Forked from gene1wood/aws_iam_managed_policies_2019-02-12.json
Created
July 12, 2017 02:30
-
-
Save lucasproclc/47c89790b034d23fc9445f5bdcb5689d to your computer and use it in GitHub Desktop.
Script to export all AWS IAM managed policies
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import boto3 | |
| import json | |
| client = boto3.client('iam') | |
| paginator = client.get_paginator('list_policies') | |
| response_iterator = paginator.paginate(Scope='AWS') | |
| managed_policies = [] | |
| for response in response_iterator: | |
| for policy in response['Policies']: | |
| response_policy_version = client.get_policy_version( | |
| PolicyArn=policy['Arn'], | |
| VersionId=policy['DefaultVersionId'] | |
| ) | |
| managed_policies.append({ | |
| 'Document': response_policy_version['PolicyVersion']['Document'], | |
| 'VersionId': response_policy_version['PolicyVersion']['VersionId'], | |
| 'PolicyName': policy['PolicyName'], | |
| 'PolicyId': policy['PolicyId'] | |
| }) | |
| with open('aws_iam_managed_policies.json') as f: | |
| json.dump(managed_policies, f, sort_keys=True, indent=4, separators=(',', ': ')) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| [ | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "directconnect:Describe*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAI23HZ27SI6FQMGNQ2", | |
| "PolicyName": "AWSDirectConnectReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "glacier:DescribeJob", | |
| "glacier:DescribeVault", | |
| "glacier:GetDataRetrievalPolicy", | |
| "glacier:GetJobOutput", | |
| "glacier:GetVaultAccessPolicy", | |
| "glacier:GetVaultLock", | |
| "glacier:GetVaultNotifications", | |
| "glacier:ListJobs", | |
| "glacier:ListMultipartUploads", | |
| "glacier:ListParts", | |
| "glacier:ListTagsForVault", | |
| "glacier:ListVaults" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAI2D5NJKMU274MET4E", | |
| "PolicyName": "AmazonGlacierReadOnlyAccess", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "aws-marketplace:*", | |
| "cloudformation:CreateStack", | |
| "cloudformation:DescribeStackResource", | |
| "cloudformation:DescribeStackResources", | |
| "cloudformation:DescribeStacks", | |
| "cloudformation:List*", | |
| "ec2:AuthorizeSecurityGroupEgress", | |
| "ec2:AuthorizeSecurityGroupIngress", | |
| "ec2:CreateSecurityGroup", | |
| "ec2:CreateTags", | |
| "ec2:DescribeAccountAttributes", | |
| "ec2:DescribeAddresses", | |
| "ec2:DeleteSecurityGroup", | |
| "ec2:DescribeAccountAttributes", | |
| "ec2:DescribeImages", | |
| "ec2:DescribeInstances", | |
| "ec2:DescribeKeyPairs", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeTags", | |
| "ec2:DescribeVpcs", | |
| "ec2:RunInstances", | |
| "ec2:StartInstances", | |
| "ec2:StopInstances", | |
| "ec2:TerminateInstances" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAI2DV5ULJSO2FYVPYG", | |
| "PolicyName": "AWSMarketplaceFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ec2:DescribeVpcs", | |
| "ec2:DescribeVpcClassicLink", | |
| "ec2:DescribeAvailabilityZones", | |
| "ec2:DescribeSubnets" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": "elasticloadbalancing:Describe*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "cloudwatch:ListMetrics", | |
| "cloudwatch:GetMetricStatistics", | |
| "cloudwatch:Describe*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": "autoscaling:Describe*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "sns:ListSubscriptions", | |
| "sns:ListTopics" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAI3A7GDXOYQV3VUQMK", | |
| "PolicyName": "AutoScalingConsoleReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "s3:CreateBucket", | |
| "s3:ListBucket", | |
| "s3:DeleteBucket", | |
| "s3:GetBucketLocation", | |
| "s3:GetObject", | |
| "s3:PutObject", | |
| "s3:DeleteObject", | |
| "s3:GetObjectVersion", | |
| "s3:GetBucketPolicy", | |
| "s3:PutBucketPolicy", | |
| "s3:DeleteBucketPolicy" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "arn:aws:s3:::dms-*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAI3CCUQ4U5WNC5F6B6", | |
| "PolicyName": "AmazonDMSRedshiftS3Role", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "iam:List*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAI3CH5UUWZN4EKGILO", | |
| "PolicyName": "AWSQuickSightListIAM", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "health:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAI3CUMPCPEUPCSXC4Y", | |
| "PolicyName": "AWSHealthFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "rds:*", | |
| "cloudwatch:DescribeAlarms", | |
| "cloudwatch:GetMetricStatistics", | |
| "ec2:DescribeAccountAttributes", | |
| "ec2:DescribeAvailabilityZones", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeVpcs", | |
| "sns:ListSubscriptions", | |
| "sns:ListTopics", | |
| "logs:DescribeLogStreams", | |
| "logs:GetLogEvents" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAI3R4QMOG6Q5A4VWVG", | |
| "PolicyName": "AmazonRDSFullAccess", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "support:*", | |
| "acm:DescribeCertificate", | |
| "acm:GetCertificate", | |
| "acm:List*", | |
| "apigateway:GET", | |
| "appstream:Get*", | |
| "autoscaling:Describe*", | |
| "aws-marketplace:ViewSubscriptions", | |
| "cloudformation:Describe*", | |
| "cloudformation:Get*", | |
| "cloudformation:List*", | |
| "cloudformation:EstimateTemplateCost", | |
| "cloudfront:Get*", | |
| "cloudfront:List*", | |
| "cloudsearch:Describe*", | |
| "cloudsearch:List*", | |
| "cloudtrail:DescribeTrails", | |
| "cloudtrail:GetTrailStatus", | |
| "cloudtrail:LookupEvents", | |
| "cloudtrail:ListTags", | |
| "cloudtrail:ListPublicKeys", | |
| "cloudwatch:Describe*", | |
| "cloudwatch:Get*", | |
| "cloudwatch:List*", | |
| "codecommit:BatchGetRepositories", | |
| "codecommit:Get*", | |
| "codecommit:List*", | |
| "codedeploy:Batch*", | |
| "codedeploy:Get*", | |
| "codedeploy:List*", | |
| "codepipeline:AcknowledgeJob", | |
| "codepipeline:AcknowledgeThirdPartyJob", | |
| "codepipeline:ListActionTypes", | |
| "codepipeline:ListPipelines", | |
| "codepipeline:PollForJobs", | |
| "codepipeline:PollForThirdPartyJobs", | |
| "codepipeline:GetPipelineState", | |
| "codepipeline:GetPipeline", | |
| "cognito-identity:List*", | |
| "cognito-identity:LookupDeveloperIdentity", | |
| "cognito-identity:Describe*", | |
| "cognito-sync:Describe*", | |
| "cognito-sync:GetBulkPublishDetails", | |
| "cognito-sync:GetCognitoEvents", | |
| "cognito-sync:GetIdentityPoolConfiguration", | |
| "cognito-sync:List*", | |
| "config:DescribeConfigurationRecorders", | |
| "config:DescribeConfigurationRecorderStatus", | |
| "config:DescribeConfigRuleEvaluationStatus", | |
| "config:DescribeConfigRules", | |
| "config:DescribeDeliveryChannels", | |
| "config:DescribeDeliveryChannelStatus", | |
| "config:GetResourceConfigHistory", | |
| "config:ListDiscoveredResources", | |
| "datapipeline:DescribeObjects", | |
| "datapipeline:DescribePipelines", | |
| "datapipeline:GetPipelineDefinition", | |
| "datapipeline:ListPipelines", | |
| "datapipeline:QueryObjects", | |
| "datapipeline:ReportTaskProgress", | |
| "datapipeline:ReportTaskRunnerHeartbeat", | |
| "devicefarm:List*", | |
| "devicefarm:Get*", | |
| "directconnect:Describe*", | |
| "discovery:Describe*", | |
| "discovery:ListConfigurations", | |
| "dms:Describe*", | |
| "dms:List*", | |
| "ds:DescribeDirectories", | |
| "ds:DescribeSnapshots", | |
| "ds:GetDirectoryLimits", | |
| "ds:GetSnapshotLimits", | |
| "ds:ListAuthorizedApplications", | |
| "dynamodb:DescribeLimits", | |
| "dynamodb:DescribeTable", | |
| "dynamodb:ListTables", | |
| "ec2:Describe*", | |
| "ec2:DescribeHosts", | |
| "ec2:describeIdentityIdFormat", | |
| "ec2:DescribeIdFormat", | |
| "ec2:DescribeInstanceAttribute", | |
| "ec2:DescribeNatGateways", | |
| "ec2:DescribeReservedInstancesModifications", | |
| "ec2:DescribeTags", | |
| "ec2:GetFlowLogsCount", | |
| "ecr:GetRepositoryPolicy", | |
| "ecr:BatchCheckLayerAvailability", | |
| "ecr:DescribeRepositories", | |
| "ecr:ListImages", | |
| "ecs:Describe*", | |
| "ecs:List*", | |
| "elasticache:Describe*", | |
| "elasticache:List*", | |
| "elasticbeanstalk:Check*", | |
| "elasticbeanstalk:Describe*", | |
| "elasticbeanstalk:List*", | |
| "elasticbeanstalk:RequestEnvironmentInfo", | |
| "elasticbeanstalk:RetrieveEnvironmentInfo", | |
| "elasticbeanstalk:ValidateConfigurationSettings", | |
| "elasticfilesystem:Describe*", | |
| "elasticloadbalancing:Describe*", | |
| "elasticmapreduce:Describe*", | |
| "elasticmapreduce:List*", | |
| "elastictranscoder:List*", | |
| "elastictranscoder:ReadJob", | |
| "elasticfilesystem:DescribeFileSystems", | |
| "es:Describe*", | |
| "es:List*", | |
| "es:ESHttpGet", | |
| "es:ESHttpHead", | |
| "events:DescribeRule", | |
| "events:List*", | |
| "events:TestEventPattern", | |
| "firehose:Describe*", | |
| "firehose:List*", | |
| "gamelift:List*", | |
| "gamelift:Describe*", | |
| "glacier:ListVaults", | |
| "glacier:DescribeVault", | |
| "glacier:DescribeJob", | |
| "glacier:Get*", | |
| "glacier:List*", | |
| "iam:GenerateCredentialReport", | |
| "iam:GenerateServiceLastAccessedDetails", | |
| "iam:Get*", | |
| "iam:List*", | |
| "importexport:GetStatus", | |
| "importexport:ListJobs", | |
| "importexport:GetJobDetail", | |
| "inspector:Describe*", | |
| "inspector:List*", | |
| "inspector:GetAssessmentTelemetry", | |
| "inspector:LocalizeText", | |
| "iot:Describe*", | |
| "iot:Get*", | |
| "iot:List*", | |
| "kinesisanalytics:DescribeApplication", | |
| "kinesisanalytics:DiscoverInputSchema", | |
| "kinesisanalytics:GetApplicationState", | |
| "kinesisanalytics:ListApplications", | |
| "kinesis:Describe*", | |
| "kinesis:Get*", | |
| "kinesis:List*", | |
| "kms:Describe*", | |
| "kms:Get*", | |
| "kms:List*", | |
| "lambda:List*", | |
| "lambda:Get*", | |
| "logs:Describe*", | |
| "logs:TestMetricFilter", | |
| "machinelearning:Describe*", | |
| "machinelearning:Get*", | |
| "mobilehub:GetProject", | |
| "mobilehub:List*", | |
| "mobilehub:ValidateProject", | |
| "mobilehub:VerifyServiceRole", | |
| "opsworks:Describe*", | |
| "rds:Describe*", | |
| "rds:ListTagsForResource", | |
| "redshift:Describe*", | |
| "route53:Get*", | |
| "route53:List*", | |
| "route53domains:CheckDomainAvailability", | |
| "route53domains:GetDomainDetail", | |
| "route53domains:GetOperationDetail", | |
| "route53domains:List*", | |
| "s3:List*", | |
| "sdb:GetAttributes", | |
| "sdb:List*", | |
| "sdb:Select*", | |
| "servicecatalog:SearchProducts", | |
| "servicecatalog:DescribeProduct", | |
| "servicecatalog:DescribeProductView", | |
| "servicecatalog:ListLaunchPaths", | |
| "servicecatalog:DescribeProvisioningParameters", | |
| "servicecatalog:ListRecordHistory", | |
| "servicecatalog:DescribeRecord", | |
| "servicecatalog:ScanProvisionedProducts", | |
| "ses:Get*", | |
| "ses:List*", | |
| "sns:Get*", | |
| "sns:List*", | |
| "sqs:GetQueueAttributes", | |
| "sqs:GetQueueUrl", | |
| "sqs:ListQueues", | |
| "sqs:ReceiveMessage", | |
| "ssm:List*", | |
| "ssm:Describe*", | |
| "storagegateway:Describe*", | |
| "storagegateway:List*", | |
| "swf:Count*", | |
| "swf:Describe*", | |
| "swf:Get*", | |
| "swf:List*", | |
| "waf:Get*", | |
| "waf:List*", | |
| "workspaces:Describe*", | |
| "workdocs:Describe*", | |
| "workmail:Describe*", | |
| "workmail:Get*", | |
| "workspaces:Describe*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAI3V4GSSN5SJY3P2RO", | |
| "PolicyName": "SupportUser", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": "ec2:*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": "elasticloadbalancing:*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": "cloudwatch:*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": "autoscaling:*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAI3VAJF5ZCRZ7MCQE6", | |
| "PolicyName": "AmazonEC2FullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "elasticbeanstalk:Check*", | |
| "elasticbeanstalk:Describe*", | |
| "elasticbeanstalk:List*", | |
| "elasticbeanstalk:RequestEnvironmentInfo", | |
| "elasticbeanstalk:RetrieveEnvironmentInfo", | |
| "ec2:Describe*", | |
| "elasticloadbalancing:Describe*", | |
| "autoscaling:Describe*", | |
| "cloudwatch:Describe*", | |
| "cloudwatch:List*", | |
| "cloudwatch:Get*", | |
| "s3:Get*", | |
| "s3:List*", | |
| "sns:Get*", | |
| "sns:List*", | |
| "cloudformation:Describe*", | |
| "cloudformation:Get*", | |
| "cloudformation:List*", | |
| "cloudformation:Validate*", | |
| "cloudformation:Estimate*", | |
| "rds:Describe*", | |
| "sqs:Get*", | |
| "sqs:List*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAI47KNGXDAXFD4SDHG", | |
| "PolicyName": "AWSElasticBeanstalkReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": { | |
| "Action": [ | |
| "acm:DescribeCertificate", | |
| "acm:ListCertificates", | |
| "acm:GetCertificate", | |
| "acm:ListTagsForCertificate" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAI4GSWX6S4MESJ3EWC", | |
| "PolicyName": "AWSCertificateManagerReadOnly", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "athena:CancelQueryExecution", | |
| "athena:GetCatalogs", | |
| "athena:GetExecutionEngine", | |
| "athena:GetExecutionEngines", | |
| "athena:GetNamespace", | |
| "athena:GetNamespaces", | |
| "athena:GetQueryExecution", | |
| "athena:GetQueryExecutions", | |
| "athena:GetQueryResults", | |
| "athena:GetTable", | |
| "athena:GetTables", | |
| "athena:RunQuery" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "s3:GetBucketLocation", | |
| "s3:GetObject", | |
| "s3:ListBucket", | |
| "s3:ListBucketMultipartUploads", | |
| "s3:ListMultipartUploadParts", | |
| "s3:AbortMultipartUpload", | |
| "s3:CreateBucket", | |
| "s3:PutObject" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:s3:::aws-athena-query-results-*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAI4JB77JXFQXDWNRPM", | |
| "PolicyName": "AWSQuicksightAthenaAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "codecommit:BatchGetRepositories", | |
| "codecommit:CreateBranch", | |
| "codecommit:CreateRepository", | |
| "codecommit:Get*", | |
| "codecommit:GitPull", | |
| "codecommit:GitPush", | |
| "codecommit:List*", | |
| "codecommit:Put*", | |
| "codecommit:Test*", | |
| "codecommit:Update*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAI4UIINUVGB5SEC57G", | |
| "PolicyName": "AWSCodeCommitPowerUser", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "codecommit:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAI4VCZ3XPIZLQ5NZV2", | |
| "PolicyName": "AWSCodeCommitFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "iam:CreateServiceSpecificCredential", | |
| "iam:ListServiceSpecificCredentials", | |
| "iam:UpdateServiceSpecificCredential", | |
| "iam:DeleteServiceSpecificCredential", | |
| "iam:ResetServiceSpecificCredential" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "arn:aws:iam::*:user/${aws:username}" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAI4VT74EMXK2PMQJM2", | |
| "PolicyName": "IAMSelfManageServiceSpecificCredentials", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "sqs:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAI65L554VRJ33ECQS6", | |
| "PolicyName": "AmazonSQSFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "cloudwatch:*", | |
| "cognito-identity:ListIdentityPools", | |
| "cognito-sync:GetCognitoEvents", | |
| "cognito-sync:SetCognitoEvents", | |
| "dynamodb:*", | |
| "events:*", | |
| "iam:ListAttachedRolePolicies", | |
| "iam:ListRolePolicies", | |
| "iam:ListRoles", | |
| "iam:PassRole", | |
| "kinesis:DescribeStream", | |
| "kinesis:ListStreams", | |
| "kinesis:PutRecord", | |
| "lambda:*", | |
| "logs:*", | |
| "s3:*", | |
| "sns:ListSubscriptions", | |
| "sns:ListSubscriptionsByTopic", | |
| "sns:ListTopics", | |
| "sns:Subscribe", | |
| "sns:Unsubscribe", | |
| "sns:Publish", | |
| "sqs:ListQueues", | |
| "sqs:SendMessage", | |
| "kms:ListAliases", | |
| "ec2:DescribeVpcs", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeSecurityGroups", | |
| "iot:GetTopicRule", | |
| "iot:ListTopicRules", | |
| "iot:CreateTopicRule", | |
| "iot:ReplaceTopicRule", | |
| "iot:AttachPrincipalPolicy", | |
| "iot:AttachThingPrincipal", | |
| "iot:CreateKeysAndCertificate", | |
| "iot:CreatePolicy", | |
| "iot:CreateThing", | |
| "iot:ListPolicies", | |
| "iot:ListThings", | |
| "iot:DescribeEndpoint" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAI6E2CYYMI4XI7AA5K", | |
| "PolicyName": "AWSLambdaFullAccess", | |
| "VersionId": "v5" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "logs:CreateLogGroup", | |
| "logs:CreateLogStream", | |
| "logs:PutLogEvents", | |
| "logs:PutMetricFilter", | |
| "logs:PutRetentionPolicy", | |
| "logs:GetLogEvents", | |
| "logs:DeleteLogStream" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAI6R6Z2FHHGS454W7W", | |
| "PolicyName": "AWSIoTLogging", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ssm:DescribeAssociation", | |
| "ssm:GetDeployablePatchSnapshotForInstance", | |
| "ssm:GetDocument", | |
| "ssm:GetParameters", | |
| "ssm:ListAssociations", | |
| "ssm:ListInstanceAssociations", | |
| "ssm:PutInventory", | |
| "ssm:UpdateAssociationStatus", | |
| "ssm:UpdateInstanceAssociationStatus", | |
| "ssm:UpdateInstanceInformation" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "ec2messages:AcknowledgeMessage", | |
| "ec2messages:DeleteMessage", | |
| "ec2messages:FailMessage", | |
| "ec2messages:GetEndpoint", | |
| "ec2messages:GetMessages", | |
| "ec2messages:SendReply" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "cloudwatch:PutMetricData" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "ec2:DescribeInstanceStatus" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "ds:CreateComputer", | |
| "ds:DescribeDirectories" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "logs:CreateLogGroup", | |
| "logs:CreateLogStream", | |
| "logs:DescribeLogGroups", | |
| "logs:DescribeLogStreams", | |
| "logs:PutLogEvents" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "s3:PutObject", | |
| "s3:GetObject", | |
| "s3:AbortMultipartUpload", | |
| "s3:ListMultipartUploadParts", | |
| "s3:ListBucketMultipartUploads" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "s3:ListBucket" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "arn:aws:s3:::amazon-ssm-packages-*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAI6TL3SMY22S4KMMX6", | |
| "PolicyName": "AmazonEC2RoleforSSM", | |
| "VersionId": "v3" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ec2:CreateNetworkInterface", | |
| "ec2:CreateTags", | |
| "ec2:DeleteNetworkInterface", | |
| "ec2:DescribeNetworkInterfaceAttribute", | |
| "ec2:DescribeNetworkInterfaces", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeVpcs", | |
| "ec2:DetachNetworkInterface" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAI7QIUU4GC66SF26WE", | |
| "PolicyName": "AWSCloudHSMRole", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": "iam:*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAI7XKCFMBPM3QQRRVQ", | |
| "PolicyName": "IAMFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "inspector:*", | |
| "ec2:DescribeInstances", | |
| "ec2:DescribeTags", | |
| "sns:ListTopics" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAI7Y6NTA27NWNA5U5E", | |
| "PolicyName": "AmazonInspectorFullAccess", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": "elasticache:*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIA2V44CPHAUAAECKG", | |
| "PolicyName": "AmazonElastiCacheFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "awsconnector:RegisterConnector", | |
| "awsconnector:GetConnectorHealth" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": "iam:GetUser", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "s3:GetObject", | |
| "s3:ListBucket" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:s3:::connector-platform-upgrade-info/*", | |
| "arn:aws:s3:::connector-platform-upgrade-info", | |
| "arn:aws:s3:::connector-platform-upgrade-bundles/*", | |
| "arn:aws:s3:::connector-platform-upgrade-bundles", | |
| "arn:aws:s3:::connector-platform-release-notes/*", | |
| "arn:aws:s3:::connector-platform-release-notes", | |
| "arn:aws:s3:::prod.agentless.discovery.connector.upgrade/*", | |
| "arn:aws:s3:::prod.agentless.discovery.connector.upgrade" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "s3:PutObject", | |
| "s3:PutObjectAcl" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:s3:::import-to-ec2-connector-debug-logs/*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "SNS:Publish" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "arn:aws:sns:*:*:metrics-sns-topic-for-*" | |
| }, | |
| { | |
| "Action": [ | |
| "Discovery:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*", | |
| "Sid": "Discovery" | |
| }, | |
| { | |
| "Action": [ | |
| "arsenal:RegisterOnPremisesAgent" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*", | |
| "Sid": "arsenal" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIA3DIL7BYQ35ISM4K", | |
| "PolicyName": "AWSAgentlessDiscoveryService", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "xray:PutTraceSegments", | |
| "xray:PutTelemetryRecords" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIAACM4LMYSRGBCTM6", | |
| "PolicyName": "AWSXrayWriteOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": "autoscaling:Describe*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIAFWUVLC2LPLSFTFG", | |
| "PolicyName": "AutoScalingReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": "autoscaling:*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": "cloudwatch:PutMetricAlarm", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIAWRCSJDDXDXGPCFU", | |
| "PolicyName": "AutoScalingFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "s3:GetObject", | |
| "s3:GetObjectVersion", | |
