Skip to content

Instantly share code, notes, and snippets.

@0xdabbad00
Created March 26, 2019 22:02
Show Gist options
  • Save 0xdabbad00/5d1d5fd619a20ba2ee899c56f8d6787f to your computer and use it in GitHub Desktop.
Save 0xdabbad00/5d1d5fd619a20ba2ee899c56f8d6787f to your computer and use it in GitHub Desktop.
WARNING: Only tested in a test account, beware, this could break things.
{
"Version": "2012-10-17",
"Statement": [
{
"Action": [
"apigateway:*",
"autoscaling:*",
"cloudtrail:*",
"cloudwatch:*",
"cloudformation:*",
"dynamodb:*",
"elasticloadbalancing:*",
"ec2:*",
"health:*",
"iam:*",
"kms:*",
"rds:*",
"s3:*",
"sts:*",
"trustedadvisor:*"
],
"Effect": "Allow",
"Resource": "*"
},
{
"Effect": "Deny",
"Action": "*",
"Resource": "*",
"Condition": {
"Bool": {
"aws:SecureTransport": false
}
}
},
{
"Effect": "Deny",
"Action": "*",
"Resource": "*",
"Condition": {
"StringLike": {
"aws:PrincipalARN": "arn:aws:iam::*:root"
}
}
}
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment