046561bbb0
* Adding module for AWS Config service * adding integration tests * Split resource types into their own modules * Properly use resource_prefix and retry on IAM "eventual consistency" * Add config aggregator module * AWS config aggregator integration test fixes * AWS config recorder module * Config aggregation auth rule * Use resource_prefix in IAM role name * Disable config tests
23 lines
622 B
Django/Jinja
23 lines
622 B
Django/Jinja
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Action": "sns:Publish",
|
|
"Resource": "{{ config_sns_topic.sns_arn }}",
|
|
"Effect": "Allow",
|
|
"Sid": "PublishToSNS"
|
|
},
|
|
{
|
|
"Action": "s3:PutObject",
|
|
"Resource": "arn:aws:s3:::{{ config_s3_bucket }}/*",
|
|
"Effect": "Allow",
|
|
"Sid": "AllowPutS3Object"
|
|
},
|
|
{
|
|
"Action": "s3:GetBucketAcl",
|
|
"Resource": "arn:aws:s3:::{{ config_s3_bucket }}",
|
|
"Effect": "Allow",
|
|
"Sid": "AllowGetS3Acl"
|
|
}
|
|
]
|
|
}
|