| "s3:ListObjects" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIAZKXZ27TAJ4PVWGK", | |
| "PolicyName": "AmazonEC2RoleforAWSCodeDeploy", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "dynamodb:DescribeTable", | |
| "lambda:ListFunctions", | |
| "sns:ListTopics", | |
| "lex:GetIntent", | |
| "lex:GetIntents", | |
| "lex:GetSlotType", | |
| "lex:GetSlotTypes", | |
| "lex:GetBot", | |
| "lex:GetBots", | |
| "lex:GetBotAlias", | |
| "lex:GetBotAliases", | |
| "mobilehub:GenerateProjectParameters", | |
| "mobilehub:GetProject", | |
| "mobilehub:ListAvailableConnectors", | |
| "mobilehub:ListAvailableFeatures", | |
| "mobilehub:ListAvailableRegions", | |
| "mobilehub:ListProjects", | |
| "mobilehub:ValidateProject", | |
| "mobilehub:VerifyServiceRole" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "s3:GetObject" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "arn:aws:s3:::*/aws-my-sample-app*.zip" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIBXVYVL3PWQFBZFGW", | |
| "PolicyName": "AWSMobileHub_ReadOnly", | |
| "VersionId": "v4" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ec2:Describe*", | |
| "ec2:RebootInstances", | |
| "ec2:StopInstances", | |
| "ec2:TerminateInstances", | |
| "ec2:CreateSnapshot" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*", | |
| "Sid": "CloudWatchEventsBuiltInTargetExecutionAccess" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIC5AQ5DATYSNF4AUM", | |
| "PolicyName": "CloudWatchEventsBuiltInTargetExecutionAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "opsworks:*", | |
| "ec2:DescribeAvailabilityZones", | |
| "ec2:DescribeKeyPairs", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeAccountAttributes", | |
| "ec2:DescribeAvailabilityZones", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeVpcs", | |
| "elasticloadbalancing:DescribeInstanceHealth", | |
| "elasticloadbalancing:DescribeLoadBalancers", | |
| "iam:GetRolePolicy", | |
| "iam:ListInstanceProfiles", | |
| "iam:ListRoles", | |
| "iam:ListUsers", | |
| "iam:PassRole" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAICN26VXMXASXKOQCG", | |
| "PolicyName": "AWSOpsWorksFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "s3:AbortMultipartUpload", | |
| "s3:DeleteObject", | |
| "s3:GetObject", | |
| "s3:ListAllMyBuckets", | |
| "s3:ListBucket", | |
| "s3:ListMultipartUploadParts", | |
| "s3:PutObject" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "arn:aws:s3:::aws-opsworks-cm-*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAICSU3OSHCURP2WIZW", | |
| "PolicyName": "AWSOpsWorksCMInstanceProfileRole", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "codepipeline:GetPipeline", | |
| "codepipeline:GetPipelineState", | |
| "codepipeline:GetPipelineExecution", | |
| "codepipeline:ListPipelines", | |
| "codepipeline:PutApprovalResult" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAICXNWK42SQ6LMDXM2", | |
| "PolicyName": "AWSCodePipelineApproverAccess", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "arsenal:RegisterOnPremisesAgent" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAICZIOVAGC6JPF3WHC", | |
| "PolicyName": "AWSApplicationDiscoveryAgentAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "acm:ListCertificates", | |
| "aws-marketplace:ViewSubscriptions", | |
| "autoscaling:Describe*", | |
| "cloudformation:List*", | |
| "cloudformation:DescribeStacks", | |
| "cloudfront:List*", | |
| "cloudhsm:ListAvailableZones", | |
| "cloudhsm:ListLunaClients", | |
| "cloudhsm:ListHapgs", | |
| "cloudhsm:ListHsms", | |
| "cloudsearch:List*", | |
| "cloudsearch:DescribeDomains", | |
| "cloudtrail:DescribeTrails", | |
| "cloudtrail:LookupEvents", | |
| "cloudwatch:List*", | |
| "cloudwatch:GetMetricData", | |
| "codecommit:List*", | |
| "codedeploy:List*", | |
| "codedeploy:Get*", | |
| "codepipeline:ListPipelines", | |
| "cognito-identity:ListIdentities", | |
| "cognito-identity:ListIdentityPools", | |
| "cognito-sync:ListDatasets", | |
| "config:List*", | |
| "config:Describe*", | |
| "datapipeline:ListPipelines", | |
| "datapipeline:DescribePipelines", | |
| "datapipeline:GetAccountLimits", | |
| "devicefarm:List*", | |
| "directconnect:Describe*", | |
| "dms:List*", | |
| "ds:DescribeDirectories", | |
| "dynamodb:ListTables", | |
| "ec2:DescribeAccountAttributes", | |
| "ec2:DescribeAddresses", | |
| "ec2:DescribeAvailabilityZones", | |
| "ec2:DescribeBundleTasks", | |
| "ec2:DescribeClassicLinkInstances", | |
| "ec2:DescribeConversionTasks", | |
| "ec2:DescribeCustomerGateways", | |
| "ec2:DescribeDhcpOptions", | |
| "ec2:DescribeExportTasks", | |
| "ec2:DescribeFlowLogs", | |
| "ec2:DescribeHost*", | |
| "ec2:DescribeIdentityIdFormat", | |
| "ec2:DescribeIdFormat", | |
| "ec2:DescribeImage*", | |
| "ec2:DescribeImport*", | |
| "ec2:DescribeInstance*", | |
| "ec2:DescribeInternetGateways", | |
| "ec2:DescribeKeyPairs", | |
| "ec2:DescribeMovingAddresses", | |
| "ec2:DescribeNatGateways", | |
| "ec2:DescribeNetwork*", | |
| "ec2:DescribePlacementGroups", | |
| "ec2:DescribePrefixLists", | |
| "ec2:DescribeRegions", | |
| "ec2:DescribeReserved*", | |
| "ec2:DescribeRouteTables", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeSnapshot*", | |
| "ec2:DescribeSpot*", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeVolume*", | |
| "ec2:DescribeVpc*", | |
| "ec2:DescribeVpnGateways", | |
| "ecr:DescribeRepositories", | |
| "ecr:ListImages", | |
| "ecs:List*", | |
| "elasticache:Describe*", | |
| "elasticbeanstalk:DescribeApplicationVersions", | |
| "elasticbeanstalk:DescribeApplications", | |
| "elasticbeanstalk:DescribeEnvironments", | |
| "elasticbeanstalk:ListAvailableSolutionStacks", | |
| "elasticloadbalancing:DescribeListeners", | |
| "elasticloadbalancing:DescribeLoadBalancers", | |
| "elasticloadbalancing:DescribeTargetGroups", | |
| "elasticloadbalancing:DescribeTargetHealth", | |
| "elasticfilesystem:DescribeFileSystems", | |
| "elasticmapreduce:List*", | |
| "elastictranscoder:List*", | |
| "es:DescribeElasticsearchDomain", | |
| "es:DescribeElasticsearchDomains", | |
| "es:ListDomainNames", | |
| "events:ListRuleNamesByTarget", | |
| "events:ListRules", | |
| "events:ListTargetsByRule", | |
| "firehose:List*", | |
| "firehose:DescribeDeliveryStream", | |
| "gamelift:List*", | |
| "glacier:List*", | |
| "iam:List*", | |
| "iam:GetAccountSummary", | |
| "iam:GetLoginProfile", | |
| "importexport:ListJobs", | |
| "inspector:List*", | |
| "iot:List*", | |
| "kinesis:ListStreams", | |
| "kinesisanalytics:ListApplications", | |
| "kms:ListKeys", | |
| "lambda:List*", | |
| "logs:Describe*", | |
| "machinelearning:Describe*", | |
| "mobilehub:ListAvailableFeatures", | |
| "mobilehub:ListAvailableRegions", | |
| "mobilehub:ListProjects", | |
| "opsworks:Describe*", | |
| "rds:Describe*", | |
| "redshift:DescribeClusters", | |
| "redshift:DescribeEvents", | |
| "redshift:ViewQueriesInConsole", | |
| "route53:List*", | |
| "route53:Get*", | |
| "route53domains:List*", | |
| "s3:ListAllMyBuckets", | |
| "s3:ListBucket", | |
| "sdb:List*", | |
| "ses:List*", | |
| "sns:List*", | |
| "sqs:ListQueues", | |
| "ssm:ListAssociations", | |
| "ssm:ListDocuments", | |
| "storagegateway:ListGateways", | |
| "storagegateway:ListLocalDisks", | |
| "storagegateway:ListVolumeRecoveryPoints", | |
| "storagegateway:ListVolumes", | |
| "swf:List*", | |
| "trustedadvisor:Describe*", | |
| "waf:List*", | |
| "workdocs:DescribeAvailableDirectories", | |
| "workdocs:DescribeInstances", | |
| "workmail:Describe*", | |
| "workspaces:Describe*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAID22R6XPJATWOFDK6", | |
| "PolicyName": "ViewOnlyAccess", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ec2:AuthorizeSecurityGroupEgress", | |
| "ec2:AuthorizeSecurityGroupIngress", | |
| "ec2:CancelSpotInstanceRequests", | |
| "ec2:CreateNetworkInterface", | |
| "ec2:CreateSecurityGroup", | |
| "ec2:CreateTags", | |
| "ec2:DeleteNetworkInterface", | |
| "ec2:DeleteSecurityGroup", | |
| "ec2:DeleteTags", | |
| "ec2:DescribeAvailabilityZones", | |
| "ec2:DescribeAccountAttributes", | |
| "ec2:DescribeDhcpOptions", | |
| "ec2:DescribeInstanceStatus", | |
| "ec2:DescribeInstances", | |
| "ec2:DescribeKeyPairs", | |
| "ec2:DescribeNetworkAcls", | |
| "ec2:DescribeNetworkInterfaces", | |
| "ec2:DescribePrefixLists", | |
| "ec2:DescribeRouteTables", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeSpotInstanceRequests", | |
| "ec2:DescribeSpotPriceHistory", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeVpcAttribute", | |
| "ec2:DescribeVpcEndpoints", | |
| "ec2:DescribeVpcEndpointServices", | |
| "ec2:DescribeVpcs", | |
| "ec2:DetachNetworkInterface", | |
| "ec2:ModifyImageAttribute", | |
| "ec2:ModifyInstanceAttribute", | |
| "ec2:RequestSpotInstances", | |
| "ec2:RevokeSecurityGroupEgress", | |
| "ec2:RunInstances", | |
| "ec2:TerminateInstances", | |
| "ec2:DeleteVolume", | |
| "ec2:DescribeVolumeStatus", | |
| "ec2:DescribeVolumes", | |
| "ec2:DetachVolume", | |
| "iam:GetRole", | |
| "iam:GetRolePolicy", | |
| "iam:ListInstanceProfiles", | |
| "iam:ListRolePolicies", | |
| "iam:PassRole", | |
| "s3:CreateBucket", | |
| "s3:Get*", | |
| "s3:List*", | |
| "sdb:BatchPutAttributes", | |
| "sdb:Select", | |
| "sqs:CreateQueue", | |
| "sqs:Delete*", | |
| "sqs:GetQueue*", | |
| "sqs:PurgeQueue", | |
| "sqs:ReceiveMessage", | |
| "cloudwatch:PutMetricAlarm", | |
| "cloudwatch:DescribeAlarms", | |
| "cloudwatch:DeleteAlarms", | |
| "application-autoscaling:RegisterScalableTarget", | |
| "application-autoscaling:DeregisterScalableTarget", | |
| "application-autoscaling:PutScalingPolicy", | |
| "application-autoscaling:DeleteScalingPolicy", | |
| "application-autoscaling:Describe*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIDI2BQT2LKXZG36TW", | |
| "PolicyName": "AmazonElasticMapReduceRole", | |
| "VersionId": "v7" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "route53domains:Get*", | |
| "route53domains:List*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIDRINP6PPTRXYVQCI", | |
| "PolicyName": "AmazonRoute53DomainsReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "cloudwatch:GetMetricStatistics", | |
| "ec2:DescribeAccountAttributes", | |
| "ec2:DescribeAvailabilityZones", | |
| "ec2:DescribeInstances", | |
| "ec2:DescribeKeyPairs", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeVpcs", | |
| "elasticloadbalancing:DescribeInstanceHealth", | |
| "elasticloadbalancing:DescribeLoadBalancers", | |
| "iam:GetRolePolicy", | |
| "iam:ListInstanceProfiles", | |
| "iam:ListRoles", | |
| "iam:ListUsers", | |
| "iam:PassRole", | |
| "opsworks:*", | |
| "rds:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIDUTMOKHJFAPJV45W", | |
| "PolicyName": "AWSOpsWorksRole", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "appstream:UpdateFleet", | |
| "appstream:DescribeFleets" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "cloudwatch:DescribeAlarms" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIEL3HJCCWFVHA6KPG", | |
| "PolicyName": "ApplicationAutoScalingForAmazonAppStreamAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ecr:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIESRL7KD7IIVF6V4W", | |
| "PolicyName": "AmazonEC2ContainerRegistryFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "swf:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIFE3AV6VE7EANYBVM", | |
| "PolicyName": "SimpleWorkflowFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": "s3:*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIFIR6V6BVTRAHWINE", | |
| "PolicyName": "AmazonS3FullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "storagegateway:List*", | |
| "storagegateway:Describe*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "ec2:DescribeSnapshots" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIFKCTUVOPD5NICXJK", | |
| "PolicyName": "AWSStorageGatewayReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "aws-portal:*Billing", | |
| "aws-portal:*Usage", | |
| "aws-portal:*PaymentMethods", | |
| "budgets:ViewBudget", | |
| "budgets:ModifyBudget" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIFTHXT6FFMIRT7ZEA", | |
| "PolicyName": "Billing", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ecr:GetAuthorizationToken", | |
| "ecr:BatchCheckLayerAvailability", | |
| "ecr:GetDownloadUrlForLayer", | |
| "ecr:GetRepositoryPolicy", | |
| "ecr:DescribeRepositories", | |
| "ecr:ListImages", | |
| "ecr:DescribeImages", | |
| "ecr:BatchGetImage" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIFYZPA37OOHVIH7KQ", | |
| "PolicyName": "AmazonEC2ContainerRegistryReadOnly", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "cloudwatch:*", | |
| "dynamodb:*", | |
| "ec2:Describe*", | |
| "elasticmapreduce:Describe*", | |
| "elasticmapreduce:ListBootstrapActions", | |
| "elasticmapreduce:ListClusters", | |
| "elasticmapreduce:ListInstanceGroups", | |
| "elasticmapreduce:ListInstances", | |
| "elasticmapreduce:ListSteps", | |
| "kinesis:CreateStream", | |
| "kinesis:DeleteStream", | |
| "kinesis:DescribeStream", | |
| "kinesis:GetRecords", | |
| "kinesis:GetShardIterator", | |
| "kinesis:MergeShards", | |
| "kinesis:PutRecord", | |
| "kinesis:SplitShard", | |
| "rds:Describe*", | |
| "s3:*", | |
| "sdb:*", | |
| "sns:*", | |
| "sqs:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIGALS5RCDLZLB3PGS", | |
| "PolicyName": "AmazonElasticMapReduceforEC2Role", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "cloudwatch:DeleteAlarms", | |
| "cloudwatch:Describe*", | |
| "cloudwatch:DisableAlarmActions", | |
| "cloudwatch:EnableAlarmActions", | |
| "cloudwatch:Get*", | |
| "cloudwatch:List*", | |
| "cloudwatch:PutMetricAlarm", | |
| "datapipeline:ActivatePipeline", | |
| "datapipeline:CreatePipeline", | |
| "datapipeline:DeletePipeline", | |
| "datapipeline:DescribeObjects", | |
| "datapipeline:DescribePipelines", | |
| "datapipeline:GetPipelineDefinition", | |
| "datapipeline:ListPipelines", | |
| "datapipeline:PutPipelineDefinition", | |
| "datapipeline:QueryObjects", | |
| "dynamodb:*", | |
| "ec2:DescribeAccountAttributes", | |
| "ec2:DescribeAddresses", | |
| "ec2:DescribeAvailabilityZones", | |
| "ec2:DescribeInternetGateways", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeVpcs", | |
| "elasticache:*", | |
| "iam:ListRoles", | |
| "iam:GetRole", | |
| "kms:ListKeys", | |
| "lambda:CreateEventSourceMapping", | |
| "lambda:CreateFunction", | |
| "lambda:DeleteEventSourceMapping", | |
| "lambda:DeleteFunction", | |
| "lambda:GetFunctionConfiguration", | |
| "lambda:ListEventSourceMappings", | |
| "lambda:ListFunctions", | |
| "logs:DescribeLogGroups", | |
| "logs:DescribeLogStreams", | |
| "logs:FilterLogEvents", | |
| "logs:GetLogEvents", | |
| "logs:Create*", | |
| "logs:PutLogEvents", | |
| "logs:PutMetricFilter", | |
| "rds:*", | |
| "redshift:*", | |
| "s3:CreateBucket", | |
| "sns:CreateTopic", | |
| "sns:DeleteTopic", | |
| "sns:Get*", | |
| "sns:List*", | |
| "sns:SetTopicAttributes", | |
| "sns:Subscribe", | |
| "sns:Unsubscribe" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "s3:AbortMultipartUpload", | |
| "s3:DeleteObject*", | |
| "s3:Get*", | |
| "s3:List*", | |
| "s3:PutAccelerateConfiguration", | |
| "s3:PutBucketTagging", | |
| "s3:PutBucketVersioning", | |
| "s3:PutBucketWebsite", | |
| "s3:PutLifecycleConfiguration", | |
| "s3:PutReplicationConfiguration", | |
| "s3:PutObject*", | |
| "s3:Replicate*", | |
| "s3:RestoreObject" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "iam:GetRole", | |
| "iam:PassRole" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:iam::*:role/rds-monitoring-role", | |
| "arn:aws:iam::*:role/rdbms-lambda-access", | |
| "arn:aws:iam::*:role/lambda_exec_role", | |
| "arn:aws:iam::*:role/lambda-dynamodb-*", | |
| "arn:aws:iam::*:role/lambda-vpc-execution-role", | |
| "arn:aws:iam::*:role/DataPipelineDefaultRole", | |
| "arn:aws:iam::*:role/DataPipelineDefaultResourceRole" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIGBMAW4VUQKOQNVT6", | |
| "PolicyName": "DatabaseAdministrator", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "redshift:Describe*", | |
| "redshift:ViewQueriesInConsole", | |
| "ec2:DescribeAccountAttributes", | |
| "ec2:DescribeAddresses", | |
| "ec2:DescribeAvailabilityZones", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeVpcs", | |
| "ec2:DescribeInternetGateways", | |
| "sns:Get*", | |
| "sns:List*", | |
| "cloudwatch:Describe*", | |
| "cloudwatch:List*", | |
| "cloudwatch:Get*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIGD46KSON64QBSEZM", | |
| "PolicyName": "AmazonRedshiftReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": "ec2:Describe*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": "elasticloadbalancing:Describe*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "cloudwatch:ListMetrics", | |
| "cloudwatch:GetMetricStatistics", | |
| "cloudwatch:Describe*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": "autoscaling:Describe*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIGDT4SV4GSETWTBZK", | |
| "PolicyName": "AmazonEC2ReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "xray:BatchGetTraces", | |
| "xray:GetServiceGraph", | |
| "xray:GetTraceGraph", | |
| "xray:GetTraceSummaries" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIH4OFXWPS6ZX6OPGQ", | |
| "PolicyName": "AWSXrayReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "elasticloadbalancing:DescribeInstanceHealth", | |
| "elasticloadbalancing:DescribeLoadBalancers", | |
| "elasticloadbalancing:DescribeTargetHealth", | |
| "ec2:DescribeInstances", | |
| "ec2:DescribeInstanceStatus", | |
| "ec2:GetConsoleOutput", | |
| "ec2:AssociateAddress", | |
| "ec2:DescribeAddresses", | |
| "ec2:DescribeSecurityGroups", | |
| "sqs:GetQueueAttributes", | |
| "sqs:GetQueueUrl", | |
| "autoscaling:DescribeAutoScalingGroups", | |
| "autoscaling:DescribeAutoScalingInstances", | |
| "autoscaling:DescribeScalingActivities", | |
| "autoscaling:DescribeNotificationConfigurations" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIH5EFJNMOGUUTKLFE", | |
| "PolicyName": "AWSElasticBeanstalkEnhancedHealth", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "elasticmapreduce:Describe*", | |
| "elasticmapreduce:List*", | |
| "s3:GetObject", | |
| "s3:ListAllMyBuckets", | |
| "s3:ListBucket", | |
| "sdb:Select", | |
| "cloudwatch:GetMetricStatistics" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIHP6NH2S6GYFCOINC", | |
| "PolicyName": "AmazonElasticMapReduceReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ds:Check*", | |
| "ds:Describe*", | |
| "ds:Get*", | |
| "ds:List*", | |
| "ds:Verify*", | |
| "ec2:DescribeNetworkInterfaces", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeVpcs", | |
| "sns:ListTopics", | |
| "sns:GetTopicAttributes", | |
| "sns:ListSubscriptions", | |
| "sns:ListSubscriptionsByTopic" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIHWYO6WSDNCG64M2W", | |
| "PolicyName": "AWSDirectoryServiceReadOnlyAccess", | |
| "VersionId": "v3" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ec2:DescribeAddresses", | |
| "ec2:DescribeClassicLinkInstances", | |
| "ec2:DescribeCustomerGateways", | |
| "ec2:DescribeDhcpOptions", | |
| "ec2:DescribeFlowLogs", | |
| "ec2:DescribeInternetGateways", | |
| "ec2:DescribeMovingAddresses", | |
| "ec2:DescribeNatGateways", | |
| "ec2:DescribeNetworkAcls", | |
| "ec2:DescribeNetworkInterfaceAttribute", | |
| "ec2:DescribeNetworkInterfaces", | |
| "ec2:DescribePrefixLists", | |
| "ec2:DescribeRouteTables", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeTags", | |
| "ec2:DescribeVpcAttribute", | |
| "ec2:DescribeVpcClassicLink", | |
| "ec2:DescribeVpcEndpoints", | |
| "ec2:DescribeVpcEndpointServices", | |
| "ec2:DescribeVpcPeeringConnections", | |
| "ec2:DescribeVpcs", | |
| "ec2:DescribeVpnConnections", | |
| "ec2:DescribeVpnGateways" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIICZJNOJN36GTG6CM", | |
| "PolicyName": "AmazonVPCReadOnlyAccess", | |
| "VersionId": "v4" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "events:DescribeRule", | |
| "events:ListRuleNamesByTarget", | |
| "events:ListRules", | |
| "events:ListTargetsByRule", | |
| "events:TestEventPattern" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*", | |
| "Sid": "CloudWatchEventsReadOnlyAccess" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIILJPXXA6F7GYLYBS", | |
| "PolicyName": "CloudWatchEventsReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "execute-api:Invoke" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "arn:aws:execute-api:*:*:*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIIWAX2NOOQJ4AIEQ6", | |
| "PolicyName": "AmazonAPIGatewayInvokeFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "kinesisanalytics:Describe*", | |
| "kinesisanalytics:Get*", | |
| "kinesisanalytics:List*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "kinesis:DescribeStream", | |
| "kinesis:ListStreams" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "firehose:DescribeDeliveryStream", | |
| "firehose:ListDeliveryStreams" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "cloudwatch:GetMetricStatistics", | |
| "cloudwatch:ListMetrics" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": "logs:GetLogEvents", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "iam:ListPolicyVersions", | |
| "iam:ListRoles" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIJIEXZAFUK43U7ARK", | |
| "PolicyName": "AmazonKinesisAnalyticsReadOnly", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": "mobileanalytics:*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIJIKLU2IJ7WJ6DZFG", | |
| "PolicyName": "AmazonMobileAnalyticsFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "apigateway:GET", | |
| "apigateway:GetRestApis", | |
| "apigateway:GetResources", | |
| "apigateway:POST", | |
| "apigateway:TestInvokeMethod", | |
