翻訳は機械翻訳により提供されています。提供された翻訳内容と英語版の間で齟齬、不一致または矛盾がある場合、英語版が優先します。
AWSTransformInfrastructureExecutorAccessBatch
説明: ソースコードのアップロード、結果の取得、 AWS バッチジョブのステータスのモニタリング、ログの読み取り、変換スケジュールの管理など、バッチを使用して評価/変換を実行するために AWS Transform Continuous Modernization CLI/エージェントを実行するために必要なアクセス許可をデベロッパー実行ロールに付与します。
AWSTransformInfrastructureExecutorAccessBatch は AWS マネージドポリシーです。
このポリシーを使用すると
ユーザー、グループおよびロールに AWSTransformInfrastructureExecutorAccessBatch をアタッチできます。
ポリシーの詳細
-
タイプ: AWS 管理ポリシー
-
作成日時: 2026 年 7 月 20 日 20:12 UTC
-
編集日時: 2026 年 7 月 28 日 15:42 UTC
-
ARN:
arn:aws:iam::aws:policy/AWSTransformInfrastructureExecutorAccessBatch
ポリシーのバージョン
ポリシーのバージョン: v2 (デフォルト)
ポリシーのデフォルトバージョンは、ポリシーのアクセス許可を定義するバージョンです。ポリシーを持つユーザーまたはロールが AWS リソースへのアクセスをリクエストすると、 はポリシーのデフォルトバージョン AWS をチェックして、リクエストを許可するかどうかを決定します。
JSON ポリシードキュメント
{ "Version" : "2012-10-17", "Statement" : [ { "Sid" : "LambdaInvokeATXFunctions", "Effect" : "Allow", "Action" : [ "lambda:InvokeFunction", "lambda:GetFunctionConfiguration" ], "Resource" : [ "arn:aws:lambda:*:*:function:atx-trigger-job-*", "arn:aws:lambda:*:*:function:atx-trigger-batch-jobs-*", "arn:aws:lambda:*:*:function:atx-get-job-status-*", "arn:aws:lambda:*:*:function:atx-get-batch-status-*", "arn:aws:lambda:*:*:function:atx-list-jobs-*", "arn:aws:lambda:*:*:function:atx-list-batches-*" ], "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "S3UploadSourceCode", "Effect" : "Allow", "Action" : [ "s3:PutObject", "s3:GetObject", "s3:ListBucket", "s3:AbortMultipartUpload" ], "Resource" : [ "arn:aws:s3:::atx-source-code-*", "arn:aws:s3:::atx-source-code-*/*" ], "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "S3DownloadResults", "Effect" : "Allow", "Action" : [ "s3:GetObject", "s3:ListBucket" ], "Resource" : [ "arn:aws:s3:::atx-custom-output-*", "arn:aws:s3:::atx-custom-output-*/*", "arn:aws:s3:::atx-ct-output-*", "arn:aws:s3:::atx-ct-output-*/*" ], "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "S3WriteBatchSidecar", "Effect" : "Allow", "Action" : [ "s3:PutObject", "s3:AbortMultipartUpload" ], "Resource" : [ "arn:aws:s3:::atx-custom-output-*/*" ], "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "KMSEncryptDecrypt", "Effect" : "Allow", "Action" : [ "kms:Encrypt", "kms:Decrypt", "kms:GenerateDataKey" ], "Resource" : "arn:aws:kms:*:*:key/*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" }, "ForAnyValue:StringLike" : { "kms:ResourceAliases" : [ "alias/atx-encryption-key", "alias/atx-encryption-key-*" ] } } }, { "Sid" : "CloudWatchReadLogs", "Effect" : "Allow", "Action" : [ "logs:GetLogEvents", "logs:FilterLogEvents", "logs:DescribeLogStreams" ], "Resource" : [ "arn:aws:logs:*:*:log-group:/aws/batch/atx-transform*", "arn:aws:logs:*:*:log-group:/aws/batch/job*", "arn:aws:logs:*:*:log-group:AtxVpc*", "arn:aws:logs:*:*:log-group:/aws/lambda/atx-*" ], "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "CloudWatchDashboard", "Effect" : "Allow", "Action" : [ "cloudwatch:GetDashboard", "cloudwatch:ListDashboards" ], "Resource" : [ "arn:aws:cloudwatch::*:dashboard/ATX-Transform-CLI-Dashboard", "arn:aws:cloudwatch::*:dashboard/ATX-Transform-CLI-Dashboard-*" ], "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "BatchDescribe", "Effect" : "Allow", "Action" : [ "batch:DescribeComputeEnvironments", "batch:DescribeJobQueues", "batch:DescribeJobDefinitions", "batch:DescribeJobs", "batch:ListJobs" ], "Resource" : "*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "CheckInfrastructureStatus", "Effect" : "Allow", "Action" : "cloudformation:DescribeStacks", "Resource" : [ "arn:aws:cloudformation:*:*:stack/AtxInfrastructureStack/*", "arn:aws:cloudformation:*:*:stack/AtxInfrastructureStack-*/*", "arn:aws:cloudformation:*:*:stack/atx-*", "arn:aws:cloudformation:*:*:stack/atx-*/*", "arn:aws:cloudformation:*:*:stack/AtxSecurityAgentStack-*/*" ], "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "SecretsManagerATXSecrets", "Effect" : "Allow", "Action" : [ "secretsmanager:GetSecretValue", "secretsmanager:DescribeSecret" ], "Resource" : "arn:aws:secretsmanager:*:*:secret:atx/*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "SchedulerManage", "Effect" : "Allow", "Action" : [ "scheduler:CreateSchedule", "scheduler:DeleteSchedule", "scheduler:GetSchedule", "scheduler:UpdateSchedule", "scheduler:GetScheduleGroup", "scheduler:ListSchedules" ], "Resource" : [ "arn:aws:scheduler:*:*:schedule-group/atx-ct", "arn:aws:scheduler:*:*:schedule-group/atx-ct-*", "arn:aws:scheduler:*:*:schedule/atx-ct/*", "arn:aws:scheduler:*:*:schedule/atx-ct-*/*" ], "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "PassSchedulerRole", "Effect" : "Allow", "Action" : "iam:PassRole", "Resource" : [ "arn:aws:iam::*:role/AtxSchedulerInvocationRole", "arn:aws:iam::*:role/AtxSchedulerInvocationRole-*" ], "Condition" : { "StringEquals" : { "iam:PassedToService" : "scheduler.amazonaws.com", "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "EC2NetworkDiscovery", "Effect" : "Allow", "Action" : [ "ec2:DescribeVpcs", "ec2:DescribeSubnets", "ec2:DescribeSecurityGroups", "ec2:DescribeRouteTables", "ec2:DescribeNatGateways" ], "Resource" : "*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "IAMReadRoles", "Effect" : "Allow", "Action" : [ "iam:GetRole", "iam:ListAttachedRolePolicies", "iam:GetRolePolicy" ], "Resource" : [ "arn:aws:iam::*:role/ATX*", "arn:aws:iam::*:role/Atx*" ], "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "TagGetATXStacks", "Effect" : "Allow", "Action" : "tag:GetResources", "Resource" : "*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "CFNListStacksForDetect", "Effect" : "Allow", "Action" : "cloudformation:ListStacks", "Resource" : "*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } } ] }
詳細情報
