AWS SAMÂ policy templates - AWS Serverless Application Model (original) (raw)
Gives a permission to read a certificate from AWS Certificate Manager.
Gives permission to describe Amazon Machine Images (AMIs).
Gives permissions to execute Athena queries.
AWSSecretsManagerGetSecretValuePolicy
Gives permission to get the secret value for the specified AWS Secrets Manager secret.
AWSSecretsManagerRotationPolicy
Gives permission to rotate a secret in AWS Secrets Manager.
CloudFormationDescribeStacksPolicy
Gives permission to describe AWS CloudFormation stacks.
Gives permissions to put metrics to operate on CloudWatch dashboards.
CloudWatchDescribeAlarmHistoryPolicy
Gives permission to describe CloudWatch alarm history.
Gives permission to send metrics to CloudWatch.
Gives permissions to create/read/update/delete objects within a specific CodeCommit repository.
Gives permissions to read objects within a specific CodeCommit repository.
CodePipelineLambdaExecutionPolicy
Gives permission for a Lambda function invoked by CodePipeline to report the status of the job.
Gives read permission to get details about a CodePipeline pipeline.
Gives permission for detecting entities, key phrases, languages, and sentiments.
Gives read-only permission to the read-only Cost Explorer APIs for billing history.
DynamoDBBackupFullAccessPolicy
Gives read and write permission to DynamoDB on-demand backups for a table.
Gives create, read, update, and delete permissions to an Amazon DynamoDB table.
Gives read-only permission to a DynamoDB table.
Gives permission to reconfigure a DynamoDB table.
DynamoDBRestoreFromBackupPolicy
Gives permission to restore a DynamoDB table from backup.
Gives permission to describe and read DynamoDB streams and records.
Gives write-only permission to a DynamoDB table.
Gives permission to copy Amazon EC2 images.
Gives permission to describe Amazon Elastic Compute Cloud (Amazon EC2) instances.
Gives permission to start a new task for a task definition.
Gives permission to mount an Amazon EFS file system with write access.
Gives permission to describe or list Amazon EKS clusters.
ElasticMapReduceAddJobFlowStepsPolicy
Gives permission to add new steps to a running cluster.
ElasticMapReduceCancelStepsPolicy
Gives permission to cancel a pending step or steps in a running cluster.
ElasticMapReduceModifyInstanceFleetPolicy
Gives permission to list details and modify capacities for instance fleets within a cluster.
ElasticMapReduceModifyInstanceGroupsPolicy
Gives permission to list details and modify settings for instance groups within a cluster.
ElasticMapReduceSetTerminationProtectionPolicy
Gives permission to set termination protection for a cluster.
ElasticMapReduceTerminateJobFlowsPolicy
Gives permission to shut down a cluster.
Gives POST permission to Amazon OpenSearch Service.
Gives permissions to send events to EventBridge.
Gives permission to filter CloudWatch Logs events from a specified log group.
Gives permission to create, write, update, and delete a Firehose delivery stream.
Gives permission to write to a Firehose delivery stream.
Gives permission to create, publish, and delete an Amazon Kinesis stream.
Gives permission to list and read an Amazon Kinesis stream.
Gives permission to decrypt with an AWS Key Management Service (AWS KMS) key.
Gives permission to encrypt with an AWS Key Management Service (AWS KMS) key.
Gives permission to invoke an AWS Lambda function, alias, or version.
MobileAnalyticsWriteOnlyAccessPolicy
Gives write-only permission to put event data for all application resources.
OrganizationsListAccountsPolicy
Gives read-only permission to list child account names and IDs.
Gives permission to get and update endpoints for an Amazon Pinpoint application.
Gives full access permission to Amazon Polly lexicon resources.
Gives permission to detect faces, labels, and text.
RekognitionFacesManagementPolicy
Gives permission to add, delete, and search faces in an Amazon Rekognition collection.
Gives permission to compare and detect faces and labels.
Gives permission to detect object and moderation labels.
Gives permission to compare and detect faces and labels.
Gives permission to list and search faces.
RekognitionWriteOnlyAccessPolicy
Gives permission to create collection and index faces.
Route53ChangeResourceRecordSetsPolicy
Gives permission to change resource record sets in Route 53.
Gives create, read, update, and delete permission to act on the objects in an Amazon S3 bucket.
Gives full access permission to act on the objects in an Amazon S3 bucket.
Gives read-only permission to read objects in an Amazon Simple Storage Service (Amazon S3) bucket.
Gives write permission to write objects into an Amazon S3 bucket.
SageMakerCreateEndpointConfigPolicy
Gives permission to create an endpoint configuration in SageMaker AI.
Gives permission to create an endpoint in SageMaker AI.
ServerlessRepoReadWriteAccessPolicy
Gives permission to create and list applications in the AWS Serverless Application Repository service.
Gives permission to send email, templated email, templated bulk emails and verify identity.
Gives permission to send Amazon SES email, templated email, and templated bulk emails and to verify identity.
Gives permission to send email and verify identity.
Gives permission to create, get, list, update and delete Amazon SES email templates.
Gives SendBounce permission to an Amazon Simple Email Service (Amazon SES) identity.
Gives permission to create, publish, and subscribe to Amazon SNS topics.
Gives permission to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic.
Gives permission to poll an Amazon Simple Queue Service (Amazon SQS) queue.
Gives permission to send message to an Amazon SQS queue.
Gives permission to access a parameter from an Amazon EC2 Systems Manager (SSM) parameter store to load secrets in this account. Use when parameter name doesn't have slash prefix.
SSMParameterWithSlashPrefixReadPolicy
Gives permission to access a parameter from an Amazon EC2 Systems Manager (SSM) parameter store to load secrets in this account. Use when parameter name has slash prefix.
Gives permission to start a Step Functions state machine execution.
Gives access to detect and analyze documents with Amazon Textract.
Gives access to get detected and analyzed documents from Amazon Textract.
Gives full access to Amazon Textract.
Gives access to create, delete, describe, and detach elastic network interfaces.