Managing permissions to IAM roles centrally

0

Do we have any way using which we can assign policies to IAM roles in multiple AWS accounts centrally?

3 Respostas
2

No, there is no such mechanism, with which you can assign policies to IAM roles in multiple accounts.

Closest thing you can do is described here at Using identity-based policies (IAM policies) for AWS Organizations.

Within an account, you can create customer managed policy and use that in as many role as you want but that can't be shared across the multiple accounts.

Since your use case is not mentioned here, I could think of role chaining as well, where one role can assume another role but that would require trust relationship to be updated for target account role. Refer Role chaining and https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html#iam-term-role-chaining.

Hope this helps.

Comment here if you have additional questions, happy to help.

Abhishek

profile pictureAWS
ESPECIALISTA
respondido há 8 meses
0

Yes AWS IAM Identity Center helps you securely create or connect your workforce identities and manage their access centrally across AWS accounts and applications. IAM Identity Center is the recommended approach for workforce authentication and authorization on AWS for organizations of any size and type.

You can learn more about AWS Identity Center, in AWS documentation. --> https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html

In addition, you can read my blog on Strengthening Security in AWS Control Tower through Centralized IAM Identity Center. --> https://www.awsyarn.com/strengthening-security-in-aws-control-tower-through-centralized-iam-identity-center/

profile picture
respondido há 8 meses
profile pictureAWS
ESPECIALISTA
avaliado há 8 meses
profile pictureAWS
ESPECIALISTA
avaliado há 8 meses
0
profile pictureAWS
ESPECIALISTA
kentrad
respondido há 8 meses

Você não está conectado. Fazer login para postar uma resposta.

Uma boa resposta responde claramente à pergunta, dá feedback construtivo e incentiva o crescimento profissional de quem perguntou.

Diretrizes para responder a perguntas