12945 lines
484 KiB
Python
12945 lines
484 KiB
Python
# Imported via `make aws_managed_policies`
|
|
aws_managed_policies_data = """
|
|
{
|
|
"AWSAccountActivityAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSAccountActivityAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:41:18+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"aws-portal:ViewBilling"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJQRYCWMFX5J3E333K",
|
|
"PolicyName": "AWSAccountActivityAccess",
|
|
"UpdateDate": "2015-02-06T18:41:18+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSAccountUsageReportAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSAccountUsageReportAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:41:19+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"aws-portal:ViewUsage"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJLIB4VSBVO47ZSBB6",
|
|
"PolicyName": "AWSAccountUsageReportAccess",
|
|
"UpdateDate": "2015-02-06T18:41:19+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSAgentlessDiscoveryService": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSAgentlessDiscoveryService",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-08-02T01:35:11+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"awsconnector:RegisterConnector",
|
|
"awsconnector:GetConnectorHealth"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": "iam:GetUser",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:GetObject",
|
|
"s3:ListBucket"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::connector-platform-upgrade-info/*",
|
|
"arn:aws:s3:::connector-platform-upgrade-info",
|
|
"arn:aws:s3:::connector-platform-upgrade-bundles/*",
|
|
"arn:aws:s3:::connector-platform-upgrade-bundles",
|
|
"arn:aws:s3:::connector-platform-release-notes/*",
|
|
"arn:aws:s3:::connector-platform-release-notes",
|
|
"arn:aws:s3:::prod.agentless.discovery.connector.upgrade/*",
|
|
"arn:aws:s3:::prod.agentless.discovery.connector.upgrade"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:PutObject",
|
|
"s3:PutObjectAcl"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::import-to-ec2-connector-debug-logs/*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"SNS:Publish"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:sns:*:*:metrics-sns-topic-for-*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"Discovery:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*",
|
|
"Sid": "Discovery"
|
|
},
|
|
{
|
|
"Action": [
|
|
"arsenal:RegisterOnPremisesAgent"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*",
|
|
"Sid": "arsenal"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIA3DIL7BYQ35ISM4K",
|
|
"PolicyName": "AWSAgentlessDiscoveryService",
|
|
"UpdateDate": "2016-08-02T01:35:11+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSApplicationDiscoveryAgentAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSApplicationDiscoveryAgentAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-05-11T21:38:47+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"arsenal:RegisterOnPremisesAgent"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAICZIOVAGC6JPF3WHC",
|
|
"PolicyName": "AWSApplicationDiscoveryAgentAccess",
|
|
"UpdateDate": "2016-05-11T21:38:47+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSApplicationDiscoveryServiceFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSApplicationDiscoveryServiceFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-05-11T21:30:50+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": "discovery:*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJBNJEA6ZXM2SBOPDU",
|
|
"PolicyName": "AWSApplicationDiscoveryServiceFullAccess",
|
|
"UpdateDate": "2016-05-11T21:30:50+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSBatchFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSBatchFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-12-13T00:38:59+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"batch:*",
|
|
"cloudwatch:GetMetricStatistics",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeKeyPairs",
|
|
"ecs:DescribeClusters",
|
|
"ecs:Describe*",
|
|
"ecs:List*",
|
|
"logs:Describe*",
|
|
"logs:Get*",
|
|
"logs:TestMetricFilter",
|
|
"logs:FilterLogEvents",
|
|
"iam:ListInstanceProfiles",
|
|
"iam:ListRoles"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:PassRole"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:iam::*:role/AWSBatchServiceRole",
|
|
"arn:aws:iam::*:role/ecsInstanceRole",
|
|
"arn:aws:iam::*:role/iaws-ec2-spot-fleet-role",
|
|
"arn:aws:iam::*:role/aws-ec2-spot-fleet-role",
|
|
"arn:aws:iam::*:role/AWSBatchJobRole*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJ7K2KIWB3HZVK3CUO",
|
|
"PolicyName": "AWSBatchFullAccess",
|
|
"UpdateDate": "2016-12-13T00:38:59+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AWSBatchServiceRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSBatchServiceRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-05-11T20:44:52+00:00",
|
|
"DefaultVersionId": "v4",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:DescribeAccountAttributes",
|
|
"ec2:DescribeInstances",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeKeyPairs",
|
|
"ec2:DescribeImages",
|
|
"ec2:DescribeImageAttribute",
|
|
"ec2:DescribeSpotFleetInstances",
|
|
"ec2:DescribeSpotFleetRequests",
|
|
"ec2:DescribeSpotPriceHistory",
|
|
"ec2:RequestSpotFleet",
|
|
"ec2:CancelSpotFleetRequests",
|
|
"ec2:ModifySpotFleetRequest",
|
|
"ec2:TerminateInstances",
|
|
"autoscaling:DescribeAccountLimits",
|
|
"autoscaling:DescribeAutoScalingGroups",
|
|
"autoscaling:DescribeLaunchConfigurations",
|
|
"autoscaling:DescribeAutoScalingInstances",
|
|
"autoscaling:CreateLaunchConfiguration",
|
|
"autoscaling:CreateAutoScalingGroup",
|
|
"autoscaling:UpdateAutoScalingGroup",
|
|
"autoscaling:SetDesiredCapacity",
|
|
"autoscaling:DeleteLaunchConfiguration",
|
|
"autoscaling:DeleteAutoScalingGroup",
|
|
"autoscaling:CreateOrUpdateTags",
|
|
"autoscaling:SuspendProcesses",
|
|
"autoscaling:PutNotificationConfiguration",
|
|
"autoscaling:TerminateInstanceInAutoScalingGroup",
|
|
"ecs:DescribeClusters",
|
|
"ecs:DescribeContainerInstances",
|
|
"ecs:DescribeTaskDefinition",
|
|
"ecs:DescribeTasks",
|
|
"ecs:ListClusters",
|
|
"ecs:ListContainerInstances",
|
|
"ecs:ListTaskDefinitionFamilies",
|
|
"ecs:ListTaskDefinitions",
|
|
"ecs:ListTasks",
|
|
"ecs:CreateCluster",
|
|
"ecs:DeleteCluster",
|
|
"ecs:RegisterTaskDefinition",
|
|
"ecs:DeregisterTaskDefinition",
|
|
"ecs:RunTask",
|
|
"ecs:StartTask",
|
|
"ecs:StopTask",
|
|
"ecs:UpdateContainerAgent",
|
|
"ecs:DeregisterContainerInstance",
|
|
"logs:CreateLogGroup",
|
|
"logs:CreateLogStream",
|
|
"logs:PutLogEvents",
|
|
"logs:DescribeLogGroups",
|
|
"iam:GetInstanceProfile",
|
|
"iam:PassRole"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAIUETIXPCKASQJURFE",
|
|
"PolicyName": "AWSBatchServiceRole",
|
|
"UpdateDate": "2017-05-11T20:44:52+00:00",
|
|
"VersionId": "v4"
|
|
},
|
|
"AWSCertificateManagerFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSCertificateManagerFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-01-21T17:02:36+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"acm:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJYCHABBP6VQIVBCBQ",
|
|
"PolicyName": "AWSCertificateManagerFullAccess",
|
|
"UpdateDate": "2016-01-21T17:02:36+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSCertificateManagerReadOnly": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSCertificateManagerReadOnly",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-04-21T15:08:16+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": {
|
|
"Action": [
|
|
"acm:DescribeCertificate",
|
|
"acm:ListCertificates",
|
|
"acm:GetCertificate",
|
|
"acm:ListTagsForCertificate"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAI4GSWX6S4MESJ3EWC",
|
|
"PolicyName": "AWSCertificateManagerReadOnly",
|
|
"UpdateDate": "2016-04-21T15:08:16+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AWSCloudFormationReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSCloudFormationReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:39:49+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cloudformation:DescribeStacks",
|
|
"cloudformation:DescribeStackEvents",
|
|
"cloudformation:DescribeStackResource",
|
|
"cloudformation:DescribeStackResources",
|
|
"cloudformation:GetTemplate",
|
|
"cloudformation:List*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJWVBEE4I2POWLODLW",
|
|
"PolicyName": "AWSCloudFormationReadOnlyAccess",
|
|
"UpdateDate": "2015-02-06T18:39:49+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSCloudHSMFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSCloudHSMFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:39:51+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": "cloudhsm:*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIMBQYQZM7F63DA2UU",
|
|
"PolicyName": "AWSCloudHSMFullAccess",
|
|
"UpdateDate": "2015-02-06T18:39:51+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSCloudHSMReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSCloudHSMReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:39:52+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cloudhsm:Get*",
|
|
"cloudhsm:List*",
|
|
"cloudhsm:Describe*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAISVCBSY7YDBOT67KE",
|
|
"PolicyName": "AWSCloudHSMReadOnlyAccess",
|
|
"UpdateDate": "2015-02-06T18:39:52+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSCloudHSMRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSCloudHSMRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:41:23+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:CreateNetworkInterface",
|
|
"ec2:CreateTags",
|
|
"ec2:DeleteNetworkInterface",
|
|
"ec2:DescribeNetworkInterfaceAttribute",
|
|
"ec2:DescribeNetworkInterfaces",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DetachNetworkInterface"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAI7QIUU4GC66SF26WE",
|
|
"PolicyName": "AWSCloudHSMRole",
|
|
"UpdateDate": "2015-02-06T18:41:23+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSCloudTrailFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSCloudTrailFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-02-16T18:31:28+00:00",
|
|
"DefaultVersionId": "v4",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"sns:AddPermission",
|
|
"sns:CreateTopic",
|
|
"sns:DeleteTopic",
|
|
"sns:ListTopics",
|
|
"sns:SetTopicAttributes",
|
|
"sns:GetTopicAttributes"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:CreateBucket",
|
|
"s3:DeleteBucket",
|
|
"s3:ListAllMyBuckets",
|
|
"s3:PutBucketPolicy",
|
|
"s3:ListBucket",
|
|
"s3:GetObject",
|
|
"s3:GetBucketLocation",
|
|
"s3:GetBucketPolicy"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": "cloudtrail:*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"logs:CreateLogGroup"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:PassRole",
|
|
"iam:ListRoles",
|
|
"iam:GetRolePolicy",
|
|
"iam:GetUser"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"kms:ListKeys",
|
|
"kms:ListAliases"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIQNUJTQYDRJPC3BNK",
|
|
"PolicyName": "AWSCloudTrailFullAccess",
|
|
"UpdateDate": "2016-02-16T18:31:28+00:00",
|
|
"VersionId": "v4"
|
|
},
|
|
"AWSCloudTrailReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSCloudTrailReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-12-14T20:41:52+00:00",
|
|
"DefaultVersionId": "v6",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"s3:GetObject",
|
|
"s3:GetBucketLocation"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"cloudtrail:GetTrailStatus",
|
|
"cloudtrail:DescribeTrails",
|
|
"cloudtrail:LookupEvents",
|
|
"cloudtrail:ListTags",
|
|
"cloudtrail:ListPublicKeys",
|
|
"cloudtrail:GetEventSelectors",
|
|
"s3:ListAllMyBuckets",
|
|
"kms:ListAliases"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJDU7KJADWBSEQ3E7S",
|
|
"PolicyName": "AWSCloudTrailReadOnlyAccess",
|
|
"UpdateDate": "2016-12-14T20:41:52+00:00",
|
|
"VersionId": "v6"
|
|
},
|
|
"AWSCodeBuildAdminAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSCodeBuildAdminAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-12-01T19:04:44+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"codebuild:*",
|
|
"codecommit:GetBranch",
|
|
"codecommit:GetCommit",
|
|
"codecommit:GetRepository",
|
|
"codecommit:ListBranches",
|
|
"codecommit:ListRepositories",
|
|
"ecr:DescribeRepositories",
|
|
"ecr:ListImages",
|
|
"s3:GetBucketLocation",
|
|
"s3:ListAllMyBuckets"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"logs:GetLogEvents"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:logs:*:*:log-group:/aws/codebuild/*:log-stream:*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJQJGIOIE3CD2TQXDS",
|
|
"PolicyName": "AWSCodeBuildAdminAccess",
|
|
"UpdateDate": "2016-12-01T19:04:44+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSCodeBuildDeveloperAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSCodeBuildDeveloperAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-12-01T19:02:32+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"codebuild:StartBuild",
|
|
"codebuild:StopBuild",
|
|
"codebuild:BatchGet*",
|
|
"codebuild:Get*",
|
|
"codebuild:List*",
|
|
"codecommit:GetBranch",
|
|
"codecommit:GetCommit",
|
|
"codecommit:GetRepository",
|
|
"codecommit:ListBranches",
|
|
"s3:GetBucketLocation",
|
|
"s3:ListAllMyBuckets"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"logs:GetLogEvents"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:logs:*:*:log-group:/aws/codebuild/*:log-stream:*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIMKTMR34XSBQW45HS",
|
|
"PolicyName": "AWSCodeBuildDeveloperAccess",
|
|
"UpdateDate": "2016-12-01T19:02:32+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSCodeBuildReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSCodeBuildReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-12-01T19:03:41+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"codebuild:BatchGet*",
|
|
"codebuild:Get*",
|
|
"codebuild:List*",
|
|
"codecommit:GetBranch",
|
|
"codecommit:GetCommit",
|
|
"codecommit:GetRepository"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"logs:GetLogEvents"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:logs:*:*:log-group:/aws/codebuild/*:log-stream:*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJIZZWN6557F5HVP2K",
|
|
"PolicyName": "AWSCodeBuildReadOnlyAccess",
|
|
"UpdateDate": "2016-12-01T19:03:41+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSCodeCommitFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSCodeCommitFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-07-09T17:02:19+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"codecommit:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAI4VCZ3XPIZLQ5NZV2",
|
|
"PolicyName": "AWSCodeCommitFullAccess",
|
|
"UpdateDate": "2015-07-09T17:02:19+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSCodeCommitPowerUser": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSCodeCommitPowerUser",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-05-22T21:12:48+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"codecommit:BatchGetRepositories",
|
|
"codecommit:CreateBranch",
|
|
"codecommit:CreateRepository",
|
|
"codecommit:DeleteBranch",
|
|
"codecommit:Get*",
|
|
"codecommit:GitPull",
|
|
"codecommit:GitPush",
|
|
"codecommit:List*",
|
|
"codecommit:Put*",
|
|
"codecommit:Test*",
|
|
"codecommit:Update*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAI4UIINUVGB5SEC57G",
|
|
"PolicyName": "AWSCodeCommitPowerUser",
|
|
"UpdateDate": "2017-05-22T21:12:48+00:00",
|
|
"VersionId": "v3"
|
|
},
|
|
"AWSCodeCommitReadOnly": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSCodeCommitReadOnly",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-07-09T17:05:06+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"codecommit:BatchGetRepositories",
|
|
"codecommit:Get*",
|
|
"codecommit:GitPull",
|
|
"codecommit:List*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJACNSXR7Z2VLJW3D6",
|
|
"PolicyName": "AWSCodeCommitReadOnly",
|
|
"UpdateDate": "2015-07-09T17:05:06+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSCodeDeployDeployerAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSCodeDeployDeployerAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-05-19T18:18:43+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"codedeploy:Batch*",
|
|
"codedeploy:CreateDeployment",
|
|
"codedeploy:Get*",
|
|
"codedeploy:List*",
|
|
"codedeploy:RegisterApplicationRevision"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJUWEPOMGLMVXJAPUI",
|
|
"PolicyName": "AWSCodeDeployDeployerAccess",
|
|
"UpdateDate": "2015-05-19T18:18:43+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSCodeDeployFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSCodeDeployFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-05-19T18:13:23+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": "codedeploy:*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIONKN3TJZUKXCHXWC",
|
|
"PolicyName": "AWSCodeDeployFullAccess",
|
|
"UpdateDate": "2015-05-19T18:13:23+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSCodeDeployReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSCodeDeployReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-05-19T18:21:32+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"codedeploy:Batch*",
|
|
"codedeploy:Get*",
|
|
"codedeploy:List*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAILZHHKCKB4NE7XOIQ",
|
|
"PolicyName": "AWSCodeDeployReadOnlyAccess",
|
|
"UpdateDate": "2015-05-19T18:21:32+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSCodeDeployRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSCodeDeployRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-09-11T19:09:51+00:00",
|
|
"DefaultVersionId": "v6",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"autoscaling:CompleteLifecycleAction",
|
|
"autoscaling:DeleteLifecycleHook",
|
|
"autoscaling:DescribeAutoScalingGroups",
|
|
"autoscaling:DescribeLifecycleHooks",
|
|
"autoscaling:PutLifecycleHook",
|
|
"autoscaling:RecordLifecycleActionHeartbeat",
|
|
"autoscaling:CreateAutoScalingGroup",
|
|
"autoscaling:UpdateAutoScalingGroup",
|
|
"autoscaling:EnableMetricsCollection",
|
|
"autoscaling:DescribeAutoScalingGroups",
|
|
"autoscaling:DescribePolicies",
|
|
"autoscaling:DescribeScheduledActions",
|
|
"autoscaling:DescribeNotificationConfigurations",
|
|
"autoscaling:DescribeLifecycleHooks",
|
|
"autoscaling:SuspendProcesses",
|
|
"autoscaling:ResumeProcesses",
|
|
"autoscaling:AttachLoadBalancers",
|
|
"autoscaling:PutScalingPolicy",
|
|
"autoscaling:PutScheduledUpdateGroupAction",
|
|
"autoscaling:PutNotificationConfiguration",
|
|
"autoscaling:PutLifecycleHook",
|
|
"autoscaling:DescribeScalingActivities",
|
|
"autoscaling:DeleteAutoScalingGroup",
|
|
"ec2:DescribeInstances",
|
|
"ec2:DescribeInstanceStatus",
|
|
"ec2:TerminateInstances",
|
|
"tag:GetTags",
|
|
"tag:GetResources",
|
|
"sns:Publish",
|
|
"cloudwatch:DescribeAlarms",
|
|
"cloudwatch:PutMetricAlarm",
|
|
"elasticloadbalancing:DescribeLoadBalancers",
|
|
"elasticloadbalancing:DescribeInstanceHealth",
|
|
"elasticloadbalancing:RegisterInstancesWithLoadBalancer",
|
|
"elasticloadbalancing:DeregisterInstancesFromLoadBalancer",
|
|
"elasticloadbalancing:DescribeTargetGroups",
|
|
"elasticloadbalancing:DescribeTargetHealth",
|
|
"elasticloadbalancing:RegisterTargets",
|
|
"elasticloadbalancing:DeregisterTargets"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJ2NKMKD73QS5NBFLA",
|
|
"PolicyName": "AWSCodeDeployRole",
|
|
"UpdateDate": "2017-09-11T19:09:51+00:00",
|
|
"VersionId": "v6"
|
|
},
|
|
"AWSCodePipelineApproverAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSCodePipelineApproverAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-02T17:24:58+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"codepipeline:GetPipeline",
|
|
"codepipeline:GetPipelineState",
|
|
"codepipeline:GetPipelineExecution",
|
|
"codepipeline:ListPipelineExecutions",
|
|
"codepipeline:ListPipelines",
|
|
"codepipeline:PutApprovalResult"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAICXNWK42SQ6LMDXM2",
|
|
"PolicyName": "AWSCodePipelineApproverAccess",
|
|
"UpdateDate": "2017-08-02T17:24:58+00:00",
|
|
"VersionId": "v3"
|
|
},
|
|
"AWSCodePipelineCustomActionAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSCodePipelineCustomActionAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-07-09T17:02:54+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"codepipeline:AcknowledgeJob",
|
|
"codepipeline:GetJobDetails",
|
|
"codepipeline:PollForJobs",
|
|
"codepipeline:PutJobFailureResult",
|
|
"codepipeline:PutJobSuccessResult"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJFW5Z32BTVF76VCYC",
|
|
"PolicyName": "AWSCodePipelineCustomActionAccess",
|
|
"UpdateDate": "2015-07-09T17:02:54+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSCodePipelineFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSCodePipelineFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-11-01T19:59:46+00:00",
|
|
"DefaultVersionId": "v5",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"codepipeline:*",
|
|
"iam:ListRoles",
|
|
"iam:PassRole",
|
|
"s3:CreateBucket",
|
|
"s3:GetBucketPolicy",
|
|
"s3:GetObject",
|
|
"s3:ListAllMyBuckets",
|
|
"s3:ListBucket",
|
|
"s3:PutBucketPolicy",
|
|
"codecommit:ListBranches",
|
|
"codecommit:ListRepositories",
|
|
"codedeploy:GetApplication",
|
|
"codedeploy:GetDeploymentGroup",
|
|
"codedeploy:ListApplications",
|
|
"codedeploy:ListDeploymentGroups",
|
|
"elasticbeanstalk:DescribeApplications",
|
|
"elasticbeanstalk:DescribeEnvironments",
|
|
"lambda:GetFunctionConfiguration",
|
|
"lambda:ListFunctions",
|
|
"opsworks:DescribeApps",
|
|
"opsworks:DescribeLayers",
|
|
"opsworks:DescribeStacks",
|
|
"cloudformation:DescribeStacks",
|
|
"cloudformation:ListChangeSets"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJP5LH77KSAT2KHQGG",
|
|
"PolicyName": "AWSCodePipelineFullAccess",
|
|
"UpdateDate": "2016-11-01T19:59:46+00:00",
|
|
"VersionId": "v5"
|
|
},
|
|
"AWSCodePipelineReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSCodePipelineReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-02T17:25:18+00:00",
|
|
"DefaultVersionId": "v6",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"codepipeline:GetPipeline",
|
|
"codepipeline:GetPipelineState",
|
|
"codepipeline:GetPipelineExecution",
|
|
"codepipeline:ListPipelineExecutions",
|
|
"codepipeline:ListActionTypes",
|
|
"codepipeline:ListPipelines",
|
|
"iam:ListRoles",
|
|
"s3:GetBucketPolicy",
|
|
"s3:GetObject",
|
|
"s3:ListAllMyBuckets",
|
|
"s3:ListBucket",
|
|
"codecommit:ListBranches",
|
|
"codecommit:ListRepositories",
|
|
"codedeploy:GetApplication",
|
|
"codedeploy:GetDeploymentGroup",
|
|
"codedeploy:ListApplications",
|
|
"codedeploy:ListDeploymentGroups",
|
|
"elasticbeanstalk:DescribeApplications",
|
|
"elasticbeanstalk:DescribeEnvironments",
|
|
"lambda:GetFunctionConfiguration",
|
|
"lambda:ListFunctions",
|
|
"opsworks:DescribeApps",
|
|
"opsworks:DescribeLayers",
|
|
"opsworks:DescribeStacks"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAILFKZXIBOTNC5TO2Q",
|
|
"PolicyName": "AWSCodePipelineReadOnlyAccess",
|
|
"UpdateDate": "2017-08-02T17:25:18+00:00",
|
|
"VersionId": "v6"
|
|
},
|
|
"AWSCodeStarFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSCodeStarFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-04-19T16:23:19+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"codestar:*",
|
|
"ec2:DescribeKeyPairs",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DescribeSubnets"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*",
|
|
"Sid": "CodeStarEC2"
|
|
},
|
|
{
|
|
"Action": [
|
|
"cloudformation:DescribeStack*",
|
|
"cloudformation:GetTemplateSummary"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:cloudformation:*:*:stack/awscodestar-*"
|
|
],
|
|
"Sid": "CodeStarCF"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIXI233TFUGLZOJBEC",
|
|
"PolicyName": "AWSCodeStarFullAccess",
|
|
"UpdateDate": "2017-04-19T16:23:19+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSCodeStarServiceRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSCodeStarServiceRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-07-13T19:53:22+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cloudformation:*Stack*",
|
|
"cloudformation:GetTemplate"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:cloudformation:*:*:stack/awscodestar-*",
|
|
"arn:aws:cloudformation:*:*:stack/awseb-*"
|
|
],
|
|
"Sid": "ProjectStack"
|
|
},
|
|
{
|
|
"Action": [
|
|
"cloudformation:GetTemplateSummary",
|
|
"cloudformation:DescribeChangeSet"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*",
|
|
"Sid": "ProjectStackTemplate"
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:GetObject"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::awscodestar-*/*"
|
|
],
|
|
"Sid": "ProjectQuickstarts"
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::aws-codestar-*",
|
|
"arn:aws:s3:::aws-codestar-*/*",
|
|
"arn:aws:s3:::elasticbeanstalk-*",
|
|
"arn:aws:s3:::elasticbeanstalk-*/*"
|
|
],
|
|
"Sid": "ProjectS3Buckets"
|
|
},
|
|
{
|
|
"Action": [
|
|
"codestar:*Project",
|
|
"codestar:*Resource*",
|
|
"codestar:List*",
|
|
"codestar:Describe*",
|
|
"codestar:Get*",
|
|
"codestar:AssociateTeamMember",
|
|
"codecommit:*",
|
|
"codepipeline:*",
|
|
"codedeploy:*",
|
|
"codebuild:*",
|
|
"ec2:RunInstances",
|
|
"autoscaling:*",
|
|
"cloudwatch:Put*",
|
|
"ec2:*",
|
|
"elasticbeanstalk:*",
|
|
"elasticloadbalancing:*",
|
|
"iam:ListRoles",
|
|
"logs:*",
|
|
"sns:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*",
|
|
"Sid": "ProjectServices"
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:AttachRolePolicy",
|
|
"iam:CreateRole",
|
|
"iam:DeleteRole",
|
|
"iam:DeleteRolePolicy",
|
|
"iam:DetachRolePolicy",
|
|
"iam:GetRole",
|
|
"iam:PassRole",
|
|
"iam:PutRolePolicy",
|
|
"iam:SetDefaultPolicyVersion",
|
|
"iam:CreatePolicy",
|
|
"iam:DeletePolicy",
|
|
"iam:AddRoleToInstanceProfile",
|
|
"iam:CreateInstanceProfile",
|
|
"iam:DeleteInstanceProfile",
|
|
"iam:RemoveRoleFromInstanceProfile"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:iam::*:role/CodeStarWorker*",
|
|
"arn:aws:iam::*:policy/CodeStarWorker*",
|
|
"arn:aws:iam::*:instance-profile/awscodestar-*"
|
|
],
|
|
"Sid": "ProjectWorkerRoles"
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:AttachUserPolicy",
|
|
"iam:DetachUserPolicy"
|
|
],
|
|
"Condition": {
|
|
"ArnEquals": {
|
|
"iam:PolicyArn": [
|
|
"arn:aws:iam::*:policy/CodeStar_*"
|
|
]
|
|
}
|
|
},
|
|
"Effect": "Allow",
|
|
"Resource": "*",
|
|
"Sid": "ProjectTeamMembers"
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:CreatePolicy",
|
|
"iam:DeletePolicy",
|
|
"iam:CreatePolicyVersion",
|
|
"iam:DeletePolicyVersion",
|
|
"iam:ListEntitiesForPolicy",
|
|
"iam:ListPolicyVersions"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:iam::*:policy/CodeStar_*"
|
|
],
|
|
"Sid": "ProjectRoles"
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:ListAttachedRolePolicies"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:iam::*:role/aws-codestar-service-role",
|
|
"arn:aws:iam::*:role/service-role/aws-codestar-service-role"
|
|
],
|
|
"Sid": "InspectServiceRole"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAIN6D4M2KD3NBOC4M4",
|
|
"PolicyName": "AWSCodeStarServiceRole",
|
|
"UpdateDate": "2017-07-13T19:53:22+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AWSConfigRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSConfigRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-14T19:04:46+00:00",
|
|
"DefaultVersionId": "v10",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cloudtrail:DescribeTrails",
|
|
"ec2:Describe*",
|
|
"config:Put*",
|
|
"config:Get*",
|
|
"config:List*",
|
|
"config:Describe*",
|
|
"cloudtrail:GetTrailStatus",
|
|
"s3:GetObject",
|
|
"iam:GetAccountAuthorizationDetails",
|
|
"iam:GetAccountPasswordPolicy",
|
|
"iam:GetAccountSummary",
|
|
"iam:GetGroup",
|
|
"iam:GetGroupPolicy",
|
|
"iam:GetPolicy",
|
|
"iam:GetPolicyVersion",
|
|
"iam:GetRole",
|
|
"iam:GetRolePolicy",
|
|
"iam:GetUser",
|
|
"iam:GetUserPolicy",
|
|
"iam:ListAttachedGroupPolicies",
|
|
"iam:ListAttachedRolePolicies",
|
|
"iam:ListAttachedUserPolicies",
|
|
"iam:ListEntitiesForPolicy",
|
|
"iam:ListGroupPolicies",
|
|
"iam:ListGroupsForUser",
|
|
"iam:ListInstanceProfilesForRole",
|
|
"iam:ListPolicyVersions",
|
|
"iam:ListRolePolicies",
|
|
"iam:ListUserPolicies",
|
|
"elasticloadbalancing:DescribeLoadBalancers",
|
|
"elasticloadbalancing:DescribeLoadBalancerAttributes",
|
|
"elasticloadbalancing:DescribeLoadBalancerPolicies",
|
|
"elasticloadbalancing:DescribeTags",
|
|
"acm:DescribeCertificate",
|
|
"acm:ListCertificates",
|
|
"acm:ListTagsForCertificate",
|
|
"rds:DescribeDBInstances",
|
|
"rds:DescribeDBSecurityGroups",
|
|
"rds:DescribeDBSnapshotAttributes",
|
|
"rds:DescribeDBSnapshots",
|
|
"rds:DescribeDBSubnetGroups",
|
|
"rds:DescribeEventSubscriptions",
|
|
"rds:ListTagsForResource",
|
|
"rds:DescribeDBClusters",
|
|
"s3:GetAccelerateConfiguration",
|
|
"s3:GetBucketAcl",
|
|
"s3:GetBucketCORS",
|
|
"s3:GetBucketLocation",
|
|
"s3:GetBucketLogging",
|
|
"s3:GetBucketNotification",
|
|
"s3:GetBucketPolicy",
|
|
"s3:GetBucketRequestPayment",
|
|
"s3:GetBucketTagging",
|
|
"s3:GetBucketVersioning",
|
|
"s3:GetBucketWebsite",
|
|
"s3:GetLifecycleConfiguration",
|
|
"s3:GetReplicationConfiguration",
|
|
"s3:ListAllMyBuckets",
|
|
"redshift:DescribeClusterParameterGroups",
|
|
"redshift:DescribeClusterParameters",
|
|
"redshift:DescribeClusterSecurityGroups",
|
|
"redshift:DescribeClusterSnapshots",
|
|
"redshift:DescribeClusterSubnetGroups",
|
|
"redshift:DescribeClusters",
|
|
"redshift:DescribeEventSubscriptions",
|
|
"redshift:DescribeLoggingStatus",
|
|
"dynamodb:DescribeLimits",
|
|
"dynamodb:DescribeTable",
|
|
"dynamodb:ListTables",
|
|
"dynamodb:ListTagsOfResource",
|
|
"cloudwatch:DescribeAlarms",
|
|
"application-autoscaling:DescribeScalableTargets",
|
|
"application-autoscaling:DescribeScalingPolicies",
|
|
"autoscaling:DescribeAutoScalingGroups",
|
|
"autoscaling:DescribeLaunchConfigurations",
|
|
"autoscaling:DescribeLifecycleHooks",
|
|
"autoscaling:DescribePolicies",
|
|
"autoscaling:DescribeScheduledActions",
|
|
"autoscaling:DescribeTags"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAIQRXRDRGJUA33ELIO",
|
|
"PolicyName": "AWSConfigRole",
|
|
"UpdateDate": "2017-08-14T19:04:46+00:00",
|
|
"VersionId": "v10"
|
|
},
|
|
"AWSConfigRulesExecutionRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSConfigRulesExecutionRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-03-25T17:59:36+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"s3:GetObject"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:s3:::*/AWSLogs/*/Config/*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"config:Put*",
|
|
"config:Get*",
|
|
"config:List*",
|
|
"config:Describe*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJUB3KIKTA4PU4OYAA",
|
|
"PolicyName": "AWSConfigRulesExecutionRole",
|
|
"UpdateDate": "2016-03-25T17:59:36+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSConfigUserAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSConfigUserAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-08-30T19:15:19+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"config:Get*",
|
|
"config:Describe*",
|
|
"config:Deliver*",
|
|
"config:List*",
|
|
"tag:GetResources",
|
|
"tag:GetTagKeys",
|
|
"cloudtrail:DescribeTrails",
|
|
"cloudtrail:GetTrailStatus",
|
|
"cloudtrail:LookupEvents"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIWTTSFJ7KKJE3MWGA",
|
|
"PolicyName": "AWSConfigUserAccess",
|
|
"UpdateDate": "2016-08-30T19:15:19+00:00",
|
|
"VersionId": "v3"
|
|
},
|
|
"AWSConnector": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSConnector",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-09-28T19:50:38+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": "iam:GetUser",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:ListAllMyBuckets"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:CreateBucket",
|
|
"s3:DeleteBucket",
|
|
"s3:DeleteObject",
|
|
"s3:GetBucketLocation",
|
|
"s3:GetObject",
|
|
"s3:ListBucket",
|
|
"s3:PutObject",
|
|
"s3:PutObjectAcl",
|
|
"s3:AbortMultipartUpload",
|
|
"s3:ListBucketMultipartUploads",
|
|
"s3:ListMultipartUploadParts"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:s3:::import-to-ec2-*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"ec2:CancelConversionTask",
|
|
"ec2:CancelExportTask",
|
|
"ec2:CreateImage",
|
|
"ec2:CreateInstanceExportTask",
|
|
"ec2:CreateTags",
|
|
"ec2:CreateVolume",
|
|
"ec2:DeleteTags",
|
|
"ec2:DeleteVolume",
|
|
"ec2:DescribeConversionTasks",
|
|
"ec2:DescribeExportTasks",
|
|
"ec2:DescribeImages",
|
|
"ec2:DescribeInstanceAttribute",
|
|
"ec2:DescribeInstanceStatus",
|
|
"ec2:DescribeInstances",
|
|
"ec2:DescribeRegions",
|
|
"ec2:DescribeTags",
|
|
"ec2:DetachVolume",
|
|
"ec2:ImportInstance",
|
|
"ec2:ImportVolume",
|
|
"ec2:ModifyInstanceAttribute",
|
|
"ec2:RunInstances",
|
|
"ec2:StartInstances",
|
|
"ec2:StopInstances",
|
|
"ec2:TerminateInstances",
|
|
"ec2:ImportImage",
|
|
"ec2:DescribeImportImageTasks",
|
|
"ec2:DeregisterImage",
|
|
"ec2:DescribeSnapshots",
|
|
"ec2:DeleteSnapshot",
|
|
"ec2:CancelImportTask",
|
|
"ec2:ImportSnapshot",
|
|
"ec2:DescribeImportSnapshotTasks"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"SNS:Publish"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:sns:*:*:metrics-sns-topic-for-*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJ6YATONJHICG3DJ3U",
|
|
"PolicyName": "AWSConnector",
|
|
"UpdateDate": "2015-09-28T19:50:38+00:00",
|
|
"VersionId": "v3"
|
|
},
|
|
"AWSDataPipelineRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSDataPipelineRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-02-22T17:17:38+00:00",
|
|
"DefaultVersionId": "v5",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cloudwatch:*",
|
|
"datapipeline:DescribeObjects",
|
|
"datapipeline:EvaluateExpression",
|
|
"dynamodb:BatchGetItem",
|
|
"dynamodb:DescribeTable",
|
|
"dynamodb:GetItem",
|
|
"dynamodb:Query",
|
|
"dynamodb:Scan",
|
|
"dynamodb:UpdateTable",
|
|
"ec2:AuthorizeSecurityGroupIngress",
|
|
"ec2:CancelSpotInstanceRequests",
|
|
"ec2:CreateSecurityGroup",
|
|
"ec2:CreateTags",
|
|
"ec2:DeleteTags",
|
|
"ec2:Describe*",
|
|
"ec2:ModifyImageAttribute",
|
|
"ec2:ModifyInstanceAttribute",
|
|
"ec2:RequestSpotInstances",
|
|
"ec2:RunInstances",
|
|
"ec2:StartInstances",
|
|
"ec2:StopInstances",
|
|
"ec2:TerminateInstances",
|
|
"ec2:AuthorizeSecurityGroupEgress",
|
|
"ec2:DeleteSecurityGroup",
|
|
"ec2:RevokeSecurityGroupEgress",
|
|
