Mobile Application Deployment

Hello All,

My question is regarding policy if a developer ask for permissions for S3, Code Commit, EBS and LightSail then what all permissions should i grant him?

S3- AmazonS3FullAccess CodeCommit-AWSCodeCommitPowerUser Lightsail-LightsailExportAccess EBS- Do i need to provide EC2 full access or is there any specific permission i can provide for EBS?

Thanks, Monica

주제

개발자 도구 컴퓨팅 스토리지

태그

AWS CodeCommit 아마존 Lightsail S3 선택

언어

English

Monica

질문됨 일 년 전215회 조회

1개 답변

최신
최다 투표
가장 많은 댓글

수락된 답변

Allowing full access allows operation.
But IAM best practice is least privilege permissions.
Therefore, we recommend creating an IAM policy that allows developers to do only what they need to do.
https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#grant-least-privilege

It is possible to create an EBS volume with EC2 full access, but if you only want to create it, you can create it by allowing "ec2:CreateVolume".
https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonec2.html

전문가

Riku_Kobayashi

답변함 일 년 전

Riku_Kobayashi 전문가
일 년 전
You will need to create a custom IAM policy using the instructions in this document. https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_create-console.html#access_policies_create-json-editor
Monica
일 년 전

If i have to give EBS permission to developer then what all permission do i have to assign them other permissions as well with EC2:CreateVolume?

Do i have to mention the Volume Size? Can you give some sample JSON code that i can use?

How much size is required for application, i have to ask developer and tell AWS ? Or i can directly specify it in JSON Code?

Mobile Application Deployment

관련 콘텐츠