In API Gateway, Im having some issues getting "Aws Services" to show as an option in Integration Type when creating a method within a proxy resource. I can see that this is showing up for normal resource when I don't…
I am trying to create multiple SNS topic subscription in the SQS. I do have the config file like below in json format "snsSubscriptionArns": [ "arn:aws:sns:<region>:<accountno>:test1", "arn:aws:sns:<region>:<accountno>:test2", "arn:aws:sns:<region>:<accountno>:test3" ] Above mentioned Arns will be based on the requirement. It's dynamic.…
I am trying to hook up a SQS Queue into a SNS Topic, both are in different AWS Accounts and are encrypted using different KMS keys (CMKs). Let me know elaborate the setup a little bit better: AWS Account 1:…
This might be a rather simple question, but is it possible to log into an EC2 Windows Server instance over RDP, using an IAM user's credentials, or am I stuck using the password from the KeyPair?
AWS Quicksight has a built in default role aws-quicksight-service-role-v0 which does not have any policy attached to it. Knowing its ARN, I want to attach policies to the role via terraform. How can I achieve this? In other words, how…
Sorry I'm a bit of a clutz at AWS. I have an IAM user that belongs to a group. with the 'AdministratorAccess' policy attached to it. I further verify that this policy includes full access to IAM. However when i…
I have a lambda function in Account A which will retrieve data from a source. This lambda will then need to trigger off a lambda in Account B in order to pass this data to it which then will be…
Is it possible to create an AWS role (with "iam:CreateRole" permissions) to prevent it having privilege escalation, and only allow it to create new roles with a specific set of permissions e.g: "s3:GetObject"? I am not sure if PermissionsBoundary is…
I have seen related questions for this issue. But my problem in particular is I am assuming a role to retrieve temporary credenitals. It works just fine; however, when running CDK Bootstrap, I receive: Need to perform AWS calls for…
I have created AWS IAM groups using aws_iam_group and for_each loop resource "aws_iam_group" "all" { for_each = toset(local.groups) name = each.key path = "/" } Then I am outputting all groups output "groups" { value = aws_iam_group.all } This is…