Recently Written · git

subplz-web

git clone https://github.com/equwal/subplz-web

Log | Files | Refs

infra/burst/workers/aws/iam-policy.json (1325 bytes)

1 {
2   "Version": "2012-10-17",
3   "Statement": [
4     {
5       "Sid": "ReadPricesImagesNetworkAndInstances",
6       "Effect": "Allow",
7       "Action": [
8         "ec2:Describe*"
9       ],
10       "Resource": "*"
11     },
12     {
13       "Sid": "StartWorkers",
14       "Effect": "Allow",
15       "Action": [
16         "ec2:RunInstances",
17         "ec2:CreateTags"
18       ],
19       "Resource": "*"
20     },
21     {
22       "Sid": "EndOnlyBurstWorkers",
23       "Effect": "Allow",
24       "Action": [
25         "ec2:TerminateInstances",
26         "ec2:ModifyInstanceAttribute"
27       ],
28       "Resource": "*",
29       "Condition": {
30         "StringEquals": {
31           "aws:ResourceTag/Role": "subplz-burst-worker"
32         }
33       }
34     },
35     {
36       "Sid": "TheWorkerSecurityGroup",
37       "Effect": "Allow",
38       "Action": [
39         "ec2:CreateSecurityGroup",
40         "ec2:DeleteSecurityGroup",
41         "ec2:AuthorizeSecurityGroupEgress",
42         "ec2:RevokeSecurityGroupEgress",
43         "ec2:AuthorizeSecurityGroupIngress",
44         "ec2:RevokeSecurityGroupIngress"
45       ],
46       "Resource": "*"
47     },
48     {
49       "Sid": "TheSpotRoleOnce",
50       "Effect": "Allow",
51       "Action": "iam:CreateServiceLinkedRole",
52       "Resource": "*",
53       "Condition": {
54         "StringEquals": {
55           "iam:AWSServiceName": "spot.amazonaws.com"
56         }
57       }
58     }
59   ]
60 }