Reputation: 552
In AWS there are Service-Linked roles. It looks like over time AWS may have changed their policy regarding how these are identified, and the easiest way I can tell now is by using the Path
for each role, with the /aws-service-role
indicator in the path.
I am hoping to identify the older Service-Linked roles, but as far as I can tell, one of the only ways to do that is to looke for /service-role
(not /aws-service-role
) in the Path
OR look in the policy to see if the Path
for the policy says either /service-role
or /aws-service-role
Is this a good way to identify older roles that are service-linked, are there any better ways?
Also what is the difference between /service-role
and /aws-service-role
in the Path
of either the role itself, or the policy attached to it?
I can't find any documentation in AWS around what the difference between the Path
may indicate.
Upvotes: 1
Views: 918