Articles tagged with IAM Policies

You manage access in AWS by creating policies and attaching them to IAM identities (users, groups of users, or roles) or AWS resources.

Content language: English

Filter articles

Select tags to filter

Sort by

Sort by most recent

Browse through articles or filter your results using the tools displayed.

24 results

Why do I get an Access Denied error when calling Cloud Contr...

DarshikaEXPERT

published a month ago0 votes93 views

AWS Cloud Control API uses AWS CloudFormation resource providers, which may invoke additional API operations beyond the primary service API. As a result, GetResource for an Amazon Bedrock Agent can re...

ARTICLE

Amazon Bedrock Amazon Bedrock AgentCore Machine Learning & AI IAM Policies AWS Cloud Control API

How to fix the "AccessDeniedException" for ram:AssociateReso...

Akhilesh-Sr TAMEXPERT

published 2 months ago0 votes102 views

Enterprises upgrading their AWS Lake Formation cross-account sharing to Version 5 may get blocked from granting data access across accounts breaking cross-account data lake workflows. This article pro...

ARTICLE

IAM Policies AWS Identity and Access Management AWS Lake Formation

How do I validate IAM permissions for Amazon S3 Files before...

PraneethaEXPERT

published 2 months ago1 votes163 views

Amazon S3 Files requires two IAM roles for bidirectional sync. A common misconfiguration — using aws:SourceAccount instead of aws:ResourceAccount in the sync role's inline policy — causes files to sil...

ARTICLE

IAM Policies Storage Amazon Simple Storage Service Amazon Elastic File System Security, Identity, & Compliance

Troubleshooting AWS Backup failures using Kiro CLI

Anil KukkunuruEXPERT

published 3 months ago3 votes190 views

The article addresses a common operational challenge — when AWS Backup jobs (backup, restore, or cross-account copy) fail, the root cause typically spans multiple AWS services (IAM, KMS, Backup vault ...

ARTICLE

Encryption Resilience IAM Policies AWS Backup Disaster Recovery/Business Continuity

Introducing FSx Compliance Enforcement: an AWS Config custom...

Ed GummettEXPERT

published 4 months ago0 votes158 views

A detective rule that detects non-compliant FSx filesystems within minutes and quarantines them without deleting data.

ARTICLE

AWS Config Amazon FSx Security, Identity, & Compliance IAM Policies Storage

How to Configure AWS IAM SAML 2.0 Federation with Microsoft ...

Talal-ShobaitaEXPERT

published 4 months ago0 votes1K views

Step-by-step guide for setting up SAML 2.0 federation between Microsoft Entra ID (formerly Azure AD) and AWS IAM for single-account console access. Covers creating the enterprise application in Entra ...

ARTICLE

IAM Policies AWS IAM Identity Center

re:Invent 2025 - Implementing security best practices for se...

Henrique SantanaEXPERT

published 5 months ago0 votes139 views

Session CNS360 presented a layered security framework for serverless applications on AWS, from foundational IAM controls and API protection through OAuth 2.0 identity flows. The session also shows how...

ARTICLE

Security IAM Policies Serverless Amazon Bedrock AgentCore

How do I resolve "Forbidden" errors when calling certain Apa...

shubhranshuEXPERT

published 5 months ago2 votes214 views

I'm using the Apache Airflow REST API in my Amazon Managed Workflows for Apache Airflow (Amazon MWAA) version 3.0 environment, and some API endpoints work while others return a `{"detail": "Forbidden"...

ARTICLE

Security Amazon Managed Workflows for Apache Airflow (MWAA) Serverless IAM Policies Amazon Managed Workflows for Apache Airflow (MWAA)Analytics

How do I migrate my Security, Identity and Compliance resour...

Nymus BooysenEXPERT

published 5 months ago0 votes557 views

This article provides general guidance on migrating Security, Identity and Compliance resources from one region to another.

ARTICLE

AWS Key Management Service Amazon Cognito IAM Policies Migration Journey

Credential Cleanup Procedure

SubuEXPERT

published 9 months ago0 votes527 views

If a user access key is acquired by a bad actor, we can use this standard operating procedure to safely make the lost access key ineffective

ARTICLE

Security, Identity, & Compliance AWS Identity and Access Management IAM Policies

Maintaining Amazon Elastic Kubernetes Service (Amazon EKS) c...

samratmkEXPERT

published 9 months ago3 votes324 views

Migrating your AWS account to a new landing zone can lock you out of your Amazon EKS clusters. New SSO permission sets create different role names that break existing access. This guide helps you: -...

ARTICLE

IAM Policies AWS Cloud Security Amazon EKS Anywhere Landing Zone Accelerator on AWS

Bedrock Knowledge Base with S3 Vectors: Troubleshooting IAM ...

Sankalp H TEXPERT

published 10 months ago1 votes791 views

This article outlines steps to troubleshoot IAM permission issues when creating Amazon Bedrock Knowledge Bases with S3 Vectors storage configuration.

ARTICLE

Knowledge Bases for Amazon Bedrock IAM Policies Amazon Bedrock

1
2
Page size
12 / page