Skip to content

Instantly share code, notes, and snippets.

@sioquim
Last active October 24, 2023 02:11
Show Gist options
  • Save sioquim/e0a1700d0b63787b6b66e82a8e3e0580 to your computer and use it in GitHub Desktop.
Save sioquim/e0a1700d0b63787b6b66e82a8e3e0580 to your computer and use it in GitHub Desktop.
Serverless Hello World Basic Permissions
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "LambdaPermissions",
"Effect": "Allow",
"Action": [
"lambda:CreateFunction",
"lambda:UpdateFunctionCode",
"lambda:UpdateFunctionConfiguration",
"lambda:ListVersionsByFunction",
"lambda:InvokeFunction",
"lambda:GetFunction",
"lambda:DeleteFunction",
"lambda:Tag*",
"lambda:PublishVersion"
],
"Resource": "*"
},
{
"Sid": "IAMRolePermissions",
"Effect": "Allow",
"Action": [
"iam:CreateRole",
"iam:PutRolePolicy",
"iam:GetRole",
"iam:PassRole"
],
"Resource": "*"
},
{
"Sid": "APIGatewayPermissions",
"Effect": "Allow",
"Action": [
"apigateway:GET",
"apigateway:POST",
"apigateway:PUT",
"apigateway:DELETE",
"apigateway:PATCH",
"apigateway:UpdateRestApiPolicy"
],
"Resource": "*"
},
{
"Sid": "LogsPermissions",
"Effect": "Allow",
"Action": [
"logs:CreateLogGroup",
"logs:CreateLogStream",
"logs:PutLogEvents",
"logs:Describe*",
"logs:Tag*"
],
"Resource": "*"
},
{
"Sid": "CloudFormationPermissions",
"Effect": "Allow",
"Action": [
"cloudformation:CreateStack",
"cloudformation:UpdateStack",
"cloudformation:DeleteStack",
"cloudformation:ValidateTemplate",
"cloudformation:GetTemplate",
"cloudformation:GetTemplateSummary",
"cloudformation:ListStackResources",
"cloudformation:DescribeStackEvents",
"cloudformation:SetStackPolicy",
"cloudformation:GetStackPolicy",
"cloudformation:CreateChangeSet",
"cloudformation:Describe*",
"cloudformation:DeleteChangeSet",
"cloudformation:ExecuteChangeSet",
"cloudformation:SetStackPolicy",
"cloudformation:List*"
],
"Resource": "*"
},
{
"Sid": "S3Permissions",
"Effect": "Allow",
"Action": [
"s3:ListBucket",
"s3:CreateBucket",
"s3:GetBucketLocation",
"s3:GetObject",
"s3:PutObject",
"s3:DeleteObject",
"s3:ListBucketMultipartUploads",
"s3:AbortMultipartUpload",
"s3:ListMultipartUploadParts",
"s3:GetEncryptionConfiguration",
"s3:PutEncryptionConfiguration"
],
"Resource": "*"
}
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment