Skip to content

Commit 43da107

Browse files
RkSinghDeoRkSinghDeo
committed
Merge branch 'main' of https://github.com/devolvdev/devolv 
2 parents bccb2b7 + 7e018b8 commit 43da107

1 file changed

Lines changed: 136 additions & 130 deletions

File tree

‎test-devolv-policy.json‎

Lines changed: 136 additions & 130 deletions
Original file line numberDiff line numberDiff line change
@@ -1,131 +1,137 @@
11
{
2-
"Version": "2012-10-17",
3-
"Statement": [
4-
{
5-
"Sid": "S3List",
6-
"Effect": "Allow",
7-
"Action": "s3:ListBucket",
8-
"Resource": "arn:aws:s3:::example-bucket"
9-
},
10-
{
11-
"Sid": "S3GetObj",
12-
"Effect": "Allow",
13-
"Action": "s3:GetObject",
14-
"Resource": "arn:aws:s3:::example-bucket/*"
15-
},
16-
{
17-
"Sid": "EC2Describe",
18-
"Effect": "Allow",
19-
"Action": "ec2:DescribeInstances",
20-
"Resource": "*"
21-
},
22-
{
23-
"Sid": "EC2Start",
24-
"Effect": "Allow",
25-
"Action": "ec2:StartInstances",
26-
"Resource": "arn:aws:ec2:us-east-1:123456789012:instance/*"
27-
},
28-
{
29-
"Sid": "EC2Stop",
30-
"Effect": "Allow",
31-
"Action": "ec2:StopInstances",
32-
"Resource": "arn:aws:ec2:us-east-1:123456789012:instance/*"
33-
},
34-
{
35-
"Sid": "DynamoGet",
36-
"Effect": "Allow",
37-
"Action": "dynamodb:GetItem",
38-
"Resource": "arn:aws:dynamodb:us-east-1:123456789012:table/ExampleTable"
39-
},
40-
{
41-
"Sid": "DynamoPut",
42-
"Effect": "Allow",
43-
"Action": "dynamodb:PutItem",
44-
"Resource": "arn:aws:dynamodb:us-east-1:123456789012:table/ExampleTable"
45-
},
46-
{
47-
"Sid": "CloudWatchPut",
48-
"Effect": "Allow",
49-
"Action": "cloudwatch:PutMetricData",
50-
"Resource": "*"
51-
},
52-
{
53-
"Sid": "LogsCreateGroup",
54-
"Effect": "Allow",
55-
"Action": "logs:CreateLogGroup",
56-
"Resource": "*"
57-
},
58-
{
59-
"Sid": "LogsCreateStream",
60-
"Effect": "Allow",
61-
"Action": "logs:CreateLogStream",
62-
"Resource": "*"
63-
},
64-
{
65-
"Sid": "LogsPutEvents",
66-
"Effect": "Allow",
67-
"Action": "logs:PutLogEvents",
68-
"Resource": "arn:aws:logs:us-east-1:123456789012:log-group:/aws/lambda/example"
69-
},
70-
{
71-
"Sid": "SQSReceive",
72-
"Effect": "Allow",
73-
"Action": "sqs:ReceiveMessage",
74-
"Resource": "arn:aws:sqs:us-east-1:123456789012:ExampleQueue"
75-
},
76-
{
77-
"Sid": "SQSSend",
78-
"Effect": "Allow",
79-
"Action": "sqs:SendMessage",
80-
"Resource": "arn:aws:sqs:us-east-1:123456789012:ExampleQueue"
81-
},
82-
{
83-
"Sid": "SNSPublish",
84-
"Effect": "Allow",
85-
"Action": "sns:Publish",
86-
"Resource": "arn:aws:sns:us-east-1:123456789012:ExampleTopic"
87-
},
88-
{
89-
"Sid": "FakeServiceAccess1",
90-
"Effect": "Allow",
91-
"Action": "fakeservice:DoSomething",
92-
"Resource": "arn:aws:fakeservice:us-east-1:123456789012:fake-resource/123"
93-
},
94-
{
95-
"Sid": "FakeServiceAccess2",
96-
"Effect": "Allow",
97-
"Action": "fakeservice:DoSomethingElse",
98-
"Resource": "arn:aws:fakeservice:us-east-1:123456789012:fake-resource/456"
99-
},
100-
{
101-
"Sid": "LambdaInvoke",
102-
"Effect": "Allow",
103-
"Action": "lambda:InvokeFunction",
104-
"Resource": "arn:aws:lambda:us-east-1:123456789012:function:ExampleFunction"
105-
},
106-
{
107-
"Sid": "ECSList",
108-
"Effect": "Allow",
109-
"Action": "ecs:ListClusters",
110-
"Resource": "*"
111-
},
112-
{
113-
"Sid": "ECSDescribe",
114-
"Effect": "Allow",
115-
"Action": "ecs:DescribeTasks",
116-
"Resource": "*"
117-
},
118-
{
119-
"Sid": "SSMGetParam",
120-
"Effect": "Allow",
121-
"Action": "ssm:GetParameter",
122-
"Resource": "arn:aws:ssm:us-east-1:123456789012:parameter/ExampleParam"
123-
},
124-
{
125-
"Sid": "SecretsGet",
126-
"Effect": "Allow",
127-
"Action": "secretsmanager:GetSecretValue",
128-
