How to use IAM to provide access to users efficiently and securely

0

Hi, we have a couple of developers who are working on various functionalities. We want to give each developer some required permissions on the resources they are creating. How can we do it easily? Instead of adding the resources manually every time to the policy whenever created, is there any better way?

2回答
0
承認された回答
profile pictureAWS
エキスパート
kentrad
回答済み 9ヶ月前
profile pictureAWS
エキスパート
レビュー済み 9ヶ月前
0

Hi,

the simplest way is to use a naming convention like https://cjrequena.com/2020-06-05/aws-naming-conventions-en but where you would call $Environment to first position in the name and give it a different value for each of your developers.

Then, you will authorize in IAM policies with Resource:"service: DevPrefix*" to allow your devs to do what they want on their resources (i.e. those whose names start with their prefix)

AWS Iam Identity Center and AWS Organizations are the next step but they are more involving but go much further (multi-account)

Best,

Didier

profile pictureAWS
エキスパート
回答済み 9ヶ月前
  • Thanks. Can you share some good blog post on these as I didnt understand fully what you tried to say as I am not that advanced in IAM.

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