AWSCodeCommitFullAccess - AWS 托管策略

本文属于机器翻译版本。若本译文内容与英语原文存在差异,则一律以英文原文为准。

AWSCodeCommitFullAccess

描述:提供通过 AWS Management Console 访问 AWS CodeCommit 的完全访问权限。

AWSCodeCommitFullAccess 是一项 AWS 托管式策略

使用此策略

您可以将 AWSCodeCommitFullAccess 附加到您的用户、组和角色。

策略详细信息

  • 类型:AWS 托管策略

  • 创建时间:2015 年 7 月 9 日 17:02 UTC

  • 编辑时间:2023 年 7 月 17 日 21:50 UTC

  • ARN: arn:aws:iam::aws:policy/AWSCodeCommitFullAccess

策略版本

策略版本:v10(默认)

此策略的默认版本是定义策略权限的版本。当使用该策略的用户或角色请求访问 AWS 资源时,AWS 会检查策略的默认版本以确定是否允许该请求。

JSON 策略文档

{ "Version" : "2012-10-17", "Statement" : [ { "Effect" : "Allow", "Action" : [ "codecommit:*" ], "Resource" : "*" }, { "Sid" : "CloudWatchEventsCodeCommitRulesAccess", "Effect" : "Allow", "Action" : [ "events:DeleteRule", "events:DescribeRule", "events:DisableRule", "events:EnableRule", "events:PutRule", "events:PutTargets", "events:RemoveTargets", "events:ListTargetsByRule" ], "Resource" : "arn:aws:events:*:*:rule/codecommit*" }, { "Sid" : "SNSTopicAndSubscriptionAccess", "Effect" : "Allow", "Action" : [ "sns:CreateTopic", "sns:DeleteTopic", "sns:Subscribe", "sns:Unsubscribe", "sns:SetTopicAttributes" ], "Resource" : "arn:aws:sns:*:*:codecommit*" }, { "Sid" : "SNSTopicAndSubscriptionReadAccess", "Effect" : "Allow", "Action" : [ "sns:ListTopics", "sns:ListSubscriptionsByTopic", "sns:GetTopicAttributes" ], "Resource" : "*" }, { "Sid" : "LambdaReadOnlyListAccess", "Effect" : "Allow", "Action" : [ "lambda:ListFunctions" ], "Resource" : "*" }, { "Sid" : "IAMReadOnlyListAccess", "Effect" : "Allow", "Action" : [ "iam:ListUsers" ], "Resource" : "*" }, { "Sid" : "IAMReadOnlyConsoleAccess", "Effect" : "Allow", "Action" : [ "iam:ListAccessKeys", "iam:ListSSHPublicKeys", "iam:ListServiceSpecificCredentials" ], "Resource" : "arn:aws:iam::*:user/${aws:username}" }, { "Sid" : "IAMUserSSHKeys", "Effect" : "Allow", "Action" : [ "iam:DeleteSSHPublicKey", "iam:GetSSHPublicKey", "iam:ListSSHPublicKeys", "iam:UpdateSSHPublicKey", "iam:UploadSSHPublicKey" ], "Resource" : "arn:aws:iam::*:user/${aws:username}" }, { "Sid" : "IAMSelfManageServiceSpecificCredentials", "Effect" : "Allow", "Action" : [ "iam:CreateServiceSpecificCredential", "iam:UpdateServiceSpecificCredential", "iam:DeleteServiceSpecificCredential", "iam:ResetServiceSpecificCredential" ], "Resource" : "arn:aws:iam::*:user/${aws:username}" }, { "Sid" : "CodeStarNotificationsReadWriteAccess", "Effect" : "Allow", "Action" : [ "codestar-notifications:CreateNotificationRule", "codestar-notifications:DescribeNotificationRule", "codestar-notifications:UpdateNotificationRule", "codestar-notifications:DeleteNotificationRule", "codestar-notifications:Subscribe", "codestar-notifications:Unsubscribe" ], "Resource" : "*", "Condition" : { "StringLike" : { "codestar-notifications:NotificationsForResource" : "arn:aws:codecommit:*" } } }, { "Sid" : "CodeStarNotificationsListAccess", "Effect" : "Allow", "Action" : [ "codestar-notifications:ListNotificationRules", "codestar-notifications:ListTargets", "codestar-notifications:ListTagsforResource", "codestar-notifications:ListEventTypes" ], "Resource" : "*" }, { "Sid" : "CodeStarNotificationsSNSTopicCreateAccess", "Effect" : "Allow", "Action" : [ "sns:CreateTopic", "sns:SetTopicAttributes" ], "Resource" : "arn:aws:sns:*:*:codestar-notifications*" }, { "Sid" : "AmazonCodeGuruReviewerFullAccess", "Effect" : "Allow", "Action" : [ "codeguru-reviewer:AssociateRepository", "codeguru-reviewer:DescribeRepositoryAssociation", "codeguru-reviewer:ListRepositoryAssociations", "codeguru-reviewer:DisassociateRepository", "codeguru-reviewer:DescribeCodeReview", "codeguru-reviewer:ListCodeReviews" ], "Resource" : "*" }, { "Sid" : "AmazonCodeGuruReviewerSLRCreation", "Action" : "iam:CreateServiceLinkedRole", "Effect" : "Allow", "Resource" : "arn:aws:iam::*:role/aws-service-role/codeguru-reviewer.amazonaws.com/AWSServiceRoleForAmazonCodeGuruReviewer", "Condition" : { "StringLike" : { "iam:AWSServiceName" : "codeguru-reviewer.amazonaws.com" } } }, { "Sid" : "CloudWatchEventsManagedRules", "Effect" : "Allow", "Action" : [ "events:PutRule", "events:PutTargets", "events:DeleteRule", "events:RemoveTargets" ], "Resource" : "*", "Condition" : { "StringEquals" : { "events:ManagedBy" : "codeguru-reviewer.amazonaws.com" } } }, { "Sid" : "CodeStarNotificationsChatbotAccess", "Effect" : "Allow", "Action" : [ "chatbot:DescribeSlackChannelConfigurations", "chatbot:ListMicrosoftTeamsChannelConfigurations" ], "Resource" : "*" }, { "Sid" : "CodeStarConnectionsReadOnlyAccess", "Effect" : "Allow", "Action" : [ "codestar-connections:ListConnections", "codestar-connections:GetConnection" ], "Resource" : "arn:aws:codestar-connections:*:*:connection/*" } ] }

了解更多信息