AWS Managed Policies. A maze of twisty passages all alike. Explore them here. If it looks like a button, it's clickable. Always up to date.

AWSCodeCommitReadOnly details (in AWS console)

Policy Name

AWSCodeCommitReadOnly

Description

Provides read only access to AWS CodeCommit via the AWS Management Console.

ARN

arn:aws:iam::aws:policy/AWSCodeCommitReadOnly

Path

PolicyId

ANPAJACNSXR7Z2VLJW3D6

AttachmentCount

codecommit events sns lambda iam codestar-connections codestar-notifications codeguru-reviewer

[
  {
    "Effect": "Allow",
    "Action": [
      "codecommit:BatchGet*",
      "codecommit:BatchDescribe*",
      "codecommit:Describe*",
      "codecommit:EvaluatePullRequestApprovalRules",
      "codecommit:Get*",
      "codecommit:List*",
      "codecommit:GitPull"
    ],
    "Resource": [
      "*"
    ]
  },
  {
    "Effect": "Allow",
    "Action": [
      "events:DescribeRule",
      "events:ListTargetsByRule"
    ],
    "Resource": [
      "arn:aws:events:*:*:rule/codecommit*"
    ]
  },
  {
    "Effect": "Allow",
    "Action": [
      "sns:ListTopics",
      "sns:ListSubscriptionsByTopic",
      "sns:GetTopicAttributes"
    ],
    "Resource": [
      "*"
    ]
  },
  {
    "Effect": "Allow",
    "Action": [
      "lambda:ListFunctions"
    ],
    "Resource": [
      "*"
    ]
  },
  {
    "Effect": "Allow",
    "Action": [
      "iam:ListUsers"
    ],
    "Resource": [
      "*"
    ]
  },
  {
    "Effect": "Allow",
    "Action": [
      "iam:ListSSHPublicKeys",
      "iam:ListServiceSpecificCredentials",
      "iam:ListAccessKeys",
      "iam:GetSSHPublicKey"
    ],
    "Resource": [
      "arn:aws:iam::*:user/${aws:username}"
    ]
  },
  {
    "Effect": "Allow",
    "Action": [
      "codestar-connections:ListConnections",
      "codestar-connections:GetConnection"
    ],
    "Resource": [
      "arn:aws:codestar-connections:*:*:connection/*"
    ]
  },
  {
    "Effect": "Allow",
    "Action": [
      "codestar-notifications:DescribeNotificationRule"
    ],
    "Resource": [
      "*"
    ]
  },
  {
    "Effect": "Allow",
    "Action": [
      "codestar-notifications:ListNotificationRules",
      "codestar-notifications:ListEventTypes",
      "codestar-notifications:ListTargets"
    ],
    "Resource": [
      "*"
    ]
  },
  {
    "Effect": "Allow",
    "Action": [
      "codeguru-reviewer:DescribeRepositoryAssociation",
      "codeguru-reviewer:ListRepositoryAssociations",
      "codeguru-reviewer:DescribeCodeReview",
      "codeguru-reviewer:ListCodeReviews"
    ],
    "Resource": [
      "*"
    ]
  }
]