I want to create multiple aws_iam_policy_document resources with for_each, to be later assumed by several roles, as follows: # Policy to allow services to assume the role data "aws_iam_policy_document" "this" { for_each = var.lambda_configuration statement { actions = ["sts:AssumeRole"] principals…
I'm not an AWS expert, so I need some help configuring access policies to a S3 Bucket audio file. Quick explain: I'm trying to call a lambda function and access a audio file from a S3 bucket with private access.…
I faced 2 scenarios where terraform did not point out an error during the execution of terraform plan and I am wondering if is this a bug or if this is how bucket/iam policies work ( i.e determined at the…
I am using the sub function to define a resource within an aws IAM service. Resource: - !Sub 'arn:aws:s3:::example-${TEST1}-${AWS::REGION}-test' ${TEST1}: it is an environment variable that I have in my java project. ${AWS::REGION}: pseudo parameter I want to know if…
I want to allow only ONE lambda (arn:aws:lambda:ap-southeast-2:444455556666:function:source-lambda) function to send messages to my SQS queue (arn:aws:sqs:ap-southeast-2:444455556666:target-sqs). So I attached the below Access Policy to my SQS queue. However, this policy is not allowing the specified Lambda to send messages…
I am using AWS Simple Email Service (SES), however I want to have a very tightly restricted policy. I want to set up a policy to only be able to send emails to a domain (mydomain) from a specific ([email protected])…
Im new at Terraform and im trying to create ecsTaskExcecutionRoles for each service i have, i create a module that allows to send a list of secrets, i want to make the inline policy that allows the access optional. i…
How do I write a poilicy to have full access to a single c7g.large ec2 instance and restrict the rest of the instances?
I have User with full access to an S3 Bucket my-bucket. I want to assume a role with that user to restrict access to ONLY a specific folder (labeled by the role name) for the duration of that session. There…
I am working on syncing my GitHub repo with S3 bucket and I don't want to pass my AWS credentials as GitHub secrets. I already tried passing my credentials through GitHub secret and the code works. However, when I try…