Context: The EC2 instance IAM role privileges grant more permissions than desired to the users who SSH into the instance. Therefore, we want to restrict SSH user access so that it should not automatically assume the EC2 IAM role upon…
Currently, we are mainly using DMS, RDS & IAM AWS services. Now, if we want to use those services in different region / account then how to take only configuration backup? Like - DMS - Replication instances, Endpoint, Event subscriptions.…
I have a system with 2 AWS Accounts, and I want an IAM group on account 2 to access a bucket on account 1. Account 1 has a large car database and an S3 bucket with files for each car.…
Assume that I'm working in a hybrid cloud setup where some services run in and use AWS, and some not. For an API not running in AWS (i.e., not in EC2, not in Lambda, not behind AWS API Gateway), I…
Is it possible for a pod to assume multiple IAM roles? Its definitely possible to dynamically switch the env variable AWS_ROLE_ARN value. But do we have a straight approach to support multiple at a time? like, AWS_ROLE_ARN: test AWS_ROLE_ARN2: test-2
I am trying to create an IAM policy that allows some actions on a resource, but only if the access key is used from a specific Elastic Beanstalk application or container. Does anyone know how to do this? I tried…
Summary As mentioned above, I want to create an IAM role that can ONLY read / write objects to a SPECIFIC sub-folder in the S3 bucket. However, I'm unable to despite following the examples here and here Policy { "Version":…
I have downloaded the AWS glue script from my Dev environment by clicking "Download" as a JSON file which include Job parameter and other info as well other than the code. When i upload to my production environment by clicking…
I want to enable IAM Identity Center and configure an external IdP for an existing AWS account. This AWS account already has users, created with IAM. What happens to these users? I'm especially worried about users used by my application…
On the AWS console, I can switch between different roles (see screenshot). I am using a Docker Image where I am running Linux. I have also a credentials file with temporary AWS credentials. I can start the docker container setting…