翻訳は機械翻訳により提供されています。提供された翻訳内容と英語版の間で齟齬、不一致または矛盾がある場合、英語版が優先します。
# AWSRefactoringToolkitFullAccess
**説明**: このポリシーは、Microsoft Visual Studio の AWS Toolkit for .NET リファクタリング拡張機能で AWS サービスを使用するアクセス許可を付与します。ローカル AWS プロファイルにアタッチすることを目的としています。このポリシーにより、アプリケーションアーティファクトのアップロードし、Amazon S3 からの結果のアーティファクトをダウンロードできます。これにより、 AWS CodeBuild を使用してアプリケーションをコンテナイメージに構築し、Amazon Elastic Container Registry (Amazon ECR) からイメージを保存および取得できます。また、Amazon Elastic Container Service (Amazon ECS) AWS などの のコンテナサービスへのアプリケーションのデプロイ、VPC リソースのオプションの作成、 AWS ディレクトリサービスなどの既存のインフラストラクチャへのオプションの接続、およびその他の関連サービスが可能になります。
`AWSRefactoringToolkitFullAccess` は [AWS マネージドポリシー](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_managed-vs-inline.html#aws-managed-policies)です。
## このポリシーを使用すると
ユーザー、グループおよびロールに `AWSRefactoringToolkitFullAccess` をアタッチできます。
## ポリシーの詳細
+ **タイプ**: AWS 管理ポリシー
+ **作成日時**: 2022 年 10 月 25 日 16:41 UTC
+ **編集日時:** 2026 年 2 月 12 日 17:57 UTC
+ **ARN**: `arn:aws:iam::aws:policy/AWSRefactoringToolkitFullAccess`
## ポリシーのバージョン
**ポリシーのバージョン:** v8 (デフォルト)
ポリシーのデフォルトバージョンは、ポリシーのアクセス許可を定義するバージョンです。ポリシーを持つユーザーまたはロールが AWS リソースへのアクセスをリクエストすると、 はポリシーのデフォルトバージョン AWS をチェックして、リクエストを許可するかどうかを決定します。
## JSON ポリシードキュメント
```
{
"Version" : "2012-10-17",
"Statement" : [
{
"Effect" : "Allow",
"Action" : [
"a2c:GetContainerizationJobDetails",
"a2c:GetDeploymentJobDetails",
"a2c:StartContainerizationJob",
"a2c:StartDeploymentJob"
],
"Resource" : "*"
},
{
"Effect" : "Allow",
"Action" : [
"cloudformation:CreateChangeSet",
"cloudformation:CreateStack",
"cloudformation:DescribeChangeSet",
"cloudformation:DescribeStackEvents",
"cloudformation:ExecuteChangeSet",
"cloudformation:UpdateStack",
"cloudformation:TagResource",
"cloudformation:UntagResource"
],
"Resource" : [
"arn:*:cloudformation:*:*:stack/a2c-app-*",
"arn:*:cloudformation:*:*:stack/a2c-build-*",
"arn:*:cloudformation:*:*:stack/application-transformation-app-*"
]
},
{
"Effect" : "Allow",
"Action" : [
"codebuild:CreateProject",
"codebuild:UpdateProject"
],
"Resource" : "arn:aws:codebuild:*:*:project/*",
"Condition" : {
"Null" : {
"aws:RequestTag/a2c-generated" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"codebuild:StartBuild"
],
"Resource" : "arn:aws:codebuild:*:*:project/*"
},
{
"Effect" : "Allow",
"Action" : [
"ec2:CreateSecurityGroup"
],
"Resource" : "*"
},
{
"Effect" : "Allow",
"Action" : [
"ec2:CreateInternetGateway",
"ec2:CreateKeyPair",
"ec2:CreateRoute",
"ec2:CreateRouteTable",
"ec2:CreateSubnet",
"ec2:CreateVpc",
"ec2:AuthorizeSecurityGroupIngress"
],
"Resource" : "*",
"Condition" : {
"Null" : {
"aws:RequestTag/a2c-generated" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ec2:CreateInternetGateway",
"ec2:CreateKeyPair",
"ec2:CreateRoute",
"ec2:CreateRouteTable",
"ec2:CreateSubnet",
"ec2:CreateVpc",
"ec2:AuthorizeSecurityGroupIngress"
],
"Resource" : "*",
"Condition" : {
"Null" : {
"aws:RequestTag/application-transformation" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ec2:CreateTags"
],
"Resource" : "arn:aws:ec2:*:*:security-group/*",
"Condition" : {
"ForAnyValue:StringEquals" : {
"aws:CalledVia" : [
"application-transformation.amazonaws.com"
