Difference between revisions of "AWS IAM role"
Jump to navigation
Jump to search
↑ https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html
| Line 34: | Line 34: | ||
* Read [[Creating a role to delegate permissions to an IAM user]]: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user.html | * Read [[Creating a role to delegate permissions to an IAM user]]: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user.html | ||
* [[Understand the difference between service role and service-linked role]] <ref>https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html</ref> | * [[Understand the difference between service role and service-linked role]] <ref>https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html</ref> | ||
| + | * [[How to use trust policies with IAM roles]] | ||
== See also == | == See also == | ||
Revision as of 12:07, 18 August 2023
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html
Contents
Commands
aws iam list-rolesaws iam create-roleaws iam put-role-policyaws iam get-roleaws iam create-service-linked-roleaws iam update-role
Errors
STS
Related
- AWS service roles: https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html
- AWS Policies: AWS trust policy
Iam:GetRolerds-monitoring-role- AWS IAM federation
- Switch role to acounts:
OrganizationAccountAccessRole KarpenterNode- IAM Roles for Service Accounts (IRSA)
- AWS policy:
AdministratorAccess - GCP roles
- IAM roles for EC2 instances
- ecsInstanceRole
- eks.amazonaws.com/role-arn: arn:aws:iam::012345678912:role/AmazonEKS_EBS_CSI_DriverRole
Inherited from node- Using service-linked roles for Amazon ECS
Activities
- Create a role for SAML federation https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-idp_saml.html
- Read https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_compare-resource-policies.html
- Read Creating a role to delegate permissions to an IAM user: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user.html
- Understand the difference between service role and service-linked role [1]
- How to use trust policies with IAM roles
See also
- AWS IAM role, AWS service roles, AWS IAM Roles Anywhere: [
list-roles | get-role | create-role | put-role-policy | create-service-linked-role | attach-role-policy | update-role | add-role-to-instance-profile ], aws ec2 describe-iam-instance-profile-associations ], IAM roles for EC2 instances,AWSServiceRoleForAutoScaling
Advertising:
