Skip to content

Instantly share code, notes, and snippets.

@toddmichael
Created January 30, 2019 15:27
Show Gist options
  • Save toddmichael/d5f80b7fe564a5ec0c542f92c333017f to your computer and use it in GitHub Desktop.
Save toddmichael/d5f80b7fe564a5ec0c542f92c333017f to your computer and use it in GitHub Desktop.
Vault policy for issuing dynamic AWS creds

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "iam:AttachUserPolicy", "iam:CreateAccessKey", "iam:CreateUser", "iam:DeleteAccessKey", "iam:DeleteUser", "iam:DeleteUserPolicy", "iam:DetachUserPolicy", "iam:ListAccessKeys", "iam:ListAttachedUserPolicies", "iam:ListGroupsForUser", "iam:ListUserPolicies", "iam:PutUserPolicy", "iam:RemoveUserFromGroup" ], "Resource": [ "arn:aws:iam::ACCOUNT-ID-WITHOUT-HYPHENS:user/vault-*" ] } ] }

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment