amazon web services - Restrict RDS users to region -
i trying create policy can restrict users access different region rds. want give them admin access 1 region i.e. ap-southeast-1.
i have created policies they're not working singapore region, us-east region.
why working us-east not singapore?
policy examples:
{ "version": "2012-10-17", "statement": [ { "sid": "stmt----------", "effect": "allow", "action": [ "rds:*" ], "condition": { "stringequals": { "ec2:region": "ap-southeast-1" } }, "resource": [ "*" ] } ] } { "version": "2012-10-17", "statement": [ { "sid": "stmt----------", "action": [ "rds:*", "cloudwatch:describealarms", "cloudwatch:getmetricstatistics", "ec2:describeaccountattributes", "ec2:describeavailabilityzones", "ec2:describesecuritygroups", "ec2:describesubnets", "ec2:describevpcs", "sns:listsubscriptions", "sns:listtopics", "logs:describelogstreams", "logs:getlogevents" ], "effect": "allow", "resource": "arn:aws:rds:ap-southeast-1:*" } ] } { "version": "2012-10-17", "statement": [ { "sid": "stmt1454649600000", "effect": "allow", "action": [ "*" ], "resource": [ "arn:aws:rds:ap-southeast-1:account number:*" ] } ] }
try 1 .. below code works me.
{ "version": "2012-10-17", "statement": [ { "sid": "stmt145591112222", "action": "rds:*", "effect": "allow", "resource": "arn:aws:rds:ap-southeast-1:acc_id:db:*" } ] }
Comments
Post a Comment