amazon web services - IAM allowing a user to access everything for ec2 on a region -
i'm trying allow 1 user actions on us-west-2, policy have.
{ "version": "2012-10-17", "statement": [{ "effect": "allow", "action": ["ec2:*"], "resource": "arn:aws:ec2:us-west-2:837625274593:*" } ] }
i got account number "owner" parameter on instance, not sure if it.
{ "statement": [ { "sid": "stmt1375943389569", "action": "ec2:*", "effect": "allow", "resource": "*", "condition": { "stringequals": { "ec2:region": "us-west-2" } } } ] }
that should enable user have access ec2 in us-west-2 region
Comments
Post a Comment