Skip to content

Commit 6fd2431

Browse files
authored
Merge pull request #43 from devolvdev/drift-sync-devolvtestpolicyhuge-20250706-111531
Update ./test-devolv-policy.json from AWS policy
2 parents d1c8b61 + 1994460 commit 6fd2431

File tree

1 file changed

+70
-23
lines changed

1 file changed

+70
-23
lines changed

test-devolv-policy.json

Lines changed: 70 additions & 23 deletions
Original file line numberDiff line numberDiff line change
@@ -5,139 +5,186 @@
55
"Sid": "S3List",
66
"Effect": "Allow",
77
"Action": "s3:ListBucket",
8-
"Resource": "arn:aws:s3:::example-bucket"
8+
"Resource": [
9+
"arn:aws:s3:::example-bucket",
10+
"arn:aws:s3:::example-bucket1"
11+
]
912
},
1013
{
1114
"Sid": "S3GetObj",
1215
"Effect": "Allow",
1316
"Action": "s3:GetObject",
14-
"Resource": "arn:aws:s3:::example-bucket/*"
17+
"Resource": [
18+
"arn:aws:s3:::example-bucket/*"
19+
]
1520
},
1621
{
1722
"Sid": "EC2Stop",
1823
"Effect": "Allow",
1924
"Action": "ec2:StopInstances",
20-
"Resource": "arn:aws:ec2:us-east-1:123456789012:instance/*"
25+
"Resource": [
26+
"arn:aws:ec2:us-east-1:123456789012:instance/*"
27+
]
2128
},
2229
{
2330
"Sid": "DynamoPut",
2431
"Effect": "Allow",
2532
"Action": "dynamodb:PutItem",
26-
"Resource": "arn:aws:dynamodb:us-east-1:123456789012:table/ExampleTable"
33+
"Resource": [
34+
"arn:aws:dynamodb:us-east-1:123456789012:table/ExampleTable"
35+
]
2736
},
2837
{
2938
"Sid": "CloudWatchPut",
3039
"Effect": "Allow",
3140
"Action": "cloudwatch:PutMetricData",
32-
"Resource": "*"
41+
"Resource": [
42+
"*"
43+
]
3344
},
3445
{
3546
"Sid": "LogsCreateGroup",
3647
"Effect": "Allow",
3748
"Action": "logs:CreateLogGroup",
38-
"Resource": "*"
49+
"Resource": [
50+
"*"
51+
]
3952
},
4053
{
4154
"Sid": "LogsCreateStream",
4255
"Effect": "Allow",
4356
"Action": "logs:CreateLogStream",
44-
"Resource": "*"
57+
"Resource": [
58+
"*"
59+
]
4560
},
4661
{
4762
"Sid": "LogsPutEvents",
4863
"Effect": "Allow",
4964
"Action": "logs:PutLogEvents",
50-
"Resource": "arn:aws:logs:us-east-1:123456789012:log-group:/aws/lambda/example"
65+
"Resource": [
66+
"arn:aws:logs:us-east-1:123456789012:log-group:/aws/lambda/example"
67+
]
5168
},
5269
{
5370
"Sid": "SQSReceive",
5471
"Effect": "Allow",
5572
"Action": "sqs:ReceiveMessage",
56-
"Resource": "arn:aws:sqs:us-east-1:123456789012:ExampleQueue"
73+
"Resource": [
74+
"arn:aws:sqs:us-east-1:123456789012:ExampleQueue"
75+
]
5776
},
5877
{
5978
"Sid": "SQSSend",
6079
"Effect": "Allow",
6180
"Action": "sqs:SendMessage",
62-
"Resource": "arn:aws:sqs:us-east-1:123456789012:ExampleQueue"
81+
"Resource": [
82+
"arn:aws:sqs:us-east-1:123456789012:ExampleQueue"
83+
]
6384
},
6485
{
6586
"Sid": "SNSPublish",
6687
"Effect": "Allow",
6788
"Action": "sns:Publish",
68-
"Resource": "arn:aws:sns:us-east-1:123456789012:ExampleTopic"
89+
"Resource": [
90+
"arn:aws:sns:us-east-1:123456789012:ExampleTopic"
91+
]
6992
},
7093
{
7194
"Sid": "FakeServiceAccess1",
7295
"Effect": "Allow",
7396
"Action": "fakeservice:DoSomething",
