awskillswitch/switch.conf at main · secengjeff/awskillswitch · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
{
   "switchConfigVersion":"1.0",
   "switchPolicies":{
      "scpPolicy":{
         "Version":"2012-10-17",
         "Statement":[
            {
               "Effect":"Allow",
               "Action":[
                  "cloudtrail:LookupEvents",
                  "cloudtrail:GetTrailStatus",
                  "cloudtrail:DescribeTrails",
                  "cloudtrail:GetEventSelectors",
                  "cloudtrail:ListTags",
                  "cloudtrail:ListTrails",
                  "securityhub:GetFindings",
                  "securityhub:BatchUpdateFindings",
                  "securityhub:DescribeHub",
                  "securityhub:ListEnabledProductsForImport",
                  "securityhub:ListFindings",
                  "securityhub:ListInvitations",
                  "securityhub:ListMembers",
                  "guardduty:GetFindings",
                  "guardduty:ListFindings",
                  "guardduty:GetDetector",
                  "guardduty:DescribePublishingDestination",
                  "rds:DescribeDBInstances",
                  "rds:DescribeDBClusters",
                  "es:ESHttpGet",
                  "es:ESHttpHead",
                  "es:ESHttpPost",
                  "es:ESHttpPut",
                  "apigateway:GET",
                  "apigateway:POST",
                  "apigateway:PUT",
                  "apigateway:PATCH",
                  "execute-api:Invoke",
                  "apigateway:CreateDeployment",
                  "apigateway:GetDeployment",
                  "apigateway:GetDeployments",
                  "apigateway:GetStage",
                  "apigateway:GetStages",
                  "elasticbeanstalk:Describe*",
                  "ecs:ListClusters",
                  "ecs:DescribeClusters",
                  "ecs:ListTasks",
                  "ecs:DescribeTasks",
                  "eks:ListClusters",
                  "eks:DescribeCluster",
                  "sqs:SendMessage",
                  "sqs:ReceiveMessage",
                  "sqs:GetQueueAttributes",
                  "sns:Publish",
                  "ses:SendEmail",
                  "ses:SendRawEmail",
                  "ssm:GetParameters",
                  "ssm:GetParameter",
                  "kinesis:PutRecord",
                  "kinesis:PutRecords",
                  "autoscaling:Describe*",
                  "autoscaling:TerminateInstanceInAutoScalingGroup",
                  "cloudwatch:Describe*",
                  "cloudwatch:Get*",
                  "cloudwatch:List*",
                  "cloudwatch:PutMetricData",
                  "logs:CreateLogStream",
                  "logs:PutLogEvents",
                  "elasticloadbalancing:Describe*",
                  "elasticloadbalancing:RegisterTargets",
                  "elasticloadbalancing:DeregisterTargets",
                  "s3:PutObject",
                  "s3:GetObject"
               ],
               "Resource":"*"
            },
            {
               "Effect":"Deny",
               "Action":"*",
               "Resource":"*"
            }
         ]
      }
   }
}