Skip to content

Commit eafcb88

Browse files
udondanudondan
authored
Merge pull request #1875 from udondan/update-aws-managed-policies
2 parents bb09d0e + c54d0d9 commit eafcb88

File tree

5 files changed

+147
-1
lines changed

5 files changed

+147
-1
lines changed

‎docs/source/_static/managed-policies/AWSResourceExplorerServiceRolePolicy.json‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -779,6 +779,7 @@
779779
"iam:ListAttachedRolePolicies",
780780
"iam:ListRolePolicies",
781781
"kinesis:DescribeStreamSummary",
782+
"kinesis:ListTagsForResource",
782783
"kinesis:ListTagsForStream",
783784
"lambda:GetEventSourceMapping",
784785
"lambda:GetFunction",

‎docs/source/_static/managed-policies/PartnerCentralIncentiveBenefitManagement.json‎

Lines changed: 138 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,138 @@
1+
{
2+
"Version": "2012-10-17",
3+
"Statement": [
4+
{
5+
"Sid": "BenefitsManagement",
6+
"Effect": "Allow",
7+
"Action": [
8+
"partnercentral:ListBenefits",
9+
"partnercentral:GetBenefit",
10+
"partnercentral:CreateBenefitApplication",
11+
"partnercentral:AmendBenefitApplication",
12+
"partnercentral:UpdateBenefitApplication",
13+
"partnercentral:SubmitBenefitApplication",
14+
"partnercentral:GetBenefitApplication",
15+
"partnercentral:CancelBenefitApplication",
16+
"partnercentral:RecallBenefitApplication",
17+
"partnercentral:ListBenefitApplications",
18+
"partnercentral:AssociateBenefitApplicationResource",
19+
"partnercentral:DisassociateBenefitApplicationResource",
20+
"partnercentral:ListBenefitAllocations",
21+
"partnercentral:GetBenefitAllocation"
22+
],
23+
"Resource": [
24+
"arn:aws:partnercentral:*:*:catalog/*/benefit-application/*",
25+
"arn:aws:partnercentral:*:*:catalog/*/benefit-allocation/*",
26+
"arn:aws:partnercentral:*:*:catalog/*/benefit/*"
27+
],
28+
"Condition": {
29+
"StringEquals": {
30+
"partnercentral:Catalog": [
31+
"AWS",
32+
"Sandbox"
33+
]
34+
}
35+
}
36+
},
37+
{
38+
"Sid": "PartnerCentralBenefitsTaggingAccess",
39+
"Effect": "Allow",
40+
"Action": [
41+
"partnercentral:TagResource",
42+
"partnercentral:UntagResource",
43+
"partnercentral:ListTagsForResource"
44+
],
45+
"Resource": [
46+
"arn:aws:partnercentral:*:*:catalog/*/benefit-application/*",
47+
"arn:aws:partnercentral:*:*:catalog/*/benefit-allocation/*"
48+
],
49+
"Condition": {
50+
"StringEquals": {
51+
"partnercentral:Catalog": [
52+
"AWS",
53+
"Sandbox"
54+
]
55+
}
56+
}
57+
},
58+
{
59+
"Sid": "PartnerResourceAccess",
60+
"Effect": "Allow",
61+
"Action": [
62+
"partnercentral:ListPartners",
63+
"partnercentral:GetPartner"
64+
],
65+
"Resource": "arn:aws:partnercentral:*:*:catalog/*/partner/*",
66+
"Condition": {
67+
"StringEquals": {
68+
"partnercentral:Catalog": [
69+
"AWS",
70+
"Sandbox"
71+
]
72+
}
73+
}
74+
},
75+
{
76+
"Sid": "AWSPartnerOpportunityAccess",
77+
"Effect": "Allow",
78+
"Action": [
79+
"partnercentral:GetAwsOpportunitySummary",
80+
"partnercentral:GetOpportunity",
81+
"partnercentral:ListOpportunities"
82+
],
83+
"Resource": "arn:aws:partnercentral:*:*:catalog/*/opportunity/*",
84+
"Condition": {
85+
"StringEquals": {
86+
"partnercentral:Catalog": [
87+
"AWS",
88+
"Sandbox"
89+
]
90+
}
91+
}
92+
},
93+
{
94+
"Sid": "ListingAWSMarketplaceEntities",
95+
"Effect": "Allow",
96+
"Action": [
97+
"aws-marketplace:ListEntities"
98+
],
99+
"Resource": "*"
100+
},
101+
{
102+
"Sid": "AWSMarketplaceOffersAccess",
103+
"Effect": "Allow",
104+
"Action": [
105+
"aws-marketplace:DescribeEntity"
106+
],
107+
"Resource": [
108+
"arn:aws:aws-marketplace:*:*:AWSMarketplace*/Solution/*",
109+
"arn:aws:aws-marketplace:*:*:AWSMarketplace*/OfferSet/*",
110+
"arn:aws:aws-marketplace:*:*:AWSMarketplace*/Offer/*"
111+
]
112+
},
113+
{
114+
"Sid": "AWSMarketplaceAgreementsReadAccess",
115+
"Effect": "Allow",
116+
"Action": [
117+
"aws-marketplace:SearchAgreements",
118+
"aws-marketplace:DescribeAgreement"
119+
],
120+
"Resource": "*",
121+
"Condition": {
122+
"ForAllValues:StringEquals": {
123+
"aws-marketplace:AgreementType": [
124+
"PurchaseAgreement"
125+
]
126+
}
127+
}
128+
},
129+
{
130+
"Sid": "PartnerCentralEphemeralWriteS3Access",
131+
"Effect": "Allow",
132+
"Action": [
133+
"s3:PutObject"
134+
],
135+
"Resource": "arn:aws:s3:::aws-partner-central-marketplace-ephemeral-writeonly-files/${aws:PrincipalAccount}/*"
136+
}
137+
]
138+
}

