Adding in all permissions on Quicksight to steamhaus_apn_policy.

a2b30f66 · Felix Edelsten · 69562a9c · a2b30f66
Commit a2b30f66 authored Sep 03, 2019 by Felix Edelsten
Hide whitespace changes
Inline Side-by-side

Showing with 82 additions and 75 deletions

steamhaus_apn_policy.json steamhaus_apn_policy.json +82 -75

No files found.
--- a/steamhaus_apn_policy.json
+++ b/steamhaus_apn_policy.json
@@ -2,99 +2,106 @@
    "Version": "2012-10-17",
    "Statement": [
        {
+            "Sid": "VisualEditor0",
+            "Effect": "Allow",
+            "Action": "*",
+            "Resource": "*"
+        },
+        {
+            "Sid": "VisualEditor1",
+            "Effect": "Deny",
            "Action": [
-                "iam:AddRoleToInstanceProfile",
-                "iam:AddClientIDToOpenIDConnectProvider",
-                "iam:AttachGroupPolicy",
+                "iam:UpdateAssumeRolePolicy",
+                "iam:GetPolicyVersion",
+                "iam:GetAccountPasswordPolicy",
+                "iam:DeleteGroup",
+                "iam:GenerateServiceLastAccessedDetails",
+                "iam:UpdateOpenIDConnectProviderThumbprint",
+                "iam:RemoveRoleFromInstanceProfile",
+                "iam:UpdateGroup",
+                "iam:CreateRole",
                "iam:AttachRolePolicy",
-                "iam:AttachUserPolicy",
-                "iam:CreateAccountAlias",
-                "iam:CreateGroup",
-                "iam:CreateInstanceProfile",
+                "iam:PutRolePolicy",
+                "iam:AddRoleToInstanceProfile",
                "iam:CreateLoginProfile",
-                "iam:CreateOpenIDConnectProvider",
-                "iam:CreatePolicy",
-                "iam:CreatePolicyVersion",
-                "iam:CreateRole",
-                "iam:CreateSAMLProvider",
-                "iam:CreateUser",
-                "iam:DeleteAccountAlias",
-                "iam:DeleteAccountPasswordPolicy",
-                "iam:DeleteGroup",
-                "iam:DeleteGroupPolicy",
-                "iam:DeleteInstanceProfile",
-                "iam:DeleteLoginProfile",
-                "iam:DeleteOpenIDConnectProvider",
-                "iam:DeletePolicy",
-                "iam:DeletePolicyVersion",
-                "iam:DeleteRole",
-                "iam:DeleteRolePolicy",
-                "iam:DeleteSAMLProvider",
-                "iam:DeleteSSHPublicKey",
+                "iam:SimulateCustomPolicy",
+                "iam:DetachRolePolicy",
+                "iam:SimulatePrincipalPolicy",
+                "iam:CreateAccountAlias",
                "iam:DeleteServerCertificate",
-                "iam:DeleteSigningCertificate",
-                "iam:DeleteUser",
-                "iam:DeleteUserPolicy",
-                "iam:DeleteVirtualMFADevice",
+                "iam:UploadSSHPublicKey",
                "iam:DetachGroupPolicy",
-                "iam:DetachRolePolicy",
                "iam:DetachUserPolicy",
-                "iam:GenerateCredentialReport",
-                "iam:GenerateServiceLastAccessedDetails",
-                "iam:GetAccessKeyLastUsed",
+                "iam:DeleteOpenIDConnectProvider",
                "iam:GetAccountAuthorizationDetails",
-                "iam:GetAccountPasswordPolicy",
-                "iam:GetAccountSummary",
-                "iam:GetContextKeysForCustomPolicy",
-                "iam:GetContextKeysForPrincipalPolicy",
                "iam:GetCredentialReport",
-                "iam:GetInstanceProfile",
-                "iam:GetLoginProfile",
-                "iam:GetOpenIDConnectProvider",
-                "iam:GetPolicy",
-                "iam:GetPolicyVersion",
+                "iam:PutGroupPolicy",
+                "iam:UpdateLoginProfile",
+                "iam:GetServerCertificate",
                "iam:GetRole",
+                "iam:CreateGroup",
+                "iam:GetPolicy",
