AWS HealthOmics now supports IAM session policies

AWS HealthOmics IAM Session Policies Support

AWS HealthOmics now supports IAM session policies, allowing you to restrict permissions for individual runs without creating multiple IAM roles. This feature enables dynamic scoping of permissions for a single run, such as limiting access to specific Amazon S3 buckets or objects on a per-run basis.

IAM session policies are inline policies that limit the maximum permissions of a run without modifying the underlying service role. Your effective permissions during a run are the intersection of permissions allowed by both the identity-based policy and the temporary session policy.

What to do

• Configure IAM session policies for your runs in the Permissions section of the AWS HealthOmics User Guide.
• Review the AWS HealthOmics service page for more information.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.