ansible/hacking/aws_config/testing_policies/devops-policy.json

40 lines
1.1 KiB
JSON
Raw Normal View History

{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowCodeCommitModuleTests",
"Effect": "Allow",
"Action": [
"codecommit:ListRepositories",
"codecommit:*Repository",
"codecommit:*RepositoryDescription"
],
"Resource": [
"*"
]
},
{
"Sid": "AllowCloudformationTests",
"Effect": "Allow",
"Action": [
"cloudformation:CreateChangeSet",
"cloudformation:CreateStack",
"cloudformation:DeleteChangeSet",
"cloudformation:DeleteStack",
"cloudformation:DescribeChangeSet",
"cloudformation:DescribeStackEvents",
"cloudformation:DescribeStacks",
"cloudformation:GetStackPolicy",
"cloudformation:GetTemplate",
"cloudformation:ListChangeSets",
"cloudformation:ListStackResources",
"cloudformation:UpdateStack",
"cloudformation:UpdateTerminationProtection"
],
"Resource": [
"*"
]
}
]
}