2 Answers
- Newest
- Most votes
- Most comments
0
It is a good idea to use IAM to divide the resources that each user can access.
With the Resource policy, it is also possible to create settings to allow by user for each ARN.
https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_resource.html
0
If you want to keep all the resources in one account, consider isolating resources via tagging. You can use session tagging along with tagging of the resources to control access. Take a look at these:
- IAM tutorial: Define permissions to access AWS resources based on tags
- IAM tutorial: Use SAML session tags for ABAC
Check to see if the services and resources you plan to use support ABAC, AWS services that work with IAM.
Relevant content
- AWS OFFICIALUpdated 24 days ago
- AWS OFFICIALUpdated a year ago
- AWS OFFICIALUpdated a year ago
- AWS OFFICIALUpdated 2 years ago