amazon web services - AWS API Gateway IAM Policy Role in Docs Fails in Simulation -


the aws iam policy docs aws (shown here) indicate following policy gives full access role hit api gateway

{   "version": "2012-10-17",   "statement": [     {       "effect": "allow",       "action": [         "apigateway:*"       ],       "resource": [         "*"       ]     }   ] } 

when simulating policy api gateway target, policy denies access. seems direct contradiction provided documentation.

iam policy simulation result

amazon's permissions model divides api gateway permissions 2 services:

  • amazon api gateway - permissions clients, action execute-api:invoke.
  • manage - api gateway - admin permissions configuring api gateway, has crud actions fitting apigateway:* spec.

enter image description here

the policy have applies manage api gateway service, simulation should work if select that.

this same separation visible in regular iam policy wizard, "manage - api gateway" sorts bottom of service list can't see it.

enter image description here


Comments

Popular posts from this blog

mysql - FireDac error 314 - but DLLs are in program directory -

git - How to list all releases of public repository with GitHub API V3 -

c++ - Getting C2512 "no default constructor" for `ClassA` error on the first parentheses of constructor for `ClassB`? -