I have more than 10 lambdas. I am managing the infrastructure using sam template. I have defined Function resources for these lambdas. There are some common permissions required by these lambdas - cloudwatch, xray. Each lambda again require it's own…
I am trying to use the AWS s3 commands to list and get objects from the terminal. I already configurated the credentials with the private key of the IAM user, and I added the policy in the bucket as well,…
Whenever I try to delete an object with the Javascript SDK, I get an error saying access denied. However, I can upload files correctly. Can someone help me with this? My policies for the bucket: { "Version": "2012-10-17", "Statement": […
I am learning how AWS SCPs work, and the explanation I heard from the course I'm going through was this: you start off with a default "Permit everything" SCP policy in the root of the organization, and then remove permissions…
I have a bucket "mybucket" in which there is a folder "myfolder". In the same bucket there is also another folder "notmyfolder". This is the policy that I think "should" work. { "Statement": [ { "Action": [ "s3:GetObject" ], "Condition":…
I'm trying to make an AWS Secrets Manager resource to be accesed only by certain user by writing a resource policy for the Secrets Manager but I can't make it work, I have tried a policy with Allow and Deny…
Is it possible to limit s3 bucket to lowercase files/directories only? Some downstream systems are case insensitive so I want to prevent any issues. There's a Lambda workaround, but is it possible to specify this requirement as a bucket policy?…
I would like to reference the arn of a "going-to-be-created" Redis ElastiCache cluster in a cloud formation template. This is the ElasticacheCluster template (tested and working in cloudFormation) ElasticacheCluster: Type: AWS::ElastiCache::CacheCluster Properties: AutoMinorVersionUpgrade: 'true' Engine: redis CacheNodeType: cache.t2.micro NumCacheNodes: '1'…