How to use IAM to provide access to users efficiently and securely

0

Hi, we have a couple of developers who are working on various functionalities. We want to give each developer some required permissions on the resources they are creating. How can we do it easily? Instead of adding the resources manually every time to the policy whenever created, is there any better way?

2 Answers
0
Accepted Answer
profile pictureAWS
EXPERT
kentrad
answered 9 months ago
profile pictureAWS
EXPERT
reviewed 9 months ago
0

Hi,

the simplest way is to use a naming convention like https://cjrequena.com/2020-06-05/aws-naming-conventions-en but where you would call $Environment to first position in the name and give it a different value for each of your developers.

Then, you will authorize in IAM policies with Resource:"service: DevPrefix*" to allow your devs to do what they want on their resources (i.e. those whose names start with their prefix)

AWS Iam Identity Center and AWS Organizations are the next step but they are more involving but go much further (multi-account)

Best,

Didier

profile pictureAWS
EXPERT
answered 9 months ago
  • Thanks. Can you share some good blog post on these as I didnt understand fully what you tried to say as I am not that advanced in IAM.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions