Skip to content

Instantly share code, notes, and snippets.

@Ajeo

Ajeo/IAMCredentials.json

Forked from ServerlessBot/IAMCredentials.json
Created April 22, 2019 17:24
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save Ajeo/4c4f72b8a8f13751d7ed470cb27c06a9 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save Ajeo/4c4f72b8a8f13751d7ed470cb27c06a9 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. @ServerlessBot ServerlessBot revised this gist Nov 30, 2018. 1 changed file with 1 addition and 15 deletions.
    16 changes: 1 addition & 15 deletions IAMCredentials.json
    View file
    Original file line number Diff line number Diff line change
    @@ -63,6 +63,7 @@
    "kinesis:CreateStream",
    "kinesis:DeleteStream",
    "kinesis:DescribeStream",
    "lambda:*",
    "logs:CreateLogGroup",
    "logs:DeleteLogGroup",
    "logs:DescribeLogGroups",
    @@ -100,21 +101,6 @@
    ],
    "Effect": "Allow",
    "Resource": "*"
    },
    {
    "Action": [
    "lambda:*",
    "lambda:Get*",
    "lambda:List*",
    "lambda:Update*"
    ],
    "Effect": "Allow",
    "Resource": [
    "arn:aws:lambda:*:*:event-source-mapping:*",
    "arn:aws:lambda:*:*:function:*",
    "arn:aws:lambda:*:*:layer:*",
    "arn:aws:lambda:*:*:layer:*:*"
    ]
    }
    ],
    "Version": "2012-10-17"
  2. @ServerlessBot ServerlessBot revised this gist Nov 30, 2018. 1 changed file with 5 additions and 0 deletions.
    5 changes: 5 additions & 0 deletions IAMCredentials.json
    View file
    Original file line number Diff line number Diff line change
    @@ -55,6 +55,11 @@
    "iam:GetRole",
    "iam:PassRole",
    "iam:PutRolePolicy",
    "iot:CreateTopicRule",
    "iot:DeleteTopicRule",
    "iot:DisableTopicRule",
    "iot:EnableTopicRule",
    "iot:ReplaceTopicRule",
    "kinesis:CreateStream",
    "kinesis:DeleteStream",
    "kinesis:DescribeStream",
  3. @ServerlessBot ServerlessBot revised this gist Nov 30, 2018. 1 changed file with 11 additions and 0 deletions.
    11 changes: 11 additions & 0 deletions IAMCredentials.json
    View file
    Original file line number Diff line number Diff line change
    @@ -79,6 +79,17 @@
    "s3:PutBucketWebsite",
    "s3:PutEncryptionConfiguration",
    "s3:PutObject",
    "sns:CreateTopic",
    "sns:DeleteTopic",
    "sns:GetSubscriptionAttributes",
    "sns:GetTopicAttributes",
    "sns:ListSubscriptions",
    "sns:ListSubscriptionsByTopic",
    "sns:ListTopics",
    "sns:SetSubscriptionAttributes",
    "sns:SetTopicAttributes",
    "sns:Subscribe",
    "sns:Unsubscribe",
    "states:CreateStateMachine",
    "states:DeleteStateMachine"
    ],
  4. @ServerlessBot ServerlessBot revised this gist Nov 30, 2018. 1 changed file with 1 addition and 0 deletions.
    1 change: 1 addition & 0 deletions IAMCredentials.json
    View file
    Original file line number Diff line number Diff line change
    @@ -73,6 +73,7 @@
    "s3:GetObjectVersion",
    "s3:ListAllMyBuckets",
    "s3:ListBucket",
    "s3:PutBucketNotification",
    "s3:PutBucketPolicy",
    "s3:PutBucketTagging",
    "s3:PutBucketWebsite",
  5. @ServerlessBot ServerlessBot revised this gist Nov 30, 2018. 1 changed file with 4 additions and 0 deletions.
    4 changes: 4 additions & 0 deletions IAMCredentials.json
    View file
    Original file line number Diff line number Diff line change
    @@ -43,8 +43,12 @@
    "ec2:ModifyVpcAttribute",
    "events:DeleteRule",
    "events:DescribeRule",
    "events:ListRuleNamesByTarget",
    "events:ListRules",
    "events:ListTargetsByRule",
    "events:PutRule",
    "events:PutTargets",
    "events:RemoveTargets",
    "iam:CreateRole",
    "iam:DeleteRole",
    "iam:DeleteRolePolicy",
  6. @ServerlessBot ServerlessBot renamed this gist Nov 29, 2018. 1 changed file with 4 additions and 0 deletions.
    4 changes: 4 additions & 0 deletions IAMCredentials.JSON → IAMCredentials.json
    View file
    Original file line number Diff line number Diff line change
    @@ -41,6 +41,10 @@
    "ec2:Describe*",
    "ec2:DetachInternetGateway",
    "ec2:ModifyVpcAttribute",
    "events:DeleteRule",
    "events:DescribeRule",
    "events:ListRules",
    "events:PutRule",
    "iam:CreateRole",
    "iam:DeleteRole",
    "iam:DeleteRolePolicy",
  7. @ServerlessBot ServerlessBot revised this gist Nov 29, 2018. 1 changed file with 10 additions and 25 deletions.
