SdbNavigator icon indicating copy to clipboard operation
SdbNavigator copied to clipboard

Domain list fails when IAM policy applied

Open slipperyseal opened this issue 10 years ago • 0 comments

I just spotted a limitation when using IAM policies which restrict access to domains. Obviously the root list command fails on /. Suggest adding an option to define the list path.

User (arn:aws:iam::111111111111:user/domainname) does not have permission to perform (sdb:ListDomains) on resource (arn:aws:sdb:ap-southeast-2:111111111111:domain/). Contact account owner.

Update: I added an IAM rule to allow ListDomains on * and it "works". All domains are visible but only the restricted path can be queried or updated.

slipperyseal avatar Jun 21 '14 01:06 slipperyseal