‎docs/source/_static/managed-policies/index.json‎

Lines changed: 1 addition & 1 deletion
Large diffs are not rendered by default.

‎lib/generated/aws-managed-policies/cdk-iam-floyd.ts‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6784,6 +6784,11 @@ export class AwsManagedPolicy extends AwsManagedPolicyStatic {
67846784
return aws_iam.ManagedPolicy.fromAwsManagedPolicyName(AwsManagedPolicyStatic.PartnerCentralAccountManagementUserRoleAssociation);
67856785
}
67866786

6787+
/** Policy provides access to manage all the incentive benefits in AWS Partner Central. */
6788+
public PartnerCentralIncentiveBenefitManagement(): aws_iam.IManagedPolicy {
6789+
return aws_iam.ManagedPolicy.fromAwsManagedPolicyName(AwsManagedPolicyStatic.PartnerCentralIncentiveBenefitManagement);
6790+
}
6791+
67876792
/** Provides full access to AWS services and resources, but does not allow management of Users and groups. */
67886793
public PowerUserAccess(): aws_iam.IManagedPolicy {
67896794
return aws_iam.ManagedPolicy.fromAwsManagedPolicyName(AwsManagedPolicyStatic.PowerUserAccess);

‎lib/generated/aws-managed-policies/iam-floyd.ts‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2710,6 +2710,8 @@ export class AwsManagedPolicy {
27102710
public static OpensearchIngestionSelfManagedVpcePolicy = 'aws-service-role/OpensearchIngestionSelfManagedVpcePolicy';
27112711
/** Provides access to associate and dissociate partner central users with IAM roles */
27122712
public static PartnerCentralAccountManagementUserRoleAssociation = 'PartnerCentralAccountManagementUserRoleAssociation';
2713+
/** Policy provides access to manage all the incentive benefits in AWS Partner Central. */
2714+
public static PartnerCentralIncentiveBenefitManagement = 'PartnerCentralIncentiveBenefitManagement';
27132715
/** Provides full access to AWS services and resources, but does not allow management of Users and groups. */
27142716
public static PowerUserAccess = 'PowerUserAccess';
27152717
/** Grants permissions to AWS Services and Resources used or managed by Amazon Q Apps. */

0 commit comments

Comments
 (0)