]
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ec2:CreateTags"
],
"Resource" : "*",
"Condition" : {
"StringEquals" : {
"ec2:CreateAction" : [
"AuthorizeSecurityGroupIngress",
"CreateInternetGateway",
"CreateKeyPair",
"CreateRoute",
"CreateRouteTable",
"CreateSubnet",
"CreateVpc"
]
},
"Null" : {
"aws:RequestTag/application-transformation" : "false"
},
"ForAnyValue:StringEquals" : {
"aws:CalledVia" : [
"application-transformation.amazonaws.com"
]
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ec2:AssociateRouteTable",
"ec2:AttachInternetGateway",
"ec2:AuthorizeSecurityGroupIngress",
"ec2:DeleteTags",
"ec2:ModifySubnetAttribute",
"ec2:ModifyVpcAttribute",
"ec2:RevokeSecurityGroupIngress",
"ec2:CreateSubnet",
"ec2:CreateRoute",
"ec2:CreateRouteTable"
],
"Resource" : "*",
"Condition" : {
"Null" : {
"aws:ResourceTag/a2c-generated" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ec2:AssociateRouteTable",
"ec2:AttachInternetGateway",
"ec2:AuthorizeSecurityGroupIngress",
"ec2:DeleteTags",
"ec2:ModifySubnetAttribute",
"ec2:ModifyVpcAttribute",
"ec2:RevokeSecurityGroupIngress",
"ec2:CreateSubnet",
"ec2:CreateRoute",
"ec2:CreateRouteTable"
],
"Resource" : "*",
"Condition" : {
"Null" : {
"aws:ResourceTag/application-transformation" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ecr:CreateRepository",
"ecr:TagResource"
],
"Resource" : "arn:*:ecr:*:*:repository/*",
"Condition" : {
"Null" : {
"aws:RequestTag/a2c-generated" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ecr:CreateRepository",
"ecr:TagResource"
],
"Resource" : "arn:*:ecr:*:*:repository/*",
"Condition" : {
"Null" : {
"aws:RequestTag/application-transformation" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ecr:GetLifecyclePolicy",
"ecr:GetRepositoryPolicy",
"ecr:ListImages",
"ecr:ListTagsForResource",
"ecr:TagResource",
"ecr:UntagResource"
],
"Resource" : "arn:*:ecr:*:*:repository/*",
"Condition" : {
"Null" : {
"aws:ResourceTag/a2c-generated" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ecr:GetLifecyclePolicy",
"ecr:GetRepositoryPolicy",
"ecr:ListImages",
"ecr:ListTagsForResource",
"ecr:TagResource",
"ecr:UntagResource"
],
"Resource" : "arn:*:ecr:*:*:repository/*",
"Condition" : {
"Null" : {
"aws:ResourceTag/application-transformation" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ecs:CreateCluster",
"ecs:CreateService",
"ecs:RegisterTaskDefinition",
"ecs:TagResource"
],
"Resource" : "*",
"Condition" : {
"Null" : {
"aws:RequestTag/a2c-generated" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ecs:CreateCluster",
"ecs:CreateService",
"ecs:RegisterTaskDefinition",
"ecs:TagResource"
],
"Resource" : "*",
"Condition" : {
"Null" : {
"aws:RequestTag/application-transformation" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ecs:UpdateService",
"ecs:TagResource",
"ecs:UntagResource"
],
"Resource" : "*",
"Condition" : {
"Null" : {
"aws:ResourceTag/a2c-generated" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ecs:UpdateService",
"ecs:TagResource",
"ecs:UntagResource"
],
"Resource" : "*",
"Condition" : {
"Null" : {
