0

I would like to create the following policy but I am not able to find resource that can help me set up the condition nor identify which values should I use for Action, Resource keys.

  1. RDS - Rwite Data in DataBase
  2. RDS - Full Access: To resources that the user created, not what other users created.
  3. Lambda Full access: To resources that the user created, not what other users created.

Following is my attempt to giving Full Access on what the user created but I realized the condition is related to resource owner's AWS account ID not user for instance

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": "rds:*",
            "Resource": "*",
            "Condition": {
                "StringEquals": {
                    "aws:ResourceAccount": "account"
                }
            }
        }
    ]
}
                        
aidonsnous
  • 1,475
  • 4
  • 19
  • 41

0 Answers0