2回答
- 新しい順
- 投票が多い順
- コメントが多い順
0
Hi,
if you add
"tag:GetResources"
The Resource Group will get displayed without any errors.
Here is the full policy:
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "ResourceGroupList",
"Effect": "Allow",
"Action": [
"resource-groups:ListGroupResources",
"resource-groups:ListGroups",
"resource-groups:GetGroupQuery",
"resource-groups:GetTags",
"tag:GetResources"
],
"Resource": "*"
},
{
"Sid": "ResourceGroupView",
"Effect": "Allow",
"Action": [
"resource-groups:GetGroup",
"resource-groups:SearchResources"
],
"Resource": "*",
"Condition": {
"StringEqualsIgnoreCase": {
"aws:ResourceTag/cs-namespace": "test1"
}
}
}
]
}
Hope this helps!
-randy
回答済み 5年前
0
Thanks Randy,
I managed to achieve my goal with your help.
Here's my final policy:
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "ResourceGroupList",
"Effect": "Allow",
"Action": [
"resource-groups:ListGroups",
"tag:GetResources"
],
"Resource": "*"
},
{
"Sid": "ResourceGroupView",
"Effect": "Allow",
"Action": [
"resource-groups:ListGroupResources",
"resource-groups:GetGroup",
"resource-groups:SearchResources",
"resource-groups:GetGroupQuery",
"resource-groups:GetTags"
],
"Resource": "*",
"Condition": {
"StringEqualsIgnoreCase": {
"aws:ResourceTag/cs-namespace": "test1"
}
}
}
]
}
Cheers.
回答済み 5年前