2 Respuestas
- Más nuevo
- Más votos
- Más comentarios
0
Hi,
if you add
"tag:GetResources"
The Resource Group will get displayed without any errors.
Here is the full policy:
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "ResourceGroupList",
"Effect": "Allow",
"Action": [
"resource-groups:ListGroupResources",
"resource-groups:ListGroups",
"resource-groups:GetGroupQuery",
"resource-groups:GetTags",
"tag:GetResources"
],
"Resource": "*"
},
{
"Sid": "ResourceGroupView",
"Effect": "Allow",
"Action": [
"resource-groups:GetGroup",
"resource-groups:SearchResources"
],
"Resource": "*",
"Condition": {
"StringEqualsIgnoreCase": {
"aws:ResourceTag/cs-namespace": "test1"
}
}
}
]
}
Hope this helps!
-randy
respondido hace 5 años
0
Thanks Randy,
I managed to achieve my goal with your help.
Here's my final policy:
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "ResourceGroupList",
"Effect": "Allow",
"Action": [
"resource-groups:ListGroups",
"tag:GetResources"
],
"Resource": "*"
},
{
"Sid": "ResourceGroupView",
"Effect": "Allow",
"Action": [
"resource-groups:ListGroupResources",
"resource-groups:GetGroup",
"resource-groups:SearchResources",
"resource-groups:GetGroupQuery",
"resource-groups:GetTags"
],
"Resource": "*",
"Condition": {
"StringEqualsIgnoreCase": {
"aws:ResourceTag/cs-namespace": "test1"
}
}
}
]
}
Cheers.
respondido hace 5 años
Contenido relevante
- OFICIAL DE AWSActualizada hace 2 años
- OFICIAL DE AWSActualizada hace 2 años