I have a system with 2 AWS Accounts, and I want an IAM group on account 2 to access a bucket on account 1. Account 1 has a large car database and an S3 bucket with files for each car.…
Assume that I'm working in a hybrid cloud setup where some services run in and use AWS, and some not. For an API not running in AWS (i.e., not in EC2, not in Lambda, not behind AWS API Gateway), I…
Is it possible for a pod to assume multiple IAM roles? Its definitely possible to dynamically switch the env variable AWS_ROLE_ARN value. But do we have a straight approach to support multiple at a time? like, AWS_ROLE_ARN: test AWS_ROLE_ARN2: test-2
I am trying to create an IAM policy that allows some actions on a resource, but only if the access key is used from a specific Elastic Beanstalk application or container. Does anyone know how to do this? I tried…
Summary As mentioned above, I want to create an IAM role that can ONLY read / write objects to a SPECIFIC sub-folder in the S3 bucket. However, I'm unable to despite following the examples here and here Policy { "Version":…
I have downloaded the AWS glue script from my Dev environment by clicking "Download" as a JSON file which include Job parameter and other info as well other than the code. When i upload to my production environment by clicking…
I want to enable IAM Identity Center and configure an external IdP for an existing AWS account. This AWS account already has users, created with IAM. What happens to these users? I'm especially worried about users used by my application…
On the AWS console, I can switch between different roles (see screenshot). I am using a Docker Image where I am running Linux. I have also a credentials file with temporary AWS credentials. I can start the docker container setting…
I am just starting out with AWS. I have a root user and an IAM user. I'm trying to create an access key for my IAM user, but I can't find the security credentials tab as listed here. As you…
I am running an AWS cli command to retrieve all the groups that a user belongs to. The result from a iam list-groups-for-user --user-name "User1" | jq '.Groups[] | . += {name: "User1", groups: [.GroupName]} | {name, groups}' provides the…