search

Answers4AWS / graffiti-monkey

Goes around tagging things
Apache License 2.0
255 stars 88 forks source link

Graffiti Monkey IAm Policy #34

Open Chris-Pr opened 7 years ago

Chris-Pr commented 7 years ago

Does anyone have a successful IAM policy for Graffiti Monkey they can share?

I've tried a few but I am clearing missing something as still getting 404 from boto.

paulwakeford commented 7 years ago

Can you share the full command you are using and the error?

dpalomin commented 7 years ago

I'm using the policy below. 


{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "ec2:CreateTags",
                "ec2:DeleteTags",
                "ec2:Describe*",
                "ec2:ModifySnapshotAttribute",
                "ec2:ModifyVolumeAttribute",
                "ec2:ResetSnapshotAttribute"
            ],
            "Resource": "*"
        }
    ]
}
ivica-k commented 5 years ago

This is the policy i'm using, and it's heavily based on what you shared here.

{
    "Version": "2012-10-17",
    "Statement": [{
        "Sid": "SYS1509",
        "Effect": "Allow",
        "Action": [
            "elasticbeanstalk:AddTags",
            "elasticbeanstalk:RemoveTags",
            "ec2:CreateTags",
            "ec2:Describe*",
            "ec2:ModifySnapshotAttribute",
            "ec2:ModifyVolumeAttribute",
            "ec2:ResetSnapshotAttribute"
        ],
        "Resource": "*"
    }]
}