'In AWS, is it possible to add session policy to a service-linked role when a service is triggered e.g. ECS instance role for a batch job?
I can start a assumed role with session policy (using aws cli or boto3) which is able to restrict users only accessing their own folders in a s3 bucket under a AWS account. However when a user call AWS batch service to perform batch job which involving read/write user's folder, The job can access whole s3 bucket. I expect the job can only access user's own folder in the s3 bucket. My question is that is there any way to add user-specific policy to the service-linked role? Thanks.
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|
