I am somewhat of an AWS/IAM noob, and I need to require all my users to use MFA in AWS AIM, but I am unable to find the setting to require that. If I follow a lot of the instructions…
I can't find a valid way to restrict this permission. I would ideally like to restrict the permission to work in a particular VPC and/or subnet. I'm unsure where in the documentation to look & have tried numerous approaches with…
I followed this video to get credentials from AWS via GitLab CI/CD. Video link: https://www.youtube.com/watch?v=7PvTjYTkYTo I created the same variables as seen in the video. The role has also been created in AWS. variables: AWS_REGION: "eu-west-2" aws_profile: "OIDC" IGNORE_TF_DEPRECATION_WARNING: "true"…
This question is somewhat connected to the discussion found here: How can I use the AWS CLI to add a trust policy to a role? Previously, I encountered a problem adding a policy via the AWS CLI. It was resolved…
I am trying to create a new AWS IAM policy for a basic role. I want to deny the deletion of the resources if they are missing the tag ResourceDelete = True What I have so far: { "Sid" :…
I am trying to use Redshift Query Editor V2 authenticating via IAM Identity Center. These were my setup steps: Created IAM Identity Center in the same region as the Serverless Workgroup Created a Serverless Redshift instance (note I tried both…
I'm trying to restrict access to the state lock management DynamoDB table. (Terraform) I understand that DynamoDB does not support resource based policies and you have to set it in a role, however I'm not actually 100% sure of that…
I am currently working on analyzing the costs associated with different AWS services for each IAM role. Specifically, I am focusing on Amazon S3 buckets. I am using the AWS Cost and Usage Report to gather information about resource usage…
I have a S3 java client which I want to run. But I get error during startup: Caused by: com.amazonaws.services.securitytoken.model.AWSSecurityTokenServiceException: User: arn:aws:iam::123456789:user/test-key is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::123456789:user/test-key (Service: AWSSecurityTokenService; Status Code: 403; Error Code: AccessDenied; Request…
I'm trying to have my lambda putting/updating objects in my s3 bucket. I have not changed any default bucket setting and attached the below role iam policy to the lambda. { "Statement": [ { "Action": [ "logs:*" ], "Effect": "Allow",…