    35 changes: 10 additions & 25 deletions IAMCredentials.JSON
    View file
    Original file line number Diff line number Diff line change
    @@ -1,29 +1,8 @@
    {
    "Version": "2012-10-17",
    "Statement": [
    {
    "Action": "apigateway:*",
    "Effect": "Allow",
    "Resource": "arn:aws:apigateway:*::/restapis/GATEWAY_ID/*"
    },
    {
    "Action": [
    "apigateway:GET",
    "lambda:AddPermission",
    "lambda:CreateAlias",
    "lambda:DeleteFunction",
    "lambda:InvokeFunction",
    "lambda:PublishVersion",
    "lambda:RemovePermission"
    ],
    "Effect": "Allow",
    "Resource": [
    "arn:aws:apigateway:*::/restapis",
    "arn:aws:lambda:*:*:function:*"
    ]
    },
    {
    "Action": [
    "apigateway:*",
    "cloudformation:CancelUpdateStack",
    "cloudformation:ContinueUpdateRollback",
    "cloudformation:CreateChangeSet",
    @@ -99,13 +78,19 @@
    },
    {
    "Action": [
    "lambda:CreateFunction",
    "lambda:*",
    "lambda:Get*",
    "lambda:List*",
    "lambda:Update*"
    ],
    "Effect": "Allow",
    "Resource": "arn:aws:lambda:*:*:function:*"
    "Resource": [
    "arn:aws:lambda:*:*:event-source-mapping:*",
    "arn:aws:lambda:*:*:function:*",
    "arn:aws:lambda:*:*:layer:*",
    "arn:aws:lambda:*:*:layer:*:*"
    ]
    }
    ]
    ],
    "Version": "2012-10-17"
    }
  8. @ServerlessBot ServerlessBot created this gist Nov 29, 2018.
    111 changes: 111 additions & 0 deletions IAMCredentials.JSON
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,111 @@
    {
    "Version": "2012-10-17",
    "Statement": [
    {
    "Action": "apigateway:*",
    "Effect": "Allow",
    "Resource": "arn:aws:apigateway:*::/restapis/GATEWAY_ID/*"
    },
    {
    "Action": [
    "apigateway:GET",
    "lambda:AddPermission",
    "lambda:CreateAlias",
    "lambda:DeleteFunction",
    "lambda:InvokeFunction",
    "lambda:PublishVersion",
    "lambda:RemovePermission"
    ],
    "Effect": "Allow",
    "Resource": [
    "arn:aws:apigateway:*::/restapis",
    "arn:aws:lambda:*:*:function:*"
    ]
    },
    {
    "Action": [
    "cloudformation:CancelUpdateStack",
    "cloudformation:ContinueUpdateRollback",
    "cloudformation:CreateChangeSet",
    "cloudformation:CreateStack",
    "cloudformation:CreateUploadBucket",
    "cloudformation:DeleteStack",
    "cloudformation:Describe*",
    "cloudformation:EstimateTemplateCost",
    "cloudformation:ExecuteChangeSet",
    "cloudformation:Get*",
    "cloudformation:List*",
    "cloudformation:PreviewStackUpdate",
    "cloudformation:UpdateStack",
    "cloudformation:UpdateTerminationProtection",
    "cloudformation:ValidateTemplate",
    "dynamodb:CreateTable",
    "dynamodb:DeleteTable",
    "dynamodb:DescribeTable",
    "ec2:AttachInternetGateway",
    "ec2:AuthorizeSecurityGroupIngress",
    "ec2:CreateInternetGateway",
    "ec2:CreateNetworkAcl",
    "ec2:CreateNetworkAclEntry",
    "ec2:CreateRouteTable",
    "ec2:CreateSecurityGroup",
    "ec2:CreateSubnet",
    "ec2:CreateTags",
    "ec2:CreateVpc",
    "ec2:DeleteInternetGateway",
    "ec2:DeleteNetworkAcl",
    "ec2:DeleteNetworkAclEntry",
    "ec2:DeleteRouteTable",
    "ec2:DeleteSecurityGroup",
    "ec2:DeleteSubnet",
    "ec2:DeleteVpc",
    "ec2:Describe*",
    "ec2:DetachInternetGateway",
    "ec2:ModifyVpcAttribute",
    "iam:CreateRole",
    "iam:DeleteRole",
    "iam:DeleteRolePolicy",
    "iam:GetRole",
    "iam:PassRole",
    "iam:PutRolePolicy",
    "kinesis:CreateStream",
    "kinesis:DeleteStream",
    "kinesis:DescribeStream",
    "logs:CreateLogGroup",
    "logs:DeleteLogGroup",
    "logs:DescribeLogGroups",
    "logs:DescribeLogStreams",
    "logs:FilterLogEvents",
    "logs:GetLogEvents",
    "s3:CreateBucket",
    "s3:DeleteBucket",
    "s3:DeleteBucketPolicy",
    "s3:DeleteObject",
    "s3:DeleteObjectVersion",
    "s3:GetObject",
    "s3:GetObjectVersion",
    "s3:ListAllMyBuckets",
    "s3:ListBucket",
    "s3:PutBucketPolicy",
    "s3:PutBucketTagging",
    "s3:PutBucketWebsite",
    "s3:PutEncryptionConfiguration",
    "s3:PutObject",
    "states:CreateStateMachine",
    "states:DeleteStateMachine"
    ],
    "Effect": "Allow",
    "Resource": "*"
    },
    {
    "Action": [
    "lambda:CreateFunction",
    "lambda:Get*",
    "lambda:List*",
    "lambda:Update*"
    ],
    "Effect": "Allow",
    "Resource": "arn:aws:lambda:*:*:function:*"
    }
    ]
    }