Skip to content

Commit 4f8d375

Browse files
add aws permissions back (#33605)
1 parent 5aecc55 commit 4f8d375

File tree

1 file changed

+1
-110
lines changed

1 file changed

+1
-110
lines changed

layouts/shortcodes/aws-permissions.md

Lines changed: 1 addition & 110 deletions
Original file line numberDiff line numberDiff line change
@@ -7,116 +7,7 @@ To correctly set up the AWS Integration, you must attach the relevant IAM polici
77
"Version": "2012-10-17",
88
"Statement": [
99
{
10-
"Action": [
11-
"account:GetAccountInformation",
12-
"airflow:GetEnvironment",
13-
"airflow:ListEnvironments",
14-
"apigateway:GET",
15-
"appsync:ListGraphqlApis",
16-
"autoscaling:Describe*",
17-
"backup:List*",
18-
"batch:DescribeJobDefinitions",
19-
"batch:DescribeJobQueues",
20-
"batch:DescribeJobs",
21-
"batch:ListJobs",
22-
"bcm-data-exports:GetExport",
23-
"bcm-data-exports:ListExports",
24-
"budgets:ViewBudget",
25-
"cloudfront:GetDistributionConfig",
26-
"cloudfront:ListDistributions",
27-
"cloudtrail:DescribeTrails",
28-
"cloudtrail:GetTrail",
29-
"cloudtrail:GetTrailStatus",
30-
"cloudtrail:ListTrails",
31-
"cloudtrail:LookupEvents",
32-
"cloudwatch:Describe*",
33-
"cloudwatch:Get*",
34-
"cloudwatch:List*",
35-
"codebuild:BatchGetProjects",
36-
"codebuild:ListProjects",
37-
"codedeploy:BatchGet*",
38-
"codedeploy:List*",
39-
"cur:DescribeReportDefinitions",
40-
"directconnect:Describe*",
41-
"dms:DescribeReplicationInstances",
42-
"dynamodb:Describe*",
43-
"dynamodb:List*",
44-
"ec2:Describe*",
45-
"ecs:Describe*",
46-
"ecs:List*",
47-
"eks:DescribeCluster",
48-
"eks:ListClusters",
49-
"elasticache:Describe*",
50-
"elasticache:List*",
51-
"elasticfilesystem:DescribeAccessPoints",
52-
"elasticfilesystem:DescribeFileSystems",
53-
"elasticfilesystem:DescribeTags",
54-
"elasticloadbalancing:Describe*",
55-
"elasticmapreduce:Describe*",
56-
"elasticmapreduce:List*",
57-
"es:DescribeElasticsearchDomains",
58-
"es:ListDomainNames",
59-
"es:ListTags",
60-
"events:CreateEventBus",
61-
"fsx:DescribeFileSystems",
62-
"fsx:ListTagsForResource",
63-
"health:DescribeAffectedEntities",
64-
"health:DescribeEventDetails",
65-
"health:DescribeEvents",
66-
"iam:ListAccountAliases",
67-
"kinesis:Describe*",
68-
"kinesis:List*",
69-
"lambda:List*",
70-
"logs:DeleteSubscriptionFilter",
71-
"logs:DescribeDeliveries",
72-
"logs:DescribeDeliverySources",
73-
"logs:DescribeLogGroups",
74-
"logs:DescribeLogStreams",
75-
"logs:DescribeSubscriptionFilters",
76-
"logs:FilterLogEvents",
77-
"logs:GetDeliveryDestination",
78-
"logs:PutSubscriptionFilter",
79-
"logs:TestMetricFilter",
80-
"network-firewall:DescribeLoggingConfiguration",
81-
"network-firewall:ListFirewalls",
82-
"oam:ListAttachedLinks",
83-
"oam:ListSinks",
84-
"organizations:Describe*",
85-
"organizations:List*",
86-
"rds:Describe*",
87-
"rds:List*",
88-
"redshift-serverless:ListNamespaces",
89-
"redshift:DescribeClusters",
90-
"redshift:DescribeLoggingStatus",
91-
"route53:List*",
92-
"route53resolver:ListResolverQueryLogConfigs",
93-
"s3:GetBucketLocation",
94-
"s3:GetBucketLogging",
95-
"s3:GetBucketNotification",
96-
"s3:GetBucketTagging",
97-
"s3:ListAllMyBuckets",
98-
"s3:PutBucketNotification",
99-
"ses:Get*",
100-
"ses:List*",
101-
"sns:GetSubscriptionAttributes",
102-
"sns:List*",
103-
"sns:Publish",
104-
"sqs:ListQueues",
105-
"ssm:GetServiceSetting",
106-
"ssm:ListCommands",
107-
"states:DescribeStateMachine",
108-
"states:ListStateMachines",
109-
"sts:AssumeRole",
110-
"support:DescribeTrustedAdvisor*",
111-
"support:RefreshTrustedAdvisorCheck",
112-
"tag:GetResources",
113-
"tag:GetTagKeys",
114-
"tag:GetTagValues",
115-
"timestream:DescribeEndpoints",
116-
"wafv2:ListLoggingConfigurations",
117-
"xray:BatchGetTraces",
118-
"xray:GetTraceSummaries"
119-
],
10+
"Action": {{ $.Site.Data.aws_permissions | jsonify (dict "prefix" " " "indent" " ") }},
12011
"Effect": "Allow",
12112
"Resource": "*"
12213
}

0 commit comments

Comments
 (0)