924352a051
* Combine testing policies Because of the maximum of 10 policies per group, need to consolidate testing policies as best we can. * Tidy put-account-setting tasks and add permission Using `environment` and `command` rather than `shell` avoids the need for `no_log` and means that people can fix the problem * refactor ecs_cluster test suite move from runme.sh technique to virtualenv use ec2_instance rather than ec2 module to avoid need for boto
50 lines
1.4 KiB
JSON
50 lines
1.4 KiB
JSON
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Sid": "AllowS3AnsibleTestBuckets",
|
|
"Action": [
|
|
"s3:CreateBucket",
|
|
"s3:DeleteBucket",
|
|
"s3:DeleteObject",
|
|
"s3:GetBucketPolicy",
|
|
"s3:GetBucketRequestPayment",
|
|
"s3:GetBucketTagging",
|
|
"s3:GetBucketVersioning",
|
|
"s3:GetEncryptionConfiguration",
|
|
"s3:GetObject",
|
|
"s3:HeadBucket",
|
|
"s3:ListBucket",
|
|
"s3:PutBucketAcl",
|
|
"s3:PutBucketPolicy",
|
|
"s3:PutBucketRequestPayment",
|
|
"s3:PutBucketTagging",
|
|
"s3:PutBucketVersioning",
|
|
"s3:PutEncryptionConfiguration",
|
|
"s3:PutObject",
|
|
"s3:PutObjectAcl"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::ansible-test-*",
|
|
"arn:aws:s3:::ansible-test-*/*"
|
|
]
|
|
},
|
|
{
|
|
"Sid": "AllowListingS3Buckets",
|
|
"Action": [
|
|
"s3:ListAllMyBuckets"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Sid": "ManageEFS",
|
|
"Effect": "Allow",
|
|
"Action": [
|
|
"elasticfilesystem:*"
|
|
],
|
|
"Resource": "*"
|
|
}
|
|
]
|
|
}
|