"ec2:DescribeNetworkInterfaces",
|
|
"ec2:CreateNetworkInterface",
|
|
"ec2:DeleteNetworkInterface",
|
|
"ec2:DetachNetworkInterface",
|
|
"elasticmapreduce:*",
|
|
"iam:GetInstanceProfile",
|
|
"iam:GetRole",
|
|
"iam:GetRolePolicy",
|
|
"iam:ListAttachedRolePolicies",
|
|
"iam:ListRolePolicies",
|
|
"iam:ListInstanceProfiles",
|
|
"iam:PassRole",
|
|
"rds:DescribeDBInstances",
|
|
"rds:DescribeDBSecurityGroups",
|
|
"redshift:DescribeClusters",
|
|
"redshift:DescribeClusterSecurityGroups",
|
|
"s3:CreateBucket",
|
|
"s3:DeleteObject",
|
|
"s3:Get*",
|
|
"s3:List*",
|
|
"s3:Put*",
|
|
"sdb:BatchPutAttributes",
|
|
"sdb:Select*",
|
|
"sns:GetTopicAttributes",
|
|
"sns:ListTopics",
|
|
"sns:Publish",
|
|
"sns:Subscribe",
|
|
"sns:Unsubscribe",
|
|
"sqs:CreateQueue",
|
|
"sqs:Delete*",
|
|
"sqs:GetQueue*",
|
|
"sqs:PurgeQueue",
|
|
"sqs:ReceiveMessage"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAIKCP6XS3ESGF4GLO2",
|
|
"PolicyName": "AWSDataPipelineRole",
|
|
"UpdateDate": "2016-02-22T17:17:38+00:00",
|
|
"VersionId": "v5"
|
|
},
|
|
"AWSDataPipeline_FullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSDataPipeline_FullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-17T18:48:39+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"s3:List*",
|
|
"dynamodb:DescribeTable",
|
|
"rds:DescribeDBInstances",
|
|
"rds:DescribeDBSecurityGroups",
|
|
"redshift:DescribeClusters",
|
|
"redshift:DescribeClusterSecurityGroups",
|
|
"sns:ListTopics",
|
|
"sns:Subscribe",
|
|
"iam:ListRoles",
|
|
"iam:GetRolePolicy",
|
|
"iam:GetInstanceProfile",
|
|
"iam:ListInstanceProfiles",
|
|
"datapipeline:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": "iam:PassRole",
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:iam::*:role/DataPipelineDefaultResourceRole",
|
|
"arn:aws:iam::*:role/DataPipelineDefaultRole"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIXOFIG7RSBMRPHXJ4",
|
|
"PolicyName": "AWSDataPipeline_FullAccess",
|
|
"UpdateDate": "2017-08-17T18:48:39+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AWSDataPipeline_PowerUser": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSDataPipeline_PowerUser",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-17T18:49:42+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"s3:List*",
|
|
"dynamodb:DescribeTable",
|
|
"rds:DescribeDBInstances",
|
|
"rds:DescribeDBSecurityGroups",
|
|
"redshift:DescribeClusters",
|
|
"redshift:DescribeClusterSecurityGroups",
|
|
"sns:ListTopics",
|
|
"iam:ListRoles",
|
|
"iam:GetRolePolicy",
|
|
"iam:GetInstanceProfile",
|
|
"iam:ListInstanceProfiles",
|
|
"datapipeline:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": "iam:PassRole",
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:iam::*:role/DataPipelineDefaultResourceRole",
|
|
"arn:aws:iam::*:role/DataPipelineDefaultRole"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIMXGLVY6DVR24VTYS",
|
|
"PolicyName": "AWSDataPipeline_PowerUser",
|
|
"UpdateDate": "2017-08-17T18:49:42+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AWSDeviceFarmFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSDeviceFarmFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-07-13T16:37:38+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"devicefarm:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJO7KEDP4VYJPNT5UW",
|
|
"PolicyName": "AWSDeviceFarmFullAccess",
|
|
"UpdateDate": "2015-07-13T16:37:38+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSDirectConnectFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSDirectConnectFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:07+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"directconnect:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJQF2QKZSK74KTIHOW",
|
|
"PolicyName": "AWSDirectConnectFullAccess",
|
|
"UpdateDate": "2015-02-06T18:40:07+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSDirectConnectReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSDirectConnectReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:08+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"directconnect:Describe*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAI23HZ27SI6FQMGNQ2",
|
|
"PolicyName": "AWSDirectConnectReadOnlyAccess",
|
|
"UpdateDate": "2015-02-06T18:40:08+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSDirectoryServiceFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSDirectoryServiceFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-02-24T23:10:36+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ds:*",
|
|
"ec2:AuthorizeSecurityGroupEgress",
|
|
"ec2:AuthorizeSecurityGroupIngress",
|
|
"ec2:CreateNetworkInterface",
|
|
"ec2:CreateSecurityGroup",
|
|
"ec2:DeleteNetworkInterface",
|
|
"ec2:DeleteSecurityGroup",
|
|
"ec2:DescribeNetworkInterfaces",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:RevokeSecurityGroupEgress",
|
|
"ec2:RevokeSecurityGroupIngress",
|
|
"sns:GetTopicAttributes",
|
|
"sns:ListSubscriptions",
|
|
"sns:ListSubscriptionsByTopic",
|
|
"sns:ListTopics"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"sns:CreateTopic",
|
|
"sns:DeleteTopic",
|
|
"sns:SetTopicAttributes",
|
|
"sns:Subscribe",
|
|
"sns:Unsubscribe"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:sns:*:*:DirectoryMonitoring*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAINAW5ANUWTH3R4ANI",
|
|
"PolicyName": "AWSDirectoryServiceFullAccess",
|
|
"UpdateDate": "2016-02-24T23:10:36+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AWSDirectoryServiceReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSDirectoryServiceReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-02-24T23:11:18+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ds:Check*",
|
|
"ds:Describe*",
|
|
"ds:Get*",
|
|
"ds:List*",
|
|
"ds:Verify*",
|
|
"ec2:DescribeNetworkInterfaces",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVpcs",
|
|
"sns:ListTopics",
|
|
"sns:GetTopicAttributes",
|
|
"sns:ListSubscriptions",
|
|
"sns:ListSubscriptionsByTopic"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIHWYO6WSDNCG64M2W",
|
|
"PolicyName": "AWSDirectoryServiceReadOnlyAccess",
|
|
"UpdateDate": "2016-02-24T23:11:18+00:00",
|
|
"VersionId": "v3"
|
|
},
|
|
"AWSEC2SpotServiceRolePolicy": {
|
|
"Arn": "arn:aws:iam::aws:policy/aws-service-role/AWSEC2SpotServiceRolePolicy",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-09-18T18:51:54+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:DescribeInstances",
|
|
"ec2:StartInstances",
|
|
"ec2:StopInstances"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:PassRole"
|
|
],
|
|
"Condition": {
|
|
"StringLike": {
|
|
"iam:PassedToService": "ec2.amazonaws.com"
|
|
}
|
|
},
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/aws-service-role/",
|
|
"PolicyId": "ANPAIZJJBQNXQYVKTEXGM",
|
|
"PolicyName": "AWSEC2SpotServiceRolePolicy",
|
|
"UpdateDate": "2017-09-18T18:51:54+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSElasticBeanstalkCustomPlatformforEC2Role": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSElasticBeanstalkCustomPlatformforEC2Role",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-02-21T22:50:30+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:AttachVolume",
|
|
"ec2:AuthorizeSecurityGroupIngress",
|
|
"ec2:CopyImage",
|
|
"ec2:CreateImage",
|
|
"ec2:CreateKeypair",
|
|
"ec2:CreateSecurityGroup",
|
|
"ec2:CreateSnapshot",
|
|
"ec2:CreateTags",
|
|
"ec2:CreateVolume",
|
|
"ec2:DeleteKeypair",
|
|
"ec2:DeleteSecurityGroup",
|
|
"ec2:DeleteSnapshot",
|
|
"ec2:DeleteVolume",
|
|
"ec2:DeregisterImage",
|
|
"ec2:DescribeImageAttribute",
|
|
"ec2:DescribeImages",
|
|
"ec2:DescribeInstances",
|
|
"ec2:DescribeRegions",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSnapshots",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeTags",
|
|
"ec2:DescribeVolumes",
|
|
"ec2:DetachVolume",
|
|
"ec2:GetPasswordData",
|
|
"ec2:ModifyImageAttribute",
|
|
"ec2:ModifyInstanceAttribute",
|
|
"ec2:ModifySnapshotAttribute",
|
|
"ec2:RegisterImage",
|
|
"ec2:RunInstances",
|
|
"ec2:StopInstances",
|
|
"ec2:TerminateInstances"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*",
|
|
"Sid": "EC2Access"
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:Get*",
|
|
"s3:List*",
|
|
"s3:PutObject"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::elasticbeanstalk-*",
|
|
"arn:aws:s3:::elasticbeanstalk-*/*"
|
|
],
|
|
"Sid": "BucketAccess"
|
|
},
|
|
{
|
|
"Action": [
|
|
"logs:CreateLogGroup",
|
|
"logs:CreateLogStream",
|
|
"logs:PutLogEvents",
|
|
"logs:DescribeLogStreams"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:logs:*:*:log-group:/aws/elasticbeanstalk/platform/*",
|
|
"Sid": "CloudWatchLogsAccess"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJRVFXSS6LEIQGBKDY",
|
|
"PolicyName": "AWSElasticBeanstalkCustomPlatformforEC2Role",
|
|
"UpdateDate": "2017-02-21T22:50:30+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSElasticBeanstalkEnhancedHealth": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSElasticBeanstalkEnhancedHealth",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-08-22T20:28:36+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"elasticloadbalancing:DescribeInstanceHealth",
|
|
"elasticloadbalancing:DescribeLoadBalancers",
|
|
"elasticloadbalancing:DescribeTargetHealth",
|
|
"ec2:DescribeInstances",
|
|
"ec2:DescribeInstanceStatus",
|
|
"ec2:GetConsoleOutput",
|
|
"ec2:AssociateAddress",
|
|
"ec2:DescribeAddresses",
|
|
"ec2:DescribeSecurityGroups",
|
|
"sqs:GetQueueAttributes",
|
|
"sqs:GetQueueUrl",
|
|
"autoscaling:DescribeAutoScalingGroups",
|
|
"autoscaling:DescribeAutoScalingInstances",
|
|
"autoscaling:DescribeScalingActivities",
|
|
"autoscaling:DescribeNotificationConfigurations"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAIH5EFJNMOGUUTKLFE",
|
|
"PolicyName": "AWSElasticBeanstalkEnhancedHealth",
|
|
"UpdateDate": "2016-08-22T20:28:36+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AWSElasticBeanstalkFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSElasticBeanstalkFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-12-21T01:00:13+00:00",
|
|
"DefaultVersionId": "v5",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"elasticbeanstalk:*",
|
|
"ec2:*",
|
|
"ecs:*",
|
|
"ecr:*",
|
|
"elasticloadbalancing:*",
|
|
"autoscaling:*",
|
|
"cloudwatch:*",
|
|
"s3:*",
|
|
"sns:*",
|
|
"cloudformation:*",
|
|
"dynamodb:*",
|
|
"rds:*",
|
|
"sqs:*",
|
|
"logs:*",
|
|
"iam:GetPolicyVersion",
|
|
"iam:GetRole",
|
|
"iam:PassRole",
|
|
"iam:ListRolePolicies",
|
|
"iam:ListAttachedRolePolicies",
|
|
"iam:ListInstanceProfiles",
|
|
"iam:ListRoles",
|
|
"iam:ListServerCertificates",
|
|
"acm:DescribeCertificate",
|
|
"acm:ListCertificates",
|
|
"codebuild:CreateProject",
|
|
"codebuild:DeleteProject",
|
|
"codebuild:BatchGetBuilds",
|
|
"codebuild:StartBuild"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:AddRoleToInstanceProfile",
|
|
"iam:CreateInstanceProfile",
|
|
"iam:CreateRole"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:iam::*:role/aws-elasticbeanstalk*",
|
|
"arn:aws:iam::*:instance-profile/aws-elasticbeanstalk*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:AttachRolePolicy"
|
|
],
|
|
"Condition": {
|
|
"StringLike": {
|
|
"iam:PolicyArn": [
|
|
"arn:aws:iam::aws:policy/AWSElasticBeanstalk*",
|
|
"arn:aws:iam::aws:policy/service-role/AWSElasticBeanstalk*"
|
|
]
|
|
}
|
|
},
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIZYX2YLLBW2LJVUFW",
|
|
"PolicyName": "AWSElasticBeanstalkFullAccess",
|
|
"UpdateDate": "2016-12-21T01:00:13+00:00",
|
|
"VersionId": "v5"
|
|
},
|
|
"AWSElasticBeanstalkMulticontainerDocker": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSElasticBeanstalkMulticontainerDocker",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-06-06T23:45:37+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ecs:Poll",
|
|
"ecs:StartTask",
|
|
"ecs:StopTask",
|
|
"ecs:DiscoverPollEndpoint",
|
|
"ecs:StartTelemetrySession",
|
|
"ecs:RegisterContainerInstance",
|
|
"ecs:DeregisterContainerInstance",
|
|
"ecs:DescribeContainerInstances",
|
|
"ecs:Submit*",
|
|
"ecs:DescribeTasks"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*",
|
|
"Sid": "ECSAccess"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJ45SBYG72SD6SHJEY",
|
|
"PolicyName": "AWSElasticBeanstalkMulticontainerDocker",
|
|
"UpdateDate": "2016-06-06T23:45:37+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AWSElasticBeanstalkReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSElasticBeanstalkReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:19+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"elasticbeanstalk:Check*",
|
|
"elasticbeanstalk:Describe*",
|
|
"elasticbeanstalk:List*",
|
|
"elasticbeanstalk:RequestEnvironmentInfo",
|
|
"elasticbeanstalk:RetrieveEnvironmentInfo",
|
|
"ec2:Describe*",
|
|
"elasticloadbalancing:Describe*",
|
|
"autoscaling:Describe*",
|
|
"cloudwatch:Describe*",
|
|
"cloudwatch:List*",
|
|
"cloudwatch:Get*",
|
|
"s3:Get*",
|
|
"s3:List*",
|
|
"sns:Get*",
|
|
"sns:List*",
|
|
"cloudformation:Describe*",
|
|
"cloudformation:Get*",
|
|
"cloudformation:List*",
|
|
"cloudformation:Validate*",
|
|
"cloudformation:Estimate*",
|
|
"rds:Describe*",
|
|
"sqs:Get*",
|
|
"sqs:List*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAI47KNGXDAXFD4SDHG",
|
|
"PolicyName": "AWSElasticBeanstalkReadOnlyAccess",
|
|
"UpdateDate": "2015-02-06T18:40:19+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSElasticBeanstalkService": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSElasticBeanstalkService",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-06-21T16:49:23+00:00",
|
|
"DefaultVersionId": "v11",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cloudformation:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:cloudformation:*:*:stack/awseb-*",
|
|
"arn:aws:cloudformation:*:*:stack/eb-*"
|
|
],
|
|
"Sid": "AllowCloudformationOperationsOnElasticBeanstalkStacks"
|
|
},
|
|
{
|
|
"Action": [
|
|
"logs:DeleteLogGroup"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:logs:*:*:log-group:/aws/elasticbeanstalk*"
|
|
],
|
|
"Sid": "AllowDeleteCloudwatchLogGroups"
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::elasticbeanstalk-*",
|
|
"arn:aws:s3:::elasticbeanstalk-*/*"
|
|
],
|
|
"Sid": "AllowS3OperationsOnElasticBeanstalkBuckets"
|
|
},
|
|
{
|
|
"Action": [
|
|
"autoscaling:AttachInstances",
|
|
"autoscaling:CreateAutoScalingGroup",
|
|
"autoscaling:CreateLaunchConfiguration",
|
|
"autoscaling:DeleteLaunchConfiguration",
|
|
"autoscaling:DeleteAutoScalingGroup",
|
|
"autoscaling:DeleteScheduledAction",
|
|
"autoscaling:DescribeAccountLimits",
|
|
"autoscaling:DescribeAutoScalingGroups",
|
|
"autoscaling:DescribeAutoScalingInstances",
|
|
"autoscaling:DescribeLaunchConfigurations",
|
|
"autoscaling:DescribeLoadBalancers",
|
|
"autoscaling:DescribeNotificationConfigurations",
|
|
"autoscaling:DescribeScalingActivities",
|
|
"autoscaling:DescribeScheduledActions",
|
|
"autoscaling:DetachInstances",
|
|
"autoscaling:PutScheduledUpdateGroupAction",
|
|
"autoscaling:ResumeProcesses",
|
|
"autoscaling:SetDesiredCapacity",
|
|
"autoscaling:SuspendProcesses",
|
|
"autoscaling:TerminateInstanceInAutoScalingGroup",
|
|
"autoscaling:UpdateAutoScalingGroup",
|
|
"cloudwatch:PutMetricAlarm",
|
|
"ec2:AssociateAddress",
|
|
"ec2:AllocateAddress",
|
|
"ec2:AuthorizeSecurityGroupEgress",
|
|
"ec2:AuthorizeSecurityGroupIngress",
|
|
"ec2:CreateSecurityGroup",
|
|
"ec2:DeleteSecurityGroup",
|
|
"ec2:DescribeAccountAttributes",
|
|
"ec2:DescribeAddresses",
|
|
"ec2:DescribeImages",
|
|
"ec2:DescribeInstances",
|
|
"ec2:DescribeKeyPairs",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSnapshots",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DisassociateAddress",
|
|
"ec2:ReleaseAddress",
|
|
"ec2:RevokeSecurityGroupEgress",
|
|
"ec2:RevokeSecurityGroupIngress",
|
|
"ec2:TerminateInstances",
|
|
"ecs:CreateCluster",
|
|
"ecs:DeleteCluster",
|
|
"ecs:DescribeClusters",
|
|
"ecs:RegisterTaskDefinition",
|
|
"elasticbeanstalk:*",
|
|
"elasticloadbalancing:ApplySecurityGroupsToLoadBalancer",
|
|
"elasticloadbalancing:ConfigureHealthCheck",
|
|
"elasticloadbalancing:CreateLoadBalancer",
|
|
"elasticloadbalancing:DeleteLoadBalancer",
|
|
"elasticloadbalancing:DeregisterInstancesFromLoadBalancer",
|
|
"elasticloadbalancing:DescribeInstanceHealth",
|
|
"elasticloadbalancing:DescribeLoadBalancers",
|
|
"elasticloadbalancing:DescribeTargetHealth",
|
|
"elasticloadbalancing:RegisterInstancesWithLoadBalancer",
|
|
"elasticloadbalancing:DescribeTargetGroups",
|
|
"elasticloadbalancing:RegisterTargets",
|
|
"elasticloadbalancing:DeregisterTargets",
|
|
"iam:ListRoles",
|
|
"iam:PassRole",
|
|
"logs:CreateLogGroup",
|
|
"logs:PutRetentionPolicy",
|
|
"rds:DescribeDBEngineVersions",
|
|
"rds:DescribeDBInstances",
|
|
"rds:DescribeOrderableDBInstanceOptions",
|
|
"s3:CopyObject",
|
|
"s3:GetObject",
|
|
"s3:GetObjectAcl",
|
|
"s3:GetObjectMetadata",
|
|
"s3:ListBucket",
|
|
"s3:listBuckets",
|
|
"s3:ListObjects",
|
|
"sns:CreateTopic",
|
|
"sns:GetTopicAttributes",
|
|
"sns:ListSubscriptionsByTopic",
|
|
"sns:Subscribe",
|
|
"sns:SetTopicAttributes",
|
|
"sqs:GetQueueAttributes",
|
|
"sqs:GetQueueUrl",
|
|
"codebuild:CreateProject",
|
|
"codebuild:DeleteProject",
|
|
"codebuild:BatchGetBuilds",
|
|
"codebuild:StartBuild"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
],
|
|
"Sid": "AllowOperations"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJKQ5SN74ZQ4WASXBM",
|
|
"PolicyName": "AWSElasticBeanstalkService",
|
|
"UpdateDate": "2017-06-21T16:49:23+00:00",
|
|
"VersionId": "v11"
|
|
},
|
|
"AWSElasticBeanstalkServiceRolePolicy": {
|
|
"Arn": "arn:aws:iam::aws:policy/aws-service-role/AWSElasticBeanstalkServiceRolePolicy",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-09-13T23:46:37+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"iam:PassRole"
|
|
],
|
|
"Condition": {
|
|
"StringLikeIfExists": {
|
|
"iam:PassedToService": "elasticbeanstalk.amazonaws.com"
|
|
}
|
|
},
|
|
"Effect": "Allow",
|
|
"Resource": "*",
|
|
"Sid": "AllowPassRoleToElasticBeanstalk"
|
|
},
|
|
{
|
|
"Action": [
|
|
"cloudformation:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:cloudformation:*:*:stack/awseb-*",
|
|
"arn:aws:cloudformation:*:*:stack/eb-*"
|
|
],
|
|
"Sid": "AllowCloudformationOperationsOnElasticBeanstalkStacks"
|
|
},
|
|
{
|
|
"Action": [
|
|
"logs:DeleteLogGroup"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:logs:*:*:log-group:/aws/elasticbeanstalk*"
|
|
],
|
|
"Sid": "AllowDeleteCloudwatchLogGroups"
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::elasticbeanstalk-*",
|
|
"arn:aws:s3:::elasticbeanstalk-*/*"
|
|
],
|
|
"Sid": "AllowS3OperationsOnElasticBeanstalkBuckets"
|
|
},
|
|
{
|
|
"Action": [
|
|
"autoscaling:AttachInstances",
|
|
"autoscaling:CreateAutoScalingGroup",
|
|
"autoscaling:CreateLaunchConfiguration",
|
|
"autoscaling:DeleteLaunchConfiguration",
|
|
"autoscaling:DeleteAutoScalingGroup",
|
|
"autoscaling:DeleteScheduledAction",
|
|
"autoscaling:DescribeAccountLimits",
|
|
"autoscaling:DescribeAutoScalingGroups",
|
|
"autoscaling:DescribeAutoScalingInstances",
|
|
"autoscaling:DescribeLaunchConfigurations",
|
|
"autoscaling:DescribeLoadBalancers",
|
|
"autoscaling:DescribeNotificationConfigurations",
|
|
"autoscaling:DescribeScalingActivities",
|
|
"autoscaling:DescribeScheduledActions",
|
|
"autoscaling:DetachInstances",
|
|
"autoscaling:PutScheduledUpdateGroupAction",
|
|
"autoscaling:ResumeProcesses",
|
|
"autoscaling:SetDesiredCapacity",
|
|
"autoscaling:SuspendProcesses",
|
|
"autoscaling:TerminateInstanceInAutoScalingGroup",
|
|
"autoscaling:UpdateAutoScalingGroup",
|
|
"cloudwatch:PutMetricAlarm",
|
|
"ec2:AssociateAddress",
|
|
"ec2:AllocateAddress",
|
|
"ec2:AuthorizeSecurityGroupEgress",
|
|
"ec2:AuthorizeSecurityGroupIngress",
|
|
"ec2:CreateSecurityGroup",
|
|
"ec2:DeleteSecurityGroup",
|
|
"ec2:DescribeAccountAttributes",
|
|
"ec2:DescribeAddresses",
|
|
"ec2:DescribeImages",
|
|
"ec2:DescribeInstances",
|
|
"ec2:DescribeKeyPairs",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DisassociateAddress",
|
|
"ec2:ReleaseAddress",
|
|
"ec2:RevokeSecurityGroupEgress",
|
|
"ec2:RevokeSecurityGroupIngress",
|
|
"ec2:TerminateInstances",
|
|
"ecs:CreateCluster",
|
|
"ecs:DeleteCluster",
|
|
"ecs:DescribeClusters",
|
|
"ecs:RegisterTaskDefinition",
|
|
"elasticbeanstalk:*",
|
|
"elasticloadbalancing:ApplySecurityGroupsToLoadBalancer",
|
|
"elasticloadbalancing:ConfigureHealthCheck",
|
|
"elasticloadbalancing:CreateLoadBalancer",
|
|
"elasticloadbalancing:DeleteLoadBalancer",
|
|
"elasticloadbalancing:DeregisterInstancesFromLoadBalancer",
|
|
"elasticloadbalancing:DescribeInstanceHealth",
|
|
"elasticloadbalancing:DescribeLoadBalancers",
|
|
"elasticloadbalancing:DescribeTargetHealth",
|
|
"elasticloadbalancing:RegisterInstancesWithLoadBalancer",
|
|
"elasticloadbalancing:DescribeTargetGroups",
|
|
"elasticloadbalancing:RegisterTargets",
|
|
"elasticloadbalancing:DeregisterTargets",
|
|
"iam:ListRoles",
|
|
"logs:CreateLogGroup",
|
|
"logs:PutRetentionPolicy",
|
|
"rds:DescribeDBInstances",
|
|
"rds:DescribeOrderableDBInstanceOptions",
|
|
"rds:DescribeDBEngineVersions",
|
|
"sns:ListTopics",
|
|
"sns:GetTopicAttributes",
|
|
"sns:ListSubscriptionsByTopic",
|
|
"sqs:GetQueueAttributes",
|
|
"sqs:GetQueueUrl",
|
|
"codebuild:CreateProject",
|
|
"codebuild:DeleteProject",
|
|
"codebuild:BatchGetBuilds",
|
|
"codebuild:StartBuild"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
],
|
|
"Sid": "AllowOperations"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/aws-service-role/",
|
|
"PolicyId": "ANPAIID62QSI3OSIPQXTM",
|
|
"PolicyName": "AWSElasticBeanstalkServiceRolePolicy",
|
|
"UpdateDate": "2017-09-13T23:46:37+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSElasticBeanstalkWebTier": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSElasticBeanstalkWebTier",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-12-21T02:06:25+00:00",
|
|
"DefaultVersionId": "v4",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"s3:Get*",
|
|
"s3:List*",
|
|
"s3:PutObject"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::elasticbeanstalk-*",
|
|
"arn:aws:s3:::elasticbeanstalk-*/*"
|
|
],
|
|
"Sid": "BucketAccess"
|
|
},
|
|
{
|
|
"Action": [
|
|
"xray:PutTraceSegments",
|
|
"xray:PutTelemetryRecords"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*",
|
|
"Sid": "XRayAccess"
|
|
},
|
|
{
|
|
"Action": [
|
|
"logs:PutLogEvents",
|
|
"logs:CreateLogStream"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:logs:*:*:log-group:/aws/elasticbeanstalk*"
|
|
],
|
|
"Sid": "CloudWatchLogsAccess"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIUF4325SJYOREKW3A",
|
|
"PolicyName": "AWSElasticBeanstalkWebTier",
|
|
"UpdateDate": "2016-12-21T02:06:25+00:00",
|
|
"VersionId": "v4"
|
|
},
|
|
"AWSElasticBeanstalkWorkerTier": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSElasticBeanstalkWorkerTier",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-12-21T02:01:55+00:00",
|
|
"DefaultVersionId": "v4",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cloudwatch:PutMetricData"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*",
|
|
"Sid": "MetricsAccess"
|
|
},
|
|
{
|
|
"Action": [
|
|
"xray:PutTraceSegments",
|
|
"xray:PutTelemetryRecords"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*",
|
|
"Sid": "XRayAccess"
|
|
},
|
|
{
|
|
"Action": [
|
|
"sqs:ChangeMessageVisibility",
|
|
"sqs:DeleteMessage",
|
|
"sqs:ReceiveMessage",
|
|
"sqs:SendMessage"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*",
|
|
"Sid": "QueueAccess"
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:Get*",
|
|
"s3:List*",
|
|
"s3:PutObject"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::elasticbeanstalk-*",
|
|
"arn:aws:s3:::elasticbeanstalk-*/*"
|
|
],
|
|
"Sid": "BucketAccess"
|
|
},
|
|
{
|
|
"Action": [
|
|
"dynamodb:BatchGetItem",
|
|
"dynamodb:BatchWriteItem",
|
|
"dynamodb:DeleteItem",
|
|
"dynamodb:GetItem",
|
|
"dynamodb:PutItem",
|
|
"dynamodb:Query",
|
|
"dynamodb:Scan",
|
|
"dynamodb:UpdateItem"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:dynamodb:*:*:table/*-stack-AWSEBWorkerCronLeaderRegistry*"
|
|
],
|
|
"Sid": "DynamoPeriodicTasks"
|
|
},
|
|
{
|
|
"Action": [
|
|
"logs:PutLogEvents",
|
|
"logs:CreateLogStream"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:logs:*:*:log-group:/aws/elasticbeanstalk*"
|
|
],
|
|
"Sid": "CloudWatchLogsAccess"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJQDLBRSJVKVF4JMSK",
|
|
"PolicyName": "AWSElasticBeanstalkWorkerTier",
|
|
"UpdateDate": "2016-12-21T02:01:55+00:00",
|
|
"VersionId": "v4"
|
|
},
|
|
"AWSElasticLoadBalancingClassicServiceRolePolicy": {
|
|
"Arn": "arn:aws:iam::aws:policy/aws-service-role/AWSElasticLoadBalancingClassicServiceRolePolicy",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-09-19T22:36:18+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:DescribeAddresses",
|
|
"ec2:DescribeInstances",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DescribeInternetGateways",
|
|
"ec2:DescribeAccountAttributes",
|
|
"ec2:DescribeClassicLinkInstances",
|
|
"ec2:DescribeVpcClassicLink",
|
|
"ec2:CreateSecurityGroup",
|
|
"ec2:CreateNetworkInterface",
|
|
"ec2:DeleteNetworkInterface",
|
|
"ec2:ModifyNetworkInterface",
|
|
"ec2:ModifyNetworkInterfaceAttribute",
|
|
"ec2:AuthorizeSecurityGroupIngress",
|
|
"ec2:AssociateAddress",
|
|
"ec2:DisassociateAddress",
|
|
"ec2:AttachNetworkInterface",
|
|
"ec2:DetachNetworkInterface",
|
|
"ec2:AssignPrivateIpAddresses",
|
|
"ec2:AssignIpv6Addresses",
|
|
"ec2:UnassignIpv6Addresses"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/aws-service-role/",
|
|
"PolicyId": "ANPAIUMWW3QP7DPZPNVU4",
|
|
"PolicyName": "AWSElasticLoadBalancingClassicServiceRolePolicy",
|
|
"UpdateDate": "2017-09-19T22:36:18+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSElasticLoadBalancingServiceRolePolicy": {
|
|
"Arn": "arn:aws:iam::aws:policy/aws-service-role/AWSElasticLoadBalancingServiceRolePolicy",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-09-19T22:19:04+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:DescribeAddresses",
|
|
"ec2:DescribeInstances",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DescribeInternetGateways",
|
|
"ec2:DescribeAccountAttributes",
|
|
"ec2:DescribeClassicLinkInstances",
|
|
"ec2:DescribeVpcClassicLink",
|
|
"ec2:CreateSecurityGroup",
|
|
"ec2:CreateNetworkInterface",
|
|
"ec2:DeleteNetworkInterface",
|
|
"ec2:ModifyNetworkInterface",
|
|
"ec2:ModifyNetworkInterfaceAttribute",
|
|
"ec2:AuthorizeSecurityGroupIngress",
|
|
"ec2:AssociateAddress",
|
|
"ec2:DisassociateAddress",
|
|
"ec2:AttachNetworkInterface",
|
|
"ec2:DetachNetworkInterface",
|
|
"ec2:AssignPrivateIpAddresses",
|
|
"ec2:AssignIpv6Addresses",
|
|
"ec2:UnassignIpv6Addresses"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/aws-service-role/",
|
|
"PolicyId": "ANPAIMHWGGSRHLOQUICJQ",
|
|
"PolicyName": "AWSElasticLoadBalancingServiceRolePolicy",
|
|
"UpdateDate": "2017-09-19T22:19:04+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSEnhancedClassicNetworkingMangementPolicy": {
|
|
"Arn": "arn:aws:iam::aws:policy/aws-service-role/AWSEnhancedClassicNetworkingMangementPolicy",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-09-20T17:29:09+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:DescribeInstances",
|
|
"ec2:DescribeSecurityGroups"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/aws-service-role/",
|
|
"PolicyId": "ANPAI7T4V2HZTS72QVO52",
|
|
"PolicyName": "AWSEnhancedClassicNetworkingMangementPolicy",
|
|
"UpdateDate": "2017-09-20T17:29:09+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSGlueConsoleFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSGlueConsoleFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-09-13T00:12:54+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"glue:*",
|
|
"redshift:DescribeClusters",
|
|
"redshift:DescribeClusterSubnetGroups",
|
|
"iam:ListRoles",
|
|
"iam:ListRolePolicies",
|
|
"iam:GetRole",
|
|
"iam:GetRolePolicy",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DescribeVpcEndpoints",
|
|
"ec2:DescribeRouteTables",
|
|
"ec2:DescribeVpcAttribute",
|
|
"ec2:DescribeKeyPairs",
|
|
"ec2:DescribeInstances",
|
|
"rds:DescribeDBInstances",
|
|
"s3:ListAllMyBuckets",
|
|
"s3:ListBucket",
|
|
"s3:GetBucketAcl",
|
|
"s3:GetBucketLocation",
|
|
"cloudformation:DescribeStacks",
|
|
"cloudformation:GetTemplateSummary"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:GetObject",
|
|
"s3:PutObject"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::aws-glue-*/*",
|
|
"arn:aws:s3:::*/*aws-glue-*/*",
|
|
"arn:aws:s3:::aws-glue-*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:CreateBucket"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::aws-glue-*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"logs:GetLogEvents"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:logs:*:*:/aws-glue/*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"cloudformation:CreateStack",
|
|
"cloudformation:DeleteStack"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:cloudformation:*:*:stack/aws-glue*/*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"ec2:TerminateInstances",
|
|
"ec2:RunInstances",
|
|
"ec2:CreateTags",
|
|
"ec2:DeleteTags"
|
|
],
|
|
"Condition": {
|
|
"ForAllValues:StringEquals": {
|
|
"aws:TagKeys": [
|
|
"aws-glue-dev-endpoint"
|
|
]
|
|
}
|
|
},
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:PassRole"
|
|
],
|
|
"Condition": {
|
|
"StringLike": {
|
|
"iam:PassedToService": [
|
|
"glue.amazonaws.com"
|
|
]
|
|
}
|
|
},
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:iam::*:role/AWSGlueServiceRole*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:PassRole"
|
|
],
|
|
"Condition": {
|
|
"StringLike": {
|
|
"iam:PassedToService": [
|
|
"ec2.amazonaws.com"
|
|
]
|
|
}
|
|
},
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:iam::*:role/AWSGlueServiceNotebookRole*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJNZGDEOD7MISOVSVI",
|
|
"PolicyName": "AWSGlueConsoleFullAccess",
|
|
"UpdateDate": "2017-09-13T00:12:54+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AWSGlueServiceNotebookRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSGlueServiceNotebookRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-17T18:08:29+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"glue:CreateDatabase",
|
|
"glue:CreatePartition",
|
|
"glue:CreateTable",
|
|
"glue:DeleteDatabase",
|
|
"glue:DeletePartition",
|
|
"glue:DeleteTable",
|
|
"glue:GetDatabase",
|
|
"glue:GetDatabases",
|
|
"glue:GetPartition",
|
|
"glue:GetPartitions",
|
|
"glue:GetTable",
|
|
"glue:GetTableVersions",
|
|
"glue:GetTables",
|
|
"glue:UpdateDatabase",
|
|
"glue:UpdatePartition",
|
|
"glue:UpdateTable",
|
|
"glue:CreateBookmark",
|
|
"glue:GetBookmark",
|
|
"glue:UpdateBookmark",
|
|
"glue:GetMetric",
|
|
"glue:PutMetric",
|
|
"glue:CreateConnection",
|
|
"glue:CreateJob",
|
|
"glue:DeleteConnection",
|
|
"glue:DeleteJob",
|
|
"glue:GetConnection",
|
|
"glue:GetConnections",
|
|
"glue:GetDevEndpoint",
|
|
"glue:GetDevEndpoints",
|
|
"glue:GetJob",
|
|
"glue:GetJobs",
|
|
"glue:UpdateJob",
|
|
"glue:BatchDeleteConnection",
|
|
"glue:UpdateConnection",
|
|
"glue:GetUserDefinedFunction",
|
|
"glue:UpdateUserDefinedFunction",
|
|
"glue:GetUserDefinedFunctions",
|
|
"glue:DeleteUserDefinedFunction",
|
|
"glue:CreateUserDefinedFunction",
|
|
"glue:BatchGetPartition",
|
|
"glue:BatchDeletePartition",
|
|
"glue:BatchCreatePartition",
|
|
"glue:BatchDeleteTable",
|
|
"glue:UpdateDevEndpoint",
|
|
"s3:GetBucketLocation",
|
|
"s3:ListBucket",
|
|
"s3:ListAllMyBuckets",
|
|
"s3:GetBucketAcl"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:GetObject"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::crawler-public*",
|
|
"arn:aws:s3:::aws-glue*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:PutObject",
|
|
"s3:DeleteObject"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::aws-glue*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"ec2:CreateTags",
|
|
"ec2:DeleteTags"
|
|
],
|
|
"Condition": {
|
|
"ForAllValues:StringEquals": {
|
|
"aws:TagKeys": [
|
|
"aws-glue-service-resource"
|
|
]
|
|
}
|
|
},
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:ec2:*:*:network-interface/*",
|
|
"arn:aws:ec2:*:*:security-group/*",
|
|
"arn:aws:ec2:*:*:instance/*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAIMRC6VZUHJYCTKWFI",
|
|
"PolicyName": "AWSGlueServiceNotebookRole",
|
|
"UpdateDate": "2017-08-17T18:08:29+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AWSGlueServiceRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSGlueServiceRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-23T21:35:25+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"glue:*",
|
|
"s3:GetBucketLocation",
|
|
"s3:ListBucket",
|
|
"s3:ListAllMyBuckets",
|
|
"s3:GetBucketAcl",
|
|
"ec2:DescribeVpcEndpoints",
|
|
"ec2:DescribeRouteTables",
|
|
"ec2:CreateNetworkInterface",
|
|
"ec2:DeleteNetworkInterface",
|
|
"ec2:DescribeNetworkInterfaces",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVpcAttribute",
|
|
"iam:ListRolePolicies",
|
|
"iam:GetRole",
|
|
"iam:GetRolePolicy"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:CreateBucket"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::aws-glue-*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:GetObject",
|
|
"s3:PutObject",
|
|
"s3:DeleteObject"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::aws-glue-*/*",
|
|
"arn:aws:s3:::*/*aws-glue-*/*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:GetObject"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::crawler-public*",
|
|
"arn:aws:s3:::aws-glue-*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"logs:CreateLogGroup",
|
|
"logs:CreateLogStream",
|
|
"logs:PutLogEvents"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:logs:*:*:/aws-glue/*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"ec2:CreateTags",
|
|
"ec2:DeleteTags"
|
|
],
|
|
"Condition": {
|
|
"ForAllValues:StringEquals": {
|
|
"aws:TagKeys": [
|
|
"aws-glue-service-resource"
|
|
]
|
|
}
|
|
},
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:ec2:*:*:network-interface/*",
|
|
"arn:aws:ec2:*:*:security-group/*",
|
|
"arn:aws:ec2:*:*:instance/*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAIRUJCPEBPMEZFAS32",
|
|
"PolicyName": "AWSGlueServiceRole",
|
|
"UpdateDate": "2017-08-23T21:35:25+00:00",
|
|
"VersionId": "v3"
|
|
},
|
|
"AWSGreengrassFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSGreengrassFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-05-03T00:47:37+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"greengrass:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJWPV6OBK4QONH4J3O",
|
|
"PolicyName": "AWSGreengrassFullAccess",
|
|