"aws:ResourceTag/application-transformation" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ecs:DescribeTaskDefinition"
],
"Resource" : "*",
"Condition" : {
"ForAnyValue:StringEquals" : {
"aws:CalledVia" : "cloudformation.amazonaws.com"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ecs:ExecuteCommand"
],
"Resource" : "*",
"Condition" : {
"StringLike" : {
"ecs:container-name" : "a2c-sidecar"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ecs:ExecuteCommand"
],
"Resource" : "*",
"Condition" : {
"StringLike" : {
"ecs:container-name" : "application-transformation-sidecar"
}
}
},
{
"Effect" : "Allow",
"Action" : "iam:CreateServiceLinkedRole",
"Resource" : "arn:aws:iam::*:role/aws-service-role/ecs.amazonaws.com/AWSServiceRoleForECS",
"Condition" : {
"StringLike" : {
"iam:AWSServiceName" : "ecs.amazonaws.com"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"logs:CreateLogGroup",
"logs:TagResource"
],
"Resource" : [
"arn:aws:logs:*:*:log-group:/aws/codebuild/*:*",
"arn:aws:logs:*:*:log-group:/aws/ecs/containerinsights/*:*",
"arn:aws:logs:*:*:log-group:/aws/ecs/container-logs/*:*"
],
"Condition" : {
"Null" : {
"aws:RequestTag/a2c-generated" : "false"
},
"ForAllValues:StringEquals" : {
"aws:TagKeys" : [
"a2c-generated"
]
}
}
},
{
"Effect" : "Allow",
"Action" : [
"logs:CreateLogGroup",
"logs:TagResource"
],
"Resource" : [
"arn:aws:logs:*:*:log-group:/aws/ecs/containerinsights/*:*",
"arn:aws:logs:*:*:log-group:/aws/ecs/container-logs/*:*"
],
"Condition" : {
"Null" : {
"aws:RequestTag/application-transformation" : "false"
},
"ForAllValues:StringEquals" : {
"aws:TagKeys" : [
"application-transformation"
]
}
}
},
{
"Effect" : "Allow",
"Action" : [
"logs:GetLogEvents"
],
"Resource" : [
"arn:aws:logs:*:*:log-group:/aws/codebuild/*:*",
"arn:aws:logs:*:*:log-group:/aws/ecs/containerinsights/*:*",
"arn:aws:logs:*:*:log-group:/aws/ecs/container-logs/*:*"
],
"Condition" : {
"Null" : {
"aws:ResourceTag/a2c-generated" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"logs:GetLogEvents"
],
"Resource" : [
"arn:aws:logs:*:*:log-group:/aws/ecs/containerinsights/*:*",
"arn:aws:logs:*:*:log-group:/aws/ecs/container-logs/*:*"
],
"Condition" : {
"Null" : {
"aws:ResourceTag/application-transformation" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ssm:AddTagsToResource",
"ssm:GetParameters",
"ssm:PutParameter",
"ssm:RemoveTagsFromResource"
],
"Resource" : "arn:aws:ssm:*:*:parameter/a2c-generated-check-ecs-slr-*"
},
{
"Effect" : "Allow",
"Action" : [
"ssm:DescribeSessions",
"ssmmessages:CreateControlChannel",
"ssmmessages:CreateDataChannel",
"ssmmessages:OpenControlChannel",
"ssmmessages:OpenDataChannel"
],
"Resource" : "*"
},
{
"Effect" : "Allow",
"Action" : [
"s3:DeleteObject",
"s3:GetObject",
"s3:PutObject"
],
"Resource" : [
"arn:aws:s3:::*/refactoringtoolkit*",
"arn:aws:s3:::*/a2c-generated*",
"arn:aws:s3:::*/application-transformation*"
]
},
{
"Effect" : "Allow",
"Action" : [
"s3:ListBucket"
],
"Resource" : "arn:aws:s3:::*",
"Condition" : {
"StringLike" : {
"s3:prefix" : [
"application-transformation",
"refactoringtoolkit"
]
}
}
},
{
"Effect" : "Allow",
"Action" : [
"cloudformation:DescribeStacks",
