fourcodes-org / proof-of-concepts

2 stars 1 forks source link

56. Create the IAM role for SNS and SQS to access all the AWS resources? #114

Closed four-codes closed 1 year ago

four-codes commented 1 year ago

your SNS and SQS role name should resemble "role-sns,sqs-januo-001-env-purpose."

fourtimes commented 1 year ago

@januo-io Can there be a default policy in this case ? or Should I delete this? Image

fourtimes commented 1 year ago

Create the IAM role for SNS to access all the AWS resources using managed policy

  1. Go to the "IAM" resource.
  2. Under the resource, we have a "Roles" option.
  3. After that, click on the "create role" option. then we have to select the identity type & use case for SNS.
  4. After click on the "Next" button, We have to enter the "Role Name" in the name of role-sns-ashli-001-dev-allAccess format.
  5. Then, we have to click on the "create role" button.
  6. After creating the role, we have to add the Permissions for "AdministratorAccess".

OUTPUT:

Image

fourtimes commented 1 year ago

Create the IAM role for SNS to access all the AWS resources using Custom Policy

  1. go to the IAM resource.
  2. under the IAM resource, click on the "Roles" option.
  3. then, create the role using API gateway use case & without selecting any policies & the name of role should be role-sns-ashli-001-dev-allAccess.
  4. after creating the role, we have to open the created role.
  5. go to the Permissions Option & click on the Add Permission & click on the Attach Policies
  6. click on the create policy option.
  7. click on the policy editor for JSON option.
  8. create the custom policy for Administrator Access

    {
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": "*",
            "Resource": "*"
        }
    
    ]
    }
  9. click on the Next button & enter the policy name in the name of policy-sns-ashli-001-dev-allAccess & create the policy using the create policy button.
  10. go to the Roles menu
  11. click on the role-sns-ashli-001-dev-allAccess
  12. go to the Permissions Option & click on the Add Permission & click on the Attach Policies
  13. select the policy-sns-ashli-001-dev-allAccess policy & click on Add Permission
four-codes commented 1 year ago

perfect