"UpdateDate": "2017-05-03T00:47:37+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSGreengrassResourceAccessRolePolicy": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSGreengrassResourceAccessRolePolicy",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-05-26T23:10:54+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"iot:DeleteThingShadow",
|
|
"iot:GetThingShadow",
|
|
"iot:UpdateThingShadow"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:iot:*:*:thing/GG_*",
|
|
"arn:aws:iot:*:*:thing/*-gcm",
|
|
"arn:aws:iot:*:*:thing/*-gda",
|
|
"arn:aws:iot:*:*:thing/*-gci"
|
|
],
|
|
"Sid": "AllowGreengrassAccessToShadows"
|
|
},
|
|
{
|
|
"Action": [
|
|
"iot:DescribeThing"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:iot:*:*:thing/*",
|
|
"Sid": "AllowGreengrassToDescribeThings"
|
|
},
|
|
{
|
|
"Action": [
|
|
"iot:DescribeCertificate"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:iot:*:*:cert/*",
|
|
"Sid": "AllowGreengrassToDescribeCertificates"
|
|
},
|
|
{
|
|
"Action": [
|
|
"greengrass:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*",
|
|
"Sid": "AllowGreengrassToCallGreengrassServices"
|
|
},
|
|
{
|
|
"Action": [
|
|
"lambda:GetFunction",
|
|
"lambda:GetFunctionConfiguration"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*",
|
|
"Sid": "AllowGreengrassToGetLambdaFunctions"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJPKEIMB6YMXDEVRTM",
|
|
"PolicyName": "AWSGreengrassResourceAccessRolePolicy",
|
|
"UpdateDate": "2017-05-26T23:10:54+00:00",
|
|
"VersionId": "v3"
|
|
},
|
|
"AWSHealthFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSHealthFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-12-06T12:30:31+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"health:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAI3CUMPCPEUPCSXC4Y",
|
|
"PolicyName": "AWSHealthFullAccess",
|
|
"UpdateDate": "2016-12-06T12:30:31+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSImportExportFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSImportExportFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:43+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"importexport:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJCQCT4JGTLC6722MQ",
|
|
"PolicyName": "AWSImportExportFullAccess",
|
|
"UpdateDate": "2015-02-06T18:40:43+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSImportExportReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSImportExportReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:42+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"importexport:ListJobs",
|
|
"importexport:GetStatus"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJNTV4OG52ESYZHCNK",
|
|
"PolicyName": "AWSImportExportReadOnlyAccess",
|
|
"UpdateDate": "2015-02-06T18:40:42+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSIoTConfigAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSIoTConfigAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-07-27T20:41:18+00:00",
|
|
"DefaultVersionId": "v4",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"iot:AcceptCertificateTransfer",
|
|
"iot:AttachPrincipalPolicy",
|
|
"iot:AttachThingPrincipal",
|
|
"iot:CancelCertificateTransfer",
|
|
"iot:CreateCertificateFromCsr",
|
|
"iot:CreateKeysAndCertificate",
|
|
"iot:CreatePolicy",
|
|
"iot:CreatePolicyVersion",
|
|
"iot:CreateThing",
|
|
"iot:CreateThingType",
|
|
"iot:CreateTopicRule",
|
|
"iot:DeleteCertificate",
|
|
"iot:DeleteCACertificate",
|
|
"iot:DeletePolicy",
|
|
"iot:DeletePolicyVersion",
|
|
"iot:DeleteRegistrationCode",
|
|
"iot:DeleteThing",
|
|
"iot:DeleteThingType",
|
|
"iot:DeleteTopicRule",
|
|
"iot:DeprecateThingType",
|
|
"iot:DescribeCertificate",
|
|
"iot:DescribeCACertificate",
|
|
"iot:DescribeEndpoint",
|
|
"iot:DescribeThing",
|
|
"iot:DescribeThingType",
|
|
"iot:DetachPrincipalPolicy",
|
|
"iot:DetachThingPrincipal",
|
|
"iot:GetLoggingOptions",
|
|
"iot:GetPolicy",
|
|
"iot:GetPolicyVersion",
|
|
"iot:GetRegistrationCode",
|
|
"iot:GetTopicRule",
|
|
"iot:ListCertificates",
|
|
"iot:ListCACertificates",
|
|
"iot:ListCertificatesByCA",
|
|
"iot:ListPolicies",
|
|
"iot:ListPolicyPrincipals",
|
|
"iot:ListPolicyVersions",
|
|
"iot:ListPrincipalPolicies",
|
|
"iot:ListPrincipalThings",
|
|
"iot:ListThingPrincipals",
|
|
"iot:ListThings",
|
|
"iot:ListThingTypes",
|
|
"iot:ListTopicRules",
|
|
"iot:RegisterCertificate",
|
|
"iot:RegisterCACertificate",
|
|
"iot:RejectCertificateTransfer",
|
|
"iot:ReplaceTopicRule",
|
|
"iot:SetDefaultPolicyVersion",
|
|
"iot:SetLoggingOptions",
|
|
"iot:TransferCertificate",
|
|
"iot:UpdateCertificate",
|
|
"iot:UpdateCACertificate",
|
|
"iot:UpdateThing"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIWWGD4LM4EMXNRL7I",
|
|
"PolicyName": "AWSIoTConfigAccess",
|
|
"UpdateDate": "2016-07-27T20:41:18+00:00",
|
|
"VersionId": "v4"
|
|
},
|
|
"AWSIoTConfigReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSIoTConfigReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-07-27T20:41:36+00:00",
|
|
"DefaultVersionId": "v4",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"iot:DescribeCertificate",
|
|
"iot:DescribeCACertificate",
|
|
"iot:DescribeEndpoint",
|
|
"iot:DescribeThing",
|
|
"iot:DescribeThingType",
|
|
"iot:GetLoggingOptions",
|
|
"iot:GetPolicy",
|
|
"iot:GetPolicyVersion",
|
|
"iot:GetRegistrationCode",
|
|
"iot:GetTopicRule",
|
|
"iot:ListCertificates",
|
|
"iot:ListCertificatesByCA",
|
|
"iot:ListCACertificates",
|
|
"iot:ListPolicies",
|
|
"iot:ListPolicyPrincipals",
|
|
"iot:ListPolicyVersions",
|
|
"iot:ListPrincipalPolicies",
|
|
"iot:ListPrincipalThings",
|
|
"iot:ListThingPrincipals",
|
|
"iot:ListThings",
|
|
"iot:ListThingTypes",
|
|
"iot:ListTopicRules"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJHENEMXGX4XMFOIOI",
|
|
"PolicyName": "AWSIoTConfigReadOnlyAccess",
|
|
"UpdateDate": "2016-07-27T20:41:36+00:00",
|
|
"VersionId": "v4"
|
|
},
|
|
"AWSIoTDataAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSIoTDataAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-10-27T21:51:18+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"iot:Connect",
|
|
"iot:Publish",
|
|
"iot:Subscribe",
|
|
"iot:Receive",
|
|
"iot:GetThingShadow",
|
|
"iot:UpdateThingShadow"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJM2KI2UJDR24XPS2K",
|
|
"PolicyName": "AWSIoTDataAccess",
|
|
"UpdateDate": "2015-10-27T21:51:18+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSIoTFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSIoTFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-10-08T15:19:49+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"iot:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJU2FPGG6PQWN72V2G",
|
|
"PolicyName": "AWSIoTFullAccess",
|
|
"UpdateDate": "2015-10-08T15:19:49+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSIoTLogging": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSIoTLogging",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-10-08T15:17:25+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"logs:CreateLogGroup",
|
|
"logs:CreateLogStream",
|
|
"logs:PutLogEvents",
|
|
"logs:PutMetricFilter",
|
|
"logs:PutRetentionPolicy",
|
|
"logs:GetLogEvents",
|
|
"logs:DeleteLogStream"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAI6R6Z2FHHGS454W7W",
|
|
"PolicyName": "AWSIoTLogging",
|
|
"UpdateDate": "2015-10-08T15:17:25+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSIoTRuleActions": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSIoTRuleActions",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-10-08T15:14:51+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": {
|
|
"Action": [
|
|
"dynamodb:PutItem",
|
|
"kinesis:PutRecord",
|
|
"iot:Publish",
|
|
"s3:PutObject",
|
|
"sns:Publish",
|
|
"sqs:SendMessage*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJEZ6FS7BUZVUHMOKY",
|
|
"PolicyName": "AWSIoTRuleActions",
|
|
"UpdateDate": "2015-10-08T15:14:51+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSKeyManagementServicePowerUser": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSKeyManagementServicePowerUser",
|
|
"AttachmentCount": 1,
|
|
"CreateDate": "2017-03-07T00:55:11+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"kms:CreateAlias",
|
|
"kms:CreateKey",
|
|
"kms:DeleteAlias",
|
|
"kms:Describe*",
|
|
"kms:GenerateRandom",
|
|
"kms:Get*",
|
|
"kms:List*",
|
|
"kms:TagResource",
|
|
"kms:UntagResource",
|
|
"iam:ListGroups",
|
|
"iam:ListRoles",
|
|
"iam:ListUsers"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJNPP7PPPPMJRV2SA4",
|
|
"PolicyName": "AWSKeyManagementServicePowerUser",
|
|
"UpdateDate": "2017-03-07T00:55:11+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AWSLambdaBasicExecutionRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-04-09T15:03:43+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"logs:CreateLogGroup",
|
|
"logs:CreateLogStream",
|
|
"logs:PutLogEvents"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJNCQGXC42545SKXIK",
|
|
"PolicyName": "AWSLambdaBasicExecutionRole",
|
|
"UpdateDate": "2015-04-09T15:03:43+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSLambdaDynamoDBExecutionRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSLambdaDynamoDBExecutionRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-04-09T15:09:29+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"dynamodb:DescribeStream",
|
|
"dynamodb:GetRecords",
|
|
"dynamodb:GetShardIterator",
|
|
"dynamodb:ListStreams",
|
|
"logs:CreateLogGroup",
|
|
"logs:CreateLogStream",
|
|
"logs:PutLogEvents"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAIP7WNAGMIPYNW4WQG",
|
|
"PolicyName": "AWSLambdaDynamoDBExecutionRole",
|
|
"UpdateDate": "2015-04-09T15:09:29+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSLambdaENIManagementAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSLambdaENIManagementAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-12-06T00:37:27+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:CreateNetworkInterface",
|
|
"ec2:DescribeNetworkInterfaces",
|
|
"ec2:DeleteNetworkInterface"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJXAW2Q3KPTURUT2QC",
|
|
"PolicyName": "AWSLambdaENIManagementAccess",
|
|
"UpdateDate": "2016-12-06T00:37:27+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSLambdaExecute": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSLambdaExecute",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:46+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"logs:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:logs:*:*:*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:GetObject",
|
|
"s3:PutObject"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:s3:::*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJE5FX7FQZSU5XAKGO",
|
|
"PolicyName": "AWSLambdaExecute",
|
|
"UpdateDate": "2015-02-06T18:40:46+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSLambdaFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSLambdaFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-05-25T19:08:45+00:00",
|
|
"DefaultVersionId": "v7",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cloudwatch:*",
|
|
"cognito-identity:ListIdentityPools",
|
|
"cognito-sync:GetCognitoEvents",
|
|
"cognito-sync:SetCognitoEvents",
|
|
"dynamodb:*",
|
|
"events:*",
|
|
"iam:ListAttachedRolePolicies",
|
|
"iam:ListRolePolicies",
|
|
"iam:ListRoles",
|
|
"iam:PassRole",
|
|
"kinesis:DescribeStream",
|
|
"kinesis:ListStreams",
|
|
"kinesis:PutRecord",
|
|
"lambda:*",
|
|
"logs:*",
|
|
"s3:*",
|
|
"sns:ListSubscriptions",
|
|
"sns:ListSubscriptionsByTopic",
|
|
"sns:ListTopics",
|
|
"sns:Subscribe",
|
|
"sns:Unsubscribe",
|
|
"sns:Publish",
|
|
"sqs:ListQueues",
|
|
"sqs:SendMessage",
|
|
"tag:GetResources",
|
|
"kms:ListAliases",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeSecurityGroups",
|
|
"iot:GetTopicRule",
|
|
"iot:ListTopicRules",
|
|
"iot:CreateTopicRule",
|
|
"iot:ReplaceTopicRule",
|
|
"iot:AttachPrincipalPolicy",
|
|
"iot:AttachThingPrincipal",
|
|
"iot:CreateKeysAndCertificate",
|
|
"iot:CreatePolicy",
|
|
"iot:CreateThing",
|
|
"iot:ListPolicies",
|
|
"iot:ListThings",
|
|
"iot:DescribeEndpoint",
|
|
"xray:PutTraceSegments",
|
|
"xray:PutTelemetryRecords"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAI6E2CYYMI4XI7AA5K",
|
|
"PolicyName": "AWSLambdaFullAccess",
|
|
"UpdateDate": "2017-05-25T19:08:45+00:00",
|
|
"VersionId": "v7"
|
|
},
|
|
"AWSLambdaInvocation-DynamoDB": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSLambdaInvocation-DynamoDB",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:47+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"lambda:InvokeFunction"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"dynamodb:DescribeStream",
|
|
"dynamodb:GetRecords",
|
|
"dynamodb:GetShardIterator",
|
|
"dynamodb:ListStreams"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJTHQ3EKCQALQDYG5G",
|
|
"PolicyName": "AWSLambdaInvocation-DynamoDB",
|
|
"UpdateDate": "2015-02-06T18:40:47+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSLambdaKinesisExecutionRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSLambdaKinesisExecutionRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-04-09T15:14:16+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"kinesis:DescribeStream",
|
|
"kinesis:GetRecords",
|
|
"kinesis:GetShardIterator",
|
|
"kinesis:ListStreams",
|
|
"logs:CreateLogGroup",
|
|
"logs:CreateLogStream",
|
|
"logs:PutLogEvents"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJHOLKJPXV4GBRMJUQ",
|
|
"PolicyName": "AWSLambdaKinesisExecutionRole",
|
|
"UpdateDate": "2015-04-09T15:14:16+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSLambdaReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSLambdaReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-05-04T18:22:29+00:00",
|
|
"DefaultVersionId": "v6",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cloudwatch:Describe*",
|
|
"cloudwatch:Get*",
|
|
"cloudwatch:List*",
|
|
"cognito-identity:ListIdentityPools",
|
|
"cognito-sync:GetCognitoEvents",
|
|
"dynamodb:BatchGetItem",
|
|
"dynamodb:DescribeStream",
|
|
"dynamodb:DescribeTable",
|
|
"dynamodb:GetItem",
|
|
"dynamodb:ListStreams",
|
|
"dynamodb:ListTables",
|
|
"dynamodb:Query",
|
|
"dynamodb:Scan",
|
|
"events:List*",
|
|
"events:Describe*",
|
|
"iam:ListRoles",
|
|
"kinesis:DescribeStream",
|
|
"kinesis:ListStreams",
|
|
"lambda:List*",
|
|
"lambda:Get*",
|
|
"logs:DescribeMetricFilters",
|
|
"logs:GetLogEvents",
|
|
"logs:DescribeLogGroups",
|
|
"logs:DescribeLogStreams",
|
|
"s3:Get*",
|
|
"s3:List*",
|
|
"sns:ListTopics",
|
|
"sns:ListSubscriptions",
|
|
"sns:ListSubscriptionsByTopic",
|
|
"sqs:ListQueues",
|
|
"tag:GetResources",
|
|
"kms:ListAliases",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeSecurityGroups",
|
|
"iot:GetTopicRules",
|
|
"iot:ListTopicRules",
|
|
"iot:ListPolicies",
|
|
"iot:ListThings",
|
|
"iot:DescribeEndpoint"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJLDG7J3CGUHFN4YN6",
|
|
"PolicyName": "AWSLambdaReadOnlyAccess",
|
|
"UpdateDate": "2017-05-04T18:22:29+00:00",
|
|
"VersionId": "v6"
|
|
},
|
|
"AWSLambdaRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSLambdaRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:41:28+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"lambda:InvokeFunction"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJX4DPCRGTC4NFDUXI",
|
|
"PolicyName": "AWSLambdaRole",
|
|
"UpdateDate": "2015-02-06T18:41:28+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSLambdaVPCAccessExecutionRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSLambdaVPCAccessExecutionRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-02-11T23:15:26+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"logs:CreateLogGroup",
|
|
"logs:CreateLogStream",
|
|
"logs:PutLogEvents",
|
|
"ec2:CreateNetworkInterface",
|
|
"ec2:DescribeNetworkInterfaces",
|
|
"ec2:DeleteNetworkInterface"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJVTME3YLVNL72YR2K",
|
|
"PolicyName": "AWSLambdaVPCAccessExecutionRole",
|
|
"UpdateDate": "2016-02-11T23:15:26+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSMarketplaceFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSMarketplaceFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-11T17:21:45+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"aws-marketplace:*",
|
|
"cloudformation:CreateStack",
|
|
"cloudformation:DescribeStackResource",
|
|
"cloudformation:DescribeStackResources",
|
|
"cloudformation:DescribeStacks",
|
|
"cloudformation:List*",
|
|
"ec2:AuthorizeSecurityGroupEgress",
|
|
"ec2:AuthorizeSecurityGroupIngress",
|
|
"ec2:CreateSecurityGroup",
|
|
"ec2:CreateTags",
|
|
"ec2:DescribeAccountAttributes",
|
|
"ec2:DescribeAddresses",
|
|
"ec2:DeleteSecurityGroup",
|
|
"ec2:DescribeAccountAttributes",
|
|
"ec2:DescribeImages",
|
|
"ec2:DescribeInstances",
|
|
"ec2:DescribeKeyPairs",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeTags",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:RunInstances",
|
|
"ec2:StartInstances",
|
|
"ec2:StopInstances",
|
|
"ec2:TerminateInstances"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAI2DV5ULJSO2FYVPYG",
|
|
"PolicyName": "AWSMarketplaceFullAccess",
|
|
"UpdateDate": "2015-02-11T17:21:45+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSMarketplaceGetEntitlements": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSMarketplaceGetEntitlements",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-03-27T19:37:24+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"aws-marketplace:GetEntitlements"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJLPIMQE4WMHDC2K7C",
|
|
"PolicyName": "AWSMarketplaceGetEntitlements",
|
|
"UpdateDate": "2017-03-27T19:37:24+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSMarketplaceManageSubscriptions": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSMarketplaceManageSubscriptions",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:32+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"aws-marketplace:ViewSubscriptions",
|
|
"aws-marketplace:Subscribe",
|
|
"aws-marketplace:Unsubscribe"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJRDW2WIFN7QLUAKBQ",
|
|
"PolicyName": "AWSMarketplaceManageSubscriptions",
|
|
"UpdateDate": "2015-02-06T18:40:32+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSMarketplaceMeteringFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSMarketplaceMeteringFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-03-17T22:39:22+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"aws-marketplace:MeterUsage"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJ65YJPG7CC7LDXNA6",
|
|
"PolicyName": "AWSMarketplaceMeteringFullAccess",
|
|
"UpdateDate": "2016-03-17T22:39:22+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSMarketplaceRead-only": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSMarketplaceRead-only",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:31+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"aws-marketplace:ViewSubscriptions",
|
|
"ec2:DescribeAccountAttributes",
|
|
"ec2:DescribeAddresses",
|
|
"ec2:DescribeImages",
|
|
"ec2:DescribeInstances",
|
|
"ec2:DescribeKeyPairs",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVpcs"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJOOM6LETKURTJ3XZ2",
|
|
"PolicyName": "AWSMarketplaceRead-only",
|
|
"UpdateDate": "2015-02-06T18:40:31+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSMigrationHubDMSAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSMigrationHubDMSAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-14T14:00:06+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"mgh:CreateProgressUpdateStream"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:mgh:*:*:progressUpdateStream/DMS"
|
|
},
|
|
{
|
|
"Action": [
|
|
"mgh:AssociateCreatedArtifact",
|
|
"mgh:DescribeMigrationTask",
|
|
"mgh:DisassociateCreatedArtifact",
|
|
"mgh:ImportMigrationTask",
|
|
"mgh:ListCreatedArtifacts",
|
|
"mgh:NotifyMigrationTaskState",
|
|
"mgh:PutResourceAttributes",
|
|
"mgh:NotifyApplicationState",
|
|
"mgh:DescribeApplicationState",
|
|
"mgh:AssociateDiscoveredResource",
|
|
"mgh:DisassociateDiscoveredResource",
|
|
"mgh:ListDiscoveredResources"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:mgh:*:*:progressUpdateStream/DMS/*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"mgh:ListMigrationTasks"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAIUQB56VA4JHLN7G2W",
|
|
"PolicyName": "AWSMigrationHubDMSAccess",
|
|
"UpdateDate": "2017-08-14T14:00:06+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSMigrationHubDiscoveryAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSMigrationHubDiscoveryAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-14T13:30:51+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"discovery:ListConfigurations",
|
|
"discovery:DescribeConfigurations"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAITRMRLSV7JAL6YIGG",
|
|
"PolicyName": "AWSMigrationHubDiscoveryAccess",
|
|
"UpdateDate": "2017-08-14T13:30:51+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSMigrationHubFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSMigrationHubFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-14T14:09:27+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"mgh:*",
|
|
"discovery:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:GetRole"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJ4A2SZKHUYHDYIGOK",
|
|
"PolicyName": "AWSMigrationHubFullAccess",
|
|
"UpdateDate": "2017-08-14T14:09:27+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AWSMigrationHubSMSAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSMigrationHubSMSAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-14T13:57:54+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"mgh:CreateProgressUpdateStream"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:mgh:*:*:progressUpdateStream/SMS"
|
|
},
|
|
{
|
|
"Action": [
|
|
"mgh:AssociateCreatedArtifact",
|
|
"mgh:DescribeMigrationTask",
|
|
"mgh:DisassociateCreatedArtifact",
|
|
"mgh:ImportMigrationTask",
|
|
"mgh:ListCreatedArtifacts",
|
|
"mgh:NotifyMigrationTaskState",
|
|
"mgh:PutResourceAttributes",
|
|
"mgh:NotifyApplicationState",
|
|
"mgh:DescribeApplicationState",
|
|
"mgh:AssociateDiscoveredResource",
|
|
"mgh:DisassociateDiscoveredResource",
|
|
"mgh:ListDiscoveredResources"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:mgh:*:*:progressUpdateStream/SMS/*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"mgh:ListMigrationTasks"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAIWQYYT6TSVIRJO4TY",
|
|
"PolicyName": "AWSMigrationHubSMSAccess",
|
|
"UpdateDate": "2017-08-14T13:57:54+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSMobileHub_FullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSMobileHub_FullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-10T22:23:47+00:00",
|
|
"DefaultVersionId": "v10",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"apigateway:GET",
|
|
"apigateway:GetRestApis",
|
|
"apigateway:GetResources",
|
|
"apigateway:POST",
|
|
"apigateway:TestInvokeMethod",
|
|
"dynamodb:DescribeTable",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVpcs",
|
|
"iam:ListSAMLProviders",
|
|
"lambda:ListFunctions",
|
|
"sns:ListTopics",
|
|
"lex:GetIntent",
|
|
"lex:GetIntents",
|
|
"lex:GetSlotType",
|
|
"lex:GetSlotTypes",
|
|
"lex:GetBot",
|
|
"lex:GetBots",
|
|
"lex:GetBotAlias",
|
|
"lex:GetBotAliases",
|
|
"mobilehub:CreateProject",
|
|
"mobilehub:DeleteProject",
|
|
"mobilehub:UpdateProject",
|
|
"mobilehub:ExportProject",
|
|
"mobilehub:ImportProject",
|
|
"mobilehub:SynchronizeProject",
|
|
"mobilehub:GenerateProjectParameters",
|
|
"mobilehub:GetProject",
|
|
"mobilehub:GetProjectSnapshot",
|
|
"mobilehub:ListAvailableConnectors",
|
|
"mobilehub:ListAvailableFeatures",
|
|
"mobilehub:ListAvailableRegions",
|
|
"mobilehub:ListProjects",
|
|
"mobilehub:ValidateProject",
|
|
"mobilehub:VerifyServiceRole",
|
|
"mobilehub:DescribeBundle",
|
|
"mobilehub:ExportBundle",
|
|
"mobilehub:ListBundles"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:GetObject"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:s3:::*/aws-my-sample-app*.zip"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIJLU43R6AGRBK76DM",
|
|
"PolicyName": "AWSMobileHub_FullAccess",
|
|
"UpdateDate": "2017-08-10T22:23:47+00:00",
|
|
"VersionId": "v10"
|
|
},
|
|
"AWSMobileHub_ReadOnly": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSMobileHub_ReadOnly",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-10T22:08:23+00:00",
|
|
"DefaultVersionId": "v8",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"dynamodb:DescribeTable",
|
|
"iam:ListSAMLProviders",
|
|
"lambda:ListFunctions",
|
|
"sns:ListTopics",
|
|
"lex:GetIntent",
|
|
"lex:GetIntents",
|
|
"lex:GetSlotType",
|
|
"lex:GetSlotTypes",
|
|
"lex:GetBot",
|
|
"lex:GetBots",
|
|
"lex:GetBotAlias",
|
|
"lex:GetBotAliases",
|
|
"mobilehub:ExportProject",
|
|
"mobilehub:GenerateProjectParameters",
|
|
"mobilehub:GetProject",
|
|
"mobilehub:GetProjectSnapshot",
|
|
"mobilehub:ListAvailableConnectors",
|
|
"mobilehub:ListAvailableFeatures",
|
|
"mobilehub:ListAvailableRegions",
|
|
"mobilehub:ListProjects",
|
|
"mobilehub:ValidateProject",
|
|
"mobilehub:VerifyServiceRole",
|
|
"mobilehub:DescribeBundle",
|
|
"mobilehub:ExportBundle",
|
|
"mobilehub:ListBundles"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:GetObject"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:s3:::*/aws-my-sample-app*.zip"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIBXVYVL3PWQFBZFGW",
|
|
"PolicyName": "AWSMobileHub_ReadOnly",
|
|
"UpdateDate": "2017-08-10T22:08:23+00:00",
|
|
"VersionId": "v8"
|
|
},
|
|
"AWSMobileHub_ServiceUseOnly": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSMobileHub_ServiceUseOnly",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-06-02T23:35:49+00:00",
|
|
"DefaultVersionId": "v23",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cloudformation:CreateUploadBucket",
|
|
"cloudformation:ValidateTemplate",
|
|
"cloudfront:CreateDistribution",
|
|
"cloudfront:DeleteDistribution",
|
|
"cloudfront:GetDistribution",
|
|
"cloudfront:GetDistributionConfig",
|
|
"cloudfront:UpdateDistribution",
|
|
"cognito-identity:CreateIdentityPool",
|
|
"cognito-identity:UpdateIdentityPool",
|
|
"cognito-identity:DeleteIdentityPool",
|
|
"cognito-identity:SetIdentityPoolRoles",
|
|
"cognito-idp:CreateUserPool",
|
|
"dynamodb:CreateTable",
|
|
"dynamodb:DeleteTable",
|
|
"dynamodb:DescribeTable",
|
|
"dynamodb:UpdateTable",
|
|
"iam:AddClientIDToOpenIDConnectProvider",
|
|
"iam:CreateOpenIDConnectProvider",
|
|
"iam:GetOpenIDConnectProvider",
|
|
"iam:ListOpenIDConnectProviders",
|
|
"iam:CreateSAMLProvider",
|
|
"iam:GetSAMLProvider",
|
|
"iam:ListSAMLProvider",
|
|
"iam:UpdateSAMLProvider",
|
|
"lambda:CreateFunction",
|
|
"lambda:DeleteFunction",
|
|
"lambda:GetFunction",
|
|
"mobileanalytics:CreateApp",
|
|
"mobileanalytics:DeleteApp",
|
|
"sns:CreateTopic",
|
|
"sns:DeleteTopic",
|
|
"sns:ListPlatformApplications",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVpcs",
|
|
"lex:PutIntent",
|
|
"lex:GetIntent",
|
|
"lex:GetIntents",
|
|
"lex:PutSlotType",
|
|
"lex:GetSlotType",
|
|
"lex:GetSlotTypes",
|
|
"lex:PutBot",
|
|
"lex:GetBot",
|
|
"lex:GetBots",
|
|
"lex:GetBotAlias",
|
|
"lex:GetBotAliases"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"sns:CreatePlatformApplication",
|
|
"sns:DeletePlatformApplication",
|
|
"sns:GetPlatformApplicationAttributes",
|
|
"sns:SetPlatformApplicationAttributes"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:sns:*:*:app/*_MOBILEHUB_*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:CreateBucket",
|
|
"s3:DeleteBucket",
|
|
"s3:DeleteBucketPolicy",
|
|
"s3:DeleteBucketWebsite",
|
|
"s3:ListBucket",
|
|
"s3:ListBucketVersions",
|
|
"s3:GetBucketLocation",
|
|
"s3:GetBucketVersioning",
|
|
"s3:PutBucketVersioning",
|
|
"s3:PutBucketWebsite",
|
|
"s3:PutBucketPolicy",
|
|
"s3:SetBucketCrossOriginConfiguration"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::*-userfiles-mobilehub-*",
|
|
"arn:aws:s3:::*-contentdelivery-mobilehub-*",
|
|
"arn:aws:s3:::*-hosting-mobilehub-*",
|
|
"arn:aws:s3:::*-deployments-mobilehub-*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:DeleteObject",
|
|
"s3:DeleteVersion",
|
|
"s3:DeleteObjectVersion",
|
|
"s3:GetObject",
|
|
"s3:GetObjectVersion",
|
|
"s3:PutObject",
|
|
"s3:PutObjectAcl"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::*-userfiles-mobilehub-*/*",
|
|
"arn:aws:s3:::*-contentdelivery-mobilehub-*/*",
|
|
"arn:aws:s3:::*-hosting-mobilehub-*/*",
|
|
"arn:aws:s3:::*-deployments-mobilehub-*/*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"lambda:AddPermission",
|
|
"lambda:CreateAlias",
|
|
"lambda:DeleteAlias",
|
|
"lambda:UpdateAlias",
|
|
"lambda:GetFunctionConfiguration",
|
|
"lambda:GetPolicy",
|
|
"lambda:RemovePermission",
|
|
"lambda:UpdateFunctionCode",
|
|
"lambda:UpdateFunctionConfiguration"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:lambda:*:*:function:*-mobilehub-*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:CreateRole",
|
|
"iam:DeleteRole",
|
|
"iam:DeleteRolePolicy",
|
|
"iam:GetRole",
|
|
"iam:GetRolePolicy",
|
|
"iam:ListRolePolicies",
|
|
"iam:PassRole",
|
|
"iam:PutRolePolicy",
|
|
"iam:UpdateAssumeRolePolicy",
|
|
"iam:AttachRolePolicy",
|
|
"iam:DetachRolePolicy"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:iam::*:role/*_unauth_MOBILEHUB_*",
|
|
"arn:aws:iam::*:role/*_auth_MOBILEHUB_*",
|
|
"arn:aws:iam::*:role/*_consolepush_MOBILEHUB_*",
|
|
"arn:aws:iam::*:role/*_lambdaexecutionrole_MOBILEHUB_*",
|
|
"arn:aws:iam::*:role/*_smsverification_MOBILEHUB_*",
|
|
"arn:aws:iam::*:role/*_botexecutionrole_MOBILEHUB_*",
|
|
"arn:aws:iam::*:role/pinpoint-events",
|
|
"arn:aws:iam::*:role/MOBILEHUB-*-lambdaexecution*",
|
|
"arn:aws:iam::*:role/MobileHub_Service_Role"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:CreateServiceLinkedRole",
|
|
"iam:GetRole"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:iam::*:role/aws-service-role/lex.amazonaws.com/AWSServiceRoleForLexBots"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"logs:CreateLogGroup",
|
|
"logs:CreateLogStream",
|
|
"logs:PutLogEvents"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:logs:*:*:log-group:/aws/mobilehub/*:log-stream:*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:ListAttachedRolePolicies"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:iam::*:role/MobileHub_Service_Role"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"cloudformation:CreateStack",
|
|
"cloudformation:DeleteStack",
|
|
"cloudformation:DescribeStacks",
|
|
"cloudformation:DescribeStackEvents",
|
|
"cloudformation:DescribeStackResource",
|
|
"cloudformation:GetTemplate",
|
|
"cloudformation:ListStackResources",
|
|
"cloudformation:ListStacks",
|
|
"cloudformation:UpdateStack"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:cloudformation:*:*:stack/MOBILEHUB-*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"apigateway:DELETE",
|
|
"apigateway:GET",
|
|
"apigateway:HEAD",
|
|
"apigateway:OPTIONS",
|
|
"apigateway:PATCH",
|
|
"apigateway:POST",
|
|
"apigateway:PUT"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:apigateway:*::/restapis*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"cognito-idp:DeleteUserPool",
|
|
"cognito-idp:DescribeUserPool",
|
|
"cognito-idp:CreateUserPoolClient",
|
|
"cognito-idp:DescribeUserPoolClient",
|
|
"cognito-idp:DeleteUserPoolClient"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:cognito-idp:*:*:userpool/*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"mobiletargeting:UpdateApnsChannel",
|
|
"mobiletargeting:UpdateApnsSandboxChannel",
|
|
"mobiletargeting:UpdateEmailChannel",
|
|
"mobiletargeting:UpdateGcmChannel",
|
|
"mobiletargeting:UpdateSmsChannel",
|
|
"mobiletargeting:DeleteApnsChannel",
|
|
"mobiletargeting:DeleteApnsSandboxChannel",
|
|
"mobiletargeting:DeleteEmailChannel",
|
|
"mobiletargeting:DeleteGcmChannel",
|
|
"mobiletargeting:DeleteSmsChannel"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:mobiletargeting:*:*:apps/*/channels/*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAIUHPQXBDZUWOP3PSK",
|
|
"PolicyName": "AWSMobileHub_ServiceUseOnly",
|
|
"UpdateDate": "2017-06-02T23:35:49+00:00",
|
|
"VersionId": "v23"
|
|
},
|
|
"AWSOpsWorksCMInstanceProfileRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSOpsWorksCMInstanceProfileRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-11-24T09:48:22+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"s3:AbortMultipartUpload",
|
|
"s3:DeleteObject",
|
|
"s3:GetObject",
|
|
"s3:ListAllMyBuckets",
|
|
"s3:ListBucket",
|
|
"s3:ListMultipartUploadParts",
|
|
"s3:PutObject"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:s3:::aws-opsworks-cm-*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAICSU3OSHCURP2WIZW",
|
|
"PolicyName": "AWSOpsWorksCMInstanceProfileRole",
|
|
"UpdateDate": "2016-11-24T09:48:22+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSOpsWorksCMServiceRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSOpsWorksCMServiceRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-04-03T12:00:07+00:00",
|
|
"DefaultVersionId": "v6",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"s3:CreateBucket",
|
|
"s3:DeleteObject",
|
|
"s3:DeleteBucket",
|
|
"s3:GetObject",
|
|
"s3:HeadBucket",
|
|
"s3:ListBucket",
|
|
"s3:ListObjects",
|
|
"s3:PutBucketPolicy"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::aws-opsworks-cm-*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"ssm:DescribeInstanceInformation",
|
|
"ssm:GetCommandInvocation",
|
|
"ssm:ListCommandInvocations",
|
|
"ssm:ListCommands"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"ssm:SendCommand"
|
|
],
|
|
"Condition": {
|
|
"StringLike": {
|
|
"ssm:resourceTag/aws:cloudformation:stack-name": "aws-opsworks-cm-*"
|
|
}
|
|
},
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"ssm:SendCommand"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:ssm:*::document/*",
|
|
"arn:aws:s3:::aws-opsworks-cm-*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"ec2:AllocateAddress",
|
|
"ec2:AssociateAddress",
|
|
"ec2:AuthorizeSecurityGroupIngress",
|
|
"ec2:CreateImage",
|
|
"ec2:CreateSecurityGroup",
|
|
"ec2:CreateSnapshot",
|
|
"ec2:CreateTags",
|
|
"ec2:DeleteSecurityGroup",
|
|
"ec2:DeleteSnapshot",
|
|
"ec2:DeregisterImage",
|
|
"ec2:DescribeAccountAttributes",
|
|
"ec2:DescribeAddresses",
|
|
"ec2:DescribeImages",
|
|
"ec2:DescribeInstanceStatus",
|
|
"ec2:DescribeInstances",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSnapshots",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DisassociateAddress",
|
|
"ec2:ReleaseAddress",
|
|
"ec2:RunInstances",
|
|
