![]() In this example, principal "AWS": "*" tells IAM that any user in the world can assume that role as long as they know the account ID + role name. In my testing, "Service": "ec2.amazonaws.com" is sufficiently permissive to allow the instance_profile to work without allowing global accesses. |
||
---|---|---|
.. | ||
assets | ||
docs | ||
intro | ||
layouts | ||
upgrade-guides | ||
.gitignore | ||
404.html.erb | ||
community.html.erb | ||
downloads.html.erb | ||
index.html.erb | ||
robots.txt | ||
sitemap.xml.builder |