Back to Teleport

Access Policy

docs/pages/includes/database-access/reference/aws-iam/keyspaces/access-policy.mdx

19.0.1-dev525 B
Original Source

Assign <Var name="aws-account-id"/> to your AWS account ID:

json
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "KeyspacesConnectAsIAMRole",
            "Effect": "Allow",
            "Action": "sts:AssumeRole",
            "Resource": [
                "arn:aws:iam::<Var name="aws-account-id"/>:role/{{ dbUserRole }}"
            ]
        }
    ]
}
StatementPurpose
KeyspacesConnectAsIAMRoleAssume an IAM role to forward requests to Keyspaces.