kumogata-template 0.0.35 → 0.0.36

Sign up to get free protection for your applications and to get access to all the features.
Files changed (278) hide show
  1. checksums.yaml +5 -5
  2. data/.travis.yml +4 -2
  3. data/Gemfile +1 -1
  4. data/Rakefile +1 -1
  5. data/kumogata-template.gemspec +4 -4
  6. data/lib/kumogata/template/alb.rb +48 -34
  7. data/lib/kumogata/template/api-gateway.rb +262 -0
  8. data/lib/kumogata/template/autoscaling.rb +17 -44
  9. data/lib/kumogata/template/certificate.rb +11 -8
  10. data/lib/kumogata/template/cloudfront.rb +67 -60
  11. data/lib/kumogata/template/cloudwatch.rb +7 -12
  12. data/lib/kumogata/template/codebuild.rb +4 -8
  13. data/lib/kumogata/template/codecommit.rb +2 -6
  14. data/lib/kumogata/template/codedeploy.rb +15 -0
  15. data/lib/kumogata/template/cognito.rb +203 -0
  16. data/lib/kumogata/template/const.rb +109 -47
  17. data/lib/kumogata/template/datapipeline.rb +16 -47
  18. data/lib/kumogata/template/dynamodb.rb +17 -8
  19. data/lib/kumogata/template/ec2.rb +61 -10
  20. data/lib/kumogata/template/ecr.rb +11 -9
  21. data/lib/kumogata/template/ecs.rb +256 -91
  22. data/lib/kumogata/template/elasticbeanstalk.rb +6 -9
  23. data/lib/kumogata/template/elb.rb +9 -24
  24. data/lib/kumogata/template/emr.rb +184 -51
  25. data/lib/kumogata/template/events.rb +22 -10
  26. data/lib/kumogata/template/ext/kumogata.rb +7 -7
  27. data/lib/kumogata/template/helper.rb +189 -130
  28. data/lib/kumogata/template/iam.rb +556 -146
  29. data/lib/kumogata/template/kinesis.rb +282 -0
  30. data/lib/kumogata/template/lambda.rb +43 -2
  31. data/lib/kumogata/template/logs.rb +2 -6
  32. data/lib/kumogata/template/nlb.rb +10 -0
  33. data/lib/kumogata/template/pinpoint.rb +83 -0
  34. data/lib/kumogata/template/rds.rb +52 -0
  35. data/lib/kumogata/template/redshift.rb +15 -6
  36. data/lib/kumogata/template/role.rb +425 -0
  37. data/lib/kumogata/template/s3.rb +120 -80
  38. data/lib/kumogata/template/sns.rb +2 -6
  39. data/lib/kumogata/template/version.rb +1 -1
  40. data/lib/kumogata/template.rb +9 -1
  41. data/template/_template.rb +2 -2
  42. data/template/alb-load-balancer.rb +5 -4
  43. data/template/alb-target-group.rb +8 -9
  44. data/template/api-gateway-account.rb +15 -0
  45. data/template/api-gateway-api-key.rb +22 -0
  46. data/template/api-gateway-authorizer.rb +38 -0
  47. data/template/api-gateway-base-path-mapping.rb +23 -0
  48. data/template/api-gateway-client-certificate.rb +16 -0
  49. data/template/api-gateway-deployment.rb +24 -0
  50. data/template/api-gateway-domain-name.rb +17 -0
  51. data/template/api-gateway-method.rb +71 -0
  52. data/template/api-gateway-model.rb +23 -0
  53. data/template/api-gateway-resource.rb +32 -0
  54. data/template/api-gateway-rest-api.rb +29 -0
  55. data/template/api-gateway-stage.rb +33 -0
  56. data/template/api-gateway-usage-plan-key.rb +19 -0
  57. data/template/api-gateway-usage-plan.rb +24 -0
  58. data/template/autoscaling-group.rb +2 -2
  59. data/template/autoscaling-launch-configuration.rb +7 -4
  60. data/template/autoscaling-scheduled-action.rb +0 -1
  61. data/template/certificate.rb +2 -2
  62. data/template/cloudfront-distribution.rb +4 -0
