{

    "Version": "2012-10-17",

    "Statement": [

        {

            "Effect": "Allow",

            "Action": [

                "ec2:DescribeSecurityGroups",

                "ec2:DescribeTags"

            ],

            "Resource": "*"

        },

        {

            "Effect": "Allow",

            "Action": [

                "ec2:AuthorizeSecurityGroupIngress",

                "ec2:RevokeSecurityGroupIngress",

                "ec2:AuthorizeSecurityGroupEgress",

                "ec2:RevokeSecurityGroupEgress"

            ],

            "Resource": [

                "arn:aws:ec2:region:111122223333:security-group/*"

            ]

        }

    ]

}


위의권한은 IAM 예시에 나와있지 않은 권한이라 추가하였습니다. 

'AWS > IAM' 카테고리의 다른 글

[IAM policy] only allow region access  (0) 2017.05.16
[IAM policy] deny region access  (0) 2017.01.17
[IAM policy] region access  (0) 2017.01.16

+ Recent posts