| "dynamodb:DescribeTable", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeVpcs", | |
| "lambda:ListFunctions", | |
| "sns:ListTopics", | |
| "lex:GetIntent", | |
| "lex:GetIntents", | |
| "lex:GetSlotType", | |
| "lex:GetSlotTypes", | |
| "lex:GetBot", | |
| "lex:GetBots", | |
| "lex:GetBotAlias", | |
| "lex:GetBotAliases", | |
| "mobilehub:CreateProject", | |
| "mobilehub:DeleteProject", | |
| "mobilehub:UpdateProject", | |
| "mobilehub:SynchronizeProject", | |
| "mobilehub:GenerateProjectParameters", | |
| "mobilehub:GetProject", | |
| "mobilehub:ListAvailableConnectors", | |
| "mobilehub:ListAvailableFeatures", | |
| "mobilehub:ListAvailableRegions", | |
| "mobilehub:ListProjects", | |
| "mobilehub:ValidateProject", | |
| "mobilehub:VerifyServiceRole" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "s3:GetObject" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "arn:aws:s3:::*/aws-my-sample-app*.zip" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIJLU43R6AGRBK76DM", | |
| "PolicyName": "AWSMobileHub_FullAccess", | |
| "VersionId": "v6" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "logs:CreateLogGroup", | |
| "logs:CreateLogStream", | |
| "logs:DescribeLogGroups", | |
| "logs:DescribeLogStreams", | |
| "logs:PutLogEvents", | |
| "logs:GetLogEvents", | |
| "logs:FilterLogEvents" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIK4GFO7HLKYN64ASK", | |
| "PolicyName": "AmazonAPIGatewayPushToCloudWatchLogs", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "cloudwatch:*", | |
| "datapipeline:DescribeObjects", | |
| "datapipeline:EvaluateExpression", | |
| "dynamodb:BatchGetItem", | |
| "dynamodb:DescribeTable", | |
| "dynamodb:GetItem", | |
| "dynamodb:Query", | |
| "dynamodb:Scan", | |
| "dynamodb:UpdateTable", | |
| "ec2:AuthorizeSecurityGroupIngress", | |
| "ec2:CancelSpotInstanceRequests", | |
| "ec2:CreateSecurityGroup", | |
| "ec2:CreateTags", | |
| "ec2:DeleteTags", | |
| "ec2:Describe*", | |
| "ec2:ModifyImageAttribute", | |
| "ec2:ModifyInstanceAttribute", | |
| "ec2:RequestSpotInstances", | |
| "ec2:RunInstances", | |
| "ec2:StartInstances", | |
| "ec2:StopInstances", | |
| "ec2:TerminateInstances", | |
| "ec2:AuthorizeSecurityGroupEgress", | |
| "ec2:DeleteSecurityGroup", | |
| "ec2:RevokeSecurityGroupEgress", | |
| "ec2:DescribeNetworkInterfaces", | |
| "ec2:CreateNetworkInterface", | |
| "ec2:DeleteNetworkInterface", | |
| "ec2:DetachNetworkInterface", | |
| "elasticmapreduce:*", | |
| "iam:GetInstanceProfile", | |
| "iam:GetRole", | |
| "iam:GetRolePolicy", | |
| "iam:ListAttachedRolePolicies", | |
| "iam:ListRolePolicies", | |
| "iam:ListInstanceProfiles", | |
| "iam:PassRole", | |
| "rds:DescribeDBInstances", | |
| "rds:DescribeDBSecurityGroups", | |
| "redshift:DescribeClusters", | |
| "redshift:DescribeClusterSecurityGroups", | |
| "s3:CreateBucket", | |
| "s3:DeleteObject", | |
| "s3:Get*", | |
| "s3:List*", | |
| "s3:Put*", | |
| "sdb:BatchPutAttributes", | |
| "sdb:Select*", | |
| "sns:GetTopicAttributes", | |
| "sns:ListTopics", | |
| "sns:Publish", | |
| "sns:Subscribe", | |
| "sns:Unsubscribe", | |
| "sqs:CreateQueue", | |
| "sqs:Delete*", | |
| "sqs:GetQueue*", | |
| "sqs:PurgeQueue", | |
| "sqs:ReceiveMessage" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIKCP6XS3ESGF4GLO2", | |
| "PolicyName": "AWSDataPipelineRole", | |
| "VersionId": "v5" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "autoscaling:Describe*", | |
| "cloudwatch:*", | |
| "logs:*", | |
| "sns:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIKEABORKUXN6DEAZU", | |
| "PolicyName": "CloudWatchFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "catalog-admin:*", | |
| "catalog-user:*", | |
| "cloudformation:CreateStack", | |
| "cloudformation:CreateUploadBucket", | |
| "cloudformation:DeleteStack", | |
| "cloudformation:DescribeStackEvents", | |
| "cloudformation:DescribeStacks", | |
| "cloudformation:GetTemplateSummary", | |
| "cloudformation:SetStackPolicy", | |
| "cloudformation:ValidateTemplate", | |
| "cloudformation:UpdateStack", | |
| "iam:GetGroup", | |
| "iam:GetRole", | |
| "iam:GetUser", | |
| "iam:ListGroups", | |
| "iam:ListRoles", | |
| "iam:ListUsers", | |
| "iam:PassRole", | |
| "s3:CreateBucket", | |
| "s3:GetObject", | |
| "s3:PutObject", | |
| "servicecatalog:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIKTX42IAS75B7B7BY", | |
| "PolicyName": "ServiceCatalogAdminFullAccess", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ds:DescribeDirectories", | |
| "ds:AuthorizeApplication", | |
| "ds:UnauthorizeApplication" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIL4KBY57XWMYUHKUU", | |
| "PolicyName": "AmazonRDSDirectoryServiceAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "codepipeline:GetPipeline", | |
| "codepipeline:GetPipelineState", | |
| "codepipeline:GetPipelineExecution", | |
| "codepipeline:ListActionTypes", | |
| "codepipeline:ListPipelines", | |
| "iam:ListRoles", | |
| "s3:GetBucketPolicy", | |
| "s3:GetObject", | |
| "s3:ListAllMyBuckets", | |
| "s3:ListBucket", | |
| "codecommit:ListBranches", | |
| "codecommit:ListRepositories", | |
| "codedeploy:GetApplication", | |
| "codedeploy:GetDeploymentGroup", | |
| "codedeploy:ListApplications", | |
| "codedeploy:ListDeploymentGroups", | |
| "elasticbeanstalk:DescribeApplications", | |
| "elasticbeanstalk:DescribeEnvironments", | |
| "lambda:GetFunctionConfiguration", | |
| "lambda:ListFunctions", | |
| "opsworks:DescribeApps", | |
| "opsworks:DescribeLayers", | |
| "opsworks:DescribeStacks" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAILFKZXIBOTNC5TO2Q", | |
| "PolicyName": "AWSCodePipelineReadOnlyAccess", | |
| "VersionId": "v5" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "acm:DescribeCertificate", | |
| "acm:GetCertificate", | |
| "acm:ListCertificates", | |
| "acm:ListTagsForCertificate", | |
| "apigateway:GET", | |
| "application-autoscaling:Describe*", | |
| "appstream:Describe*", | |
| "appstream:Get*", | |
| "appstream:List*", | |
| "autoscaling:Describe*", | |
| "cloudformation:Describe*", | |
| "cloudformation:Get*", | |
| "cloudformation:List*", | |
| "cloudfront:Get*", | |
| "cloudfront:List*", | |
| "cloudsearch:Describe*", | |
| "cloudsearch:List*", | |
| "cloudtrail:DescribeTrails", | |
| "cloudtrail:GetEventSelectors", | |
| "cloudtrail:GetTrailStatus", | |
| "cloudtrail:LookupEvents", | |
| "cloudtrail:ListTags", | |
| "cloudtrail:ListPublicKeys", | |
| "cloudwatch:Describe*", | |
| "cloudwatch:Get*", | |
| "cloudwatch:List*", | |
| "codebuild:BatchGetBuilds", | |
| "codebuild:BatchGetProjects", | |
| "codebuild:List*", | |
| "codecommit:BatchGetRepositories", | |
| "codecommit:Get*", | |
| "codecommit:GitPull", | |
| "codecommit:List*", | |
| "codedeploy:Batch*", | |
| "codedeploy:Get*", | |
| "codedeploy:List*", | |
| "config:Deliver*", | |
| "config:Describe*", | |
| "config:Get*", | |
| "config:List*", | |
| "datapipeline:DescribeObjects", | |
| "datapipeline:DescribePipelines", | |
| "datapipeline:EvaluateExpression", | |
| "datapipeline:GetAccountLimits", | |
| "datapipeline:GetPipelineDefinition", | |
| "datapipeline:ListPipelines", | |
| "datapipeline:QueryObjects", | |
| "datapipeline:ValidatePipelineDefinition", | |
| "directconnect:Describe*", | |
| "dms:Describe*", | |
| "dms:List*", | |
| "ds:Check*", | |
| "ds:Describe*", | |
| "ds:Get*", | |
| "ds:List*", | |
| "ds:Verify*", | |
| "dynamodb:BatchGetItem", | |
| "dynamodb:DescribeLimits", | |
| "dynamodb:DescribeTable", | |
| "dynamodb:GetItem", | |
| "dynamodb:ListTables", | |
| "dynamodb:Query", | |
| "dynamodb:Scan", | |
| "ec2:Describe*", | |
| "ec2:GetConsoleOutput", | |
| "ec2:GetConsoleScreenshot", | |
| "ecr:BatchCheckLayerAvailability", | |
| "ecr:BatchGetImage", | |
| "ecr:Describe*", | |
| "ecr:Get*", | |
| "ecr:List*", | |
| "ecs:Describe*", | |
| "ecs:List*", | |
| "elasticache:Describe*", | |
| "elasticache:List*", | |
| "elasticbeanstalk:Check*", | |
| "elasticbeanstalk:Describe*", | |
| "elasticbeanstalk:List*", | |
| "elasticbeanstalk:RequestEnvironmentInfo", | |
| "elasticbeanstalk:RetrieveEnvironmentInfo", | |
| "elasticfilesystem:Describe*", | |
| "elasticloadbalancing:Describe*", | |
| "elasticmapreduce:Describe*", | |
| "elasticmapreduce:List*", | |
| "elastictranscoder:List*", | |
| "elastictranscoder:Read*", | |
| "es:DescribeElasticsearchDomain", | |
| "es:DescribeElasticsearchDomains", | |
| "es:DescribeElasticsearchDomainConfig", | |
| "es:ListDomainNames", | |
| "es:ListTags", | |
| "es:ESHttpGet", | |
| "es:ESHttpHead", | |
| "events:DescribeRule", | |
| "events:ListRuleNamesByTarget", | |
| "events:ListRules", | |
| "events:ListTargetsByRule", | |
| "events:TestEventPattern", | |
| "firehose:Describe*", | |
| "firehose:List*", | |
| "glacier:ListVaults", | |
| "glacier:DescribeVault", | |
| "glacier:GetDataRetrievalPolicy", | |
| "glacier:GetVaultAccessPolicy", | |
| "glacier:GetVaultLock", | |
| "glacier:GetVaultNotifications", | |
| "glacier:ListJobs", | |
| "glacier:ListMultipartUploads", | |
| "glacier:ListParts", | |
| "glacier:ListTagsForVault", | |
| "glacier:DescribeJob", | |
| "glacier:GetJobOutput", | |
| "health:Describe*", | |
| "health:Get*", | |
| "health:List*", | |
| "iam:GenerateCredentialReport", | |
| "iam:GenerateServiceLastAccessedDetails", | |
| "iam:Get*", | |
| "iam:List*", | |
| "inspector:Describe*", | |
| "inspector:Get*", | |
| "inspector:List*", | |
| "inspector:LocalizeText", | |
| "inspector:PreviewAgentsForResourceGroup", | |
| "iot:Describe*", | |
| "iot:Get*", | |
| "iot:List*", | |
| "kinesisanalytics:DescribeApplication", | |
| "kinesisanalytics:DiscoverInputSchema", | |
| "kinesisanalytics:GetApplicationState", | |
| "kinesisanalytics:ListApplications", | |
| "kinesis:Describe*", | |
| "kinesis:Get*", | |
| "kinesis:List*", | |
| "kms:Describe*", | |
| "kms:Get*", | |
| "kms:List*", | |
| "lambda:List*", | |
| "lambda:Get*", | |
| "logs:Describe*", | |
| "logs:Get*", | |
| "logs:FilterLogEvents", | |
| "logs:TestMetricFilter", | |
| "machinelearning:Describe*", | |
| "machinelearning:Get*", | |
| "mobilehub:GetProject", | |
| "mobilehub:ListAvailableFeatures", | |
| "mobilehub:ListAvailableRegions", | |
| "mobilehub:ListProjects", | |
| "mobilehub:ValidateProject", | |
| "mobilehub:VerifyServiceRole", | |
| "opsworks:Describe*", | |
| "opsworks:Get*", | |
| "polly:Describe*", | |
| "polly:Get*", | |
| "polly:List*", | |
| "polly:SynthesizeSpeech", | |
| "rekognition:CompareFaces", | |
| "rekognition:DetectFaces", | |
| "rekognition:DetectLabels", | |
| "rekognition:List*", | |
| "rekognition:SearchFaces", | |
| "rekognition:SearchFacesByImage", | |
| "rds:Describe*", | |
| "rds:ListTagsForResource", | |
| "redshift:Describe*", | |
| "redshift:ViewQueriesInConsole", | |
| "route53:Get*", | |
| "route53:List*", | |
| "route53domains:CheckDomainAvailability", | |
| "route53domains:GetDomainDetail", | |
| "route53domains:GetOperationDetail", | |
| "route53domains:ListDomains", | |
| "route53domains:ListOperations", | |
| "route53domains:ListTagsForDomain", | |
| "s3:Get*", | |
| "s3:List*", | |
| "sdb:GetAttributes", | |
| "sdb:List*", | |
| "sdb:Select*", | |
| "ses:Get*", | |
| "ses:List*", | |
| "shield:Describe*", | |
| "shield:List*", | |
| "sns:Get*", | |
| "sns:List*", | |
| "sqs:GetQueueAttributes", | |
| "sqs:ListQueues", | |
| "sqs:ReceiveMessage", | |
| "ssm:Describe*", | |
| "ssm:Get*", | |
| "ssm:List*", | |
| "storagegateway:Describe*", | |
| "storagegateway:List*", | |
| "swf:Count*", | |
| "swf:Describe*", | |
| "swf:Get*", | |
| "swf:List*", | |
| "tag:Get*", | |
| "trustedadvisor:Describe*", | |
| "waf:Get*", | |
| "waf:List*", | |
| "workspaces:Describe*", | |
| "xray:BatchGetTraces", | |
| "xray:Get*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAILL3HVNFSB6DCOWYQ", | |
| "PolicyName": "ReadOnlyAccess", | |
| "VersionId": "v23" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "machinelearning:CreateBatchPrediction", | |
| "machinelearning:DeleteBatchPrediction", | |
| "machinelearning:DescribeBatchPredictions", | |
| "machinelearning:GetBatchPrediction", | |
| "machinelearning:UpdateBatchPrediction" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAILOI4HTQSFTF3GQSC", | |
| "PolicyName": "AmazonMachineLearningBatchPredictionsAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "rekognition:CompareFaces", | |
| "rekognition:DetectFaces", | |
| "rekognition:DetectLabels", | |
| "rekognition:ListCollections", | |
| "rekognition:ListFaces", | |
| "rekognition:SearchFaces", | |
| "rekognition:SearchFacesByImage" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAILWSUHXUY4ES43SA4", | |
| "PolicyName": "AmazonRekognitionReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "codedeploy:Batch*", | |
| "codedeploy:Get*", | |
| "codedeploy:List*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAILZHHKCKB4NE7XOIQ", | |
| "PolicyName": "AWSCodeDeployReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "cloudsearch:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIM6OOWKQ7L7VBOZOC", | |
| "PolicyName": "CloudSearchFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": "cloudhsm:*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIMBQYQZM7F63DA2UU", | |
| "PolicyName": "AWSCloudHSMFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ec2:DescribeSpotFleetRequests", | |
| "ec2:ModifySpotFleetRequest" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "cloudwatch:DescribeAlarms" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIMFFRMIOBGDP2TAVE", | |
| "PolicyName": "AmazonEC2SpotFleetAutoscaleRole", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "codebuild:StartBuild", | |
| "codebuild:StopBuild", | |
| "codebuild:BatchGet*", | |
| "codebuild:Get*", | |
| "codebuild:List*", | |
| "codecommit:GetBranch", | |
| "codecommit:GetCommit", | |
| "codecommit:GetRepository", | |
| "codecommit:ListBranches", | |
| "s3:GetBucketLocation", | |
| "s3:ListAllMyBuckets" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "logs:GetLogEvents" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "arn:aws:logs:*:*:log-group:/aws/codebuild/*:log-stream:*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIMKTMR34XSBQW45HS", | |
| "PolicyName": "AWSCodeBuildDeveloperAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ec2:DescribeImages", | |
| "ec2:DescribeSubnets", | |
| "ec2:RequestSpotInstances", | |
| "ec2:TerminateInstances", | |
| "ec2:DescribeInstanceStatus", | |
| "iam:PassRole" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIMRTKHWK7ESSNETSW", | |
| "PolicyName": "AmazonEC2SpotFleetRole", | |
| "VersionId": "v3" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "s3:List*", | |
| "dynamodb:DescribeTable", | |
| "rds:DescribeDBInstances", | |
| "rds:DescribeDBSecurityGroups", | |
| "redshift:DescribeClusters", | |
| "redshift:DescribeClusterSecurityGroups", | |
| "sns:ListTopics", | |
| "iam:ListRoles", | |
| "iam:GetRolePolicy", | |
| "iam:GetInstanceProfiles", | |
| "iam:ListInstanceProfiles", | |
| "datapipeline:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| }, | |
| { | |
| "Action": "iam:PassRole", | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:iam::*:role/DataPipelineDefaultResourceRole", | |
| "arn:aws:iam::*:role/DataPipelineDefaultRole" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIMXGLVY6DVR24VTYS", | |
| "PolicyName": "AWSDataPipeline_PowerUser", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "elastictranscoder:Read*", | |
| "elastictranscoder:List*", | |
| "elastictranscoder:*Job", | |
| "elastictranscoder:*Preset", | |
| "s3:List*", | |
| "iam:List*", | |
| "sns:List*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIN5WGARIKZ3E2UQOU", | |
| "PolicyName": "AmazonElasticTranscoderJobsSubmitter", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ds:*", | |
| "ec2:AuthorizeSecurityGroupEgress", | |
| "ec2:AuthorizeSecurityGroupIngress", | |
| "ec2:CreateNetworkInterface", | |
| "ec2:CreateSecurityGroup", | |
| "ec2:DeleteNetworkInterface", | |
| "ec2:DeleteSecurityGroup", | |
| "ec2:DescribeNetworkInterfaces", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeVpcs", | |
| "ec2:RevokeSecurityGroupEgress", | |
| "ec2:RevokeSecurityGroupIngress", | |
| "sns:GetTopicAttributes", | |
| "sns:ListSubscriptions", | |
| "sns:ListSubscriptionsByTopic", | |
| "sns:ListTopics" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "sns:CreateTopic", | |
| "sns:DeleteTopic", | |
| "sns:SetTopicAttributes", | |
| "sns:Subscribe", | |
| "sns:Unsubscribe" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "arn:aws:sns:*:*:DirectoryMonitoring*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAINAW5ANUWTH3R4ANI", | |
| "PolicyName": "AWSDirectoryServiceFullAccess", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "dynamodb:*", | |
| "cloudwatch:DeleteAlarms", | |
| "cloudwatch:DescribeAlarmHistory", | |
| "cloudwatch:DescribeAlarms", | |
| "cloudwatch:DescribeAlarmsForMetric", | |
| "cloudwatch:GetMetricStatistics", | |
| "cloudwatch:ListMetrics", | |
| "cloudwatch:PutMetricAlarm", | |
| "datapipeline:ActivatePipeline", | |
| "datapipeline:CreatePipeline", | |
| "datapipeline:DeletePipeline", | |
| "datapipeline:DescribeObjects", | |
| "datapipeline:DescribePipelines", | |
| "datapipeline:GetPipelineDefinition", | |
| "datapipeline:ListPipelines", | |
| "datapipeline:PutPipelineDefinition", | |
| "datapipeline:QueryObjects", | |
| "iam:ListRoles", | |
| "sns:CreateTopic", | |
| "sns:DeleteTopic", | |
| "sns:ListSubscriptions", | |
| "sns:ListSubscriptionsByTopic", | |
| "sns:ListTopics", | |
| "sns:Subscribe", | |
| "sns:Unsubscribe", | |
| "sns:SetTopicAttributes", | |
| "lambda:CreateFunction", | |
| "lambda:ListFunctions", | |
| "lambda:ListEventSourceMappings", | |
| "lambda:CreateEventSourceMapping", | |
| "lambda:DeleteEventSourceMapping", | |
| "lambda:GetFunctionConfiguration", | |
| "lambda:DeleteFunction" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAINUGF2JSOSUY76KYA", | |
| "PolicyName": "AmazonDynamoDBFullAccess", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ses:Get*", | |
| "ses:List*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAINV2XPFRMWJJNSCGI", | |
| "PolicyName": "AmazonSESReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "waf:Get*", | |
| "waf:List*", | |
| "waf-regional:Get*", | |
| "waf-regional:List*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAINZVDMX2SBF7EU2OC", | |
| "PolicyName": "AWSWAFReadOnlyAccess", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "sqs:SendMessage", | |
| "sqs:GetQueueUrl", | |
| "sns:Publish" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIO2VMUPGDC5PZVXVA", | |
| "PolicyName": "AutoScalingNotificationAccessRole", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "mechanicalturk:Get*", | |
| "mechanicalturk:Search*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIO5IY3G3WXSX5PPRM", | |
| "PolicyName": "AmazonMechanicalTurkReadOnly", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "kinesis:Get*", | |
| "kinesis:List*", | |
| "kinesis:Describe*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIOCMTDT5RLKZ2CAJO", | |
| "PolicyName": "AmazonKinesisReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": "codedeploy:*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIONKN3TJZUKXCHXWC", | |
| "PolicyName": "AWSCodeDeployFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "cloudwatch:Describe*", | |
| "ec2:Describe*", | |
| "ec2:RebootInstances", | |
| "ec2:StopInstances", | |
| "ec2:TerminateInstances" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIOWD4E3FVSORSZTGU", | |
| "PolicyName": "CloudWatchActionsEC2Access", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "dynamodb:DescribeStream", | |
| "dynamodb:GetRecords", | |
| "dynamodb:GetShardIterator", | |
| "dynamodb:ListStreams", | |
| "logs:CreateLogGroup", | |
| "logs:CreateLogStream", | |
| "logs:PutLogEvents" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIP7WNAGMIPYNW4WQG", | |
| "PolicyName": "AWSLambdaDynamoDBExecutionRole", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "route53:CreateHostedZone", | |
| "route53domains:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIPAFBMIYUILMOKL6G", | |
| "PolicyName": "AmazonRoute53DomainsFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "elasticache:Describe*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIPDACSNQHSENWAKM2", | |
| "PolicyName": "AmazonElastiCacheReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "athena:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "s3:GetBucketLocation", | |
| "s3:GetObject", | |
| "s3:ListBucket", | |
| "s3:ListBucketMultipartUploads", | |
| "s3:ListMultipartUploadParts", | |
| "s3:AbortMultipartUpload", | |
| "s3:CreateBucket", | |
| "s3:PutObject" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:s3:::aws-athena-query-results-*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIPJMLMD4C7RYZ6XCK", | |
| "PolicyName": "AmazonAthenaFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ec2:DescribeAvailabilityZones", | |
| "ec2:DescribeNetworkInterfaceAttribute", | |
| "ec2:DescribeNetworkInterfaces", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeVpcs", | |
| "elasticfilesystem:Describe*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIPN5S4NE5JJOKVC4Y", | |
| "PolicyName": "AmazonElasticFileSystemReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "s3:ListAllMyBuckets" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "arn:aws:s3:::*" | |
| }, | |
| { | |
| "Action": [ | |
| "acm:ListCertificates", | |
| "cloudfront:*", | |
| "iam:ListServerCertificates", | |
| "waf:ListWebACLs", | |
| "waf:GetWebACL" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIPRV52SH6HDCCFY6U", | |
| "PolicyName": "CloudFrontFullAccess", | |