74-
"Resource": "arn:aws:fakeservice:us-east-1:123456789012:fake-resource/123"
97+
"Resource": [
98+
"arn:aws:fakeservice:us-east-1:123456789012:fake-resource/123"
99+
]
75100
},
76101
{
77102
"Sid": "FakeServiceAccess2",
78103
"Effect": "Allow",
79104
"Action": "fakeservice:DoSomethingElse",
80-
"Resource": "arn:aws:fakeservice:us-east-1:123456789012:fake-resource/456"
105+
"Resource": [
106+
"arn:aws:fakeservice:us-east-1:123456789012:fake-resource/456"
107+
]
81108
},
82109
{
83110
"Sid": "LambdaInvoke",
84111
"Effect": "Allow",
85112
"Action": "lambda:InvokeFunction",
86-
"Resource": "arn:aws:lambda:us-east-1:123456789012:function:ExampleFunction"
113+
"Resource": [
114+
"arn:aws:lambda:us-east-1:123456789012:function:ExampleFunction"
115+
]
87116
},
88117
{
89118
"Sid": "ECSList",
90119
"Effect": "Allow",
91120
"Action": "ecs:ListClusters",
92-
"Resource": "*"
121+
"Resource": [
122+
"*"
123+
]
93124
},
94125
{
95126
"Sid": "ECSDescribe",
96127
"Effect": "Allow",
97128
"Action": "ecs:DescribeTasks",
98-
"Resource": "*"
129+
"Resource": [
130+
"*"
131+
]
99132
},
100133
{
101134
"Sid": "SSMGetParam",
102135
"Effect": "Allow",
103136
"Action": "ssm:GetParameter",
104-
"Resource": "arn:aws:ssm:us-east-1:123456789012:parameter/ExampleParam"
137+
"Resource": [
138+
"arn:aws:ssm:us-east-1:123456789012:parameter/ExampleParam"
139+
]
105140
},
106141
{
107142
"Sid": "SecretsGet",
108143
"Effect": "Allow",
109144
"Action": "secretsmanager:GetSecretValue",
110-
"Resource": "arn:aws:secretsmanager:us-east-1:123456789012:secret:ExampleSecret"
145+
"Resource": [
146+
"arn:aws:secretsmanager:us-east-1:123456789012:secret:ExampleSecret"
147+
]
111148
},
112149
{
113150
"Sid": "SSSSMGetParam",
114151
"Effect": "Allow",
115152
"Action": "ssm:GetParameter",
116-
"Resource": "arn:aws:ssm:us-east-1:123456789012:parameter/ExampleParam"
153+
"Resource": [
154+
"arn:aws:ssm:us-east-1:123456789012:parameter/ExampleParam"
155+
]
117156
},
118157
{
119158
"Sid": "EC2Describe",
120159
"Effect": "Allow",
121160
"Action": "ec2:DescribeInstances",
122-
"Resource": "*"
161+
"Resource": [
162+
"*"
163+
]
123164
},
124165
{
125166
"Sid": "EC2Start",
126167
"Effect": "Allow",
127168
"Action": "ec2:StartInstances",
128-
"Resource": "arn:aws:ec2:us-east-1:123456789012:instance/*"
169+
"Resource": [
170+
"arn:aws:ec2:us-east-1:123456789012:instance/*"
171+
]
129172
},
130173
{
131174
"Sid": "DynamoGet",
132175
"Effect": "Allow",
133176
"Action": "dynamodb:GetItem",
134-
"Resource": "arn:aws:dynamodb:us-east-1:123456789012:table/ExampleTable"
177+
"Resource": [
178+
"arn:aws:dynamodb:us-east-1:123456789012:table/ExampleTable"
179+
]
135180
},
136181
{
137182
"Sid": "Dynamo",
138183
"Effect": "Allow",
139184
"Action": "dynamodb:PutItem",
140-
"Resource": "arn:aws:dynamodb:us-east-1:123456789012:table/Table"
185+
"Resource": [
186+
"arn:aws:dynamodb:us-east-1:123456789012:table/Table"
187+
]
141188
}
142189
]
143190
}

0 commit comments

Comments
 (0)