AWS permissions documentation fixes: add missing permissions needed to attach and detach managed policies to IAM users, add missing comma, remove extraneous comma
This commit is contained in:
parent
3324d4e023
commit
4ee6b04405
|
@ -154,17 +154,19 @@ The root credentials need permission to perform various IAM actions. These are t
|
||||||
{
|
{
|
||||||
"Effect": "Allow",
|
"Effect": "Allow",
|
||||||
"Action": [
|
"Action": [
|
||||||
|
"iam:AttachUserPolicy",
|
||||||
"iam:CreateAccessKey",
|
"iam:CreateAccessKey",
|
||||||
"iam:CreateUser",
|
"iam:CreateUser",
|
||||||
"iam:DeleteAccessKey",
|
"iam:DeleteAccessKey",
|
||||||
"iam:DeleteUser"
|
"iam:DeleteUser",
|
||||||
"iam:DeleteUserPolicy",
|
"iam:DeleteUserPolicy",
|
||||||
|
"iam:DetachUserPolicy",
|
||||||
"iam:ListAccessKeys",
|
"iam:ListAccessKeys",
|
||||||
"iam:ListAttachedUserPolicies",
|
"iam:ListAttachedUserPolicies",
|
||||||
"iam:ListGroupsForUser",
|
"iam:ListGroupsForUser",
|
||||||
"iam:ListUserPolicies",
|
"iam:ListUserPolicies",
|
||||||
"iam:PutUserPolicy",
|
"iam:PutUserPolicy",
|
||||||
"iam:RemoveUserFromGroup",
|
"iam:RemoveUserFromGroup"
|
||||||
],
|
],
|
||||||
"Resource": [
|
"Resource": [
|
||||||
"arn:aws:iam::ACCOUNT-ID-WITHOUT-HYPHENS:user/vault-*"
|
"arn:aws:iam::ACCOUNT-ID-WITHOUT-HYPHENS:user/vault-*"
|
||||||
|
|
Loading…
Reference in New Issue