![AWS IAM 策略仅允许用户编辑一个特定的安全组](https://linux22.com/image/756455/AWS%20IAM%20%E7%AD%96%E7%95%A5%E4%BB%85%E5%85%81%E8%AE%B8%E7%94%A8%E6%88%B7%E7%BC%96%E8%BE%91%E4%B8%80%E4%B8%AA%E7%89%B9%E5%AE%9A%E7%9A%84%E5%AE%89%E5%85%A8%E7%BB%84.png)
我正在尝试允许用户修改一个特定安全组的入站规则。
这是我尝试过的方法。我以为这很简单,但实际上却行不通。我还需要提供哪些其他权限?
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "VisualEditor0",
"Effect": "Allow",
"Action": [
"ec2:RevokeSecurityGroupIngress",
"ec2:AuthorizeSecurityGroupIngress"
],
"Resource": "arn:aws:ec2:*:1234567890:security-group/sg-0115448f9fcb00g3c"
},
{
"Sid": "VisualEditor1",
"Effect": "Allow",
"Action": "ec2:DescribeSecurityGroups",
"Resource": "*"
}
]
}
未授权查看安全组。