Articles → AWS → AWS Policy Simulator

AWS Policy Simulator

In this article, we will discuss the AWS policy simulator.

Purpose

The AWS policy evaluates the user, role, or group against the policy. Based on the evaluation, specifies whether the selected action(s) are allowed or denied to the user, role, or group.

Steps

In this article, we will work on the following steps: -

Create a policy
Create a user and attach the policy
Check AWS policy simulator

So, let us start.

Create A Policy

First, create a policy.

Picture showing a policy created in AWS console

In the above policy, we have allowed only the ListBucket action and denied all actions on the EC2 service.

Create A User And Attach The Policy

The second step is to create a user and attach the policy to the user.

Picture showing a new user is created in AWS console

Check AWS Policy Simulator

Go to the AWS policy simulator page. If you are not logged in, the page will be redirected to the login screen.

On the AWS policy simulator page, select the user on the left-hand side.

Picture showing the AWS users in AWS policy simulator

On the right-hand side, select the service as Amazon EC2 and all actions from the Action(s) dropdown. Click on the Run Simulation button.

Picture showing the filter section of the AWS policy simulator

You will see the result in the result pane.

Picture showing the results when user is tested for EC2 service

Click on the Clear Results button to clear the results. Again, select the service as Amazon S3 and Action as ListBucket.

Click on the Run Simulation button again.

Picture showing the results when user is tested for S3 service

You can see that the ListBucket action is allowed for the user.

Posted By -	Karan Gupta

Posted On -	Monday, May 23, 2022

Query/Feedback

Your Email Id		**

Subject		*

Query/Feedback	Characters remaining 250	**