AWS Builder Center: Learn, Build and Connect with builders in the AWS community

AWS Builder Center is the official home for builders on AWS. Share and read what others are working on, follow people who inspire you, explore training and workshops, and find tools to support what you're building.

Mobile Application Deployment

Hello All,

My question is regarding policy if a developer ask for permissions for S3, Code Commit, EBS and LightSail then what all permissions should i grant him?

S3- AmazonS3FullAccess CodeCommit-AWSCodeCommitPowerUser Lightsail-LightsailExportAccess EBS- Do i need to provide EC2 full access or is there any specific permission i can provide for EBS?

Thanks, Monica

Topics: Compute Developer Tools
Tags: S3 Select AWS CodeCommit Amazon Lightsail
Language: English

rePost-User-4391565

asked 3 years ago432 views

1 Answer

Newest
Most votes
Most comments

Accepted Answer

Allowing full access allows operation.
But IAM best practice is least privilege permissions.
Therefore, we recommend creating an IAM policy that allows developers to do only what they need to do.
https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#grant-least-privilege

It is possible to create an EBS volume with EC2 full access, but if you only want to create it, you can create it by allowing "ec2:CreateVolume".
https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonec2.html

EXPERT

Riku_Kobayashi

answered 3 years ago

Riku_Kobayashi EXPERT
3 years ago
You will need to create a custom IAM policy using the instructions in this document. https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_create-console.html#access_policies_create-json-editor
rePost-User-4391565
3 years ago

If i have to give EBS permission to developer then what all permission do i have to assign them other permissions as well with EC2:CreateVolume?

Do i have to mention the Volume Size? Can you give some sample JSON code that i can use?

How much size is required for application, i have to ask developer and tell AWS ? Or i can directly specify it in JSON Code?

Relevant content

IAM Permissions for Developers
Landsamboni
asked 3 years ago
How do I create a user group with pre-defined permissions that allows developers the right access to upload their code and manage and interact with the essential parts of software being developed?
User-9875852
asked 2 years ago
S3 permissions granted to other AWS accounts in bucket policies should be restricted
rePost-User-2369579
asked 4 years ago
AWS CLI command 'aws elasticbeanstalk describe-configuration-settings' asks for 's3:CreateBucket' permissions
Anna_S
asked a year ago
How do I use an AWS SAM template to grant IAM permissions to a Lambda function?
AWS OFFICIALUpdated a month ago
How can I troubleshoot issues when granting public read access to an Amazon S3 object using a bucket policy or an object ACL?
AWS OFFICIALUpdated 3 years ago
What are the minimum IAM permissions needed to use VPC peering to set up communication between Lightsail and other AWS services?
AWS OFFICIALUpdated 2 years ago
How do I use resource-based policies with Lambda to grant permission to AWS services?
AWS OFFICIALUpdated 4 months ago
Amazon S3 vs Amazon EBS: Understanding the Key Differences
EXPERT
Job Paniagua
published 4 months ago
Unable to access the S3 bucket after the IAM user was recreated
EXPERT
Tyler
published 2 years ago

Mobile Application Deployment

Add your answer

Relevant content