All Content tagged with IAM Policies

I have been testing the direct write to Iceberg feature in Firehose and I have come to realize that there is a problem with the feature. It does not always work. Let me elaborate: - I created an IAM...

Is there a way to connect to RDS with IAM Auth over SSM Session Manager tunnel opened with document AWS-StartPortForwardingSessionToRemoteHost? Context: 1. I have VPC attached Lambda that successfully...

I use terraform to manage my infrastructure and often see an error Error: creating IAM Role (my-role-name): operation error IAM: CreateRole, https response error StatusCode: 409, RequestID: ...,...

I have a role defined which is cross account assumed by a central technical user Account A - techuser Account B - role2assume In the trust policy of the role2assume I limit the "sts:AssumeRole" to...

Hi, How can I enforce the maker checker concept in user creation and assigning permissions to users / groups. I.e. If an admin/root user assigning the services to the user, someone (other than the...

Hi team, Getting this error while runninng query in athena com.amazonaws.services.s3.model.AmazonS3Exception: Access Denied (Service: Amazon S3; Status Code: 403; Error Code: AccessDenied; Request...

Springboot Java application running in Aws App runner is communicating with SNS(production mode) through VPC Endpoint with help of I am role and policy. SMS published by application reaches SNS but...

A Spring boot Java based application is deployed in APPRUNNER. To enable the SES service for the above application, in I AM service role is created with SES full access policy and in VPC an endpoint...

I am encountering an issue with the AWS SDK v2 for Java when trying to override the endpoint for the IAM Client. Specifically, the SDK is stripping everything after the ‘/’ in the endpoint that I have...

I'm digging into some corners of IAM conditions that I don't use a lot, and I've been testing some sample policies to make sure real-world behavior matches my assumptions. I've created a role with...

I have a user authenticated by Cognito user-pool, role & identity-pool (using Cognito hosted-ui). After login, the user comes back to my webapp (frontend), I use the `id_token` (returned by the...