nakada0907/daisuke-iam-infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: Expand CloudFormation and ELB permissions for infrastructure management

Browse source 
- Add CloudFormation resource scanning permissions (DescribeResourceScan, ListResourceScans, StartResourceScan)
- Add CloudFormation template generation permissions (CreateGeneratedTemplate, UpdateGeneratedTemplate)
- Add S3 bucket encryption and public access block configuration permissions
- Expand ELB target group management (create, delete, tag, remove tags)
- Add ELB listener and rule management permissions (create, delete, modify)
- Update commit message generator skill documentation with format guidelines
This commit is contained in:
Daisuke Nakahara 2026-01-10 19:46:55 +09:00
parent 093489830d
commit b565fb3c4b
4 changed files with 72 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

23
policies/cloudformation-write-policy.yaml
View file

@ -29,6 +29,29 @@ Resources:
- cloudformation:ImportStacksToStackSet
- cloudformation:ContinueUpdateRollback
Resource: "*"
- Sid: ResourceScanningOperations
Effect: Allow
Action:
- cloudformation:DescribeResourceScan
- cloudformation:GetResource
- cloudformation:ListResources
- cloudformation:ListResourceScanRelatedResources
- cloudformation:ListResourceScanResources
- cloudformation:ListResourceScans
- cloudformation:ListTypes
- cloudformation:StartResourceScan
Resource: "*"
- Sid: TemplateGeneration
Effect: Allow
Action:
- cloudformation:CreateGeneratedTemplate
- cloudformation:DeleteGeneratedTemplate
- cloudformation:DescribeGeneratedTemplate
- cloudformation:GetResource
- cloudformation:GetGeneratedTemplate
- cloudformation:ListGeneratedTemplates
- cloudformation:UpdateGeneratedTemplate
Resource: "*"
- Effect: Allow
Action: