QBusiness Pro APP deployment pre-requisites on IAM role

Question

Team, When I am about to create a QBusiness web App, got stuck with Service Role creation in the first stage. Could you please assist me what are the policies it should have and if it should be "Customer Managed" ?

Please instruct me if any referrence doc on the same.

Thanks for assistance

Please instruct me if any referrence doc on the same.

Thanks for assistance

Varunprakash Shanmugam · Answer

1. Start by creating a **customer-managed policy** with permissions for the specific services your web app will use, like EC2, S3, RDS, Lambda, etc.
2. Grant **read/write access** only to the necessary resources to keep security tight.
3. You can reference AWS's **IAM best practices documentation** for setting up roles and permissions, ensuring your policy adheres to the principle of least privilege.
4. Use policies like **AmazonS3FullAccess** or **AmazonEC2FullAccess** if needed, but customize them as per your app’s exact needs.

QBusiness Pro APP deployment pre-requisites on IAM role

Add your answer

Relevant content