"ec2:StopInstances"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"ec2:TerminateInstances"
|
|
],
|
|
"Condition": {
|
|
"StringLike": {
|
|
"ec2:ResourceTag/aws:cloudformation:stack-name": "aws-opsworks-cm-*"
|
|
}
|
|
},
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"cloudformation:CreateStack",
|
|
"cloudformation:DeleteStack",
|
|
"cloudformation:DescribeStackEvents",
|
|
"cloudformation:DescribeStackResources",
|
|
"cloudformation:DescribeStacks",
|
|
"cloudformation:UpdateStack"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:cloudformation:*:*:stack/aws-opsworks-cm-*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:PassRole"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:iam::*:role/aws-opsworks-cm-*",
|
|
"arn:aws:iam::*:role/service-role/aws-opsworks-cm-*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJ6I6MPGJE62URSHCO",
|
|
"PolicyName": "AWSOpsWorksCMServiceRole",
|
|
"UpdateDate": "2017-04-03T12:00:07+00:00",
|
|
"VersionId": "v6"
|
|
},
|
|
"AWSOpsWorksCloudWatchLogs": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSOpsWorksCloudWatchLogs",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-03-30T17:47:19+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"logs:CreateLogGroup",
|
|
"logs:CreateLogStream",
|
|
"logs:PutLogEvents",
|
|
"logs:DescribeLogStreams"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:logs:*:*:*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJXFIK7WABAY5CPXM4",
|
|
"PolicyName": "AWSOpsWorksCloudWatchLogs",
|
|
"UpdateDate": "2017-03-30T17:47:19+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSOpsWorksFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSOpsWorksFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:48+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"opsworks:*",
|
|
"ec2:DescribeAvailabilityZones",
|
|
"ec2:DescribeKeyPairs",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeAccountAttributes",
|
|
"ec2:DescribeAvailabilityZones",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVpcs",
|
|
"elasticloadbalancing:DescribeInstanceHealth",
|
|
"elasticloadbalancing:DescribeLoadBalancers",
|
|
"iam:GetRolePolicy",
|
|
"iam:ListInstanceProfiles",
|
|
"iam:ListRoles",
|
|
"iam:ListUsers",
|
|
"iam:PassRole"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAICN26VXMXASXKOQCG",
|
|
"PolicyName": "AWSOpsWorksFullAccess",
|
|
"UpdateDate": "2015-02-06T18:40:48+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSOpsWorksInstanceRegistration": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSOpsWorksInstanceRegistration",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-06-03T14:23:15+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"opsworks:DescribeStackProvisioningParameters",
|
|
"opsworks:DescribeStacks",
|
|
"opsworks:RegisterInstance"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJG3LCPVNI4WDZCIMU",
|
|
"PolicyName": "AWSOpsWorksInstanceRegistration",
|
|
"UpdateDate": "2016-06-03T14:23:15+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSOpsWorksRegisterCLI": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSOpsWorksRegisterCLI",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:49+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"opsworks:AssignInstance",
|
|
"opsworks:CreateStack",
|
|
"opsworks:CreateLayer",
|
|
"opsworks:DeregisterInstance",
|
|
"opsworks:DescribeInstances",
|
|
"opsworks:DescribeStackProvisioningParameters",
|
|
"opsworks:DescribeStacks",
|
|
"opsworks:UnassignInstance"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"ec2:DescribeInstances"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:AddUserToGroup",
|
|
"iam:CreateAccessKey",
|
|
"iam:CreateGroup",
|
|
"iam:CreateUser",
|
|
"iam:ListInstanceProfiles",
|
|
"iam:PassRole",
|
|
"iam:PutUserPolicy"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJ3AB5ZBFPCQGTVDU4",
|
|
"PolicyName": "AWSOpsWorksRegisterCLI",
|
|
"UpdateDate": "2015-02-06T18:40:49+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSOpsWorksRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSOpsWorksRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:41:27+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cloudwatch:GetMetricStatistics",
|
|
"ec2:DescribeAccountAttributes",
|
|
"ec2:DescribeAvailabilityZones",
|
|
"ec2:DescribeInstances",
|
|
"ec2:DescribeKeyPairs",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVpcs",
|
|
"elasticloadbalancing:DescribeInstanceHealth",
|
|
"elasticloadbalancing:DescribeLoadBalancers",
|
|
"iam:GetRolePolicy",
|
|
"iam:ListInstanceProfiles",
|
|
"iam:ListRoles",
|
|
"iam:ListUsers",
|
|
"iam:PassRole",
|
|
"opsworks:*",
|
|
"rds:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAIDUTMOKHJFAPJV45W",
|
|
"PolicyName": "AWSOpsWorksRole",
|
|
"UpdateDate": "2015-02-06T18:41:27+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSQuickSightDescribeRDS": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSQuickSightDescribeRDS",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-11-10T23:24:50+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"rds:Describe*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJU5J6OAMCJD3OO76O",
|
|
"PolicyName": "AWSQuickSightDescribeRDS",
|
|
"UpdateDate": "2015-11-10T23:24:50+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSQuickSightDescribeRedshift": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSQuickSightDescribeRedshift",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-11-10T23:25:01+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"redshift:Describe*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJFEM6MLSLTW4ZNBW2",
|
|
"PolicyName": "AWSQuickSightDescribeRedshift",
|
|
"UpdateDate": "2015-11-10T23:25:01+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSQuickSightListIAM": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSQuickSightListIAM",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-11-10T23:25:07+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"iam:List*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAI3CH5UUWZN4EKGILO",
|
|
"PolicyName": "AWSQuickSightListIAM",
|
|
"UpdateDate": "2015-11-10T23:25:07+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSQuicksightAthenaAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AWSQuicksightAthenaAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-11T23:37:32+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"athena:BatchGetQueryExecution",
|
|
"athena:CancelQueryExecution",
|
|
"athena:GetCatalogs",
|
|
"athena:GetExecutionEngine",
|
|
"athena:GetExecutionEngines",
|
|
"athena:GetNamespace",
|
|
"athena:GetNamespaces",
|
|
"athena:GetQueryExecution",
|
|
"athena:GetQueryExecutions",
|
|
"athena:GetQueryResults",
|
|
"athena:GetTable",
|
|
"athena:GetTables",
|
|
"athena:ListQueryExecutions",
|
|
"athena:RunQuery",
|
|
"athena:StartQueryExecution",
|
|
"athena:StopQueryExecution"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"glue:CreateDatabase",
|
|
"glue:DeleteDatabase",
|
|
"glue:GetDatabase",
|
|
"glue:GetDatabases",
|
|
"glue:UpdateDatabase",
|
|
"glue:CreateTable",
|
|
"glue:DeleteTable",
|
|
"glue:BatchDeleteTable",
|
|
"glue:UpdateTable",
|
|
"glue:GetTable",
|
|
"glue:GetTables",
|
|
"glue:BatchCreatePartition",
|
|
"glue:CreatePartition",
|
|
"glue:DeletePartition",
|
|
"glue:BatchDeletePartition",
|
|
"glue:UpdatePartition",
|
|
"glue:GetPartition",
|
|
"glue:GetPartitions",
|
|
"glue:BatchGetPartition"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:GetBucketLocation",
|
|
"s3:GetObject",
|
|
"s3:ListBucket",
|
|
"s3:ListBucketMultipartUploads",
|
|
"s3:ListMultipartUploadParts",
|
|
"s3:AbortMultipartUpload",
|
|
"s3:CreateBucket",
|
|
"s3:PutObject"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::aws-athena-query-results-*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAI4JB77JXFQXDWNRPM",
|
|
"PolicyName": "AWSQuicksightAthenaAccess",
|
|
"UpdateDate": "2017-08-11T23:37:32+00:00",
|
|
"VersionId": "v3"
|
|
},
|
|
"AWSStepFunctionsConsoleFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSStepFunctionsConsoleFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-01-12T00:19:34+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": "states:*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": "iam:ListRoles",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": "iam:PassRole",
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:iam::*:role/service-role/StatesExecutionRole*"
|
|
},
|
|
{
|
|
"Action": "lambda:ListFunctions",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJIYC52YWRX6OSMJWK",
|
|
"PolicyName": "AWSStepFunctionsConsoleFullAccess",
|
|
"UpdateDate": "2017-01-12T00:19:34+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AWSStepFunctionsFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSStepFunctionsFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-01-11T21:51:32+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": "states:*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJXKA6VP3UFBVHDPPA",
|
|
"PolicyName": "AWSStepFunctionsFullAccess",
|
|
"UpdateDate": "2017-01-11T21:51:32+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSStepFunctionsReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSStepFunctionsReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-01-11T21:46:19+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"states:ListStateMachines",
|
|
"states:ListActivities",
|
|
"states:DescribeStateMachine",
|
|
"states:ListExecutions",
|
|
"states:DescribeExecution",
|
|
"states:GetExecutionHistory",
|
|
"states:DescribeActivity"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJONHB2TJQDJPFW5TM",
|
|
"PolicyName": "AWSStepFunctionsReadOnlyAccess",
|
|
"UpdateDate": "2017-01-11T21:46:19+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSStorageGatewayFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSStorageGatewayFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:41:09+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"storagegateway:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"ec2:DescribeSnapshots",
|
|
"ec2:DeleteSnapshot"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJG5SSPAVOGK3SIDGU",
|
|
"PolicyName": "AWSStorageGatewayFullAccess",
|
|
"UpdateDate": "2015-02-06T18:41:09+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSStorageGatewayReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSStorageGatewayReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:41:10+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"storagegateway:List*",
|
|
"storagegateway:Describe*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"ec2:DescribeSnapshots"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIFKCTUVOPD5NICXJK",
|
|
"PolicyName": "AWSStorageGatewayReadOnlyAccess",
|
|
"UpdateDate": "2015-02-06T18:41:10+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSSupportAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSSupportAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:41:11+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"support:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJSNKQX2OW67GF4S7E",
|
|
"PolicyName": "AWSSupportAccess",
|
|
"UpdateDate": "2015-02-06T18:41:11+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSWAFFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSWAFFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-12-07T21:33:25+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"waf:*",
|
|
"waf-regional:*",
|
|
"elasticloadbalancing:SetWebACL"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJMIKIAFXZEGOLRH7C",
|
|
"PolicyName": "AWSWAFFullAccess",
|
|
"UpdateDate": "2016-12-07T21:33:25+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AWSWAFReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSWAFReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-12-07T21:30:54+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"waf:Get*",
|
|
"waf:List*",
|
|
"waf-regional:Get*",
|
|
"waf-regional:List*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAINZVDMX2SBF7EU2OC",
|
|
"PolicyName": "AWSWAFReadOnlyAccess",
|
|
"UpdateDate": "2016-12-07T21:30:54+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AWSXrayFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSXrayFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-12-01T18:30:55+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"xray:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJQBYG45NSJMVQDB2K",
|
|
"PolicyName": "AWSXrayFullAccess",
|
|
"UpdateDate": "2016-12-01T18:30:55+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSXrayReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSXrayReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-12-01T18:27:02+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"xray:BatchGetTraces",
|
|
"xray:GetServiceGraph",
|
|
"xray:GetTraceGraph",
|
|
"xray:GetTraceSummaries"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIH4OFXWPS6ZX6OPGQ",
|
|
"PolicyName": "AWSXrayReadOnlyAccess",
|
|
"UpdateDate": "2016-12-01T18:27:02+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AWSXrayWriteOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AWSXrayWriteOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-12-01T18:19:53+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"xray:PutTraceSegments",
|
|
"xray:PutTelemetryRecords"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIAACM4LMYSRGBCTM6",
|
|
"PolicyName": "AWSXrayWriteOnlyAccess",
|
|
"UpdateDate": "2016-12-01T18:19:53+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AdministratorAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AdministratorAccess",
|
|
"AttachmentCount": 3,
|
|
"CreateDate": "2015-02-06T18:39:46+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": "*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIWMBCKSKIEE64ZLYK",
|
|
"PolicyName": "AdministratorAccess",
|
|
"UpdateDate": "2015-02-06T18:39:46+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonAPIGatewayAdministrator": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonAPIGatewayAdministrator",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-07-09T17:34:45+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"apigateway:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:apigateway:*::/*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJ4PT6VY5NLKTNUYSI",
|
|
"PolicyName": "AmazonAPIGatewayAdministrator",
|
|
"UpdateDate": "2015-07-09T17:34:45+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonAPIGatewayInvokeFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonAPIGatewayInvokeFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-07-09T17:36:12+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"execute-api:Invoke"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:execute-api:*:*:*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIIWAX2NOOQJ4AIEQ6",
|
|
"PolicyName": "AmazonAPIGatewayInvokeFullAccess",
|
|
"UpdateDate": "2015-07-09T17:36:12+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonAPIGatewayPushToCloudWatchLogs": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonAPIGatewayPushToCloudWatchLogs",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-11-11T23:41:46+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"logs:CreateLogGroup",
|
|
"logs:CreateLogStream",
|
|
"logs:DescribeLogGroups",
|
|
"logs:DescribeLogStreams",
|
|
"logs:PutLogEvents",
|
|
"logs:GetLogEvents",
|
|
"logs:FilterLogEvents"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAIK4GFO7HLKYN64ASK",
|
|
"PolicyName": "AmazonAPIGatewayPushToCloudWatchLogs",
|
|
"UpdateDate": "2015-11-11T23:41:46+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonAppStreamFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonAppStreamFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-09-07T23:56:23+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"appstream:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"application-autoscaling:DeleteScalingPolicy",
|
|
"application-autoscaling:DescribeScalableTargets",
|
|
"application-autoscaling:DescribeScalingPolicies",
|
|
"application-autoscaling:PutScalingPolicy",
|
|
"application-autoscaling:RegisterScalableTarget"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"cloudwatch:DeleteAlarms",
|
|
"cloudwatch:DescribeAlarms",
|
|
"cloudwatch:GetMetricStatistics",
|
|
"cloudwatch:PutMetricAlarm"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"ec2:DescribeRouteTables",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVpcs"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": "iam:ListRoles",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": "iam:PassRole",
|
|
"Condition": {
|
|
"StringLike": {
|
|
"iam:PassedToService": "application-autoscaling.amazonaws.com"
|
|
}
|
|
},
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:iam::*:role/service-role/ApplicationAutoScalingForAmazonAppStreamAccess"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJLZZXU2YQVGL4QDNC",
|
|
"PolicyName": "AmazonAppStreamFullAccess",
|
|
"UpdateDate": "2017-09-07T23:56:23+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AmazonAppStreamReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonAppStreamReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-12-07T21:00:06+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"appstream:Get*",
|
|
"appstream:List*",
|
|
"appstream:Describe*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJXIFDGB4VBX23DX7K",
|
|
"PolicyName": "AmazonAppStreamReadOnlyAccess",
|
|
"UpdateDate": "2016-12-07T21:00:06+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AmazonAppStreamServiceAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonAppStreamServiceAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-05-23T23:00:47+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeAvailabilityZones",
|
|
"ec2:CreateNetworkInterface",
|
|
"ec2:DescribeNetworkInterfaces",
|
|
"ec2:DeleteNetworkInterface",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:AssociateAddress",
|
|
"ec2:DisassociateAddress",
|
|
"ec2:DescribeRouteTables",
|
|
"ec2:DescribeSecurityGroups"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:CreateBucket",
|
|
"s3:ListBucket",
|
|
"s3:GetObject",
|
|
"s3:PutObject",
|
|
"s3:DeleteObject",
|
|
"s3:GetObjectVersion",
|
|
"s3:DeleteObjectVersion",
|
|
"s3:PutBucketPolicy"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:s3:::appstream2-36fb080bb8-*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAISBRZ7LMMCBYEF3SE",
|
|
"PolicyName": "AmazonAppStreamServiceAccess",
|
|
"UpdateDate": "2017-05-23T23:00:47+00:00",
|
|
"VersionId": "v3"
|
|
},
|
|
"AmazonAthenaFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonAthenaFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-09-13T00:13:48+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"athena:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"glue:CreateDatabase",
|
|
"glue:DeleteDatabase",
|
|
"glue:GetDatabase",
|
|
"glue:GetDatabases",
|
|
"glue:UpdateDatabase",
|
|
"glue:CreateTable",
|
|
"glue:DeleteTable",
|
|
"glue:BatchDeleteTable",
|
|
"glue:UpdateTable",
|
|
"glue:GetTable",
|
|
"glue:GetTables",
|
|
"glue:BatchCreatePartition",
|
|
"glue:CreatePartition",
|
|
"glue:DeletePartition",
|
|
"glue:BatchDeletePartition",
|
|
"glue:UpdatePartition",
|
|
"glue:GetPartition",
|
|
"glue:GetPartitions",
|
|
"glue:BatchGetPartition"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:GetBucketLocation",
|
|
"s3:GetObject",
|
|
"s3:ListBucket",
|
|
"s3:ListBucketMultipartUploads",
|
|
"s3:ListMultipartUploadParts",
|
|
"s3:AbortMultipartUpload",
|
|
"s3:CreateBucket",
|
|
"s3:PutObject"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::aws-athena-query-results-*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:GetObject"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::athena-examples*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIPJMLMD4C7RYZ6XCK",
|
|
"PolicyName": "AmazonAthenaFullAccess",
|
|
"UpdateDate": "2017-09-13T00:13:48+00:00",
|
|
"VersionId": "v3"
|
|
},
|
|
"AmazonCloudDirectoryFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonCloudDirectoryFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-02-25T00:41:39+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"clouddirectory:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJG3XQK77ATFLCF2CK",
|
|
"PolicyName": "AmazonCloudDirectoryFullAccess",
|
|
"UpdateDate": "2017-02-25T00:41:39+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonCloudDirectoryReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonCloudDirectoryReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-02-28T23:42:06+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"clouddirectory:List*",
|
|
"clouddirectory:Get*",
|
|
"clouddirectory:LookupPolicy",
|
|
"clouddirectory:BatchRead"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAICMSZQGR3O62KMD6M",
|
|
"PolicyName": "AmazonCloudDirectoryReadOnlyAccess",
|
|
"UpdateDate": "2017-02-28T23:42:06+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonCognitoDeveloperAuthenticatedIdentities": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonCognitoDeveloperAuthenticatedIdentities",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-03-24T17:22:23+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cognito-identity:GetOpenIdTokenForDeveloperIdentity",
|
|
"cognito-identity:LookupDeveloperIdentity",
|
|
"cognito-identity:MergeDeveloperIdentities",
|
|
"cognito-identity:UnlinkDeveloperIdentity"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIQOKZ5BGKLCMTXH4W",
|
|
"PolicyName": "AmazonCognitoDeveloperAuthenticatedIdentities",
|
|
"UpdateDate": "2015-03-24T17:22:23+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonCognitoPowerUser": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonCognitoPowerUser",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-06-02T16:57:56+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cognito-identity:*",
|
|
"cognito-idp:*",
|
|
"cognito-sync:*",
|
|
"iam:ListRoles",
|
|
"iam:ListOpenIdConnectProviders",
|
|
"sns:ListPlatformApplications"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJKW5H2HNCPGCYGR6Y",
|
|
"PolicyName": "AmazonCognitoPowerUser",
|
|
"UpdateDate": "2016-06-02T16:57:56+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AmazonCognitoReadOnly": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonCognitoReadOnly",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-06-02T17:30:24+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cognito-identity:Describe*",
|
|
"cognito-identity:Get*",
|
|
"cognito-identity:List*",
|
|
"cognito-idp:Describe*",
|
|
"cognito-idp:AdminGetUser",
|
|
"cognito-idp:List*",
|
|
"cognito-sync:Describe*",
|
|
"cognito-sync:Get*",
|
|
"cognito-sync:List*",
|
|
"iam:ListOpenIdConnectProviders",
|
|
"iam:ListRoles",
|
|
"sns:ListPlatformApplications"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJBFTRZD2GQGJHSVQK",
|
|
"PolicyName": "AmazonCognitoReadOnly",
|
|
"UpdateDate": "2016-06-02T17:30:24+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AmazonDMSCloudWatchLogsRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonDMSCloudWatchLogsRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-01-07T23:44:53+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"logs:DescribeLogGroups"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
],
|
|
"Sid": "AllowDescribeOnAllLogGroups"
|
|
},
|
|
{
|
|
"Action": [
|
|
"logs:DescribeLogStreams"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:logs:*:*:log-group:dms-tasks-*"
|
|
],
|
|
"Sid": "AllowDescribeOfAllLogStreamsOnDmsTasksLogGroup"
|
|
},
|
|
{
|
|
"Action": [
|
|
"logs:CreateLogGroup"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:logs:*:*:log-group:dms-tasks-*"
|
|
],
|
|
"Sid": "AllowCreationOfDmsTasksLogGroups"
|
|
},
|
|
{
|
|
"Action": [
|
|
"logs:CreateLogStream"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:logs:*:*:log-group:dms-tasks-*:log-stream:dms-task-*"
|
|
],
|
|
"Sid": "AllowCreationOfDmsTaskLogStream"
|
|
},
|
|
{
|
|
"Action": [
|
|
"logs:PutLogEvents"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:logs:*:*:log-group:dms-tasks-*:log-stream:dms-task-*"
|
|
],
|
|
"Sid": "AllowUploadOfLogEventsToDmsTaskLogStream"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJBG7UXZZXUJD3TDJE",
|
|
"PolicyName": "AmazonDMSCloudWatchLogsRole",
|
|
"UpdateDate": "2016-01-07T23:44:53+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonDMSRedshiftS3Role": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonDMSRedshiftS3Role",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-04-20T17:05:56+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"s3:CreateBucket",
|
|
"s3:ListBucket",
|
|
"s3:DeleteBucket",
|
|
"s3:GetBucketLocation",
|
|
"s3:GetObject",
|
|
"s3:PutObject",
|
|
"s3:DeleteObject",
|
|
"s3:GetObjectVersion",
|
|
"s3:GetBucketPolicy",
|
|
"s3:PutBucketPolicy",
|
|
"s3:DeleteBucketPolicy"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:s3:::dms-*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAI3CCUQ4U5WNC5F6B6",
|
|
"PolicyName": "AmazonDMSRedshiftS3Role",
|
|
"UpdateDate": "2016-04-20T17:05:56+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonDMSVPCManagementRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonDMSVPCManagementRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-05-23T16:29:57+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:CreateNetworkInterface",
|
|
"ec2:DescribeAvailabilityZones",
|
|
"ec2:DescribeInternetGateways",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DeleteNetworkInterface",
|
|
"ec2:ModifyNetworkInterfaceAttribute"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJHKIGMBQI4AEFFSYO",
|
|
"PolicyName": "AmazonDMSVPCManagementRole",
|
|
"UpdateDate": "2016-05-23T16:29:57+00:00",
|
|
"VersionId": "v3"
|
|
},
|
|
"AmazonDRSVPCManagement": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonDRSVPCManagement",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-09-02T00:09:20+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:AuthorizeSecurityGroupIngress",
|
|
"ec2:CreateNetworkInterface",
|
|
"ec2:CreateSecurityGroup",
|
|
"ec2:DescribeAvailabilityZones",
|
|
"ec2:DescribeInternetGateways",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVpcAttribute",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DeleteNetworkInterface",
|
|
"ec2:DeleteSecurityGroup",
|
|
"ec2:ModifyNetworkInterfaceAttribute",
|
|
"ec2:RevokeSecurityGroupIngress"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJPXIBTTZMBEFEX6UA",
|
|
"PolicyName": "AmazonDRSVPCManagement",
|
|
"UpdateDate": "2015-09-02T00:09:20+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonDynamoDBFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonDynamoDBFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-06-28T23:23:34+00:00",
|
|
"DefaultVersionId": "v5",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"dynamodb:*",
|
|
"dax:*",
|
|
"application-autoscaling:DeleteScalingPolicy",
|
|
"application-autoscaling:DeregisterScalableTarget",
|
|
"application-autoscaling:DescribeScalableTargets",
|
|
"application-autoscaling:DescribeScalingActivities",
|
|
"application-autoscaling:DescribeScalingPolicies",
|
|
"application-autoscaling:PutScalingPolicy",
|
|
"application-autoscaling:RegisterScalableTarget",
|
|
"cloudwatch:DeleteAlarms",
|
|
"cloudwatch:DescribeAlarmHistory",
|
|
"cloudwatch:DescribeAlarms",
|
|
"cloudwatch:DescribeAlarmsForMetric",
|
|
"cloudwatch:GetMetricStatistics",
|
|
"cloudwatch:ListMetrics",
|
|
"cloudwatch:PutMetricAlarm",
|
|
"datapipeline:ActivatePipeline",
|
|
"datapipeline:CreatePipeline",
|
|
"datapipeline:DeletePipeline",
|
|
"datapipeline:DescribeObjects",
|
|
"datapipeline:DescribePipelines",
|
|
"datapipeline:GetPipelineDefinition",
|
|
"datapipeline:ListPipelines",
|
|
"datapipeline:PutPipelineDefinition",
|
|
"datapipeline:QueryObjects",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeSecurityGroups",
|
|
"iam:GetRole",
|
|
"iam:ListRoles",
|
|
"sns:CreateTopic",
|
|
"sns:DeleteTopic",
|
|
"sns:ListSubscriptions",
|
|
"sns:ListSubscriptionsByTopic",
|
|
"sns:ListTopics",
|
|
"sns:Subscribe",
|
|
"sns:Unsubscribe",
|
|
"sns:SetTopicAttributes",
|
|
"lambda:CreateFunction",
|
|
"lambda:ListFunctions",
|
|
"lambda:ListEventSourceMappings",
|
|
"lambda:CreateEventSourceMapping",
|
|
"lambda:DeleteEventSourceMapping",
|
|
"lambda:GetFunctionConfiguration",
|
|
"lambda:DeleteFunction"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:PassRole"
|
|
],
|
|
"Condition": {
|
|
"StringLike": {
|
|
"iam:PassedToService": [
|
|
"application-autoscaling.amazonaws.com",
|
|
"dax.amazonaws.com"
|
|
]
|
|
}
|
|
},
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAINUGF2JSOSUY76KYA",
|
|
"PolicyName": "AmazonDynamoDBFullAccess",
|
|
"UpdateDate": "2017-06-28T23:23:34+00:00",
|
|
"VersionId": "v5"
|
|
},
|
|
"AmazonDynamoDBFullAccesswithDataPipeline": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonDynamoDBFullAccesswithDataPipeline",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-11-12T02:17:42+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cloudwatch:DeleteAlarms",
|
|
"cloudwatch:DescribeAlarmHistory",
|
|
"cloudwatch:DescribeAlarms",
|
|
"cloudwatch:DescribeAlarmsForMetric",
|
|
"cloudwatch:GetMetricStatistics",
|
|
"cloudwatch:ListMetrics",
|
|
"cloudwatch:PutMetricAlarm",
|
|
"dynamodb:*",
|
|
"sns:CreateTopic",
|
|
"sns:DeleteTopic",
|
|
"sns:ListSubscriptions",
|
|
"sns:ListSubscriptionsByTopic",
|
|
"sns:ListTopics",
|
|
"sns:Subscribe",
|
|
"sns:Unsubscribe",
|
|
"sns:SetTopicAttributes"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*",
|
|
"Sid": "DDBConsole"
|
|
},
|
|
{
|
|
"Action": [
|
|
"lambda:*",
|
|
"iam:ListRoles"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*",
|
|
"Sid": "DDBConsoleTriggers"
|
|
},
|
|
{
|
|
"Action": [
|
|
"datapipeline:*",
|
|
"iam:ListRoles"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*",
|
|
"Sid": "DDBConsoleImportExport"
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:GetRolePolicy",
|
|
"iam:PassRole"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
],
|
|
"Sid": "IAMEDPRoles"
|
|
},
|
|
{
|
|
"Action": [
|
|
"ec2:CreateTags",
|
|
"ec2:DescribeInstances",
|
|
"ec2:RunInstances",
|
|
"ec2:StartInstances",
|
|
"ec2:StopInstances",
|
|
"ec2:TerminateInstances",
|
|
"elasticmapreduce:*",
|
|
"datapipeline:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*",
|
|
"Sid": "EMR"
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:DeleteObject",
|
|
"s3:Get*",
|
|
"s3:List*",
|
|
"s3:Put*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
],
|
|
"Sid": "S3"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJ3ORT7KDISSXGHJXA",
|
|
"PolicyName": "AmazonDynamoDBFullAccesswithDataPipeline",
|
|
"UpdateDate": "2015-11-12T02:17:42+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AmazonDynamoDBReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonDynamoDBReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-06-12T21:11:40+00:00",
|
|
"DefaultVersionId": "v5",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"application-autoscaling:DescribeScalableTargets",
|
|
"application-autoscaling:DescribeScalingActivities",
|
|
"application-autoscaling:DescribeScalingPolicies",
|
|
"cloudwatch:DescribeAlarmHistory",
|
|
"cloudwatch:DescribeAlarms",
|
|
"cloudwatch:DescribeAlarmsForMetric",
|
|
"cloudwatch:GetMetricStatistics",
|
|
"cloudwatch:ListMetrics",
|
|
"datapipeline:DescribeObjects",
|
|
"datapipeline:DescribePipelines",
|
|
"datapipeline:GetPipelineDefinition",
|
|
"datapipeline:ListPipelines",
|
|
"datapipeline:QueryObjects",
|
|
"dynamodb:BatchGetItem",
|
|
"dynamodb:DescribeTable",
|
|
"dynamodb:GetItem",
|
|
"dynamodb:ListTables",
|
|
"dynamodb:Query",
|
|
"dynamodb:Scan",
|
|
"dynamodb:DescribeReservedCapacity",
|
|
"dynamodb:DescribeReservedCapacityOfferings",
|
|
"dynamodb:ListTagsOfResource",
|
|
"dynamodb:DescribeTimeToLive",
|
|
"dynamodb:DescribeLimits",
|
|
"iam:GetRole",
|
|
"iam:ListRoles",
|
|
"sns:ListSubscriptionsByTopic",
|
|
"sns:ListTopics",
|
|
"lambda:ListFunctions",
|
|
"lambda:ListEventSourceMappings",
|
|
"lambda:GetFunctionConfiguration"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIY2XFNA232XJ6J7X2",
|
|
"PolicyName": "AmazonDynamoDBReadOnlyAccess",
|
|
"UpdateDate": "2017-06-12T21:11:40+00:00",
|
|
"VersionId": "v5"
|
|
},
|
|
"AmazonEC2ContainerRegistryFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-12-21T17:06:48+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ecr:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIESRL7KD7IIVF6V4W",
|
|
"PolicyName": "AmazonEC2ContainerRegistryFullAccess",
|
|
"UpdateDate": "2015-12-21T17:06:48+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonEC2ContainerRegistryPowerUser": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryPowerUser",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-10-11T22:28:07+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ecr:GetAuthorizationToken",
|
|
"ecr:BatchCheckLayerAvailability",
|
|
"ecr:GetDownloadUrlForLayer",
|
|
"ecr:GetRepositoryPolicy",
|
|
"ecr:DescribeRepositories",
|
|
"ecr:ListImages",
|
|
"ecr:DescribeImages",
|
|
"ecr:BatchGetImage",
|
|
"ecr:InitiateLayerUpload",
|
|
"ecr:UploadLayerPart",
|
|
"ecr:CompleteLayerUpload",
|
|
"ecr:PutImage"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJDNE5PIHROIBGGDDW",
|
|
"PolicyName": "AmazonEC2ContainerRegistryPowerUser",
|
|
"UpdateDate": "2016-10-11T22:28:07+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AmazonEC2ContainerRegistryReadOnly": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-10-11T22:08:43+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ecr:GetAuthorizationToken",
|
|
"ecr:BatchCheckLayerAvailability",
|
|
"ecr:GetDownloadUrlForLayer",
|
|
"ecr:GetRepositoryPolicy",
|
|
"ecr:DescribeRepositories",
|
|
"ecr:ListImages",
|
|
"ecr:DescribeImages",
|
|
"ecr:BatchGetImage"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIFYZPA37OOHVIH7KQ",
|
|
"PolicyName": "AmazonEC2ContainerRegistryReadOnly",
|
|
"UpdateDate": "2016-10-11T22:08:43+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AmazonEC2ContainerServiceAutoscaleRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonEC2ContainerServiceAutoscaleRole",
|
|
"AttachmentCount": 1,
|
|
"CreateDate": "2016-05-12T23:25:44+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ecs:DescribeServices",
|
|
"ecs:UpdateService"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"cloudwatch:DescribeAlarms"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAIUAP3EGGGXXCPDQKK",
|
|
"PolicyName": "AmazonEC2ContainerServiceAutoscaleRole",
|
|
"UpdateDate": "2016-05-12T23:25:44+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonEC2ContainerServiceEventsRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonEC2ContainerServiceEventsRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-05-30T16:51:35+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ecs:RunTask"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAITKFNIUAG27VSYNZ4",
