AWS BugBust permissions reference

You can use AWS-wide condition keys in your AWS BugBust policies to express conditions. For a list, see IAM JSON Policy Elements Reference in the IAM User Guide.

You specify the actions in the policy's Action field. To specify an action, use the bugbust: prefix followed by the API operation name (for example, bugbust:CreateEvent and bugbust:JoinEvent). To specify multiple actions in a single statement, separate them with commas (for example, "Action": [ "bugbust:ListBugs", "bugbust:ListProfilingGroups" ]).

Using wildcard characters

You specify an Amazon Resource Name (ARN), with or without a wildcard character (*), as the resource value in the policy's Resource field. You can use a wildcard to specify multiple actions or resources. For example, bugbust:* specifies all AWS BugBust actions and bugbust:List* specifies all AWS BugBust actions that begin with the word List. The following example refers to all events with a universally unique identifier (UUID) that begins with a1b2c3d4-.

arn:aws:bugbust:us-east-2:123456789012:event/a1b2c3d4-*

You can use the following table as a reference when you are setting up Authenticating with identities and writing permissions policies that you can attach to an IAM identity (identity-based policies).

AWS BugBust API operations and required permissions for actions
AWS BugBust API operations	Required permissions (API actions)	Resources
CreateEvent	bugbust:CreateEvent Required to create an AWS BugBust event.	arn:aws:bugbust:region-ID:account-ID:event:event-uuid
EvaluateProfilingGroups	bugbust:EvaluateProfilingGroups Required for an AWS BugBust administrator to evaluate checked-in profiling groups.	arn:aws:bugbust:region-ID:account-ID:event:event-uuid
GetEvent	bugbust:GetEvent Required to view customer details about an event.	arn:aws:bugbust:region-ID:account-ID:event:event-uuid
GetJoinEventStatus	bugbust:GetJoinEventStatus Required to view that status of an AWS BugBust player's attempt to join an AWS BugBust event.	arn:aws:bugbust:region-ID:account-ID:event:event-uuid
JoinEvent	bugbust:JoinEvent Required for an AWS BugBust player to join an event.	arn:aws:bugbust:region-ID:account-ID:event:event-uuid
ListBugs	bugbust:ListBugs Required to display the bugs that were imported into an event for players to work on.	arn:aws:bugbust:region-ID:account-ID:event:event-uuid
ListEventParticipants	bugbust:ListEventParticipants Required to view the participants of an event.	arn:aws:bugbust:region-ID:account-ID:event:event-uuid
ListEventScores	bugbust:ListEventScores Required to view the scores of an event's players.	arn:aws:bugbust:region-ID:account-ID:event:event-uuid
ListEvents	bugbust:ListEvents Required to view AWS BugBust events.	*
ListProfilingGroups	bugbust:ListProfilingGroups Required to display the profiling groups that were imported into an event for players to work on.	arn:aws:bugbust:region-ID:account-ID:event:event-uuid
ListPullRequests	bugbust:ListPullRequests Required to view the pull requests used by players to submit fixes to their claimed bugs in an event.	arn:aws:bugbust:region-ID:account-ID:event:event-uuid
UpdateEvent	bugbust:UpdateEvent Required to update the details of an event.	arn:aws:bugbust:region-ID:account-ID:event:event-uuid
UpdateWorkItem	bugbust:UpdateWorkItem Required for a player to update one of their work items (bug or profiling group) as claimed or unclaimed.	arn:aws:bugbust:region-ID:account-ID:event:event-uuid
UpdateWorkItemAdmin	bugbust:UpdateWorkItemAdmin Required for an administrator to update an event's work item (bug or profiling group).	arn:aws:bugbust:region-ID:account-ID:event:event-uuid