  63. data/template/cloudfront-origin-access-identity.rb +19 -0
  64. data/template/cloudtrail.rb +6 -4
  65. data/template/cloudwatch-alarm.rb +9 -3
  66. data/template/codebuild-project.rb +3 -3
  67. data/template/codecommit-repository.rb +2 -2
  68. data/template/codedeploy-application.rb +1 -1
  69. data/template/codedeploy-deployment-config.rb +1 -1
  70. data/template/codedeploy-deployment-group.rb +2 -0
  71. data/template/cognito-identity-pool.rb +34 -0
  72. data/template/cognito-identity-role-attachment.rb +22 -0
  73. data/template/cognito-user-pool-client.rb +28 -0
  74. data/template/cognito-user-pool-group.rb +24 -0
  75. data/template/cognito-user-pool-user-to-group-attachment.rb +20 -0
  76. data/template/cognito-user-pool-user.rb +28 -0
  77. data/template/cognito-user-pool.rb +45 -0
  78. data/template/datapipeline-pipeline.rb +4 -4
  79. data/template/dynamodb-table.rb +5 -1
  80. data/template/ec2-eip-association.rb +1 -1
  81. data/template/ec2-instance.rb +4 -1
  82. data/template/ec2-nat-gateway.rb +4 -0
  83. data/template/ec2-route.rb +4 -0
  84. data/template/ec2-security-group-ingress.rb +1 -1
  85. data/template/ec2-security-group.rb +2 -2
  86. data/template/ec2-subnet.rb +8 -4
  87. data/template/ec2-volume.rb +1 -2
  88. data/template/ec2-vpc-cidr-block.rb +4 -2
  89. data/template/ec2-vpc-endpoint.rb +5 -2
  90. data/template/ecr-repository.rb +2 -2
  91. data/template/ecs-cluster.rb +1 -1
  92. data/template/ecs-service.rb +19 -7
  93. data/template/ecs-task-definition.rb +4 -4
  94. data/template/elasticache-cache-cluster.rb +1 -1
  95. data/template/elasticache-parameter-group.rb +1 -1
  96. data/template/elasticache-replication-group.rb +1 -1
  97. data/template/elasticache-subnet-group.rb +1 -1
  98. data/template/elasticbeanstalk-application-version.rb +1 -1
  99. data/template/elasticbeanstalk-application.rb +1 -1
  100. data/template/elasticbeanstalk-configuration-template.rb +1 -1
  101. data/template/elasticbeanstalk-environment.rb +1 -1
  102. data/template/elb-load-balancer.rb +2 -2
  103. data/template/emr-cluster.rb +3 -3
  104. data/template/emr-instance-group-config.rb +4 -2
  105. data/template/emr-security-configuration.rb +17 -0
  106. data/template/emr-step.rb +2 -2
  107. data/template/events-rule.rb +8 -8
  108. data/template/iam-group.rb +2 -2
  109. data/template/iam-instance-profile.rb +2 -2
  110. data/template/iam-managed-policy.rb +1 -1
  111. data/template/iam-policy.rb +1 -1
  112. data/template/iam-role.rb +17 -2
  113. data/template/iam-user.rb +4 -4
  114. data/template/kinesis-firehose-delivery-stream.rb +36 -0
  115. data/template/kinesis-stream.rb +21 -0
  116. data/template/kms-alias.rb +2 -2
  117. data/template/kms-key.rb +1 -1
  118. data/template/lambda-alias.rb +2 -2
  119. data/template/lambda-event-source-mapping.rb +4 -4
  120. data/template/lambda-function.rb +17 -17
  121. data/template/lambda-permission.rb +31 -10
  122. data/template/lambda-version.rb +4 -2
  123. data/template/logs-destination.rb +1 -1
  124. data/template/logs-log-group.rb +1 -1
  125. data/template/logs-log-stream.rb +4 -2
  126. data/template/logs-metric-filter.rb +1 -1
  127. data/template/logs-subscription_filter.rb +1 -1
  128. data/template/mappings-ec2.rb +114 -52
