Is it possible to set up an IAM account for 3rd party to look after the specific resources?

0

I would like to assign the admin permission for specific resources (EC2, RDS, volumes, snapshot), how to group these resources from administration's perspective? This resource group will also need use some components in my VPC (subnet, routing tables, security groups, ...), is it possible to isolate them from my other services?

1개 답변
0
수락된 답변

This is a good resource you can refer

When third parties require access to your organization's AWS resources, you can use roles to delegate access to them. For example, a third party might provide a service for managing your AWS resources. With IAM roles, you can grant these third parties access eiito your AWS resources without sharing your AWS security credentials. Instead, the third party can access your AWS resources by assuming a role that you create in your AWS account. To learn whether principals in accounts outside of your zone of trust (trusted organization or account) have access to assume your roles, see What is IAM Access Analyzer?.

Providing access to AWS accounts owned by third parties - https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_common-scenarios_third-party.html

Also check on **Establishing your best practice AWS environment **- https://aws.amazon.com/organizations/getting-started/best-practices/

profile pictureAWS
전문가
답변함 2년 전
profile picture
전문가
검토됨 10달 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