1+ {
2+ "Version" : " 2012-10-17"
3+ "Statement" : [
4+ {
5+ "Sid" : " AWSObservability"
6+ "Effect" : " Allow"
7+ "Action" : [
8+ " cloudformation:CreateChangeSet"
9+ " cloudformation:CreateStack"
10+ " cloudformation:DeleteStack"
11+ " cloudformation:DescribeStackEvents"
12+ " cloudformation:DescribeStacks"
13+ " cloudformation:GetStackPolicy"
14+ " cloudformation:GetTemplate"
15+ " cloudformation:ListStackResources"
16+ " cloudformation:ListStacks"
17+ " cloudtrail:CreateTrail"
18+ " cloudtrail:DeleteTrail"
19+ " cloudtrail:DescribeTrails"
20+ " cloudtrail:StartLogging"
21+ " cloudwatch:DeleteAlarms"
22+ " cloudwatch:DeleteMetricStream"
23+ " cloudwatch:PutMetricAlarm"
24+ " events:DeleteRule"
25+ " events:DescribeRule"
26+ " events:PutRule"
27+ " events:PutTargets"
28+ " events:RemoveTargets"
29+ " firehose:CreateDeliveryStream"
30+ " firehose:DeleteDeliveryStream"
31+ " firehose:DescribeDeliveryStream"
32+ " iam:AttachRolePolicy"
33+ " iam:CreateRole"
34+ " iam:DeleteRole"
35+ " iam:DeleteRolePolicy"
36+ " iam:DetachRolePolicy"
37+ " iam:GetRole"
38+ " iam:GetRolePolicy"
39+ " iam:PutRolePolicy"
40+ " iam:UpdateRole"
41+ " iam:PassRole"
42+ " iam:TagRole"
43+ " lambda:AddPermission"
44+ " lambda:CreateFunction"
45+ " lambda:DeleteFunction"
46+ " lambda:GetFunction"
47+ " lambda:InvokeFunction"
48+ " lambda:RemovePermission"
49+ " lambda:ListTags"
50+ " lambda:TagResource"
51+ " lambda:UpdateFunctionCode"
52+ " lambda:UpdateFunctionConfiguration"
53+ " logs:CreateLogGroup"
54+ " logs:CreateLogStream"
55+ " logs:DeleteLogGroup"
56+ " logs:DeleteLogStream"
57+ " logs:DeleteSubscriptionFilter"
58+ " logs:DescribeLogGroups"
59+ " logs:DescribeSubscriptionFilters"
60+ " logs:PutRetentionPolicy"
61+ " logs:PutSubscriptionFilter"
62+ " s3:CreateBucket"
63+ " s3:DeleteBucket"
64+ " s3:DeleteBucketPolicy"
65+ " s3:GetBucketPolicy"
66+ " s3:PutBucketNotification"
67+ " s3:PutBucketPolicy"
68+ " s3:PutBucketPublicAccessBlock"
69+ " s3:GetObject"
70+ " s3:ListBucket"
71+ " serverlessrepo:CreateCloudFormationTemplate"
72+ " serverlessrepo:GetCloudFormationTemplate"
73+ " sns:CreateTopic"
74+ " sns:DeleteTopic"
75+ " sns:GetTopicAttributes"
76+ " sns:ListSubscriptionsByTopic"
77+ " sns:SetTopicAttributes"
78+ " sns:Subscribe"
79+ " sns:Unsubscribe"
80+ " sqs:CreateQueue"
81+ " sqs:DeleteQueue"
82+ " sqs:GetQueueAttributes"
83+ ],
84+ "Resource" : " *"
85+ }
86+ ]
87+ }
0 commit comments