  129. data/template/output-arn.rb +12 -4
  130. data/template/output-certificate.rb +11 -0
  131. data/template/output-distribution.rb +11 -0
  132. data/template/output-domain-name.rb +11 -0
  133. data/template/output-ecr-repository.rb +16 -0
  134. data/template/output-eip.rb +11 -0
  135. data/template/output-lambda-function.rb +6 -0
  136. data/template/output-name.rb +7 -2
  137. data/template/output-origin-access-identity.rb +13 -0
  138. data/template/output-rds-cluster.rb +17 -0
  139. data/template/{output-rds.rb → output-rds-instance.rb} +1 -1
  140. data/template/output-redshift.rb +11 -0
  141. data/template/output-rest-api.rb +11 -0
  142. data/template/output-s3.rb +3 -0
  143. data/template/output-stage.rb +19 -0
  144. data/template/output-subnet.rb +6 -3
  145. data/template/output-trail.rb +14 -0
  146. data/template/output-user-pool-client.rb +14 -0
  147. data/template/output-user-pool.rb +17 -0
  148. data/template/output-vpc.rb +13 -3
  149. data/template/output.rb +3 -2
  150. data/template/parameter-ec2.rb +10 -4
  151. data/template/parameter-elasticache.rb +1 -1
  152. data/template/parameter-rds.rb +51 -4
  153. data/template/parameter-redshift.rb +31 -1
  154. data/template/parameter.rb +87 -7
  155. data/template/rds-db-cluster-parameter-group.rb +18 -4
  156. data/template/rds-db-cluster.rb +19 -7
  157. data/template/rds-db-instance.rb +55 -131
  158. data/template/rds-db-parameter-group.rb +29 -3
  159. data/template/rds-db-subnet-group.rb +1 -1
  160. data/template/rds-event-subscription.rb +2 -4
  161. data/template/rds-option-group.rb +28 -5
  162. data/template/redshift-cluster-parameter-group.rb +3 -1
  163. data/template/redshift-cluster-security-group.rb +17 -0
  164. data/template/redshift-cluster-subnet-group.rb +3 -1
  165. data/template/redshift-cluster.rb +15 -12
  166. data/template/s3-bucket.rb +10 -5
  167. data/template/sns-topic.rb +2 -2
  168. data/template/sqs-queue.rb +1 -1
  169. data/test/abstract_unit.rb +2 -9
  170. data/test/cloudfront_test.rb +57 -28
  171. data/test/codedeploy_test.rb +21 -0
  172. data/test/datapipeline_test.rb +0 -22
  173. data/test/ec2_test.rb +12 -52
  174. data/test/ecs_test.rb +30 -26
  175. data/test/emr_test.rb +101 -20
  176. data/test/events_test.rb +47 -0
  177. data/test/helper_test.rb +251 -281
  178. data/test/iam_test.rb +572 -57
  179. data/test/lambda_test.rb +1 -1
  180. data/test/s3_test.rb +49 -14
  181. data/test/template/alb-load-balancer_test.rb +4 -5
  182. data/test/template/alb-target-group_test.rb +1 -3
  183. data/test/template/api-gateway-account_test.rb +26 -0
  184. data/test/template/api-gateway-api-key_test.rb +33 -0
  185. data/test/template/api-gateway-authorizer_test.rb +62 -0
  186. data/test/template/api-gateway-base-path-mapping_test.rb +27 -0
  187. data/test/template/api-gateway-client-certificate_test.rb +21 -0
  188. data/test/template/api-gateway-deployment_test.rb +27 -0
  189. data/test/template/api-gateway-domain-name_test.rb +26 -0
  190. data/test/template/api-gateway-method_test.rb +29 -0
  191. data/test/template/api-gateway-model_test.rb +37 -0
  192. data/test/template/api-gateway-resource_test.rb +82 -0
  193. data/test/template/api-gateway-rest-api_test.rb +33 -0
  194. data/test/template/api-gateway-stage_test.rb +39 -0
  195. data/test/template/api-gateway-usage-plan-key_test.rb +25 -0
  196. data/test/template/api-gateway-usage-plan_test.rb +42 -0
  197. data/test/template/cloudfront-distribution_test.rb +41 -3
  198. data/test/template/cloudtrail_test.rb +13 -5
  199. data/test/template/cloudwatch-alarm_test.rb +14 -2
  200. data/test/template/codebuild-project_test.rb +2 -11
  201. data/test/template/codecommit-repository_test.rb +12 -1
  202. data/test/template/cognito-identity-pool_test.rb +32 -0
  203. data/test/template/cognito-identity-role-attachment_test.rb +38 -0
  204. data/test/template/cognito-user-pool-client_test.rb +36 -0
  205. data/test/template/cognito-user-pool-group_test.rb +36 -0
  206. data/test/template/cognito-user-pool-user-to-group-attachment_test.rb +29 -0
  207. data/test/template/cognito-user-pool-user_test.rb +38 -0
  208. data/test/template/cognito-user-pool_test.rb +99 -0
  209. data/test/template/datapipeline-pipeline_test.rb +45 -6
  210. data/test/template/dynamodb-table_test.rb +19 -1
  211. data/test/template/ec2-instance_test.rb +9 -1
  212. data/test/template/ec2-nat-gateway_test.rb +29 -1
  213. data/test/template/ec2-security-group-egress_test.rb +1 -0
  214. data/test/template/ec2-security-group-ingress_test.rb +1 -0
  215. data/test/template/ec2-security-group_test.rb +11 -1
  216. data/test/template/ec2-spot-fleet_test.rb +1 -1
  217. data/test/template/ec2-subnet_test.rb +62 -1
  218. data/test/template/ec2-vpc-cidr-block_test.rb +1 -1
  219. data/test/template/ec2-vpc-endpoint_test.rb +56 -0
  220. data/test/template/ecr-repository_test.rb +63 -11
  221. data/test/template/ecs-service_test.rb +13 -2
  222. data/test/template/ecs-task-definition_test.rb +86 -13
  223. data/test/template/elasticache-cache-cluster_test.rb +4 -6
  224. data/test/template/elasticache-replication-group_test.rb +1 -1
  225. data/test/template/elasticbeanstalk-application-version_test.rb +1 -0
  226. data/test/template/elasticbeanstalk-application_test.rb +2 -1
  227. data/test/template/elasticbeanstalk-configuration-template_test.rb +2 -1
  228. data/test/template/elasticbeanstalk-template_test.rb +1 -0
  229. data/test/template/elb-load-balancer_test.rb +1 -3
  230. data/test/template/emr-cluster_test.rb +2 -14
  231. data/test/template/emr-instance-group-config_test.rb +2 -4
  232. data/test/template/emr-security-configuration_test.rb +34 -0
  233. data/test/template/emr-step_test.rb +2 -6
  234. data/test/template/events-rule_test.rb +3 -3
  235. data/test/template/iam-group_test.rb +11 -1
  236. data/test/template/iam-instance-profile_test.rb +11 -1
  237. data/test/template/iam-managed-policy_test.rb +1 -0
  238. data/test/template/iam-policy_test.rb +1 -3
  239. data/test/template/iam-role_test.rb +12 -2
  240. data/test/template/iam-user_test.rb +11 -17
  241. data/test/template/kinesis-firehorse-delivery-stream_test.rb +68 -0
  242. data/test/template/kinesis-stream_test.rb +61 -0
  243. data/test/template/kms-key_test.rb +1 -0
  244. data/test/template/lambda-alias_test.rb +2 -3
  245. data/test/template/lambda-event-source-mapping_test.rb +1 -1
  246. data/test/template/lambda-function_test.rb +20 -32
  247. data/test/template/lambda-permission_test.rb +7 -4
  248. data/test/template/lambda-version_test.rb +5 -2
  249. data/test/template/logs-log-group_test.rb +1 -3
  250. data/test/template/logs-log-stream_test.rb +2 -6
  251. data/test/template/logs-metric-filter_test.rb +1 -3
  252. data/test/template/logs-subscription-filter_test.rb +1 -3
  253. data/test/template/mappings-ec2_test.rb +10 -3
  254. data/test/template/output-domain-name_test.rb +30 -0
  255. data/test/template/output-name_test.rb +9 -0
  256. data/test/template/{output-rds_test.rb → output-rds-instance_test.rb} +2 -2
  257. data/test/template/output-rest-api_test.rb +30 -0
  258. data/test/template/output-s3_test.rb +9 -0
  259. data/test/template/output-stage_test.rb +43 -0
  260. data/test/template/output-user-pool-client_test.rb +39 -0
  261. data/test/template/output-user-pool_test.rb +48 -0
  262. data/test/template/output_test.rb +3 -1
  263. data/test/template/parameter-ec2_test.rb +22 -24
  264. data/test/template/parameter-elasticache_test.rb +2 -1
  265. data/test/template/parameter-rds_test.rb +32 -3
  266. data/test/template/parameter-redshift_test.rb +31 -2
  267. data/test/template/parameter_test.rb +37 -4
  268. data/test/template/rds-db-cluster-parameter-group_test.rb +1 -1
  269. data/test/template/rds-db-cluster_test.rb +4 -20
  270. data/test/template/rds-db-instance_test.rb +3 -373
  271. data/test/template/rds-db-parameter-group_test.rb +1 -1
  272. data/test/template/rds-option-group_test.rb +2 -2
  273. data/test/template/redshift-cluster-parameter-group_test.rb +28 -0
  274. data/test/template/redshift-cluster-security-group_test.rb +49 -0
  275. data/test/template/redshift-cluster-subnet-group_test.rb +28 -0
  276. data/test/template/redshift-cluster_test.rb +33 -5
  277. data/test/template/s3-bucket_test.rb +6 -20
  278. metadata +130 -22
data/lib/kumogata/template/role.rb ADDED
@@ -0,0 +1,425 @@
1
+ #
2
+ # AWS IAM Roles
3
+ #
4
+
5
+ COGNITO_AUTH_ROLE =
6
+ [
7
+ { service: "mobileanalytics", action: "push events" },
8
+ { services: %w( cognito-sync cognito-identity ) },
9
+ ]
10
+
11
+ COGNITO_UNAUTH_ROLE =
12
+ [
13
+ { service: "mobileanalytics", action: "put events" },
14
+ { service: "cognito-sync" },
15
+ ]
16
+
17
+ API_GATEWAY_CLOUDWATCH_LOGS =
18
+ [
19
+ {
20
+ service: "logs",
21
+ actions: [
22
+ "create log group", "create log stream",
23
+ "describe log grops", "describe log streams",
24
+ "get log evetns", "put log events", "filter log events",
25
+ ],
26
+ resource: "*",
27
+ },
28
+ ]
29
+
30
+ PINPOINT_ADMIN_ROLE =
31
+ [
32
+ { services: %w( mobiletargeting mobileanalytics ) },
33
+ { service: "s3", action: "list all my buckets" },
34
+ {
35
+ service: "iam",
36
+ actions: [
37
+ "get policy",
38
+ "get policy version",
39
+ "list roles",
40
+ "list attached role policies",
41
+ "pass role",
42
+ ],
43
+ },
44
+ {
45
+ service: "kinesis",
46
+ actions: [
47
+ "describe stream",
48
+ "list streams",
49
+ "put records",
50
+ ],
51
+ },
52
+ {
53
+ service: "firehose",
54
+ actions: [
55
+ "describe delivery stream",
56
+ "list delivery streams",
57
+ "put record batch",
58
+ ],
59
+ },
60
+ ]
61
+
62
+ ECS_INSTANCE_ROLE =
63
+ [
64
+ {
65
+ service: "ecs",
66
+ actions: [
67
+ "create cluster", "deregister container instance",
68
+ "discover poll endpoint", "poll",
69
+ "register container instance",
70
+ "start telemetry session",
71
+ "update container instances state",
72
+ "submit*",
73
+ ]
74
+ },
75
+ {
76
+ service: "ecr",
77
+ actions: [
78
+ "get authorization token",
79
+ "batch check layer availability",
80
+ "get download url for layer",
81
+ "batch get image",
82
+ ],
83
+
84
+ },
85
+ {
86
+ service: "logs",
87
+ actions: [
88
+ "create log group",
89
+ "create log stream",
90
+ "describe log groups",
91
+ "describe log streams",
92
+ "put log events",
93
+ ],
94
+ resource: "*",
95
+ },
96
+ ]
97
+
98
+ ECS_SERVICE_ROLE =
99
+ [
100
+ {
101
+ service: "ec2",
102
+ actions: [
103
+ "authorize security group ingress",
104
+ "describe*",
105
+ ],
106
+ },
107
+ {
108
+ service: "elasticloadbalancing",
109
+ actions: [
110
+ "deregister instances from load balancer",
111
+ "deregister targets",
112
+ "describe*",
113
+ "register instances with load balancer",
114
+ "register targets",
115
+ ],
116
+ },
117
+ ]
118
+
119
+ SSM_INSTANCE_ROLE =
120
+ [
121
+ {
122
+ service: "ssm",
123
+ actions: [
124
+ "describe instance information",
125
+ "describe association",
126
+ "list associations",
127
+ "get document",
128
+ "get parameters",
129
+ "list instance associations",
130
+ "update association status",
131
+ "update instance information",
132
+ ],
133
+ },
134
+ {
135
+ service: "ec2messages",
136
+ actions: [
137
+ "acknowledge message",
138
+ "delete message",
139
+ "fail message",
140
+ "get endpoint",
141
+ "get messages",
142
+ "send reply",
143
+ ],
144
+ },
145
+ {
146
+ service: "ds",
147
+ actions: [
148
+ "create computer",
149
+ "describe directories",
150
+ ],
151
+ },
152
+ {
153
+ service: "ec2",
154
+ actions: [
155
+ "describe instance status",
156
+ ],
157
+ },
158
+ ]
159
+
160
+ KINESIS_FIREHOSE_DELIVERY_STREAM_ROLE =
161
+ [
162
+ {
163
+ service: 's3',
164
+ actions: [
165
+ 'abort multipart upload',
166
+ 'get bucket location',
167
+ 'get object',
168
+ 'list object',
169
+ 'list object multipart uploads',
170
+ 'put object',
171
+ ],
172
+ resources: [
173
+ '%BUCKET_NAME%',
174
+ '%BUCKET_NAME%/*',
175
+ ]
176
+ },
177
+ {
178
+ service: 'kinesis',
179
+ actions: [
180
+ 'describe stream',
181
+ 'get shard iterator',
182
+ 'get records',
183
+ ],
184
+ resources: [
185
+ { name: '%STREAM_NAME%' },
186
+ ],
187
+ },
188
+ {
189
+ service: 'kms',
190
+ actions: [
191
+ 'decrypt',
192
+ 'generate data key',
193
+ ],
194
+ resources: [
195
+ {
196
+ type: 'key',
197
+ id: '%KEY%',
198
+ },
199
+ ],
200
+ condition: [
201
+ {
202
+ '=': {
203
+ 'kms:ViaService': "s3.%REGION%.#{DOMAIN}",
204
+ },
205
+ '=~': {
206
+ 'kms:EncryptionContext:aws:s3:arn': 'arn:aws:s3:::%BUCKET_NAME%/%BUCKET_PREFIX%*',
207
+ }
208
+ },
209
+ ],
210
+ },
211
+ {
212
+ service: 'logs',
213
+ actions: [
214
+ 'put log events',
215
+ ],
216
+ resources: [
217
+ {
218
+ type: 'log-group',
219
+ name: '%LOG_GROUP_NAME%',
220
+ stream: '%LOG_STREAM_NAME%',
221
+ },
222
+ ],
223
+ },
224
+ {
225
+ service: 'lambda',
226
+ actions: [
227
+ 'invoke function',
228
+ 'get function configuration',
229
+ ],
230
+ resources: [
231
+ {
232
