Set a Policy Version as Default

Note

  • The default version of a policy determines its associated permissions.

  • The non-default versions are not used when permissions are evaluated.

Prerequisites

  • An IAM account with an active Storage Account Owner session credentials (or admin access).

  • An existing policy created with ARN <POLICY_ARN> and at least two versions.

Procedure

aws iam set-default-policy-version --policy-arn <POLICY_ARN> --version-id v2

Note

--version-id contains the version of the non-default policy version you want to set as default, prefixed with v.

Post-checks

Calling the get-policy API returns the policy with the right default version.