Questions tagged [aws-scp]
18 questions
0
votes
0 answers
AWS - Verify action is performed via SSM Automation
I need to verify that action is performed only via SSM (more specifically via SSM Automation using runbook). In addition, I need to verify the source account that triggers the running of the automation document.
Is it possible to enforce it using…
Yahav Festinger
- 985
- 2
- 8
- 17
0
votes
1 answer
AWS unencrypted SNS Topic SCP policy
can anyone help with the format to create an scp policy in json format to restrict the creation of any unencrypted sns topics? Thank you
Devaws
- 1
0
votes
1 answer
AWS SCP , enforce tagging for EC2 and allow specific AWS Backup service role to restore
I have a tag enforcement scp that deny ec2 creation without CodeDomaine Tag except for AWS Backup service:
"Statement": [
{
"Sid": "DenyEC2CreationSCP1",
"Effect": "Deny",
"Action": [
"ec2:RunInstances"
],
…
Zied Faidi
- 1
- 1