-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathpolicy.json
70 lines (70 loc) · 2 KB
/
policy.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "VisualEditor0",
"Effect": "Allow",
"Action": [
"s3:ListBucket"
],
"Resource": "arn:aws:s3:::*"
},
{
"Sid": "VisualEditor1",
"Effect": "Allow",
"Action": [
"s3:PutObject",
"s3:GetObject"
],
"Resource": "arn:aws:s3:::*/*"
},
{
"Sid": "VisualEditor2",
"Effect": "Allow",
"Action": [
"s3-object-lambda:GetObject",
"s3-object-lambda:PutObject",
"s3-object-lambda:ListBucket",
"s3-object-lambda:GetObjectVersion",
"s3-object-lambda:ListBucketVersions"
],
"Resource": "arn:aws:s3-object-lambda:*:${AWS::AccountId}:accesspoint/*"
},
{
"Sid": "VisualEditor3",
"Effect": "Allow",
"Action": [
"fsx:UpdateFileSystem",
"fsx:UpdateVolume"
],
"Resource": [
"arn:aws:fsx:*:${AWS::AccountId}:file-system/*",
"arn:aws:fsx:*:${AWS::AccountId}:volume/*"
]
},
{
"Sid": "VisualEditor4",
"Effect": "Allow",
"Action": [
"fsx:DescribeFileSystems",
"fsx:DescribeVolumes"
],
"Resource": "*"
},
{
"Sid": "VisualEditor5",
"Effect": "Allow",
"Action": "ses:SendEmail",
"Resource": [
"arn:aws:ses:*:${AWS::AccountId}:configuration-set/*",
"arn:aws:ses:*:${AWS::AccountId}:identity/*"
]
},
{
"Sid": "VisualEditor6",
"Effect": "Allow",
"Action": "ssm:GetParameter",
"Resource": "arn:aws:ssm:*:${AWS::AccountId}:parameter/*"
}
]
}