search

cloudtools / awacs

Python library for AWS Access Policy Language creation
BSD 2-Clause "Simplified" License
396 stars 102 forks source link

Specific support actions are not allowed in IAM Policies #124

Open michael-k opened 5 years ago

michael-k commented 5 years ago

From AWS Support's documentation:

AWS Support does not let you allow or deny access to individual actions;
therefore your policy must use the "Action": "support:*" to use the
AWS Support Center or to use the AWS Support API.

Therefore the actions in support.py seem useless if not misleading. And there's no predefined action in awacs that covers support:*.

Can the actions be used for anything else than IAM Policies? Am I missing something?