AWS politica gestita: AmazonDataZoneDomainExecutionRolePolicy

Questa è la politica predefinita per il ruolo DataZone DomainExecutionRole di servizio Amazon. Questo ruolo viene utilizzato da Amazon DataZone per catalogare, scoprire, gestire, condividere e analizzare i dati nel DataZone dominio Amazon. Questo ruolo fornisce l'accesso a tutti DataZone APIs gli Amazon necessari per l'utilizzo del portale dati, nonché RAM le autorizzazioni per supportare l'utilizzo degli account associati in un DataZone dominio Amazon.

Puoi allegare la AmazonDataZoneDomainExecutionRolePolicy politica al tuoAmazonDataZoneDomainExecutionRole.

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Sid": "DomainExecutionRoleStatement",
			"Effect": "Allow",
			"Action": [
				"datazone:AcceptPredictions",
				"datazone:AcceptSubscriptionRequest",
				"datazone:AddEntityOwner",
				"datazone:AddPolicyGrant",
				"datazone:CancelMetadataGenerationRun",
				"datazone:CancelSubscription",
				"datazone:CreateAsset",
				"datazone:CreateAssetFilter",
				"datazone:CreateAssetRevision",
				"datazone:CreateAssetType",
				"datazone:CreateDataProduct",
				"datazone:CreateDataProductRevision",
				"datazone:CreateDataSource",
				"datazone:CreateDomainUnit",
				"datazone:CreateEnvironment",
				"datazone:CreateEnvironmentBlueprint",
				"datazone:CreateEnvironmentProfile",
				"datazone:CreateFormType",
				"datazone:CreateGlossary",
				"datazone:CreateGlossaryTerm",
				"datazone:CreateListingChangeSet",
				"datazone:CreateProject",
				"datazone:CreateProjectMembership",
				"datazone:CreateSubscriptionGrant",
				"datazone:CreateSubscriptionRequest",
				"datazone:DeleteAsset",
				"datazone:DeleteAssetFilter",
				"datazone:DeleteAssetType",
				"datazone:DeleteDataProduct",
				"datazone:DeleteDataSource",
				"datazone:DeleteDomainUnit",
				"datazone:DeleteEnvironment",
				"datazone:DeleteEnvironmentBlueprint",
				"datazone:DeleteEnvironmentProfile",
				"datazone:DeleteFormType",
				"datazone:DeleteGlossary",
				"datazone:DeleteGlossaryTerm",
				"datazone:DeleteListing",
				"datazone:DeleteProject",
				"datazone:DeleteProjectMembership",
				"datazone:DeleteSubscriptionGrant",
				"datazone:DeleteSubscriptionRequest",
				"datazone:DeleteSubscriptionTarget",
				"datazone:DeleteTimeSeriesDataPoints",
				"datazone:GetAsset",
				"datazone:GetAssetFilter",
				"datazone:GetAssetType",
				"datazone:GetDataProduct",
				"datazone:GetDataSource",
				"datazone:GetDataSourceRun",
				"datazone:GetDomain",
				"datazone:GetDomainUnit",
				"datazone:GetEnvironment",
				"datazone:GetEnvironmentAction",
				"datazone:GetEnvironmentActionLink",
				"datazone:GetEnvironmentBlueprint",
				"datazone:GetEnvironmentCredentials",
				"datazone:GetEnvironmentProfile",
				"datazone:GetFormType",
				"datazone:GetGlossary",
				"datazone:GetGlossaryTerm",
				"datazone:GetGroupProfile",
				"datazone:GetLineageNode",
				"datazone:GetListing",
				"datazone:GetMetadataGenerationRun",
				"datazone:GetProject",
				"datazone:GetSubscription",
				"datazone:GetSubscriptionEligibility",
				"datazone:GetSubscriptionGrant",
				"datazone:GetSubscriptionRequestDetails",
				"datazone:GetSubscriptionTarget",
				"datazone:GetTimeSeriesDataPoint",
				"datazone:GetUserProfile",
				"datazone:ListAccountEnvironments",
				"datazone:ListAssetFilters",
				"datazone:ListAssetRevisions",
				"datazone:ListDataProductRevisions",
				"datazone:ListDataSourceRunActivities",
				"datazone:ListDataSourceRuns",
				"datazone:ListDataSources",
				"datazone:ListDomainUnitsForParent",
				"datazone:ListEntityOwners",
				"datazone:ListEnvironmentActions",
				"datazone:ListEnvironmentBlueprintConfigurationSummaries",
				"datazone:ListEnvironmentBlueprintConfigurations",
				"datazone:ListEnvironmentBlueprints",
				"datazone:ListEnvironmentProfiles",
				"datazone:ListEnvironments",
				"datazone:ListGroupsForUser",
				"datazone:ListLineageNodeHistory",
				"datazone:ListMetadataGenerationRuns",
				"datazone:ListNotifications",
				"datazone:ListPolicyGrants",
				"datazone:ListProjectMemberships",
				"datazone:ListProjects",
				"datazone:ListSubscriptionGrants",
				"datazone:ListSubscriptionRequests",
				"datazone:ListSubscriptionTargets",
				"datazone:ListSubscriptions",
				"datazone:ListTimeSeriesDataPoints",
				"datazone:ListWarehouseMetadata",
				"datazone:RejectPredictions",
				"datazone:RejectSubscriptionRequest",
				"datazone:RemoveEntityOwner",
				"datazone:RemovePolicyGrant",
				"datazone:RevokeSubscription",
				"datazone:Search",
				"datazone:SearchGroupProfiles",
				"datazone:SearchListings",
				"datazone:SearchTypes",
				"datazone:SearchUserProfiles",
				"datazone:StartDataSourceRun",
				"datazone:StartMetadataGenerationRun",
				"datazone:UpdateAssetFilter",
				"datazone:UpdateDataSource",
				"datazone:UpdateDomainUnit",
				"datazone:UpdateEnvironment",
				"datazone:UpdateEnvironmentBlueprint",
				"datazone:UpdateEnvironmentDeploymentStatus",
				"datazone:UpdateEnvironmentProfile",
				"datazone:UpdateGlossary",
				"datazone:UpdateGlossaryTerm",
				"datazone:UpdateProject",
				"datazone:UpdateSubscriptionGrantStatus",
				"datazone:UpdateSubscriptionRequest"
			],
			"Resource": "*"
		},
		{
			"Sid": "RAMResourceShareStatement",
			"Effect": "Allow",
			"Action": "ram:GetResourceShareAssociations",
			"Resource": "*"
		}
	]
}