Skip to content

Instantly share code, notes, and snippets.

@adamcrosby
Last active August 29, 2015 14:05
Show Gist options
  • Save adamcrosby/3610059b481e4b1ed54c to your computer and use it in GitHub Desktop.
Save adamcrosby/3610059b481e4b1ed54c to your computer and use it in GitHub Desktop.
GroupPolicy("AssumeRole_CustomerAdmins", """{“Version”:”2012-10-17”, “Statement”:[{“Effect”o}]}"""
#or, even better:
GroupPolicy("AssumeRole_CustomerAdmins",
"""
{
"Version":"2012-10-17",
"Statement":[
{
"Effect":"Deny",
"Action":[
"iam:CreateAccessKey","iam:DeleteAccessKey","iam:ListAccessKeys","iam:ResyncMFADevice","iam:UpdateAccessKey"
],
"NotResource":[
"arn:aws:iam::{!s}:user/${aws:username}"
]
}
]
}
""")
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment