Which KMS permissions does ACM require? Unicorn Meta Zoo #1: Why another podcast? Announcing the arrival of Valued Associate #679: Cesar Manara Come Celebrate our 10 Year Anniversary!What are the steps needed to set up and use security for AWS command line tools?I can't upload server certificate on AWS IAMAWS IAM role for use within a classroomIAM role switching on an EC2 host without using “source_profile”Allow other AWS services to invoke Lambda using IAMAWS Elastic Beanstalk ACM SSL certificate installation without load balancingAWS Custom Console viewDo I need an SSL certificate on my EC2 server even when I have a load balancer?Can you use IAM roles to connect from a non-AWS application to AWS services?Share IAM Policy across accounts in Organizations
Does Prince Arnaud cause someone holding the Princess to lose?
Is there an efficient way for synchronising audio events real-time with LEDs using an MCU?
Determinant of a matrix with 2 equal rows
Will I lose my paid in full property
My admission is revoked after accepting the admission offer
When does Bran Stark remember Jamie pushing him?
Why does Java have support for time zone offsets with seconds precision?
What is the evidence that custom checks in Northern Ireland are going to result in violence?
How would it unbalance gameplay to rule that Weapon Master allows for picking a fighting style?
Could a cockatrice have parasitic embryos?
In search of the origins of term censor, I hit a dead end stuck with the greek term, to censor, λογοκρίνω
Why doesn't the university give past final exams' answers?
Where to find documentation for `whois` command options?
Will I be more secure with my own router behind my ISP's router?
Is there a possibility to generate a list dynamically in Latex?
TV series episode where humans nuke aliens before decrypting their message that states they come in peace
RIP Packet Format
Arriving in Atlanta (after US Preclearance in Dublin). Will I go through TSA security in Atlanta to transfer to a connecting flight?
Was there ever a LEGO store in Miami International Airport?
How can I wire a 9-position switch so that each position turns on one more LED than the one before?
Raising a bilingual kid. When should we introduce the majority language?
Why is water being consumed when my shutoff valve is closed?
false 'Security alert' from Google - every login generates mails from 'no-reply@accounts.google.com'
Writing a T-SQL stored procedure to receive 4 numbers and insert them into a table
Which KMS permissions does ACM require?
Unicorn Meta Zoo #1: Why another podcast?
Announcing the arrival of Valued Associate #679: Cesar Manara
Come Celebrate our 10 Year Anniversary!What are the steps needed to set up and use security for AWS command line tools?I can't upload server certificate on AWS IAMAWS IAM role for use within a classroomIAM role switching on an EC2 host without using “source_profile”Allow other AWS services to invoke Lambda using IAMAWS Elastic Beanstalk ACM SSL certificate installation without load balancingAWS Custom Console viewDo I need an SSL certificate on my EC2 server even when I have a load balancer?Can you use IAM roles to connect from a non-AWS application to AWS services?Share IAM Policy across accounts in Organizations
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
I would like to have ACM manage a TLS certificate that I upload in the console. However, the AWS role I am assuming can access KMS actions, but only from a certain set of IPv4 addresses. I will probably need to add an exception for a set of KMS actions, but I would rather not just put "*" in my policy.
Which set of KMS actions is the minimum required for what I need?
amazon-web-services amazon-iam
asked Apr 17 at 11:08
Toon SpinToon Spin
61
New contributor
Toon Spin is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
I would like to have ACM manage a TLS certificate that I upload in the console. However, the AWS role I am assuming can access KMS actions, but only from a certain set of IPv4 addresses. I will probably need to add an exception for a set of KMS actions, but I would rather not just put "*" in my policy.
Which set of KMS actions is the minimum required for what I need?
amazon-web-services amazon-iam
asked Apr 17 at 11:08
Toon SpinToon Spin
61
New contributor
Toon Spin is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
I would like to have ACM manage a TLS certificate that I upload in the console. However, the AWS role I am assuming can access KMS actions, but only from a certain set of IPv4 addresses. I will probably need to add an exception for a set of KMS actions, but I would rather not just put "*" in my policy.
Which set of KMS actions is the minimum required for what I need?
amazon-web-services amazon-iam
asked Apr 17 at 11:08
Toon SpinToon Spin
61
New contributor
Toon Spin is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
I would like to have ACM manage a TLS certificate that I upload in the console. However, the AWS role I am assuming can access KMS actions, but only from a certain set of IPv4 addresses. I will probably need to add an exception for a set of KMS actions, but I would rather not just put "*" in my policy.
Which set of KMS actions is the minimum required for what I need?
amazon-web-services amazon-iam
amazon-web-services amazon-iam
asked Apr 17 at 11:08
Toon SpinToon Spin
61
New contributor
Toon Spin is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked Apr 17 at 11:08
Toon SpinToon Spin
61
New contributor
Toon Spin is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked Apr 17 at 11:08
Toon SpinToon Spin
61
New contributor
Toon Spin is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked Apr 17 at 11:08
Toon SpinToon Spin
61
asked Apr 17 at 11:08
Toon SpinToon Spin
61
61
New contributor
Toon Spin is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
Toon Spin is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Toon Spin is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Toon Spin is a new contributor. Be nice, and check out our Code of Conduct.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f963450%2fwhich-kms-permissions-does-acm-require%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Toon Spin is a new contributor. Be nice, and check out our Code of Conduct.
Toon Spin is a new contributor. Be nice, and check out our Code of Conduct.
Toon Spin is a new contributor. Be nice, and check out our Code of Conduct.
Toon Spin is a new contributor. Be nice, and check out our Code of Conduct.
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f963450%2fwhich-kms-permissions-does-acm-require%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
