Skip to content

Instantly share code, notes, and snippets.

@Yapcheekian

Yapcheekian/aws_assume_role.json

Created May 24, 2021 07:16
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save Yapcheekian/cbd265a33a7c06b7de9c8eef25d01c5e to your computer and use it in GitHub Desktop.
Save Yapcheekian/cbd265a33a7c06b7de9c8eef25d01c5e to your computer and use it in GitHub Desktop.
Download ZIP
Restrict who can assume role in another AWS account
Raw
aws_assume_role.json
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Principal": {
"AWS": "arn:aws:iam::xxx:root"
},
"Action": "sts:AssumeRole",
"Condition": {
"StringEquals": {
"aws:PrincipalTag/group": "xxx"
}
}
}
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment