ansible/hacking/aws_config/testing_policies/security-policy.json

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Action": [
                "iam:GetInstanceProfile",
                "iam:GetPolicy",
                "iam:GetPolicyVersion",
                "iam:GetRole",
                "iam:GetRolePolicy",
                "iam:ListAttachedRolePolicies",
                "iam:ListGroups",
                "iam:ListInstanceProfiles",
                "iam:ListInstanceProfilesForRole",
                "iam:ListPolicies",
                "iam:ListRoles",
                "iam:ListRolePolicies",
                "iam:ListUsers",
                "iam:ListAccountAliases"
            ],
            "Resource": "*",
            "Effect": "Allow",
            "Sid": "AllowReadOnlyIAMUse"
        },
        {
            "Sid": "AllowWAFusage",
            "Action": "waf:*",
            "Effect": "Allow",
            "Resource": "*"
        }
    ]
}
[cloud] Create ECS integration test suite (#33757) Tests for: * ecs_cluster * ecs_service * ecs_service_facts * ecs_taskdefinition * ecs_taskdefinition_facts * Add idempotency testing Test ecs_cluster, ecs_service and ecs_taskdefinition for trivial idempotency. Add FIXMEs to the tests because the latter two fail. Remove unused dependencies 2017-12-15 13:15:01 +00:00			`{`
			`"Version": "2012-10-17",`
			`"Statement": [`
			`{`
			`"Action": [`
sns_topic boto3 port (#39292) * Port sns_topic to boto3 and add tests 2018-08-24 01:04:18 +00:00			`"iam:GetInstanceProfile",`
[cloud] Create ECS integration test suite (#33757) Tests for: * ecs_cluster * ecs_service * ecs_service_facts * ecs_taskdefinition * ecs_taskdefinition_facts * Add idempotency testing Test ecs_cluster, ecs_service and ecs_taskdefinition for trivial idempotency. Add FIXMEs to the tests because the latter two fail. Remove unused dependencies 2017-12-15 13:15:01 +00:00			`"iam:GetPolicy",`
			`"iam:GetPolicyVersion",`
			`"iam:GetRole",`
sns_topic boto3 port (#39292) * Port sns_topic to boto3 and add tests 2018-08-24 01:04:18 +00:00			`"iam:GetRolePolicy",`
[cloud] Create ECS integration test suite (#33757) Tests for: * ecs_cluster * ecs_service * ecs_service_facts * ecs_taskdefinition * ecs_taskdefinition_facts * Add idempotency testing Test ecs_cluster, ecs_service and ecs_taskdefinition for trivial idempotency. Add FIXMEs to the tests because the latter two fail. Remove unused dependencies 2017-12-15 13:15:01 +00:00			`"iam:ListAttachedRolePolicies",`
			`"iam:ListGroups",`
sns_topic boto3 port (#39292) * Port sns_topic to boto3 and add tests 2018-08-24 01:04:18 +00:00			`"iam:ListInstanceProfiles",`
[cloud] Create ECS integration test suite (#33757) Tests for: * ecs_cluster * ecs_service * ecs_service_facts * ecs_taskdefinition * ecs_taskdefinition_facts * Add idempotency testing Test ecs_cluster, ecs_service and ecs_taskdefinition for trivial idempotency. Add FIXMEs to the tests because the latter two fail. Remove unused dependencies 2017-12-15 13:15:01 +00:00			`"iam:ListInstanceProfilesForRole",`
			`"iam:ListPolicies",`
			`"iam:ListRoles",`
			`"iam:ListRolePolicies",`
added account_alias in the response of module aws_caller_facts (#42345) * added account_alias in the response of module aws_caller_facts * added comment to explain list_account_aliases * renamed caller_identity to caller_facts as the content is extended * created changelog * security-policy needs the iam:ListAccountAliases for this module to work * test now checks for the added field account_alias * gracefully handle missing iam:ListAccountAliases permission 2018-08-22 21:21:12 +00:00			`"iam:ListUsers",`
			`"iam:ListAccountAliases"`
[cloud] Create ECS integration test suite (#33757) Tests for: * ecs_cluster * ecs_service * ecs_service_facts * ecs_taskdefinition * ecs_taskdefinition_facts * Add idempotency testing Test ecs_cluster, ecs_service and ecs_taskdefinition for trivial idempotency. Add FIXMEs to the tests because the latter two fail. Remove unused dependencies 2017-12-15 13:15:01 +00:00			`],`
			`"Resource": "*",`
			`"Effect": "Allow",`
			`"Sid": "AllowReadOnlyIAMUse"`
Add new aws_waf_condition module (#33110) 2018-02-01 23:16:27 +00:00			`},`
			`{`
			`"Sid": "AllowWAFusage",`
			`"Action": "waf:*",`
			`"Effect": "Allow",`
			`"Resource": "*"`
[cloud] Create ECS integration test suite (#33757) Tests for: * ecs_cluster * ecs_service * ecs_service_facts * ecs_taskdefinition * ecs_taskdefinition_facts * Add idempotency testing Test ecs_cluster, ecs_service and ecs_taskdefinition for trivial idempotency. Add FIXMEs to the tests because the latter two fail. Remove unused dependencies 2017-12-15 13:15:01 +00:00			`}`
			`]`
			`}`