"cloudformation:ListStacks",
"clouddirectory:ListDirectories",
"codebuild:BatchGetProjects",
"codebuild:BatchGetBuilds",
"ds:DescribeDirectories",
"ec2:DescribeAccountAttributes",
"ec2:DescribeAvailabilityZones",
"ec2:DescribeImages",
"ec2:DescribeInternetGateways",
"ec2:DescribeKeyPairs",
"ec2:DescribeNetworkInterfaces",
"ec2:DescribeRouteTables",
"ec2:DescribeSecurityGroups",
"ec2:DescribeSubnets",
"ec2:DescribeVpcs",
"ec2:DescribeRegions",
"ecr:DescribeImages",
"ecr:DescribeRepositories",
"ecs:DescribeClusters",
"ecs:DescribeServices",
"ecs:DescribeTasks",
"ecs:ListTagsForResource",
"ecs:ListTasks",
"iam:ListRoles",
"s3:GetBucketLocation",
"s3:GetBucketVersioning",
"s3:ListAllMyBuckets",
"secretsmanager:ListSecrets"
],
"Resource" : "*"
},
{
"Effect" : "Allow",
"Action" : "iam:GetRole",
"Resource" : "arn:aws:iam::*:role/aws-service-role/ecs.amazonaws.com/AWSServiceRoleForECS"
},
{
"Effect" : "Allow",
"Action" : [
"s3:GetObject"
],
"Resource" : [
"arn:aws:s3:::aws.portingassistant.dotnet.datastore",
"arn:aws:s3:::aws.portingassistant.dotnet.datastore/*"
]
},
{
"Effect" : "Allow",
"Action" : [
"application-transformation:StartPortingCompatibilityAssessment",
"application-transformation:GetPortingCompatibilityAssessment",
"application-transformation:StartPortingRecommendationAssessment",
"application-transformation:GetPortingRecommendationAssessment",
"application-transformation:PutLogData",
"application-transformation:PutMetricData",
"application-transformation:StartContainerization",
"application-transformation:GetContainerization",
"application-transformation:StartDeployment",
"application-transformation:GetDeployment"
],
"Resource" : "*"
},
{
"Effect" : "Allow",
"Action" : [
"kms:Decrypt",
"kms:Encrypt",
"kms:DescribeKey",
"kms:GenerateDataKey"
],
"Resource" : "arn:aws:kms:*::*",
"Condition" : {
"ForAnyValue:StringLike" : {
"kms:ResourceAliases" : "alias/application-transformation*"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ecr:InitiateLayerUpload",
"ecr:PutImage",
"ecr:UploadLayerPart",
"ecr:CompleteLayerUpload",
"ecr:BatchCheckLayerAvailability",
"ecr:GetDownloadUrlForLayer"
],
"Resource" : "arn:*:ecr:*:*:repository/*",
"Condition" : {
"Null" : {
"ecr:ResourceTag/application-transformation" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ecr:GetAuthorizationToken"
],
"Resource" : "*"
},
{
"Effect" : "Allow",
"Action" : [
"kms:CreateGrant"
],
"Resource" : "arn:aws:kms:*::*",
"Condition" : {
"Bool" : {
"kms:GrantIsForAWSResource" : true
},
"ForAnyValue:StringLike" : {
"kms:ResourceAliases" : "alias/application-transformation*"
}
}
}
]
}
```
## 詳細情報
+ [IAM Identity Center で AWS マネージドポリシーを使用してアクセス許可セットを作成する](https://docs.aws.amazon.com/singlesignon/latest/userguide/howtocreatepermissionset.html)
+ [IAM ID のアクセス許可の追加および削除](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_manage-attach-detach.html)
+ [IAM ポリシーのバージョニングについて理解する](https://docs.aws.amazon.com//IAM/latest/UserGuide/access_policies_managed-versioning.html)
+ [AWS 管理ポリシーを開始し、最小特権のアクセス許可に移行する](https://docs.aws.amazon.com//IAM/latest/UserGuide/best-practices.html#bp-use-aws-defined-policies)