Amazon Web Services (AWS) on Aamnah - Frontend Web Developer

IAM User policy to edit DNS records for selected domains

Sun, 27 Jun 2021 00:00:00 +0500

Create the following IAM policy and attach it to the user/group

 1{
 2  "Version": "2012-10-17",
 3  "Statement": [
 4    {
 5      "Effect": "Allow",
 6      "Action": [
 7        "route53:GetHostedZone",
 8        "route53:GetHostedZoneCount",
 9        "route53:ListHostedZones",
10        "route53:ListHostedZonesByName",
11        "route53:ListResourceRecordSets",
12        "route53:ChangeResourceRecordSets"
13      ],
14      "Resource": "arn:aws:route53:::hostedzone/<ZONE_ID>"
15    },
16    {
17      "Effect": "Allow",
18      "Action": [
19        "route53:GetHostedZone",
20        "route53:GetHostedZoneCount",
21        "route53:ListHostedZones",
22        "route53:ListHostedZonesByName",
23        "route53:ListResourceRecordSets",
24        "route53:ChangeResourceRecordSets"
25      ],
26      "Resource": "arn:aws:route53:::hostedzone/<ZONE_ID>"
27    }
28  ]
29}

Above will only work by going directly to the domain management URL. If you were giving access to someone else, you’ll have to provide them with the direct URL for every domain (as well as create their IAM user)

Upgrading an Amazon LightSail instance

Mon, 24 Feb 2020 00:00:00 +0500

Create a snapshot
Note and detach the static IP
Note the ports that are open (Networking)
Create a new instance with the snapshot
Re-attach the static IP
Re-open the ports

Giving an account access to your AWS resources

Fri, 14 Dec 2018 13:51:53 +0500

tl;dr

Create an IAM Role for Another AWS account. Attach permission policies to tailor the level of access you want that account to have.
Create an IAM Policy that allows switching roles and assign it to the IAM Role you create
- The user must be logged in with an IAM account in order to switch role. (Root AWS accounts don’t even show the option to switch roles)
- If an External ID is required as part of the role, you can not switch roles using the management console
Copy the link that the user can use to switch to the role and share it with the other account https://signin.aws.amazon.com/switchrole?account=account_id_number&roleName=role_name&displayName=text_to_display

Stuff you need:

12-digit Account ID of the your own AWS account
12-digit Account ID of the user you want to give access to
Role ARN (to be used in the IAM policy, will be created)
Switch Role link (to share with the other account, will be created)

IAM Policy (Grant a user permission to switch to the IAM Role)

NOTES: