AWS SDK를 사용한 IAM 코드 예시
AWS SDK를 사용한 IAM 코드 예시
다음 코드 예시는 AWS 소프트웨어 개발 키트(SDK)로 IAM을 사용하는 방법을 보여줘요.
출처: 문서
본문
- Basics (기초) 는 서비스 안에서 필수 작업을 수행하는 방법을 보여주는 코드 예시예요.
- Actions (작업) 은 더 큰 프로그램의 코드 발췌문이며 컨텍스트 안에서 실행해야 해요. 작업은 개별 서비스 함수를 호출하는 방법을 보여주지만, 관련 시나리오에서 컨텍스트 안의 작업을 볼 수 있어요.
- Scenarios (시나리오) 는 서비스 안의 여러 함수를 호출하거나 다른 AWS 서비스와 결합해 특정 작업을 수행하는 방법을 보여주는 코드 예시예요.
AWS SDK 개발자 가이드와 코드 예시의 전체 목록은 이 서비스를 AWS SDK와 함께 사용을 참고하세요. 이 항목에는 시작하기와 이전 SDK 버전에 대한 세부 정보도 포함돼요.
IAM
Basics (기초)
- Hello IAM
- Learn the basics (기본 배우기)
Actions (작업) — 다음 IAM 작업들: AddClientIdToOpenIdConnectProvider, AddRoleToInstanceProfile, AddUserToGroup, AttachGroupPolicy, AttachRolePolicy, AttachUserPolicy, ChangePassword, CreateAccessKey, CreateAccountAlias, CreateGroup, CreateInstanceProfile, CreateLoginProfile, CreateOpenIdConnectProvider, CreatePolicy, CreatePolicyVersion, CreateRole, CreateSAMLProvider, CreateServiceLinkedRole, CreateUser, CreateVirtualMfaDevice, DeactivateMfaDevice, DeleteAccessKey, DeleteAccountAlias, DeleteAccountPasswordPolicy, DeleteGroup, DeleteGroupPolicy, DeleteInstanceProfile, DeleteLoginProfile, DeleteOpenIdConnectProvider, DeletePolicy, DeletePolicyVersion, DeleteRole, DeleteRolePermissionsBoundary, DeleteRolePolicy, DeleteSAMLProvider, DeleteServerCertificate, DeleteServiceLinkedRole, DeleteSigningCertificate, DeleteUser, DeleteUserPermissionsBoundary, DeleteUserPolicy, DeleteVirtualMfaDevice, DetachGroupPolicy, DetachRolePolicy, DetachUserPolicy, EnableMfaDevice, GenerateCredentialReport, GenerateServiceLastAccessedDetails, GetAccessKeyLastUsed, GetAccountAuthorizationDetails, GetAccountPasswordPolicy, GetAccountSummary, GetContextKeysForCustomPolicy, GetContextKeysForPrincipalPolicy, GetCredentialReport, GetGroup, GetGroupPolicy, GetInstanceProfile, GetLoginProfile, GetOpenIdConnectProvider, GetPolicy, GetPolicyVersion, GetRole, GetRolePolicy, GetSamlProvider, GetServerCertificate, GetServiceLastAccessedDetails, GetServiceLastAccessedDetailsWithEntities, GetServiceLinkedRoleDeletionStatus, GetUser, GetUserPolicy, ListAccessKeys, ListAccountAliases, ListAttachedGroupPolicies, ListAttachedRolePolicies, ListAttachedUserPolicies, ListEntitiesForPolicy, ListGroupPolicies, ListGroups, ListGroupsForUser, ListInstanceProfiles, ListInstanceProfilesForRole, ListMfaDevices, ListOpenIdConnectProviders, ListPolicies, ListPolicyVersions, ListRolePolicies, ListRoleTags, ListRoles, ListSAMLProviders, ListServerCertificates, ListSigningCertificates, ListUserPolicies, ListUserTags, ListUsers, ListVirtualMfaDevices, PutGroupPolicy, PutRolePermissionsBoundary, PutRolePolicy, PutUserPermissionsBoundary, PutUserPolicy, RemoveClientIdFromOpenIdConnectProvider, RemoveRoleFromInstanceProfile, RemoveUserFromGroup, ResyncMfaDevice, SetDefaultPolicyVersion, TagRole, TagUser, UntagRole, UntagUser, UpdateAccessKey, UpdateAccountPasswordPolicy, UpdateAssumeRolePolicy, UpdateGroup, UpdateLoginProfile, UpdateOpenIdConnectProviderThumbprint, UpdateRole, UpdateRoleDescription, UpdateSamlProvider, UpdateServerCertificate, UpdateSigningCertificate, UpdateUser, UploadServerCertificate, UploadSigningCertificate
Scenarios (시나리오) — Build and manage a resilient service, Configure container service connectivity, Create a container task for the serverless launch type, Create a rest API with function proxy integration, Create read-only and read-write users, Creating a container service for virtual machine instances, Creating a managed monitoring workspace, Creating a monitoring dashboard with function name as a variable, Creating your first serverless function, Get started with serverless data warehouses, Getting started with configuration management, Getting started with internet of things device protection, Getting started with machine learning feature stores, Getting started with managed kubernetes clusters, Getting started with managed streaming, Getting started with provisioned data warehouse clusters, Getting started with workflow orchestration, Manage access keys, Manage policies, Manage roles, Manage your account, Moving hardcoded secrets to secure secret storage, Permission policy allows AWS Compute Optimizer Automation to apply recommended actions, Permission policy to enable Automation across your organization, Permission policy to enable Automation for your account, Permission policy to grant full access to Compute Optimizer Automation for a management account of an organization, Permission policy to grant full access to Compute Optimizer Automation for standalone AWS accounts, Permission policy to grant read-only access to Compute Optimizer Automation for a management account of an organization, Permission policy to grant read-only access to Compute Optimizer Automation for standalone AWS accounts, Permission policy to grant service-linked role permissions for Compute Optimization Automation, Roll back a policy version, Run CPU stress tests on virtual machine instances using fault injection, Set up Attribute-Based Access Control, Setting up systems management, Using property variables in monitoring dashboards to monitor multiple serverless functions, Work with Streams and Time-to-Live, Work with the IAM Policy Builder API