kmcquade/a_Policy_sentry_blog_tables.md

## a_Policy_sentry_blog_tables.md

      
    Raw
  

              a_Policy_sentry_blog_tables.md
            
          
    Medium doesn't support tables in their blogs so I have to put them here as CSV files first. SMH

  
## ec2-actions-table-sample.csv

          
            Actions
            Resource Types

            
              ec2:AuthorizeSecurityGroupIngress
              security-group*

            
              ec2:AuthorizeSecurityGroupEgress
              security-group*

## ec2-arn-table-sample.csv

          
            Resource Types
            ARN

            
              security-group
              arn:${Partition}:ec2:${Region}:${Account}:security-group/${SecurityGroupId}

## ssm-action-table-sample.csv

          
            Actions
            Access Level
            Resource Type

            
              ssm:GetParameter
              Read
              parameter

            
              ssm:DescribeParameters
              List
              parameter

            
              ssm:PutParameter
              Write
              parameter

            
              secretsmanager:PutResourcePolicy
              Permissions management
              secret

            
              secretsmanager:TagResource
              Tagging
              secret
	Actions	Resource Types
	ec2:AuthorizeSecurityGroupIngress	security-group*
	ec2:AuthorizeSecurityGroupEgress	security-group*
	Resource Types	ARN
	security-group	arn:${Partition}:ec2:${Region}:${Account}:security-group/${SecurityGroupId}
Actions	Access Level	Resource Type
ssm:GetParameter	Read	parameter
ssm:DescribeParameters	List	parameter
ssm:PutParameter	Write	parameter
secretsmanager:PutResourcePolicy	Permissions management	secret
secretsmanager:TagResource	Tagging	secret