翻訳は機械翻訳により提供されています。提供された翻訳内容と英語版の間で齟齬、不一致または矛盾がある場合、英語版が優先します。
# AWSCodePipeline\$1FullAccess
**説明**: 経由で AWS CodePipeline へのフルアクセスを提供します AWS マネジメントコンソール。
`AWSCodePipeline_FullAccess` は [AWS マネージドポリシー](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_managed-vs-inline.html#aws-managed-policies)です。
## このポリシーを使用すると
ユーザー、グループおよびロールに `AWSCodePipeline_FullAccess` をアタッチできます。
## ポリシーの詳細
+ **タイプ**: AWS 管理ポリシー
+ **作成日時**: 2020 年 8 月 3 日 22:38 UTC
+ **編集日時:** 2024 年 3 月 14 日 17:06 UTC
+ **ARN**: `arn:aws:iam::aws:policy/AWSCodePipeline_FullAccess`
## ポリシーのバージョン
**ポリシーのバージョン:** v3 (デフォルト)
ポリシーのデフォルトバージョンは、ポリシーのアクセス許可を定義するバージョンです。ポリシーを持つユーザーまたはロールが AWS リソースへのアクセスをリクエストすると、 はポリシーのデフォルトバージョン AWS をチェックして、リクエストを許可するかどうかを判断します。
## JSON ポリシードキュメント
```
{
"Statement" : [
{
"Action" : [
"codepipeline:*",
"cloudformation:DescribeStacks",
"cloudformation:ListStacks",
"cloudformation:ListChangeSets",
"cloudtrail:DescribeTrails",
"codebuild:BatchGetProjects",
"codebuild:CreateProject",
"codebuild:ListCuratedEnvironmentImages",
"codebuild:ListProjects",
"codecommit:ListBranches",
"codecommit:GetReferences",
"codecommit:ListRepositories",
"codedeploy:BatchGetDeploymentGroups",
"codedeploy:ListApplications",
"codedeploy:ListDeploymentGroups",
"ec2:DescribeSecurityGroups",
"ec2:DescribeSubnets",
"ec2:DescribeVpcs",
"ecr:DescribeRepositories",
"ecr:ListImages",
"ecs:ListClusters",
"ecs:ListServices",
"elasticbeanstalk:DescribeApplications",
"elasticbeanstalk:DescribeEnvironments",
"iam:ListRoles",
"iam:GetRole",
"lambda:ListFunctions",
"events:ListRules",
"events:ListTargetsByRule",
"events:DescribeRule",
"opsworks:DescribeApps",
"opsworks:DescribeLayers",
"opsworks:DescribeStacks",
"s3:ListAllMyBuckets",
"sns:ListTopics",
"codestar-notifications:ListNotificationRules",
"codestar-notifications:ListTargets",
"codestar-notifications:ListTagsforResource",
"codestar-notifications:ListEventTypes",
"states:ListStateMachines"
],
"Effect" : "Allow",
"Resource" : "*",
"Sid" : "CodePipelineAuthoringAccess"
},
{
"Action" : [
"s3:GetObject",
"s3:ListBucket",
"s3:GetBucketPolicy",
"s3:GetBucketVersioning",
"s3:GetObjectVersion",
"s3:CreateBucket",
"s3:PutBucketPolicy"
],
"Effect" : "Allow",
"Resource" : "arn:aws:s3::*:codepipeline-*",
"Sid" : "CodePipelineArtifactsReadWriteAccess"
},
{
"Action" : [
"cloudtrail:PutEventSelectors",
"cloudtrail:CreateTrail",
"cloudtrail:GetEventSelectors",
"cloudtrail:StartLogging"
],
"Effect" : "Allow",
"Resource" : "arn:aws:cloudtrail:*:*:trail/codepipeline-source-trail",
"Sid" : "CodePipelineSourceTrailReadWriteAccess"
},
{
"Action" : [
"iam:PassRole"
],
"Effect" : "Allow",
"Resource" : [
"arn:aws:iam::*:role/service-role/cwe-role-*"
],
"Condition" : {
"StringEquals" : {
"iam:PassedToService" : [
"events.amazonaws.com"
]
}
},
"Sid" : "EventsIAMPassRole"
},
{
"Action" : [
"iam:PassRole"
],
"Effect" : "Allow",
"Resource" : "*",
"Condition" : {
"StringEquals" : {
"iam:PassedToService" : [
"codepipeline.amazonaws.com"
]
}
},
"Sid" : "CodePipelineIAMPassRole"
},
{
"Action" : [
"events:PutRule",
"events:PutTargets",
"events:DeleteRule",
"events:DisableRule",
"events:RemoveTargets"
],
"Effect" : "Allow",
"Resource" : [
"arn:aws:events:*:*:rule/codepipeline-*"
],
"Sid" : "CodePipelineEventsReadWriteAccess"
},
{
"Sid" : "CodeStarNotificationsReadWriteAccess",
"Effect" : "Allow",
"Action" : [
"codestar-notifications:CreateNotificationRule",
"codestar-notifications:DescribeNotificationRule",
"codestar-notifications:UpdateNotificationRule",
"codestar-notifications:DeleteNotificationRule",
"codestar-notifications:Subscribe",
"codestar-notifications:Unsubscribe"
],
"Resource" : "*",
"Condition" : {
"StringLike" : {
"codestar-notifications:NotificationsForResource" : "arn:aws:codepipeline:*"
}
}
},
{
"Sid" : "CodeStarNotificationsSNSTopicCreateAccess",
"Effect" : "Allow",
"Action" : [
"sns:CreateTopic",
"sns:SetTopicAttributes"
],
"Resource" : "arn:aws:sns:*:*:codestar-notifications*"
},
{
"Sid" : "CodeStarNotificationsChatbotAccess",
"Effect" : "Allow",
"Action" : [
"chatbot:DescribeSlackChannelConfigurations",
"chatbot:ListMicrosoftTeamsChannelConfigurations"
],
"Resource" : "*"
}
],
"Version" : "2012-10-17"
}
```
## 詳細情報
+ [IAM Identity Center で AWS マネージドポリシーを使用してアクセス許可セットを作成する](https://docs.aws.amazon.com/singlesignon/latest/userguide/howtocreatepermissionset.html)
+ [IAM ID のアクセス許可の追加および削除](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_manage-attach-detach.html)
+ [IAM ポリシーのバージョニングについて理解する](https://docs.aws.amazon.com//IAM/latest/UserGuide/access_policies_managed-versioning.html)
+ [AWS 管理ポリシーを開始し、最小特権のアクセス許可に移行する](https://docs.aws.amazon.com//IAM/latest/UserGuide/best-practices.html#bp-use-aws-defined-policies)