Questions tagged [amazon-iam]

AWS Identity and Access Management (IAM) is an access control service for Amazon Web Services. Tag questions about using the AWS CLI, writing JSON for IAM, and using IAM SDKs.

IAM is a web service that helps you securely control access to AWS resources. With IAM, you can centrally manage permissions that control which AWS resources users can access. Use IAM to control who is authenticated (signed in) and authorized (has permissions) to use resources.

5421 questions
2
votes
1 answer

what does Percentage symbol (%) in the IAM policy mean

when I use firehose and enable logging it automatically generate the following lines for IAM policy: Statement: - Sid: '' Effect: Allow Action: - s3:AbortMultipartUpload -…
Hamed Minaee
  • 2,480
  • 4
  • 35
  • 63
2
votes
0 answers

python code gets error: botocore.exceptions.NoCredentialsError: Unable to locate credentials

I got a error like this botocore.exceptions.NoCredentialsError: Unable to locate credentials when I was running the following code: # setup AWS Connection details awsSession = boto3.Session(profile_name="opsdev") def getInfoFromDynamoDB(service): …
2
votes
2 answers

AWS Lambda - The role defined for the function cannot be assumed by Lambda

I am trying to access Lambda function using iOS Swift and here is my set up AWS Role RoleName: ALLOW_LAMBDA_EXECUTE With Policy access to AWS Lambda full access, AWS Lambda execute, AmazonCognitoDeveloperAuthenticatedIdentities Trust…
2
votes
1 answer

Recommended way to get temporary AWS credentials? AWS.config or STS?

I'm using a third-party SDK that needs temporary AWS credentials to access AWS services. I'm using this SDK as part of an application that is running on EC2. All SDKs in my application need access to the same role, which is attached to my the EC2…
johnnyodonnell
  • 1,838
  • 3
  • 16
  • 34
2
votes
1 answer

S3 "Access Denied" to Bucket

I try to allow one of our Devs (myapp-dev1) the access to one explicit S3-Bucket. I created a policy which should allow CRUD options (he should be able to write and read image files into that bucket, and only into…
Jan
  • 12,992
  • 9
  • 53
  • 89
2
votes
1 answer

Allowing AWS IAM users create RDS instances

I want to allow my AWS IAM user to be able to create RDS instances via AWS UI. So added the policy below { "Version": "2012-10-17", "Statement": [ { "Sid": "VisualEditor0", "Effect": "Allow", "Action": "rds:*", …
2
votes
2 answers

How Can I send AWS credentials with Python requests?

I've created the following resources on API Gateway: https:/myapp.execute-api.us-east-1.amazonaws.com/zzz/yyy/xxx It Can be only used it with AWS Credentials which I have: access_key :"access_example" secret_key:"secret_example" session_token:…
2
votes
2 answers

How to Backup/Restore SQL Server RDS DB to S3 bucket in different AWS account

I want to backup/restore SQL Server RDS to S3 bucket. Both RDS and S3 are in different account. How to implement it. Query I am using to backup/restore is: Backup: USE [msdb] GO DECLARE @return_value int EXEC @return_value =…
2
votes
2 answers

AWS SES Identity "pending verification" for DKIM config

Brand new to AWS & Simple Email Service (SES) and have an app that needs to generate some email using SES. All I'm trying to do is set things up so that my app's service user (called, say, myapp-dev) has Access & Secret Keys that have permission to…
smeeb
  • 27,777
  • 57
  • 250
  • 447
2
votes
0 answers

How to integrate amazon s3 securely using auth0 and react-native?

I've done some research into amazon s3 and am familiar with general terms such as IAM and temporary credentials. Still, I am struggling to design an effective strategy for s3 integration. I began down the path at…
Simon
  • 1,681
  • 1
  • 21
  • 34
2
votes
1 answer

Specifying the correct IAM permission for access to multiple s3 buckets

I am trying to give users read/write/list permissions to certain buckets and my IAM policy is: { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "s3:ListBucket" …
Dennis Mathew
  • 149
  • 2
  • 7
2
votes
2 answers

AWS IAM Roles for SQS

My application hosted on EC2 instance needs to make constant connection to SQS and any loss in connection would lead to data loss. This can be successfully done using IAM user Access key and secret access key. But I want to use IAM roles for the…
2
votes
2 answers

What is the access control model for DynamoDB?

In a traditional MySql Server situation, as the owner of a database, I create a User and from the database I grant certain access rights to the User object. An application can then (and only) access the database by supplying the password for the…
Old Geezer
  • 14,854
  • 31
  • 111
  • 198
2
votes
2 answers

Connect to Amazon RDS Postgresql with IAM Role

I try to give my EC2 instance access to my AWS RDS Postgresql database via IAM. First, I've created a policy: { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ …
2
votes
1 answer

AWS DynamoDB restrict access to an attribute-value in IAM

I have an AWS DynamoDB table which consists of one key and some attributes. AWS IAM allows to restrict the access to a specific key: Docs. But is it possible to "filter" by the value of an attribute? For example: "Allow access to all rows, where…
mthnic
  • 23
  • 3
1 2 3
99
100