hard20 pts · first answer countscloud-securityiam-policies
ForAllValues with a missing key
A policy allows tagging only with approved tag keys using this condition. A request is made with no tags at all. What happens?
"Effect": "Allow",
"Action": "ec2:CreateTags",
"Condition": {
"ForAllValues:StringEquals": { "aws:TagKeys": ["env", "owner"] }
}Discussion 0
Join free to post in the discussion.
Related questions
- Who patches the VM operating system?Cloud Engineer
- Principle of least privilegeCloud Engineer
- Protecting the root userCloud Engineer
- What HTTPS protectsCloud Engineer
- Shell access without opening port 22Cloud Engineer
- IAM user vs IAM roleCloud Engineer
- Explicit deny always winsCloud Engineer
- Nothing allowed means deniedCloud Engineer