CODEWITHSUNDEEP
amazon-web-servicesaws-lambdaamazon-iamregion
david
david

Reputation: 1

block user to provision resources not in standard region (AWS)

I want to know any possibility to avoid users to provision any resources in all AWS regions, except one for example ap-southeast-1.

I want nobody can provision any resources in all the AWS regions, only one region which is ap-southeast-1.

Thanks

Upvotes: 0

Views: 197

Answers (1)

Atul Sharma
Atul Sharma

Reputation: 10645

Yes, you can create an IAM policy and attach it to users whose regions you want to restrict.

{
  "Version": "2012-10-17",
  "Statement": [{
    "Effect": "Deny",
    "Action": "*",
    "Resource": "*",
    "Condition": {
      "StringNotEquals": {
        "aws:RequestedRegion": [
          "ap-southeast-1"
        ]
      }
    }
  }]
}

This policy will restrict access to ap-southeast-1 only.

Upvotes: 2

Related Questions