tileserver-gl/deployment/modules/tileserver/policies/policies.json

58 lines
No EOL
1.5 KiB
JSON

{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "",
"Effect": "Allow",
"Action": [
"ssm:ListInventoryEntries",
"ec2:Describe*",
"autoscaling:Describe*",
"ssm:ListCommands",
"ssm:DescribeParameters",
"route53:ChangeResourceRecordSets",
"ssm:ListDocuments",
"ssm:GetInventory"
],
"Resource": "*"
},
{
"Sid": "",
"Effect": "Allow",
"Action": [
"ssm:GetDocument",
"ssm:GetParameters",
"ssm:GetParameter"
],
"Resource": [
"arn:aws:ssm:${region}:*:document/*",
"arn:aws:ssm:${region}:*:parameter/*",
]
},
{
"Sid": "",
"Effect": "Allow",
"Action": "cloudwatch:*",
"Resource": "*"
},
{
"Sid": "",
"Effect": "Allow",
"Action": "logs:*",
"Resource": "*"
},
{
"Sid": "",
"Effect": "Allow",
"Action": [
"s3:GetObject",
"s3:ListBucket",
"s3:HeadObject"
],
"Resource": [
"arn:aws:s3:::mono-deployment-dev",
"arn:aws:s3:::mono-deployment-dev/tileserver-gl/*"
]
}
]
}