I am trying to hook up a SQS Queue into a SNS Topic, both are in different AWS Accounts and are encrypted using different KMS keys (CMKs). Let me know elaborate the setup a little bit better: AWS Account 1:…
This might be a rather simple question, but is it possible to log into an EC2 Windows Server instance over RDP, using an IAM user's credentials, or am I stuck using the password from the KeyPair?
AWS Quicksight has a built in default role aws-quicksight-service-role-v0 which does not have any policy attached to it. Knowing its ARN, I want to attach policies to the role via terraform. How can I achieve this? In other words, how…
Sorry I'm a bit of a clutz at AWS. I have an IAM user that belongs to a group. with the 'AdministratorAccess' policy attached to it. I further verify that this policy includes full access to IAM. However when i…
I have a lambda function in Account A which will retrieve data from a source. This lambda will then need to trigger off a lambda in Account B in order to pass this data to it which then will be…
Is it possible to create an AWS role (with "iam:CreateRole" permissions) to prevent it having privilege escalation, and only allow it to create new roles with a specific set of permissions e.g: "s3:GetObject"? I am not sure if PermissionsBoundary is…
I have seen related questions for this issue. But my problem in particular is I am assuming a role to retrieve temporary credenitals. It works just fine; however, when running CDK Bootstrap, I receive: Need to perform AWS calls for…
I have created AWS IAM groups using aws_iam_group and for_each loop resource "aws_iam_group" "all" { for_each = toset(local.groups) name = each.key path = "/" } Then I am outputting all groups output "groups" { value = aws_iam_group.all } This is…
I got a requirement to send an alert email when an IAM user fails to login 3 times consecutively. What is the best practice to approach this?. I did research a lot and I was getting a lot saying: "listen…
I am using AWS API Gateway that triggers a Lambda function (integration request type is LAMBDA_PROXY). I am trying to add logs for the gateway's activities via Cloud Watch. After following this documentation, it is still not working. The log…