1. Kion Success Center
  2. AWS Administration
  3. IAM Policies and Permission Boundaries

Edit an AWS IAM Policy

Follow

Last updated

Edit an AWS IAM Policy

AWS IAM policies can be edited any time after their creation in Kion.

You can also clone any IAM policy using the ellipsis menu next to the policy and edit the clone. The cloned policy will be new a user-managed policy.

To edit a user-managed AWS IAM policy:

  1. Navigate to Cloud Management > AWS IAM Policies.
  2. Next to the IAM policy you would like to edit, click the ellipsis menu and select Edit.
  3. Make any changes you like.
  4. Click Update IAM Policy.

If you make changes to the JSON policy, it will apply across all cloud accounts where the policy is applied via projects and OUs.

Clone an IAM Policy as a Service Control Policy

You can clone an AWS IAM policy and convert it into a service control policy. This conversion makes it easy to scale essential compliance measures from IAM policies for singular roles to service control policies that affect the whole account.

To clone an IAM policy as a service control policy:

  1. Navigate to Cloud Management > AWS IAM Policies.
  2. Next to the IAM policy you would like to convert, click the ellipsis menu and select Clone as SCP.
  3. (Optional) Modify the policy name, description, and JSON.
  4. Select at least one user or user group as the policy owner.
  5. Click Create Service Control Policy.