AWS re:Post을(를) 사용하면 다음에 동의하게 됩니다. 이용 약관

Show only selected servers in session manager

0

Hi,

I am currently using session manager to provide access to all servers via session manager which is working as intended.

The issue comes where I got another set of users who require access to certain servers.

Is there anyway, only the servers that is required will be shown up in the session manager. I tried to edit the ec2:DescribeInstances but I just can't get it working.

Would require assistance with this.

1개 답변
0

Unfortunately, it is not possible to configure an IAM policy to allow viewing only of specific EC2 instances.

The reason for this is that most display actions, such as ec2:DescribeInstances, do not support "resource-level permissions. This means that you can only set either "show all EC2 instances" or "don't show all EC2 instances". https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonec2.html#amazonec2-actions-as-permissions

It seems that it is possible to set up a policy such that only certain EC2 sessions are initiated. https://docs.aws.amazon.com/systems-manager/latest/userguide/getting-started-restrict-access-examples.html#restrict-access-example-instances

profile picture
답변함 12일 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인