Enforce TLS for S3
IAM policies can have a Condition, which must pass for the policy to apply. This can be used to require HTTPS and/or the TLS version: { …
AWS
Create presigned URLs using AWS CLI
Sometimes, you only have access to the aws CLI, and need to generate presigned URLs to S3 objects. The aws s3 presign command will do this, creating …
Using the AWS CLI without installing it
The official AWS CLI installation steps require downloading and running a script to install the CLI. This download contains the CLI itself, and the …
Cross-account data transfer in S3
To copy bucket contents from a bucket in account A to a bucket in account B: Create new S3 bucket in account B Create IAM role / user in account B, …
Get credentials for an assumed role
It’s often useful to get regular access keys as if you were assumed into another role. This is possible: aws sts assume-role --role-arn …