Help us improve the AWS re:Post Knowledge Center by sharing your feedback in a brief survey. Your input can influence how we create and update our content to better support your AWS journey.
API Gateway IAM Actions Permissions Definition
A customer would like to understand why the IAM actions defined for API Gateway do not follow the same patterns as with other services. We only show the actions GET, POST, DELETE, PUT, etc.. and do not expose the underlying actions for things like CreateRestAPI. This prevents them from getting very granular with defining least permissions for their roles. Why is API Gateway different here?
- Language
- English
- Newest
- Most votes
- Most comments
The IAM policy would need to specify the relevant HTTP verb for the action against the resource they need to modify: API reference - https://docs.aws.amazon.com/apigateway/api-reference/resource/ Examples - https://docs.aws.amazon.com/apigateway/latest/developerguide/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies
This should still allow them to get granular with their permissions though, what exactly does the policy need to do?
Relevant content
- asked 6 years ago
