How to use IAM to provide access to users efficiently and securely

Question

Hi, we have a couple of developers who are working on various functionalities. We want to give each developer some required permissions on the resources they are creating. How can we do it easily? Instead of adding the resources manually every time to the policy  whenever created, is there any better way?

Accepted Answer

Take a look at this: [IAM tutorial: Define permissions to access AWS resources based on tags](https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_attribute-based-access-control.html).

Answer

Hi,
 
the simplest way is to use a naming convention like https://cjrequena.com/2020-06-05/aws-naming-conventions-en but where you would call $Environment to first position in the name and give it a different value for each of your developers.

Then, you will authorize in IAM policies with Resource:"service: DevPrefix*" to allow your devs to do what they want on their resources (i.e. those whose names start with their prefix)

AWS Iam Identity Center and AWS Organizations are the next step but they are more involving but go much further (multi-account)

Best,

Didier

How to use IAM to provide access to users efficiently and securely

Conteúdo relevante