|
|
"PolicyName": "AmazonEC2ContainerServiceEventsRole",
|
|
"UpdateDate": "2017-05-30T16:51:35+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonEC2ContainerServiceFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonEC2ContainerServiceFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-06-08T00:18:56+00:00",
|
|
"DefaultVersionId": "v4",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"autoscaling:Describe*",
|
|
"autoscaling:UpdateAutoScalingGroup",
|
|
"cloudformation:CreateStack",
|
|
"cloudformation:DeleteStack",
|
|
"cloudformation:DescribeStack*",
|
|
"cloudformation:UpdateStack",
|
|
"cloudwatch:GetMetricStatistics",
|
|
"ec2:Describe*",
|
|
"elasticloadbalancing:*",
|
|
"ecs:*",
|
|
"events:DescribeRule",
|
|
"events:DeleteRule",
|
|
"events:ListRuleNamesByTarget",
|
|
"events:ListTargetsByRule",
|
|
"events:PutRule",
|
|
"events:PutTargets",
|
|
"events:RemoveTargets",
|
|
"iam:ListInstanceProfiles",
|
|
"iam:ListRoles",
|
|
"iam:PassRole"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJALOYVTPDZEMIACSM",
|
|
"PolicyName": "AmazonEC2ContainerServiceFullAccess",
|
|
"UpdateDate": "2017-06-08T00:18:56+00:00",
|
|
"VersionId": "v4"
|
|
},
|
|
"AmazonEC2ContainerServiceRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonEC2ContainerServiceRole",
|
|
"AttachmentCount": 1,
|
|
"CreateDate": "2016-08-11T13:08:01+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:AuthorizeSecurityGroupIngress",
|
|
"ec2:Describe*",
|
|
"elasticloadbalancing:DeregisterInstancesFromLoadBalancer",
|
|
"elasticloadbalancing:DeregisterTargets",
|
|
"elasticloadbalancing:Describe*",
|
|
"elasticloadbalancing:RegisterInstancesWithLoadBalancer",
|
|
"elasticloadbalancing:RegisterTargets"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJO53W2XHNACG7V77Q",
|
|
"PolicyName": "AmazonEC2ContainerServiceRole",
|
|
"UpdateDate": "2016-08-11T13:08:01+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AmazonEC2ContainerServiceforEC2Role": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonEC2ContainerServiceforEC2Role",
|
|
"AttachmentCount": 1,
|
|
"CreateDate": "2017-05-17T23:09:13+00:00",
|
|
"DefaultVersionId": "v5",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ecs:CreateCluster",
|
|
"ecs:DeregisterContainerInstance",
|
|
"ecs:DiscoverPollEndpoint",
|
|
"ecs:Poll",
|
|
"ecs:RegisterContainerInstance",
|
|
"ecs:StartTelemetrySession",
|
|
"ecs:UpdateContainerInstancesState",
|
|
"ecs:Submit*",
|
|
"ecr:GetAuthorizationToken",
|
|
"ecr:BatchCheckLayerAvailability",
|
|
"ecr:GetDownloadUrlForLayer",
|
|
"ecr:BatchGetImage",
|
|
"logs:CreateLogStream",
|
|
"logs:PutLogEvents"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJLYJCVHC7TQHCSQDS",
|
|
"PolicyName": "AmazonEC2ContainerServiceforEC2Role",
|
|
"UpdateDate": "2017-05-17T23:09:13+00:00",
|
|
"VersionId": "v5"
|
|
},
|
|
"AmazonEC2FullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonEC2FullAccess",
|
|
"AttachmentCount": 1,
|
|
"CreateDate": "2015-02-06T18:40:15+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": "ec2:*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": "elasticloadbalancing:*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": "cloudwatch:*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": "autoscaling:*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAI3VAJF5ZCRZ7MCQE6",
|
|
"PolicyName": "AmazonEC2FullAccess",
|
|
"UpdateDate": "2015-02-06T18:40:15+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonEC2ReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonEC2ReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:17+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": "ec2:Describe*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": "elasticloadbalancing:Describe*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"cloudwatch:ListMetrics",
|
|
"cloudwatch:GetMetricStatistics",
|
|
"cloudwatch:Describe*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": "autoscaling:Describe*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIGDT4SV4GSETWTBZK",
|
|
"PolicyName": "AmazonEC2ReadOnlyAccess",
|
|
"UpdateDate": "2015-02-06T18:40:17+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonEC2ReportsAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonEC2ReportsAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:16+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": "ec2-reports:*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIU6NBZVF2PCRW36ZW",
|
|
"PolicyName": "AmazonEC2ReportsAccess",
|
|
"UpdateDate": "2015-02-06T18:40:16+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonEC2RoleforAWSCodeDeploy": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonEC2RoleforAWSCodeDeploy",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-03-20T17:14:10+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"s3:GetObject",
|
|
"s3:GetObjectVersion",
|
|
"s3:ListBucket"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAIAZKXZ27TAJ4PVWGK",
|
|
"PolicyName": "AmazonEC2RoleforAWSCodeDeploy",
|
|
"UpdateDate": "2017-03-20T17:14:10+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AmazonEC2RoleforDataPipelineRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonEC2RoleforDataPipelineRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-02-22T17:24:05+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cloudwatch:*",
|
|
"datapipeline:*",
|
|
"dynamodb:*",
|
|
"ec2:Describe*",
|
|
"elasticmapreduce:AddJobFlowSteps",
|
|
"elasticmapreduce:Describe*",
|
|
"elasticmapreduce:ListInstance*",
|
|
"elasticmapreduce:ModifyInstanceGroups",
|
|
"rds:Describe*",
|
|
"redshift:DescribeClusters",
|
|
"redshift:DescribeClusterSecurityGroups",
|
|
"s3:*",
|
|
"sdb:*",
|
|
"sns:*",
|
|
"sqs:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJ3Z5I2WAJE5DN2J36",
|
|
"PolicyName": "AmazonEC2RoleforDataPipelineRole",
|
|
"UpdateDate": "2016-02-22T17:24:05+00:00",
|
|
"VersionId": "v3"
|
|
},
|
|
"AmazonEC2RoleforSSM": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonEC2RoleforSSM",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-10T20:49:08+00:00",
|
|
"DefaultVersionId": "v4",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ssm:DescribeAssociation",
|
|
"ssm:GetDeployablePatchSnapshotForInstance",
|
|
"ssm:GetDocument",
|
|
"ssm:GetParameters",
|
|
"ssm:ListAssociations",
|
|
"ssm:ListInstanceAssociations",
|
|
"ssm:PutInventory",
|
|
"ssm:PutComplianceItems",
|
|
"ssm:UpdateAssociationStatus",
|
|
"ssm:UpdateInstanceAssociationStatus",
|
|
"ssm:UpdateInstanceInformation"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"ec2messages:AcknowledgeMessage",
|
|
"ec2messages:DeleteMessage",
|
|
"ec2messages:FailMessage",
|
|
"ec2messages:GetEndpoint",
|
|
"ec2messages:GetMessages",
|
|
"ec2messages:SendReply"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"cloudwatch:PutMetricData"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"ec2:DescribeInstanceStatus"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"ds:CreateComputer",
|
|
"ds:DescribeDirectories"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"logs:CreateLogGroup",
|
|
"logs:CreateLogStream",
|
|
"logs:DescribeLogGroups",
|
|
"logs:DescribeLogStreams",
|
|
"logs:PutLogEvents"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:PutObject",
|
|
"s3:GetObject",
|
|
"s3:AbortMultipartUpload",
|
|
"s3:ListMultipartUploadParts",
|
|
"s3:ListBucketMultipartUploads"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:ListBucket"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:s3:::amazon-ssm-packages-*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAI6TL3SMY22S4KMMX6",
|
|
"PolicyName": "AmazonEC2RoleforSSM",
|
|
"UpdateDate": "2017-08-10T20:49:08+00:00",
|
|
"VersionId": "v4"
|
|
},
|
|
"AmazonEC2SpotFleetAutoscaleRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonEC2SpotFleetAutoscaleRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-08-19T18:27:22+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:DescribeSpotFleetRequests",
|
|
"ec2:ModifySpotFleetRequest"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"cloudwatch:DescribeAlarms"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAIMFFRMIOBGDP2TAVE",
|
|
"PolicyName": "AmazonEC2SpotFleetAutoscaleRole",
|
|
"UpdateDate": "2016-08-19T18:27:22+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonEC2SpotFleetRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonEC2SpotFleetRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-11-10T21:19:35+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:DescribeImages",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:RequestSpotInstances",
|
|
"ec2:TerminateInstances",
|
|
"ec2:DescribeInstanceStatus",
|
|
"iam:PassRole"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAIMRTKHWK7ESSNETSW",
|
|
"PolicyName": "AmazonEC2SpotFleetRole",
|
|
"UpdateDate": "2016-11-10T21:19:35+00:00",
|
|
"VersionId": "v3"
|
|
},
|
|
"AmazonEC2SpotFleetTaggingRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonEC2SpotFleetTaggingRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-07-26T19:10:35+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:DescribeImages",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:RequestSpotInstances",
|
|
"ec2:TerminateInstances",
|
|
"ec2:DescribeInstanceStatus",
|
|
"ec2:CreateTags"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": "iam:PassRole",
|
|
"Condition": {
|
|
"StringEquals": {
|
|
"iam:PassedToService": "ec2.amazonaws.com"
|
|
}
|
|
},
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJ5U6UMLCEYLX5OLC4",
|
|
"PolicyName": "AmazonEC2SpotFleetTaggingRole",
|
|
"UpdateDate": "2017-07-26T19:10:35+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AmazonESFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonESFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-10-01T19:14:00+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"es:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJM6ZTCU24QL5PZCGC",
|
|
"PolicyName": "AmazonESFullAccess",
|
|
"UpdateDate": "2015-10-01T19:14:00+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonESReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonESReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-10-01T19:18:24+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"es:Describe*",
|
|
"es:List*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJUDMRLOQ7FPAR46FQ",
|
|
"PolicyName": "AmazonESReadOnlyAccess",
|
|
"UpdateDate": "2015-10-01T19:18:24+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonElastiCacheFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonElastiCacheFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:20+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": "elasticache:*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIA2V44CPHAUAAECKG",
|
|
"PolicyName": "AmazonElastiCacheFullAccess",
|
|
"UpdateDate": "2015-02-06T18:40:20+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonElastiCacheReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonElastiCacheReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:21+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"elasticache:Describe*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIPDACSNQHSENWAKM2",
|
|
"PolicyName": "AmazonElastiCacheReadOnlyAccess",
|
|
"UpdateDate": "2015-02-06T18:40:21+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonElasticFileSystemFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonElasticFileSystemFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-14T10:18:34+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:CreateNetworkInterface",
|
|
"ec2:DeleteNetworkInterface",
|
|
"ec2:DescribeAvailabilityZones",
|
|
"ec2:DescribeNetworkInterfaceAttribute",
|
|
"ec2:DescribeNetworkInterfaces",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVpcAttribute",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:ModifyNetworkInterfaceAttribute",
|
|
"elasticfilesystem:*",
|
|
"kms:DescribeKey",
|
|
"kms:ListAliases"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJKXTMNVQGIDNCKPBC",
|
|
"PolicyName": "AmazonElasticFileSystemFullAccess",
|
|
"UpdateDate": "2017-08-14T10:18:34+00:00",
|
|
"VersionId": "v3"
|
|
},
|
|
"AmazonElasticFileSystemReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonElasticFileSystemReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-14T10:09:49+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:DescribeAvailabilityZones",
|
|
"ec2:DescribeNetworkInterfaceAttribute",
|
|
"ec2:DescribeNetworkInterfaces",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVpcAttribute",
|
|
"ec2:DescribeVpcs",
|
|
"elasticfilesystem:Describe*",
|
|
"kms:ListAliases"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIPN5S4NE5JJOKVC4Y",
|
|
"PolicyName": "AmazonElasticFileSystemReadOnlyAccess",
|
|
"UpdateDate": "2017-08-14T10:09:49+00:00",
|
|
"VersionId": "v3"
|
|
},
|
|
"AmazonElasticMapReduceFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonElasticMapReduceFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-09-20T19:27:37+00:00",
|
|
"DefaultVersionId": "v5",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cloudwatch:*",
|
|
"cloudformation:CreateStack",
|
|
"cloudformation:DescribeStackEvents",
|
|
"ec2:AuthorizeSecurityGroupIngress",
|
|
"ec2:AuthorizeSecurityGroupEgress",
|
|
"ec2:CancelSpotInstanceRequests",
|
|
"ec2:CreateRoute",
|
|
"ec2:CreateSecurityGroup",
|
|
"ec2:CreateTags",
|
|
"ec2:DeleteRoute",
|
|
"ec2:DeleteTags",
|
|
"ec2:DeleteSecurityGroup",
|
|
"ec2:DescribeAvailabilityZones",
|
|
"ec2:DescribeAccountAttributes",
|
|
"ec2:DescribeInstances",
|
|
"ec2:DescribeKeyPairs",
|
|
"ec2:DescribeRouteTables",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSpotInstanceRequests",
|
|
"ec2:DescribeSpotPriceHistory",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVpcAttribute",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DescribeRouteTables",
|
|
"ec2:DescribeNetworkAcls",
|
|
"ec2:CreateVpcEndpoint",
|
|
"ec2:ModifyImageAttribute",
|
|
"ec2:ModifyInstanceAttribute",
|
|
"ec2:RequestSpotInstances",
|
|
"ec2:RevokeSecurityGroupEgress",
|
|
"ec2:RunInstances",
|
|
"ec2:TerminateInstances",
|
|
"elasticmapreduce:*",
|
|
"iam:GetPolicy",
|
|
"iam:GetPolicyVersion",
|
|
"iam:ListRoles",
|
|
"iam:PassRole",
|
|
"kms:List*",
|
|
"s3:*",
|
|
"sdb:*",
|
|
"support:CreateCase",
|
|
"support:DescribeServices",
|
|
"support:DescribeSeverityLevels"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": "iam:CreateServiceLinkedRole",
|
|
"Condition": {
|
|
"StringLike": {
|
|
"iam:AWSServiceName": "elasticmapreduce.amazonaws.com"
|
|
}
|
|
},
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:iam::*:role/aws-service-role/elasticmapreduce.amazonaws.com/AWSServiceRoleForEMRCleanup"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIZP5JFP3AMSGINBB2",
|
|
"PolicyName": "AmazonElasticMapReduceFullAccess",
|
|
"UpdateDate": "2017-09-20T19:27:37+00:00",
|
|
"VersionId": "v5"
|
|
},
|
|
"AmazonElasticMapReduceReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonElasticMapReduceReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-05-22T23:00:19+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"elasticmapreduce:Describe*",
|
|
"elasticmapreduce:List*",
|
|
"elasticmapreduce:ViewEventsFromAllClustersInConsole",
|
|
"s3:GetObject",
|
|
"s3:ListAllMyBuckets",
|
|
"s3:ListBucket",
|
|
"sdb:Select",
|
|
"cloudwatch:GetMetricStatistics"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIHP6NH2S6GYFCOINC",
|
|
"PolicyName": "AmazonElasticMapReduceReadOnlyAccess",
|
|
"UpdateDate": "2017-05-22T23:00:19+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AmazonElasticMapReduceRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonElasticMapReduceRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-07-17T21:29:50+00:00",
|
|
"DefaultVersionId": "v8",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:AuthorizeSecurityGroupEgress",
|
|
"ec2:AuthorizeSecurityGroupIngress",
|
|
"ec2:CancelSpotInstanceRequests",
|
|
"ec2:CreateNetworkInterface",
|
|
"ec2:CreateSecurityGroup",
|
|
"ec2:CreateTags",
|
|
"ec2:DeleteNetworkInterface",
|
|
"ec2:DeleteSecurityGroup",
|
|
"ec2:DeleteTags",
|
|
"ec2:DescribeAvailabilityZones",
|
|
"ec2:DescribeAccountAttributes",
|
|
"ec2:DescribeDhcpOptions",
|
|
"ec2:DescribeImages",
|
|
"ec2:DescribeInstanceStatus",
|
|
"ec2:DescribeInstances",
|
|
"ec2:DescribeKeyPairs",
|
|
"ec2:DescribeNetworkAcls",
|
|
"ec2:DescribeNetworkInterfaces",
|
|
"ec2:DescribePrefixLists",
|
|
"ec2:DescribeRouteTables",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSpotInstanceRequests",
|
|
"ec2:DescribeSpotPriceHistory",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeTags",
|
|
"ec2:DescribeVpcAttribute",
|
|
"ec2:DescribeVpcEndpoints",
|
|
"ec2:DescribeVpcEndpointServices",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DetachNetworkInterface",
|
|
"ec2:ModifyImageAttribute",
|
|
"ec2:ModifyInstanceAttribute",
|
|
"ec2:RequestSpotInstances",
|
|
"ec2:RevokeSecurityGroupEgress",
|
|
"ec2:RunInstances",
|
|
"ec2:TerminateInstances",
|
|
"ec2:DeleteVolume",
|
|
"ec2:DescribeVolumeStatus",
|
|
"ec2:DescribeVolumes",
|
|
"ec2:DetachVolume",
|
|
"iam:GetRole",
|
|
"iam:GetRolePolicy",
|
|
"iam:ListInstanceProfiles",
|
|
"iam:ListRolePolicies",
|
|
"iam:PassRole",
|
|
"s3:CreateBucket",
|
|
"s3:Get*",
|
|
"s3:List*",
|
|
"sdb:BatchPutAttributes",
|
|
"sdb:Select",
|
|
"sqs:CreateQueue",
|
|
"sqs:Delete*",
|
|
"sqs:GetQueue*",
|
|
"sqs:PurgeQueue",
|
|
"sqs:ReceiveMessage",
|
|
"cloudwatch:PutMetricAlarm",
|
|
"cloudwatch:DescribeAlarms",
|
|
"cloudwatch:DeleteAlarms",
|
|
"application-autoscaling:RegisterScalableTarget",
|
|
"application-autoscaling:DeregisterScalableTarget",
|
|
"application-autoscaling:PutScalingPolicy",
|
|
"application-autoscaling:DeleteScalingPolicy",
|
|
"application-autoscaling:Describe*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAIDI2BQT2LKXZG36TW",
|
|
"PolicyName": "AmazonElasticMapReduceRole",
|
|
"UpdateDate": "2017-07-17T21:29:50+00:00",
|
|
"VersionId": "v8"
|
|
},
|
|
"AmazonElasticMapReduceforAutoScalingRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonElasticMapReduceforAutoScalingRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-11-18T01:09:10+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cloudwatch:DescribeAlarms",
|
|
"elasticmapreduce:ListInstanceGroups",
|
|
"elasticmapreduce:ModifyInstanceGroups"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJSVXG6QHPE6VHDZ4Q",
|
|
"PolicyName": "AmazonElasticMapReduceforAutoScalingRole",
|
|
"UpdateDate": "2016-11-18T01:09:10+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonElasticMapReduceforEC2Role": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonElasticMapReduceforEC2Role",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-11T23:57:30+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cloudwatch:*",
|
|
"dynamodb:*",
|
|
"ec2:Describe*",
|
|
"elasticmapreduce:Describe*",
|
|
"elasticmapreduce:ListBootstrapActions",
|
|
"elasticmapreduce:ListClusters",
|
|
"elasticmapreduce:ListInstanceGroups",
|
|
"elasticmapreduce:ListInstances",
|
|
"elasticmapreduce:ListSteps",
|
|
"kinesis:CreateStream",
|
|
"kinesis:DeleteStream",
|
|
"kinesis:DescribeStream",
|
|
"kinesis:GetRecords",
|
|
"kinesis:GetShardIterator",
|
|
"kinesis:MergeShards",
|
|
"kinesis:PutRecord",
|
|
"kinesis:SplitShard",
|
|
"rds:Describe*",
|
|
"s3:*",
|
|
"sdb:*",
|
|
"sns:*",
|
|
"sqs:*",
|
|
"glue:CreateDatabase",
|
|
"glue:UpdateDatabase",
|
|
"glue:DeleteDatabase",
|
|
"glue:GetDatabase",
|
|
"glue:GetDatabases",
|
|
"glue:CreateTable",
|
|
"glue:UpdateTable",
|
|
"glue:DeleteTable",
|
|
"glue:GetTable",
|
|
"glue:GetTables",
|
|
"glue:GetTableVersions",
|
|
"glue:CreatePartition",
|
|
"glue:BatchCreatePartition",
|
|
"glue:UpdatePartition",
|
|
"glue:DeletePartition",
|
|
"glue:BatchDeletePartition",
|
|
"glue:GetPartition",
|
|
"glue:GetPartitions",
|
|
"glue:BatchGetPartition",
|
|
"glue:CreateUserDefinedFunction",
|
|
"glue:UpdateUserDefinedFunction",
|
|
"glue:DeleteUserDefinedFunction",
|
|
"glue:GetUserDefinedFunction",
|
|
"glue:GetUserDefinedFunctions"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAIGALS5RCDLZLB3PGS",
|
|
"PolicyName": "AmazonElasticMapReduceforEC2Role",
|
|
"UpdateDate": "2017-08-11T23:57:30+00:00",
|
|
"VersionId": "v3"
|
|
},
|
|
"AmazonElasticTranscoderFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonElasticTranscoderFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:24+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"elastictranscoder:*",
|
|
"cloudfront:*",
|
|
"s3:List*",
|
|
"s3:Put*",
|
|
"s3:Get*",
|
|
"s3:*MultipartUpload*",
|
|
"iam:CreateRole",
|
|
"iam:GetRolePolicy",
|
|
"iam:PassRole",
|
|
"iam:PutRolePolicy",
|
|
"iam:List*",
|
|
"sns:CreateTopic",
|
|
"sns:List*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJ4D5OJU75P5ZJZVNY",
|
|
"PolicyName": "AmazonElasticTranscoderFullAccess",
|
|
"UpdateDate": "2015-02-06T18:40:24+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonElasticTranscoderJobsSubmitter": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonElasticTranscoderJobsSubmitter",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:25+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"elastictranscoder:Read*",
|
|
"elastictranscoder:List*",
|
|
"elastictranscoder:*Job",
|
|
"elastictranscoder:*Preset",
|
|
"s3:List*",
|
|
"iam:List*",
|
|
"sns:List*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIN5WGARIKZ3E2UQOU",
|
|
"PolicyName": "AmazonElasticTranscoderJobsSubmitter",
|
|
"UpdateDate": "2015-02-06T18:40:25+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonElasticTranscoderReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonElasticTranscoderReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:26+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"elastictranscoder:Read*",
|
|
"elastictranscoder:List*",
|
|
"s3:List*",
|
|
"iam:List*",
|
|
"sns:List*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJGPP7GPMJRRJMEP3Q",
|
|
"PolicyName": "AmazonElasticTranscoderReadOnlyAccess",
|
|
"UpdateDate": "2015-02-06T18:40:26+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonElasticTranscoderRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonElasticTranscoderRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:41:26+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"s3:ListBucket",
|
|
"s3:Put*",
|
|
"s3:Get*",
|
|
"s3:*MultipartUpload*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
],
|
|
"Sid": "1"
|
|
},
|
|
{
|
|
"Action": [
|
|
"sns:Publish"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
],
|
|
"Sid": "2"
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:*Policy*",
|
|
"sns:*Permission*",
|
|
"sns:*Delete*",
|
|
"s3:*Delete*",
|
|
"sns:*Remove*"
|
|
],
|
|
"Effect": "Deny",
|
|
"Resource": [
|
|
"*"
|
|
],
|
|
"Sid": "3"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJNW3WMKVXFJ2KPIQ2",
|
|
"PolicyName": "AmazonElasticTranscoderRole",
|
|
"UpdateDate": "2015-02-06T18:41:26+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonElasticsearchServiceRolePolicy": {
|
|
"Arn": "arn:aws:iam::aws:policy/aws-service-role/AmazonElasticsearchServiceRolePolicy",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-07-07T00:15:31+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:CreateNetworkInterface",
|
|
"ec2:DeleteNetworkInterface",
|
|
"ec2:DescribeNetworkInterfaces",
|
|
"ec2:ModifyNetworkInterfaceAttribute",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSubnets"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*",
|
|
"Sid": "Stmt1480452973134"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/aws-service-role/",
|
|
"PolicyId": "ANPAJFEWZPHXKLCVHEUIC",
|
|
"PolicyName": "AmazonElasticsearchServiceRolePolicy",
|
|
"UpdateDate": "2017-07-07T00:15:31+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonGlacierFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonGlacierFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:28+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": "glacier:*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJQSTZJWB2AXXAKHVQ",
|
|
"PolicyName": "AmazonGlacierFullAccess",
|
|
"UpdateDate": "2015-02-06T18:40:28+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonGlacierReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonGlacierReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-05-05T18:46:10+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"glacier:DescribeJob",
|
|
"glacier:DescribeVault",
|
|
"glacier:GetDataRetrievalPolicy",
|
|
"glacier:GetJobOutput",
|
|
"glacier:GetVaultAccessPolicy",
|
|
"glacier:GetVaultLock",
|
|
"glacier:GetVaultNotifications",
|
|
"glacier:ListJobs",
|
|
"glacier:ListMultipartUploads",
|
|
"glacier:ListParts",
|
|
"glacier:ListTagsForVault",
|
|
"glacier:ListVaults"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAI2D5NJKMU274MET4E",
|
|
"PolicyName": "AmazonGlacierReadOnlyAccess",
|
|
"UpdateDate": "2016-05-05T18:46:10+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AmazonInspectorFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonInspectorFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-09-12T17:42:57+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"inspector:*",
|
|
"ec2:DescribeInstances",
|
|
"ec2:DescribeTags",
|
|
"sns:ListTopics",
|
|
"events:DescribeRule",
|
|
"events:ListRuleNamesByTarget"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAI7Y6NTA27NWNA5U5E",
|
|
"PolicyName": "AmazonInspectorFullAccess",
|
|
"UpdateDate": "2017-09-12T17:42:57+00:00",
|
|
"VersionId": "v3"
|
|
},
|
|
"AmazonInspectorReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonInspectorReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-09-12T16:53:06+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"inspector:Describe*",
|
|
"inspector:Get*",
|
|
"inspector:List*",
|
|
"inspector:LocalizeText",
|
|
"inspector:Preview*",
|
|
"ec2:DescribeInstances",
|
|
"ec2:DescribeTags",
|
|
"sns:ListTopics",
|
|
"events:DescribeRule",
|
|
"events:ListRuleNamesByTarget"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJXQNTHTEJ2JFRN2SE",
|
|
"PolicyName": "AmazonInspectorReadOnlyAccess",
|
|
"UpdateDate": "2017-09-12T16:53:06+00:00",
|
|
"VersionId": "v3"
|
|
},
|
|
"AmazonKinesisAnalyticsFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonKinesisAnalyticsFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-09-21T19:01:14+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": "kinesisanalytics:*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"kinesis:CreateStream",
|
|
"kinesis:DeleteStream",
|
|
"kinesis:DescribeStream",
|
|
"kinesis:ListStreams",
|
|
"kinesis:PutRecord",
|
|
"kinesis:PutRecords"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"firehose:DescribeDeliveryStream",
|
|
"firehose:ListDeliveryStreams"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"cloudwatch:GetMetricStatistics",
|
|
"cloudwatch:ListMetrics"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": "logs:GetLogEvents",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:ListPolicyVersions",
|
|
"iam:ListRoles"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": "iam:PassRole",
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:iam::*:role/service-role/kinesis-analytics*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJQOSKHTXP43R7P5AC",
|
|
"PolicyName": "AmazonKinesisAnalyticsFullAccess",
|
|
"UpdateDate": "2016-09-21T19:01:14+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonKinesisAnalyticsReadOnly": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonKinesisAnalyticsReadOnly",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-09-21T18:16:43+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"kinesisanalytics:Describe*",
|
|
"kinesisanalytics:Get*",
|
|
"kinesisanalytics:List*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"kinesis:DescribeStream",
|
|
"kinesis:ListStreams"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"firehose:DescribeDeliveryStream",
|
|
"firehose:ListDeliveryStreams"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"cloudwatch:GetMetricStatistics",
|
|
"cloudwatch:ListMetrics"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": "logs:GetLogEvents",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:ListPolicyVersions",
|
|
"iam:ListRoles"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIJIEXZAFUK43U7ARK",
|
|
"PolicyName": "AmazonKinesisAnalyticsReadOnly",
|
|
"UpdateDate": "2016-09-21T18:16:43+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonKinesisFirehoseFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonKinesisFirehoseFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-10-07T18:45:26+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"firehose:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJMZQMTZ7FRBFHHAHI",
|
|
"PolicyName": "AmazonKinesisFirehoseFullAccess",
|
|
"UpdateDate": "2015-10-07T18:45:26+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonKinesisFirehoseReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonKinesisFirehoseReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-10-07T18:43:39+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"firehose:Describe*",
|
|
"firehose:List*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJ36NT645INW4K24W6",
|
|
"PolicyName": "AmazonKinesisFirehoseReadOnlyAccess",
|
|
"UpdateDate": "2015-10-07T18:43:39+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonKinesisFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonKinesisFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:29+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": "kinesis:*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIVF32HAMOXCUYRAYE",
|
|
"PolicyName": "AmazonKinesisFullAccess",
|
|
"UpdateDate": "2015-02-06T18:40:29+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonKinesisReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonKinesisReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:30+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"kinesis:Get*",
|
|
"kinesis:List*",
|
|
"kinesis:Describe*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIOCMTDT5RLKZ2CAJO",
|
|
"PolicyName": "AmazonKinesisReadOnlyAccess",
|
|
"UpdateDate": "2015-02-06T18:40:30+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonLexFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonLexFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-04-14T19:45:37+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cloudwatch:GetMetricStatistics",
|
|
"cloudwatch:DescribeAlarms",
|
|
"cloudwatch:DescribeAlarmsForMetric",
|
|
"kms:DescribeKey",
|
|
"kms:ListAliases",
|
|
"lambda:GetPolicy",
|
|
"lambda:ListFunctions",
|
|
"lex:*",
|
|
"polly:DescribeVoices",
|
|
"polly:SynthesizeSpeech"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"lambda:AddPermission",
|
|
"lambda:RemovePermission"
|
|
],
|
|
"Condition": {
|
|
"StringLike": {
|
|
"lambda:Principal": "lex.amazonaws.com"
|
|
}
|
|
},
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:lambda:*:*:function:AmazonLex*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:GetRole",
|
|
"iam:DeleteRole"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:iam::*:role/aws-service-role/lex.amazonaws.com/AWSServiceRoleForLexBots",
|
|
"arn:aws:iam::*:role/aws-service-role/channels.lex.amazonaws.com/AWSServiceRoleForLexChannels"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:CreateServiceLinkedRole"
|
|
],
|
|
"Condition": {
|
|
"StringLike": {
|
|
"iam:AWSServiceName": "lex.amazonaws.com"
|
|
}
|
|
},
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:iam::*:role/aws-service-role/lex.amazonaws.com/AWSServiceRoleForLexBots"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:DetachRolePolicy"
|
|
],
|
|
"Condition": {
|
|
"StringLike": {
|
|
"iam:PolicyArn": "arn:aws:iam::aws:policy/aws-service-role/AmazonLexBotPolicy"
|
|
}
|
|
},
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:iam::*:role/aws-service-role/lex.amazonaws.com/AWSServiceRoleForLexBots"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:CreateServiceLinkedRole"
|
|
],
|
|
"Condition": {
|
|
"StringLike": {
|
|
"iam:AWSServiceName": "channels.lex.amazonaws.com"
|
|
}
|
|
},
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:iam::*:role/aws-service-role/channels.lex.amazonaws.com/AWSServiceRoleForLexChannels"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:DetachRolePolicy"
|
|
],
|
|
"Condition": {
|
|
"StringLike": {
|
|
"iam:PolicyArn": "arn:aws:iam::aws:policy/aws-service-role/LexChannelPolicy"
|
|
}
|
|
},
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:iam::*:role/aws-service-role/channels.lex.amazonaws.com/AWSServiceRoleForLexChannels"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJVLXDHKVC23HRTKSI",
|
|
"PolicyName": "AmazonLexFullAccess",
|
|
"UpdateDate": "2017-04-14T19:45:37+00:00",
|
|
"VersionId": "v3"
|
|
},
|
|
"AmazonLexReadOnly": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonLexReadOnly",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-04-11T23:13:33+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"lex:GetBot",
|
|
"lex:GetBotAlias",
|
|
"lex:GetBotAliases",
|
|
"lex:GetBots",
|
|
"lex:GetBotChannelAssociation",
|
|
"lex:GetBotChannelAssociations",
|
|
"lex:GetBotVersions",
|
|
"lex:GetBuiltinIntent",
|
|
"lex:GetBuiltinIntents",
|
|
"lex:GetBuiltinSlotTypes",
|
|
"lex:GetIntent",
|
|
"lex:GetIntents",
|
|
"lex:GetIntentVersions",
|
|
"lex:GetSlotType",
|
|
"lex:GetSlotTypes",
|
|
"lex:GetSlotTypeVersions",
|
|
"lex:GetUtterancesView"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJGBI5LSMAJNDGBNAM",
|
|
"PolicyName": "AmazonLexReadOnly",
|
|
"UpdateDate": "2017-04-11T23:13:33+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonLexRunBotsOnly": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonLexRunBotsOnly",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-04-11T23:06:24+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"lex:PostContent",
|
|
"lex:PostText"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJVZGB5CM3N6YWJHBE",
|
|
"PolicyName": "AmazonLexRunBotsOnly",
|
|
"UpdateDate": "2017-04-11T23:06:24+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonMachineLearningBatchPredictionsAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonMachineLearningBatchPredictionsAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-04-09T17:12:19+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"machinelearning:CreateBatchPrediction",
|
|
"machinelearning:DeleteBatchPrediction",
|
|
"machinelearning:DescribeBatchPredictions",
|
|
"machinelearning:GetBatchPrediction",
|
|
