rowan rowanu
rowanu
/ potentially-expensive-actions.json
Last active
October 4, 2023 12:37
— forked from iann0036/gist:b473bbb3097c5f4c656ed3d07b4d2222
SCP to deny potentially expensive and/or long-running AWS IAM actions
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "Version": "2012-10-17", | |
| "Statement": [ | |
| { | |
| "Sid": "PotentiallyExpensiveActions", | |
| "Effect": "Deny", | |
| "Action": [ | |
| "acm-pca:CreateCertificateAuthority", | |
| "aws-marketplace:AcceptAgreementApprovalRequest", | |
| "aws-marketplace:Subscribe", |