"Resource": "arn:aws:secretsmanager:us-east-1:123456789012:secret:ExampleSecret"
129-
}
130-
]
131-
}
2+
"Version": "2012-10-17",
3+
"Statement": [
4+
{
5+
"Sid": "S3List",
6+
"Effect": "Allow",
7+
"Action": "s3:ListBucket",
8+
"Resource": "arn:aws:s3:::example-bucket"
9+
},
10+
{
11+
"Sid": "S3GetObj",
12+
"Effect": "Allow",
13+
"Action": "s3:GetObject",
14+
"Resource": "arn:aws:s3:::example-bucket/*"
15+
},
16+
{
17+
"Sid": "EC2Describe",
18+
"Effect": "Allow",
19+
"Action": "ec2:DescribeInstances",
20+
"Resource": "*"
21+
},
22+
{
23+
"Sid": "EC2Start",
24+
"Effect": "Allow",
25+
"Action": "ec2:StartInstances",
26+
"Resource": "arn:aws:ec2:us-east-1:123456789012:instance/*"
27+
},
28+
{
29+
"Sid": "EC2Stop",
30+
"Effect": "Allow",
31+
"Action": "ec2:StopInstances",
32+
"Resource": "arn:aws:ec2:us-east-1:123456789012:instance/*"
33+
},
34+
{
35+
"Sid": "DynamoGet",
36+
"Effect": "Allow",
37+
"Action": "dynamodb:GetItem",
38+
"Resource": "arn:aws:dynamodb:us-east-1:123456789012:table/ExampleTable"
39+
},
40+
{
41+
"Sid": "DynamoPut",
42+
"Effect": "Allow",
43+
"Action": "dynamodb:PutItem",
44+
"Resource": "arn:aws:dynamodb:us-east-1:123456789012:table/ExampleTable"
45+
},
46+
{
47+
"Sid": "CloudWatchPut",
48+
"Effect": "Allow",
49+
"Action": "cloudwatch:PutMetricData",
50+
"Resource": "*"
51+
},
52+
{
53+
"Sid": "LogsCreateGroup",
54+
"Effect": "Allow",
55+
"Action": "logs:CreateLogGroup",
56+
"Resource": "*"
57+
},
58+
{
59+
"Sid": "LogsCreateStream",
60+
"Effect": "Allow",
61+
"Action": "logs:CreateLogStream",
62+
"Resource": "*"
63+
},
64+
{
65+
"Sid": "LogsPutEvents",
66+
"Effect": "Allow",
67+
"Action": "logs:PutLogEvents",
68+
"Resource": "arn:aws:logs:us-east-1:123456789012:log-group:/aws/lambda/example"
69+
},
70+
{
71+
"Sid": "SQSReceive",
72+
"Effect": "Allow",
73+
"Action": "sqs:ReceiveMessage",
74+
"Resource": "arn:aws:sqs:us-east-1:123456789012:ExampleQueue"
75+
},
76+
{
77+
"Sid": "SQSSend",
78+
"Effect": "Allow",
79+
"Action": "sqs:SendMessage",
80+
"Resource": "arn:aws:sqs:us-east-1:123456789012:ExampleQueue"
81+
},
82+
{
83+
"Sid": "SNSPublish",
84+
"Effect": "Allow",
85+
"Action": "sns:Publish",
86+
"Resource": "arn:aws:sns:us-east-1:123456789012:ExampleTopic"
87+
},
88+
{
89+
"Sid": "FakeServiceAccess1",
90+
"Effect": "Allow",
91+
"Action": "fakeservice:DoSomething",
92+
"Resource": "arn:aws:fakeservice:us-east-1:123456789012:fake-resource/123"
93+
},
94+
{
95+
"Sid": "FakeServiceAccess2",
96+
"Effect": "Allow",
97+
"Action": "fakeservice:DoSomethingElse",
98+
"Resource": "arn:aws:fakeservice:us-east-1:123456789012:fake-resource/456"
99+
},
100+
{
101+
"Sid": "LambdaInvoke",
102+
"Effect": "Allow",
103+
"Action": "lambda:InvokeFunction",
104+
"Resource": "arn:aws:lambda:us-east-1:123456789012:function:ExampleFunction"
105+
},
106+
{
107+
"Sid": "ECSList",
108+
"Effect": "Allow",
109+
"Action": "ecs:ListClusters",
110+
"Resource": "*"
111+
},
112+
{
113+
"Sid": "ECSDescribe",
114+
"Effect": "Allow",
115+
"Action": "ecs:DescribeTasks",
116+
"Resource": "*"
117+
},
118+
{
119+
"Sid": "SSMGetParam",
120+
"Effect": "Allow",
121+
"Action": "ssm:GetParameter",
122+
"Resource": "arn:aws:ssm:us-east-1:123456789012:parameter/ExampleParam"
123+
},
124+
{
125+
"Sid": "SecretsGet",
126+
"Effect": "Allow",
127+
"Action": "secretsmanager:GetSecretValue",
128+
"Resource": "arn:aws:secretsmanager:us-east-1:123456789012:secret:ExampleSecret"
129+
},
130+
{
131+
"Sid": "SSSSMGetParam",
132+
"Effect": "Allow",
133+
"Action": "ssm:GetParameter",
134+
"Resource": "arn:aws:ssm:us-east-1:123456789012:parameter/ExampleParam"
135+
}
136+
]
137+
}

0 commit comments

Comments
 (0)