55 "Sid" : " S3List" ,
66 "Effect" : " Allow" ,
77 "Action" : " s3:ListBucket" ,
8- "Resource" : " arn:aws:s3:::example-bucket"
8+ "Resource" : [
9+ " arn:aws:s3:::example-bucket" ,
10+ " arn:aws:s3:::example-bucket1"
11+ ]
912 },
1013 {
1114 "Sid" : " S3GetObj" ,
1215 "Effect" : " Allow" ,
1316 "Action" : " s3:GetObject" ,
14- "Resource" : " arn:aws:s3:::example-bucket/*"
17+ "Resource" : [
18+ " arn:aws:s3:::example-bucket/*"
19+ ]
1520 },
1621 {
1722 "Sid" : " EC2Stop" ,
1823 "Effect" : " Allow" ,
1924 "Action" : " ec2:StopInstances" ,
20- "Resource" : " arn:aws:ec2:us-east-1:123456789012:instance/*"
25+ "Resource" : [
26+ " arn:aws:ec2:us-east-1:123456789012:instance/*"
27+ ]
2128 },
2229 {
2330 "Sid" : " DynamoPut" ,
2431 "Effect" : " Allow" ,
2532 "Action" : " dynamodb:PutItem" ,
26- "Resource" : " arn:aws:dynamodb:us-east-1:123456789012:table/ExampleTable"
33+ "Resource" : [
34+ " arn:aws:dynamodb:us-east-1:123456789012:table/ExampleTable"
35+ ]
2736 },
2837 {
2938 "Sid" : " CloudWatchPut" ,
3039 "Effect" : " Allow" ,
3140 "Action" : " cloudwatch:PutMetricData" ,
32- "Resource" : " *"
41+ "Resource" : [
42+ " *"
43+ ]
3344 },
3445 {
3546 "Sid" : " LogsCreateGroup" ,
3647 "Effect" : " Allow" ,
3748 "Action" : " logs:CreateLogGroup" ,
38- "Resource" : " *"
49+ "Resource" : [
50+ " *"
51+ ]
3952 },
4053 {
4154 "Sid" : " LogsCreateStream" ,
4255 "Effect" : " Allow" ,
4356 "Action" : " logs:CreateLogStream" ,
44- "Resource" : " *"
57+ "Resource" : [
58+ " *"
59+ ]
4560 },
4661 {
4762 "Sid" : " LogsPutEvents" ,
4863 "Effect" : " Allow" ,
4964 "Action" : " logs:PutLogEvents" ,
50- "Resource" : " arn:aws:logs:us-east-1:123456789012:log-group:/aws/lambda/example"
65+ "Resource" : [
66+ " arn:aws:logs:us-east-1:123456789012:log-group:/aws/lambda/example"
67+ ]
5168 },
5269 {
5370 "Sid" : " SQSReceive" ,
5471 "Effect" : " Allow" ,
5572 "Action" : " sqs:ReceiveMessage" ,
56- "Resource" : " arn:aws:sqs:us-east-1:123456789012:ExampleQueue"
73+ "Resource" : [
74+ " arn:aws:sqs:us-east-1:123456789012:ExampleQueue"
75+ ]
5776 },
5877 {
5978 "Sid" : " SQSSend" ,
6079 "Effect" : " Allow" ,
6180 "Action" : " sqs:SendMessage" ,
62- "Resource" : " arn:aws:sqs:us-east-1:123456789012:ExampleQueue"
81+ "Resource" : [
82+ " arn:aws:sqs:us-east-1:123456789012:ExampleQueue"
83+ ]
6384 },
6485 {
6586 "Sid" : " SNSPublish" ,
6687 "Effect" : " Allow" ,
6788 "Action" : " sns:Publish" ,
68- "Resource" : " arn:aws:sns:us-east-1:123456789012:ExampleTopic"
89+ "Resource" : [
90+ " arn:aws:sns:us-east-1:123456789012:ExampleTopic"
91+ ]
6992 },
7093 {
7194 "Sid" : " FakeServiceAccess1" ,
7295 "Effect" : " Allow" ,
7396 "Action" : " fakeservice:DoSomething" ,
74- "Resource" : " arn:aws:fakeservice:us-east-1:123456789012:fake-resource/123"
97+ "Resource" : [
98+ " arn:aws:fakeservice:us-east-1:123456789012:fake-resource/123"
99+ ]
75100 },
76101 {
77102 "Sid" : " FakeServiceAccess2" ,
