All Content tagged with IAM Policies
You manage access in AWS by creating policies and attaching them to IAM identities (users, groups of users, or roles) or AWS resources.
Content language: English
Filter content
Select tags to filter
Sort by
Sort by most recent
1791 results
The IAM policy BedrockAgentCoreFullAccess has the permission below, granting full read access to S3. This is not expected. The permission was added in Version 14. Prior to that version, the access was...
AWS OFFICIALUpdated 5 hours ago0 votes32 views
Discovered an exposed AWS access key? Before you rotate anything, size the risk. This eight-step guide walks you through mapping the key's permissions and exposure window, classifying the severity, ch...
AWS OFFICIALUpdated 5 hours ago0 votes28 views
This is the first of three articles on managing exposed AWS access keys, starting with prevention, then evaluating the risk when a key is exposed, and recovering after a compromise. See the end of thi...
I am testing an identity-policy draft with IAM SimulateCustomPolicy before
deployment. A minimal Allow for sqs:SendMessage returns implicitDeny when it
uses ArnEquals with ec2:SourceInstanceARN, despi...
Hi AWS Builders Community,
I am facing a persistent issue while updating the SQS Access Policy for integrating Amazon Selling Partner API (SP-API) push notifications in the ap-south-1 (Mumbai) region...
On an AWS account I control, one Amazon Bedrock AgentCore Policy `CreatePolicyEngine` call in `sa-east-1` using temporary credentials from the assumed IAM role `sentinela-agentcore-v1-provisioner` ret...
I’m evaluating this authentication flow:
1. An IAM user with virtual MFA signs in through AWS CLI `aws login`.
2. A Python SDK uses the resulting temporary credentials to call STS `AssumeRole`, suppl...
### SESv2 SendEmail returns AccessDeniedException although IAM Policy Simulator allows the request
This is a follow-up to an earlier resolved question about the default configuration set. An AWS re:P...
Summary
Please add a native Export and Import capability for IAM Policies in the AWS console, scoped to accounts within the same AWS Organization. This would allow practitioners to replicate a policy...
asked 16 days ago
Tolu Okuboyejo - AWSEXPERT
published 17 days ago0 votes87 views
When an Amazon Redshift cluster slows down, CloudWatch shows the symptom—high CPU and commit-queue pressure—but not which queries caused it or how to fix them. Answering that traditionally required a ...
I am troubleshooting an AWS STS AssumeRole request that consistently fails with:
AccessDenied: not authorized to perform sts:SetSourceIdentity
The source is an IAM user using short-lived credentials...
I'm building a FastAPI service that redirects authenticated users into the MWAA Airflow UI, scoped to the DAGs their team should see. I want to confirm the right IAM structure before building it out.
...
asked a month ago