| "VersionId": "v3" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ec2:AuthorizeSecurityGroupIngress", | |
| "ec2:CreateSecurityGroup", | |
| "ec2:DescribeInternetGateways", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:RevokeSecurityGroupIngress", | |
| "redshift:AuthorizeClusterSecurityGroupIngress", | |
| "redshift:CreateClusterSecurityGroup", | |
| "redshift:DescribeClusters", | |
| "redshift:DescribeClusterSecurityGroups", | |
| "redshift:ModifyCluster", | |
| "redshift:RevokeClusterSecurityGroupIngress", | |
| "s3:GetBucketLocation", | |
| "s3:GetBucketPolicy", | |
| "s3:GetObject", | |
| "s3:PutBucketPolicy", | |
| "s3:PutObject" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIQ5UDYYMNN42BM4AK", | |
| "PolicyName": "AmazonMachineLearningRoleforRedshiftDataSource", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": "mobileanalytics:GetReports", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIQLKQ4RXPUBBVVRDE", | |
| "PolicyName": "AmazonMobileAnalyticsNon-financialReportAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "sns:AddPermission", | |
| "sns:CreateTopic", | |
| "sns:DeleteTopic", | |
| "sns:ListTopics", | |
| "sns:SetTopicAttributes", | |
| "sns:GetTopicAttributes" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "s3:CreateBucket", | |
| "s3:DeleteBucket", | |
| "s3:ListAllMyBuckets", | |
| "s3:PutBucketPolicy", | |
| "s3:ListBucket", | |
| "s3:GetObject", | |
| "s3:GetBucketLocation", | |
| "s3:GetBucketPolicy" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": "cloudtrail:*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "logs:CreateLogGroup" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "iam:PassRole", | |
| "iam:ListRoles", | |
| "iam:GetRolePolicy", | |
| "iam:GetUser" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "kms:ListKeys", | |
| "kms:ListAliases" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIQNUJTQYDRJPC3BNK", | |
| "PolicyName": "AWSCloudTrailFullAccess", | |
| "VersionId": "v4" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "cognito-identity:GetOpenIdTokenForDeveloperIdentity", | |
| "cognito-identity:LookupDeveloperIdentity", | |
| "cognito-identity:MergeDeveloperIdentities", | |
| "cognito-identity:UnlinkDeveloperIdentity" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIQOKZ5BGKLCMTXH4W", | |
| "PolicyName": "AmazonCognitoDeveloperAuthenticatedIdentities", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "cloudtrail:DescribeTrails", | |
| "ec2:Describe*", | |
| "config:Put*", | |
| "config:Get*", | |
| "config:List*", | |
| "config:Describe*", | |
| "cloudtrail:GetTrailStatus", | |
| "s3:GetObject", | |
| "iam:GetAccountAuthorizationDetails", | |
| "iam:GetAccountPasswordPolicy", | |
| "iam:GetAccountSummary", | |
| "iam:GetGroup", | |
| "iam:GetGroupPolicy", | |
| "iam:GetPolicy", | |
| "iam:GetPolicyVersion", | |
| "iam:GetRole", | |
| "iam:GetRolePolicy", | |
| "iam:GetUser", | |
| "iam:GetUserPolicy", | |
| "iam:ListAttachedGroupPolicies", | |
| "iam:ListAttachedRolePolicies", | |
| "iam:ListAttachedUserPolicies", | |
| "iam:ListEntitiesForPolicy", | |
| "iam:ListGroupPolicies", | |
| "iam:ListGroupsForUser", | |
| "iam:ListInstanceProfilesForRole", | |
| "iam:ListPolicyVersions", | |
| "iam:ListRolePolicies", | |
| "iam:ListUserPolicies", | |
| "elasticloadbalancing:DescribeLoadBalancers", | |
| "elasticloadbalancing:DescribeLoadBalancerAttributes", | |
| "elasticloadbalancing:DescribeTags", | |
| "acm:DescribeCertificate", | |
| "acm:ListCertificates", | |
| "acm:ListTagsForCertificate", | |
| "rds:DescribeDBInstances", | |
| "rds:DescribeDBSecurityGroups", | |
| "rds:DescribeDBSnapshotAttributes", | |
| "rds:DescribeDBSnapshots", | |
| "rds:DescribeDBSubnetGroups", | |
| "rds:DescribeEventSubscriptions", | |
| "rds:ListTagsForResource", | |
| "rds:DescribeDBClusters", | |
| "s3:GetAccelerateConfiguration", | |
| "s3:GetBucketAcl", | |
| "s3:GetBucketCORS", | |
| "s3:GetBucketLocation", | |
| "s3:GetBucketLogging", | |
| "s3:GetBucketNotification", | |
| "s3:GetBucketPolicy", | |
| "s3:GetBucketRequestPayment", | |
| "s3:GetBucketTagging", | |
| "s3:GetBucketVersioning", | |
| "s3:GetBucketWebsite", | |
| "s3:GetLifecycleConfiguration", | |
| "s3:GetReplicationConfiguration", | |
| "s3:ListAllMyBuckets", | |
| "redshift:DescribeClusterParameterGroups", | |
| "redshift:DescribeClusterParameters", | |
| "redshift:DescribeClusterSecurityGroups", | |
| "redshift:DescribeClusterSnapshots", | |
| "redshift:DescribeClusterSubnetGroups", | |
| "redshift:DescribeClusters", | |
| "redshift:DescribeEventSubscriptions", | |
| "redshift:DescribeLoggingStatus", | |
| "dynamodb:DescribeLimits", | |
| "dynamodb:DescribeTable", | |
| "dynamodb:ListTables" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIQRXRDRGJUA33ELIO", | |
| "PolicyName": "AWSConfigRole", | |
| "VersionId": "v8" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ec2:DescribeVpcs", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeAvailabilityZones", | |
| "ec2:CreateNetworkInterface", | |
| "ec2:DescribeNetworkInterfaces", | |
| "ec2:DeleteNetworkInterface", | |
| "ec2:DescribeSubnets", | |
| "ec2:AssociateAddress", | |
| "ec2:DisassociateAddress", | |
| "ec2:DescribeRouteTables" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAISBRZ7LMMCBYEF3SE", | |
| "PolicyName": "AmazonAppStreamServiceAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "redshift:*", | |
| "ec2:DescribeAccountAttributes", | |
| "ec2:DescribeAddresses", | |
| "ec2:DescribeAvailabilityZones", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeVpcs", | |
| "ec2:DescribeInternetGateways", | |
| "sns:CreateTopic", | |
| "sns:Get*", | |
| "sns:List*", | |
| "cloudwatch:Describe*", | |
| "cloudwatch:Get*", | |
| "cloudwatch:List*", | |
| "cloudwatch:PutMetricAlarm", | |
| "cloudwatch:EnableAlarmActions", | |
| "cloudwatch:DisableAlarmActions" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAISEKCHH4YDB46B5ZO", | |
| "PolicyName": "AmazonRedshiftFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "zocalo:Describe*", | |
| "ds:DescribeDirectories", | |
| "ec2:DescribeVpcs", | |
| "ec2:DescribeSubnets" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAISRCSSJNS3QPKZJPM", | |
| "PolicyName": "AmazonZocaloReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "cloudhsm:Get*", | |
| "cloudhsm:List*", | |
| "cloudhsm:Describe*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAISVCBSY7YDBOT67KE", | |
| "PolicyName": "AWSCloudHSMReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "acm:Describe*", | |
| "acm:Get*", | |
| "acm:List*", | |
| "acm:Request*", | |
| "acm:Resend*", | |
| "autoscaling:*", | |
| "cloudtrail:DescribeTrails", | |
| "cloudtrail:GetTrailStatus", | |
| "cloudtrail:ListPublicKeys", | |
| "cloudtrail:ListTags", | |
| "cloudtrail:LookupEvents", | |
| "cloudtrail:StartLogging", | |
| "cloudtrail:StopLogging", | |
| "cloudwatch:*", | |
| "codecommit:BatchGetRepositories", | |
| "codecommit:CreateBranch", | |
| "codecommit:CreateRepository", | |
| "codecommit:Get*", | |
| "codecommit:GitPull", | |
| "codecommit:GitPush", | |
| "codecommit:List*", | |
| "codecommit:Put*", | |
| "codecommit:Test*", | |
| "codecommit:Update*", | |
| "codedeploy:*", | |
| "codepipeline:*", | |
| "config:*", | |
| "ds:*", | |
| "ec2:Allocate*", | |
| "ec2:AssignPrivateIpAddresses*", | |
| "ec2:Associate*", | |
| "ec2:Allocate*", | |
| "ec2:AttachInternetGateway", | |
| "ec2:AttachNetworkInterface", | |
| "ec2:AttachVpnGateway", | |
| "ec2:Bundle*", | |
| "ec2:Cancel*", | |
| "ec2:Copy*", | |
| "ec2:CreateCustomerGateway", | |
| "ec2:CreateDhcpOptions", | |
| "ec2:CreateFlowLogs", | |
| "ec2:CreateImage", | |
| "ec2:CreateInstanceExportTask", | |
| "ec2:CreateInternetGateway", | |
| "ec2:CreateKeyPair", | |
| "ec2:CreateNatGateway", | |
| "ec2:CreateNetworkInterface", | |
| "ec2:CreatePlacementGroup", | |
| "ec2:CreateReservedInstancesListing", | |
| "ec2:CreateRoute", | |
| "ec2:CreateRouteTable", | |
| "ec2:CreateSecurityGroup", | |
| "ec2:CreateSnapshot", | |
| "ec2:CreateSpotDatafeedSubscription", | |
| "ec2:CreateSubnet", | |
| "ec2:CreateTags", | |
| "ec2:CreateVolume", | |
| "ec2:CreateVpc", | |
| "ec2:CreateVpcEndpoint", | |
| "ec2:CreateVpnConnection", | |
| "ec2:CreateVpnConnectionRoute", | |
| "ec2:CreateVpnGateway", | |
| "ec2:DeleteFlowLogs", | |
| "ec2:DeleteKeyPair", | |
| "ec2:DeleteNatGateway", | |
| "ec2:DeleteNetworkInterface", | |
| "ec2:DeletePlacementGroup", | |
| "ec2:DeleteSnapshot", | |
| "ec2:DeleteSpotDatafeedSubscription", | |
| "ec2:DeleteSubnet", | |
| "ec2:DeleteTags", | |
| "ec2:DeleteVpc", | |
| "ec2:DeleteVpcEndpoints", | |
| "ec2:DeleteVpnConnection", | |
| "ec2:DeleteVpnConnectionRoute", | |
| "ec2:DeleteVpnGateway", | |
| "ec2:DeregisterImage", | |
| "ec2:Describe*", | |
| "ec2:DetachInternetGateway", | |
| "ec2:DetachNetworkInterface", | |
| "ec2:DetachVpnGateway", | |
| "ec2:DisableVgwRoutePropagation", | |
| "ec2:DisableVpcClassicLinkDnsSupport", | |
| "ec2:DisassociateAddress", | |
| "ec2:DisassociateRouteTable", | |
| "ec2:EnableVgwRoutePropagation", | |
| "ec2:EnableVolumeIO", | |
| "ec2:EnableVpcClassicLinkDnsSupport", | |
| "ec2:GetConsoleOutput", | |
| "ec2:GetHostReservationPurchasePreview", | |
| "ec2:GetPasswordData", | |
| "ec2:Import*", | |
| "ec2:Modify*", | |
| "ec2:MonitorInstances", | |
| "ec2:MoveAddressToVpc", | |
| "ec2:Purchase*", | |
| "ec2:RegisterImage", | |
| "ec2:Release*", | |
| "ec2:Replace*", | |
| "ec2:ReportInstanceStatus", | |
| "ec2:Request*", | |
| "ec2:Reset*", | |
| "ec2:RestoreAddressToClassic", | |
| "ec2:RunScheduledInstances", | |
| "ec2:UnassignPrivateIpAddresses", | |
| "ec2:UnmonitorInstances", | |
| "elasticloadbalancing:*", | |
| "events:*", | |
| "iam:GetAccount*", | |
| "iam:GetContextKeys*", | |
| "iam:GetCredentialReport", | |
| "iam:ListAccountAliases", | |
| "iam:ListGroups", | |
| "iam:ListOpenIDConnectProviders", | |
| "iam:ListPolicies", | |
| "iam:ListPoliciesGrantingServiceAccess", | |
| "iam:ListRoles", | |
| "iam:ListSAMLProviders", | |
| "iam:ListServerCertificates", | |
| "iam:Simulate*", | |
| "iam:UpdateServerCertificate", | |
| "iam:UpdateSigningCertificate", | |
| "kinesis:ListStreams", | |
| "kinesis:PutRecord", | |
| "kms:CreateAlias", | |
| "kms:CreateKey", | |
| "kms:DeleteAlias", | |
| "kms:Describe*", | |
| "kms:GenerateRandom", | |
| "kms:Get*", | |
| "kms:List*", | |
| "kms:Encrypt", | |
| "kms:ReEncrypt", | |
| "lambda:Create*", | |
| "lambda:Delete*", | |
| "lambda:Get*", | |
| "lambda:InvokeFunction", | |
| "lambda:List*", | |
| "lambda:PublishVersion", | |
| "lambda:Update*", | |
| "logs:*", | |
| "rds:Describe*", | |
| "rds:ListTagsForResource", | |
| "route53:*", | |
| "route53domains:*", | |
| "ses:*", | |
| "sns:*", | |
| "sqs:*", | |
| "trustedadvisor:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "ec2:AcceptVpcPeeringConnection", | |
| "ec2:AttachClassicLinkVpc", | |
| "ec2:AttachVolume", | |
| "ec2:AuthorizeSecurityGroupEgress", | |
| "ec2:AuthorizeSecurityGroupIngress", | |
| "ec2:CreateVpcPeeringConnection", | |
| "ec2:DeleteCustomerGateway", | |
| "ec2:DeleteDhcpOptions", | |
| "ec2:DeleteInternetGateway", | |
| "ec2:DeleteNetworkAcl*", | |
| "ec2:DeleteRoute", | |
| "ec2:DeleteRouteTable", | |
| "ec2:DeleteSecurityGroup", | |
| "ec2:DeleteVolume", | |
| "ec2:DeleteVpcPeeringConnection", | |
| "ec2:DetachClassicLinkVpc", | |
| "ec2:DetachVolume", | |
| "ec2:DisableVpcClassicLink", | |
| "ec2:EnableVpcClassicLink", | |
| "ec2:GetConsoleScreenshot", | |
| "ec2:RebootInstances", | |
| "ec2:RejectVpcPeeringConnection", | |
| "ec2:RevokeSecurityGroupEgress", | |
| "ec2:RevokeSecurityGroupIngress", | |
| "ec2:RunInstances", | |
| "ec2:StartInstances", | |
| "ec2:StopInstances", | |
| "ec2:TerminateInstances" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| }, | |
| { | |
| "Action": "s3:*", | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "iam:GetAccessKeyLastUsed", | |
| "iam:GetGroup*", | |
| "iam:GetInstanceProfile", | |
| "iam:GetLoginProfile", | |
| "iam:GetOpenIDConnectProvider", | |
| "iam:GetPolicy*", | |
| "iam:GetRole*", | |
| "iam:GetSAMLProvider", | |
| "iam:GetSSHPublicKey", | |
| "iam:GetServerCertificate", | |
| "iam:GetServiceLastAccessed*", | |
| "iam:GetUser*", | |
| "iam:ListAccessKeys", | |
| "iam:ListAttached*", | |
| "iam:ListEntitiesForPolicy", | |
| "iam:ListGroupPolicies", | |
| "iam:ListGroupsForUser", | |
| "iam:ListInstanceProfiles*", | |
| "iam:ListMFADevices", | |
| "iam:ListPolicyVersions", | |
| "iam:ListRolePolicies", | |
| "iam:ListSSHPublicKeys", | |
| "iam:ListSigningCertificates", | |
| "iam:ListUserPolicies", | |
| "iam:Upload*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "iam:GetRole", | |
| "iam:ListRoles", | |
| "iam:PassRole" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:iam::*:role/rds-monitoring-role", | |
| "arn:aws:iam::*:role/ec2-sysadmin-*", | |
| "arn:aws:iam::*:role/ecr-sysadmin-*", | |
| "arn:aws:iam::*:role/lamdba-sysadmin-*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAITJPEZXCYCBXANDSW", | |
| "PolicyName": "SystemAdministrator", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "route53:Get*", | |
| "route53:List*", | |
| "route53:TestDNSAnswer" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAITOYK2ZAOQFXV2JNC", | |
| "PolicyName": "AmazonRoute53ReadOnlyAccess", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": "ec2-reports:*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIU6NBZVF2PCRW36ZW", | |
| "PolicyName": "AmazonEC2ReportsAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ecs:DescribeServices", | |
| "ecs:UpdateService" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "cloudwatch:DescribeAlarms" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIUAP3EGGGXXCPDQKK", | |
| "PolicyName": "AmazonEC2ContainerServiceAutoscaleRole", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ec2:DescribeAccountAttributes", | |
| "ec2:DescribeInstances", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeKeyPairs", | |
| "ec2:DescribeSpotFleetInstances", | |
| "ec2:DescribeSpotFleetRequests", | |
| "ec2:DescribeSpotPriceHistory", | |
| "ec2:RequestSpotFleet", | |
| "ec2:CancelSpotFleetRequests", | |
| "ec2:ModifySpotFleetRequest", | |
| "ec2:TerminateInstances", | |
| "autoscaling:DescribeAccountLimits", | |
| "autoscaling:DescribeAutoScalingGroups", | |
| "autoscaling:DescribeLaunchConfigurations", | |
| "autoscaling:DescribeAutoScalingInstances", | |
| "autoscaling:CreateLaunchConfiguration", | |
| "autoscaling:CreateAutoScalingGroup", | |
| "autoscaling:UpdateAutoScalingGroup", | |
| "autoscaling:SetDesiredCapacity", | |
| "autoscaling:DeleteLaunchConfiguration", | |
| "autoscaling:DeleteAutoScalingGroup", | |
| "autoscaling:CreateOrUpdateTags", | |
| "autoscaling:SuspendProcesses", | |
| "autoscaling:PutNotificationConfiguration", | |
| "autoscaling:TerminateInstanceInAutoScalingGroup", | |
| "ecs:DescribeClusters", | |
| "ecs:DescribeContainerInstances", | |
| "ecs:DescribeTaskDefinitions", | |
| "ecs:DescribeTasks", | |
| "ecs:ListClusters", | |
| "ecs:ListContainerInstances", | |
| "ecs:ListTaskDefinitionFamilies", | |
| "ecs:ListTaskDefinitions", | |
| "ecs:ListTasks", | |
| "ecs:CreateCluster", | |
| "ecs:DeleteCluster", | |
| "ecs:RegisterTaskDefinition", | |
| "ecs:DeregisterTaskDefinition", | |
| "ecs:RunTask", | |
| "ecs:StartTask", | |
| "ecs:StopTask", | |
| "ecs:UpdateContainerAgent", | |
| "ecs:DeregisterContainerInstance", | |
| "logs:CreateLogGroup", | |
| "logs:CreateLogStream", | |
| "logs:PutLogEvents", | |
| "iam:GetInstanceProfile", | |
| "iam:PassRole" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIUETIXPCKASQJURFE", | |
| "PolicyName": "AWSBatchServiceRole", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "s3:Get*", | |
| "s3:List*", | |
| "s3:PutObject" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:s3:::elasticbeanstalk-*", | |
| "arn:aws:s3:::elasticbeanstalk-*/*" | |
| ], | |
| "Sid": "BucketAccess" | |
| }, | |
| { | |
| "Action": [ | |
| "xray:PutTraceSegments", | |
| "xray:PutTelemetryRecords" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*", | |
| "Sid": "XRayAccess" | |
| }, | |
| { | |
| "Action": [ | |
| "logs:PutLogEvents", | |
| "logs:CreateLogStream" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:logs:*:*:log-group:/aws/elasticbeanstalk*" | |
| ], | |
| "Sid": "CloudWatchLogsAccess" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIUF4325SJYOREKW3A", | |
| "PolicyName": "AWSElasticBeanstalkWebTier", | |
| "VersionId": "v4" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "sqs:GetQueueAttributes", | |
| "sqs:ListQueues" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIUGSSQY362XGCM6KW", | |
| "PolicyName": "AmazonSQSReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "cloudformation:CreateUploadBucket", | |
| "cloudformation:ValidateTemplate", | |
| "cloudfront:CreateDistribution", | |
| "cloudfront:DeleteDistribution", | |
| "cloudfront:GetDistribution", | |
| "cloudfront:GetDistributionConfig", | |
| "cloudfront:UpdateDistribution", | |
| "cognito-identity:CreateIdentityPool", | |
| "cognito-identity:UpdateIdentityPool", | |
| "cognito-identity:DeleteIdentityPool", | |
| "cognito-identity:SetIdentityPoolRoles", | |
| "cognito-idp:CreateUserPool", | |
| "dynamodb:CreateTable", | |
| "dynamodb:DeleteTable", | |
| "dynamodb:DescribeTable", | |
| "dynamodb:UpdateTable", | |
| "iam:AddClientIDToOpenIDConnectProvider", | |
| "iam:CreateOpenIDConnectProvider", | |
| "iam:GetOpenIDConnectProvider", | |
| "iam:ListOpenIDConnectProviders", | |
| "iam:CreateSAMLProvider", | |
| "iam:GetSAMLProvider", | |
| "iam:ListSAMLProvider", | |
| "iam:UpdateSAMLProvider", | |
| "lambda:CreateFunction", | |
| "lambda:DeleteFunction", | |
| "lambda:GetFunction", | |
| "mobileanalytics:CreateApp", | |
| "mobileanalytics:DeleteApp", | |
| "sns:CreateTopic", | |
| "sns:DeleteTopic", | |
| "sns:ListPlatformApplications", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeVpcs", | |
| "lex:CreateIntent", | |
| "lex:CreateIntentVersion", | |
| "lex:UpdateIntent", | |
| "lex:GetIntent", | |
| "lex:GetIntents", | |
| "lex:CreateSlotType", | |
| "lex:CreateSlotTypeVersion", | |
| "lex:UpdateSlotType", | |
| "lex:GetSlotType", | |
| "lex:GetSlotTypes", | |
| "lex:CreateBot", | |
| "lex:CreateBotVersion", | |
| "lex:UpdateBot", | |
| "lex:GetBot", | |
| "lex:GetBots", | |
| "lex:CreateBotAlias", | |
| "lex:UpdateBotAlias", | |
| "lex:GetBotAlias", | |
| "lex:GetBotAliases" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "sns:CreatePlatformApplication", | |
| "sns:DeletePlatformApplication", | |
| "sns:GetPlatformApplicationAttributes", | |
| "sns:SetPlatformApplicationAttributes" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:sns:*:*:app/*_MOBILEHUB_*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "s3:CreateBucket", | |
| "s3:DeleteBucket", | |
| "s3:DeleteBucketPolicy", | |
| "s3:ListBucket", | |
| "s3:ListBucketVersions", | |
| "s3:GetBucketLocation", | |
| "s3:GetBucketVersioning", | |
| "s3:PutBucketVersioning" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:s3:::*-userfiles-mobilehub-*", | |
| "arn:aws:s3:::*-contentdelivery-mobilehub-*", | |
| "arn:aws:s3:::*-deployments-mobilehub-*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "s3:DeleteObject", | |
| "s3:DeleteVersion", | |
| "s3:DeleteObjectVersion", | |
| "s3:GetObject", | |
| "s3:GetObjectVersion", | |
| "s3:PutObject", | |
| "s3:PutObjectAcl" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:s3:::*-userfiles-mobilehub-*/*", | |
| "arn:aws:s3:::*-contentdelivery-mobilehub-*/*", | |
| "arn:aws:s3:::*-deployments-mobilehub-*/*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "lambda:AddPermission", | |
| "lambda:CreateAlias", | |
| "lambda:DeleteAlias", | |
| "lambda:UpdateAlias", | |
| "lambda:GetFunctionConfiguration", | |
| "lambda:GetPolicy", | |
| "lambda:RemovePermission", | |
| "lambda:UpdateFunctionCode", | |
| "lambda:UpdateFunctionConfiguration" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:lambda:*:*:function:*-mobilehub-*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "iam:CreateRole", | |
| "iam:DeleteRole", | |
| "iam:DeleteRolePolicy", | |
| "iam:GetRole", | |
| "iam:GetRolePolicy", | |
| "iam:ListRolePolicies", | |
| "iam:PassRole", | |
| "iam:PutRolePolicy", | |
| "iam:UpdateAssumeRolePolicy", | |
| "iam:AttachRolePolicy", | |
| "iam:DetachRolePolicy" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:iam::*:role/*_unauth_MOBILEHUB_*", | |
| "arn:aws:iam::*:role/*_auth_MOBILEHUB_*", | |
| "arn:aws:iam::*:role/*_consolepush_MOBILEHUB_*", | |
| "arn:aws:iam::*:role/*_lambdaexecutionrole_MOBILEHUB_*", | |
| "arn:aws:iam::*:role/*_smsverification_MOBILEHUB_*", | |
| "arn:aws:iam::*:role/*_botexecutionrole_MOBILEHUB_*", | |
| "arn:aws:iam::*:role/MOBILEHUB-*-lambdaexecution*", | |
| "arn:aws:iam::*:role/MobileHub_Service_Role" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "logs:CreateLogGroup", | |
| "logs:CreateLogStream", | |
| "logs:PutLogEvents" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:logs:*:*:log-group:/aws/mobilehub/*:log-stream:*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "iam:ListAttachedRolePolicies" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:iam::*:role/MobileHub_Service_Role" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "cloudformation:CreateStack", | |
| "cloudformation:DeleteStack", | |
| "cloudformation:DescribeStacks", | |
| "cloudformation:DescribeStackEvents", | |
| "cloudformation:DescribeStackResource", | |
| "cloudformation:GetTemplate", | |
| "cloudformation:ListStackResources", | |
| "cloudformation:UpdateStack" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:cloudformation:*:*:stack/MOBILEHUB-*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "apigateway:DELETE", | |
