1 個回答
- 最新
- 最多得票
- 最多評論
0
Instead of granting these powerful IAM permissions why don't you manually create the IAM Role that will be used by the Firehose and then select that role in the AWS Console during creation. https://docs.aws.amazon.com/ses/latest/dg/event-publishing-kinesis-analytics-firehose-stream.html
You can refer to this page in in the documentation when determining which permissions should be included in your IAM Role. https://docs.aws.amazon.com/firehose/latest/dev/controlling-access.html
I hope this helps you!
That implies that the user has permission to create any kind of IAM roles/policies. The point here is that he should be restricted to doing only what is absolutely necessary
相關內容
- AWS 官方已更新 1 年前
- AWS 官方已更新 7 個月前
Hi, side note: you should obfuscate your account number in the quote above.