翻訳は機械翻訳により提供されています。提供された翻訳内容と英語版の間で齟齬、不一致または矛盾がある場合、英語版が優先します。 # AWSThinkboxDeadlineResourceTrackerAdminPolicy **説明**: AWS Thinkbox の Deadline Resource Tracker を作成、破棄、管理するために必要なアクセス許可を付与します。 `AWSThinkboxDeadlineResourceTrackerAdminPolicy` は [AWS マネージドポリシー](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_managed-vs-inline.html#aws-managed-policies)です。 ## このポリシーを使用すると ユーザー、グループおよびロールに `AWSThinkboxDeadlineResourceTrackerAdminPolicy` をアタッチできます。 ## ポリシーの詳細 + **タイプ**: AWS 管理ポリシー + **作成日時**: 2020 年 5 月 27 日 19:29 UTC + **編集日時:** 2024 年 11 月 12 日 19:29 UTC + **ARN**: `arn:aws:iam::aws:policy/AWSThinkboxDeadlineResourceTrackerAdminPolicy` ## ポリシーのバージョン **ポリシーのバージョン:** v8 (デフォルト) ポリシーのデフォルトバージョンは、ポリシーのアクセス許可を定義するバージョンです。ポリシーを持つユーザーまたはロールが AWS リソースへのアクセスをリクエストすると、 はポリシーのデフォルトバージョン AWS をチェックして、リクエストを許可するかどうかを決定します。 ## JSON ポリシードキュメント ``` { "Version" : "2012-10-17", "Statement" : [ { "Sid" : "AWSThinkboxDeadlineResourceTracker1", "Effect" : "Allow", "Action" : [ "application-autoscaling:DeleteScalingPolicy", "application-autoscaling:DeregisterScalableTarget", "application-autoscaling:DescribeScalableTargets", "application-autoscaling:DescribeScalingPolicies", "application-autoscaling:PutScalingPolicy", "application-autoscaling:RegisterScalableTarget" ], "Resource" : [ "*" ] }, { "Sid" : "AWSThinkboxDeadlineResourceTracker2", "Effect" : "Allow", "Action" : [ "cloudformation:ListStacks" ], "Resource" : [ "*" ] }, { "Sid" : "AWSThinkboxDeadlineResourceTracker3", "Effect" : "Allow", "Action" : [ "cloudformation:CreateStack", "cloudformation:DeleteStack", "cloudformation:UpdateStack", "cloudformation:DescribeStacks", "cloudformation:UpdateTerminationProtection", "cloudformation:TagResource", "cloudformation:UntagResource" ], "Resource" : [ "arn:aws:cloudformation:*:*:stack/DeadlineResourceTracker*" ] }, { "Sid" : "AWSThinkboxDeadlineResourceTracker4", "Effect" : "Allow", "Action" : [ "dynamodb:CreateTable", "dynamodb:DeleteTable", "dynamodb:DescribeTable", "dynamodb:ListTagsOfResource", "dynamodb:TagResource", "dynamodb:UntagResource" ], "Resource" : [ "arn:aws:dynamodb:*:*:table/DeadlineEC2ComputeNodeHealth*", "arn:aws:dynamodb:*:*:table/DeadlineEC2ComputeNodeInfo*", "arn:aws:dynamodb:*:*:table/DeadlineFleetHealth*" ] }, { "Sid" : "AWSThinkboxDeadlineResourceTracker5", "Effect" : "Allow", "Action" : [ "dynamodb:BatchWriteItem", "dynamodb:Scan" ], "Resource" : [ "arn:aws:dynamodb:*:*:table/DeadlineFleetHealth*" ] }, { "Sid" : "AWSThinkboxDeadlineResourceTracker6", "Effect" : "Allow", "Action" : [ "events:DeleteRule", "events:DescribeRule", "events:PutRule", "events:PutTargets", "events:RemoveTargets" ], "Resource" : [ "arn:aws:events:*:*:rule/DeadlineResourceTracker*" ] }, { "Sid" : "AWSThinkboxDeadlineResourceTracker7", "Effect" : "Allow", "Action" : [ "iam:GetRole", "iam:ListAttachedRolePolicies" ], "Resource" : [ "arn:aws:iam::*:role/DeadlineResourceTracker*" ] }, { "Sid" : "AWSThinkboxDeadlineResourceTracker8", "Effect" : "Allow", "Action" : [ "iam:GetUser" ], "Resource" : [ "*" ] }, { "Sid" : "AWSThinkboxDeadlineResourceTracker9", "Effect" : "Allow", "Action" : [ "iam:CreateServiceLinkedRole" ], "Resource" : [ "arn:aws:iam::*:role/aws-service-role/*" ], "Condition" : { "StringEquals" : { "iam:AWSServiceName" : [ "dynamodb.application-autoscaling.amazonaws.com" ] } } }, { "Sid" : "AWSThinkboxDeadlineResourceTracker10", "Effect" : "Allow", "Action" : [ "iam:PassRole" ], "Resource" : [ "arn:aws:iam::*:role/DeadlineResourceTrackerAccess*" ], "Condition" : { "StringEquals" : { "iam:PassedToService" : [ "lambda.amazonaws.com" ] } } }, { "Sid" : "AWSThinkboxDeadlineResourceTracker11", "Effect" : "Allow", "Action" : [ "iam:PassRole" ], "Resource" : [ "arn:aws:iam::*:role/aws-service-role/dynamodb.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_DynamoDBTable" ], "Condition" : { "StringEquals" : { "iam:PassedToService" : [ "application-autoscaling.amazonaws.com" ] } } }, { "Sid" : "AWSThinkboxDeadlineResourceTracker12", "Effect" : "Allow", "Action" : [ "lambda:GetEventSourceMapping" ], "Resource" : [ "*" ] }, { "Sid" : "AWSThinkboxDeadlineResourceTracker13", "Effect" : "Allow", "Action" : [ "lambda:CreateEventSourceMapping", "lambda:DeleteEventSourceMapping" ], "Resource" : [ "*" ], "Condition" : { "ArnLike" : { "lambda:FunctionArn" : [ "arn:aws:lambda:*:*:function:DeadlineResourceTracker*" ] } } }, { "Sid" : "AWSThinkboxDeadlineResourceTracker14", "Effect" : "Allow", "Action" : [ "lambda:AddPermission", "lambda:RemovePermission" ], "Resource" : [ "arn:aws:lambda:*:*:function:DeadlineResourceTracker*" ], "Condition" : { "StringLike" : { "lambda:Principal" : "events.amazonaws.com" } } }, { "Sid" : "AWSThinkboxDeadlineResourceTracker15", "Effect" : "Allow", "Action" : [ "lambda:CreateFunction", "lambda:DeleteFunction", "lambda:DeleteFunctionConcurrency", "lambda:GetFunction", "lambda:GetFunctionConfiguration", "lambda:ListTags", "lambda:PutFunctionConcurrency", "lambda:TagResource", "lambda:UntagResource", "lambda:UpdateFunctionCode", "lambda:UpdateFunctionConfiguration" ], "Resource" : [ "arn:aws:lambda:*:*:function:DeadlineResourceTracker*" ] }, { "Sid" : "AWSThinkboxDeadlineResourceTracker16", "Effect" : "Allow", "Action" : [ "s3:GetObject" ], "Resource" : [ "arn:aws:s3:::*/deadline_aws_resource_tracker-*.zip", "arn:aws:s3:::*/DeadlineAWSResourceTrackerTemplate-*.yaml" ] }, { "Sid" : "AWSThinkboxDeadlineResourceTracker17", "Effect" : "Allow", "Action" : [ "sqs:CreateQueue", "sqs:DeleteQueue", "sqs:GetQueueAttributes", "sqs:ListQueueTags", "sqs:TagQueue", "sqs:UntagQueue" ], "Resource" : [ "arn:aws:sqs:*:*:DeadlineAWSComputeNodeState*", "arn:aws:sqs:*:*:DeadlineResourceTracker*" ] } ] } ``` ## 詳細情報 + [IAM Identity Center で AWS マネージドポリシーを使用してアクセス許可セットを作成する](https://docs.aws.amazon.com/singlesignon/latest/userguide/howtocreatepermissionset.html) + [IAM ID のアクセス許可の追加および削除](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_manage-attach-detach.html) + [IAM ポリシーのバージョニングについて理解する](https://docs.aws.amazon.com//IAM/latest/UserGuide/access_policies_managed-versioning.html) + [AWS 管理ポリシーの使用を開始し、最小特権のアクセス許可に移行する](https://docs.aws.amazon.com//IAM/latest/UserGuide/best-practices.html#bp-use-aws-defined-policies)