IAM Policy to restrict other user action within a policy
0
Is it possible to configure an IAM policy that allow another "user/service account" to create a policy that allow another user to use/consume a particular service only and no other resources. Is there a way to achieve this goal ?
Example: User XYZ creates a policy to allow other user ABC to create a policy to allow managing SQS resources within the policy created by User ABC
Langue
English
demandé il y a un an403 vues
1 réponse
- Le plus récent
- Le plus de votes
- La plupart des commentaires
1
I think you're looking for IAM Permissions Boundaries - this allows you to restrict what permissions someone can give to other entities. For example, it can stop someone who has the ability to create an IAM role from exceeding the permissions for that new role that you want them to have.
Contenus pertinents
- demandé il y a un an
- demandé il y a 7 mois
- demandé il y a un an
AWS OFFICIELA mis à jour il y a 2 ans- AWS OFFICIELA mis à jour il y a un an
- AWS OFFICIELA mis à jour il y a 2 ans
