I want to have a script which programmatically creates an AWS account and creates a Cognito user pool within that account. I want this user pool to support multi-factor authentication via SMS. Cognito sends SMS messages using the SNS service.…
A policy can be attached to a user or group. This controls what the users are able to do in AWS. Policy can be attached to an AWS service? What is the relation between policy and AWS service? And where…
I want to create multiple aws_iam_policy_document resources with for_each, to be later assumed by several roles, as follows: # Policy to allow services to assume the role data "aws_iam_policy_document" "this" { for_each = var.lambda_configuration statement { actions = ["sts:AssumeRole"] principals…
I'm not an AWS expert, so I need some help configuring access policies to a S3 Bucket audio file. Quick explain: I'm trying to call a lambda function and access a audio file from a S3 bucket with private access.…
I faced 2 scenarios where terraform did not point out an error during the execution of terraform plan and I am wondering if is this a bug or if this is how bucket/iam policies work ( i.e determined at the…
I am using the sub function to define a resource within an aws IAM service. Resource: - !Sub 'arn:aws:s3:::example-${TEST1}-${AWS::REGION}-test' ${TEST1}: it is an environment variable that I have in my java project. ${AWS::REGION}: pseudo parameter I want to know if…
I want to allow only ONE lambda (arn:aws:lambda:ap-southeast-2:444455556666:function:source-lambda) function to send messages to my SQS queue (arn:aws:sqs:ap-southeast-2:444455556666:target-sqs). So I attached the below Access Policy to my SQS queue. However, this policy is not allowing the specified Lambda to send messages…
I am using AWS Simple Email Service (SES), however I want to have a very tightly restricted policy. I want to set up a policy to only be able to send emails to a domain (mydomain) from a specific ([email protected])…
Im new at Terraform and im trying to create ecsTaskExcecutionRoles for each service i have, i create a module that allows to send a list of secrets, i want to make the inline policy that allows the access optional. i…
How do I write a poilicy to have full access to a single c7g.large ec2 instance and restrict the rest of the instances?