amazon web services - AWS API Gateway IAM Policy Role in Docs Fails in Simulation -
the aws iam policy docs aws (shown here) indicate following policy gives full access role hit api gateway
{ "version": "2012-10-17", "statement": [ { "effect": "allow", "action": [ "apigateway:*" ], "resource": [ "*" ] } ] }
when simulating policy api gateway target, policy denies access. seems direct contradiction provided documentation.
amazon's permissions model divides api gateway permissions 2 services:
- amazon api gateway - permissions clients, action
execute-api:invoke
. - manage - api gateway - admin permissions configuring api gateway, has crud actions fitting
apigateway:*
spec.
the policy have applies manage api gateway service, simulation should work if select that.
this same separation visible in regular iam policy wizard, "manage - api gateway" sorts bottom of service list can't see it.
Comments
Post a Comment