I am trying to apply a policy for an identity pool in AWS. I am using awc-cli to set up the policy but it constantly gives me this exception from the title: An error occurred (InvalidRequestExcept...

Some actions that involve IAM permissions may return a Client.UnauthorizedOperation responses.

Is there a way in AWS to give readonly permissions to all services via a central policy? Currently, am forced to do this per service, like for IAM below - { "Version": "2012-10-17&q...

I am trying to create a state function with terraform. First I create a policy and assign it to an existing role processing_lambda_role. resource "aws_iam_role_policy" "sfn_policy&qu...

I am using the Key Management service (KMS) in AWS and am currently setting up key policies. I created two roles KmsUser and KmsAdmin and attached the following key policy to my CMK: { "Version"...

I am new to AWS, but from my understanding a role contains both a permissions policy and a trust policy. The permissions policy seems pretty straight forward - What you can do. IE: "iam:CreatePol...

I have a policy defined in terraform for AWS resources like so: device-status-policy = <<EOF {"Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": "iot:Connect", "Resource...

When creating a scope-down policy for users in an AWS Transfer SFTP server, one can use the policy variables ${transfer:HomeFolder} and ${transfer:HomeDirectory} in that policy, according to the do...