How to use IAM to provide access to users efficiently and securely

0

Hi, we have a couple of developers who are working on various functionalities. We want to give each developer some required permissions on the resources they are creating. How can we do it easily? Instead of adding the resources manually every time to the policy whenever created, is there any better way?

2개 답변
0
수락된 답변
profile pictureAWS
전문가
kentrad
답변함 8달 전
profile pictureAWS
전문가
검토됨 8달 전
0

Hi,

the simplest way is to use a naming convention like https://cjrequena.com/2020-06-05/aws-naming-conventions-en but where you would call $Environment to first position in the name and give it a different value for each of your developers.

Then, you will authorize in IAM policies with Resource:"service: DevPrefix*" to allow your devs to do what they want on their resources (i.e. those whose names start with their prefix)

AWS Iam Identity Center and AWS Organizations are the next step but they are more involving but go much further (multi-account)

Best,

Didier

profile pictureAWS
전문가
답변함 8달 전
  • Thanks. Can you share some good blog post on these as I didnt understand fully what you tried to say as I am not that advanced in IAM.

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