Mobile Application Deployment

Hello All,

My question is regarding policy if a developer ask for permissions for S3, Code Commit, EBS and LightSail then what all permissions should i grant him?

S3- AmazonS3FullAccess CodeCommit-AWSCodeCommitPowerUser Lightsail-LightsailExportAccess EBS- Do i need to provide EC2 full access or is there any specific permission i can provide for EBS?

Thanks, Monica

Sujets

Outils de développement Calcul Stockage

Balises

AWS CodeCommit Amazon Lightsail S3 Select

Langue

English

Monica

demandé il y a un an215 vues

1 réponse

Le plus récent
Le plus de votes
La plupart des commentaires

Réponse acceptée

Allowing full access allows operation.
But IAM best practice is least privilege permissions.
Therefore, we recommend creating an IAM policy that allows developers to do only what they need to do.
https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#grant-least-privilege

It is possible to create an EBS volume with EC2 full access, but if you only want to create it, you can create it by allowing "ec2:CreateVolume".
https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonec2.html

EXPERT

Riku_Kobayashi

répondu il y a un an

Riku_Kobayashi EXPERT
il y a un an
You will need to create a custom IAM policy using the instructions in this document. https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_create-console.html#access_policies_create-json-editor
Monica
il y a un an

If i have to give EBS permission to developer then what all permission do i have to assign them other permissions as well with EC2:CreateVolume?

Do i have to mention the Volume Size? Can you give some sample JSON code that i can use?

How much size is required for application, i have to ask developer and tell AWS ? Or i can directly specify it in JSON Code?

Contenus pertinents

Crash avec Lightsail
rePost-User-7022435
demandé il y a un an
account is currently blocked and not recognized as a valid account
Yves Boah
demandé il y a un an
Mon loadbalancer ne marche pas comme il devrait
zerros
demandé il y a un an
Memory limit for Lambda
plesaint
demandé il y a 7 mois
Pourquoi est-ce que je reçois l'erreur « Insufficient Lake Formation permissions on <Amazon S3 location> » (Autorisations insuffisantes de Lake Formation sur <Emplacement Amazon S3>) dans Amazon Athena alors que mon utilisateur ou mon rôle IAM dispose des autorisations S3 requises ?
AWS OFFICIELA mis à jour il y a 2 ans
J'essaie d'exporter un instantané d'Amazon RDS for MySQL vers Amazon S3, mais j’obtiens une erreur. Pourquoi cela se produit-il ?
AWS OFFICIELA mis à jour il y a un an
Comment résoudre l'erreur « The final policy size is bigger than the limit » de Lambda ?
AWS OFFICIELA mis à jour il y a 2 ans
Comment puis-je configurer ElastiCache for Redis et y accéder depuis mon instance Lightsail ?
AWS OFFICIELA mis à jour il y a 3 ans