| "apigateway:GET", | |
| "apigateway:HEAD", | |
| "apigateway:OPTIONS", | |
| "apigateway:PATCH", | |
| "apigateway:POST", | |
| "apigateway:PUT" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:apigateway:*::/restapis*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "cognito-idp:DeleteUserPool", | |
| "cognito-idp:DescribeUserPool", | |
| "cognito-idp:CreateUserPoolClient", | |
| "cognito-idp:DescribeUserPoolClient", | |
| "cognito-idp:DeleteUserPoolClient" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:cognito-idp:*:*:userpool/*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "mobiletargeting:UpdateApnsChannel", | |
| "mobiletargeting:UpdateApnsSandboxChannel", | |
| "mobiletargeting:UpdateGcmChannel", | |
| "mobiletargeting:DeleteApnsChannel", | |
| "mobiletargeting:DeleteApnsSandboxChannel", | |
| "mobiletargeting:DeleteGcmChannel" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:mobiletargeting:*:*:apps/*/channels/*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIUHPQXBDZUWOP3PSK", | |
| "PolicyName": "AWSMobileHub_ServiceUseOnly", | |
| "VersionId": "v16" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": "kinesis:*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIVF32HAMOXCUYRAYE", | |
| "PolicyName": "AmazonKinesisFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "machinelearning:Describe*", | |
| "machinelearning:Get*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIW5VYBCGEX56JCINC", | |
| "PolicyName": "AmazonMachineLearningReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "rekognition:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIWDAOK6AIFDVX6TT6", | |
| "PolicyName": "AmazonRekognitionFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "cloudhsm:CreateLunaClient", | |
| "cloudhsm:GetClientConfiguration", | |
| "cloudhsm:DeleteLunaClient", | |
| "cloudhsm:DescribeLunaClient", | |
| "cloudhsm:ModifyLunaClient", | |
| "cloudhsm:DescribeHapg", | |
| "cloudhsm:ModifyHapg", | |
| "cloudhsm:GetConfig" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIWKFXRLQG2ROKKXLE", | |
| "PolicyName": "RDSCloudHsmAuthorizationRole", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "machinelearning:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIWKW6AGSGYOQ5ERHC", | |
| "PolicyName": "AmazonMachineLearningFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": "*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIWMBCKSKIEE64ZLYK", | |
| "PolicyName": "AdministratorAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "machinelearning:Predict" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIWMCNQPRWMWT36GVQ", | |
| "PolicyName": "AmazonMachineLearningRealTimePredictionOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "config:Get*", | |
| "config:Describe*", | |
| "config:Deliver*", | |
| "config:List*", | |
| "tag:GetResources", | |
| "tag:GetTagKeys", | |
| "cloudtrail:DescribeTrails", | |
| "cloudtrail:GetTrailStatus", | |
| "cloudtrail:LookupEvents" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIWTTSFJ7KKJE3MWGA", | |
| "PolicyName": "AWSConfigUserAccess", | |
| "VersionId": "v3" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "iot:AcceptCertificateTransfer", | |
| "iot:AttachPrincipalPolicy", | |
| "iot:AttachThingPrincipal", | |
| "iot:CancelCertificateTransfer", | |
| "iot:CreateCertificateFromCsr", | |
| "iot:CreateKeysAndCertificate", | |
| "iot:CreatePolicy", | |
| "iot:CreatePolicyVersion", | |
| "iot:CreateThing", | |
| "iot:CreateThingType", | |
| "iot:CreateTopicRule", | |
| "iot:DeleteCertificate", | |
| "iot:DeleteCACertificate", | |
| "iot:DeletePolicy", | |
| "iot:DeletePolicyVersion", | |
| "iot:DeleteRegistrationCode", | |
| "iot:DeleteThing", | |
| "iot:DeleteThingType", | |
| "iot:DeleteTopicRule", | |
| "iot:DeprecateThingType", | |
| "iot:DescribeCertificate", | |
| "iot:DescribeCACertificate", | |
| "iot:DescribeEndpoint", | |
| "iot:DescribeThing", | |
| "iot:DescribeThingType", | |
| "iot:DetachPrincipalPolicy", | |
| "iot:DetachThingPrincipal", | |
| "iot:GetLoggingOptions", | |
| "iot:GetPolicy", | |
| "iot:GetPolicyVersion", | |
| "iot:GetRegistrationCode", | |
| "iot:GetTopicRule", | |
| "iot:ListCertificates", | |
| "iot:ListCACertificates", | |
| "iot:ListCertificatesByCA", | |
| "iot:ListPolicies", | |
| "iot:ListPolicyPrincipals", | |
| "iot:ListPolicyVersions", | |
| "iot:ListPrincipalPolicies", | |
| "iot:ListPrincipalThings", | |
| "iot:ListThingPrincipals", | |
| "iot:ListThings", | |
| "iot:ListThingTypes", | |
| "iot:ListTopicRules", | |
| "iot:RegisterCertificate", | |
| "iot:RegisterCACertificate", | |
| "iot:RejectCertificateTransfer", | |
| "iot:ReplaceTopicRule", | |
| "iot:SetDefaultPolicyVersion", | |
| "iot:SetLoggingOptions", | |
| "iot:TransferCertificate", | |
| "iot:UpdateCertificate", | |
| "iot:UpdateCACertificate", | |
| "iot:UpdateThing" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIWWGD4LM4EMXNRL7I", | |
| "PolicyName": "AWSIoTConfigAccess", | |
| "VersionId": "v4" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "cloudformation:getStackPolicy", | |
| "logs:describeLogGroups", | |
| "logs:describeMetricFilters", | |
| "autoscaling:Describe*", | |
| "cloudformation:DescribeStack*", | |
| "cloudformation:GetTemplate", | |
| "cloudformation:ListStack*", | |
| "cloudfront:Get*", | |
| "cloudfront:List*", | |
| "cloudtrail:DescribeTrails", | |
| "cloudtrail:GetTrailStatus", | |
| "cloudtrail:ListTags", | |
| "cloudwatch:Describe*", | |
| "codecommit:BatchGetRepositories", | |
| "codecommit:GetBranch", | |
| "codecommit:GetObjectIdentifier", | |
| "codecommit:GetRepository", | |
| "codecommit:List*", | |
| "codedeploy:Batch*", | |
| "codedeploy:Get*", | |
| "codedeploy:List*", | |
| "config:Deliver*", | |
| "config:Describe*", | |
| "config:Get*", | |
| "datapipeline:DescribeObjects", | |
| "datapipeline:DescribePipelines", | |
| "datapipeline:EvaluateExpression", | |
| "datapipeline:GetPipelineDefinition", | |
| "datapipeline:ListPipelines", | |
| "datapipeline:QueryObjects", | |
| "datapipeline:ValidatePipelineDefinition", | |
| "directconnect:Describe*", | |
| "dynamodb:ListTables", | |
| "ec2:Describe*", | |
| "ecs:Describe*", | |
| "ecs:List*", | |
| "elasticache:Describe*", | |
| "elasticbeanstalk:Describe*", | |
| "elasticloadbalancing:Describe*", | |
| "elasticmapreduce:DescribeJobFlows", | |
| "elasticmapreduce:ListClusters", | |
| "es:ListDomainNames", | |
| "es:Describe*", | |
| "firehose:Describe*", | |
| "firehose:List*", | |
| "glacier:DescribeVault", | |
| "glacier:GetVaultAccessPolicy", | |
| "glacier:ListVaults", | |
| "iam:GenerateCredentialReport", | |
| "iam:Get*", | |
| "iam:List*", | |
| "kms:Describe*", | |
| "kms:Get*", | |
| "kms:List*", | |
| "lambda:GetPolicy", | |
| "lambda:ListFunctions", | |
| "rds:Describe*", | |
| "rds:DownloadDBLogFilePortion", | |
| "rds:ListTagsForResource", | |
| "redshift:Describe*", | |
| "route53:GetChange", | |
| "route53:GetCheckerIpRanges", | |
| "route53:GetGeoLocations", | |
| "route53:GetHealthCheck", | |
| "route53:GetHealthCheckCount", | |
| "route53:GetHealthCheckLastFailureReason", | |
| "route53:GetHostedZone", | |
| "route53:GetHostedZoneCount", | |
| "route53:GetReusableDelegationSet", | |
| "route53:ListGeoLocations", | |
| "route53:ListHealthChecks", | |
| "route53:ListHostedZones", | |
| "route53:ListHostedZonesByName", | |
| "route53:ListResourceRecordSets", | |
| "route53:ListReusableDelegationSets", | |
| "route53:ListTagsForResource", | |
| "route53:ListTagsForResources", | |
| "route53domains:GetDomainDetail", | |
| "route53domains:GetOperationDetail", | |
| "route53domains:ListDomains", | |
| "route53domains:ListOperations", | |
| "route53domains:ListTagsForDomain", | |
| "s3:GetBucket*", | |
| "s3:GetLifecycleConfiguration", | |
| "s3:GetObjectAcl", | |
| "s3:GetObjectVersionAcl", | |
| "s3:ListAllMyBuckets", | |
| "sdb:DomainMetadata", | |
| "sdb:ListDomains", | |
| "ses:GetIdentityDkimAttributes", | |
| "ses:ListIdentities", | |
| "sns:GetTopicAttributes", | |
| "sns:ListTopics", | |
| "sqs:GetQueueAttributes", | |
| "sqs:ListQueues", | |
| "tag:GetResources", | |
| "tag:GetTagKeys" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIX2T3QCXHR2OGGCTO", | |
| "PolicyName": "SecurityAudit", | |
| "VersionId": "v9" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "s3:List*", | |
| "dynamodb:DescribeTable", | |
| "rds:DescribeDBInstances", | |
| "rds:DescribeDBSecurityGroups", | |
| "redshift:DescribeClusters", | |
| "redshift:DescribeClusterSecurityGroups", | |
| "sns:ListTopics", | |
| "sns:Subscribe", | |
| "iam:ListRoles", | |
| "iam:GetRolePolicy", | |
| "iam:GetInstanceProfiles", | |
| "iam:ListInstanceProfiles", | |
| "datapipeline:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| }, | |
| { | |
| "Action": "iam:PassRole", | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:iam::*:role/DataPipelineDefaultResourceRole", | |
| "arn:aws:iam::*:role/DataPipelineDefaultRole" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIXOFIG7RSBMRPHXJ4", | |
| "PolicyName": "AWSDataPipeline_FullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "cloudwatch:DescribeAlarmHistory", | |
| "cloudwatch:DescribeAlarms", | |
| "cloudwatch:DescribeAlarmsForMetric", | |
| "cloudwatch:GetMetricStatistics", | |
| "cloudwatch:ListMetrics", | |
| "datapipeline:DescribeObjects", | |
| "datapipeline:DescribePipelines", | |
| "datapipeline:GetPipelineDefinition", | |
| "datapipeline:ListPipelines", | |
| "datapipeline:QueryObjects", | |
| "dynamodb:BatchGetItem", | |
| "dynamodb:DescribeTable", | |
| "dynamodb:GetItem", | |
| "dynamodb:ListTables", | |
| "dynamodb:Query", | |
| "dynamodb:Scan", | |
| "dynamodb:DescribeReservedCapacity", | |
| "dynamodb:DescribeReservedCapacityOfferings", | |
| "dynamodb:ListTagsOfResource", | |
| "sns:ListSubscriptionsByTopic", | |
| "sns:ListTopics", | |
| "lambda:ListFunctions", | |
| "lambda:ListEventSourceMappings", | |
| "lambda:GetFunctionConfiguration" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIY2XFNA232XJ6J7X2", | |
| "PolicyName": "AmazonDynamoDBReadOnlyAccess", | |
| "VersionId": "v3" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ec2:AuthorizeSecurityGroupIngress", | |
| "ec2:CreateKeyPair", | |
| "ec2:CreateSecurityGroup", | |
| "ec2:DescribeAvailabilityZones", | |
| "ec2:DescribeImages", | |
| "ec2:DescribeKeyPairs", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeVpcs", | |
| "ec2:DescribeVpcClassicLink", | |
| "ec2:ImportKeyPair" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": "elasticloadbalancing:Describe*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "cloudwatch:ListMetrics", | |
| "cloudwatch:GetMetricStatistics", | |
| "cloudwatch:PutMetricAlarm", | |
| "cloudwatch:Describe*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": "autoscaling:*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "sns:ListSubscriptions", | |
| "sns:ListTopics" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIYEN6FJGYYWJFFCZW", | |
| "PolicyName": "AutoScalingConsoleFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "sns:GetTopicAttributes", | |
| "sns:List*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIZGQCQTFOFPMHSB6W", | |
| "PolicyName": "AmazonSNSReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "cloudwatch:*", | |
| "cloudformation:CreateStack", | |
| "cloudformation:DescribeStackEvents", | |
| "ec2:AuthorizeSecurityGroupIngress", | |
| "ec2:AuthorizeSecurityGroupEgress", | |
| "ec2:CancelSpotInstanceRequests", | |
| "ec2:CreateRoute", | |
| "ec2:CreateSecurityGroup", | |
| "ec2:CreateTags", | |
| "ec2:DeleteRoute", | |
| "ec2:DeleteTags", | |
| "ec2:DeleteSecurityGroup", | |
| "ec2:DescribeAvailabilityZones", | |
| "ec2:DescribeAccountAttributes", | |
| "ec2:DescribeInstances", | |
| "ec2:DescribeKeyPairs", | |
| "ec2:DescribeRouteTables", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeSpotInstanceRequests", | |
| "ec2:DescribeSpotPriceHistory", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeVpcAttribute", | |
| "ec2:DescribeVpcs", | |
| "ec2:DescribeRouteTables", | |
| "ec2:DescribeNetworkAcls", | |
| "ec2:CreateVpcEndpoint", | |
| "ec2:ModifyImageAttribute", | |
| "ec2:ModifyInstanceAttribute", | |
| "ec2:RequestSpotInstances", | |
| "ec2:RevokeSecurityGroupEgress", | |
| "ec2:RunInstances", | |
| "ec2:TerminateInstances", | |
| "elasticmapreduce:*", | |
| "iam:GetPolicy", | |
| "iam:GetPolicyVersion", | |
| "iam:ListRoles", | |
| "iam:PassRole", | |
| "kms:List*", | |
| "s3:*", | |
| "sdb:*", | |
| "support:CreateCase", | |
| "support:DescribeServices", | |
| "support:DescribeSeverityLevels" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIZP5JFP3AMSGINBB2", | |
| "PolicyName": "AmazonElasticMapReduceFullAccess", | |
| "VersionId": "v4" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "s3:Get*", | |
| "s3:List*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIZTJ4DXE7G6AGAE6M", | |
| "PolicyName": "AmazonS3ReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "elasticbeanstalk:*", | |
| "ec2:*", | |
| "ecs:*", | |
| "ecr:*", | |
| "elasticloadbalancing:*", | |
| "autoscaling:*", | |
| "cloudwatch:*", | |
| "s3:*", | |
| "sns:*", | |
| "cloudformation:*", | |
| "dynamodb:*", | |
| "rds:*", | |
| "sqs:*", | |
| "logs:*", | |
| "iam:GetPolicyVersion", | |
| "iam:GetRole", | |
| "iam:PassRole", | |
| "iam:ListRolePolicies", | |
| "iam:ListAttachedRolePolicies", | |
| "iam:ListInstanceProfiles", | |
| "iam:ListRoles", | |
| "iam:ListServerCertificates", | |
| "acm:DescribeCertificate", | |
| "acm:ListCertificates", | |
| "codebuild:CreateProject", | |
| "codebuild:DeleteProject", | |
| "codebuild:BatchGetBuilds", | |
| "codebuild:StartBuild" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "iam:AddRoleToInstanceProfile", | |
| "iam:CreateInstanceProfile", | |
| "iam:CreateRole" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:iam::*:role/aws-elasticbeanstalk*", | |
| "arn:aws:iam::*:instance-profile/aws-elasticbeanstalk*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "iam:AttachRolePolicy" | |
| ], | |
| "Condition": { | |
| "StringLike": { | |
| "iam:PolicyArn": [ | |
| "arn:aws:iam::aws:policy/AWSElasticBeanstalk*", | |
| "arn:aws:iam::aws:policy/service-role/AWSElasticBeanstalk*" | |
| ] | |
| } | |
| }, | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAIZYX2YLLBW2LJVUFW", | |
| "PolicyName": "AWSElasticBeanstalkFullAccess", | |
| "VersionId": "v5" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "workspaces:CreateWorkspaces", | |
| "workspaces:DescribeWorkspaces", | |
| "workspaces:RebootWorkspaces", | |
| "workspaces:RebuildWorkspaces", | |
| "workspaces:TerminateWorkspaces", | |
| "workspaces:DescribeWorkspaceDirectories", | |
| "workspaces:DescribeWorkspaceBundles", | |
| "workspaces:ModifyWorkspaceProperties", | |
| "workspaces:StopWorkspaces", | |
| "workspaces:StartWorkspaces", | |
| "workspaces:DescribeWorkspacesConnectionStatus", | |
| "workspaces:CreateTags", | |
| "workspaces:DeleteTags", | |
| "workspaces:DescribeTags", | |
| "kms:ListKeys", | |
| "kms:ListAliases", | |
| "kms:DescribeKey" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJ26AU6ATUQCT5KVJU", | |
| "PolicyName": "AmazonWorkSpacesAdmin", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "autoscaling:CompleteLifecycleAction", | |
| "autoscaling:DeleteLifecycleHook", | |
| "autoscaling:DescribeAutoScalingGroups", | |
| "autoscaling:DescribeLifecycleHooks", | |
| "autoscaling:PutLifecycleHook", | |
| "autoscaling:RecordLifecycleActionHeartbeat", | |
| "autoscaling:CreateAutoScalingGroup", | |
| "autoscaling:UpdateAutoScalingGroup", | |
| "autoscaling:EnableMetricsCollection", | |
| "autoscaling:DescribeAutoScalingGroups", | |
| "autoscaling:DescribePolicies", | |
| "autoscaling:DescribeScheduledActions", | |
| "autoscaling:DescribeNotificationConfigurations", | |
| "autoscaling:DescribeLifecycleHooks", | |
| "autoscaling:SuspendProcesses", | |
| "autoscaling:ResumeProcesses", | |
| "autoscaling:AttachLoadBalancers", | |
| "autoscaling:PutScalingPolicy", | |
| "autoscaling:PutScheduledUpdateGroupAction", | |
| "autoscaling:PutNotificationConfiguration", | |
| "autoscaling:PutLifecycleHook", | |
| "autoscaling:DescribeScalingActivities", | |
| "autoscaling:DeleteAutoScalingGroup", | |
| "ec2:DescribeInstances", | |
| "ec2:DescribeInstanceStatus", | |
| "ec2:TerminateInstances", | |
| "tag:GetTags", | |
| "tag:GetResources", | |
| "sns:Publish", | |
| "cloudwatch:DescribeAlarms", | |
| "elasticloadbalancing:DescribeLoadBalancers", | |
| "elasticloadbalancing:DescribeInstanceHealth", | |
| "elasticloadbalancing:RegisterInstancesWithLoadBalancer", | |
| "elasticloadbalancing:DeregisterInstancesFromLoadBalancer" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJ2NKMKD73QS5NBFLA", | |
| "PolicyName": "AWSCodeDeployRole", | |
| "VersionId": "v4" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ses:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJ2P4NXCHAT7NDPNR4", | |
| "PolicyName": "AmazonSESFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "logs:Describe*", | |
| "logs:Get*", | |
| "logs:TestMetricFilter", | |
| "logs:FilterLogEvents" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJ2YIYDYSNNEHK3VKW", | |
| "PolicyName": "CloudWatchLogsReadOnlyAccess", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "firehose:Describe*", | |
| "firehose:List*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJ36NT645INW4K24W6", | |
| "PolicyName": "AmazonKinesisFirehoseReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "opsworks:AssignInstance", | |
| "opsworks:CreateStack", | |
| "opsworks:CreateLayer", | |
| "opsworks:DeregisterInstance", | |
| "opsworks:DescribeInstances", | |
| "opsworks:DescribeStackProvisioningParameters", | |
| "opsworks:DescribeStacks", | |
| "opsworks:UnassignInstance" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "ec2:DescribeInstances" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "iam:AddUserToGroup", | |
| "iam:CreateAccessKey", | |
| "iam:CreateGroup", | |
| "iam:CreateUser", | |
| "iam:ListInstanceProfiles", | |
| "iam:PassRole", | |
| "iam:PutUserPolicy" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJ3AB5ZBFPCQGTVDU4", | |
| "PolicyName": "AWSOpsWorksRegisterCLI", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "cloudwatch:DeleteAlarms", | |
| "cloudwatch:DescribeAlarmHistory", | |
| "cloudwatch:DescribeAlarms", | |
| "cloudwatch:DescribeAlarmsForMetric", | |
| "cloudwatch:GetMetricStatistics", | |
| "cloudwatch:ListMetrics", | |
| "cloudwatch:PutMetricAlarm", | |
| "dynamodb:*", | |
| "sns:CreateTopic", | |
| "sns:DeleteTopic", | |
| "sns:ListSubscriptions", | |
| "sns:ListSubscriptionsByTopic", | |
| "sns:ListTopics", | |
| "sns:Subscribe", | |
| "sns:Unsubscribe", | |
| "sns:SetTopicAttributes" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*", | |
| "Sid": "DDBConsole" | |
| }, | |
| { | |
| "Action": [ | |
| "lambda:*", | |
| "iam:ListRoles" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*", | |
| "Sid": "DDBConsoleTriggers" | |
| }, | |
| { | |
| "Action": [ | |
| "datapipeline:*", | |
| "iam:ListRoles" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*", | |
| "Sid": "DDBConsoleImportExport" | |
| }, | |
| { | |
| "Action": [ | |
| "iam:GetRolePolicy", | |
| "iam:PassRole" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ], | |
| "Sid": "IAMEDPRoles" | |
| }, | |
| { | |
| "Action": [ | |
| "ec2:CreateTags", | |
| "ec2:DescribeInstances", | |
| "ec2:RunInstances", | |
| "ec2:StartInstances", | |
| "ec2:StopInstances", | |
| "ec2:TerminateInstances", | |
| "elasticmapreduce:*", | |
| "datapipeline:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*", | |
| "Sid": "EMR" | |
| }, | |
| { | |
| "Action": [ | |
| "s3:DeleteObject", | |
| "s3:Get*", | |
| "s3:List*", | |
| "s3:Put*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ], | |
| "Sid": "S3" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJ3ORT7KDISSXGHJXA", | |
| "PolicyName": "AmazonDynamoDBFullAccesswithDataPipeline", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "cloudwatch:*", | |
| "datapipeline:*", | |
| "dynamodb:*", | |
| "ec2:Describe*", | |
| "elasticmapreduce:AddJobFlowSteps", | |
| "elasticmapreduce:Describe*", | |
| "elasticmapreduce:ListInstance*", | |
| "elasticmapreduce:ModifyInstanceGroups", | |
| "rds:Describe*", | |
| "redshift:DescribeClusters", | |
| "redshift:DescribeClusterSecurityGroups", | |
| "s3:*", | |
| "sdb:*", | |
| "sns:*", | |
| "sqs:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJ3Z5I2WAJE5DN2J36", | |
| "PolicyName": "AmazonEC2RoleforDataPipelineRole", | |
| "VersionId": "v3" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "logs:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJ3ZGNWK2R5HW5BQFO", | |
| "PolicyName": "CloudWatchLogsFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ecs:Poll", | |
| "ecs:StartTask", | |
| "ecs:StopTask", | |
| "ecs:DiscoverPollEndpoint", | |
| "ecs:StartTelemetrySession", | |
| "ecs:RegisterContainerInstance", | |
| "ecs:DeregisterContainerInstance", | |
| "ecs:DescribeContainerInstances", | |
| "ecs:Submit*", | |
| "ecs:DescribeTasks" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*", | |
| "Sid": "ECSAccess" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJ45SBYG72SD6SHJEY", | |
| "PolicyName": "AWSElasticBeanstalkMulticontainerDocker", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "elastictranscoder:*", | |
| "cloudfront:*", | |
| "s3:List*", | |
| "s3:Put*", | |
| "s3:Get*", | |
| "s3:*MultipartUpload*", | |
| "iam:CreateRole", | |
| "iam:GetRolePolicy", | |
| "iam:PassRole", | |
| "iam:PutRolePolicy", | |
| "iam:List*", | |
| "sns:CreateTopic", | |
| "sns:List*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJ4D5OJU75P5ZJZVNY", | |