"machinelearning:UpdateBatchPrediction"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAILOI4HTQSFTF3GQSC",
|
|
"PolicyName": "AmazonMachineLearningBatchPredictionsAccess",
|
|
"UpdateDate": "2015-04-09T17:12:19+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonMachineLearningCreateOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonMachineLearningCreateOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-06-29T20:55:03+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"machinelearning:Add*",
|
|
"machinelearning:Create*",
|
|
"machinelearning:Delete*",
|
|
"machinelearning:Describe*",
|
|
"machinelearning:Get*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJDRUNIC2RYAMAT3CK",
|
|
"PolicyName": "AmazonMachineLearningCreateOnlyAccess",
|
|
"UpdateDate": "2016-06-29T20:55:03+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AmazonMachineLearningFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonMachineLearningFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-04-09T17:25:41+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"machinelearning:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIWKW6AGSGYOQ5ERHC",
|
|
"PolicyName": "AmazonMachineLearningFullAccess",
|
|
"UpdateDate": "2015-04-09T17:25:41+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonMachineLearningManageRealTimeEndpointOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonMachineLearningManageRealTimeEndpointOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-04-09T17:32:41+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"machinelearning:CreateRealtimeEndpoint",
|
|
"machinelearning:DeleteRealtimeEndpoint"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJJL3PC3VCSVZP6OCI",
|
|
"PolicyName": "AmazonMachineLearningManageRealTimeEndpointOnlyAccess",
|
|
"UpdateDate": "2015-04-09T17:32:41+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonMachineLearningReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonMachineLearningReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-04-09T17:40:02+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"machinelearning:Describe*",
|
|
"machinelearning:Get*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIW5VYBCGEX56JCINC",
|
|
"PolicyName": "AmazonMachineLearningReadOnlyAccess",
|
|
"UpdateDate": "2015-04-09T17:40:02+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonMachineLearningRealTimePredictionOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonMachineLearningRealTimePredictionOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-04-09T17:44:06+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"machinelearning:Predict"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIWMCNQPRWMWT36GVQ",
|
|
"PolicyName": "AmazonMachineLearningRealTimePredictionOnlyAccess",
|
|
"UpdateDate": "2015-04-09T17:44:06+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonMachineLearningRoleforRedshiftDataSource": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonMachineLearningRoleforRedshiftDataSource",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-04-09T17:05:26+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:AuthorizeSecurityGroupIngress",
|
|
"ec2:CreateSecurityGroup",
|
|
"ec2:DescribeInternetGateways",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:RevokeSecurityGroupIngress",
|
|
"redshift:AuthorizeClusterSecurityGroupIngress",
|
|
"redshift:CreateClusterSecurityGroup",
|
|
"redshift:DescribeClusters",
|
|
"redshift:DescribeClusterSecurityGroups",
|
|
"redshift:ModifyCluster",
|
|
"redshift:RevokeClusterSecurityGroupIngress",
|
|
"s3:GetBucketLocation",
|
|
"s3:GetBucketPolicy",
|
|
"s3:GetObject",
|
|
"s3:PutBucketPolicy",
|
|
"s3:PutObject"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAIQ5UDYYMNN42BM4AK",
|
|
"PolicyName": "AmazonMachineLearningRoleforRedshiftDataSource",
|
|
"UpdateDate": "2015-04-09T17:05:26+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonMacieFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonMacieFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-14T14:54:30+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"macie:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJJF2N5FR6S5TZN5OA",
|
|
"PolicyName": "AmazonMacieFullAccess",
|
|
"UpdateDate": "2017-08-14T14:54:30+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonMacieServiceRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonMacieServiceRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-14T14:53:26+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"s3:Get*",
|
|
"s3:List*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJVV7PON3FPBL2PSGC",
|
|
"PolicyName": "AmazonMacieServiceRole",
|
|
"UpdateDate": "2017-08-14T14:53:26+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonMacieSetupRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonMacieSetupRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-14T14:53:34+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cloudtrail:DescribeTrails",
|
|
"cloudtrail:GetEventSelectors",
|
|
"cloudtrail:GetTrailStatus",
|
|
"cloudtrail:ListTags",
|
|
"cloudtrail:LookupEvents",
|
|
"iam:ListAccountAliases",
|
|
"s3:GetBucket*",
|
|
"s3:ListBucket",
|
|
"s3:ListAllMyBuckets"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"cloudtrail:CreateTrail",
|
|
"cloudtrail:StartLogging",
|
|
"cloudtrail:StopLogging",
|
|
"cloudtrail:UpdateTrail",
|
|
"cloudtrail:DeleteTrail",
|
|
"cloudtrail:PutEventSelectors"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:cloudtrail:*:*:trail/AWSMacieTrail-DO-NOT-EDIT"
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:CreateBucket",
|
|
"s3:DeleteBucket",
|
|
"s3:DeleteBucketPolicy",
|
|
"s3:DeleteBucketWebsite",
|
|
"s3:DeleteObject",
|
|
"s3:DeleteObjectTagging",
|
|
"s3:DeleteObjectVersion",
|
|
"s3:DeleteObjectVersionTagging",
|
|
"s3:DeleteReplicationConfiguration",
|
|
"s3:PutBucketPolicy"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::awsmacie-*",
|
|
"arn:aws:s3:::awsmacietrail-*",
|
|
"arn:aws:s3:::*-awsmacietrail-*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJ5DC6UBVKND7ADSKA",
|
|
"PolicyName": "AmazonMacieSetupRole",
|
|
"UpdateDate": "2017-08-14T14:53:34+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonMechanicalTurkFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonMechanicalTurkFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-12-11T19:08:19+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"mechanicalturk:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJDGCL5BET73H5QIQC",
|
|
"PolicyName": "AmazonMechanicalTurkFullAccess",
|
|
"UpdateDate": "2015-12-11T19:08:19+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonMechanicalTurkReadOnly": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonMechanicalTurkReadOnly",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-02-27T21:45:50+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"mechanicalturk:Get*",
|
|
"mechanicalturk:Search*",
|
|
"mechanicalturk:List*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIO5IY3G3WXSX5PPRM",
|
|
"PolicyName": "AmazonMechanicalTurkReadOnly",
|
|
"UpdateDate": "2017-02-27T21:45:50+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AmazonMobileAnalyticsFinancialReportAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonMobileAnalyticsFinancialReportAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:35+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"mobileanalytics:GetReports",
|
|
"mobileanalytics:GetFinancialReports"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJKJHO2R27TXKCWBU4",
|
|
"PolicyName": "AmazonMobileAnalyticsFinancialReportAccess",
|
|
"UpdateDate": "2015-02-06T18:40:35+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonMobileAnalyticsFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonMobileAnalyticsFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:34+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": "mobileanalytics:*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIJIKLU2IJ7WJ6DZFG",
|
|
"PolicyName": "AmazonMobileAnalyticsFullAccess",
|
|
"UpdateDate": "2015-02-06T18:40:34+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonMobileAnalyticsNon-financialReportAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonMobileAnalyticsNon-financialReportAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:36+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": "mobileanalytics:GetReports",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIQLKQ4RXPUBBVVRDE",
|
|
"PolicyName": "AmazonMobileAnalyticsNon-financialReportAccess",
|
|
"UpdateDate": "2015-02-06T18:40:36+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonMobileAnalyticsWriteOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonMobileAnalyticsWriteOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:37+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": "mobileanalytics:PutEvents",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJ5TAWBBQC2FAL3G6G",
|
|
"PolicyName": "AmazonMobileAnalyticsWriteOnlyAccess",
|
|
"UpdateDate": "2015-02-06T18:40:37+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonPollyFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonPollyFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-11-30T18:59:06+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"polly:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJUZOYQU6XQYPR7EWS",
|
|
"PolicyName": "AmazonPollyFullAccess",
|
|
"UpdateDate": "2016-11-30T18:59:06+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonPollyReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonPollyReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-11-30T18:59:24+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"polly:DescribeVoices",
|
|
"polly:GetLexicon",
|
|
"polly:ListLexicons",
|
|
"polly:SynthesizeSpeech"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJ5FENL3CVPL2FPDLA",
|
|
"PolicyName": "AmazonPollyReadOnlyAccess",
|
|
"UpdateDate": "2016-11-30T18:59:24+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonRDSDirectoryServiceAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonRDSDirectoryServiceAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-02-26T02:02:05+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ds:DescribeDirectories",
|
|
"ds:AuthorizeApplication",
|
|
"ds:UnauthorizeApplication"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAIL4KBY57XWMYUHKUU",
|
|
"PolicyName": "AmazonRDSDirectoryServiceAccess",
|
|
"UpdateDate": "2016-02-26T02:02:05+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonRDSEnhancedMonitoringRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonRDSEnhancedMonitoringRole",
|
|
"AttachmentCount": 1,
|
|
"CreateDate": "2015-11-11T19:58:29+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"logs:CreateLogGroup",
|
|
"logs:PutRetentionPolicy"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:logs:*:*:log-group:RDS*"
|
|
],
|
|
"Sid": "EnableCreationAndManagementOfRDSCloudwatchLogGroups"
|
|
},
|
|
{
|
|
"Action": [
|
|
"logs:CreateLogStream",
|
|
"logs:PutLogEvents",
|
|
"logs:DescribeLogStreams",
|
|
"logs:GetLogEvents"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:logs:*:*:log-group:RDS*:log-stream:*"
|
|
],
|
|
"Sid": "EnableCreationAndManagementOfRDSCloudwatchLogStreams"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJV7BS425S4PTSSVGK",
|
|
"PolicyName": "AmazonRDSEnhancedMonitoringRole",
|
|
"UpdateDate": "2015-11-11T19:58:29+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonRDSFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonRDSFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-09-14T23:40:45+00:00",
|
|
"DefaultVersionId": "v4",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"rds:*",
|
|
"cloudwatch:DescribeAlarms",
|
|
"cloudwatch:GetMetricStatistics",
|
|
"ec2:DescribeAccountAttributes",
|
|
"ec2:DescribeAvailabilityZones",
|
|
"ec2:DescribeInternetGateways",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVpcAttribute",
|
|
"ec2:DescribeVpcs",
|
|
"sns:ListSubscriptions",
|
|
"sns:ListTopics",
|
|
"logs:DescribeLogStreams",
|
|
"logs:GetLogEvents"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": "pi:*",
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:pi:*:*:metrics/rds/*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAI3R4QMOG6Q5A4VWVG",
|
|
"PolicyName": "AmazonRDSFullAccess",
|
|
"UpdateDate": "2017-09-14T23:40:45+00:00",
|
|
"VersionId": "v4"
|
|
},
|
|
"AmazonRDSReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonRDSReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-28T21:36:32+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"rds:Describe*",
|
|
"rds:ListTagsForResource",
|
|
"ec2:DescribeAccountAttributes",
|
|
"ec2:DescribeAvailabilityZones",
|
|
"ec2:DescribeInternetGateways",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVpcAttribute",
|
|
"ec2:DescribeVpcs"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"cloudwatch:GetMetricStatistics",
|
|
"logs:DescribeLogStreams",
|
|
"logs:GetLogEvents"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJKTTTYV2IIHKLZ346",
|
|
"PolicyName": "AmazonRDSReadOnlyAccess",
|
|
"UpdateDate": "2017-08-28T21:36:32+00:00",
|
|
"VersionId": "v3"
|
|
},
|
|
"AmazonRedshiftFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonRedshiftFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-09-19T18:27:44+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"redshift:*",
|
|
"ec2:DescribeAccountAttributes",
|
|
"ec2:DescribeAddresses",
|
|
"ec2:DescribeAvailabilityZones",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DescribeInternetGateways",
|
|
"sns:CreateTopic",
|
|
"sns:Get*",
|
|
"sns:List*",
|
|
"cloudwatch:Describe*",
|
|
"cloudwatch:Get*",
|
|
"cloudwatch:List*",
|
|
"cloudwatch:PutMetricAlarm",
|
|
"cloudwatch:EnableAlarmActions",
|
|
"cloudwatch:DisableAlarmActions"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": "iam:CreateServiceLinkedRole",
|
|
"Condition": {
|
|
"StringLike": {
|
|
"iam:AWSServiceName": "redshift.amazonaws.com"
|
|
}
|
|
},
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:iam::*:role/aws-service-role/redshift.amazonaws.com/AWSServiceRoleForRedshift"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAISEKCHH4YDB46B5ZO",
|
|
"PolicyName": "AmazonRedshiftFullAccess",
|
|
"UpdateDate": "2017-09-19T18:27:44+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AmazonRedshiftReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonRedshiftReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:51+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"redshift:Describe*",
|
|
"redshift:ViewQueriesInConsole",
|
|
"ec2:DescribeAccountAttributes",
|
|
"ec2:DescribeAddresses",
|
|
"ec2:DescribeAvailabilityZones",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DescribeInternetGateways",
|
|
"sns:Get*",
|
|
"sns:List*",
|
|
"cloudwatch:Describe*",
|
|
"cloudwatch:List*",
|
|
"cloudwatch:Get*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIGD46KSON64QBSEZM",
|
|
"PolicyName": "AmazonRedshiftReadOnlyAccess",
|
|
"UpdateDate": "2015-02-06T18:40:51+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonRedshiftServiceLinkedRolePolicy": {
|
|
"Arn": "arn:aws:iam::aws:policy/aws-service-role/AmazonRedshiftServiceLinkedRolePolicy",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-09-18T19:19:45+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeNetworkInterfaces",
|
|
"ec2:DescribeAddress",
|
|
"ec2:AssociateAddress",
|
|
"ec2:DisassociateAddress",
|
|
"ec2:CreateNetworkInterface",
|
|
"ec2:DeleteNetworkInterface",
|
|
"ec2:ModifyNetworkInterfaceAttribute"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/aws-service-role/",
|
|
"PolicyId": "ANPAJPY2VXNRUYOY3SRZS",
|
|
"PolicyName": "AmazonRedshiftServiceLinkedRolePolicy",
|
|
"UpdateDate": "2017-09-18T19:19:45+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonRekognitionFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonRekognitionFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-11-30T14:40:44+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"rekognition:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIWDAOK6AIFDVX6TT6",
|
|
"PolicyName": "AmazonRekognitionFullAccess",
|
|
"UpdateDate": "2016-11-30T14:40:44+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonRekognitionReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonRekognitionReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-11-30T14:58:06+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"rekognition:CompareFaces",
|
|
"rekognition:DetectFaces",
|
|
"rekognition:DetectLabels",
|
|
"rekognition:ListCollections",
|
|
"rekognition:ListFaces",
|
|
"rekognition:SearchFaces",
|
|
"rekognition:SearchFacesByImage"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAILWSUHXUY4ES43SA4",
|
|
"PolicyName": "AmazonRekognitionReadOnlyAccess",
|
|
"UpdateDate": "2016-11-30T14:58:06+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonRoute53DomainsFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonRoute53DomainsFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:56+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"route53:CreateHostedZone",
|
|
"route53domains:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIPAFBMIYUILMOKL6G",
|
|
"PolicyName": "AmazonRoute53DomainsFullAccess",
|
|
"UpdateDate": "2015-02-06T18:40:56+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonRoute53DomainsReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonRoute53DomainsReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:57+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"route53domains:Get*",
|
|
"route53domains:List*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIDRINP6PPTRXYVQCI",
|
|
"PolicyName": "AmazonRoute53DomainsReadOnlyAccess",
|
|
"UpdateDate": "2015-02-06T18:40:57+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonRoute53FullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonRoute53FullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-02-14T21:25:53+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"route53:*",
|
|
"route53domains:*",
|
|
"cloudfront:ListDistributions",
|
|
"elasticloadbalancing:DescribeLoadBalancers",
|
|
"elasticbeanstalk:DescribeEnvironments",
|
|
"s3:ListBucket",
|
|
"s3:GetBucketLocation",
|
|
"s3:GetBucketWebsiteConfiguration",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DescribeRegions",
|
|
"sns:ListTopics",
|
|
"sns:ListSubscriptionsByTopic",
|
|
"cloudwatch:DescribeAlarms",
|
|
"cloudwatch:GetMetricStatistics"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJWVDLG5RPST6PHQ3A",
|
|
"PolicyName": "AmazonRoute53FullAccess",
|
|
"UpdateDate": "2017-02-14T21:25:53+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AmazonRoute53ReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonRoute53ReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-11-15T21:15:16+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"route53:Get*",
|
|
"route53:List*",
|
|
"route53:TestDNSAnswer"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAITOYK2ZAOQFXV2JNC",
|
|
"PolicyName": "AmazonRoute53ReadOnlyAccess",
|
|
"UpdateDate": "2016-11-15T21:15:16+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AmazonS3FullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonS3FullAccess",
|
|
"AttachmentCount": 1,
|
|
"CreateDate": "2015-02-06T18:40:58+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": "s3:*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIFIR6V6BVTRAHWINE",
|
|
"PolicyName": "AmazonS3FullAccess",
|
|
"UpdateDate": "2015-02-06T18:40:58+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonS3ReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:59+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"s3:Get*",
|
|
"s3:List*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIZTJ4DXE7G6AGAE6M",
|
|
"PolicyName": "AmazonS3ReadOnlyAccess",
|
|
"UpdateDate": "2015-02-06T18:40:59+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonSESFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonSESFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:41:02+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ses:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJ2P4NXCHAT7NDPNR4",
|
|
"PolicyName": "AmazonSESFullAccess",
|
|
"UpdateDate": "2015-02-06T18:41:02+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonSESReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonSESReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:41:03+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ses:Get*",
|
|
"ses:List*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAINV2XPFRMWJJNSCGI",
|
|
"PolicyName": "AmazonSESReadOnlyAccess",
|
|
"UpdateDate": "2015-02-06T18:41:03+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonSNSFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonSNSFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:41:05+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"sns:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJWEKLCXXUNT2SOLSG",
|
|
"PolicyName": "AmazonSNSFullAccess",
|
|
"UpdateDate": "2015-02-06T18:41:05+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonSNSReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonSNSReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:41:06+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"sns:GetTopicAttributes",
|
|
"sns:List*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIZGQCQTFOFPMHSB6W",
|
|
"PolicyName": "AmazonSNSReadOnlyAccess",
|
|
"UpdateDate": "2015-02-06T18:41:06+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonSNSRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonSNSRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:41:30+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"logs:CreateLogGroup",
|
|
"logs:CreateLogStream",
|
|
"logs:PutLogEvents",
|
|
"logs:PutMetricFilter",
|
|
"logs:PutRetentionPolicy"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJK5GQB7CIK7KHY2GA",
|
|
"PolicyName": "AmazonSNSRole",
|
|
"UpdateDate": "2015-02-06T18:41:30+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonSQSFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonSQSFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:41:07+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"sqs:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAI65L554VRJ33ECQS6",
|
|
"PolicyName": "AmazonSQSFullAccess",
|
|
"UpdateDate": "2015-02-06T18:41:07+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonSQSReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonSQSReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:41:08+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"sqs:GetQueueAttributes",
|
|
"sqs:ListQueues"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIUGSSQY362XGCM6KW",
|
|
"PolicyName": "AmazonSQSReadOnlyAccess",
|
|
"UpdateDate": "2015-02-06T18:41:08+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonSSMAutomationApproverAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonSSMAutomationApproverAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-07T23:07:28+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ssm:DescribeAutomationExecutions",
|
|
"ssm:GetAutomationExecution",
|
|
"ssm:SendAutomationSignal"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIDSSXIRWBSLWWIORC",
|
|
"PolicyName": "AmazonSSMAutomationApproverAccess",
|
|
"UpdateDate": "2017-08-07T23:07:28+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonSSMAutomationRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonSSMAutomationRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-07-24T23:29:12+00:00",
|
|
"DefaultVersionId": "v5",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"lambda:InvokeFunction"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:lambda:*:*:function:Automation*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"ec2:CreateImage",
|
|
"ec2:CopyImage",
|
|
"ec2:DeregisterImage",
|
|
"ec2:DescribeImages",
|
|
"ec2:DeleteSnapshot",
|
|
"ec2:StartInstances",
|
|
"ec2:RunInstances",
|
|
"ec2:StopInstances",
|
|
"ec2:TerminateInstances",
|
|
"ec2:DescribeInstanceStatus",
|
|
"ec2:CreateTags",
|
|
"ec2:DeleteTags",
|
|
"ec2:DescribeTags",
|
|
"cloudformation:CreateStack",
|
|
"cloudformation:DescribeStackEvents",
|
|
"cloudformation:DescribeStacks",
|
|
"cloudformation:UpdateStack",
|
|
"cloudformation:DeleteStack"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"ssm:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"sns:Publish"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:sns:*:*:Automation*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJIBQCTBCXD2XRNB6W",
|
|
"PolicyName": "AmazonSSMAutomationRole",
|
|
"UpdateDate": "2017-07-24T23:29:12+00:00",
|
|
"VersionId": "v5"
|
|
},
|
|
"AmazonSSMFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonSSMFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-03-07T21:09:12+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cloudwatch:PutMetricData",
|
|
"ds:CreateComputer",
|
|
"ds:DescribeDirectories",
|
|
"ec2:DescribeInstanceStatus",
|
|
"logs:*",
|
|
"ssm:*",
|
|
"ec2messages:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJA7V6HI4ISQFMDYAG",
|
|
"PolicyName": "AmazonSSMFullAccess",
|
|
"UpdateDate": "2016-03-07T21:09:12+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AmazonSSMMaintenanceWindowRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AmazonSSMMaintenanceWindowRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-09T20:49:14+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ssm:GetAutomationExecution",
|
|
"ssm:GetParameters",
|
|
"ssm:ListCommands",
|
|
"ssm:SendCommand",
|
|
"ssm:StartAutomationExecution"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
],
|
|
"Sid": "Stmt1477803259000"
|
|
},
|
|
{
|
|
"Action": [
|
|
"lambda:InvokeFunction"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:lambda:*:*:function:SSM*",
|
|
"arn:aws:lambda:*:*:function:*:SSM*"
|
|
],
|
|
"Sid": "Stmt1477803259001"
|
|
},
|
|
{
|
|
"Action": [
|
|
"states:DescribeExecution",
|
|
"states:StartExecution"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:states:*:*:stateMachine:SSM*",
|
|
"arn:aws:states:*:*:execution:SSM*"
|
|
],
|
|
"Sid": "Stmt1477803259002"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJV3JNYSTZ47VOXYME",
|
|
"PolicyName": "AmazonSSMMaintenanceWindowRole",
|
|
"UpdateDate": "2017-08-09T20:49:14+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AmazonSSMReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonSSMReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-05-29T17:44:19+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ssm:Describe*",
|
|
"ssm:Get*",
|
|
"ssm:List*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJODSKQGGJTHRYZ5FC",
|
|
"PolicyName": "AmazonSSMReadOnlyAccess",
|
|
"UpdateDate": "2015-05-29T17:44:19+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonVPCCrossAccountNetworkInterfaceOperations": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonVPCCrossAccountNetworkInterfaceOperations",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-07-18T20:47:16+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:DescribeRouteTables",
|
|
"ec2:CreateRoute",
|
|
"ec2:DeleteRoute",
|
|
"ec2:ReplaceRoute"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"ec2:DescribeNetworkInterfaces",
|
|
"ec2:CreateNetworkInterface",
|
|
"ec2:DeleteNetworkInterface",
|
|
"ec2:CreateNetworkInterfacePermission",
|
|
"ec2:ModifyNetworkInterfaceAttribute",
|
|
"ec2:DescribeNetworkInterfaceAttribute",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DescribeSubnets"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"ec2:AssignPrivateIpAddresses",
|
|
"ec2:UnassignPrivateIpAddresses"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJ53Y4ZY5OHP4CNRJC",
|
|
"PolicyName": "AmazonVPCCrossAccountNetworkInterfaceOperations",
|
|
"UpdateDate": "2017-07-18T20:47:16+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonVPCFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonVPCFullAccess",
|
|
"AttachmentCount": 1,
|
|
"CreateDate": "2015-12-17T17:25:44+00:00",
|
|
"DefaultVersionId": "v5",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:AcceptVpcPeeringConnection",
|
|
"ec2:AllocateAddress",
|
|
"ec2:AssignPrivateIpAddresses",
|
|
"ec2:AssociateAddress",
|
|
"ec2:AssociateDhcpOptions",
|
|
"ec2:AssociateRouteTable",
|
|
"ec2:AttachClassicLinkVpc",
|
|
"ec2:AttachInternetGateway",
|
|
"ec2:AttachNetworkInterface",
|
|
"ec2:AttachVpnGateway",
|
|
"ec2:AuthorizeSecurityGroupEgress",
|
|
"ec2:AuthorizeSecurityGroupIngress",
|
|
"ec2:CreateCustomerGateway",
|
|
"ec2:CreateDhcpOptions",
|
|
"ec2:CreateFlowLogs",
|
|
"ec2:CreateInternetGateway",
|
|
"ec2:CreateNatGateway",
|
|
"ec2:CreateNetworkAcl",
|
|
"ec2:CreateNetworkAcl",
|
|
"ec2:CreateNetworkAclEntry",
|
|
"ec2:CreateNetworkInterface",
|
|
"ec2:CreateRoute",
|
|
"ec2:CreateRouteTable",
|
|
"ec2:CreateSecurityGroup",
|
|
"ec2:CreateSubnet",
|
|
"ec2:CreateTags",
|
|
"ec2:CreateVpc",
|
|
"ec2:CreateVpcEndpoint",
|
|
"ec2:CreateVpcPeeringConnection",
|
|
"ec2:CreateVpnConnection",
|
|
"ec2:CreateVpnConnectionRoute",
|
|
"ec2:CreateVpnGateway",
|
|
"ec2:DeleteCustomerGateway",
|
|
"ec2:DeleteDhcpOptions",
|
|
"ec2:DeleteFlowLogs",
|
|
"ec2:DeleteInternetGateway",
|
|
"ec2:DeleteNatGateway",
|
|
"ec2:DeleteNetworkAcl",
|
|
"ec2:DeleteNetworkAclEntry",
|
|
"ec2:DeleteNetworkInterface",
|
|
"ec2:DeleteRoute",
|
|
"ec2:DeleteRouteTable",
|
|
"ec2:DeleteSecurityGroup",
|
|
"ec2:DeleteSubnet",
|
|
"ec2:DeleteTags",
|
|
"ec2:DeleteVpc",
|
|
"ec2:DeleteVpcEndpoints",
|
|
"ec2:DeleteVpcPeeringConnection",
|
|
"ec2:DeleteVpnConnection",
|
|
"ec2:DeleteVpnConnectionRoute",
|
|
"ec2:DeleteVpnGateway",
|
|
"ec2:DescribeAddresses",
|
|
"ec2:DescribeAvailabilityZones",
|
|
"ec2:DescribeClassicLinkInstances",
|
|
"ec2:DescribeCustomerGateways",
|
|
"ec2:DescribeDhcpOptions",
|
|
"ec2:DescribeFlowLogs",
|
|
"ec2:DescribeInstances",
|
|
"ec2:DescribeInternetGateways",
|
|
"ec2:DescribeKeyPairs",
|
|
"ec2:DescribeMovingAddresses",
|
|
"ec2:DescribeNatGateways",
|
|
"ec2:DescribeNetworkAcls",
|
|
"ec2:DescribeNetworkInterfaceAttribute",
|
|
"ec2:DescribeNetworkInterfaces",
|
|
"ec2:DescribePrefixLists",
|
|
"ec2:DescribeRouteTables",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeTags",
|
|
"ec2:DescribeVpcAttribute",
|
|
"ec2:DescribeVpcClassicLink",
|
|
"ec2:DescribeVpcEndpoints",
|
|
"ec2:DescribeVpcEndpointServices",
|
|
"ec2:DescribeVpcPeeringConnections",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DescribeVpnConnections",
|
|
"ec2:DescribeVpnGateways",
|
|
"ec2:DetachClassicLinkVpc",
|
|
"ec2:DetachInternetGateway",
|
|
"ec2:DetachNetworkInterface",
|
|
"ec2:DetachVpnGateway",
|
|
"ec2:DisableVgwRoutePropagation",
|
|
"ec2:DisableVpcClassicLink",
|
|
"ec2:DisassociateAddress",
|
|
"ec2:DisassociateRouteTable",
|
|
"ec2:EnableVgwRoutePropagation",
|
|
"ec2:EnableVpcClassicLink",
|
|
"ec2:ModifyNetworkInterfaceAttribute",
|
|
"ec2:ModifySubnetAttribute",
|
|
"ec2:ModifyVpcAttribute",
|
|
"ec2:ModifyVpcEndpoint",
|
|
"ec2:MoveAddressToVpc",
|
|
"ec2:RejectVpcPeeringConnection",
|
|
"ec2:ReleaseAddress",
|
|
"ec2:ReplaceNetworkAclAssociation",
|
|
"ec2:ReplaceNetworkAclEntry",
|
|
"ec2:ReplaceRoute",
|
|
"ec2:ReplaceRouteTableAssociation",
|
|
"ec2:ResetNetworkInterfaceAttribute",
|
|
"ec2:RestoreAddressToClassic",
|
|
"ec2:RevokeSecurityGroupEgress",
|
|
"ec2:RevokeSecurityGroupIngress",
|
|
"ec2:UnassignPrivateIpAddresses"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJBWPGNOVKZD3JI2P2",
|
|
"PolicyName": "AmazonVPCFullAccess",
|
|
"UpdateDate": "2015-12-17T17:25:44+00:00",
|
|
"VersionId": "v5"
|
|
},
|
|
"AmazonVPCReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonVPCReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-12-17T17:25:56+00:00",
|
|
"DefaultVersionId": "v4",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:DescribeAddresses",
|
|
"ec2:DescribeClassicLinkInstances",
|
|
"ec2:DescribeCustomerGateways",
|
|
"ec2:DescribeDhcpOptions",
|
|
"ec2:DescribeFlowLogs",
|
|
"ec2:DescribeInternetGateways",
|
|
"ec2:DescribeMovingAddresses",
|
|
"ec2:DescribeNatGateways",
|
|
"ec2:DescribeNetworkAcls",
|
|
"ec2:DescribeNetworkInterfaceAttribute",
|
|
"ec2:DescribeNetworkInterfaces",
|
|
"ec2:DescribePrefixLists",
|
|
"ec2:DescribeRouteTables",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeTags",
|
|
"ec2:DescribeVpcAttribute",
|
|
"ec2:DescribeVpcClassicLink",
|
|
"ec2:DescribeVpcEndpoints",
|
|
"ec2:DescribeVpcEndpointServices",
|
|
"ec2:DescribeVpcPeeringConnections",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DescribeVpnConnections",
|
|
"ec2:DescribeVpnGateways"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIICZJNOJN36GTG6CM",
|
|
"PolicyName": "AmazonVPCReadOnlyAccess",
|
|
"UpdateDate": "2015-12-17T17:25:56+00:00",
|
|
"VersionId": "v4"
|
|
},
|
|
"AmazonWorkMailFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonWorkMailFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-04-20T08:35:49+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ds:AuthorizeApplication",
|
|
"ds:CheckAlias",
|
|
"ds:CreateAlias",
|
|
"ds:CreateDirectory",
|
|
"ds:CreateIdentityPoolDirectory",
|
|
"ds:CreateDomain",
|
|
"ds:DeleteAlias",
|
|
"ds:DeleteDirectory",
|
|
"ds:DescribeDirectories",
|
|
"ds:ExtendDirectory",
|
|
"ds:GetDirectoryLimits",
|
|
"ds:ListAuthorizedApplications",
|
|
"ds:UnauthorizeApplication",
|
|
"ec2:AuthorizeSecurityGroupEgress",
|
|
"ec2:AuthorizeSecurityGroupIngress",
|
|
"ec2:CreateNetworkInterface",
|
|
"ec2:CreateSecurityGroup",
|
|
"ec2:CreateSubnet",
|
|
"ec2:CreateTags",
|
|
"ec2:CreateVpc",
|
|
"ec2:DeleteSecurityGroup",
|
|
"ec2:DeleteSubnet",
|
|
"ec2:DeleteVpc",
|
|
"ec2:DescribeAvailabilityZones",
|
|
"ec2:DescribeDomains",
|
|
"ec2:DescribeRouteTables",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:RevokeSecurityGroupEgress",
|
|
"ec2:RevokeSecurityGroupIngress",
|
|
"kms:DescribeKey",
|
|
"kms:ListAliases",
|
|
"ses:*",
|
|
"workmail:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJQVKNMT7SVATQ4AUY",
|
|
"PolicyName": "AmazonWorkMailFullAccess",
|
|
"UpdateDate": "2017-04-20T08:35:49+00:00",
|
|
"VersionId": "v3"
|
|
},
|
|
"AmazonWorkMailReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonWorkMailReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:42+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ses:Describe*",
|
|
"ses:Get*",
|
|
"workmail:Describe*",
|
|
"workmail:Get*",
|
|
"workmail:List*",
|
|
"workmail:Search*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJHF7J65E2QFKCWAJM",
|
|
"PolicyName": "AmazonWorkMailReadOnlyAccess",
|
|
"UpdateDate": "2015-02-06T18:40:42+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonWorkSpacesAdmin": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonWorkSpacesAdmin",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-08-18T23:08:42+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"workspaces:CreateWorkspaces",
