Affected police which is marked for retirement, throws error when trying to edit

0

Following the AWS mail that policies that are using retired policies to be modified to use fine grained actions, Our account had 2 policies that are not due for modification and out of 2 I was able to modify only one. The policy named AwsSSOOnlinePolicy (not sure it is AWS default policy type) is listed under "Manage New IAM Actions" with "aws-portal:ModifyAccount" as Deprecated IAM actions, but when trying to edit shown with no JSON content ot policy does not exist.

preguntada hace 10 meses169 visualizaciones
1 Respuesta
0

AwsSSOOnlinePolicy doesn't seem to be AWS Managed Policy, if this is not required or not being used, you can copy it's json content and create new one making sure no retired IAM actions are in it.

Click the policy, go to Entities attached, if there is none, you can safely delete it.

AWS managed SSO policy that are available:

Enter image description here

profile pictureAWS
EXPERTO
respondido hace 10 meses

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas