AWS IAM PassRole Explained

[@tigerdilawar]

Thank you Prasad for explaining about the PassRole. you are awesome on showing with live demo on the least privilege and how passrole works.

[@MrRin_]

Big thank you, it's my first day on the job and your video really helped

[@2mahender]

after long time, you are back..pls do more videos frequently

[@PrasadDomala]

Thanks. Definitely more videos coming :)

[@diarmuidoconnor5256]

I want to echo Mahender's comment welcoming you back. Your CDK videos are streets ahead of others I've found online. I'm coming more from a Dev rather than Ops background, so your future videos with that slant are my preference, but whatever you publish will be very worthwhile. Tks

[@TheTheThewillow]

Nice content

[@amitpadgaonkar8830]

Thank you for your tutorial. I learnt this concept clearly. What is ec2-role? Did you create it in the CDK stack? You can add creation of ec2-role for the sake of completion.

[@kiquetal]

I always forget to give permissions about passRole,thanks Mr Prasad. :D

[@panteliskaramolegkos2693]

I see that around 6:35 you are granting the iam:PassRole permission to arn:aws:iam:612659717478:role/ec-role. What is that role?

[@amioren2107]

you are right. he didnt say. this guide is not informative enough

[@SeunghoChun]

ec2 나 lambda 에 iam role / execution role 을 부여하여 ec2 를 띄우고자 한다면, ec2 에 권한을 부여할 수 있는 권한(passrole) 이 필요하다.

[@yashraj-hz5xo]

gluestudio-service.ap-southeast-2.amazonaws.com] createJob: AccessDeniedException: User: arn:aws:iam::010928209223:user/proj is not authorized to perform: iam:PassRole on resource: arn:aws:iam::010***********:role/glue_access_s3 because no identity-based policy allows the iam:PassRole action how to resolve this ??