| "PolicyName": "AmazonElasticTranscoderFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "iam:ChangePassword" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:iam::*:user/${aws:username}" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "iam:GetAccountPasswordPolicy" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJ4L4MM2A7QIEB56MS", | |
| "PolicyName": "IAMUserChangePassword", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "apigateway:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "arn:aws:apigateway:*::/*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJ4PT6VY5NLKTNUYSI", | |
| "PolicyName": "AmazonAPIGatewayAdministrator", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "catalog-user:*", | |
| "s3:GetObject", | |
| "servicecatalog:DescribeProduct", | |
| "servicecatalog:DescribeProductView", | |
| "servicecatalog:DescribeProvisioningParameters", | |
| "servicecatalog:ListLaunchPaths", | |
| "servicecatalog:SearchProducts" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "servicecatalog:ListRecordHistory", | |
| "servicecatalog:DescribeRecord", | |
| "servicecatalog:ScanProvisionedProducts" | |
| ], | |
| "Condition": { | |
| "StringEquals": { | |
| "servicecatalog:userLevel": "self" | |
| } | |
| }, | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJ56OMCO72RI4J5FSA", | |
| "PolicyName": "ServiceCatalogEndUserAccess", | |
| "VersionId": "v3" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "polly:DescribeVoices", | |
| "polly:GetLexicon", | |
| "polly:ListLexicons", | |
| "polly:SynthesizeSpeech" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJ5FENL3CVPL2FPDLA", | |
| "PolicyName": "AmazonPollyReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": "mobileanalytics:PutEvents", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJ5TAWBBQC2FAL3G6G", | |
| "PolicyName": "AmazonMobileAnalyticsWriteOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "autoscaling:*", | |
| "cloudwatch:*", | |
| "cloudformation:CreateStack", | |
| "cloudformation:DescribeStackEvents", | |
| "datapipeline:Describe*", | |
| "datapipeline:ListPipelines", | |
| "datapipeline:GetPipelineDefinition", | |
| "datapipeline:QueryObjects", | |
| "dynamodb:*", | |
| "ec2:CancelSpotInstanceRequests", | |
| "ec2:CancelSpotFleetRequests", | |
| "ec2:CreateTags", | |
| "ec2:DeleteTags", | |
| "ec2:Describe*", | |
| "ec2:ModifyImageAttribute", | |
| "ec2:ModifyInstanceAttribute", | |
| "ec2:ModifySpotFleetRequest", | |
| "ec2:RequestSpotInstances", | |
| "ec2:RequestSpotFleet", | |
| "elasticfilesystem:*", | |
| "elasticmapreduce:*", | |
| "es:*", | |
| "firehose:*", | |
| "iam:GetInstanceProfile", | |
| "iam:GetRole", | |
| "iam:GetPolicy", | |
| "iam:GetPolicyVersion", | |
| "iam:ListRoles", | |
| "kinesis:*", | |
| "kms:List*", | |
| "lambda:Create*", | |
| "lambda:Delete*", | |
| "lambda:Get*", | |
| "lambda:InvokeFunction", | |
| "lambda:PublishVersion", | |
| "lambda:Update*", | |
| "lambda:List*", | |
| "machinelearning:*", | |
| "sdb:*", | |
| "rds:*", | |
| "sns:ListSubscriptions", | |
| "sns:ListTopics", | |
| "logs:DescribeLogStreams", | |
| "logs:GetLogEvents", | |
| "redshift:*", | |
| "s3:CreateBucket", | |
| "sns:CreateTopic", | |
| "sns:Get*", | |
| "sns:List*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "s3:Abort*", | |
| "s3:DeleteObject", | |
| "s3:Get*", | |
| "s3:List*", | |
| "s3:PutAccelerateConfiguration", | |
| "s3:PutBucketLogging", | |
| "s3:PutBucketNotification", | |
| "s3:PutBucketTagging", | |
| "s3:PutObject", | |
| "s3:Replicate*", | |
| "s3:RestoreObject" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "ec2:RunInstances", | |
| "ec2:TerminateInstances" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "iam:GetRole", | |
| "iam:PassRole" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:iam::*:role/DataPipelineDefaultRole", | |
| "arn:aws:iam::*:role/DataPipelineDefaultResourceRole", | |
| "arn:aws:iam::*:role/EMR_EC2_DefaultRole", | |
| "arn:aws:iam::*:role/EMR_DefaultRole", | |
| "arn:aws:iam::*:role/kinesis-*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJ5YHI2BQW7EQFYDXS", | |
| "PolicyName": "DataScientist", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "aws-marketplace:MeterUsage" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJ65YJPG7CC7LDXNA6", | |
| "PolicyName": "AWSMarketplaceMeteringFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "s3:CreateBucket", | |
| "s3:DeleteObject", | |
| "s3:DeleteBucket", | |
| "s3:GetObject", | |
| "s3:HeadBucket", | |
| "s3:ListBucket", | |
| "s3:ListObjects" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:s3:::aws-opsworks-cm-*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "ssm:DescribeInstanceInformation", | |
| "ssm:GetCommandInvocation", | |
| "ssm:ListCommandInvocations", | |
| "ssm:ListCommands" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "ssm:SendCommand" | |
| ], | |
| "Condition": { | |
| "StringLike": { | |
| "ssm:resourceTag/aws:cloudformation:stack-name": "aws-opsworks-cm-*" | |
| } | |
| }, | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "ssm:SendCommand" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:ssm:*::document/*", | |
| "arn:aws:s3:::aws-opsworks-cm-*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "ec2:AllocateAddress", | |
| "ec2:AssociateAddress", | |
| "ec2:AuthorizeSecurityGroupIngress", | |
| "ec2:CreateSecurityGroup", | |
| "ec2:CreateTags", | |
| "ec2:DeleteSecurityGroup", | |
| "ec2:DescribeAccountAttributes", | |
| "ec2:DescribeAddresses", | |
| "ec2:DescribeInstanceStatus", | |
| "ec2:DescribeInstances", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeSubnets", | |
| "ec2:DisassociateAddress", | |
| "ec2:ReleaseAddress", | |
| "ec2:RunInstances" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "ec2:TerminateInstances" | |
| ], | |
| "Condition": { | |
| "StringLike": { | |
| "ec2:ResourceTag/aws:cloudformation:stack-name": "aws-opsworks-cm-*" | |
| } | |
| }, | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "cloudformation:CreateStack", | |
| "cloudformation:DeleteStack", | |
| "cloudformation:DescribeStackEvents", | |
| "cloudformation:DescribeStackResources", | |
| "cloudformation:DescribeStacks", | |
| "cloudformation:UpdateStack" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:cloudformation:*:*:stack/aws-opsworks-cm-*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "iam:PassRole" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:iam::*:role/aws-opsworks-cm-*", | |
| "arn:aws:iam::*:role/service-role/aws-opsworks-cm-*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJ6I6MPGJE62URSHCO", | |
| "PolicyName": "AWSOpsWorksCMServiceRole", | |
| "VersionId": "v4" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": "iam:GetUser", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "s3:ListAllMyBuckets" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "s3:CreateBucket", | |
| "s3:DeleteBucket", | |
| "s3:DeleteObject", | |
| "s3:GetBucketLocation", | |
| "s3:GetObject", | |
| "s3:ListBucket", | |
| "s3:PutObject", | |
| "s3:PutObjectAcl", | |
| "s3:AbortMultipartUpload", | |
| "s3:ListBucketMultipartUploads", | |
| "s3:ListMultipartUploadParts" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "arn:aws:s3:::import-to-ec2-*" | |
| }, | |
| { | |
| "Action": [ | |
| "ec2:CancelConversionTask", | |
| "ec2:CancelExportTask", | |
| "ec2:CreateImage", | |
| "ec2:CreateInstanceExportTask", | |
| "ec2:CreateTags", | |
| "ec2:CreateVolume", | |
| "ec2:DeleteTags", | |
| "ec2:DeleteVolume", | |
| "ec2:DescribeConversionTasks", | |
| "ec2:DescribeExportTasks", | |
| "ec2:DescribeImages", | |
| "ec2:DescribeInstanceAttribute", | |
| "ec2:DescribeInstanceStatus", | |
| "ec2:DescribeInstances", | |
| "ec2:DescribeRegions", | |
| "ec2:DescribeTags", | |
| "ec2:DetachVolume", | |
| "ec2:ImportInstance", | |
| "ec2:ImportVolume", | |
| "ec2:ModifyInstanceAttribute", | |
| "ec2:RunInstances", | |
| "ec2:StartInstances", | |
| "ec2:StopInstances", | |
| "ec2:TerminateInstances", | |
| "ec2:ImportImage", | |
| "ec2:DescribeImportImageTasks", | |
| "ec2:DeregisterImage", | |
| "ec2:DescribeSnapshots", | |
| "ec2:DeleteSnapshot", | |
| "ec2:CancelImportTask", | |
| "ec2:ImportSnapshot", | |
| "ec2:DescribeImportSnapshotTasks" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "SNS:Publish" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "arn:aws:sns:*:*:metrics-sns-topic-for-*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJ6YATONJHICG3DJ3U", | |
| "PolicyName": "AWSConnector", | |
| "VersionId": "v3" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "batch:*", | |
| "cloudwatch:GetMetricStatistics", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeKeyPairs", | |
| "ecs:DescribeClusters", | |
| "ecs:Describe*", | |
| "ecs:List*", | |
| "logs:Describe*", | |
| "logs:Get*", | |
| "logs:TestMetricFilter", | |
| "logs:FilterLogEvents", | |
| "iam:ListInstanceProfiles", | |
| "iam:ListRoles" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "iam:PassRole" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:iam::*:role/AWSBatchServiceRole", | |
| "arn:aws:iam::*:role/ecsInstanceRole", | |
| "arn:aws:iam::*:role/iaws-ec2-spot-fleet-role", | |
| "arn:aws:iam::*:role/aws-ec2-spot-fleet-role", | |
| "arn:aws:iam::*:role/AWSBatchJobRole*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJ7K2KIWB3HZVK3CUO", | |
| "PolicyName": "AWSBatchFullAccess", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "catalog-admin:DescribeConstraints", | |
| "catalog-admin:DescribeListingForProduct", | |
| "catalog-admin:DescribeListings", | |
| "catalog-admin:DescribePortfolios", | |
| "catalog-admin:DescribeProductVersions", | |
| "catalog-admin:GetPortfolioCount", | |
| "catalog-admin:GetPortfolios", | |
| "catalog-admin:GetProductCounts", | |
| "catalog-admin:ListAllPortfolioConstraints", | |
| "catalog-admin:ListPortfolioConstraints", | |
| "catalog-admin:ListPortfolios", | |
| "catalog-admin:ListPrincipalConstraints", | |
| "catalog-admin:ListProductConstraints", | |
| "catalog-admin:ListResourceUsers", | |
| "catalog-admin:ListTagsForResource", | |
| "catalog-admin:SearchListings", | |
| "catalog-user:*", | |
| "cloudformation:DescribeStackEvents", | |
| "cloudformation:DescribeStacks", | |
| "cloudformation:GetTemplateSummary", | |
| "iam:GetGroup", | |
| "iam:GetRole", | |
| "iam:GetUser", | |
| "iam:ListGroups", | |
| "iam:ListRoles", | |
| "iam:ListUsers", | |
| "s3:GetObject", | |
| "servicecatalog:AccountLevelDescribeRecord", | |
| "servicecatalog:AccountLevelListRecordHistory", | |
| "servicecatalog:AccountLevelScanProvisionedProducts", | |
| "servicecatalog:DescribeProduct", | |
| "servicecatalog:DescribeProductView", | |
| "servicecatalog:DescribeProvisioningParameters", | |
| "servicecatalog:DescribeRecord", | |
| "servicecatalog:ListLaunchPaths", | |
| "servicecatalog:ListRecordHistory", | |
| "servicecatalog:ScanProvisionedProducts", | |
| "servicecatalog:SearchProducts", | |
| "servicecatalog:DescribeConstraint", | |
| "servicecatalog:DescribeProductAsAdmin", | |
| "servicecatalog:DescribePortfolio", | |
| "servicecatalog:DescribeProvisioningArtifact", | |
| "servicecatalog:ListAcceptedPortfolioShares", | |
| "servicecatalog:ListConstraintsForPortfolio", | |
| "servicecatalog:ListPortfolioAccess", | |
| "servicecatalog:ListPortfolios", | |
| "servicecatalog:ListPortfoliosForProduct", | |
| "servicecatalog:ListPrincipalsForPortfolio", | |
| "servicecatalog:ListProvisioningArtifacts", | |
| "servicecatalog:SearchProductsAsAdmin" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJ7XOUSS75M4LIPKO4", | |
| "PolicyName": "ServiceCatalogAdminReadOnlyAccess", | |
| "VersionId": "v3" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "cloudwatch:PutMetricData", | |
| "ds:CreateComputer", | |
| "ds:DescribeDirectories", | |
| "ec2:DescribeInstanceStatus", | |
| "logs:*", | |
| "ssm:*", | |
| "ec2messages:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJA7V6HI4ISQFMDYAG", | |
| "PolicyName": "AmazonSSMFullAccess", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "codecommit:BatchGetRepositories", | |
| "codecommit:Get*", | |
| "codecommit:GitPull", | |
| "codecommit:List*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJACNSXR7Z2VLJW3D6", | |
| "PolicyName": "AWSCodeCommitReadOnly", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "autoscaling:Describe*", | |
| "autoscaling:UpdateAutoScalingGroup", | |
| "cloudformation:CreateStack", | |
| "cloudformation:DeleteStack", | |
| "cloudformation:DescribeStack*", | |
| "cloudformation:UpdateStack", | |
| "cloudwatch:GetMetricStatistics", | |
| "ec2:Describe*", | |
| "elasticloadbalancing:*", | |
| "ecs:*", | |
| "iam:ListInstanceProfiles", | |
| "iam:ListRoles", | |
| "iam:PassRole" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJALOYVTPDZEMIACSM", | |
| "PolicyName": "AmazonEC2ContainerServiceFullAccess", | |
| "VersionId": "v3" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "cognito-identity:Describe*", | |
| "cognito-identity:Get*", | |
| "cognito-identity:List*", | |
| "cognito-idp:Describe*", | |
| "cognito-idp:AdminGetUser", | |
| "cognito-idp:List*", | |
| "cognito-sync:Describe*", | |
| "cognito-sync:Get*", | |
| "cognito-sync:List*", | |
| "iam:ListOpenIdConnectProviders", | |
| "iam:ListRoles", | |
| "sns:ListPlatformApplications" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJBFTRZD2GQGJHSVQK", | |
| "PolicyName": "AmazonCognitoReadOnly", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "logs:DescribeLogGroups" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ], | |
| "Sid": "AllowDescribeOnAllLogGroups" | |
| }, | |
| { | |
| "Action": [ | |
| "logs:DescribeLogStreams" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:logs:*:*:log-group:dms-tasks-*" | |
| ], | |
| "Sid": "AllowDescribeOfAllLogStreamsOnDmsTasksLogGroup" | |
| }, | |
| { | |
| "Action": [ | |
| "logs:CreateLogGroup" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:logs:*:*:log-group:dms-tasks-*" | |
| ], | |
| "Sid": "AllowCreationOfDmsTasksLogGroups" | |
| }, | |
| { | |
| "Action": [ | |
| "logs:CreateLogStream" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:logs:*:*:log-group:dms-tasks-*:log-stream:dms-task-*" | |
| ], | |
| "Sid": "AllowCreationOfDmsTaskLogStream" | |
| }, | |
| { | |
| "Action": [ | |
| "logs:PutLogEvents" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:logs:*:*:log-group:dms-tasks-*:log-stream:dms-task-*" | |
| ], | |
| "Sid": "AllowUploadOfLogEventsToDmsTaskLogStream" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJBG7UXZZXUJD3TDJE", | |
| "PolicyName": "AmazonDMSCloudWatchLogsRole", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": "discovery:*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJBNJEA6ZXM2SBOPDU", | |
| "PolicyName": "AWSApplicationDiscoveryServiceFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ec2:AcceptVpcPeeringConnection", | |
| "ec2:AllocateAddress", | |
| "ec2:AssignPrivateIpAddresses", | |
| "ec2:AssociateAddress", | |
| "ec2:AssociateDhcpOptions", | |
| "ec2:AssociateRouteTable", | |
| "ec2:AttachClassicLinkVpc", | |
| "ec2:AttachInternetGateway", | |
| "ec2:AttachNetworkInterface", | |
| "ec2:AttachVpnGateway", | |
| "ec2:AuthorizeSecurityGroupEgress", | |
| "ec2:AuthorizeSecurityGroupIngress", | |
| "ec2:CreateCustomerGateway", | |
| "ec2:CreateDhcpOptions", | |
| "ec2:CreateFlowLogs", | |
| "ec2:CreateInternetGateway", | |
| "ec2:CreateNatGateway", | |
| "ec2:CreateNetworkAcl", | |
| "ec2:CreateNetworkAcl", | |
| "ec2:CreateNetworkAclEntry", | |
| "ec2:CreateNetworkInterface", | |
| "ec2:CreateRoute", | |
| "ec2:CreateRouteTable", | |
| "ec2:CreateSecurityGroup", | |
| "ec2:CreateSubnet", | |
| "ec2:CreateTags", | |
| "ec2:CreateVpc", | |
| "ec2:CreateVpcEndpoint", | |
| "ec2:CreateVpcPeeringConnection", | |
| "ec2:CreateVpnConnection", | |
| "ec2:CreateVpnConnectionRoute", | |
| "ec2:CreateVpnGateway", | |
| "ec2:DeleteCustomerGateway", | |
| "ec2:DeleteDhcpOptions", | |
| "ec2:DeleteFlowLogs", | |
| "ec2:DeleteInternetGateway", | |
| "ec2:DeleteNatGateway", | |
| "ec2:DeleteNetworkAcl", | |
| "ec2:DeleteNetworkAclEntry", | |
| "ec2:DeleteNetworkInterface", | |
| "ec2:DeleteRoute", | |
| "ec2:DeleteRouteTable", | |
| "ec2:DeleteSecurityGroup", | |
| "ec2:DeleteSubnet", | |
| "ec2:DeleteTags", | |
| "ec2:DeleteVpc", | |
| "ec2:DeleteVpcEndpoints", | |
| "ec2:DeleteVpcPeeringConnection", | |
| "ec2:DeleteVpnConnection", | |
| "ec2:DeleteVpnConnectionRoute", | |
| "ec2:DeleteVpnGateway", | |
| "ec2:DescribeAddresses", | |
| "ec2:DescribeAvailabilityZones", | |
| "ec2:DescribeClassicLinkInstances", | |
| "ec2:DescribeCustomerGateways", | |
| "ec2:DescribeDhcpOptions", | |
| "ec2:DescribeFlowLogs", | |
| "ec2:DescribeInstances", | |
| "ec2:DescribeInternetGateways", | |
| "ec2:DescribeKeyPairs", | |
| "ec2:DescribeMovingAddresses", | |
| "ec2:DescribeNatGateways", | |
| "ec2:DescribeNetworkAcls", | |
| "ec2:DescribeNetworkInterfaceAttribute", | |
| "ec2:DescribeNetworkInterfaces", | |
| "ec2:DescribePrefixLists", | |
| "ec2:DescribeRouteTables", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeTags", | |
| "ec2:DescribeVpcAttribute", | |
| "ec2:DescribeVpcClassicLink", | |
| "ec2:DescribeVpcEndpoints", | |
| "ec2:DescribeVpcEndpointServices", | |
| "ec2:DescribeVpcPeeringConnections", | |
| "ec2:DescribeVpcs", | |
| "ec2:DescribeVpnConnections", | |
| "ec2:DescribeVpnGateways", | |
| "ec2:DetachClassicLinkVpc", | |
| "ec2:DetachInternetGateway", | |
| "ec2:DetachNetworkInterface", | |
| "ec2:DetachVpnGateway", | |
| "ec2:DisableVgwRoutePropagation", | |
| "ec2:DisableVpcClassicLink", | |
| "ec2:DisassociateAddress", | |
| "ec2:DisassociateRouteTable", | |
| "ec2:EnableVgwRoutePropagation", | |
| "ec2:EnableVpcClassicLink", | |
| "ec2:ModifyNetworkInterfaceAttribute", | |
| "ec2:ModifySubnetAttribute", | |
| "ec2:ModifyVpcAttribute", | |
| "ec2:ModifyVpcEndpoint", | |
| "ec2:MoveAddressToVpc", | |
| "ec2:RejectVpcPeeringConnection", | |
| "ec2:ReleaseAddress", | |
| "ec2:ReplaceNetworkAclAssociation", | |
| "ec2:ReplaceNetworkAclEntry", | |
| "ec2:ReplaceRoute", | |
| "ec2:ReplaceRouteTableAssociation", | |
| "ec2:ResetNetworkInterfaceAttribute", | |
| "ec2:RestoreAddressToClassic", | |
| "ec2:RevokeSecurityGroupEgress", | |
| "ec2:RevokeSecurityGroupIngress", | |
| "ec2:UnassignPrivateIpAddresses" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJBWPGNOVKZD3JI2P2", | |
| "PolicyName": "AmazonVPCFullAccess", | |
| "VersionId": "v5" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "importexport:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJCQCT4JGTLC6722MQ", | |
| "PolicyName": "AWSImportExportFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "mechanicalturk:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJDGCL5BET73H5QIQC", | |
| "PolicyName": "AmazonMechanicalTurkFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ecr:GetAuthorizationToken", | |
| "ecr:BatchCheckLayerAvailability", | |
| "ecr:GetDownloadUrlForLayer", | |
| "ecr:GetRepositoryPolicy", | |
| "ecr:DescribeRepositories", | |
| "ecr:ListImages", | |
| "ecr:DescribeImages", | |
| "ecr:BatchGetImage", | |
| "ecr:InitiateLayerUpload", | |
| "ecr:UploadLayerPart", | |
| "ecr:CompleteLayerUpload", | |
| "ecr:PutImage" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJDNE5PIHROIBGGDDW", | |
| "PolicyName": "AmazonEC2ContainerRegistryPowerUser", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "machinelearning:Add*", | |
| "machinelearning:Create*", | |
| "machinelearning:Delete*", | |
| "machinelearning:Describe*", | |
| "machinelearning:Get*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJDRUNIC2RYAMAT3CK", | |
| "PolicyName": "AmazonMachineLearningCreateOnlyAccess", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "s3:GetObject", | |
| "s3:GetBucketLocation" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "cloudtrail:GetTrailStatus", | |
| "cloudtrail:DescribeTrails", | |
| "cloudtrail:LookupEvents", | |
| "cloudtrail:ListTags", | |
| "cloudtrail:ListPublicKeys", | |
| "cloudtrail:GetEventSelectors", | |
| "s3:ListAllMyBuckets", | |
| "kms:ListAliases" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJDU7KJADWBSEQ3E7S", | |
| "PolicyName": "AWSCloudTrailReadOnlyAccess", | |
| "VersionId": "v6" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "logs:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "arn:aws:logs:*:*:*" | |
| }, | |
| { | |
| "Action": [ | |
| "s3:GetObject", | |
| "s3:PutObject" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "arn:aws:s3:::*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJE5FX7FQZSU5XAKGO", | |
| "PolicyName": "AWSLambdaExecute", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": { | |
| "Action": [ | |
| "dynamodb:PutItem", | |
| "kinesis:PutRecord", | |
| "iot:Publish", | |
| "s3:PutObject", | |
| "sns:Publish", | |
| "sqs:SendMessage*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJEZ6FS7BUZVUHMOKY", | |
| "PolicyName": "AWSIoTRuleActions", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "redshift:Describe*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJFEM6MLSLTW4ZNBW2", | |
| "PolicyName": "AWSQuickSightDescribeRedshift", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "s3:ListBucket", | |
| "s3:GetBucketLocation", | |
| "s3:GetObject" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:s3:::import-to-ec2-*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "ec2:ModifySnapshotAttribute", | |
| "ec2:CopySnapshot", | |
| "ec2:RegisterImage", | |
| "ec2:Describe*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJFLQOOJ6F5XNX4LAW", | |
| "PolicyName": "VMImportExportRoleForAWSConnector", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "codepipeline:AcknowledgeJob", | |
| "codepipeline:GetJobDetails", | |
