Merge pull request #630 from udondan/update-aws-managed-policies

udondan · Apr 18, 2024 · 9d3811f · 9d3811f
2 parents c59ba60 + 07c6280
commit 9d3811f
Show file tree

Hide file tree

Showing 2 changed files with 83 additions and 0 deletions.
diff --git a/docs/source/_static/managed-policies/AmplifyBackendDeployFullAccess.json b/docs/source/_static/managed-policies/AmplifyBackendDeployFullAccess.json
@@ -134,6 +134,29 @@
           "aws:ResourceAccount": "${aws:PrincipalAccount}"
         }
       }
+    },
+    {
+      "Sid": "AmplifyDiscoverRDSVpcConfig",
+      "Effect": "Allow",
+      "Action": [
+        "rds:DescribeDBProxies",
+        "rds:DescribeDBInstances",
+        "rds:DescribeDBClusters",
+        "ec2:DescribeSubnets",
+        "rds:DescribeDBSubnetGroups"
+      ],
+      "Resource": [
+        "arn:aws:rds:*:*:db:*",
+        "arn:aws:rds:*:*:cluster:*",
+        "arn:aws:rds:*:*:db-proxy:*",
+        "arn:aws:rds:*:*:subgrp:*",
+        "arn:aws:ec2:*:*:subnet/*"
+      ],
+      "Condition": {
+        "StringEquals": {
+          "aws:ResourceAccount": "${aws:PrincipalAccount}"
+        }
+      }
     }
   ]
 }
diff --git a/docs/source/_static/managed-policies/ReadOnlyAccess.json b/docs/source/_static/managed-policies/ReadOnlyAccess.json
@@ -46,6 +46,7 @@
         "amplify:ListDomainAssociations",
         "amplify:ListJobs",
         "aoss:BatchGetCollection",
+        "aoss:BatchGetLifecyclePolicy",
         "aoss:BatchGetVpcEndpoint",
         "aoss:GetAccessPolicy",
         "aoss:GetAccountSettings",
@@ -54,6 +55,7 @@
         "aoss:GetSecurityPolicy",
         "aoss:ListAccessPolicies",
         "aoss:ListCollections",
+        "aoss:ListLifecyclePolicies",
         "aoss:ListSecurityConfigs",
         "aoss:ListSecurityPolicies",
         "aoss:ListTagsForResource",
@@ -108,11 +110,14 @@
         "apprunner:DescribeService",
         "apprunner:DescribeVpcConnector",
         "apprunner:DescribeVpcIngressConnection",
+        "apprunner:DescribeWebAclForService",
+        "apprunner:ListAssociatedServicesForWebAcl",
         "apprunner:ListAutoScalingConfigurations",
         "apprunner:ListConnections",
         "apprunner:ListObservabilityConfigurations",
         "apprunner:ListOperations",
         "apprunner:ListServices",
+        "apprunner:ListServicesForAutoScalingConfiguration",
         "apprunner:ListTagsForResource",
         "apprunner:ListVpcConnectors",
         "apprunner:ListVpcIngressConnections",
@@ -123,9 +128,11 @@
         "aps:DescribeAlertManagerDefinition",
         "aps:DescribeLoggingConfiguration",
         "aps:DescribeRuleGroupsNamespace",
+        "aps:DescribeScraper",
         "aps:DescribeWorkspace",
         "aps:GetAlertManagerSilence",
         "aps:GetAlertManagerStatus",
+        "aps:GetDefaultScraperConfiguration",
         "aps:GetLabels",
         "aps:GetMetricMetadata",
         "aps:GetSeries",
@@ -136,6 +143,7 @@
         "aps:ListAlerts",
         "aps:ListRuleGroupsNamespaces",
         "aps:ListRules",
+        "aps:ListScrapers",
         "aps:ListTagsForResource",
         "aps:ListWorkspaces",
         "aps:QueryMetrics",
@@ -275,6 +283,7 @@
         "ce:GetTags",
         "ce:GetUsageForecast",
         "ce:ListCostAllocationTags",
+        "ce:ListCostAllocationTagBackfillHistory",
         "ce:ListCostCategoryDefinitions",
         "ce:ListSavingsPlansPurchaseRecommendationGeneration",
         "ce:ListTagsForResource",
@@ -293,6 +302,7 @@
         "cleanrooms:GetAnalysisTemplate",
         "cleanrooms:GetCollaboration",
         "cleanrooms:GetCollaborationAnalysisTemplate",
+        "cleanrooms:GetConfiguredAudienceModelAssociation",
         "cleanrooms:GetConfiguredTable",
         "cleanrooms:GetConfiguredTableAnalysisRule",
         "cleanrooms:GetConfiguredTableAssociation",
@@ -302,6 +312,7 @@
         "cleanrooms:GetSchemaAnalysisRule",
         "cleanrooms:ListAnalysisTemplates",
         "cleanrooms:ListCollaborationAnalysisTemplates",
+        "cleanrooms:ListCollaborationConfiguredAudienceModelAssociations",
         "cleanrooms:ListCollaborations",
         "cleanrooms:ListConfiguredTableAssociations",
         "cleanrooms:ListConfiguredTables",
@@ -310,6 +321,17 @@
         "cleanrooms:ListProtectedQueries",
         "cleanrooms:ListSchemas",
         "cleanrooms:ListTagsForResource",
+        "cleanrooms-ml:GetTrainingDataset",
+        "cleanrooms-ml:GetAudienceGenerationJob",
+        "cleanrooms-ml:GetAudienceModel",
+        "cleanrooms-ml:GetConfiguredAudienceModel",
+        "cleanrooms-ml:GetConfiguredAudienceModelPolicy",
+        "cleanrooms-ml:ListAudienceExportJobs",
+        "cleanrooms-ml:ListAudienceGenerationJobs",
+        "cleanrooms-ml:ListAudienceModels",
+        "cleanrooms-ml:ListConfiguredAudienceModels",
+        "cleanrooms-ml:ListTrainingDatasets",
+        "cleanrooms-ml:ListTagsForResource",
         "cloud9:Describe*",
         "cloud9:List*",
         "clouddirectory:BatchRead",
@@ -904,6 +926,7 @@
         "inspector2:GetFindingsReportStatus",
         "inspector2:GetMember",
         "inspector2:ListAccountPermissions",
+        "inspector2:ListCisScans",
         "inspector2:ListCoverage",
         "inspector2:ListCoverageStatistics",
         "inspector2:ListDelegatedAdminAccounts",
@@ -914,8 +937,10 @@
         "inspector2:ListTagsForResource",
         "inspector2:ListUsageTotals",
         "internetmonitor:GetHealthEvent",
+        "internetmonitor:GetInternetEvent",
         "internetmonitor:GetMonitor",
         "internetmonitor:ListHealthEvents",
+        "internetmonitor:ListInternetEvents",
         "internetmonitor:ListMonitors",
         "internetmonitor:ListTagsForResource",
         "invoicing:GetInvoiceEmailDeliveryPreferences",
@@ -992,6 +1017,8 @@
         "iotwireless:GetEventConfigurationByResourceTypes",
         "iotwireless:GetFuotaTask",
         "iotwireless:GetLogLevelsByResourceTypes",
+        "iotwireless:GetMetrics",
+        "iotwireless:GetMetricConfiguration",
         "iotwireless:GetMulticastGroup",
         "iotwireless:GetMulticastGroupSession",
         "iotwireless:GetNetworkAnalyzerConfiguration",
@@ -1032,13 +1059,27 @@
         "iotwireless:ListWirelessGatewayTaskDefinitions",
         "ivs:BatchGetChannel",
         "ivs:GetChannel",
+        "ivs:GetComposition",
+        "ivs:GetEncoderConfiguration",
+        "ivs:GetStage",
+        "ivs:GetStageSession",
+        "ivs:GetParticipant",
         "ivs:GetPlaybackKeyPair",
+        "ivs:GetPlaybackRestrictionPolicy",
         "ivs:GetRecordingConfiguration",
         "ivs:GetStreamSession",
         "ivs:ListChannels",
+        "ivs:ListCompositions",
+        "ivs:ListEncoderConfigurations",
+        "ivs:ListParticipants",
+        "ivs:ListParticipantEvents",
         "ivs:ListPlaybackKeyPairs",
+        "ivs:ListPlaybackRestrictionPolicies",
         "ivs:ListRecordingConfigurations",
+        "ivs:ListStages",
+        "ivs:ListStageSessions",
         "ivs:ListStreams",
+        "ivs:ListStreamKeys",
         "ivs:ListStreamSessions",
         "ivs:ListTagsForResource",
         "ivschat:GetLoggingConfiguration",
@@ -1365,7 +1406,16 @@
         "medialive:DescribeOffering",
         "medialive:DescribeReservation",
         "medialive:DescribeSchedule",
+        "medialive:GetCloudWatchAlarmTemplate",
+        "medialive:GetCloudWatchAlarmTemplateGroup",
+        "medialive:GetEventBridgeRuleTemplate",
+        "medialive:GetEventBridgeRuleTemplateGroup",
+        "medialive:GetSignalMap",
         "medialive:ListChannels",
+        "medialive:ListCloudWatchAlarmTemplateGroups",
+        "medialive:ListCloudWatchAlarmTemplates",
+        "medialive:ListEventBridgeRuleTemplateGroups",
+        "medialive:ListEventBridgeRuleTemplates",
         "medialive:ListInputDevices",
         "medialive:ListInputDeviceTransfers",
         "medialive:ListInputs",
@@ -1374,6 +1424,7 @@
         "medialive:ListMultiplexPrograms",
         "medialive:ListOfferings",
         "medialive:ListReservations",
+        "medialive:ListSignalMaps",
         "medialive:ListTagsForResource",
         "mediapackage-vod:Describe*",
         "mediapackage-vod:List*",
@@ -1763,6 +1814,15 @@
         "securityhub:Describe*",
         "securityhub:Get*",
         "securityhub:List*",
+        "securitylake:GetDataLakeExceptionSubscription",
+        "securitylake:GetDataLakeOrganizationConfiguration",
+        "securitylake:GetDataLakeSources",
+        "securitylake:GetSubscriber",
+        "securitylake:ListDataLakeExceptions",
+        "securitylake:ListDataLakes",
+        "securitylake:ListLogSources",
+        "securitylake:ListSubscribers",
+        "securitylake:ListTagsForResource",
         "serverlessrepo:Get*",
         "serverlessrepo:List*",
         "serverlessrepo:SearchApplications",