LambdaSharpTool/src/LambdaSharp.Tool/Resources/IAM-Mappings.yml at main · LambdaSharp/LambdaSharpTool · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
AWS::DynamoDB::Table:
  ReadOnly:
    - dynamodb:BatchGetItem
    - dynamodb:DescribeStream
    - dynamodb:DescribeTable
    - dynamodb:GetItem
    - dynamodb:GetRecords
    - dynamodb:GetShardIterator
    - dynamodb:Query
    - dynamodb:Scan
  ReadWrite:
    - dynamodb:BatchGetItem
    - dynamodb:BatchWriteItem
    - dynamodb:DeleteItem
    - dynamodb:DescribeStream
    - dynamodb:DescribeTable
    - dynamodb:GetItem
    - dynamodb:GetRecords
    - dynamodb:GetShardIterator
    - dynamodb:PutItem
    - dynamodb:Query
    - dynamodb:Scan
    - dynamodb:UpdateItem
  Subscribe:
    - dynamodb:DescribeStream
    - dynamodb:GetRecords
    - dynamodb:GetShardIterator
    - dynamodb:ListStreams
  Full:
    - dynamodb:*

AWS::S3::Bucket:
  ReadOnly:
    - s3:GetObject
    - s3:GetObjectAcl
    - s3:GetObjectTagging
    - s3:GetObjectTorrent
    - s3:GetObjectVersion
    - s3:GetObjectVersionAcl
    - s3:GetObjectVersionTagging
    - s3:GetObjectVersionTorrent
  ReadWrite:
    - s3:CreateBucket
    - s3:AbortMultipartUpload
    - s3:DeleteObject
    - s3:DeleteObjectTagging
    - s3:DeleteObjectVersion
    - s3:DeleteObjectVersionTagging
    - s3:GetBucketLocation
    - s3:GetObject
    - s3:GetObjectAcl
    - s3:GetObjectTagging
    - s3:GetObjectTorrent
    - s3:GetObjectVersion
    - s3:GetObjectVersionAcl
    - s3:GetObjectVersionTagging
    - s3:GetObjectVersionTorrent
    - s3:ListBucket
    - s3:ListBucketMultipartUploads
    - s3:ListMultipartUploadParts
    - s3:PutObject
    - s3:PutObjectAcl
    - s3:PutObjectTagging
    - s3:PutObjectVersionAcl
    - s3:PutObjectVersionTagging
    - s3:RestoreObject
  Full:
    - s3:*

AWS::SNS::Topic:
  Subscribe:
    - sns:Subscribe
  Publish:
    - sns:Publish
  Full:
    - sns:*

"AWS::SQS::Queue":
  Receive:
    - sqs:ChangeMessageVisibility
    - sqs:ChangeMessageVisibilityBatch
    - sqs:DeleteMessage
    - sqs:DeleteMessageBatch
    - sqs:GetQueueAttributes
    - sqs:GetQueueUrl
    - sqs:ListQueueTags
    - sqs:ReceiveMessage
  Send:
    - sqs:GetQueueUrl
    - sqs:SendMessage
    - sqs:SendMessageBatch
  Full:
    - sqs:*

AWS::Kinesis::Stream:
  Subscribe:
    - kinesis:DescribeStream
    - kinesis:GetRecords
    - kinesis:GetShardIterator
  Publish:
    - kinesis:DescribeStream
    - kinesis:PutRecord
    - kinesis:PutRecords
  Full:
    - kinesis:*