I am trying to give access on test user with limited permission on ec2 instance to perform server start and stop activity. Unfortunately I am getting this message on testuser dashboard: **Error: You are not authorized to perform this operation.…
Problem Statement : While Registering new IP in ELB Fargate under Target Group, Old IP went into the Unhealthy status. I want to Deregister old IP automatically with the help of Github actions workflow. What did I tried so far…
I am somewhat of an AWS/IAM noob, and I need to require all my users to use MFA in AWS AIM, but I am unable to find the setting to require that. If I follow a lot of the instructions…
I can't find a valid way to restrict this permission. I would ideally like to restrict the permission to work in a particular VPC and/or subnet. I'm unsure where in the documentation to look & have tried numerous approaches with…
I followed this video to get credentials from AWS via GitLab CI/CD. Video link: https://www.youtube.com/watch?v=7PvTjYTkYTo I created the same variables as seen in the video. The role has also been created in AWS. variables: AWS_REGION: "eu-west-2" aws_profile: "OIDC" IGNORE_TF_DEPRECATION_WARNING: "true"…
This question is somewhat connected to the discussion found here: How can I use the AWS CLI to add a trust policy to a role? Previously, I encountered a problem adding a policy via the AWS CLI. It was resolved…
I am trying to create a new AWS IAM policy for a basic role. I want to deny the deletion of the resources if they are missing the tag ResourceDelete = True What I have so far: { "Sid" :…
I am trying to use Redshift Query Editor V2 authenticating via IAM Identity Center. These were my setup steps: Created IAM Identity Center in the same region as the Serverless Workgroup Created a Serverless Redshift instance (note I tried both…
I'm trying to restrict access to the state lock management DynamoDB table. (Terraform) I understand that DynamoDB does not support resource based policies and you have to set it in a role, however I'm not actually 100% sure of that…
I am currently working on analyzing the costs associated with different AWS services for each IAM role. Specifically, I am focusing on Amazon S3 buckets. I am using the AWS Cost and Usage Report to gather information about resource usage…