How to provide Data level Access to S3

Question

I have a scenario where in after creating relevant Service based roles for all IAM users as to which services can be accessed , I now have to add additional security at Tag level or individual bucket level.

Eg - If "A" user has access to S3 and EMR and "B " user has access to S3 , Redshift and I have X, Y , Z Buckets in my account .

How do I have A only access to X , Y and B only access to Z bucket . In future If I add 100 more users , I need to create 100 more policies , any alternative way or how to address this.

Answer 1

Hello Bharat,

You can create a group policy and add all the IAMs you wish to give access (S3 buckets). Just give the group policy the access to the S3 buckets.

Next, if you have 10 or 100 other IAM roles requiring this access, all you'll have to do is add them to this group.

Answer 2

You can create IAM groups and assign policy to it. In case u want to add more users you can select a group in which you want to add that user and the the group policy will automatically get assigned to the user

Comments

Hello Vijay! I hope you are doing good. Please register to Edureka Community and then answer to get more points and rewards.