<p>If you want to create your own IAM policy, you can use the visual editor present in IAM. Using visual editor, you can construct a new policy from scratch using the very intuitive GUI.</p>

<p>Goto <strong>IAM</strong>, then <strong>policies</strong>, then use <strong>visual editor</strong>.</p>

CC BY-SA 4.0
2019-08-21T17:48:56.160Z
This does not answer the question.
Will
CC BY-SA 4.0
2019-08-22T15:30:58.450Z
The question asks how to restrict access for developers. Visual editor provides you a GUI for creating custom policies.
Vishal
CC BY-SA 4.0
2019-06-10T06:43:27.877Z
2019-06-10T06:43:27.877Z
Vishal
<p>I had to log in as root user, then access the IAM service.</p>

<p>Under policies click "Create Policy", then select "Amplify" under the Select a service.</p>

CC BY-SA 4.0
2019-04-23T12:57:32.683Z
2019-04-23T12:57:32.683Z
Ntobeko Mkhize
<p>This link detail how we can create role for providing access to applications in aws and you can grant these role to your group .</p>

<p><a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2.html" rel="nofollow noreferrer">https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2.html</a></p>

<p>Another way you can create your own policy and assign to group .</p>

<p><a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_create.html" rel="nofollow noreferrer">https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_create.html</a></p>

CC BY-SA 4.0
2019-04-23T08:10:27.037Z
Thanks, but just to clarify. I want to grant access to users (via a group), not EC2 instances. The other part of the question is how do I determine the appropriate policy to assign fromthe existing AWS policies.
Ntobeko Mkhize
CC BY-SA 4.0
2019-04-23T06:39:26.747Z
2019-04-23T06:39:26.747Z
Sandeep Chhabra
<p>I have created a user group in AWS ("developers"). Now I want to attach a policy to the group which will grant the users permission to list, create and update Amplify apps. I am struggling to determine the appropriate policy.</p>

<p>I see that the "AdministratorAccess" policy includes access to the <em>AWS Amplify</em> service, but I don't want the developers to have administrator level access. What are my options?</p>

<p>Edit:
When the specific user accesses the Amplify console the following error is displayed</p>

<pre><code>List apps call failed User: arn:aws:iam::XXXXXXXXXX:user/myUser is not authorized to perform: amplify:ListApps on resource: arn:aws:amplify:eu-west-1:XXXXXXXXXX:apps/*
</code></pre>

<amazon-web-services><aws-iam>
Find appropriate AWS policy
Ntobeko Mkhize
# Find appropriate AWS policy

(Asked by: username_0 on 2019-04-23)

I have created a user group in AWS ("developers"). Now I want to attach a policy to the group which will grant the users permission to list, create and update Amplify apps. I am struggling to determine the appropriate policy.
I see that the "AdministratorAccess" policy includes access to the AWS Amplify service, but I don't want the developers to have administrator level access. What are my options?
Edit:
When the specific user accesses the Amplify console the following error is displayed
List apps call failed User: arn:aws:iam::XXXXXXXXXX:user/myUser is not authorized to perform: amplify:ListApps on resource: arn:aws:amplify:eu-west-1:XXXXXXXXXX:apps/*

**Tags:** amazon-web-services, aws-iam


---

## 3 answers

### Answer by username_1 on 2019-06-10. Score: 1

If you want to create your own IAM policy, you can use the visual editor present in IAM. Using visual editor, you can construct a new policy from scratch using the very intuitive GUI.

Goto **IAM**, then **policies**, then use **visual editor**.

> **Comments:**
> **username_2**: This does not answer the question.  
> **username_1**: The question asks how to restrict access for developers. Visual editor provides you a GUI for creating custom policies.  

---

### Answer by username_0 on 2019-04-23. Score: 0

I had to log in as root user, then access the IAM service.

Under policies click "Create Policy", then select "Amplify" under the Select a service.


---

### Answer by username_3 on 2019-04-23. Score: -1

This link detail how we can create role for providing access to applications in aws and you can grant these role to your group .

<https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2.html>

Another way you can create your own policy and assign to group .

<https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_create.html>

> **Comments:**
> **username_0**: Thanks, but just to clarify. I want to grant access to users (via a group), not EC2 instances. The other part of the question is how do I determine the appropriate policy to assign fromthe existing AWS policies.  

---

