AWS Managed Policies. A maze of twisty passages all alike. Explore them here. If it looks like a button, it's clickable. Always up to date.

AWSCodeBuildReadOnlyAccess details (in AWS console)

Policy Name

AWSCodeBuildReadOnlyAccess

Description

Provides read only access to AWS CodeBuild via the AWS Management Console. Also attach AmazonS3ReadOnlyAccess to provide access to download build artifacts.

ARN

arn:aws:iam::aws:policy/AWSCodeBuildReadOnlyAccess

Path

PolicyId

ANPAJIZZWN6557F5HVP2K

AttachmentCount

codebuild codecommit cloudwatch events logs codestar-connections codestar-notifications

[
  {
    "Effect": "Allow",
    "Action": [
      "codebuild:BatchGet*",
      "codebuild:GetResourcePolicy",
      "codebuild:List*",
      "codebuild:DescribeTestCases",
      "codebuild:DescribeCodeCoverages",
      "codecommit:GetBranch",
      "codecommit:GetCommit",
      "codecommit:GetRepository",
      "cloudwatch:GetMetricStatistics",
      "events:DescribeRule",
      "events:ListTargetsByRule",
      "events:ListRuleNamesByTarget",
      "logs:GetLogEvents"
    ],
    "Resource": [
      "*"
    ]
  },
  {
    "Effect": "Allow",
    "Action": [
      "codestar-connections:ListConnections",
      "codestar-connections:GetConnection"
    ],
    "Resource": [
      "arn:aws:codestar-connections:*:*:connection/*"
    ]
  },
  {
    "Effect": "Allow",
    "Action": [
      "codestar-notifications:DescribeNotificationRule"
    ],
    "Resource": [
      "*"
    ]
  },
  {
    "Effect": "Allow",
    "Action": [
      "codestar-notifications:ListNotificationRules",
      "codestar-notifications:ListEventTypes",
      "codestar-notifications:ListTargets"
    ],
    "Resource": [
      "*"
    ]
  }
]