Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Save 0xdabbad00/b1ff2b09a1d04a401fa65ace48bd41e3 to your computer and use it in GitHub Desktop.
Save 0xdabbad00/b1ff2b09a1d04a401fa65ace48bd41e3 to your computer and use it in GitHub Desktop.
Copy of AWSExposedCredentialPolicy_DO_NOT_REMOVE sent to me by someone
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Deny",
"Action": [
"iam:UpdateAccessKey",
"ec2:RequestSpotInstances",
"organizations:InviteAccountToOrganization",
"lightsail:DownloadDefaultKeyPair",
"iam:UpdateUser",
"iam:PutUserPermissionsBoundary",
"lambda:CreateFunction",
"iam:PutGroupPolicy",
"organizations:CreateOrganization",
"lightsail:GetInstanceAccessDetails",
"iam:PutUserPolicy",
"ec2:RunInstances",
"iam:CreateLoginProfile",
"iam:ChangePassword",
"iam:DeleteUserPolicy",
"iam:UpdateAccountPasswordPolicy",
"iam:CreateRole",
"ec2:StartInstances",
"lightsail:Create*",
"lightsail:Delete*",
"iam:CreateUser",
"iam:AttachRolePolicy",
"iam:AttachGroupPolicy",
"lightsail:Update*",
"iam:CreateInstanceProfile",
"iam:AttachUserPolicy",
"iam:CreateAccessKey",
"iam:DetachUserPolicy",
"organizations:CreateAccount",
"lightsail:Start*"
],
"Resource": [
"*"
]
}
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment