1回答
- 新しい順
- 投票が多い順
- コメントが多い順
0
Instead of granting these powerful IAM permissions why don't you manually create the IAM Role that will be used by the Firehose and then select that role in the AWS Console during creation. https://docs.aws.amazon.com/ses/latest/dg/event-publishing-kinesis-analytics-firehose-stream.html
You can refer to this page in in the documentation when determining which permissions should be included in your IAM Role. https://docs.aws.amazon.com/firehose/latest/dev/controlling-access.html
I hope this helps you!
That implies that the user has permission to create any kind of IAM roles/policies. The point here is that he should be restricted to doing only what is absolutely necessary
関連するコンテンツ
- AWS公式更新しました 4年前
Hi, side note: you should obfuscate your account number in the quote above.