inpector

how to modify the sns topic policy to permission to access to aws inspector in us-east-1?Assessment Templates has no permission to sns topic. I got this error: The Inspector Account was denied access to the requested topic Grant account xxxxxxxxx…
1
vote
2 answers

Getting Bad configuration option: \377\376h

I am setting my systems for codecommit. but getting following error I followed the below link : https://docs.aws.amazon.com/codecommit/latest/userguide/setting-up-ssh-windows.html /c/Users/Prasanna/.ssh/config: line 1: Bad configuration option:…
1
vote
0 answers

Access denied on S3 during EMR Job

I have S3 buckets with particular user access. Now I am trying to submit EMR job on aws. But It is showing me access denied. What I am doing wrong here? Bucket Policy Sample: AUser: Description: Name of the AUser Type: String …
1
vote
2 answers

How do I make an AWS AppSync GraphQL API publicly accessible while using Amazon Cognito for authentication?

Currently I am using Amazon Cognito for authentication in an AWS Amplify project, so only signed-in users have access to the api. But I want to have some api calls publicly accessible. How do I go about this?
1
vote
2 answers

Cognito: upload file to S3 into a custom user subfolder from the browser

This is part question, part answering some issues I struggled with. Question is at the bottom. I wanted to upload a file straight from the browser to S3 using Cognito. It worked great with unauthenticated users but then every user has access to the…
Miro
  • 7,402
  • 2
  • 25
  • 52
1
vote
1 answer

is there a CloudFormation way of uploading an SSH_PublicKey after a user is being created?

I am trying to create an IAM user who has CodeCommit and S3 access only using CloudFormation, but also, i want to add the SSH_PublicKey, here is what I have so far: Resources: ItS3User: DependsOn: ArtifactsBucket Type: AWS::IAM::User …
khinester
  • 2,962
  • 6
  • 38
  • 70
1
vote
1 answer

Rotate IAM user access keys

We have IAM user(programmatic access only) with access key age more than 4 years. S3 and SQS are the only services actively being used by this user. We want to rotate the access key by creating a new user/policy. I created a new user added it to the…
rumblefish
  • 21
  • 1
1
vote
1 answer

How to solve (AccessDeniedException) when calling the Scan operation: User: arn:aws:sts... is not authorized to perform: dynamodb:Scan on resource.."?

I am trying to deploy an Instagram-like application to AWS using Elastic Beanstalk and Flask. After using eb deploy command, I am able to access the application main page, which does not requires access to DynamoDB tables. When I try to login, the…
1
vote
1 answer

What is the equivalent to AWS PassRole permission in Azure?

In AWS, you can allow a user to pass a role to a service using the PassRole permissions, as explained here. How can one achieve a similar result in Azure IAM?
Muhammad Alkarouri
  • 21,347
  • 16
  • 59
  • 94
1
vote
1 answer

Modify pre-existing IAM roles using terraform

I want to start managing the policies on pre-existing IAM roles using terraform. I have many IAM roles with policies attached to them in AWS account. These roles were created manually via the console. Now i want to start managing them using…
Deepak Prasad
  • 191
  • 1
  • 3
  • 12
1 2 3
99
100