Running a python script on AWS which is executable by a single IAM user only

Question

I have a python script whose boto3 operations/function calls must be restricted to a single IAM user which has extremely limited access. My understanding is that the execution of the script depends on the configured profile for AWS CLI. Would that sort of restriction have to done inside the script?

You could probably verify boto3 session for that particular IAM user? — Azher Aleem
– Azher Aleem, Commented Nov 26, 2021 at 7:27

Bert Blommers · Accepted Answer · 2021-11-26 10:02:46Z

2

The script could be created as a AWS Lambda function. Only the single IAM user should then be given access to execute that function.

Another script can be written to invoke that Lambda (boto3.client("lambda").invoke()). Anyone can execute that script, but anyone but the right user will get an AccessPermissions error.

Note:

There are limitations on the execution time/memory allocation for AWS lambdas, which might make this a bad solution for your current script. That really depends on what your script exactly does.

answered Nov 26, 2021 at 10:02

Bert Blommers

2,1532 gold badges15 silver badges21 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Running a python script on AWS which is executable by a single IAM user only

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related