Difference between revisions of "AWS managed policies"
Jump to navigation
Jump to search
↑ https://docs.aws.amazon.com/singlesignon/latest/userguide/permissionsetpredefined.html
| (30 intermediate revisions by 2 users not shown) | |||
| Line 1: | Line 1: | ||
* https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_managed-vs-inline.html | * https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_managed-vs-inline.html | ||
| + | * https://docs.aws.amazon.com/aws-managed-policy/latest/reference/policy-list.html | ||
| + | * <code>[[arn:aws:iam::aws:policy/service-role/]]</code> | ||
== Examples == | == Examples == | ||
| − | * <code>[[ReadOnlyAccess]]</code> | + | * <code>[[ReadOnlyAccess]]: [[arn:aws:iam::aws:policy/]]ReadOnlyAccess</code> |
| − | * <code>[[ViewOnlyAccess]]</code> | + | * <code>[[ViewOnlyAccess]]: arn:aws:iam::aws:policy/ViewOnlyAccess</code> |
| + | [[EKS]]: | ||
| + | * <code>[[arn:aws:iam::aws:policy/AmazonEKSClusterPolicy]]</code>. As of Nov 2023 there is an additional of 12 AWS managed policies for EKS. | ||
| + | * <code>[[AmazonEKS_CNI_Policy]]</code> | ||
| + | |||
| + | ECS: | ||
| + | * [[AmazonECSTaskExecutionRolePolicy]] | ||
| + | |||
| + | [[Amazon Inspector]] | ||
* <code>[[AmazonInspectorReadOnlyAccess]]</code> | * <code>[[AmazonInspectorReadOnlyAccess]]</code> | ||
* <code>[[AmazonInspector2ReadOnlyAccess]]</code> | * <code>[[AmazonInspector2ReadOnlyAccess]]</code> | ||
| − | + | * <code>[[AdministratorAccess]]: [[arn:aws:iam::aws:policy/AdministratorAccess]]</code> | |
| − | * <code>[[AdministratorAccess]] | ||
* <code>[[IAMUserChangePassword]]</code> | * <code>[[IAMUserChangePassword]]</code> | ||
* <code>[[SecurityAudit]]</code> | * <code>[[SecurityAudit]]</code> | ||
* <code>[[ViewBilling]]</code> | * <code>[[ViewBilling]]</code> | ||
| + | |||
| + | == [[AWS managed Job functions]] == | ||
| + | <ref>https://docs.aws.amazon.com/singlesignon/latest/userguide/permissionsetpredefined.html</ref> | ||
| + | {{job functions TOC}} | ||
== Related terms == | == Related terms == | ||
| + | * [[AWS managed Job functions]] | ||
* [[Inline policies]] | * [[Inline policies]] | ||
* [[AWS policy]] | * [[AWS policy]] | ||
| + | * <code>[[AWSServiceCatalogAdminFullAccess]]</code> | ||
| + | * <code>[[aws_ssoadmin_managed_policy_attachment]]</code> | ||
| + | * [[IAM roles]]: <code>[[aws iam create-role]]</code> | ||
| + | * <code>[[aws iam attach-role-policy]]</code> | ||
| + | * <code>[[AWSSecretsManagerReadWriteAccess managed policy]]</code> | ||
== See also == | == See also == | ||
Latest revision as of 13:37, 30 August 2024
- https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_managed-vs-inline.html
- https://docs.aws.amazon.com/aws-managed-policy/latest/reference/policy-list.html
arn:aws:iam::aws:policy/service-role/
Examples[edit]
ReadOnlyAccess: arn:aws:iam::aws:policy/ReadOnlyAccessViewOnlyAccess: arn:aws:iam::aws:policy/ViewOnlyAccess
EKS:
arn:aws:iam::aws:policy/AmazonEKSClusterPolicy. As of Nov 2023 there is an additional of 12 AWS managed policies for EKS.AmazonEKS_CNI_Policy
ECS:
AdministratorAccess: arn:aws:iam::aws:policy/AdministratorAccessIAMUserChangePasswordSecurityAuditViewBilling
AWS managed Job functions[edit]
Billing: arn:aws:iam::aws:policy/DataScientistDatabaseAdministratorNetworkAdministratorReadOnlyAccessSecurityAudit:arn:aws:iam::aws:policy/SecurityAuditSupportUserSystemAdministrator
Related terms[edit]
- AWS managed Job functions
- Inline policies
- AWS policy
AWSServiceCatalogAdminFullAccessaws_ssoadmin_managed_policy_attachment- IAM roles:
aws iam create-role aws iam attach-role-policyAWSSecretsManagerReadWriteAccess managed policy
See also[edit]
aws iam [ list-policies | list-attached-user-policies | list-group-policies | list-role-policies | put-group-policy | put-role-policy | put-user-policy | create-policy | attach-role-policy ]- AWS managed policies:
ReadOnlyAccess, ViewOnlyAccess, AdministratorAccess, SecurityAudit, ViewBilling, AmazonEKSClusterPolicy, List of AWS policies - AWS policies: managed policies, Job functions, AWS trust policy, AWS Service Control Policy (SCP), Resource-based policies, Identity-based policies,
"Resource":, Job function, AWS Policy Generator,s3:, lambda:, cloudwatch:, AWSSecretsManagerReadWriteAccess
Advertising:
