我正在编写一项IAM策略,以便从命令行界面部署EC2实例,我不想授予EC2完全访问权限。遵循最小权限原则,配置EC2实例需要哪些权限
发布于 2020-05-05 06:58:53
这取决于您是想让他们从控制台还是从CLI吃午饭。
对于控制台,根据docs的说法,以下策略适用:
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ec2:DescribeInstances",
"ec2:DescribeImages",
"ec2:DescribeKeyPairs",
"ec2:DescribeVpcs",
"ec2:DescribeSubnets",
"ec2:DescribeSecurityGroups",
"ec2:CreateSecurityGroup",
"ec2:AuthorizeSecurityGroupIngress",
"ec2:CreateKeyPair"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": "ec2:RunInstances",
"Resource": "*"
}
]
}对于命令行界面,策略显示为here。
https://stackoverflow.com/questions/61602897
复制相似问题