Quectel BG96 - Page 21

13. On the JSON tab, replace the existing text with the following JSON script:
To preserve JSON formatting, copy the script from the following link: JSON inline policy.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowCrossAccountAccess",
"Action": [
"sts:AssumeRole"
],
"Effect": "Allow",
"Resource":
"arn:aws:iam::001813207414:role/AnyNetSecure@<customer_id>"
},
{
"Sid": "DenyAllUserAndOrganizationRelatedActions",
"Action": [
"iam:AddUserToGroup",
"iam:AttachUserPolicy",
"iam:CreateUser",
"iam:DeleteUser",
"iam:DeleteUserPermissionsBoundary",
"iam:DeleteUserPolicy",
"iam:DetachUserPolicy",
"iam:PutUserPermissionsBoundary",
"iam:PutUserPolicy",
"iam:RemoveUserFromGroup",
"iam:TagUser",
"iam:UntagUser",
"iam:UpdateUser",
"organizations:*"
],
"Effect": "Deny",
"Resource": "*"
}
]
}
14. In the JSON text, replace <customer_id> with your AnyNet Cellular Connectivity for AWS IoT
Customer ID.
If you cannot remember your Customer ID, see Viewing the AnyNet IRIS Welcome page.
Eseye-enabled Quectel BG96 module Developer Guide v1.8
14
Required IAM Managed Policies