portal/common-resources/aws/docker-ecs-integration-policy.json at main · cssat/portal · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "application-autoscaling:*",
                "ec2:AuthorizeSecurityGroupIngress",
                "route53:GetHostedZone",
                "route53:GetHealthCheck",
                "iam:RemoveRoleFromInstanceProfile",
                "iam:CreateRole",
                "iam:AttachRolePolicy",
                "route53:ListHostedZonesByName",
                "ecr:DeleteRepository",
                "iam:AddRoleToInstanceProfile",
                "ecs:UpdateService",
                "iam:DetachRolePolicy",
                "ecs:RegisterTaskDefinition",
                "ecr:TagResource",
                "logs:FilterLogEvents",
                "ec2:DescribeRouteTables",
                "ecr:GetLifecyclePolicy",
                "route53:CreateHostedZone",
                "ecs:CreateCluster",
                "ec2:CreateTags",
                "ecr:CreateRepository",
                "ecs:DeleteService",
                "ecs:DeleteCluster",
                "cloudformation:*",
                "ecr:GetAuthorizationToken",
                "iam:DeleteRole",
                "autoscaling-plans:*",
                "ecr:DeleteLifecyclePolicy",
                "logs:CreateLogGroup",
                "ecs:DescribeClusters",
                "ec2:RevokeSecurityGroupIngress",
                "ecr:UntagResource",
                "ecr:StartLifecyclePolicyPreview",
                "ec2:DescribeSubnets",
                "iam:CreateInstanceProfile",
                "ecr:ListTagsForResource",
                "ecr:ListImages",
                "ecs:DeregisterTaskDefinition",
                "iam:PassRole",
                "ecs:CreateService",
                "ecs:ListTasks",
                "ec2:CreateSecurityGroup",
                "ecs:DescribeServices",
                "ecr:DescribeRepositories",
                "route53:DeleteHostedZone",
                "discovery:*",
                "ecs:DescribeTasks",
                "ecr:DeleteRepositoryPolicy",
                "iam:DeleteInstanceProfile",
                "ecr:PutLifecyclePolicy",
                "logs:DescribeLogGroups",
                "logs:DeleteLogGroup",
                "ecr:GetLifecyclePolicyPreview",
                "ecr:DescribeRegistry",
                "ec2:DescribeSecurityGroups",
                "ecs:ListAccountSettings",
                "ec2:DescribeVpcs",
                "ec2:DeleteSecurityGroup",
                "ecr:SetRepositoryPolicy",
                "ecr:GetRepositoryPolicy"
            ],
            "Resource": "*"
        }
    ]
}