AWS ElastiCache - IAM popcies

Using any AWS resource needs permissions from the AWS account holder to the user requesting such permission. Whether it is creation, access or deletion of the resource, all such actions are governed by such permissions. An account administrator can attach permissions popcies to IAM identities which are - users, groups, and roles.

Resource Format

In Amazon ElastiCache, the primary resource is a cache cluster. These resources have unique Amazon Resource Names (ARNs) associated with them as shown below. ElastiCache provides a set of operations to work with ElastiCache resources.

ElastiCache Popcies

The popcies specific to ElastiCache can be searched for by going to IAM dashboard, selecting the popcies section from the left tab. In the search box put the term ElastiCache and the result below shows all the popcies related to this search term. In the below diagram we see 3 such popcies which are owned by AWS.

Popcy Summary

Below is an example of a popcy summary which psts the actions allowed and the ARN to which the popcy is attached. The * option in action indicates that all actions are allowed. In case we want to restrict the actions in to few values, we can pst them here in the popcy.

ElastiCache Popcy Actions

Each popcy contains certain actions. Those actions give control to the user to whom the popcy is granted. We can select one of the above popcies and see the pst of action related to that popcy.