AWS kebijakan terkelola: AmazonDataZoneDomainExecutionRolePolicy

Ini adalah kebijakan default untuk peran DataZone DomainExecutionRole layanan Amazon. Peran ini digunakan oleh Amazon DataZone untuk membuat katalog, menemukan, mengatur, berbagi, dan menganalisis data dalam DataZone domain Amazon. Peran ini menyediakan akses ke semua Amazon DataZone APIs yang diperlukan untuk penggunaan portal data, serta RAM izin untuk mendukung penggunaan akun terkait di DataZone domain Amazon.

Anda dapat melampirkan AmazonDataZoneDomainExecutionRolePolicy kebijakan ke AndaAmazonDataZoneDomainExecutionRole.

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Sid": "DomainExecutionRoleStatement",
			"Effect": "Allow",
			"Action": [
				"datazone:AcceptPredictions",
				"datazone:AcceptSubscriptionRequest",
				"datazone:AddEntityOwner",
				"datazone:AddPolicyGrant",
				"datazone:CancelMetadataGenerationRun",
				"datazone:CancelSubscription",
				"datazone:CreateAsset",
				"datazone:CreateAssetFilter",
				"datazone:CreateAssetRevision",
				"datazone:CreateAssetType",
				"datazone:CreateDataProduct",
				"datazone:CreateDataProductRevision",
				"datazone:CreateDataSource",
				"datazone:CreateDomainUnit",
				"datazone:CreateEnvironment",
				"datazone:CreateEnvironmentBlueprint",
				"datazone:CreateEnvironmentProfile",
				"datazone:CreateFormType",
				"datazone:CreateGlossary",
				"datazone:CreateGlossaryTerm",
				"datazone:CreateListingChangeSet",
				"datazone:CreateProject",
				"datazone:CreateProjectMembership",
				"datazone:CreateSubscriptionGrant",
				"datazone:CreateSubscriptionRequest",
				"datazone:DeleteAsset",
				"datazone:DeleteAssetFilter",
				"datazone:DeleteAssetType",
				"datazone:DeleteDataProduct",
				"datazone:DeleteDataSource",
				"datazone:DeleteDomainUnit",
				"datazone:DeleteEnvironment",
				"datazone:DeleteEnvironmentBlueprint",
				"datazone:DeleteEnvironmentProfile",
				"datazone:DeleteFormType",
				"datazone:DeleteGlossary",
				"datazone:DeleteGlossaryTerm",
				"datazone:DeleteListing",
				"datazone:DeleteProject",
				"datazone:DeleteProjectMembership",
				"datazone:DeleteSubscriptionGrant",
				"datazone:DeleteSubscriptionRequest",
				"datazone:DeleteSubscriptionTarget",
				"datazone:DeleteTimeSeriesDataPoints",
				"datazone:GetAsset",
				"datazone:GetAssetFilter",
				"datazone:GetAssetType",
				"datazone:GetDataProduct",
				"datazone:GetDataSource",
				"datazone:GetDataSourceRun",
				"datazone:GetDomain",
				"datazone:GetDomainUnit",
				"datazone:GetEnvironment",
				"datazone:GetEnvironmentAction",
				"datazone:GetEnvironmentActionLink",
				"datazone:GetEnvironmentBlueprint",
				"datazone:GetEnvironmentCredentials",
				"datazone:GetEnvironmentProfile",
				"datazone:GetFormType",
				"datazone:GetGlossary",
				"datazone:GetGlossaryTerm",
				"datazone:GetGroupProfile",
				"datazone:GetLineageNode",
				"datazone:GetListing",
				"datazone:GetMetadataGenerationRun",
				"datazone:GetProject",
				"datazone:GetSubscription",
				"datazone:GetSubscriptionEligibility",
				"datazone:GetSubscriptionGrant",
				"datazone:GetSubscriptionRequestDetails",
				"datazone:GetSubscriptionTarget",
				"datazone:GetTimeSeriesDataPoint",
				"datazone:GetUserProfile",
				"datazone:ListAccountEnvironments",
				"datazone:ListAssetFilters",
				"datazone:ListAssetRevisions",
				"datazone:ListDataProductRevisions",
				"datazone:ListDataSourceRunActivities",
				"datazone:ListDataSourceRuns",
				"datazone:ListDataSources",
				"datazone:ListDomainUnitsForParent",
				"datazone:ListEntityOwners",
				"datazone:ListEnvironmentActions",
				"datazone:ListEnvironmentBlueprintConfigurationSummaries",
				"datazone:ListEnvironmentBlueprintConfigurations",
				"datazone:ListEnvironmentBlueprints",
				"datazone:ListEnvironmentProfiles",
				"datazone:ListEnvironments",
				"datazone:ListGroupsForUser",
				"datazone:ListLineageNodeHistory",
				"datazone:ListMetadataGenerationRuns",
				"datazone:ListNotifications",
				"datazone:ListPolicyGrants",
				"datazone:ListProjectMemberships",
				"datazone:ListProjects",
				"datazone:ListSubscriptionGrants",
				"datazone:ListSubscriptionRequests",
				"datazone:ListSubscriptionTargets",
				"datazone:ListSubscriptions",
				"datazone:ListTimeSeriesDataPoints",
				"datazone:ListWarehouseMetadata",
				"datazone:RejectPredictions",
				"datazone:RejectSubscriptionRequest",
				"datazone:RemoveEntityOwner",
				"datazone:RemovePolicyGrant",
				"datazone:RevokeSubscription",
				"datazone:Search",
				"datazone:SearchGroupProfiles",
				"datazone:SearchListings",
				"datazone:SearchTypes",
				"datazone:SearchUserProfiles",
				"datazone:StartDataSourceRun",
				"datazone:StartMetadataGenerationRun",
				"datazone:UpdateAssetFilter",
				"datazone:UpdateDataSource",
				"datazone:UpdateDomainUnit",
				"datazone:UpdateEnvironment",
				"datazone:UpdateEnvironmentBlueprint",
				"datazone:UpdateEnvironmentDeploymentStatus",
				"datazone:UpdateEnvironmentProfile",
				"datazone:UpdateGlossary",
				"datazone:UpdateGlossaryTerm",
				"datazone:UpdateProject",
				"datazone:UpdateSubscriptionGrantStatus",
				"datazone:UpdateSubscriptionRequest"
			],
			"Resource": "*"
		},
		{
			"Sid": "RAMResourceShareStatement",
			"Effect": "Allow",
			"Action": "ram:GetResourceShareAssociations",
			"Resource": "*"
		}
	]
}