amazon web services - Restrict RDS users to region -


i trying create policy can restrict users access different region rds. want give them admin access 1 region i.e. ap-southeast-1.

i have created policies they're not working singapore region, us-east region.

why working us-east not singapore?

policy examples:

{     "version": "2012-10-17",     "statement": [         {             "sid": "stmt----------",             "effect": "allow",             "action": [                 "rds:*"             ],             "condition": {                 "stringequals": {                     "ec2:region": "ap-southeast-1"                 }             },             "resource": [                 "*"             ]         }     ] }   {     "version": "2012-10-17",     "statement": [         {             "sid": "stmt----------",             "action": [                 "rds:*",                 "cloudwatch:describealarms",                 "cloudwatch:getmetricstatistics",                 "ec2:describeaccountattributes",                 "ec2:describeavailabilityzones",                 "ec2:describesecuritygroups",                 "ec2:describesubnets",                 "ec2:describevpcs",                 "sns:listsubscriptions",                 "sns:listtopics",                 "logs:describelogstreams",                 "logs:getlogevents"             ],             "effect": "allow",             "resource": "arn:aws:rds:ap-southeast-1:*"         }     ] }  {     "version": "2012-10-17",     "statement": [         {             "sid": "stmt1454649600000",             "effect": "allow",             "action": [                 "*"             ],             "resource": [                 "arn:aws:rds:ap-southeast-1:account number:*"             ]         }     ] } 

try 1 .. below code works me.

{   "version": "2012-10-17",   "statement": [     {       "sid": "stmt145591112222",       "action": "rds:*",       "effect": "allow",       "resource": "arn:aws:rds:ap-southeast-1:acc_id:db:*"      }   ] } 

Comments

Popular posts from this blog

routing - AngularJS State management ->load multiple states in one page -

python - GRASS parser() error -

json - Gson().fromJson(jsonResult, Myobject.class) return values in 0's -