ansible/hacking/aws_config/testing_policies/cloudfront-policy.json

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "AllowCloudfrontUsage",
            "Effect": "Allow",
            "Action": [
                "cloudfront:CreateDistribution",
                "cloudfront:CreateDistributionWithTags",
                "cloudfront:CreateCloudFrontOriginAccessIdentity",
                "cloudfront:DeleteDistribution",
                "cloudfront:GetDistribution",
                "cloudfront:GetStreamingDistribution",
                "cloudfront:GetDistributionConfig",
                "cloudfront:GetStreamingDistributionConfig",
                "cloudfront:GetInvalidation",
                "cloudfront:ListDistributions",
                "cloudfront:ListDistributionsByWebACLId",
                "cloudfront:ListInvalidations",
                "cloudfront:ListStreamingDistributions",
                "cloudfront:ListTagsForResource",
                "cloudfront:TagResource",
                "cloudfront:UntagResource",
                "cloudfront:UpdateDistribution"
            ],
            "Resource": "*"
        }
    ]
}
[cloud] New module cloudfront_distribution (#31284) * added cloudfont.py, modified cloudfront_facts.py class name and fixed a minor bug * Improvements to cloudfront_distribution * Reduce the scope of the cloudfront_distribution module * Remove presigning * Remove streaming distribution functionality * Add full test suite for cloudfront distribution * Meet Ansible AWS guidelines * Make requested changes Fix tests Use built-in waiter Update copyright 2018-01-17 17:03:23 +01:00			`{`
			`"Version": "2012-10-17",`
			`"Statement": [`
			`{`
			`"Sid": "AllowCloudfrontUsage",`
			`"Effect": "Allow",`
			`"Action": [`
			`"cloudfront:CreateDistribution",`
			`"cloudfront:CreateDistributionWithTags",`
[cloud][test]Add missing IAM policy for cloudfront (#38248) Cloudfront needs CreateOriginAccessIdentity Add profile parameter to setup-iam.yml. Could arguably just use AWS_PROFILE but given that other tasks are using profile, should be consistent. 2018-04-05 20:06:04 +02:00			`"cloudfront:CreateCloudFrontOriginAccessIdentity",`
[cloud] New module cloudfront_distribution (#31284) * added cloudfont.py, modified cloudfront_facts.py class name and fixed a minor bug * Improvements to cloudfront_distribution * Reduce the scope of the cloudfront_distribution module * Remove presigning * Remove streaming distribution functionality * Add full test suite for cloudfront distribution * Meet Ansible AWS guidelines * Make requested changes Fix tests Use built-in waiter Update copyright 2018-01-17 17:03:23 +01:00			`"cloudfront:DeleteDistribution",`
			`"cloudfront:GetDistribution",`
			`"cloudfront:GetStreamingDistribution",`
			`"cloudfront:GetDistributionConfig",`
			`"cloudfront:GetStreamingDistributionConfig",`
			`"cloudfront:GetInvalidation",`
			`"cloudfront:ListDistributions",`
			`"cloudfront:ListDistributionsByWebACLId",`
			`"cloudfront:ListInvalidations",`
			`"cloudfront:ListStreamingDistributions",`
			`"cloudfront:ListTagsForResource",`
			`"cloudfront:TagResource",`
			`"cloudfront:UntagResource",`
			`"cloudfront:UpdateDistribution"`
			`],`
			`"Resource": "*"`
			`}`
			`]`
			`}`