Merge pull request #1067 from udondan/update-aws-managed-policies

udondan · Jan 11, 2025 · 0c227a2 · 0c227a2
2 parents 1b3aa2f + 69ffeca
commit 0c227a2
Show file tree

Hide file tree

Showing 5 changed files with 34 additions and 6 deletions.
diff --git a/docs/source/_static/managed-policies/AWSCleanRoomsMLFullAccess.json b/docs/source/_static/managed-policies/AWSCleanRoomsMLFullAccess.json
@@ -29,6 +29,7 @@
       "Effect": "Allow",
       "Action": [
         "cleanrooms:GetCollaboration",
+        "cleanrooms:BatchGetSchema",
         "cleanrooms:GetConfiguredAudienceModelAssociation",
         "cleanrooms:GetMembership",
         "cleanrooms:ListAnalysisTemplates",
@@ -146,6 +147,24 @@
         "s3:GetBucketLocation"
       ],
       "Resource": "arn:aws:s3:::*cleanrooms-ml*"
+    },
+    {
+      "Sid": "ConsoleDescribeECRRepositories",
+      "Effect": "Allow",
+      "Action": [
+        "ecr:DescribeRepositories",
+        "ecr:ListImages"
+      ],
+      "Resource": "arn:aws:ecr:*:*:repository/*"
+    },
+    {
+      "Sid": "PassCleanRoomsResources",
+      "Effect": "Allow",
+      "Action": [
+        "cleanrooms:PassMembership",
+        "cleanrooms:PassCollaboration"
+      ],
+      "Resource": "*"
     }
   ]
 }
diff --git a/docs/source/_static/managed-policies/AWSCleanRoomsMLReadOnlyAccess.json b/docs/source/_static/managed-policies/AWSCleanRoomsMLReadOnlyAccess.json
@@ -30,6 +30,15 @@
         "cleanrooms-ml:List*"
       ],
       "Resource": "*"
+    },
+    {
+      "Sid": "PassCleanRoomsResources",
+      "Effect": "Allow",
+      "Action": [
+        "cleanrooms:PassMembership",
+        "cleanrooms:PassCollaboration"
+      ],
+      "Resource": "*"
     }
   ]
 }
diff --git a/docs/source/_static/managed-policies/AWSCodeCommitFullAccess.json b/docs/source/_static/managed-policies/AWSCodeCommitFullAccess.json
@@ -107,8 +107,8 @@
       ],
       "Resource": "*",
       "Condition": {
-        "StringLike": {
-          "codestar-notifications:NotificationsForResource": "arn:aws:codecommit:*"
+        "ArnLike": {
+          "codestar-notifications:NotificationsForResource": "arn:aws:codecommit:*:*:*"
         }
       }
     },

diff --git a/docs/source/_static/managed-policies/AWSCodeCommitPowerUser.json b/docs/source/_static/managed-policies/AWSCodeCommitPowerUser.json
@@ -125,8 +125,8 @@
       ],
       "Resource": "*",
       "Condition": {
-        "StringLike": {
-          "codestar-notifications:NotificationsForResource": "arn:aws:codecommit:*"
+        "ArnLike": {
+          "codestar-notifications:NotificationsForResource": "arn:aws:codecommit:*:*:*"
         }
       }
     },

diff --git a/docs/source/_static/managed-policies/AWSCodeCommitReadOnly.json b/docs/source/_static/managed-policies/AWSCodeCommitReadOnly.json
@@ -77,8 +77,8 @@
       ],
       "Resource": "*",
       "Condition": {
-        "StringLike": {
-          "codestar-notifications:NotificationsForResource": "arn:aws:codecommit:*"
+        "ArnLike": {
+          "codestar-notifications:NotificationsForResource": "arn:aws:codecommit:*:*:*"
         }
       }
     },