+ name: '%LAMBDA_FUNCTION_NAME%',
233
+ 'alias': '%LAMBDA_FUNCTION_ALIAS%'
234
+ },
235
+ ],
236
+ },
237
+ ]
238
+
239
+ PINPOINT_KINESIS_STREAM_ROLE =
240
+ [
241
+ {
242
+ service: 'kinesis',
243
+ actions: [
244
+ 'put records',
245
+ 'describe stream',
246
+ ],
247
+ resources: [
248
+ {
249
+ name: '%KINESIS_STREAM_NAME%',
250
+ },
251
+ ],
252
+ },
253
+ ]
254
+
255
+ PINPOINT_KINESIS_FIREHOSE_DELIVERY_STREAM_ROLE =
256
+ [
257
+ {
258
+ service: 'firehose',
259
+ actions: [
260
+ 'describe delivery stream',
261
+ 'put record batch',
262
+ ],
263
+ resources: [
264
+ {
265
+ name: '%FIREHOSE_DELIVERY_STREAM_NAME%',
266
+ },
267
+ ],
268
+ },
269
+ ]
270
+
271
+ # Datadog
272
+ # https://docs.datadoghq.com/integrations/aws/#installation
273
+ DATADOG_ROLE =
274
+ [
275
+ {
276
+ service: "autoscaling",
277
+ action: "describe*",
278
+ },
279
+ {
280
+ service: "budgets",
281
+ action: "view budget",
282
+ },
283
+ {
284
+ service: "cloudtrail",
285
+ actions: [
286
+ "describe trails",
287
+ "get trail status",
288
+ ],
289
+ },
290
+ {
291
+ service: "cloudwatch",
292
+ actions: [
293
+ "describe*",
294
+ "get*",
295
+ "list*",
296
+ ],
297
+ },
298
+ {
299
+ service: "codedeploy",
300
+ actions: [
301
+ "list*",
302
+ "batch get*",
303
+ ],
304
+ },
305
+ {
306
+ service: "dynamodb",
307
+ actions: [
308
+ "list*",
309
+ "describe*",
310
+ ],
311
+ },
312
+ {
313
+ service: "ec2",
314
+ actions: [
315
+ "describe*",
316
+ "get*",
317
+ ],
318
+ },
319
+ {
320
+ service: "ecs",
321
+ actions: [
322
+ "describe*",
323
+ "list*",
324
+ ],
325
+ },
326
+ {
327
+ service: "elasticache",
328
+ actions: [
329
+ "describe*",
330
+ "list*",
331
+ ],
332
+ },
333
+ {
334
+ service: "elasticfilesystem",
335
+ actions: [
336
+ "describe file systems",
337
+ "describe tags",
338
+ ],
339
+ },
340
+ {
341
+ service: "elasticloadbalancing",
342
+ actoin: "describe*",
343
+ },
344
+ {
345
+ service: "elasticmapreduce",
346
+ actions: [
347
+ "list*",
348
+ "describe*",
349
+ ],
350
+ },
351
+ {
352
+ service: "es",
353
+ actions: [
354
+ "list tags",
355
+ "list domain names",
356
+ "describe elasticsearch domains",
357
+ ],
358
+ },
359
+ {
360
+ service: "kinesis",
361
+ actions: [
362
+ "list*",
363
+ "describe*",
364
+ ],
365
+ },
366
+ {
367
+ service: "lambda",
368
+ action: "list*",
369
+ },
370
+ {
371
+ service: "logs",
372
+ actions: [
373
+ "get*",
374
+ "describe*",
375
+ "filter log events",
376
+ "test metric filter",
377
+ ],
378
+ resource: "*",
379
+ },
380
+ {
381
+ service: "rds",
382
+ actions: [
383
+ "describe*",
384
+ "list*",
385
+ ],
386
+ },
387
+ {
388
+ service: "route53",
389
+ action: "list*",
390
+ },
391
+ {
392
+ service: "s3",
393
+ actions: [
394
+ "get bucket tagging",
395
+ "list all my buckets",
396
+ ],
397
+ },
398
+ {
399
+ service: "ses",
400
+ action: "get*",
401
+ },
402
+ {
403
+ service: "sns",
404
+ actions: [
405
+ "list*",
406
+ "publish",
407
+ ],
408
+ },
409
+ {
410
+ service: "sqs",
411
+ action: "list queues",
412
+ },
413
+ {
414
+ service: "support",
415
+ },
416
+ {
417
+ service: "tag",
418
+ actions: [
419
+ "get resources",
420
+ "get tag keys",
421
+ "get tag values"
422
+ ],
423
+ }
424
+ ]
425
+ DATADOG_ACCOUNT_ID = 464622532012