|
|
"workspaces:DescribeWorkspaces",
|
|
"workspaces:RebootWorkspaces",
|
|
"workspaces:RebuildWorkspaces",
|
|
"workspaces:TerminateWorkspaces",
|
|
"workspaces:DescribeWorkspaceDirectories",
|
|
"workspaces:DescribeWorkspaceBundles",
|
|
"workspaces:ModifyWorkspaceProperties",
|
|
"workspaces:StopWorkspaces",
|
|
"workspaces:StartWorkspaces",
|
|
"workspaces:DescribeWorkspacesConnectionStatus",
|
|
"workspaces:CreateTags",
|
|
"workspaces:DeleteTags",
|
|
"workspaces:DescribeTags",
|
|
"kms:ListKeys",
|
|
"kms:ListAliases",
|
|
"kms:DescribeKey"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJ26AU6ATUQCT5KVJU",
|
|
"PolicyName": "AmazonWorkSpacesAdmin",
|
|
"UpdateDate": "2016-08-18T23:08:42+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"AmazonWorkSpacesApplicationManagerAdminAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonWorkSpacesApplicationManagerAdminAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-04-09T14:03:18+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": "wam:AuthenticatePackager",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJPRL4KYETIH7XGTSS",
|
|
"PolicyName": "AmazonWorkSpacesApplicationManagerAdminAccess",
|
|
"UpdateDate": "2015-04-09T14:03:18+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonZocaloFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonZocaloFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:41:13+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"zocalo:*",
|
|
"ds:*",
|
|
"ec2:AuthorizeSecurityGroupEgress",
|
|
"ec2:AuthorizeSecurityGroupIngress",
|
|
"ec2:CreateNetworkInterface",
|
|
"ec2:CreateSecurityGroup",
|
|
"ec2:CreateSubnet",
|
|
"ec2:CreateTags",
|
|
"ec2:CreateVpc",
|
|
"ec2:DescribeAvailabilityZones",
|
|
"ec2:DescribeNetworkInterfaces",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DeleteNetworkInterface",
|
|
"ec2:DeleteSecurityGroup",
|
|
"ec2:RevokeSecurityGroupEgress",
|
|
"ec2:RevokeSecurityGroupIngress"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJLCDXYRINDMUXEVL6",
|
|
"PolicyName": "AmazonZocaloFullAccess",
|
|
"UpdateDate": "2015-02-06T18:41:13+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AmazonZocaloReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AmazonZocaloReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:41:14+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"zocalo:Describe*",
|
|
"ds:DescribeDirectories",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DescribeSubnets"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAISRCSSJNS3QPKZJPM",
|
|
"PolicyName": "AmazonZocaloReadOnlyAccess",
|
|
"UpdateDate": "2015-02-06T18:41:14+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"ApplicationAutoScalingForAmazonAppStreamAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/ApplicationAutoScalingForAmazonAppStreamAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-02-06T21:39:56+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"appstream:UpdateFleet",
|
|
"appstream:DescribeFleets"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"cloudwatch:DescribeAlarms"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAIEL3HJCCWFVHA6KPG",
|
|
"PolicyName": "ApplicationAutoScalingForAmazonAppStreamAccess",
|
|
"UpdateDate": "2017-02-06T21:39:56+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AutoScalingConsoleFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AutoScalingConsoleFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-01-12T19:43:16+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:AuthorizeSecurityGroupIngress",
|
|
"ec2:CreateKeyPair",
|
|
"ec2:CreateSecurityGroup",
|
|
"ec2:DescribeAvailabilityZones",
|
|
"ec2:DescribeImages",
|
|
"ec2:DescribeKeyPairs",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DescribeVpcClassicLink",
|
|
"ec2:ImportKeyPair"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": "elasticloadbalancing:Describe*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"cloudwatch:ListMetrics",
|
|
"cloudwatch:GetMetricStatistics",
|
|
"cloudwatch:PutMetricAlarm",
|
|
"cloudwatch:Describe*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": "autoscaling:*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"sns:ListSubscriptions",
|
|
"sns:ListTopics"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIYEN6FJGYYWJFFCZW",
|
|
"PolicyName": "AutoScalingConsoleFullAccess",
|
|
"UpdateDate": "2017-01-12T19:43:16+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AutoScalingConsoleReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AutoScalingConsoleReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-01-12T19:48:53+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DescribeVpcClassicLink",
|
|
"ec2:DescribeAvailabilityZones",
|
|
"ec2:DescribeSubnets"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": "elasticloadbalancing:Describe*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"cloudwatch:ListMetrics",
|
|
"cloudwatch:GetMetricStatistics",
|
|
"cloudwatch:Describe*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": "autoscaling:Describe*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"sns:ListSubscriptions",
|
|
"sns:ListTopics"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAI3A7GDXOYQV3VUQMK",
|
|
"PolicyName": "AutoScalingConsoleReadOnlyAccess",
|
|
"UpdateDate": "2017-01-12T19:48:53+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AutoScalingFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AutoScalingFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-01-12T19:31:58+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": "autoscaling:*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": "cloudwatch:PutMetricAlarm",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIAWRCSJDDXDXGPCFU",
|
|
"PolicyName": "AutoScalingFullAccess",
|
|
"UpdateDate": "2017-01-12T19:31:58+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AutoScalingNotificationAccessRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/AutoScalingNotificationAccessRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:41:22+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"sqs:SendMessage",
|
|
"sqs:GetQueueUrl",
|
|
"sns:Publish"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAIO2VMUPGDC5PZVXVA",
|
|
"PolicyName": "AutoScalingNotificationAccessRole",
|
|
"UpdateDate": "2015-02-06T18:41:22+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"AutoScalingReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/AutoScalingReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-01-12T19:39:35+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": "autoscaling:Describe*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIAFWUVLC2LPLSFTFG",
|
|
"PolicyName": "AutoScalingReadOnlyAccess",
|
|
"UpdateDate": "2017-01-12T19:39:35+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"Billing": {
|
|
"Arn": "arn:aws:iam::aws:policy/job-function/Billing",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-11-10T17:33:18+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"aws-portal:*Billing",
|
|
"aws-portal:*Usage",
|
|
"aws-portal:*PaymentMethods",
|
|
"budgets:ViewBudget",
|
|
"budgets:ModifyBudget"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/job-function/",
|
|
"PolicyId": "ANPAIFTHXT6FFMIRT7ZEA",
|
|
"PolicyName": "Billing",
|
|
"UpdateDate": "2016-11-10T17:33:18+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"CloudFrontFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/CloudFrontFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-01-21T17:03:57+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"s3:ListAllMyBuckets"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:s3:::*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"acm:ListCertificates",
|
|
"cloudfront:*",
|
|
"iam:ListServerCertificates",
|
|
"waf:ListWebACLs",
|
|
"waf:GetWebACL"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIPRV52SH6HDCCFY6U",
|
|
"PolicyName": "CloudFrontFullAccess",
|
|
"UpdateDate": "2016-01-21T17:03:57+00:00",
|
|
"VersionId": "v3"
|
|
},
|
|
"CloudFrontReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/CloudFrontReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-01-21T17:03:28+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"acm:ListCertificates",
|
|
"cloudfront:Get*",
|
|
"cloudfront:List*",
|
|
"iam:ListServerCertificates",
|
|
"route53:List*",
|
|
"waf:ListWebACLs",
|
|
"waf:GetWebACL"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJJZMNYOTZCNQP36LG",
|
|
"PolicyName": "CloudFrontReadOnlyAccess",
|
|
"UpdateDate": "2016-01-21T17:03:28+00:00",
|
|
"VersionId": "v3"
|
|
},
|
|
"CloudSearchFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/CloudSearchFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:39:56+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cloudsearch:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIM6OOWKQ7L7VBOZOC",
|
|
"PolicyName": "CloudSearchFullAccess",
|
|
"UpdateDate": "2015-02-06T18:39:56+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"CloudSearchReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/CloudSearchReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:39:57+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cloudsearch:Describe*",
|
|
"cloudsearch:List*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJWPLX7N7BCC3RZLHW",
|
|
"PolicyName": "CloudSearchReadOnlyAccess",
|
|
"UpdateDate": "2015-02-06T18:39:57+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"CloudWatchActionsEC2Access": {
|
|
"Arn": "arn:aws:iam::aws:policy/CloudWatchActionsEC2Access",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-07-07T00:00:33+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cloudwatch:Describe*",
|
|
"ec2:Describe*",
|
|
"ec2:RebootInstances",
|
|
"ec2:StopInstances",
|
|
"ec2:TerminateInstances"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIOWD4E3FVSORSZTGU",
|
|
"PolicyName": "CloudWatchActionsEC2Access",
|
|
"UpdateDate": "2015-07-07T00:00:33+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"CloudWatchEventsBuiltInTargetExecutionAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/CloudWatchEventsBuiltInTargetExecutionAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-01-14T18:35:49+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:Describe*",
|
|
"ec2:RebootInstances",
|
|
"ec2:StopInstances",
|
|
"ec2:TerminateInstances",
|
|
"ec2:CreateSnapshot"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*",
|
|
"Sid": "CloudWatchEventsBuiltInTargetExecutionAccess"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAIC5AQ5DATYSNF4AUM",
|
|
"PolicyName": "CloudWatchEventsBuiltInTargetExecutionAccess",
|
|
"UpdateDate": "2016-01-14T18:35:49+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"CloudWatchEventsFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/CloudWatchEventsFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-01-14T18:37:08+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": "events:*",
|
|
"Effect": "Allow",
|
|
"Resource": "*",
|
|
"Sid": "CloudWatchEventsFullAccess"
|
|
},
|
|
{
|
|
"Action": "iam:PassRole",
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:iam::*:role/AWS_Events_Invoke_Targets",
|
|
"Sid": "IAMPassRoleForCloudWatchEvents"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJZLOYLNHESMYOJAFU",
|
|
"PolicyName": "CloudWatchEventsFullAccess",
|
|
"UpdateDate": "2016-01-14T18:37:08+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"CloudWatchEventsInvocationAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/CloudWatchEventsInvocationAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-01-14T18:36:33+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"kinesis:PutRecord"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*",
|
|
"Sid": "CloudWatchEventsInvocationAccess"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJJXD6JKJLK2WDLZNO",
|
|
"PolicyName": "CloudWatchEventsInvocationAccess",
|
|
"UpdateDate": "2016-01-14T18:36:33+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"CloudWatchEventsReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/CloudWatchEventsReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-10T17:25:34+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"events:DescribeRule",
|
|
"events:ListRuleNamesByTarget",
|
|
"events:ListRules",
|
|
"events:ListTargetsByRule",
|
|
"events:TestEventPattern",
|
|
"events:DescribeEventBus"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*",
|
|
"Sid": "CloudWatchEventsReadOnlyAccess"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIILJPXXA6F7GYLYBS",
|
|
"PolicyName": "CloudWatchEventsReadOnlyAccess",
|
|
"UpdateDate": "2017-08-10T17:25:34+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"CloudWatchFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/CloudWatchFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:00+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"autoscaling:Describe*",
|
|
"cloudwatch:*",
|
|
"logs:*",
|
|
"sns:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIKEABORKUXN6DEAZU",
|
|
"PolicyName": "CloudWatchFullAccess",
|
|
"UpdateDate": "2015-02-06T18:40:00+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"CloudWatchLogsFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/CloudWatchLogsFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:02+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"logs:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJ3ZGNWK2R5HW5BQFO",
|
|
"PolicyName": "CloudWatchLogsFullAccess",
|
|
"UpdateDate": "2015-02-06T18:40:02+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"CloudWatchLogsReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/CloudWatchLogsReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-14T22:22:16+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"logs:Describe*",
|
|
"logs:Get*",
|
|
"logs:List*",
|
|
"logs:TestMetricFilter",
|
|
"logs:FilterLogEvents"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJ2YIYDYSNNEHK3VKW",
|
|
"PolicyName": "CloudWatchLogsReadOnlyAccess",
|
|
"UpdateDate": "2017-08-14T22:22:16+00:00",
|
|
"VersionId": "v3"
|
|
},
|
|
"CloudWatchReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/CloudWatchReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:40:01+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"autoscaling:Describe*",
|
|
"cloudwatch:Describe*",
|
|
"cloudwatch:Get*",
|
|
"cloudwatch:List*",
|
|
"logs:Get*",
|
|
"logs:Describe*",
|
|
"logs:TestMetricFilter",
|
|
"sns:Get*",
|
|
"sns:List*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJN23PDQP7SZQAE3QE",
|
|
"PolicyName": "CloudWatchReadOnlyAccess",
|
|
"UpdateDate": "2015-02-06T18:40:01+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"DataScientist": {
|
|
"Arn": "arn:aws:iam::aws:policy/job-function/DataScientist",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-11-10T17:28:48+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"autoscaling:*",
|
|
"cloudwatch:*",
|
|
"cloudformation:CreateStack",
|
|
"cloudformation:DescribeStackEvents",
|
|
"datapipeline:Describe*",
|
|
"datapipeline:ListPipelines",
|
|
"datapipeline:GetPipelineDefinition",
|
|
"datapipeline:QueryObjects",
|
|
"dynamodb:*",
|
|
"ec2:CancelSpotInstanceRequests",
|
|
"ec2:CancelSpotFleetRequests",
|
|
"ec2:CreateTags",
|
|
"ec2:DeleteTags",
|
|
"ec2:Describe*",
|
|
"ec2:ModifyImageAttribute",
|
|
"ec2:ModifyInstanceAttribute",
|
|
"ec2:ModifySpotFleetRequest",
|
|
"ec2:RequestSpotInstances",
|
|
"ec2:RequestSpotFleet",
|
|
"elasticfilesystem:*",
|
|
"elasticmapreduce:*",
|
|
"es:*",
|
|
"firehose:*",
|
|
"iam:GetInstanceProfile",
|
|
"iam:GetRole",
|
|
"iam:GetPolicy",
|
|
"iam:GetPolicyVersion",
|
|
"iam:ListRoles",
|
|
"kinesis:*",
|
|
"kms:List*",
|
|
"lambda:Create*",
|
|
"lambda:Delete*",
|
|
"lambda:Get*",
|
|
"lambda:InvokeFunction",
|
|
"lambda:PublishVersion",
|
|
"lambda:Update*",
|
|
"lambda:List*",
|
|
"machinelearning:*",
|
|
"sdb:*",
|
|
"rds:*",
|
|
"sns:ListSubscriptions",
|
|
"sns:ListTopics",
|
|
"logs:DescribeLogStreams",
|
|
"logs:GetLogEvents",
|
|
"redshift:*",
|
|
"s3:CreateBucket",
|
|
"sns:CreateTopic",
|
|
"sns:Get*",
|
|
"sns:List*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:Abort*",
|
|
"s3:DeleteObject",
|
|
"s3:Get*",
|
|
"s3:List*",
|
|
"s3:PutAccelerateConfiguration",
|
|
"s3:PutBucketLogging",
|
|
"s3:PutBucketNotification",
|
|
"s3:PutBucketTagging",
|
|
"s3:PutObject",
|
|
"s3:Replicate*",
|
|
"s3:RestoreObject"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"ec2:RunInstances",
|
|
"ec2:TerminateInstances"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:GetRole",
|
|
"iam:PassRole"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:iam::*:role/DataPipelineDefaultRole",
|
|
"arn:aws:iam::*:role/DataPipelineDefaultResourceRole",
|
|
"arn:aws:iam::*:role/EMR_EC2_DefaultRole",
|
|
"arn:aws:iam::*:role/EMR_DefaultRole",
|
|
"arn:aws:iam::*:role/kinesis-*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/job-function/",
|
|
"PolicyId": "ANPAJ5YHI2BQW7EQFYDXS",
|
|
"PolicyName": "DataScientist",
|
|
"UpdateDate": "2016-11-10T17:28:48+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"DatabaseAdministrator": {
|
|
"Arn": "arn:aws:iam::aws:policy/job-function/DatabaseAdministrator",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-11-10T17:25:43+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cloudwatch:DeleteAlarms",
|
|
"cloudwatch:Describe*",
|
|
"cloudwatch:DisableAlarmActions",
|
|
"cloudwatch:EnableAlarmActions",
|
|
"cloudwatch:Get*",
|
|
"cloudwatch:List*",
|
|
"cloudwatch:PutMetricAlarm",
|
|
"datapipeline:ActivatePipeline",
|
|
"datapipeline:CreatePipeline",
|
|
"datapipeline:DeletePipeline",
|
|
"datapipeline:DescribeObjects",
|
|
"datapipeline:DescribePipelines",
|
|
"datapipeline:GetPipelineDefinition",
|
|
"datapipeline:ListPipelines",
|
|
"datapipeline:PutPipelineDefinition",
|
|
"datapipeline:QueryObjects",
|
|
"dynamodb:*",
|
|
"ec2:DescribeAccountAttributes",
|
|
"ec2:DescribeAddresses",
|
|
"ec2:DescribeAvailabilityZones",
|
|
"ec2:DescribeInternetGateways",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVpcs",
|
|
"elasticache:*",
|
|
"iam:ListRoles",
|
|
"iam:GetRole",
|
|
"kms:ListKeys",
|
|
"lambda:CreateEventSourceMapping",
|
|
"lambda:CreateFunction",
|
|
"lambda:DeleteEventSourceMapping",
|
|
"lambda:DeleteFunction",
|
|
"lambda:GetFunctionConfiguration",
|
|
"lambda:ListEventSourceMappings",
|
|
"lambda:ListFunctions",
|
|
"logs:DescribeLogGroups",
|
|
"logs:DescribeLogStreams",
|
|
"logs:FilterLogEvents",
|
|
"logs:GetLogEvents",
|
|
"logs:Create*",
|
|
"logs:PutLogEvents",
|
|
"logs:PutMetricFilter",
|
|
"rds:*",
|
|
"redshift:*",
|
|
"s3:CreateBucket",
|
|
"sns:CreateTopic",
|
|
"sns:DeleteTopic",
|
|
"sns:Get*",
|
|
"sns:List*",
|
|
"sns:SetTopicAttributes",
|
|
"sns:Subscribe",
|
|
"sns:Unsubscribe"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:AbortMultipartUpload",
|
|
"s3:DeleteObject*",
|
|
"s3:Get*",
|
|
"s3:List*",
|
|
"s3:PutAccelerateConfiguration",
|
|
"s3:PutBucketTagging",
|
|
"s3:PutBucketVersioning",
|
|
"s3:PutBucketWebsite",
|
|
"s3:PutLifecycleConfiguration",
|
|
"s3:PutReplicationConfiguration",
|
|
"s3:PutObject*",
|
|
"s3:Replicate*",
|
|
"s3:RestoreObject"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:GetRole",
|
|
"iam:PassRole"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:iam::*:role/rds-monitoring-role",
|
|
"arn:aws:iam::*:role/rdbms-lambda-access",
|
|
"arn:aws:iam::*:role/lambda_exec_role",
|
|
"arn:aws:iam::*:role/lambda-dynamodb-*",
|
|
"arn:aws:iam::*:role/lambda-vpc-execution-role",
|
|
"arn:aws:iam::*:role/DataPipelineDefaultRole",
|
|
"arn:aws:iam::*:role/DataPipelineDefaultResourceRole"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/job-function/",
|
|
"PolicyId": "ANPAIGBMAW4VUQKOQNVT6",
|
|
"PolicyName": "DatabaseAdministrator",
|
|
"UpdateDate": "2016-11-10T17:25:43+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"IAMFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/IAMFullAccess",
|
|
"AttachmentCount": 2,
|
|
"CreateDate": "2015-02-06T18:40:38+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": "iam:*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAI7XKCFMBPM3QQRRVQ",
|
|
"PolicyName": "IAMFullAccess",
|
|
"UpdateDate": "2015-02-06T18:40:38+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"IAMReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/IAMReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-09-06T17:06:37+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"iam:GenerateCredentialReport",
|
|
"iam:GenerateServiceLastAccessedDetails",
|
|
"iam:Get*",
|
|
"iam:List*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJKSO7NDY4T57MWDSQ",
|
|
"PolicyName": "IAMReadOnlyAccess",
|
|
"UpdateDate": "2016-09-06T17:06:37+00:00",
|
|
"VersionId": "v3"
|
|
},
|
|
"IAMSelfManageServiceSpecificCredentials": {
|
|
"Arn": "arn:aws:iam::aws:policy/IAMSelfManageServiceSpecificCredentials",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-12-22T17:25:18+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"iam:CreateServiceSpecificCredential",
|
|
"iam:ListServiceSpecificCredentials",
|
|
"iam:UpdateServiceSpecificCredential",
|
|
"iam:DeleteServiceSpecificCredential",
|
|
"iam:ResetServiceSpecificCredential"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:iam::*:user/${aws:username}"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAI4VT74EMXK2PMQJM2",
|
|
"PolicyName": "IAMSelfManageServiceSpecificCredentials",
|
|
"UpdateDate": "2016-12-22T17:25:18+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"IAMUserChangePassword": {
|
|
"Arn": "arn:aws:iam::aws:policy/IAMUserChangePassword",
|
|
"AttachmentCount": 1,
|
|
"CreateDate": "2016-11-15T23:18:55+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"iam:ChangePassword"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:iam::*:user/${aws:username}"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:GetAccountPasswordPolicy"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJ4L4MM2A7QIEB56MS",
|
|
"PolicyName": "IAMUserChangePassword",
|
|
"UpdateDate": "2016-11-15T23:18:55+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"IAMUserSSHKeys": {
|
|
"Arn": "arn:aws:iam::aws:policy/IAMUserSSHKeys",
|
|
"AttachmentCount": 1,
|
|
"CreateDate": "2015-07-09T17:08:54+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"iam:DeleteSSHPublicKey",
|
|
"iam:GetSSHPublicKey",
|
|
"iam:ListSSHPublicKeys",
|
|
"iam:UpdateSSHPublicKey",
|
|
"iam:UploadSSHPublicKey"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:iam::*:user/${aws:username}"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJTSHUA4UXGXU7ANUA",
|
|
"PolicyName": "IAMUserSSHKeys",
|
|
"UpdateDate": "2015-07-09T17:08:54+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"NetworkAdministrator": {
|
|
"Arn": "arn:aws:iam::aws:policy/job-function/NetworkAdministrator",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-03-20T18:44:58+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"autoscaling:Describe*",
|
|
"ec2:AllocateAddress",
|
|
"ec2:AssignPrivateIpAddresses",
|
|
"ec2:AssociateAddress",
|
|
"ec2:AssociateDhcpOptions",
|
|
"ec2:AssociateRouteTable",
|
|
"ec2:AttachInternetGateway",
|
|
"ec2:AttachNetworkInterface",
|
|
"ec2:AttachVpnGateway",
|
|
"ec2:CreateCustomerGateway",
|
|
"ec2:CreateDhcpOptions",
|
|
"ec2:CreateFlowLogs",
|
|
"ec2:CreateInternetGateway",
|
|
"ec2:CreateNatGateway",
|
|
"ec2:CreateNetworkAcl",
|
|
"ec2:CreateNetworkAcl",
|
|
"ec2:CreateNetworkAclEntry",
|
|
"ec2:CreateNetworkInterface",
|
|
"ec2:CreateRoute",
|
|
"ec2:CreateRouteTable",
|
|
"ec2:CreateSecurityGroup",
|
|
"ec2:CreateSubnet",
|
|
"ec2:CreateTags",
|
|
"ec2:CreateVpc",
|
|
"ec2:CreateVpcEndpoint",
|
|
"ec2:CreateVpnConnection",
|
|
"ec2:CreateVpnConnectionRoute",
|
|
"ec2:CreateVpnGateway",
|
|
"ec2:CreatePlacementGroup",
|
|
"ec2:DeletePlacementGroup",
|
|
"ec2:DescribePlacementGroups",
|
|
"ec2:DeleteFlowLogs",
|
|
"ec2:DeleteNatGateway",
|
|
"ec2:DeleteNetworkInterface",
|
|
"ec2:DeleteSubnet",
|
|
"ec2:DeleteTags",
|
|
"ec2:DeleteVpc",
|
|
"ec2:DeleteVpcEndpoints",
|
|
"ec2:DeleteVpnConnection",
|
|
"ec2:DeleteVpnConnectionRoute",
|
|
"ec2:DeleteVpnGateway",
|
|
"ec2:DescribeAddresses",
|
|
"ec2:DescribeAvailabilityZones",
|
|
"ec2:DescribeClassicLinkInstances",
|
|
"ec2:DescribeCustomerGateways",
|
|
"ec2:DescribeVpcClassicLinkDnsSupport",
|
|
"ec2:DescribeDhcpOptions",
|
|
"ec2:DescribeFlowLogs",
|
|
"ec2:DescribeInstances",
|
|
"ec2:DescribeInternetGateways",
|
|
"ec2:DescribeKeyPairs",
|
|
"ec2:DescribeMovingAddresses",
|
|
"ec2:DescribeNatGateways",
|
|
"ec2:DescribeNetworkAcls",
|
|
"ec2:DescribeNetworkInterfaceAttribute",
|
|
"ec2:DescribeNetworkInterfaces",
|
|
"ec2:DescribePrefixLists",
|
|
"ec2:DescribeRouteTables",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeTags",
|
|
"ec2:DescribeVpcAttribute",
|
|
"ec2:DescribeVpcClassicLink",
|
|
"ec2:DescribeVpcEndpoints",
|
|
"ec2:DescribeVpcEndpointServices",
|
|
"ec2:DescribeVpcPeeringConnections",
|
|
"ec2:DescribeVpcs",
|
|
"ec2:DescribeVpnConnections",
|
|
"ec2:DescribeVpnGateways",
|
|
"ec2:DetachInternetGateway",
|
|
"ec2:DetachNetworkInterface",
|
|
"ec2:DetachVpnGateway",
|
|
"ec2:DisableVgwRoutePropagation",
|
|
"ec2:DisassociateAddress",
|
|
"ec2:DisassociateRouteTable",
|
|
"ec2:EnableVgwRoutePropagation",
|
|
"ec2:ModifyNetworkInterfaceAttribute",
|
|
"ec2:ModifySubnetAttribute",
|
|
"ec2:ModifyVpcAttribute",
|
|
"ec2:ModifyVpcEndpoint",
|
|
"ec2:MoveAddressToVpc",
|
|
"ec2:ReleaseAddress",
|
|
"ec2:ReplaceNetworkAclAssociation",
|
|
"ec2:ReplaceNetworkAclEntry",
|
|
"ec2:ReplaceRoute",
|
|
"ec2:ReplaceRouteTableAssociation",
|
|
"ec2:ResetNetworkInterfaceAttribute",
|
|
"ec2:RestoreAddressToClassic",
|
|
"ec2:UnassignPrivateIpAddresses",
|
|
"directconnect:*",
|
|
"route53:*",
|
|
"route53domains:*",
|
|
"cloudfront:ListDistributions",
|
|
"elasticloadbalancing:*",
|
|
"elasticbeanstalk:Describe*",
|
|
"elasticbeanstalk:List*",
|
|
"elasticbeanstalk:RetrieveEnvironmentInfo",
|
|
"elasticbeanstalk:RequestEnvironmentInfo",
|
|
"sns:ListTopics",
|
|
"sns:ListSubscriptionsByTopic",
|
|
"sns:CreateTopic",
|
|
"cloudwatch:DescribeAlarms",
|
|
"cloudwatch:PutMetricAlarm",
|
|
"cloudwatch:DeleteAlarms",
|
|
"cloudwatch:GetMetricStatistics",
|
|
"logs:DescribeLogGroups",
|
|
"logs:DescribeLogStreams",
|
|
"logs:GetLogEvents"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"ec2:AcceptVpcPeeringConnection",
|
|
"ec2:AttachClassicLinkVpc",
|
|
"ec2:AuthorizeSecurityGroupEgress",
|
|
"ec2:AuthorizeSecurityGroupIngress",
|
|
"ec2:CreateVpcPeeringConnection",
|
|
"ec2:DeleteCustomerGateway",
|
|
"ec2:DeleteDhcpOptions",
|
|
"ec2:DeleteInternetGateway",
|
|
"ec2:DeleteNetworkAcl",
|
|
"ec2:DeleteNetworkAclEntry",
|
|
"ec2:DeleteRoute",
|
|
"ec2:DeleteRouteTable",
|
|
"ec2:DeleteSecurityGroup",
|
|
"ec2:DeleteVolume",
|
|
"ec2:DeleteVpcPeeringConnection",
|
|
"ec2:DetachClassicLinkVpc",
|
|
"ec2:DisableVpcClassicLink",
|
|
"ec2:EnableVpcClassicLink",
|
|
"ec2:GetConsoleScreenshot",
|
|
"ec2:RejectVpcPeeringConnection",
|
|
"ec2:RevokeSecurityGroupEgress",
|
|
"ec2:RevokeSecurityGroupIngress"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:ListBucket",
|
|
"s3:GetBucketLocation",
|
|
"s3:GetBucketWebsiteConfiguration"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:GetRole",
|
|
"iam:ListRoles",
|
|
"iam:PassRole"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:iam::*:role/flow-logs-*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/job-function/",
|
|
"PolicyId": "ANPAJPNMADZFJCVPJVZA2",
|
|
"PolicyName": "NetworkAdministrator",
|
|
"UpdateDate": "2017-03-20T18:44:58+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"PowerUserAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/PowerUserAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-12-06T18:11:16+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Effect": "Allow",
|
|
"NotAction": [
|
|
"iam:*",
|
|
"organizations:*"
|
|
],
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": "organizations:DescribeOrganization",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJYRXTHIB4FOVS3ZXS",
|
|
"PolicyName": "PowerUserAccess",
|
|
"UpdateDate": "2016-12-06T18:11:16+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"QuickSightAccessForS3StorageManagementAnalyticsReadOnly": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/QuickSightAccessForS3StorageManagementAnalyticsReadOnly",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-07-21T00:02:14+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"s3:GetObject",
|
|
"s3:GetObjectMetadata"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::s3-analytics-export-shared-*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:GetAnalyticsConfiguration",
|
|
"s3:ListAllMyBuckets",
|
|
"s3:GetBucketLocation"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAIFWG3L3WDMR4I7ZJW",
|
|
"PolicyName": "QuickSightAccessForS3StorageManagementAnalyticsReadOnly",
|
|
"UpdateDate": "2017-07-21T00:02:14+00:00",
|
|
"VersionId": "v3"
|
|
},
|
|
"RDSCloudHsmAuthorizationRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/RDSCloudHsmAuthorizationRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:41:29+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"cloudhsm:CreateLunaClient",
|
|
"cloudhsm:GetClientConfiguration",
|
|
"cloudhsm:DeleteLunaClient",
|
|
"cloudhsm:DescribeLunaClient",
|
|
"cloudhsm:ModifyLunaClient",
|
|
"cloudhsm:DescribeHapg",
|
|
"cloudhsm:ModifyHapg",
|
|
"cloudhsm:GetConfig"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAIWKFXRLQG2ROKKXLE",
|
|
"PolicyName": "RDSCloudHsmAuthorizationRole",
|
|
"UpdateDate": "2015-02-06T18:41:29+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"ReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/ReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-07-20T17:43:06+00:00",
|
|
"DefaultVersionId": "v29",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"acm:Describe*",
|
|
"acm:Get*",
|
|
"acm:List*",
|
|
"apigateway:GET",
|
|
"application-autoscaling:Describe*",
|
|
"appstream:Describe*",
|
|
"appstream:Get*",
|
|
"appstream:List*",
|
|
"athena:List*",
|
|
"athena:Batch*",
|
|
"athena:Get*",
|
|
"autoscaling:Describe*",
|
|
"batch:List*",
|
|
"batch:Describe*",
|
|
"clouddirectory:List*",
|
|
"clouddirectory:BatchRead",
|
|
"clouddirectory:Get*",
|
|
"clouddirectory:LookupPolicy",
|
|
"cloudformation:Describe*",
|
|
"cloudformation:Get*",
|
|
"cloudformation:List*",
|
|
"cloudformation:Estimate*",
|
|
"cloudformation:Preview*",
|
|
"cloudfront:Get*",
|
|
"cloudfront:List*",
|
|
"cloudhsm:List*",
|
|
"cloudhsm:Describe*",
|
|
"cloudhsm:Get*",
|
|
"cloudsearch:Describe*",
|
|
"cloudsearch:List*",
|
|
"cloudtrail:Describe*",
|
|
"cloudtrail:Get*",
|
|
"cloudtrail:List*",
|
|
"cloudtrail:LookupEvents",
|
|
"cloudwatch:Describe*",
|
|
"cloudwatch:Get*",
|
|
"cloudwatch:List*",
|
|
"codebuild:BatchGet*",
|
|
"codebuild:List*",
|
|
"codecommit:BatchGet*",
|
|
"codecommit:Get*",
|
|
"codecommit:GitPull",
|
|
"codecommit:List*",
|
|
"codedeploy:BatchGet*",
|
|
"codedeploy:Get*",
|
|
"codedeploy:List*",
|
|
"codepipeline:List*",
|
|
"codepipeline:Get*",
|
|
"codestar:List*",
|
|
"codestar:Describe*",
|
|
"codestar:Get*",
|
|
"codestar:Verify*",
|
|
"cognito-identity:List*",
|
|
"cognito-identity:Describe*",
|
|
"cognito-identity:Lookup*",
|
|
"cognito-sync:List*",
|
|
"cognito-sync:Describe*",
|
|
"cognito-sync:Get*",
|
|
"cognito-sync:QueryRecords",
|
|
"cognito-idp:AdminList*",
|
|
"cognito-idp:List*",
|
|
"cognito-idp:Describe*",
|
|
"cognito-idp:Get*",
|
|
"config:Deliver*",
|
|
"config:Describe*",
|
|
"config:Get*",
|
|
"config:List*",
|
|
"connect:List*",
|
|
"connect:Describe*",
|
|
"connect:Get*",
|
|
"datapipeline:Describe*",
|
|
"datapipeline:EvaluateExpression",
|
|
"datapipeline:Get*",
|
|
"datapipeline:List*",
|
|
"datapipeline:QueryObjects",
|
|
"datapipeline:Validate*",
|
|
"directconnect:Describe*",
|
|
"directconnect:Confirm*",
|
|
"devicefarm:List*",
|
|
"devicefarm:Get*",
|
|
"discovery:Describe*",
|
|
"discovery:List*",
|
|
"discovery:Get*",
|
|
"dms:Describe*",
|
|
"dms:List*",
|
|
"dms:Test*",
|
|
"ds:Check*",
|
|
"ds:Describe*",
|
|
"ds:Get*",
|
|
"ds:List*",
|
|
"ds:Verify*",
|
|
"dynamodb:BatchGet*",
|
|
"dynamodb:Describe*",
|
|
"dynamodb:Get*",
|
|
"dynamodb:List*",
|
|
"dynamodb:Query",
|
|
"dynamodb:Scan",
|
|
"ec2:Describe*",
|
|
"ec2:Get*",
|
|
"ec2messages:Get*",
|
|
"ecr:BatchCheck*",
|
|
"ecr:BatchGet*",
|
|
"ecr:Describe*",
|
|
"ecr:Get*",
|
|
"ecr:List*",
|
|
"ecs:Describe*",
|
|
"ecs:List*",
|
|
"elasticache:Describe*",
|
|
"elasticache:List*",
|
|
"elasticbeanstalk:Check*",
|
|
"elasticbeanstalk:Describe*",
|
|
"elasticbeanstalk:List*",
|
|
"elasticbeanstalk:Request*",
|
|
"elasticbeanstalk:Retrieve*",
|
|
"elasticbeanstalk:Validate*",
|
|
"elasticfilesystem:Describe*",
|
|
"elasticloadbalancing:Describe*",
|
|
"elasticmapreduce:Describe*",
|
|
"elasticmapreduce:List*",
|
|
"elasticmapreduce:View*",
|
|
"elastictranscoder:List*",
|
|
"elastictranscoder:Read*",
|
|
"es:Describe*",
|
|
"es:List*",
|
|
"es:ESHttpGet",
|
|
"es:ESHttpHead",
|
|
"events:Describe*",
|
|
"events:List*",
|
|
"events:Test*",
|
|
"firehose:Describe*",
|
|
"firehose:List*",
|
|
"gamelift:List*",
|
|
"gamelift:Get*",
|
|
"gamelift:Describe*",
|
|
"gamelift:RequestUploadCredentials",
|
|
"gamelift:ResolveAlias",
|
|
"gamelift:Search*",
|
|
"glacier:List*",
|
|
"glacier:Describe*",
|
|
"glacier:Get*",
|
|
"health:Describe*",
|
|
"health:Get*",
|
|
"health:List*",
|
|
"iam:Generate*",
|
|
"iam:Get*",
|
|
"iam:List*",
|
|
"iam:Simulate*",
|
|
"importexport:Get*",
|
|
"importexport:List*",
|
|
"inspector:Describe*",
|
|
"inspector:Get*",
|
|
"inspector:List*",
|
|
"inspector:Preview*",
|
|
"inspector:LocalizeText",
|
|
"iot:Describe*",
|
|
"iot:Get*",
|
|
"iot:List*",
|
|
"kinesisanalytics:Describe*",
|
|
"kinesisanalytics:Discover*",
|
|
"kinesisanalytics:Get*",
|
|
"kinesisanalytics:List*",
|
|
"kinesis:Describe*",
|
|
"kinesis:Get*",
|
|
"kinesis:List*",
|
|
"kms:Describe*",
|
|
"kms:Get*",
|
|
"kms:List*",
|
|
"lambda:List*",
|
|
"lambda:Get*",
|
|
"lex:Get*",
|
|
"lightsail:Get*",
|
|
"lightsail:Is*",
|
|
"lightsail:Download*",
|
|
"logs:Describe*",
|
|
"logs:Get*",
|
|
"logs:FilterLogEvents",
|
|
"logs:ListTagsLogGroup",
|
|
"logs:TestMetricFilter",
|
|
"machinelearning:Describe*",
|
|
"machinelearning:Get*",
|
|
"mobileanalytics:Get*",
|
|
"mobilehub:Get*",
|
|
"mobilehub:List*",
|
|
"mobilehub:Validate*",
|
|
"mobilehub:Verify*",
|
|
"mobiletargeting:Get*",
|
|
"opsworks:Describe*",
|
|
"opsworks:Get*",
|
|
"opsworks-cm:Describe*",
|
|
"organizations:Describe*",
|
|
"organizations:List*",
|
|
"polly:Describe*",
|
|
"polly:Get*",
|
|
"polly:List*",
|
|
"polly:SynthesizeSpeech",
|
|
"rekognition:CompareFaces",
|
|
