IAM Advice for AWS Organization Backup

0

I am trying to configure AWS Backup Policy (Organization) from Master account and using following IAM Policy given from the AWS User Guide. But continuously getting permission error and backup failed. When I used IAM Policy Simulator, I am seeing "This action does not support resource-level permissions. Policies granting access must specify "*" in the resource element."

I am not an IAM guy, please someone advise, what I should do to fix this.

{ "Version": "2012-10-17", "Statement": [ { "Sid": "ManageBackupPolicies", "Effect": "Allow", "Action": [ "organizations:AttachPolicy", "organizations:CreatePolicy", "organizations:DeletePolicy", "organizations:DescribeAccount", "organizations:DescribeCreateAccountStatus", "organizations:DescribeEffectivePolicy", "organizations:DescribeOrganization", "organizations:DescribeOrganizationalUnit", "organizations:DescribePolicy", "organizations:DetachPolicy", "organizations:DisableAWSServiceAccess", "organizations:DisablePolicyType", "organizations:EnableAWSServiceAccess", "organizations:EnablePolicyType", "organizations:ListAccounts", "organizations:ListAccountsForParent", "organizations:ListAWSServiceAccessForOrganization", "organizations:ListCreateAccountStatus", "organizations:ListOrganizationalUnitsForParent", "organizations:ListParents", "organizations:ListPolicies", "organizations:ListPoliciesForTarget", "organizations:ListRoots", "organizations:ListTargetsForPolicy", "organizations:UpdatePolicy" ], "Resource": "*" } ] }

質問済み 2年前274ビュー
1回答
0

Are you attaching this policy to a user that is going to manage the backup at the Org level? The message "This action does not support resource-level permissions" means the action does not support resource-level permissions and requires a wildcard (*) in the Resource element of the policy. Can you elaborate more on what are you trying to achieve?

AWS
skreem
回答済み 2年前

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