(Optional) For Role description, enter a description. On the Review page, for Role name, enter workspaces_DefaultRole. On the Add tags (optional) page, add tags if needed. Such conflicts could block certain necessary Permissions boundary because of the potential for conflicts with the policies that areĪttached to this role. Under Set permissions boundary, we recommend that you not use a On the Attach permissions policies page, select the AWS managed policies AmazonWorkSpacesServiceAccess and Under Select type of trusted entity, choose Another AWS account.įor Account ID, enter your account ID with no hyphens or spaces.įor Options, do not specify multi-factor authentication (MFA). In the navigation pane on the left, choose Roles. Sign in to the AWS Management Console and open the IAM console at. To create the workspaces_DefaultRole role WorkSpace ARNĪ WorkSpace ARN has the syntax shown in the following example. WorkSpaces, bundles, IP groups, and directories. You control access to your WorkSpaces resourcesīy either allowing or denying permissions to use the API actions that are specified in theĪction element of your IAM policy statement. Use the Amazon Resource Name (ARN) of the resource. To specify an WorkSpaces resource in the Resource element of the policy statement, } Specify WorkSpaces resources in an IAM policy You can also use the IAM Policy Simulator to test whetherĪ policy would allow or deny a specific request to AWS. You can find the WorkSpaces-specific resources,Īctions, and condition context keys for use in IAM permission policies at Actions, Resources, and Condition Keys forįor a tool that helps you create IAM policies, see the AWS Policy Generator. WorkSpaces also creates an IAM role, workspaces_DefaultRole, which allows the WorkSpacesįor more information about IAM, see Identity and Access Follow the instructions in Adding permissions to a user (console) in the IAM User Guide.įor more information about IAM policies, see Policies and Permissions in the IAM User Guide guide. (Not recommended) Attach a policy directly to a user or add a user to a user group. Follow the instructions in Creating a role for an IAM user in the IAM User Guide.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |