9

I am new to AWS. I tried to create a read-only IAM user in AWS console. I am not able to find the right permission. What permission I should grant? Please advise.

1 Answer 1

15

There is an IAM Policy called ReadOnlyAccess that will (mostly) grant read-only access to all services. (I say 'mostly' because people might have different concepts of what is read-only.)

Individual services also have their own policies, such as CloudSearchReadOnlyAccess and AmazonPollyReadOnlyAccess.

To grant a user these permissions:

  • Open the user in the IAM console
  • Click Add Permissions
  • Click Attach existing policies directly
  • Select the desired policy
  • Save the permissions
4
  • I do not see ReadOnlyAccess policy in the list. :(
    – shantanuo
    Jun 15, 2022 at 8:49
  • It's there, believe me! To find it: Click on Policies, search for readonly, then sort the Policy Name column backwards. You'll find it near the top of the list (because it's near the end alphabetically). Jun 15, 2022 at 9:01
  • Got it. Thanks. When I search for "ReadOnlyAccess" I expect the exact match (if available) to be the first in the results. Am I expecting too much?
    – shantanuo
    Jun 15, 2022 at 9:13
  • got it... it's on page 2... thanks!
    – yunas
    Oct 3, 2022 at 19:40

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.