78103 "Effect" : " Allow" ,
79104 "Action" : " fakeservice:DoSomethingElse" ,
80- "Resource" : " arn:aws:fakeservice:us-east-1:123456789012:fake-resource/456"
105+ "Resource" : [
106+ " arn:aws:fakeservice:us-east-1:123456789012:fake-resource/456"
107+ ]
81108 },
82109 {
83110 "Sid" : " LambdaInvoke" ,
84111 "Effect" : " Allow" ,
85112 "Action" : " lambda:InvokeFunction" ,
86- "Resource" : " arn:aws:lambda:us-east-1:123456789012:function:ExampleFunction"
113+ "Resource" : [
114+ " arn:aws:lambda:us-east-1:123456789012:function:ExampleFunction"
115+ ]
87116 },
88117 {
89118 "Sid" : " ECSList" ,
90119 "Effect" : " Allow" ,
91120 "Action" : " ecs:ListClusters" ,
92- "Resource" : " *"
121+ "Resource" : [
122+ " *"
123+ ]
93124 },
94125 {
95126 "Sid" : " ECSDescribe" ,
96127 "Effect" : " Allow" ,
97128 "Action" : " ecs:DescribeTasks" ,
98- "Resource" : " *"
129+ "Resource" : [
130+ " *"
131+ ]
99132 },
100133 {
101134 "Sid" : " SSMGetParam" ,
102135 "Effect" : " Allow" ,
103136 "Action" : " ssm:GetParameter" ,
104- "Resource" : " arn:aws:ssm:us-east-1:123456789012:parameter/ExampleParam"
137+ "Resource" : [
138+ " arn:aws:ssm:us-east-1:123456789012:parameter/ExampleParam"
139+ ]
105140 },
106141 {
107142 "Sid" : " SecretsGet" ,
108143 "Effect" : " Allow" ,
109144 "Action" : " secretsmanager:GetSecretValue" ,
110- "Resource" : " arn:aws:secretsmanager:us-east-1:123456789012:secret:ExampleSecret"
145+ "Resource" : [
146+ " arn:aws:secretsmanager:us-east-1:123456789012:secret:ExampleSecret"
147+ ]
111148 },
112149 {
113150 "Sid" : " SSSSMGetParam" ,
114151 "Effect" : " Allow" ,
115152 "Action" : " ssm:GetParameter" ,
116- "Resource" : " arn:aws:ssm:us-east-1:123456789012:parameter/ExampleParam"
153+ "Resource" : [
154+ " arn:aws:ssm:us-east-1:123456789012:parameter/ExampleParam"
155+ ]
117156 },
118157 {
119158 "Sid" : " EC2Describe" ,
120159 "Effect" : " Allow" ,
121160 "Action" : " ec2:DescribeInstances" ,
122- "Resource" : " *"
161+ "Resource" : [
162+ " *"
163+ ]
123164 },
124165 {
125166 "Sid" : " EC2Start" ,
126167 "Effect" : " Allow" ,
127168 "Action" : " ec2:StartInstances" ,
128- "Resource" : " arn:aws:ec2:us-east-1:123456789012:instance/*"
169+ "Resource" : [
170+ " arn:aws:ec2:us-east-1:123456789012:instance/*"
171+ ]
129172 },
130173 {
131174 "Sid" : " DynamoGet" ,
132175 "Effect" : " Allow" ,
133176 "Action" : " dynamodb:GetItem" ,
134- "Resource" : " arn:aws:dynamodb:us-east-1:123456789012:table/ExampleTable"
177+ "Resource" : [
178+ " arn:aws:dynamodb:us-east-1:123456789012:table/ExampleTable"
179+ ]
135180 },
136181 {
137182 "Sid" : " Dynamo" ,
138183 "Effect" : " Allow" ,
139184 "Action" : " dynamodb:PutItem" ,
140- "Resource" : " arn:aws:dynamodb:us-east-1:123456789012:table/Table"
185+ "Resource" : [
186+ " arn:aws:dynamodb:us-east-1:123456789012:table/Table"
187+ ]
141188 }
142189 ]
143190}
0 commit comments