All Content tagged with IAM Policies
You manage access in AWS by creating policies and attaching them to IAM identities (users, groups of users, or roles) or AWS resources.
Content language: English
Filter content
Select tags to filter
Sort by
Sort by most recent
1792 results
After activating AWS Advanced Features, my organization has an SCP named `AdvancedModeRegionRestrictionSecurityControlPolicy` attached to the organization root.
The statement `UsEast1Partitional` use...
The IAM policy BedrockAgentCoreFullAccess has the permission below, granting full read access to S3. This is not expected. The permission was added in Version 14. Prior to that version, the access was...
AWS OFFICIALUpdated 2 days ago0 votes34 views
Discovered an exposed AWS access key? Before you rotate anything, size the risk. This eight-step guide walks you through mapping the key's permissions and exposure window, classifying the severity, ch...
AWS OFFICIALUpdated 2 days ago0 votes34 views
This is the first of three articles on managing exposed AWS access keys, starting with prevention, then evaluating the risk when a key is exposed, and recovering after a compromise. See the end of thi...
I am testing an identity-policy draft with IAM SimulateCustomPolicy before
deployment. A minimal Allow for sqs:SendMessage returns implicitDeny when it
uses ArnEquals with ec2:SourceInstanceARN, despi...
Hi AWS Builders Community,
I am facing a persistent issue while updating the SQS Access Policy for integrating Amazon Selling Partner API (SP-API) push notifications in the ap-south-1 (Mumbai) region...
On an AWS account I control, one Amazon Bedrock AgentCore Policy `CreatePolicyEngine` call in `sa-east-1` using temporary credentials from the assumed IAM role `sentinela-agentcore-v1-provisioner` ret...
I’m evaluating this authentication flow:
1. An IAM user with virtual MFA signs in through AWS CLI `aws login`.
2. A Python SDK uses the resulting temporary credentials to call STS `AssumeRole`, suppl...
### SESv2 SendEmail returns AccessDeniedException although IAM Policy Simulator allows the request
This is a follow-up to an earlier resolved question about the default configuration set. An AWS re:P...
Summary
Please add a native Export and Import capability for IAM Policies in the AWS console, scoped to accounts within the same AWS Organization. This would allow practitioners to replicate a policy...
asked 18 days ago
Tolu Okuboyejo - AWSEXPERT
published 18 days ago0 votes90 views
When an Amazon Redshift cluster slows down, CloudWatch shows the symptom—high CPU and commit-queue pressure—but not which queries caused it or how to fix them. Answering that traditionally required a ...
I am troubleshooting an AWS STS AssumeRole request that consistently fails with:
AccessDenied: not authorized to perform sts:SetSourceIdentity
The source is an IAM user using short-lived credentials...