CODEWITHSUNDEEP
amazon-web-servicespermissionsamazon-iam
Stack Overflow
Stack Overflow

Reputation: 457

Export an inline user group policy in AWS

I want to make an inline policy (i.e, one that exists only in the context of an IAM permission group) a managed one (i.e, one that exists globally). Is that possible? If so, how? (I would prefer AWS GUI solutions and not CLI ones)

Upvotes: 0

Views: 444

Answers (2)

Milan Gatyás
Milan Gatyás

Reputation: 2787

I believe you are looking for a "Customer managed policy", see more at https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_managed-vs-inline.html#customer-managed-policies

You can create standalone policies that you administer in your own AWS account, which we refer to as customer managed policies. You can then attach the policies to multiple principal entities in your AWS account. When you attach a policy to a principal entity, you give the entity the permissions that are defined in the policy.

There is also a section specifically for Converting an inline policy to a managed policy

Upvotes: 1

Caldazar
Caldazar

Reputation: 3757

It is not possible to convert an inline policy to a managed policy.

What you can do is:

  1. Go to IAM - Groups
  2. Choose the group whose policy you want
  3. Go to Permissions tab
  4. Select inline policy
  5. Open it in JSON Viewer and copy the whole JSON
  6. Go to Policies
  7. Click on Create a Policy button and follow the steps. On the first page, switch from Visual editor to JSON and paste your policy

Upvotes: 1

Related Questions