I would like to create the following policy but I am not able to find resource that can help me set up the condition nor identify which values should I use for Action, Resource keys.
- RDS - Rwite Data in DataBase
- RDS - Full Access: To resources that the user created, not what other users created.
- Lambda Full access: To resources that the user created, not what other users created.
Following is my attempt to giving Full Access on what the user created but I realized the condition is related to resource owner's AWS account ID not user for instance
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "VisualEditor0",
"Effect": "Allow",
"Action": "rds:*",
"Resource": "*",
"Condition": {
"StringEquals": {
"aws:ResourceAccount": "account"
}
}
}
]
}