alpine-zdt-images/support/aws/iam_role_vmimport_policy.json

45 lines
1.3 KiB
JSON

{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "VisualEditor0",
"Effect": "Allow",
"Action": [
"ec2:CopySnapshot",
"ec2:Describe*",
"ec2:ModifySnapshotAttribute",
"ec2:RegisterImage",
"kms:CreateGrant",
"kms:Decrypt",
"kms:DescribeKey",
"kms:Encrypt",
"kms:GenerateDataKey*",
"kms:ReEncrypt*",
"license-manager:GetLicenseConfiguration",
"license-manager:ListLicenseSpecificationsForResource",
"license-manager:UpdateLicenseSpecificationsForResource"
],
"Resource": "*"
},
{
"Sid": "VisualEditor1",
"Effect": "Allow",
"Action": [
"s3:GetBucketAcl",
"s3:GetBucketLocation",
"s3:ListBucket"
],
"Resource": "arn:aws:s3:::alpine-cloud-images.*"
},
{
"Sid": "VisualEditor2",
"Effect": "Allow",
"Action": [
"s3:GetObject",
"s3:PutObject"
],
"Resource": "arn:aws:s3:::alpine-cloud-images.*/*"
}
]
}