标签[amazon-iam]

AWS Identity and Access Management(IAM)使您可以安全地控制用户对AWS服务和资源的访问。 使用IAM,您可以创建和管理AWS用户和组,并使用权限来允许和拒绝他们对AWS资源的权限

0
0回复
09

AWS角色策略:Terraform:创建IAM角色时出错。MalformedPolicyDocument:已禁止字段资源

I am trying for "IAM permissions for Fargate tasks pulling Amazon ECR images".我正在尝试“提取 Amazon ECR 映像的 Fargate 任务的 IAM 权限”。 For that I have used follow
0
0回复
23

botocore.errorfactory.AccessDeniedException:调用RunTask操作时发生错误(AccessDeniedException)

The Lambda function subject to this case should execute an ecs:RunTask but fails with the following error:受此情况影响的 Lambda 函数应该执行 ecs:RunTask 但失败并显示以下错误
0
0回复
07

Databricks:无需挂载即可访问s3存储桶数据的方法

I am a newbie in AWS.我是 AWS 的新手。 I am looking if there are any ways to communicate or connect to s3 bucket from databricks without mounting.我正在寻找是否有任何
0
1回复
24

API_CONFIGURATION_ERROR为AWS::Serverless::Api使用AWS_IAM授权器时

I am trying to set up a private API with a single lambda function using a sam template, but whatever I do the API gateway logs API_CONFIGURATION_ERROR
0
0回复
14

AWSCopilot-将导入的策略附加到任务角色

I'm trying to use CloudFormation AddOn template in the following scenario:我正在尝试在以下场景中使用 CloudFormation AddOn 模板: Service 1 creates an SNS Topic and a
0
1回复
12

错误:错误列出SNS主题的标签,而策略授予该arn的权限

I have the below policy attached to user:我将以下策略附加到用户:{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action
2
0回复
22

如何找到可以访问S3存储桶的所有资源

I have an S3 bucket, and I want to know which AWS resources have permission to access it (security audit).我有一个 S3 存储桶,我想知道哪些 AWS 资源有权访问它(安全审计)。 There
0
1回复
27

如何让AWSSageMaker可供组织外的人使用?

I am setting up SageMaker for a group outside my organization, and wondering how I provide access to SageMaker Studio (and any dependent AWS resources
1
1回复
19

IAM用户限制在区域内创建实例

I want to create a IAM group and attach a policy so that any users who will be added to that group can only launch resources in ap-south region.我想创建一个
0
1回复
31

Terraform覆盖AWS托管策略

My request seems simple and yet I can't realize it with Terraform.我的要求看似简单,但我无法通过 Terraform 实现。 I want to create a new AWS Policy based on SecurityAud
1
1回复
28

为什么像S3(arn:aws:s3:::)这样的IAM角色语句不适用于SQS等其他AWS资源?

I have been successfully putting IAM role statements in my serverless.yml for S3 access for some time and assumed everything would work similarly when
1
1回复
41

如何在ElasticBeanstalkCloudformation模板中为IAM用户配置对ECR的访问?

I have elastic beanstalk template as following.我有弹性豆茎模板如下。 I am using multi-container docker.我正在使用多容器 docker。 So I pushed my image to ECR separately.所
-1
0回复
23

使用terraform和AWSSecretManager轮换AWSIAM访问密钥并通知主机

I have a requirement, where I want to automatically rotate AWS IAM users access keys and secret keys using secrets manager and terraform.我有一个要求,我想使用秘密
0
1回复
28

IAM角色未显示在aws控制台的修改IAM角色页面中

I created an IAM role using the aws console and attached AmazonS3FullAccess policy.我使用 aws 控制台创建了一个 IAM 角色并附加了 AmazonS3FullAccess 策略。 When I spun up a
1
2回复
27

AWSIAM角色到期

On expiry of IAM roles: IAM 角色到期时: What is the logic for IAM roles to expire, when you need them for longer.当您需要更长时间时,IAM 角色到期的逻辑是什么。 I really cannot
0
1回复
39

EKS集群中的多账户节点

There is a need to attach instances from different third-part AWS accounts to the EKS cluster(for expenses reducing reasons) in our account.需要将来自不同第三方
0
0回复
12

如何使用StringLikeOR构造条件

My goal is to allow read access to some resources and modify access to some resources based on the tag of those resources.我的目标是允许对某些资源的读取访问权限并根据这些资源的标
2
1回复
28

路由应用程序时如何以编程方式在IAM用户之间切换?

Is it possible to implement such logic when you want different IAM users to handle various routes in your code?当您希望不同的 IAM 用户在您的代码中处理各种路由时,是否可以实现此类逻辑?
0
1回复
32

AmazonSP-API不能扮演我自己的角色?

I'm trying to connect to the Amazon Selling Partners API (SP-API) using the node.js library and am coming across an extremely odd error which seems to
0
2回复
35

从SAM中的模板创建IAM角色

I am trying to add an IAM role to an already existing template that allows certain access to a bucket from an external source (snowflake)我正在尝试将 IAM 角色

1 2 3 4 5 6 7 8 9 10 下一页