Cross Account S3/Athena Access in IAM Identity Center

0

Earlier we were using IAM Roles and mapped those Roles to the target AWS account since we know the NAMES of the roles we could hardcode them in IAM/s3 policy documents to manage access. with IAM Permissionset inplace , we are confused as to how to easily manage the same access to our platform users. the Names are very Weird and ends with some weird number and characters.

how should we manage the cross account resource and use these new roles created by permissionset ? Thanks

2回答
0
承認された回答

You would do same as you did with IAM role names. The Permission Set names are 'weird' because they are trying to ensure they are unique and won't conflict with anything you have created. The names don't change once created, so you can use them the same way you use IAM Roles.

Hope this helps,

profile picture
回答済み 1年前
0

Take a look at using principal and resource tagging in policy conditions. Examples

profile pictureAWS
エキスパート
kentrad
回答済み 1年前

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