61 questions
- Bountied 0
- Unanswered
- Frequent
- Score
- Trending
- Week
- Month
- Unanswered (my tags)
0
votes
1
answer
51
views
Restrict S3 bucket Access to all the Roles except specific Role
I have around 150 roles in my AWS Account. I have created a new S3 bucket under existing bucket
Primary-Bucket/New-Bucket
I wanted to restrict access to New-Bucket for all other roles except couple of ...
3
votes
1
answer
271
views
AWS Service IAM Roles - do they allow cross-account access by default (unless prohibited)?
AWS Service IAM Roles, including built-in ones, seem to often have trust policies like this, that specify no limits on the Source ARN or the Source Account of whatever service is trying to assume the ...
0
votes
0
answers
132
views
Is CDK's auto-generated AssumeRolePolicy sufficient, or should I specify a condition for specific ARN(s)?
I've been working with CDK for a bit, and haven't had any reason to modify any of the default roles/policies that are auto-generated when I create resources like lambdas or step functions. However, I ...
0
votes
1
answer
292
views
aws SSM-SessionManagerRunShell permission setup error
I have defined the policy for a role in aws as:
Statement":[
{
"Effect": "Allow",
"Action": [
"ssm:TerminateSession",
"...
1
vote
1
answer
323
views
Race Condition When Creating Self-Assuming IAM Role in CloudFormation
I'm facing a race condition when creating an IAM role in AWS CloudFormation that has a trust policy allowing it to assume itself (sts:AssumeRole). The issue arises because the role needs to reference ...
1
vote
0
answers
340
views
AWS lambda:InvokeFunction AccessDeniedException
I am trying to call a python lambda function from within another lambda function using:
client = boto3.client('lambda')
response =
client.invoke(FunctionName=arn,InvocationType='RequestResponse',
...
0
votes
1
answer
337
views
Where to locate AWS instance profile data to make the relevant roles show up in the EC2 instance?
I am trying to add a role to an EC2 instance in AWS but the role doesn't show up. Then I saw that in AWS troubleshooting it says "If the IAM roles and instance profiles have different names, then ...
2
votes
0
answers
557
views
Adding a secondary service account (IRSA) to trust relationship role
I have a pretty standard trust relationship for a role defined (and is working) as such:
{
"Version": "2012年10月17日",
"Statement": [
{
"Sid&...
0
votes
0
answers
83
views
AWS lambda give permission to assume role
I want to use role assume in a AWS lambda function.
I have the follow template.yml
AWSTemplateFormatVersion: '2010-09-09'
Transform: AWS::Serverless-2016年10月31日
Parameters:
Role1:
Type: String
...
1
vote
0
answers
494
views
AWS Go SDK V2: assuming different roles concurrently
I'm learning to write microservices in Go and I have created an API endpoint using Gin. My use case is that this endpoint receives an AWS role and then assumes it to access some AWS resource.
I found ...
1
vote
1
answer
380
views
errors from API gateway revealing internal details of roles and lambda
I have an API in the API gateway, backed by a lambda function. Errors e.g. if the lambda function is running with a role not privileged to invoke lambda function are revealed directly in the API ...
0
votes
1
answer
393
views
AWS MSK connector role configuration
I'm creating a Neo4jSource for kafka on a aws Msk to connect with a Neo4j Cluster on AWS.
I have the custom plugin created, but when I start to configure the connector on the tab "Access ...
2
votes
1
answer
838
views
How use AWS IAM Role for java spring boot app that was deployed using ec2 instance
So, I'm new to cloud engineering and I wanted to deploy a java spring boot app on ec2 instance. And I have to use IAM Role for accessing S3 bucket. I wanted to know how it works. Can just do an API ...
0
votes
0
answers
489
views
How to retrieve a secret value accessible only from a role?
I need to access a secret coming from a different account from my user "X-app-pr-user", to the user is attached a role "cross-account-secret-read" that gives the permission to read ...
5
votes
3
answers
8k
views
AWS Elastic Beanstalk Sample App not able to use Role to obtain required permissions for Managed Updates
I am going through their sample app tutorial here: https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/GettingStarted.html and even though I am able to get a working app from Step 1, I consistently ...