"rekognition:Detect*",
|
|
"rekognition:List*",
|
|
"rekognition:Search*",
|
|
"rds:Describe*",
|
|
"rds:List*",
|
|
"rds:Download*",
|
|
"redshift:Describe*",
|
|
"redshift:View*",
|
|
"redshift:Get*",
|
|
"route53:Get*",
|
|
"route53:List*",
|
|
"route53:Test*",
|
|
"route53domains:Check*",
|
|
"route53domains:Get*",
|
|
"route53domains:List*",
|
|
"route53domains:View*",
|
|
"s3:Get*",
|
|
"s3:List*",
|
|
"s3:Head*",
|
|
"sdb:Get*",
|
|
"sdb:List*",
|
|
"sdb:Select*",
|
|
"servicecatalog:List*",
|
|
"servicecatalog:Scan*",
|
|
"servicecatalog:Search*",
|
|
"servicecatalog:Describe*",
|
|
"ses:Get*",
|
|
"ses:List*",
|
|
"ses:Describe*",
|
|
"ses:Verify*",
|
|
"shield:Describe*",
|
|
"shield:List*",
|
|
"sns:Get*",
|
|
"sns:List*",
|
|
"sns:Check*",
|
|
"sqs:Get*",
|
|
"sqs:List*",
|
|
"sqs:Receive*",
|
|
"ssm:Describe*",
|
|
"ssm:Get*",
|
|
"ssm:List*",
|
|
"states:List*",
|
|
"states:Describe*",
|
|
"states:GetExecutionHistory",
|
|
"storagegateway:Describe*",
|
|
"storagegateway:List*",
|
|
"sts:Get*",
|
|
"swf:Count*",
|
|
"swf:Describe*",
|
|
"swf:Get*",
|
|
"swf:List*",
|
|
"tag:Get*",
|
|
"trustedadvisor:Describe*",
|
|
"waf:Get*",
|
|
"waf:List*",
|
|
"waf-regional:List*",
|
|
"waf-regional:Get*",
|
|
"workdocs:Describe*",
|
|
"workdocs:Get*",
|
|
"workdocs:CheckAlias",
|
|
"workmail:Describe*",
|
|
"workmail:Get*",
|
|
"workmail:List*",
|
|
"workmail:Search*",
|
|
"workspaces:Describe*",
|
|
"xray:BatchGet*",
|
|
"xray:Get*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAILL3HVNFSB6DCOWYQ",
|
|
"PolicyName": "ReadOnlyAccess",
|
|
"UpdateDate": "2017-07-20T17:43:06+00:00",
|
|
"VersionId": "v29"
|
|
},
|
|
"ResourceGroupsandTagEditorFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/ResourceGroupsandTagEditorFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:39:53+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"tag:getResources",
|
|
"tag:getTagKeys",
|
|
"tag:getTagValues",
|
|
"tag:addResourceTags",
|
|
"tag:removeResourceTags"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJNOS54ZFXN4T2Y34A",
|
|
"PolicyName": "ResourceGroupsandTagEditorFullAccess",
|
|
"UpdateDate": "2015-02-06T18:39:53+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"ResourceGroupsandTagEditorReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/ResourceGroupsandTagEditorReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:39:54+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"tag:getResources",
|
|
"tag:getTagKeys",
|
|
"tag:getTagValues"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJHXQTPI5I5JKAIU74",
|
|
"PolicyName": "ResourceGroupsandTagEditorReadOnlyAccess",
|
|
"UpdateDate": "2015-02-06T18:39:54+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"SecurityAudit": {
|
|
"Arn": "arn:aws:iam::aws:policy/SecurityAudit",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-07-12T20:16:44+00:00",
|
|
"DefaultVersionId": "v12",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"acm:ListCertificates",
|
|
"acm:DescribeCertificate",
|
|
"cloudformation:getStackPolicy",
|
|
"logs:describeLogGroups",
|
|
"logs:describeMetricFilters",
|
|
"autoscaling:Describe*",
|
|
"cloudformation:DescribeStack*",
|
|
"cloudformation:GetTemplate",
|
|
"cloudformation:ListStack*",
|
|
"cloudfront:Get*",
|
|
"cloudfront:List*",
|
|
"cloudtrail:DescribeTrails",
|
|
"cloudtrail:GetTrailStatus",
|
|
"cloudtrail:ListTags",
|
|
"cloudwatch:Describe*",
|
|
"codecommit:BatchGetRepositories",
|
|
"codecommit:GetBranch",
|
|
"codecommit:GetObjectIdentifier",
|
|
"codecommit:GetRepository",
|
|
"codecommit:List*",
|
|
"codedeploy:Batch*",
|
|
"codedeploy:Get*",
|
|
"codedeploy:List*",
|
|
"config:Deliver*",
|
|
"config:Describe*",
|
|
"config:Get*",
|
|
"datapipeline:DescribeObjects",
|
|
"datapipeline:DescribePipelines",
|
|
"datapipeline:EvaluateExpression",
|
|
"datapipeline:GetPipelineDefinition",
|
|
"datapipeline:ListPipelines",
|
|
"datapipeline:QueryObjects",
|
|
"datapipeline:ValidatePipelineDefinition",
|
|
"directconnect:Describe*",
|
|
"dynamodb:ListTables",
|
|
"ec2:Describe*",
|
|
"ecs:Describe*",
|
|
"ecs:List*",
|
|
"elasticache:Describe*",
|
|
"elasticbeanstalk:Describe*",
|
|
"elasticloadbalancing:Describe*",
|
|
"elasticmapreduce:DescribeJobFlows",
|
|
"elasticmapreduce:ListClusters",
|
|
"elasticmapreduce:ListInstances",
|
|
"es:ListDomainNames",
|
|
"es:Describe*",
|
|
"firehose:Describe*",
|
|
"firehose:List*",
|
|
"glacier:DescribeVault",
|
|
"glacier:GetVaultAccessPolicy",
|
|
"glacier:ListVaults",
|
|
"iam:GenerateCredentialReport",
|
|
"iam:Get*",
|
|
"iam:List*",
|
|
"kms:Describe*",
|
|
"kms:Get*",
|
|
"kms:List*",
|
|
"lambda:GetPolicy",
|
|
"lambda:ListFunctions",
|
|
"rds:Describe*",
|
|
"rds:DownloadDBLogFilePortion",
|
|
"rds:ListTagsForResource",
|
|
"redshift:Describe*",
|
|
"route53:GetChange",
|
|
"route53:GetCheckerIpRanges",
|
|
"route53:GetGeoLocation",
|
|
"route53:GetHealthCheck",
|
|
"route53:GetHealthCheckCount",
|
|
"route53:GetHealthCheckLastFailureReason",
|
|
"route53:GetHostedZone",
|
|
"route53:GetHostedZoneCount",
|
|
"route53:GetReusableDelegationSet",
|
|
"route53:ListGeoLocations",
|
|
"route53:ListHealthChecks",
|
|
"route53:ListHostedZones",
|
|
"route53:ListHostedZonesByName",
|
|
"route53:ListResourceRecordSets",
|
|
"route53:ListReusableDelegationSets",
|
|
"route53:ListTagsForResource",
|
|
"route53:ListTagsForResources",
|
|
"route53domains:GetDomainDetail",
|
|
"route53domains:GetOperationDetail",
|
|
"route53domains:ListDomains",
|
|
"route53domains:ListOperations",
|
|
"route53domains:ListTagsForDomain",
|
|
"s3:GetBucket*",
|
|
"s3:GetAccelerateConfiguration",
|
|
"s3:GetAnalyticsConfiguration",
|
|
"s3:GetInventoryConfiguration",
|
|
"s3:GetMetricsConfiguration",
|
|
"s3:GetReplicationConfiguration",
|
|
"s3:GetLifecycleConfiguration",
|
|
"s3:GetObjectAcl",
|
|
"s3:GetObjectVersionAcl",
|
|
"s3:ListAllMyBuckets",
|
|
"sdb:DomainMetadata",
|
|
"sdb:ListDomains",
|
|
"ses:GetIdentityDkimAttributes",
|
|
"ses:GetIdentityVerificationAttributes",
|
|
"ses:ListIdentities",
|
|
"sns:GetTopicAttributes",
|
|
"sns:ListSubscriptionsByTopic",
|
|
"sns:ListTopics",
|
|
"sqs:GetQueueAttributes",
|
|
"sqs:ListQueues",
|
|
"tag:GetResources",
|
|
"tag:GetTagKeys"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIX2T3QCXHR2OGGCTO",
|
|
"PolicyName": "SecurityAudit",
|
|
"UpdateDate": "2017-07-12T20:16:44+00:00",
|
|
"VersionId": "v12"
|
|
},
|
|
"ServerMigrationConnector": {
|
|
"Arn": "arn:aws:iam::aws:policy/ServerMigrationConnector",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-10-24T21:45:56+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": "iam:GetUser",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"sms:SendMessage",
|
|
"sms:GetMessages"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:CreateBucket",
|
|
"s3:DeleteBucket",
|
|
"s3:DeleteObject",
|
|
"s3:GetBucketLocation",
|
|
"s3:GetObject",
|
|
"s3:ListBucket",
|
|
"s3:PutObject",
|
|
"s3:PutObjectAcl",
|
|
"s3:PutLifecycleConfiguration",
|
|
"s3:AbortMultipartUpload",
|
|
"s3:ListBucketMultipartUploads",
|
|
"s3:ListMultipartUploadParts"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::sms-b-*",
|
|
"arn:aws:s3:::import-to-ec2-*",
|
|
"arn:aws:s3:::server-migration-service-upgrade",
|
|
"arn:aws:s3:::server-migration-service-upgrade/*",
|
|
"arn:aws:s3:::connector-platform-upgrade-info/*",
|
|
"arn:aws:s3:::connector-platform-upgrade-info",
|
|
"arn:aws:s3:::connector-platform-upgrade-bundles/*",
|
|
"arn:aws:s3:::connector-platform-upgrade-bundles",
|
|
"arn:aws:s3:::connector-platform-release-notes/*",
|
|
"arn:aws:s3:::connector-platform-release-notes"
|
|
]
|
|
},
|
|
{
|
|
"Action": "awsconnector:*",
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"SNS:Publish"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "arn:aws:sns:*:*:metrics-sns-topic-for-*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJKZRWXIPK5HSG3QDQ",
|
|
"PolicyName": "ServerMigrationConnector",
|
|
"UpdateDate": "2016-10-24T21:45:56+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"ServerMigrationServiceRole": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/ServerMigrationServiceRole",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-06-16T18:02:04+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:ModifySnapshotAttribute",
|
|
"ec2:CopySnapshot",
|
|
"ec2:CopyImage",
|
|
"ec2:Describe*",
|
|
"ec2:DeleteSnapshot",
|
|
"ec2:DeregisterImage",
|
|
"ec2:CreateTags",
|
|
"ec2:DeleteTags"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJMBH3M6BO63XFW2D4",
|
|
"PolicyName": "ServerMigrationServiceRole",
|
|
"UpdateDate": "2017-06-16T18:02:04+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"ServiceCatalogAdminFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/ServiceCatalogAdminFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2016-11-11T18:40:24+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"catalog-admin:*",
|
|
"catalog-user:*",
|
|
"cloudformation:CreateStack",
|
|
"cloudformation:CreateUploadBucket",
|
|
"cloudformation:DeleteStack",
|
|
"cloudformation:DescribeStackEvents",
|
|
"cloudformation:DescribeStacks",
|
|
"cloudformation:GetTemplateSummary",
|
|
"cloudformation:SetStackPolicy",
|
|
"cloudformation:ValidateTemplate",
|
|
"cloudformation:UpdateStack",
|
|
"iam:GetGroup",
|
|
"iam:GetRole",
|
|
"iam:GetUser",
|
|
"iam:ListGroups",
|
|
"iam:ListRoles",
|
|
"iam:ListUsers",
|
|
"iam:PassRole",
|
|
"s3:CreateBucket",
|
|
"s3:GetObject",
|
|
"s3:PutObject",
|
|
"servicecatalog:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIKTX42IAS75B7B7BY",
|
|
"PolicyName": "ServiceCatalogAdminFullAccess",
|
|
"UpdateDate": "2016-11-11T18:40:24+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"ServiceCatalogAdminReadOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/ServiceCatalogAdminReadOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-08T18:57:36+00:00",
|
|
"DefaultVersionId": "v5",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"catalog-admin:DescribeConstraints",
|
|
"catalog-admin:DescribeListingForProduct",
|
|
"catalog-admin:DescribeListings",
|
|
"catalog-admin:DescribePortfolios",
|
|
"catalog-admin:DescribeProductVersions",
|
|
"catalog-admin:GetPortfolioCount",
|
|
"catalog-admin:GetPortfolios",
|
|
"catalog-admin:GetProductCounts",
|
|
"catalog-admin:ListAllPortfolioConstraints",
|
|
"catalog-admin:ListPortfolioConstraints",
|
|
"catalog-admin:ListPortfolios",
|
|
"catalog-admin:ListPrincipalConstraints",
|
|
"catalog-admin:ListProductConstraints",
|
|
"catalog-admin:ListResourceUsers",
|
|
"catalog-admin:ListTagsForResource",
|
|
"catalog-admin:SearchListings",
|
|
"catalog-user:*",
|
|
"cloudformation:DescribeStackEvents",
|
|
"cloudformation:DescribeStacks",
|
|
"cloudformation:GetTemplateSummary",
|
|
"iam:GetGroup",
|
|
"iam:GetRole",
|
|
"iam:GetUser",
|
|
"iam:ListGroups",
|
|
"iam:ListRoles",
|
|
"iam:ListUsers",
|
|
"s3:GetObject",
|
|
"servicecatalog:DescribeTagOption",
|
|
"servicecatalog:GetTagOptionMigrationStatus",
|
|
"servicecatalog:ListResourcesForTagOption",
|
|
"servicecatalog:ListTagOptions",
|
|
"servicecatalog:AccountLevelDescribeRecord",
|
|
"servicecatalog:AccountLevelListRecordHistory",
|
|
"servicecatalog:AccountLevelScanProvisionedProducts",
|
|
"servicecatalog:DescribeProduct",
|
|
"servicecatalog:DescribeProductView",
|
|
"servicecatalog:DescribeProvisioningParameters",
|
|
"servicecatalog:DescribeProvisionedProduct",
|
|
"servicecatalog:DescribeRecord",
|
|
"servicecatalog:ListLaunchPaths",
|
|
"servicecatalog:ListRecordHistory",
|
|
"servicecatalog:ScanProvisionedProducts",
|
|
"servicecatalog:SearchProducts",
|
|
"servicecatalog:DescribeConstraint",
|
|
"servicecatalog:DescribeProductAsAdmin",
|
|
"servicecatalog:DescribePortfolio",
|
|
"servicecatalog:DescribeProvisioningArtifact",
|
|
"servicecatalog:ListAcceptedPortfolioShares",
|
|
"servicecatalog:ListConstraintsForPortfolio",
|
|
"servicecatalog:ListPortfolioAccess",
|
|
"servicecatalog:ListPortfolios",
|
|
"servicecatalog:ListPortfoliosForProduct",
|
|
"servicecatalog:ListPrincipalsForPortfolio",
|
|
"servicecatalog:ListProvisioningArtifacts",
|
|
"servicecatalog:SearchProductsAsAdmin"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJ7XOUSS75M4LIPKO4",
|
|
"PolicyName": "ServiceCatalogAdminReadOnlyAccess",
|
|
"UpdateDate": "2017-08-08T18:57:36+00:00",
|
|
"VersionId": "v5"
|
|
},
|
|
"ServiceCatalogEndUserAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/ServiceCatalogEndUserAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-08T18:58:57+00:00",
|
|
"DefaultVersionId": "v4",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"catalog-user:*",
|
|
"s3:GetObject",
|
|
"servicecatalog:DescribeProduct",
|
|
"servicecatalog:DescribeProductView",
|
|
"servicecatalog:DescribeProvisioningParameters",
|
|
"servicecatalog:ListLaunchPaths",
|
|
"servicecatalog:SearchProducts"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"servicecatalog:ListRecordHistory",
|
|
"servicecatalog:DescribeProvisionedProduct",
|
|
"servicecatalog:DescribeRecord",
|
|
"servicecatalog:ScanProvisionedProducts"
|
|
],
|
|
"Condition": {
|
|
"StringEquals": {
|
|
"servicecatalog:userLevel": "self"
|
|
}
|
|
},
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJ56OMCO72RI4J5FSA",
|
|
"PolicyName": "ServiceCatalogEndUserAccess",
|
|
"UpdateDate": "2017-08-08T18:58:57+00:00",
|
|
"VersionId": "v4"
|
|
},
|
|
"ServiceCatalogEndUserFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/ServiceCatalogEndUserFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-08-08T18:58:54+00:00",
|
|
"DefaultVersionId": "v4",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"catalog-user:*",
|
|
"cloudformation:CreateStack",
|
|
"cloudformation:DeleteStack",
|
|
"cloudformation:DescribeStackEvents",
|
|
"cloudformation:DescribeStacks",
|
|
"cloudformation:GetTemplateSummary",
|
|
"cloudformation:SetStackPolicy",
|
|
"cloudformation:ValidateTemplate",
|
|
"cloudformation:UpdateStack",
|
|
"servicecatalog:DescribeProduct",
|
|
"servicecatalog:DescribeProductView",
|
|
"servicecatalog:DescribeProvisioningParameters",
|
|
"servicecatalog:ListLaunchPaths",
|
|
"servicecatalog:ProvisionProduct",
|
|
"servicecatalog:SearchProducts",
|
|
"s3:GetObject"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"servicecatalog:DescribeProvisionedProduct",
|
|
"servicecatalog:DescribeRecord",
|
|
"servicecatalog:ListRecordHistory",
|
|
"servicecatalog:ScanProvisionedProducts",
|
|
"servicecatalog:TerminateProvisionedProduct",
|
|
"servicecatalog:UpdateProvisionedProduct"
|
|
],
|
|
"Condition": {
|
|
"StringEquals": {
|
|
"servicecatalog:userLevel": "self"
|
|
}
|
|
},
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAJIW7AFFOONVKW75KU",
|
|
"PolicyName": "ServiceCatalogEndUserFullAccess",
|
|
"UpdateDate": "2017-08-08T18:58:54+00:00",
|
|
"VersionId": "v4"
|
|
},
|
|
"SimpleWorkflowFullAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/SimpleWorkflowFullAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-02-06T18:41:04+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"swf:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/",
|
|
"PolicyId": "ANPAIFE3AV6VE7EANYBVM",
|
|
"PolicyName": "SimpleWorkflowFullAccess",
|
|
"UpdateDate": "2015-02-06T18:41:04+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"SupportUser": {
|
|
"Arn": "arn:aws:iam::aws:policy/job-function/SupportUser",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-05-17T23:11:51+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"support:*",
|
|
"acm:DescribeCertificate",
|
|
"acm:GetCertificate",
|
|
"acm:List*",
|
|
"apigateway:GET",
|
|
"appstream:Get*",
|
|
"autoscaling:Describe*",
|
|
"aws-marketplace:ViewSubscriptions",
|
|
"cloudformation:Describe*",
|
|
"cloudformation:Get*",
|
|
"cloudformation:List*",
|
|
"cloudformation:EstimateTemplateCost",
|
|
"cloudfront:Get*",
|
|
"cloudfront:List*",
|
|
"cloudsearch:Describe*",
|
|
"cloudsearch:List*",
|
|
"cloudtrail:DescribeTrails",
|
|
"cloudtrail:GetTrailStatus",
|
|
"cloudtrail:LookupEvents",
|
|
"cloudtrail:ListTags",
|
|
"cloudtrail:ListPublicKeys",
|
|
"cloudwatch:Describe*",
|
|
"cloudwatch:Get*",
|
|
"cloudwatch:List*",
|
|
"codecommit:BatchGetRepositories",
|
|
"codecommit:Get*",
|
|
"codecommit:List*",
|
|
"codedeploy:Batch*",
|
|
"codedeploy:Get*",
|
|
"codedeploy:List*",
|
|
"codepipeline:AcknowledgeJob",
|
|
"codepipeline:AcknowledgeThirdPartyJob",
|
|
"codepipeline:ListActionTypes",
|
|
"codepipeline:ListPipelines",
|
|
"codepipeline:PollForJobs",
|
|
"codepipeline:PollForThirdPartyJobs",
|
|
"codepipeline:GetPipelineState",
|
|
"codepipeline:GetPipeline",
|
|
"cognito-identity:List*",
|
|
"cognito-identity:LookupDeveloperIdentity",
|
|
"cognito-identity:Describe*",
|
|
"cognito-idp:Describe*",
|
|
"cognito-sync:Describe*",
|
|
"cognito-sync:GetBulkPublishDetails",
|
|
"cognito-sync:GetCognitoEvents",
|
|
"cognito-sync:GetIdentityPoolConfiguration",
|
|
"cognito-sync:List*",
|
|
"config:DescribeConfigurationRecorders",
|
|
"config:DescribeConfigurationRecorderStatus",
|
|
"config:DescribeConfigRuleEvaluationStatus",
|
|
"config:DescribeConfigRules",
|
|
"config:DescribeDeliveryChannels",
|
|
"config:DescribeDeliveryChannelStatus",
|
|
"config:GetResourceConfigHistory",
|
|
"config:ListDiscoveredResources",
|
|
"datapipeline:DescribeObjects",
|
|
"datapipeline:DescribePipelines",
|
|
"datapipeline:GetPipelineDefinition",
|
|
"datapipeline:ListPipelines",
|
|
"datapipeline:QueryObjects",
|
|
"datapipeline:ReportTaskProgress",
|
|
"datapipeline:ReportTaskRunnerHeartbeat",
|
|
"devicefarm:List*",
|
|
"devicefarm:Get*",
|
|
"directconnect:Describe*",
|
|
"discovery:Describe*",
|
|
"discovery:ListConfigurations",
|
|
"dms:Describe*",
|
|
"dms:List*",
|
|
"ds:DescribeDirectories",
|
|
"ds:DescribeSnapshots",
|
|
"ds:GetDirectoryLimits",
|
|
"ds:GetSnapshotLimits",
|
|
"ds:ListAuthorizedApplications",
|
|
"dynamodb:DescribeLimits",
|
|
"dynamodb:DescribeTable",
|
|
"dynamodb:ListTables",
|
|
"ec2:Describe*",
|
|
"ec2:DescribeHosts",
|
|
"ec2:describeIdentityIdFormat",
|
|
"ec2:DescribeIdFormat",
|
|
"ec2:DescribeInstanceAttribute",
|
|
"ec2:DescribeNatGateways",
|
|
"ec2:DescribeReservedInstancesModifications",
|
|
"ec2:DescribeTags",
|
|
"ec2:GetFlowLogsCount",
|
|
"ecr:GetRepositoryPolicy",
|
|
"ecr:BatchCheckLayerAvailability",
|
|
"ecr:DescribeRepositories",
|
|
"ecr:ListImages",
|
|
"ecs:Describe*",
|
|
"ecs:List*",
|
|
"elasticache:Describe*",
|
|
"elasticache:List*",
|
|
"elasticbeanstalk:Check*",
|
|
"elasticbeanstalk:Describe*",
|
|
"elasticbeanstalk:List*",
|
|
"elasticbeanstalk:RequestEnvironmentInfo",
|
|
"elasticbeanstalk:RetrieveEnvironmentInfo",
|
|
"elasticbeanstalk:ValidateConfigurationSettings",
|
|
"elasticfilesystem:Describe*",
|
|
"elasticloadbalancing:Describe*",
|
|
"elasticmapreduce:Describe*",
|
|
"elasticmapreduce:List*",
|
|
"elastictranscoder:List*",
|
|
"elastictranscoder:ReadJob",
|
|
"elasticfilesystem:DescribeFileSystems",
|
|
"es:Describe*",
|
|
"es:List*",
|
|
"es:ESHttpGet",
|
|
"es:ESHttpHead",
|
|
"events:DescribeRule",
|
|
"events:List*",
|
|
"events:TestEventPattern",
|
|
"firehose:Describe*",
|
|
"firehose:List*",
|
|
"gamelift:List*",
|
|
"gamelift:Describe*",
|
|
"glacier:ListVaults",
|
|
"glacier:DescribeVault",
|
|
"glacier:DescribeJob",
|
|
"glacier:Get*",
|
|
"glacier:List*",
|
|
"iam:GenerateCredentialReport",
|
|
"iam:GenerateServiceLastAccessedDetails",
|
|
"iam:Get*",
|
|
"iam:List*",
|
|
"importexport:GetStatus",
|
|
"importexport:ListJobs",
|
|
"importexport:GetJobDetail",
|
|
"inspector:Describe*",
|
|
"inspector:List*",
|
|
"inspector:GetAssessmentTelemetry",
|
|
"inspector:LocalizeText",
|
|
"iot:Describe*",
|
|
"iot:Get*",
|
|
"iot:List*",
|
|
"kinesisanalytics:DescribeApplication",
|
|
"kinesisanalytics:DiscoverInputSchema",
|
|
"kinesisanalytics:GetApplicationState",
|
|
"kinesisanalytics:ListApplications",
|
|
"kinesis:Describe*",
|
|
"kinesis:Get*",
|
|
"kinesis:List*",
|
|
"kms:Describe*",
|
|
"kms:Get*",
|
|
"kms:List*",
|
|
"lambda:List*",
|
|
"lambda:Get*",
|
|
"logs:Describe*",
|
|
"logs:TestMetricFilter",
|
|
"machinelearning:Describe*",
|
|
"machinelearning:Get*",
|
|
"mobilehub:GetProject",
|
|
"mobilehub:List*",
|
|
"mobilehub:ValidateProject",
|
|
"mobilehub:VerifyServiceRole",
|
|
"opsworks:Describe*",
|
|
"rds:Describe*",
|
|
"rds:ListTagsForResource",
|
|
"redshift:Describe*",
|
|
"route53:Get*",
|
|
"route53:List*",
|
|
"route53domains:CheckDomainAvailability",
|
|
"route53domains:GetDomainDetail",
|
|
"route53domains:GetOperationDetail",
|
|
"route53domains:List*",
|
|
"s3:List*",
|
|
"sdb:GetAttributes",
|
|
"sdb:List*",
|
|
"sdb:Select*",
|
|
"servicecatalog:SearchProducts",
|
|
"servicecatalog:DescribeProduct",
|
|
"servicecatalog:DescribeProductView",
|
|
"servicecatalog:ListLaunchPaths",
|
|
"servicecatalog:DescribeProvisioningParameters",
|
|
"servicecatalog:ListRecordHistory",
|
|
"servicecatalog:DescribeRecord",
|
|
"servicecatalog:ScanProvisionedProducts",
|
|
"ses:Get*",
|
|
"ses:List*",
|
|
"sns:Get*",
|
|
"sns:List*",
|
|
"sqs:GetQueueAttributes",
|
|
"sqs:GetQueueUrl",
|
|
"sqs:ListQueues",
|
|
"sqs:ReceiveMessage",
|
|
"ssm:List*",
|
|
"ssm:Describe*",
|
|
"storagegateway:Describe*",
|
|
"storagegateway:List*",
|
|
"swf:Count*",
|
|
"swf:Describe*",
|
|
"swf:Get*",
|
|
"swf:List*",
|
|
"waf:Get*",
|
|
"waf:List*",
|
|
"workspaces:Describe*",
|
|
"workdocs:Describe*",
|
|
"workmail:Describe*",
|
|
"workmail:Get*",
|
|
"workspaces:Describe*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/job-function/",
|
|
"PolicyId": "ANPAI3V4GSSN5SJY3P2RO",
|
|
"PolicyName": "SupportUser",
|
|
"UpdateDate": "2017-05-17T23:11:51+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"SystemAdministrator": {
|
|
"Arn": "arn:aws:iam::aws:policy/job-function/SystemAdministrator",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-03-24T17:45:43+00:00",
|
|
"DefaultVersionId": "v2",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"acm:Describe*",
|
|
"acm:Get*",
|
|
"acm:List*",
|
|
"acm:Request*",
|
|
"acm:Resend*",
|
|
"autoscaling:*",
|
|
"cloudtrail:DescribeTrails",
|
|
"cloudtrail:GetTrailStatus",
|
|
"cloudtrail:ListPublicKeys",
|
|
"cloudtrail:ListTags",
|
|
"cloudtrail:LookupEvents",
|
|
"cloudtrail:StartLogging",
|
|
"cloudtrail:StopLogging",
|
|
"cloudwatch:*",
|
|
"codecommit:BatchGetRepositories",
|
|
"codecommit:CreateBranch",
|
|
"codecommit:CreateRepository",
|
|
"codecommit:Get*",
|
|
"codecommit:GitPull",
|
|
"codecommit:GitPush",
|
|
"codecommit:List*",
|
|
"codecommit:Put*",
|
|
"codecommit:Test*",
|
|
"codecommit:Update*",
|
|
"codedeploy:*",
|
|
"codepipeline:*",
|
|
"config:*",
|
|
"ds:*",
|
|
"ec2:Allocate*",
|
|
"ec2:AssignPrivateIpAddresses*",
|
|
"ec2:Associate*",
|
|
"ec2:Allocate*",
|
|
"ec2:AttachInternetGateway",
|
|
"ec2:AttachNetworkInterface",
|
|
"ec2:AttachVpnGateway",
|
|
"ec2:Bundle*",
|
|
"ec2:Cancel*",
|
|
"ec2:Copy*",
|
|
"ec2:CreateCustomerGateway",
|
|
"ec2:CreateDhcpOptions",
|
|
"ec2:CreateFlowLogs",
|
|
"ec2:CreateImage",
|
|
"ec2:CreateInstanceExportTask",
|
|
"ec2:CreateInternetGateway",
|
|
"ec2:CreateKeyPair",
|
|
"ec2:CreateNatGateway",
|
|
"ec2:CreateNetworkInterface",
|
|
"ec2:CreatePlacementGroup",
|
|
"ec2:CreateReservedInstancesListing",
|
|
"ec2:CreateRoute",
|
|
"ec2:CreateRouteTable",
|
|
"ec2:CreateSecurityGroup",
|
|
"ec2:CreateSnapshot",
|
|
"ec2:CreateSpotDatafeedSubscription",
|
|
"ec2:CreateSubnet",
|
|
"ec2:CreateTags",
|
|
"ec2:CreateVolume",
|
|
"ec2:CreateVpc",
|
|
"ec2:CreateVpcEndpoint",
|
|
"ec2:CreateVpnConnection",
|
|
"ec2:CreateVpnConnectionRoute",
|
|
"ec2:CreateVpnGateway",
|
|
"ec2:DeleteFlowLogs",
|
|
"ec2:DeleteKeyPair",
|
|
"ec2:DeleteNatGateway",
|
|
"ec2:DeleteNetworkInterface",
|
|
"ec2:DeletePlacementGroup",
|
|
"ec2:DeleteSnapshot",
|
|
"ec2:DeleteSpotDatafeedSubscription",
|
|
"ec2:DeleteSubnet",
|
|
"ec2:DeleteTags",
|
|
"ec2:DeleteVpc",
|
|
"ec2:DeleteVpcEndpoints",
|
|
"ec2:DeleteVpnConnection",
|
|
"ec2:DeleteVpnConnectionRoute",
|
|
"ec2:DeleteVpnGateway",
|
|
"ec2:DeregisterImage",
|
|
"ec2:Describe*",
|
|
"ec2:DetachInternetGateway",
|
|
"ec2:DetachNetworkInterface",
|
|
"ec2:DetachVpnGateway",
|
|
"ec2:DisableVgwRoutePropagation",
|
|
"ec2:DisableVpcClassicLinkDnsSupport",
|
|
"ec2:DisassociateAddress",
|
|
"ec2:DisassociateRouteTable",
|
|
"ec2:EnableVgwRoutePropagation",
|
|
"ec2:EnableVolumeIO",
|
|
"ec2:EnableVpcClassicLinkDnsSupport",
|
|
"ec2:GetConsoleOutput",
|
|
"ec2:GetHostReservationPurchasePreview",
|
|
"ec2:GetPasswordData",
|
|
"ec2:Import*",
|
|
"ec2:Modify*",
|
|
"ec2:MonitorInstances",
|
|
"ec2:MoveAddressToVpc",
|
|
"ec2:Purchase*",
|
|
"ec2:RegisterImage",
|
|
"ec2:Release*",
|
|
"ec2:Replace*",
|
|
"ec2:ReportInstanceStatus",
|
|
"ec2:Request*",
|
|
"ec2:Reset*",
|
|
"ec2:RestoreAddressToClassic",
|
|
"ec2:RunScheduledInstances",
|
|
"ec2:UnassignPrivateIpAddresses",
|
|
"ec2:UnmonitorInstances",
|
|
"elasticloadbalancing:*",
|
|
"events:*",
|
|
"iam:GetAccount*",
|
|
"iam:GetContextKeys*",
|
|
"iam:GetCredentialReport",
|
|
"iam:ListAccountAliases",
|
|
"iam:ListGroups",
|
|
"iam:ListOpenIDConnectProviders",
|
|
"iam:ListPolicies",
|
|
"iam:ListPoliciesGrantingServiceAccess",
|
|
"iam:ListRoles",
|
|
"iam:ListSAMLProviders",
|
|
"iam:ListServerCertificates",
|
|
"iam:Simulate*",
|
|
"iam:UpdateServerCertificate",
|
|
"iam:UpdateSigningCertificate",
|
|
"kinesis:ListStreams",
|
|
"kinesis:PutRecord",
|
|
"kms:CreateAlias",
|
|
"kms:CreateKey",
|
|
"kms:DeleteAlias",
|
|
"kms:Describe*",
|
|
"kms:GenerateRandom",
|
|
"kms:Get*",
|
|
"kms:List*",
|
|
"kms:Encrypt",
|
|
"kms:ReEncrypt*",
|
|
"lambda:Create*",
|
|
"lambda:Delete*",
|
|
"lambda:Get*",
|
|
"lambda:InvokeFunction",
|
|
"lambda:List*",
|
|
"lambda:PublishVersion",
|
|
"lambda:Update*",
|
|
"logs:*",
|
|
"rds:Describe*",
|
|
"rds:ListTagsForResource",
|
|
"route53:*",
|
|
"route53domains:*",
|
|
"ses:*",
|
|
"sns:*",
|
|
"sqs:*",
|
|
"trustedadvisor:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Action": [
|
|
"ec2:AcceptVpcPeeringConnection",
|
|
"ec2:AttachClassicLinkVpc",
|
|
"ec2:AttachVolume",
|
|
"ec2:AuthorizeSecurityGroupEgress",
|
|
"ec2:AuthorizeSecurityGroupIngress",
|
|
"ec2:CreateVpcPeeringConnection",
|
|
"ec2:DeleteCustomerGateway",
|
|
"ec2:DeleteDhcpOptions",
|
|
"ec2:DeleteInternetGateway",
|
|
"ec2:DeleteNetworkAcl*",
|
|
"ec2:DeleteRoute",
|
|
"ec2:DeleteRouteTable",
|
|
"ec2:DeleteSecurityGroup",
|
|
"ec2:DeleteVolume",
|
|
"ec2:DeleteVpcPeeringConnection",
|
|
"ec2:DetachClassicLinkVpc",
|
|
"ec2:DetachVolume",
|
|
"ec2:DisableVpcClassicLink",
|
|
"ec2:EnableVpcClassicLink",
|
|
"ec2:GetConsoleScreenshot",
|
|
"ec2:RebootInstances",
|
|
"ec2:RejectVpcPeeringConnection",
|
|
"ec2:RevokeSecurityGroupEgress",
|
|
"ec2:RevokeSecurityGroupIngress",
|
|
"ec2:RunInstances",
|
|
"ec2:StartInstances",
|
|
"ec2:StopInstances",
|
|
"ec2:TerminateInstances"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": "s3:*",
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:GetAccessKeyLastUsed",
|
|
"iam:GetGroup*",
|
|
"iam:GetInstanceProfile",
|
|
"iam:GetLoginProfile",
|
|
"iam:GetOpenIDConnectProvider",
|
|
"iam:GetPolicy*",
|
|
"iam:GetRole*",
|
|
"iam:GetSAMLProvider",
|
|
"iam:GetSSHPublicKey",
|
|
"iam:GetServerCertificate",
|
|
"iam:GetServiceLastAccessed*",
|
|
"iam:GetUser*",
|
|
"iam:ListAccessKeys",
|
|
"iam:ListAttached*",
|
|
"iam:ListEntitiesForPolicy",
|
|
"iam:ListGroupPolicies",
|
|
"iam:ListGroupsForUser",
|
|
"iam:ListInstanceProfiles*",
|
|
"iam:ListMFADevices",
|
|
"iam:ListPolicyVersions",
|
|
"iam:ListRolePolicies",
|
|
"iam:ListSSHPublicKeys",
|
|
"iam:ListSigningCertificates",
|
|
"iam:ListUserPolicies",
|
|
"iam:Upload*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"iam:GetRole",
|
|
"iam:ListRoles",
|
|
"iam:PassRole"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:iam::*:role/rds-monitoring-role",
|
|
"arn:aws:iam::*:role/ec2-sysadmin-*",
|
|
"arn:aws:iam::*:role/ecr-sysadmin-*",
|
|
"arn:aws:iam::*:role/lamdba-sysadmin-*"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/job-function/",
|
|
"PolicyId": "ANPAITJPEZXCYCBXANDSW",
|
|
"PolicyName": "SystemAdministrator",
|
|
"UpdateDate": "2017-03-24T17:45:43+00:00",
|
|
"VersionId": "v2"
|
|
},
|
|
"VMImportExportRoleForAWSConnector": {
|
|
"Arn": "arn:aws:iam::aws:policy/service-role/VMImportExportRoleForAWSConnector",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2015-09-03T20:48:59+00:00",
|
|
"DefaultVersionId": "v1",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"s3:ListBucket",
|
|
"s3:GetBucketLocation",
|
|
"s3:GetObject"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::import-to-ec2-*"
|
|
]
|
|
},
|
|
{
|
|
"Action": [
|
|
"ec2:ModifySnapshotAttribute",
|
|
"ec2:CopySnapshot",
|
|
"ec2:RegisterImage",
|
|
"ec2:Describe*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/service-role/",
|
|
"PolicyId": "ANPAJFLQOOJ6F5XNX4LAW",
|
|
"PolicyName": "VMImportExportRoleForAWSConnector",
|
|
"UpdateDate": "2015-09-03T20:48:59+00:00",
|
|
"VersionId": "v1"
|
|
},
|
|
"ViewOnlyAccess": {
|
|
"Arn": "arn:aws:iam::aws:policy/job-function/ViewOnlyAccess",
|
|
"AttachmentCount": 0,
|
|
"CreateDate": "2017-06-26T22:35:31+00:00",
|
|
"DefaultVersionId": "v3",
|
|
"Document": {
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"acm:ListCertificates",
|
|
"athena:List*",
|
|
"aws-marketplace:ViewSubscriptions",
|
|
"autoscaling:Describe*",
|
|
"batch:ListJobs",
|
|
"clouddirectory:ListAppliedSchemaArns",
|
|
"clouddirectory:ListDevelopmentSchemaArns",
|
|
"clouddirectory:ListDirectories",
|
|
"clouddirectory:ListPublishedSchemaArns",
|
|
"cloudformation:List*",
|
|
"cloudformation:DescribeStacks",
|
|
"cloudfront:List*",
|
|
"cloudhsm:ListAvailableZones",
|
|
"cloudhsm:ListLunaClients",
|
|
"cloudhsm:ListHapgs",
|
|
"cloudhsm:ListHsms",
|
|
"cloudsearch:List*",
|
|
"cloudsearch:DescribeDomains",
|
|
"cloudtrail:DescribeTrails",
|
|
"cloudtrail:LookupEvents",
|
|
"cloudwatch:List*",
|
|
"cloudwatch:GetMetricData",
|
|
"codebuild:ListBuilds*",
|
|
"codebuild:ListProjects",
|
|
"codecommit:List*",
|
|
"codedeploy:List*",
|
|
"codedeploy:Get*",
|
|
"codepipeline:ListPipelines",
|
|
"codestar:List*",
|
|
"codestar:Verify*",
|
|
"cognito-idp:List*",
|
|
"cognito-identity:ListIdentities",
|
|
"cognito-identity:ListIdentityPools",
|
|
"cognito-sync:ListDatasets",
|
|
"connect:List*",
|
|
"config:List*",
|
|
"config:Describe*",
|
|
"datapipeline:ListPipelines",
|
|
"datapipeline:DescribePipelines",
|
|
"datapipeline:GetAccountLimits",
|
|
"devicefarm:List*",
|
|
"directconnect:Describe*",
|
|
"discovery:List*",
|
|
"dms:List*",
|
|
"ds:DescribeDirectories",
|
|
"dynamodb:ListTables",
|
|
"ec2:DescribeAccountAttributes",
|
|
"ec2:DescribeAddresses",
|
|
"ec2:DescribeAvailabilityZones",
|
|
"ec2:DescribeBundleTasks",
|
|
"ec2:DescribeClassicLinkInstances",
|
|
"ec2:DescribeConversionTasks",
|
|
"ec2:DescribeCustomerGateways",
|
|
"ec2:DescribeDhcpOptions",
|
|
"ec2:DescribeExportTasks",
|
|
"ec2:DescribeFlowLogs",
|
|
"ec2:DescribeHost*",
|
|
"ec2:DescribeIdentityIdFormat",
|
|
"ec2:DescribeIdFormat",
|
|
"ec2:DescribeImage*",
|
|
"ec2:DescribeImport*",
|
|
"ec2:DescribeInstance*",
|
|
"ec2:DescribeInternetGateways",
|
|
"ec2:DescribeKeyPairs",
|
|
"ec2:DescribeMovingAddresses",
|
|
"ec2:DescribeNatGateways",
|
|
"ec2:DescribeNetwork*",
|
|
"ec2:DescribePlacementGroups",
|
|
"ec2:DescribePrefixLists",
|
|
"ec2:DescribeRegions",
|
|
"ec2:DescribeReserved*",
|
|
"ec2:DescribeRouteTables",
|
|
"ec2:DescribeSecurityGroups",
|
|
"ec2:DescribeSnapshot*",
|
|
"ec2:DescribeSpot*",
|
|
"ec2:DescribeSubnets",
|
|
"ec2:DescribeVolume*",
|
|
"ec2:DescribeVpc*",
|
|
"ec2:DescribeVpnGateways",
|
|
"ecr:DescribeRepositories",
|
|
"ecr:ListImages",
|
|
"ecs:List*",
|
|
"elasticache:Describe*",
|
|
"elasticbeanstalk:DescribeApplicationVersions",
|
|
"elasticbeanstalk:DescribeApplications",
|
|
"elasticbeanstalk:DescribeEnvironments",
|
|
"elasticbeanstalk:ListAvailableSolutionStacks",
|
|
"elasticloadbalancing:DescribeListeners",
|
|
"elasticloadbalancing:DescribeLoadBalancers",
|
|
"elasticloadbalancing:DescribeTargetGroups",
|
|
"elasticloadbalancing:DescribeTargetHealth",
|
|
"elasticfilesystem:DescribeFileSystems",
|
|
"elasticmapreduce:List*",
|
|
"elastictranscoder:List*",
|
|
"es:DescribeElasticsearchDomain",
|
|
"es:DescribeElasticsearchDomains",
|
|
"es:ListDomainNames",
|
|
"events:ListRuleNamesByTarget",
|
|
"events:ListRules",
|
|
"events:ListTargetsByRule",
|
|
"firehose:List*",
|
|
"firehose:DescribeDeliveryStream",
|
|
"gamelift:List*",
|
|
"glacier:List*",
|
|
"iam:List*",
|
|
"iam:GetAccountSummary",
|
|
"iam:GetLoginProfile",
|
|
"importexport:ListJobs",
|
|
"inspector:List*",
|
|
"iot:List*",
|
|
"kinesis:ListStreams",
|
|
"kinesisanalytics:ListApplications",
|
|
"kms:ListKeys",
|
|
"lambda:List*",
|
|
"lex:GetBotAliases",
|
|
"lex:GetBotChannelAssociations",
|
|
"lex:GetBots",
|
|
"lex:GetBotVersions",
|
|
"lex:GetIntents",
|
|
"lex:GetIntentVersions",
|
|
"lex:GetSlotTypes",
|
|
"lex:GetSlotTypeVersions",
|
|
"lex:GetUtterancesView",
|
|
"lightsail:GetBlueprints",
|
|
"lightsail:GetBundles",
|
|
"lightsail:GetInstances",
|
|
"lightsail:GetInstanceSnapshots",
|
|
"lightsail:GetKeyPair",
|
|
"lightsail:GetRegions",
|
|
"lightsail:GetStaticIps",
|
|
"lightsail:IsVpcPeered",
|
|
"logs:Describe*",
|
|
"machinelearning:Describe*",
|
|
"mobilehub:ListAvailableFeatures",
|
|
"mobilehub:ListAvailableRegions",
|
|
"mobilehub:ListProjects",
|
|
"opsworks:Describe*",
|
|
"opsworks-cm:Describe*",
|
|
"organizations:List*",
|
|
"mobiletargeting:GetApplicationSettings",
|
|
"mobiletargeting:GetCampaigns",
|
|
"mobiletargeting:GetImportJobs",
|
|
"mobiletargeting:GetSegments",
|
|
"polly:Describe*",
|
|
"polly:List*",
|
|
"rds:Describe*",
|
|
"redshift:DescribeClusters",
|
|
"redshift:DescribeEvents",
|
|
"redshift:ViewQueriesInConsole",
|
|
"route53:List*",
|
|
"route53:Get*",
|
|
"route53domains:List*",
|
|
"s3:ListAllMyBuckets",
|
|
"s3:ListBucket",
|
|
"sdb:List*",
|
|
"servicecatalog:List*",
|
|
"ses:List*",
|
|
"shield:List*",
|
|
"states:ListActivities",
|
|
"states:ListStateMachines",
|
|
"sns:List*",
|
|
"sqs:ListQueues",
|
|
"ssm:ListAssociations",
|
|
"ssm:ListDocuments",
|
|
"storagegateway:ListGateways",
|
|
"storagegateway:ListLocalDisks",
|
|
"storagegateway:ListVolumeRecoveryPoints",
|
|
"storagegateway:ListVolumes",
|
|
"swf:List*",
|
|
"trustedadvisor:Describe*",
|
|
"waf:List*",
|
|
"waf-regional:List*",
|
|
"workdocs:DescribeAvailableDirectories",
|
|
"workdocs:DescribeInstances",
|
|
"workmail:Describe*",
|
|
"workspaces:Describe*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
},
|
|
"IsAttachable": true,
|
|
"IsDefaultVersion": true,
|
|
"Path": "/job-function/",
|
|
"PolicyId": "ANPAID22R6XPJATWOFDK6",
|
|
"PolicyName": "ViewOnlyAccess",
|
|
"UpdateDate": "2017-06-26T22:35:31+00:00",
|
|
"VersionId": "v3"
|
|
}
|
|
}"""
|