+                "iam:RemoveClientIDFromOpenIDConnectProvider",
+                "iam:UpdateUser",
+                "iam:GetAccessKeyLastUsed",
+                "iam:DeleteUserPolicy",
+                "iam:AttachUserPolicy",
+                "iam:DeleteRole",
+                "iam:UpdateSSHPublicKey",
+                "iam:UpdateServerCertificate",
+                "iam:DeleteSigningCertificate",
+                "iam:UpdateAccountPasswordPolicy",
+                "iam:GetUserPolicy",
+                "iam:GetOpenIDConnectProvider",
                "iam:GetRolePolicy",
-                "iam:GetSAMLProvider",
-                "iam:GetSSHPublicKey",
-                "iam:GetServerCertificate",
-                "iam:GetServiceLastAccessedDetails",
+                "iam:GetAccountSummary",
+                "iam:CreateInstanceProfile",
+                "iam:GenerateCredentialReport",
                "iam:GetServiceLastAccessedDetailsWithEntities",
-                "iam:GetUser",
-                "iam:GetUserPolicy",
+                "iam:DeletePolicy",
+                "iam:DeleteSSHPublicKey",
+                "iam:CreateSAMLProvider",
+                "iam:GetServiceLastAccessedDetails",
+                "iam:CreateUser",
+                "iam:GetContextKeysForPrincipalPolicy",
                "iam:PassRole",
-                "iam:PutGroupPolicy",
-                "iam:PutRolePolicy",
-                "iam:PutUserPolicy",
-                "iam:RemoveClientIDFromOpenIDConnectProvider",
-                "iam:RemoveRoleFromInstanceProfile",
                "iam:RemoveUserFromGroup",
-                "iam:SetDefaultPolicyVersion",
-                "iam:SimulateCustomPolicy",
-                "iam:SimulatePrincipalPolicy",
-                "iam:UpdateAccountPasswordPolicy",
-                "iam:UpdateAssumeRolePolicy",
-                "iam:UpdateGroup",
-                "iam:UpdateLoginProfile",
-                "iam:UpdateOpenIDConnectProviderThumbprint",
+                "iam:DeleteRolePolicy",
+                "iam:DeleteAccountAlias",
+                "iam:CreatePolicyVersion",
                "iam:UpdateSAMLProvider",
-                "iam:UpdateSSHPublicKey",
-                "iam:UpdateServerCertificate",
-                "iam:UpdateSigningCertificate",
-                "iam:UpdateUser",
-                "iam:UploadSSHPublicKey",
-                "iam:UploadServerCertificate",
+                "iam:GetSAMLProvider",
+                "iam:DeleteLoginProfile",
+                "iam:DeleteInstanceProfile",
                "iam:UploadSigningCertificate",
-                "support:*",
-                "aws-portal:*"
+                "iam:DeleteAccountPasswordPolicy",
+                "iam:GetInstanceProfile",
+                "iam:GetSSHPublicKey",
+                "iam:DeleteUser",
+                "iam:CreateOpenIDConnectProvider",
+                "iam:UploadServerCertificate",
+                "iam:CreatePolicy",
+                "iam:GetContextKeysForCustomPolicy",
+                "iam:DeleteVirtualMFADevice",
+                "iam:AttachGroupPolicy",
+                "iam:PutUserPolicy",
+                "aws-portal:*",
+                "iam:GetUser",
+                "iam:UpdateSigningCertificate",
+                "iam:DeleteGroupPolicy",
+                "iam:AddClientIDToOpenIDConnectProvider",
+                "iam:GetLoginProfile",
+                "iam:DeletePolicyVersion",
+                "iam:SetDefaultPolicyVersion",
+                "iam:DeleteSAMLProvider"
            ],
-            "Effect": "Deny",
            "Resource": "*"
        },
        {
-                "Effect": "Allow",
-                "Action": "*",
-                "Resource": "*"
+            "Sid": "VisualEditor2",
+            "Effect": "Deny",
+            "Action": "support:*",
+            "Resource": "*"
        }
    ]
-}
\ No newline at end of file
+}