| "codepipeline:PollForJobs", | |
| "codepipeline:PutJobFailureResult", | |
| "codepipeline:PutJobSuccessResult" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJFW5Z32BTVF76VCYC", | |
| "PolicyName": "AWSCodePipelineCustomActionAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "opsworks:DescribeStackProvisioningParameters", | |
| "opsworks:DescribeStacks", | |
| "opsworks:RegisterInstance" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJG3LCPVNI4WDZCIMU", | |
| "PolicyName": "AWSOpsWorksInstanceRegistration", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "storagegateway:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "ec2:DescribeSnapshots", | |
| "ec2:DeleteSnapshot" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJG5SSPAVOGK3SIDGU", | |
| "PolicyName": "AWSStorageGatewayFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "elastictranscoder:Read*", | |
| "elastictranscoder:List*", | |
| "s3:List*", | |
| "iam:List*", | |
| "sns:List*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJGPP7GPMJRRJMEP3Q", | |
| "PolicyName": "AmazonElasticTranscoderReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "iot:DescribeCertificate", | |
| "iot:DescribeCACertificate", | |
| "iot:DescribeEndpoint", | |
| "iot:DescribeThing", | |
| "iot:DescribeThingType", | |
| "iot:GetLoggingOptions", | |
| "iot:GetPolicy", | |
| "iot:GetPolicyVersion", | |
| "iot:GetRegistrationCode", | |
| "iot:GetTopicRule", | |
| "iot:ListCertificates", | |
| "iot:ListCertificatesByCA", | |
| "iot:ListCACertificates", | |
| "iot:ListPolicies", | |
| "iot:ListPolicyPrincipals", | |
| "iot:ListPolicyVersions", | |
| "iot:ListPrincipalPolicies", | |
| "iot:ListPrincipalThings", | |
| "iot:ListThingPrincipals", | |
| "iot:ListThings", | |
| "iot:ListThingTypes", | |
| "iot:ListTopicRules" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJHENEMXGX4XMFOIOI", | |
| "PolicyName": "AWSIoTConfigReadOnlyAccess", | |
| "VersionId": "v4" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ses:Describe*", | |
| "ses:Get*", | |
| "workmail:Describe*", | |
| "workmail:Get*", | |
| "workmail:List*", | |
| "workmail:Search*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJHF7J65E2QFKCWAJM", | |
| "PolicyName": "AmazonWorkMailReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ec2:CreateNetworkInterface", | |
| "ec2:DescribeAvailabilityZones", | |
| "ec2:DescribeInternetGateways", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeVpcs", | |
| "ec2:DeleteNetworkInterface", | |
| "ec2:ModifyNetworkInterfaceAttribute" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJHKIGMBQI4AEFFSYO", | |
| "PolicyName": "AmazonDMSVPCManagementRole", | |
| "VersionId": "v3" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "kinesis:DescribeStream", | |
| "kinesis:GetRecords", | |
| "kinesis:GetShardIterator", | |
| "kinesis:ListStreams", | |
| "logs:CreateLogGroup", | |
| "logs:CreateLogStream", | |
| "logs:PutLogEvents" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJHOLKJPXV4GBRMJUQ", | |
| "PolicyName": "AWSLambdaKinesisExecutionRole", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "tag:getResources", | |
| "tag:getTagKeys", | |
| "tag:getTagValues" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJHXQTPI5I5JKAIU74", | |
| "PolicyName": "ResourceGroupsandTagEditorReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "lambda:InvokeFunction" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:lambda:*:*:function:Automation*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "ec2:CreateImage", | |
| "ec2:DeleteSnapshot", | |
| "ec2:DeregisterImage", | |
| "ec2:DescribeImages", | |
| "ec2:StartInstances", | |
| "ec2:StopInstances", | |
| "ec2:TerminateInstances", | |
| "ec2:DescribeInstanceStatus", | |
| "ec2:RunInstances" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "ssm:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJIBQCTBCXD2XRNB6W", | |
| "PolicyName": "AmazonSSMAutomationRole", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "catalog-user:*", | |
| "cloudformation:CreateStack", | |
| "cloudformation:DeleteStack", | |
| "cloudformation:DescribeStackEvents", | |
| "cloudformation:DescribeStacks", | |
| "cloudformation:GetTemplateSummary", | |
| "cloudformation:SetStackPolicy", | |
| "cloudformation:ValidateTemplate", | |
| "cloudformation:UpdateStack", | |
| "servicecatalog:DescribeProduct", | |
| "servicecatalog:DescribeProductView", | |
| "servicecatalog:DescribeProvisioningParameters", | |
| "servicecatalog:ListLaunchPaths", | |
| "servicecatalog:ProvisionProduct", | |
| "servicecatalog:SearchProducts", | |
| "s3:GetObject" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "servicecatalog:DescribeRecord", | |
| "servicecatalog:ListRecordHistory", | |
| "servicecatalog:ScanProvisionedProducts", | |
| "servicecatalog:TerminateProvisionedProduct", | |
| "servicecatalog:UpdateProvisionedProduct" | |
| ], | |
| "Condition": { | |
| "StringEquals": { | |
| "servicecatalog:userLevel": "self" | |
| } | |
| }, | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJIW7AFFOONVKW75KU", | |
| "PolicyName": "ServiceCatalogEndUserFullAccess", | |
| "VersionId": "v3" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": "states:*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": "iam:ListRoles", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": "iam:PassRole", | |
| "Effect": "Allow", | |
| "Resource": "arn:aws:iam::*:role/service-role/StatesExecutionRole*" | |
| }, | |
| { | |
| "Action": "lambda:ListFunctions", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJIYC52YWRX6OSMJWK", | |
| "PolicyName": "AWSStepFunctionsConsoleFullAccess", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "codebuild:BatchGet*", | |
| "codebuild:Get*", | |
| "codebuild:List*", | |
| "codecommit:GetBranch", | |
| "codecommit:GetCommit", | |
| "codecommit:GetRepository" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "logs:GetLogEvents" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "arn:aws:logs:*:*:log-group:/aws/codebuild/*:log-stream:*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJIZZWN6557F5HVP2K", | |
| "PolicyName": "AWSCodeBuildReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "machinelearning:CreateRealtimeEndpoint", | |
| "machinelearning:DeleteRealtimeEndpoint" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJJL3PC3VCSVZP6OCI", | |
| "PolicyName": "AmazonMachineLearningManageRealTimeEndpointOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "kinesis:PutRecord" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*", | |
| "Sid": "CloudWatchEventsInvocationAccess" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJJXD6JKJLK2WDLZNO", | |
| "PolicyName": "CloudWatchEventsInvocationAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "acm:ListCertificates", | |
| "cloudfront:Get*", | |
| "cloudfront:List*", | |
| "iam:ListServerCertificates", | |
| "route53:List*", | |
| "waf:ListWebACLs", | |
| "waf:GetWebACL" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJJZMNYOTZCNQP36LG", | |
| "PolicyName": "CloudFrontReadOnlyAccess", | |
| "VersionId": "v3" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "logs:CreateLogGroup", | |
| "logs:CreateLogStream", | |
| "logs:PutLogEvents", | |
| "logs:PutMetricFilter", | |
| "logs:PutRetentionPolicy" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJK5GQB7CIK7KHY2GA", | |
| "PolicyName": "AmazonSNSRole", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "mobileanalytics:GetReports", | |
| "mobileanalytics:GetFinancialReports" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJKJHO2R27TXKCWBU4", | |
| "PolicyName": "AmazonMobileAnalyticsFinancialReportAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "cloudformation:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:cloudformation:*:*:stack/awseb-*", | |
| "arn:aws:cloudformation:*:*:stack/eb-*" | |
| ], | |
| "Sid": "AllowCloudformationOperationsOnElasticBeanstalkStacks" | |
| }, | |
| { | |
| "Action": [ | |
| "logs:DeleteLogGroup" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:logs:*:*:log-group:/aws/elasticbeanstalk*" | |
| ], | |
| "Sid": "AllowDeleteCloudwatchLogGroups" | |
| }, | |
| { | |
| "Action": [ | |
| "s3:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:s3:::elasticbeanstalk-*", | |
| "arn:aws:s3:::elasticbeanstalk-*/*" | |
| ], | |
| "Sid": "AllowS3OperationsOnElasticBeanstalkBuckets" | |
| }, | |
| { | |
| "Action": [ | |
| "autoscaling:AttachInstances", | |
| "autoscaling:CreateAutoScalingGroup", | |
| "autoscaling:CreateLaunchConfiguration", | |
| "autoscaling:DeleteLaunchConfiguration", | |
| "autoscaling:DeleteAutoScalingGroup", | |
| "autoscaling:DeleteScheduledAction", | |
| "autoscaling:DescribeAccountLimits", | |
| "autoscaling:DescribeAutoScalingGroups", | |
| "autoscaling:DescribeAutoScalingInstances", | |
| "autoscaling:DescribeLaunchConfigurations", | |
| "autoscaling:DescribeLoadBalancers", | |
| "autoscaling:DescribeNotificationConfigurations", | |
| "autoscaling:DescribeScalingActivities", | |
| "autoscaling:DescribeScheduledActions", | |
| "autoscaling:DetachInstances", | |
| "autoscaling:PutScheduledUpdateGroupAction", | |
| "autoscaling:ResumeProcesses", | |
| "autoscaling:SetDesiredCapacity", | |
| "autoscaling:SuspendProcesses", | |
| "autoscaling:TerminateInstanceInAutoScalingGroup", | |
| "autoscaling:UpdateAutoScalingGroup", | |
| "cloudwatch:PutMetricAlarm", | |
| "ec2:AssociateAddress", | |
| "ec2:AllocateAddress", | |
| "ec2:AuthorizeSecurityGroupEgress", | |
| "ec2:AuthorizeSecurityGroupIngress", | |
| "ec2:CreateSecurityGroup", | |
| "ec2:DeleteSecurityGroup", | |
| "ec2:DescribeAccountAttributes", | |
| "ec2:DescribeAddresses", | |
| "ec2:DescribeImages", | |
| "ec2:DescribeInstances", | |
| "ec2:DescribeKeyPairs", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeVpcs", | |
| "ec2:ReleaseAddress", | |
| "ec2:RevokeSecurityGroupEgress", | |
| "ec2:RevokeSecurityGroupIngress", | |
| "ec2:TerminateInstances", | |
| "ecs:CreateCluster", | |
| "ecs:DeleteCluster", | |
| "ecs:DescribeClusters", | |
| "ecs:RegisterTaskDefinition", | |
| "elasticbeanstalk:*", | |
| "elasticloadbalancing:ApplySecurityGroupsToLoadBalancer", | |
| "elasticloadbalancing:ConfigureHealthCheck", | |
| "elasticloadbalancing:CreateLoadBalancer", | |
| "elasticloadbalancing:DeleteLoadBalancer", | |
| "elasticloadbalancing:DeregisterInstancesFromLoadBalancer", | |
| "elasticloadbalancing:DescribeInstanceHealth", | |
| "elasticloadbalancing:DescribeLoadBalancers", | |
| "elasticloadbalancing:DescribeTargetHealth", | |
| "elasticloadbalancing:RegisterInstancesWithLoadBalancer", | |
| "elasticloadbalancing:DescribeTargetGroups", | |
| "elasticloadbalancing:RegisterTargets", | |
| "elasticloadbalancing:DeregisterTargets", | |
| "iam:ListRoles", | |
| "iam:PassRole", | |
| "logs:CreateLogGroup", | |
| "logs:PutRetentionPolicy", | |
| "rds:DescribeDBInstances", | |
| "rds:DescribeOrderableDBInstanceOptions", | |
| "s3:CopyObject", | |
| "s3:GetObject", | |
| "s3:GetObjectAcl", | |
| "s3:GetObjectMetadata", | |
| "s3:ListBucket", | |
| "s3:listBuckets", | |
| "s3:ListObjects", | |
| "sns:CreateTopic", | |
| "sns:GetTopicAttributes", | |
| "sns:ListSubscriptionsByTopic", | |
| "sns:Subscribe", | |
| "sqs:GetQueueAttributes", | |
| "sqs:GetQueueUrl", | |
| "codebuild:CreateProject", | |
| "codebuild:DeleteProject", | |
| "codebuild:BatchGetBuilds", | |
| "codebuild:StartBuild" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ], | |
| "Sid": "AllowOperations" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJKQ5SN74ZQ4WASXBM", | |
| "PolicyName": "AWSElasticBeanstalkService", | |
| "VersionId": "v8" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "iam:GenerateCredentialReport", | |
| "iam:GenerateServiceLastAccessedDetails", | |
| "iam:Get*", | |
| "iam:List*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJKSO7NDY4T57MWDSQ", | |
| "PolicyName": "IAMReadOnlyAccess", | |
| "VersionId": "v3" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "rds:Describe*", | |
| "rds:ListTagsForResource", | |
| "ec2:DescribeAccountAttributes", | |
| "ec2:DescribeAvailabilityZones", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeVpcs" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "cloudwatch:GetMetricStatistics", | |
| "logs:DescribeLogStreams", | |
| "logs:GetLogEvents" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJKTTTYV2IIHKLZ346", | |
| "PolicyName": "AmazonRDSReadOnlyAccess", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "cognito-identity:*", | |
| "cognito-idp:*", | |
| "cognito-sync:*", | |
| "iam:ListRoles", | |
| "iam:ListOpenIdConnectProviders", | |
| "sns:ListPlatformApplications" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJKW5H2HNCPGCYGR6Y", | |
| "PolicyName": "AmazonCognitoPowerUser", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ec2:CreateNetworkInterface", | |
| "ec2:DeleteNetworkInterface", | |
| "ec2:DescribeAvailabilityZones", | |
| "ec2:DescribeNetworkInterfaceAttribute", | |
| "ec2:DescribeNetworkInterfaces", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeVpcs", | |
| "ec2:ModifyNetworkInterfaceAttribute", | |
| "elasticfilesystem:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJKXTMNVQGIDNCKPBC", | |
| "PolicyName": "AmazonElasticFileSystemFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": "iam:GetUser", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "sms:SendMessage", | |
| "sms:GetMessages" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "s3:CreateBucket", | |
| "s3:DeleteBucket", | |
| "s3:DeleteObject", | |
| "s3:GetBucketLocation", | |
| "s3:GetObject", | |
| "s3:ListBucket", | |
| "s3:PutObject", | |
| "s3:PutObjectAcl", | |
| "s3:PutLifecycleConfiguration", | |
| "s3:AbortMultipartUpload", | |
| "s3:ListBucketMultipartUploads", | |
| "s3:ListMultipartUploadParts" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:s3:::sms-b-*", | |
| "arn:aws:s3:::import-to-ec2-*", | |
| "arn:aws:s3:::server-migration-service-upgrade", | |
| "arn:aws:s3:::server-migration-service-upgrade/*", | |
| "arn:aws:s3:::connector-platform-upgrade-info/*", | |
| "arn:aws:s3:::connector-platform-upgrade-info", | |
| "arn:aws:s3:::connector-platform-upgrade-bundles/*", | |
| "arn:aws:s3:::connector-platform-upgrade-bundles", | |
| "arn:aws:s3:::connector-platform-release-notes/*", | |
| "arn:aws:s3:::connector-platform-release-notes" | |
| ] | |
| }, | |
| { | |
| "Action": "awsconnector:*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "SNS:Publish" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "arn:aws:sns:*:*:metrics-sns-topic-for-*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJKZRWXIPK5HSG3QDQ", | |
| "PolicyName": "ServerMigrationConnector", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "zocalo:*", | |
| "ds:*", | |
| "ec2:AuthorizeSecurityGroupEgress", | |
| "ec2:AuthorizeSecurityGroupIngress", | |
| "ec2:CreateNetworkInterface", | |
| "ec2:CreateSecurityGroup", | |
| "ec2:CreateSubnet", | |
| "ec2:CreateTags", | |
| "ec2:CreateVpc", | |
| "ec2:DescribeAvailabilityZones", | |
| "ec2:DescribeNetworkInterfaces", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeVpcs", | |
| "ec2:DeleteNetworkInterface", | |
| "ec2:DeleteSecurityGroup", | |
| "ec2:RevokeSecurityGroupEgress", | |
| "ec2:RevokeSecurityGroupIngress" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJLCDXYRINDMUXEVL6", | |
| "PolicyName": "AmazonZocaloFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "cloudwatch:Describe*", | |
| "cloudwatch:Get*", | |
| "cloudwatch:List*", | |
| "cognito-identity:ListIdentityPools", | |
| "cognito-sync:GetCognitoEvents", | |
| "dynamodb:BatchGetItem", | |
| "dynamodb:DescribeStream", | |
| "dynamodb:DescribeTable", | |
| "dynamodb:GetItem", | |
| "dynamodb:ListStreams", | |
| "dynamodb:ListTables", | |
| "dynamodb:Query", | |
| "dynamodb:Scan", | |
| "events:List*", | |
| "events:Describe*", | |
| "iam:ListRoles", | |
| "kinesis:DescribeStream", | |
| "kinesis:ListStreams", | |
| "lambda:List*", | |
| "lambda:Get*", | |
| "logs:DescribeMetricFilters", | |
| "logs:GetLogEvents", | |
| "logs:DescribeLogGroups", | |
| "logs:DescribeLogStreams", | |
| "s3:Get*", | |
| "s3:List*", | |
| "sns:ListTopics", | |
| "sns:ListSubscriptions", | |
| "sns:ListSubscriptionsByTopic", | |
| "sqs:ListQueues", | |
| "kms:ListAliases", | |
| "ec2:DescribeVpcs", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeSecurityGroups", | |
| "iot:GetTopicRules", | |
| "iot:ListTopicRules", | |
| "iot:ListPolicies", | |
| "iot:ListThings", | |
| "iot:DescribeEndpoint" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJLDG7J3CGUHFN4YN6", | |
| "PolicyName": "AWSLambdaReadOnlyAccess", | |
| "VersionId": "v5" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "aws-portal:ViewUsage" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJLIB4VSBVO47ZSBB6", | |
| "PolicyName": "AWSAccountUsageReportAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ecs:CreateCluster", | |
| "ecs:DeregisterContainerInstance", | |
| "ecs:DiscoverPollEndpoint", | |
| "ecs:Poll", | |
| "ecs:RegisterContainerInstance", | |
| "ecs:StartTelemetrySession", | |
| "ecs:Submit*", | |
| "ecr:GetAuthorizationToken", | |
| "ecr:BatchCheckLayerAvailability", | |
| "ecr:GetDownloadUrlForLayer", | |
| "ecr:BatchGetImage", | |
| "logs:CreateLogStream", | |
| "logs:PutLogEvents" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJLYJCVHC7TQHCSQDS", | |
| "PolicyName": "AmazonEC2ContainerServiceforEC2Role", | |
| "VersionId": "v4" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "appstream:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJLZZXU2YQVGL4QDNC", | |
| "PolicyName": "AmazonAppStreamFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "iot:Connect", | |
| "iot:Publish", | |
| "iot:Subscribe", | |
| "iot:Receive", | |
| "iot:GetThingShadow", | |
| "iot:UpdateThingShadow" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJM2KI2UJDR24XPS2K", | |
| "PolicyName": "AWSIoTDataAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "es:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJM6ZTCU24QL5PZCGC", | |
| "PolicyName": "AmazonESFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ec2:ModifySnapshotAttribute", | |
| "ec2:CopySnapshot", | |
| "ec2:CopyImage", | |
| "ec2:Describe*", | |
| "ec2:DeleteSnapshot" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJMBH3M6BO63XFW2D4", | |
| "PolicyName": "ServerMigrationServiceRole", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "waf:*", | |
| "waf-regional:*", | |
| "elasticloadbalancing:SetWebACL" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJMIKIAFXZEGOLRH7C", | |
| "PolicyName": "AWSWAFFullAccess", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "firehose:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJMZQMTZ7FRBFHHAHI", | |
| "PolicyName": "AmazonKinesisFirehoseFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "autoscaling:Describe*", | |
| "cloudwatch:Describe*", | |
| "cloudwatch:Get*", | |
| "cloudwatch:List*", | |
| "logs:Get*", | |
| "logs:Describe*", | |
| "logs:TestMetricFilter", | |
| "sns:Get*", | |
| "sns:List*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJN23PDQP7SZQAE3QE", | |
| "PolicyName": "CloudWatchReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "logs:CreateLogGroup", | |
| "logs:CreateLogStream", | |
| "logs:PutLogEvents" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJNCQGXC42545SKXIK", | |
| "PolicyName": "AWSLambdaBasicExecutionRole", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "tag:getResources", | |
| "tag:getTagKeys", | |
| "tag:getTagValues", | |
| "tag:addResourceTags", | |
| "tag:removeResourceTags" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJNOS54ZFXN4T2Y34A", | |
| "PolicyName": "ResourceGroupsandTagEditorFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "kms:CreateAlias", | |
| "kms:CreateKey", | |
| "kms:DeleteAlias", | |
| "kms:Describe*", | |
| "kms:GenerateRandom", | |
| "kms:Get*", | |
| "kms:List*", | |
| "iam:ListGroups", | |
| "iam:ListRoles", | |
| "iam:ListUsers" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJNPP7PPPPMJRV2SA4", | |
| "PolicyName": "AWSKeyManagementServicePowerUser", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "importexport:ListJobs", | |
| "importexport:GetStatus" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJNTV4OG52ESYZHCNK", | |
| "PolicyName": "AWSImportExportReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "s3:ListBucket", | |
| "s3:Put*", | |
| "s3:Get*", | |
| "s3:*MultipartUpload*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ], | |
| "Sid": "1" | |
| }, | |
| { | |
| "Action": [ | |
| "sns:Publish" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ], | |
| "Sid": "2" | |
| }, | |
| { | |
| "Action": [ | |
| "s3:*Policy*", | |
| "sns:*Permission*", | |
| "sns:*Delete*", | |
| "s3:*Delete*", | |
| "sns:*Remove*" | |
| ], | |
| "Effect": "Deny", | |
| "Resource": [ | |
| "*" | |
| ], | |
| "Sid": "3" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJNW3WMKVXFJ2KPIQ2", | |
| "PolicyName": "AmazonElasticTranscoderRole", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ec2:AuthorizeSecurityGroupIngress", | |
| "ec2:Describe*", | |
| "elasticloadbalancing:DeregisterInstancesFromLoadBalancer", | |
| "elasticloadbalancing:DeregisterTargets", | |
| "elasticloadbalancing:Describe*", | |
| "elasticloadbalancing:RegisterInstancesWithLoadBalancer", | |
| "elasticloadbalancing:RegisterTargets" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJO53W2XHNACG7V77Q", | |
| "PolicyName": "AmazonEC2ContainerServiceRole", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "devicefarm:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJO7KEDP4VYJPNT5UW", | |
