Answers: <p>If you want to create your own IAM policy, you can use the visual editor present in IAM. Using visual editor, you can construct a new policy from scratch using the very intuitive GUI.</p>
  
  <p>Goto <strong>IAM</strong>, then <strong>policies</strong>, then use <strong>visual editor</strong>.</p>
  
Answers: CC BY-SA 4.0
Answers: 2019-08-21T17:48:56.160Z
Answers: This does not answer the question.
Answers: Will
Answers: CC BY-SA 4.0
Answers: 2019-08-22T15:30:58.450Z
Answers: The question asks how to restrict access for developers. Visual editor provides you a GUI for creating custom policies.
Answers: Vishal
Answers: CC BY-SA 4.0
Answers: 2019-06-10T06:43:27.877Z
Answers: 2019-06-10T06:43:27.877Z
Answers: Vishal
Answers: <p>I had to log in as root user, then access the IAM service.</p>
  
  <p>Under policies click "Create Policy", then select "Amplify" under the Select a service.</p>
  
Answers: CC BY-SA 4.0
Answers: 2019-04-23T12:57:32.683Z
Answers: 2019-04-23T12:57:32.683Z
Answers: Ntobeko Mkhize
Answers: <p>This link detail how we can create role for providing access to applications in aws and you can grant these role to your group .</p>
  
  <p><a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2.html" rel="nofollow noreferrer">https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2.html</a></p>
  
  <p>Another way you can create your own policy and assign to group .</p>
  
  <p><a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_create.html" rel="nofollow noreferrer">https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_create.html</a></p>
  
Answers: CC BY-SA 4.0
Answers: 2019-04-23T08:10:27.037Z
Answers: Thanks, but just to clarify. I want to grant access to users (via a group), not EC2 instances. The other part of the question is how do I determine the appropriate policy to assign fromthe existing AWS policies.
Answers: Ntobeko Mkhize
Answers: CC BY-SA 4.0
Answers: 2019-04-23T06:39:26.747Z
Answers: 2019-04-23T06:39:26.747Z
Answers: Sandeep Chhabra
Body: <p>I have created a user group in AWS ("developers"). Now I want to attach a policy to the group which will grant the users permission to list, create and update Amplify apps. I am struggling to determine the appropriate policy.</p>
  
  <p>I see that the "AdministratorAccess" policy includes access to the <em>AWS Amplify</em> service, but I don't want the developers to have administrator level access. What are my options?</p>
  
  <p>Edit:
  When the specific user accesses the Amplify console the following error is displayed</p>
  
  <pre><code>List apps call failed User: arn:aws:iam::XXXXXXXXXX:user/myUser is not authorized to perform: amplify:ListApps on resource: arn:aws:amplify:eu-west-1:XXXXXXXXXX:apps/*
  </code></pre>
  
Tags: <amazon-web-services><aws-iam>
Title: Find appropriate AWS policy
UserDisplayName: Ntobeko Mkhize
ThreadText: # Find appropriate AWS policy
  
  (Asked by: username_0 on 2019-04-23)
  
  I have created a user group in AWS ("developers"). Now I want to attach a policy to the group which username_2 grant the users permission to list, create and update Amplify apps. I am struggling to determine the appropriate policy.
  
  I see that the "AdministratorAccess" policy includes access to the *AWS Amplify* service, but I don't want the developers to have administrator level access. What are my options?
  
  Edit:
  When the specific user accesses the Amplify console the following error is displayed
  
  ```
  List apps call failed User: arn:aws:iam::XXXXXXXXXX:user/myUser is not authorized to perform: amplify:ListApps on resource: arn:aws:amplify:eu-west-1:XXXXXXXXXX:apps/*
  
  ```
  
  **Tags:** amazon-web-services, aws-iam
  
  
  ---
  
  ## 3 answers
  
  ### Answer by username_1 on 2019-06-10. Score: 1
  
  If you want to create your own IAM policy, you can use the visual editor present in IAM. Using visual editor, you can construct a new policy from scratch using the very intuitive GUI.
  
  Goto **IAM**, then **policies**, then use **visual editor**.
  
  > **Comments:**
  > **username_2**: This does not answer the question.  
  > **username_1**: The question asks how to restrict access for developers. Visual editor provides you a GUI for creating custom policies.  
  
  ---
  
  ### Answer by username_0 on 2019-04-23. Score: 0
  
  I had to log in as root user, then access the IAM service.
  
  Under policies click "Create Policy", then select "Amplify" under the Select a service.
  
  
  ---
  
  ### Answer by username_3 on 2019-04-23. Score: -1
  
  This link detail how we can create role for providing access to applications in aws and you can grant these role to your group .
  
  <https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2.html>
  
  Another way you can create your own policy and assign to group .
  
  <https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_create.html>
  
  > **Comments:**
  > **username_0**: Thanks, but just to clarify. I want to grant access to users (via a group), not EC2 instances. The other part of the question is how do I determine the appropriate policy to assign fromthe existing AWS policies.  
  
  ---
  
  