File tree Expand file tree Collapse file tree 1 file changed +25
-0
lines changed
Expand file tree Collapse file tree 1 file changed +25
-0
lines changed Original file line number Diff line number Diff line change @@ -204,6 +204,31 @@ not made from the IP address 1.2.3.4.
204204These policies are standalone on their own. They need to be attached to the user
205205in order to apply them.
206206
207+ #### Create IAM Policy
208+
209+ - Admin users can create IAM policies using the ` IAM:CreatePolicy ` operation.
210+
211+ Here is AWS CLI reference to create IAM policy
212+
213+ ``` bash
214+ aws iam create-policy --policy-name org-level-unique-policy-name --policy-document file:///path/to/policy.json
215+ ```
216+
217+ Policy creation has no impact on authorization until it is attached to a user.
218+
219+ #### Attach IAM Policy
220+
221+ - Admin users can attach IAM policies to users using the ` IAM:AttachUserPolicy `
222+ operation.
223+
224+ Here is AWS CLI reference to attach IAM policy
225+
226+ ``` bash
227+ aws iam attach-user-policy --policy-arn < generated_policy_arn_from_previous_step> --user-name < tid_>
228+ ```
229+
230+ Here ` --user-name ` can be either human user id or machine user id.
231+
207232After the user has been authenticated successfully, the system gets the context
208233about the current user. This context includes metadata about users like user_id,
209234user_role (namespace_owner, regular), machine users (access keys),
You can’t perform that action at this time.
0 commit comments