| "PolicyName": "AWSDeviceFarmFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ssm:Describe*", | |
| "ssm:Get*", | |
| "ssm:List*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJODSKQGGJTHRYZ5FC", | |
| "PolicyName": "AmazonSSMReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "states:ListStateMachines", | |
| "states:ListActivities", | |
| "states:DescribeStateMachine", | |
| "states:ListExecutions", | |
| "states:DescribeExecution", | |
| "states:GetExecutionHistory", | |
| "states:DescribeActivity" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJONHB2TJQDJPFW5TM", | |
| "PolicyName": "AWSStepFunctionsReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "aws-marketplace:ViewSubscriptions", | |
| "ec2:DescribeAccountAttributes", | |
| "ec2:DescribeAddresses", | |
| "ec2:DescribeImages", | |
| "ec2:DescribeInstances", | |
| "ec2:DescribeKeyPairs", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeVpcs" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJOOM6LETKURTJ3XZ2", | |
| "PolicyName": "AWSMarketplaceRead-only", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "codepipeline:*", | |
| "iam:ListRoles", | |
| "iam:PassRole", | |
| "s3:CreateBucket", | |
| "s3:GetBucketPolicy", | |
| "s3:GetObject", | |
| "s3:ListAllMyBuckets", | |
| "s3:ListBucket", | |
| "s3:PutBucketPolicy", | |
| "codecommit:ListBranches", | |
| "codecommit:ListRepositories", | |
| "codedeploy:GetApplication", | |
| "codedeploy:GetDeploymentGroup", | |
| "codedeploy:ListApplications", | |
| "codedeploy:ListDeploymentGroups", | |
| "elasticbeanstalk:DescribeApplications", | |
| "elasticbeanstalk:DescribeEnvironments", | |
| "lambda:GetFunctionConfiguration", | |
| "lambda:ListFunctions", | |
| "opsworks:DescribeApps", | |
| "opsworks:DescribeLayers", | |
| "opsworks:DescribeStacks", | |
| "cloudformation:DescribeStacks", | |
| "cloudformation:ListChangeSets" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJP5LH77KSAT2KHQGG", | |
| "PolicyName": "AWSCodePipelineFullAccess", | |
| "VersionId": "v5" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "iot:DeleteThingShadow", | |
| "iot:GetThingShadow", | |
| "iot:UpdateThingShadow" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "arn:aws:iot:*:*:thing/GG_*", | |
| "Sid": "Stmt1485992727244" | |
| }, | |
| { | |
| "Action": [ | |
| "lambda:GetFunction", | |
| "lambda:GetFunctionConfiguration" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*", | |
| "Sid": "Stmt1485992772458" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJPKEIMB6YMXDEVRTM", | |
| "PolicyName": "AWSGreengrassResourceAccessRolePolicy", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "autoscaling:Describe*", | |
| "ec2:AllocateAddress", | |
| "ec2:AssignPrivateIpAddresses", | |
| "ec2:AssociateAddress", | |
| "ec2:AssociateDhcpOptions", | |
| "ec2:AssociateRouteTable", | |
| "ec2:AttachInternetGateway", | |
| "ec2:AttachNetworkInterface", | |
| "ec2:AttachVpnGateway", | |
| "ec2:CreateCustomerGateway", | |
| "ec2:CreateDhcpOptions", | |
| "ec2:CreateFlowLogs", | |
| "ec2:CreateInternetGateway", | |
| "ec2:CreateNatGateway", | |
| "ec2:CreateNetworkAcl", | |
| "ec2:CreateNetworkAcl", | |
| "ec2:CreateNetworkAclEntry", | |
| "ec2:CreateNetworkInterface", | |
| "ec2:CreateRoute", | |
| "ec2:CreateRouteTable", | |
| "ec2:CreateSecurityGroup", | |
| "ec2:CreateSubnet", | |
| "ec2:CreateTags", | |
| "ec2:CreateVpc", | |
| "ec2:CreateVpcEndpoint", | |
| "ec2:CreateVpnConnection", | |
| "ec2:CreateVpnConnectionRoute", | |
| "ec2:CreateVpnGateway", | |
| "ec2:CreatePlacementGroup", | |
| "ec2:DeletePlacementGroup", | |
| "ec2:DescribePlacementGroups", | |
| "ec2:DeleteFlowLogs", | |
| "ec2:DeleteNatGateway", | |
| "ec2:DeleteNetworkInterface", | |
| "ec2:DeleteSubnet", | |
| "ec2:DeleteTags", | |
| "ec2:DeleteVpc", | |
| "ec2:DeleteVpcEndpoints", | |
| "ec2:DeleteVpnConnection", | |
| "ec2:DeleteVpnConnectionRoute", | |
| "ec2:DeleteVpnGateway", | |
| "ec2:DescribeAddresses", | |
| "ec2:DescribeAvailabilityZones", | |
| "ec2:DescribeClassicLinkInstances", | |
| "ec2:DescribeCustomerGateway", | |
| "ec2:DescribeVpcClassicLinkDnsSupport", | |
| "ec2:DescribeDhcpOptions", | |
| "ec2:DescribeFlowLogs", | |
| "ec2:DescribeInstances", | |
| "ec2:DescribeInternetGateways", | |
| "ec2:DescribeKeyPairs", | |
| "ec2:DescribeMovingAddresses", | |
| "ec2:DescribeNatGateways", | |
| "ec2:DescribeNetworkAcls", | |
| "ec2:DescribeNetworkInterfaceAttribute", | |
| "ec2:DescribeNetworkInterfaces", | |
| "ec2:DescribePrefixLists", | |
| "ec2:DescribeRouteTables", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeTags", | |
| "ec2:DescribeVpcAttribute", | |
| "ec2:DescribeVpcClassicLink", | |
| "ec2:DescribeVpcEndpoints", | |
| "ec2:DescribeVpcEndpointServices", | |
| "ec2:DescribeVpcPeeringConnections", | |
| "ec2:DescribeVpcs", | |
| "ec2:DescribeVpnConnections", | |
| "ec2:DescribeVpnGateways", | |
| "ec2:DetachInternetGateway", | |
| "ec2:DetachNetworkInterface", | |
| "ec2:DetachVpnGateway", | |
| "ec2:DisableVgwRoutePropagation", | |
| "ec2:DisassociateAddress", | |
| "ec2:DisassociateRouteTable", | |
| "ec2:EnableVgwRoutePropagation", | |
| "ec2:ModifyNetworkInterfaceAttribute", | |
| "ec2:ModifySubnetAttribute", | |
| "ec2:ModifyVpcAttribute", | |
| "ec2:ModifyVpcEndpoint", | |
| "ec2:MoveAddressToVpc", | |
| "ec2:ReleaseAddress", | |
| "ec2:ReplaceNetworkAclAssociation", | |
| "ec2:ReplaceNetworkAclEntry", | |
| "ec2:ReplaceRoute", | |
| "ec2:ReplaceRouteTableAssociation", | |
| "ec2:ResetNetworkInterfaceAttribute", | |
| "ec2:RestoreAddressToClassic", | |
| "ec2:UnassignPrivateIpAddresses", | |
| "directconnect:*", | |
| "route53:*", | |
| "route53domains:*", | |
| "cloudfront:ListDistributions", | |
| "elasticloadbalancing:*", | |
| "elasticbeanstalk:Describe*", | |
| "elasticbeanstalk:List*", | |
| "elasticbeanstalk:RetrieveEnvironmentInfo", | |
| "elasticbeanstalk:RequestEnvironmentInfo", | |
| "sns:ListTopics", | |
| "sns:ListSubscriptionsByTopic", | |
| "sns:CreateTopic", | |
| "cloudwatch:DescribeAlarms", | |
| "cloudwatch:PutMetricAlarm", | |
| "cloudwatch:DeleteAlarms", | |
| "cloudwatch:GetMetricStatistics", | |
| "logs:DescribeLogGroups", | |
| "logs:DescribeLogStreams", | |
| "logs:GetLogEvents" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "ec2:AcceptVpcPeeringConnection", | |
| "ec2:AttachClassicLinkVpc", | |
| "ec2:AuthorizeSecurityGroupEgress", | |
| "ec2:AuthorizeSecurityGroupIngress", | |
| "ec2:CreateVpcPeeringConnection", | |
| "ec2:DeleteCustomerGateway", | |
| "ec2:DeleteDhcpOptions", | |
| "ec2:DeleteInternetGateway", | |
| "ec2:DeleteNetworkAcl", | |
| "ec2:DeleteNetworkAclEntry", | |
| "ec2:DeleteRoute", | |
| "ec2:DeleteRouteTable", | |
| "ec2:DeleteSecurityGroup", | |
| "ec2:DeleteVolume", | |
| "ec2:DeleteVpcPeeringConnection", | |
| "ec2:DetachClassicLinkVpc", | |
| "ec2:DisableVpcClassicLink", | |
| "ec2:EnableVpcClassicLink", | |
| "ec2:GetConsoleScreenshot", | |
| "ec2:RejectVpcPeeringConnection", | |
| "ec2:RevokeSecurityGroupEgress", | |
| "ec2:RevokeSecurityGroupIngress" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "s3:ListBucket", | |
| "s3:GetBucketLocation", | |
| "s3:GetBucketWebsiteConfiguration" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| }, | |
| { | |
| "Action": [ | |
| "iam:GetRole", | |
| "iam:ListRoles", | |
| "iam:PassRole" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "arn:aws:iam::*:role/flow-logs-*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJPNMADZFJCVPJVZA2", | |
| "PolicyName": "NetworkAdministrator", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": "wam:AuthenticatePackager", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJPRL4KYETIH7XGTSS", | |
| "PolicyName": "AmazonWorkSpacesApplicationManagerAdminAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ec2:AuthorizeSecurityGroupIngress", | |
| "ec2:CreateNetworkInterface", | |
| "ec2:CreateSecurityGroup", | |
| "ec2:DescribeAvailabilityZones", | |
| "ec2:DescribeInternetGateways", | |
| "ec2:DescribeSecurityGroups", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeVpcAttribute", | |
| "ec2:DescribeVpcs", | |
| "ec2:DeleteNetworkInterface", | |
| "ec2:DeleteSecurityGroup", | |
| "ec2:ModifyNetworkInterfaceAttribute", | |
| "ec2:RevokeSecurityGroupIngress" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJPXIBTTZMBEFEX6UA", | |
| "PolicyName": "AmazonDRSVPCManagement", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "xray:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJQBYG45NSJMVQDB2K", | |
| "PolicyName": "AWSXrayFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "cloudwatch:PutMetricData" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*", | |
| "Sid": "MetricsAccess" | |
| }, | |
| { | |
| "Action": [ | |
| "xray:PutTraceSegments", | |
| "xray:PutTelemetryRecords" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*", | |
| "Sid": "XRayAccess" | |
| }, | |
| { | |
| "Action": [ | |
| "sqs:ChangeMessageVisibility", | |
| "sqs:DeleteMessage", | |
| "sqs:ReceiveMessage", | |
| "sqs:SendMessage" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*", | |
| "Sid": "QueueAccess" | |
| }, | |
| { | |
| "Action": [ | |
| "s3:Get*", | |
| "s3:List*", | |
| "s3:PutObject" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:s3:::elasticbeanstalk-*", | |
| "arn:aws:s3:::elasticbeanstalk-*/*" | |
| ], | |
| "Sid": "BucketAccess" | |
| }, | |
| { | |
| "Action": [ | |
| "dynamodb:BatchGetItem", | |
| "dynamodb:BatchWriteItem", | |
| "dynamodb:DeleteItem", | |
| "dynamodb:GetItem", | |
| "dynamodb:PutItem", | |
| "dynamodb:Query", | |
| "dynamodb:Scan", | |
| "dynamodb:UpdateItem" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:dynamodb:*:*:table/*-stack-AWSEBWorkerCronLeaderRegistry*" | |
| ], | |
| "Sid": "DynamoPeriodicTasks" | |
| }, | |
| { | |
| "Action": [ | |
| "logs:PutLogEvents", | |
| "logs:CreateLogStream" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:logs:*:*:log-group:/aws/elasticbeanstalk*" | |
| ], | |
| "Sid": "CloudWatchLogsAccess" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJQDLBRSJVKVF4JMSK", | |
| "PolicyName": "AWSElasticBeanstalkWorkerTier", | |
| "VersionId": "v4" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "directconnect:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJQF2QKZSK74KTIHOW", | |
| "PolicyName": "AWSDirectConnectFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "codebuild:*", | |
| "codecommit:GetBranch", | |
| "codecommit:GetCommit", | |
| "codecommit:GetRepository", | |
| "codecommit:ListBranches", | |
| "codecommit:ListRepositories", | |
| "ecr:DescribeRepositories", | |
| "ecr:ListImages", | |
| "s3:GetBucketLocation", | |
| "s3:ListAllMyBuckets" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "logs:GetLogEvents" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "arn:aws:logs:*:*:log-group:/aws/codebuild/*:log-stream:*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJQJGIOIE3CD2TQXDS", | |
| "PolicyName": "AWSCodeBuildAdminAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": "kinesisanalytics:*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "kinesis:CreateStream", | |
| "kinesis:DeleteStream", | |
| "kinesis:DescribeStream", | |
| "kinesis:ListStreams", | |
| "kinesis:PutRecord", | |
| "kinesis:PutRecords" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "firehose:DescribeDeliveryStream", | |
| "firehose:ListDeliveryStreams" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "cloudwatch:GetMetricStatistics", | |
| "cloudwatch:ListMetrics" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": "logs:GetLogEvents", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "iam:ListPolicyVersions", | |
| "iam:ListRoles" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": "iam:PassRole", | |
| "Effect": "Allow", | |
| "Resource": "arn:aws:iam::*:role/service-role/kinesis-analytics*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJQOSKHTXP43R7P5AC", | |
| "PolicyName": "AmazonKinesisAnalyticsFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "aws-portal:ViewBilling" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJQRYCWMFX5J3E333K", | |
| "PolicyName": "AWSAccountActivityAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": "glacier:*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJQSTZJWB2AXXAKHVQ", | |
| "PolicyName": "AmazonGlacierFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ds:AuthorizeApplication", | |
| "ds:CheckAlias", | |
| "ds:CreateAlias", | |
| "ds:CreateDirectory", | |
| "ds:CreateDomain", | |
| "ds:DeleteAlias", | |
| "ds:DeleteDirectory", | |
| "ds:DescribeDirectories", | |
| "ds:ExtendDirectory", | |
| "ds:GetDirectoryLimits", | |
| "ds:ListAuthorizedApplications", | |
| "ds:UnauthorizeApplication", | |
| "ec2:AuthorizeSecurityGroupEgress", | |
| "ec2:AuthorizeSecurityGroupIngress", | |
| "ec2:CreateNetworkInterface", | |
| "ec2:CreateSecurityGroup", | |
| "ec2:CreateSubnet", | |
| "ec2:CreateTags", | |
| "ec2:CreateVpc", | |
| "ec2:DeleteSecurityGroup", | |
| "ec2:DeleteSubnet", | |
| "ec2:DeleteVpc", | |
| "ec2:DescribeAvailabilityZones", | |
| "ec2:DescribeDomains", | |
| "ec2:DescribeRouteTables", | |
| "ec2:DescribeSubnets", | |
| "ec2:DescribeVpcs", | |
| "ec2:RevokeSecurityGroupEgress", | |
| "ec2:RevokeSecurityGroupIngress", | |
| "kms:DescribeKey", | |
| "kms:ListAliases", | |
| "ses:*", | |
| "workmail:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJQVKNMT7SVATQ4AUY", | |
| "PolicyName": "AmazonWorkMailFullAccess", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "aws-marketplace:ViewSubscriptions", | |
| "aws-marketplace:Subscribe", | |
| "aws-marketplace:Unsubscribe" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJRDW2WIFN7QLUAKBQ", | |
| "PolicyName": "AWSMarketplaceManageSubscriptions", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "support:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJSNKQX2OW67GF4S7E", | |
| "PolicyName": "AWSSupportAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "cloudwatch:DescribeAlarms", | |
| "elasticmapreduce:ListInstanceGroups", | |
| "elasticmapreduce:ModifyInstanceGroups" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJSVXG6QHPE6VHDZ4Q", | |
| "PolicyName": "AmazonElasticMapReduceforAutoScalingRole", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "lambda:InvokeFunction" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": [ | |
| "dynamodb:DescribeStream", | |
| "dynamodb:GetRecords", | |
| "dynamodb:GetShardIterator", | |
| "dynamodb:ListStreams" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJTHQ3EKCQALQDYG5G", | |
| "PolicyName": "AWSLambdaInvocation-DynamoDB", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "iam:DeleteSSHPublicKey", | |
| "iam:GetSSHPublicKey", | |
| "iam:ListSSHPublicKeys", | |
| "iam:UpdateSSHPublicKey", | |
| "iam:UploadSSHPublicKey" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "arn:aws:iam::*:user/${aws:username}" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJTSHUA4UXGXU7ANUA", | |
| "PolicyName": "IAMUserSSHKeys", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "iot:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJU2FPGG6PQWN72V2G", | |
| "PolicyName": "AWSIoTFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "rds:Describe*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJU5J6OAMCJD3OO76O", | |
| "PolicyName": "AWSQuickSightDescribeRDS", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "s3:GetObject" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "arn:aws:s3:::*/AWSLogs/*/Config/*" | |
| }, | |
| { | |
| "Action": [ | |
| "config:Put*", | |
| "config:Get*", | |
| "config:List*", | |
| "config:Describe*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJUB3KIKTA4PU4OYAA", | |
| "PolicyName": "AWSConfigRulesExecutionRole", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "es:Describe*", | |
| "es:List*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJUDMRLOQ7FPAR46FQ", | |
| "PolicyName": "AmazonESReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "codedeploy:Batch*", | |
| "codedeploy:CreateDeployment", | |
| "codedeploy:Get*", | |
| "codedeploy:List*", | |
| "codedeploy:RegisterApplicationRevision" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJUWEPOMGLMVXJAPUI", | |
| "PolicyName": "AWSCodeDeployDeployerAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "polly:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJUZOYQU6XQYPR7EWS", | |
| "PolicyName": "AmazonPollyFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ssm:ListCommands", | |
| "ssm:SendCommand" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ], | |
| "Sid": "Stmt1477803259000" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJV3JNYSTZ47VOXYME", | |
| "PolicyName": "AmazonSSMMaintenanceWindowRole", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "logs:CreateLogGroup", | |
| "logs:PutRetentionPolicy" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:logs:*:*:log-group:RDS*" | |
| ], | |
| "Sid": "EnableCreationAndManagementOfRDSCloudwatchLogGroups" | |
| }, | |
| { | |
| "Action": [ | |
| "logs:CreateLogStream", | |
| "logs:PutLogEvents", | |
| "logs:DescribeLogStreams", | |
| "logs:GetLogEvents" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "arn:aws:logs:*:*:log-group:RDS*:log-stream:*" | |
| ], | |
| "Sid": "EnableCreationAndManagementOfRDSCloudwatchLogStreams" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJV7BS425S4PTSSVGK", | |
| "PolicyName": "AmazonRDSEnhancedMonitoringRole", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "logs:CreateLogGroup", | |
| "logs:CreateLogStream", | |
| "logs:PutLogEvents", | |
| "ec2:CreateNetworkInterface", | |
| "ec2:DescribeNetworkInterfaces", | |
| "ec2:DeleteNetworkInterface" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJVTME3YLVNL72YR2K", | |
| "PolicyName": "AWSLambdaVPCAccessExecutionRole", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "sns:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJWEKLCXXUNT2SOLSG", | |
| "PolicyName": "AmazonSNSFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "cloudsearch:Describe*", | |
| "cloudsearch:List*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJWPLX7N7BCC3RZLHW", | |
| "PolicyName": "CloudSearchReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "cloudformation:DescribeStacks", | |
| "cloudformation:DescribeStackEvents", | |
| "cloudformation:DescribeStackResource", | |
| "cloudformation:DescribeStackResources", | |
| "cloudformation:GetTemplate", | |
| "cloudformation:List*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJWVBEE4I2POWLODLW", | |
| "PolicyName": "AWSCloudFormationReadOnlyAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "route53:*", | |
| "route53domains:*", | |
| "cloudfront:ListDistributions", | |
| "elasticloadbalancing:DescribeLoadBalancers", | |
| "elasticbeanstalk:DescribeEnvironments", | |
| "s3:ListBucket", | |
| "s3:GetBucketLocation", | |
| "s3:GetBucketWebsiteConfiguration", | |
| "ec2:DescribeVpcs", | |
| "ec2:DescribeRegions", | |
| "sns:ListTopics", | |
| "sns:ListSubscriptionsByTopic", | |
| "cloudwatch:DescribeAlarms", | |
| "cloudwatch:GetMetricStatistics" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJWVDLG5RPST6PHQ3A", | |
| "PolicyName": "AmazonRoute53FullAccess", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "lambda:InvokeFunction" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": [ | |
| "*" | |
| ] | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJX4DPCRGTC4NFDUXI", | |
| "PolicyName": "AWSLambdaRole", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "ec2:CreateNetworkInterface", | |
| "ec2:DescribeNetworkInterfaces", | |
| "ec2:DeleteNetworkInterface" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJXAW2Q3KPTURUT2QC", | |
| "PolicyName": "AWSLambdaENIManagementAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "appstream:Get*", | |
| "appstream:List*", | |
| "appstream:Describe*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJXIFDGB4VBX23DX7K", | |
| "PolicyName": "AmazonAppStreamReadOnlyAccess", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": "states:*", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJXKA6VP3UFBVHDPPA", | |
| "PolicyName": "AWSStepFunctionsFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "inspector:Describe*", | |
| "inspector:Get*", | |
| "inspector:List*", | |
| "inspector:LocalizeText", | |
| "inspector:Preview*", | |
| "ec2:DescribeInstances", | |
| "ec2:DescribeTags", | |
| "sns:ListTopics" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJXQNTHTEJ2JFRN2SE", | |
| "PolicyName": "AmazonInspectorReadOnlyAccess", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": [ | |
| "acm:*" | |
| ], | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJYCHABBP6VQIVBCBQ", | |
| "PolicyName": "AWSCertificateManagerFullAccess", | |
| "VersionId": "v1" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Effect": "Allow", | |
| "NotAction": [ | |
| "iam:*", | |
| "organizations:*" | |
| ], | |
| "Resource": "*" | |
| }, | |
| { | |
| "Action": "organizations:DescribeOrganization", | |
| "Effect": "Allow", | |
| "Resource": "*" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJYRXTHIB4FOVS3ZXS", | |
| "PolicyName": "PowerUserAccess", | |
| "VersionId": "v2" | |
| }, | |
| { | |
| "Document": { | |
| "Statement": [ | |
| { | |
| "Action": "events:*", | |
| "Effect": "Allow", | |
| "Resource": "*", | |
| "Sid": "CloudWatchEventsFullAccess" | |
| }, | |
| { | |
| "Action": "iam:PassRole", | |
| "Effect": "Allow", | |
| "Resource": "arn:aws:iam::*:role/AWS_Events_Invoke_Targets", | |
| "Sid": "IAMPassRoleForCloudWatchEvents" | |
| } | |
| ], | |
| "Version": "2012-10-17" | |
| }, | |
| "PolicyId": "ANPAJZLOYLNHESMYOJAFU", | |
| "PolicyName": "CloudWatchEventsFullAccess", | |
| "VersionId": "v1" | |
| } | |
| ] |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment