|
1 | 1 | { |
2 | | - "Version": "2012-10-17", |
3 | | - "Statement": [ |
4 | | - { |
5 | | - "Effect": "Allow", |
6 | | - "Action": [ |
7 | | - "acm:DescribeCertificate", |
8 | | - "acm:ListCertificates" |
9 | | - ], |
10 | | - "Resource": "*" |
11 | | - }, |
12 | | - { |
13 | | - "Effect": "Allow", |
14 | | - "Action": [ |
15 | | - "ec2:AuthorizeSecurityGroupIngress", |
16 | | - "ec2:CreateSecurityGroup", |
17 | | - "ec2:CreateTags", |
18 | | - "ec2:DeleteSecurityGroup", |
19 | | - "ec2:DescribeInstances", |
20 | | - "ec2:DescribeSecurityGroups", |
21 | | - "ec2:DescribeSubnets", |
22 | | - "ec2:DescribeTags", |
23 | | - "ec2:ModifyInstanceAttribute", |
24 | | - "ec2:RevokeSecurityGroupIngress" |
25 | | - ], |
26 | | - "Resource": "*" |
27 | | - }, |
28 | | - { |
29 | | - "Effect": "Allow", |
30 | | - "Action": [ |
31 | | - "elasticloadbalancing:AddTags", |
32 | | - "elasticloadbalancing:CreateListener", |
33 | | - "elasticloadbalancing:CreateLoadBalancer", |
34 | | - "elasticloadbalancing:CreateRule", |
35 | | - "elasticloadbalancing:CreateTargetGroup", |
36 | | - "elasticloadbalancing:DeleteListener", |
37 | | - "elasticloadbalancing:DeleteLoadBalancer", |
38 | | - "elasticloadbalancing:DeleteRule", |
39 | | - "elasticloadbalancing:DeleteTargetGroup", |
40 | | - "elasticloadbalancing:DeregisterTargets", |
41 | | - "elasticloadbalancing:DescribeListeners", |
42 | | - "elasticloadbalancing:DescribeLoadBalancers", |
43 | | - "elasticloadbalancing:DescribeLoadBalancerAttributes", |
44 | | - "elasticloadbalancing:DescribeRules", |
45 | | - "elasticloadbalancing:DescribeTags", |
46 | | - "elasticloadbalancing:DescribeTargetGroups", |
47 | | - "elasticloadbalancing:DescribeTargetHealth", |
48 | | - "elasticloadbalancing:ModifyListener", |
49 | | - "elasticloadbalancing:ModifyLoadBalancerAttributes", |
50 | | - "elasticloadbalancing:ModifyRule", |
51 | | - "elasticloadbalancing:ModifyTargetGroup", |
52 | | - "elasticloadbalancing:RegisterTargets", |
53 | | - "elasticloadbalancing:RemoveTags", |
54 | | - "elasticloadbalancing:SetIpAddressType", |
55 | | - "elasticloadbalancing:SetSecurityGroups", |
56 | | - "elasticloadbalancing:SetSubnets", |
57 | | - "elasticloadbalancing:SetWebACL" |
58 | | - ], |
59 | | - "Resource": "*" |
60 | | - }, |
61 | | - { |
62 | | - "Effect": "Allow", |
63 | | - "Action": [ |
64 | | - "iam:GetServerCertificate", |
65 | | - "iam:ListServerCertificates" |
66 | | - ], |
67 | | - "Resource": "*" |
68 | | - }, |
69 | | - { |
70 | | - "Effect": "Allow", |
71 | | - "Action": [ |
72 | | - "waf-regional:GetWebACLForResource" |
73 | | - ], |
74 | | - "Resource": "*" |
75 | | - }, |
76 | | - { |
77 | | - "Effect": "Allow", |
78 | | - "Action": [ |
79 | | - "waf:GetWebACL", |
80 | | - "waf:AssociateWebACL", |
81 | | - "waf:DisassociateWebACL" |
82 | | - ], |
83 | | - "Resource": "*" |
84 | | - } |
85 | | - ] |
| 2 | + "Version": "2012-10-17", |
| 3 | + "Statement": [ |
| 4 | + { |
| 5 | + "Effect": "Allow", |
| 6 | + "Action": ["acm:DescribeCertificate", "acm:ListCertificates"], |
| 7 | + "Resource": "*" |
| 8 | + }, |
| 9 | + { |
| 10 | + "Effect": "Allow", |
| 11 | + "Action": [ |
| 12 | + "ec2:AuthorizeSecurityGroupIngress", |
| 13 | + "ec2:CreateSecurityGroup", |
| 14 | + "ec2:CreateTags", |
| 15 | + "ec2:DeleteSecurityGroup", |
| 16 | + "ec2:DescribeInstances", |
| 17 | + "ec2:DescribeSecurityGroups", |
| 18 | + "ec2:DescribeSubnets", |
| 19 | + "ec2:DescribeTags", |
| 20 | + "ec2:ModifyInstanceAttribute", |
| 21 | + "ec2:RevokeSecurityGroupIngress" |
| 22 | + ], |
| 23 | + "Resource": "*" |
| 24 | + }, |
| 25 | + { |
| 26 | + "Effect": "Allow", |
| 27 | + "Action": [ |
| 28 | + "elasticloadbalancing:AddTags", |
| 29 | + "elasticloadbalancing:CreateListener", |
| 30 | + "elasticloadbalancing:CreateLoadBalancer", |
| 31 | + "elasticloadbalancing:CreateRule", |
| 32 | + "elasticloadbalancing:CreateTargetGroup", |
| 33 | + "elasticloadbalancing:DeleteListener", |
| 34 | + "elasticloadbalancing:DeleteLoadBalancer", |
| 35 | + "elasticloadbalancing:DeleteRule", |
| 36 | + "elasticloadbalancing:DeleteTargetGroup", |
| 37 | + "elasticloadbalancing:DeregisterTargets", |
| 38 | + "elasticloadbalancing:DescribeListeners", |
| 39 | + "elasticloadbalancing:DescribeLoadBalancers", |
| 40 | + "elasticloadbalancing:DescribeLoadBalancerAttributes", |
| 41 | + "elasticloadbalancing:DescribeRules", |
| 42 | + "elasticloadbalancing:DescribeTags", |
| 43 | + "elasticloadbalancing:DescribeTargetGroups", |
| 44 | + "elasticloadbalancing:DescribeTargetGroupAttributes", |
| 45 | + "elasticloadbalancing:DescribeTargetHealth", |
| 46 | + "elasticloadbalancing:ModifyListener", |
| 47 | + "elasticloadbalancing:ModifyLoadBalancerAttributes", |
| 48 | + "elasticloadbalancing:ModifyRule", |
| 49 | + "elasticloadbalancing:ModifyTargetGroup", |
| 50 | + "elasticloadbalancing:ModifyTargetGroupAttributes", |
| 51 | + "elasticloadbalancing:RegisterTargets", |
| 52 | + "elasticloadbalancing:RemoveTags", |
| 53 | + "elasticloadbalancing:SetIpAddressType", |
| 54 | + "elasticloadbalancing:SetSecurityGroups", |
| 55 | + "elasticloadbalancing:SetSubnets", |
| 56 | + "elasticloadbalancing:SetWebACL" |
| 57 | + ], |
| 58 | + "Resource": "*" |
| 59 | + }, |
| 60 | + { |
| 61 | + "Effect": "Allow", |
| 62 | + "Action": ["iam:GetServerCertificate", "iam:ListServerCertificates"], |
| 63 | + "Resource": "*" |
| 64 | + }, |
| 65 | + { |
| 66 | + "Effect": "Allow", |
| 67 | + "Action": ["waf-regional:GetWebACLForResource"], |
| 68 | + "Resource": "*" |
| 69 | + }, |
| 70 | + { |
| 71 | + "Effect": "Allow", |
| 72 | + "Action": [ |
| 73 | + "waf:GetWebACL", |
| 74 | + "waf:AssociateWebACL", |
| 75 | + "waf:DisassociateWebACL" |
| 76 | + ], |
| 77 | + "Resource": "*" |
| 78 | + } |
| 79 | + ] |
86 | 80 | } |
0 commit comments