Las traducciones son generadas a través de traducción automática. En caso de conflicto entre la traducción y la version original de inglés, prevalecerá la version en inglés.
AWSServiceRoleForSMS
Descripción: proporciona acceso a los servicios y recursos de AWS necesarios para migrar las instancias de servicio a AWS, incluidos EC2, S3 y CloudFormation.
AWSServiceRoleForSMS es una política administrada de AWS.
Uso de la política
Esta política está asociada a un rol vinculado a un servicio. Esto permite a dicho servicio realizar acciones por usted. No puede asociar esta política a los usuarios, grupos o roles.
Información de la política
-
Tipo: política de rol vinculado a un servicio
-
Hora de creación: 6 de agosto de 2019 a las 18:39 UTC
-
Hora de edición: 15 de octubre de 2020 a las 17:28 UTC
-
ARN:
arn:aws:iam::aws:policy/aws-service-role/AWSServiceRoleForSMS
Versión de la política
Versión de la política: v10 (predeterminada)
La versión predeterminada de la política define qué permisos tendrá. Cuando un usuario o un rol con la política solicita acceso a un recurso de AWS, AWS comprueba la versión predeterminada de la política para decidir si permite o no la solicitud.
Documento de política JSON
{ "Version" : "2012-10-17", "Statement" : [ { "Effect" : "Allow", "Action" : [ "cloudformation:CreateChangeSet", "cloudformation:CreateStack" ], "Resource" : "arn:aws:cloudformation:*:*:stack/sms-app-*/*", "Condition" : { "Null" : { "cloudformation:ResourceTypes" : "false" }, "ForAllValues:StringEquals" : { "cloudformation:ResourceTypes" : [ "AWS::EC2::Instance", "AWS::ApplicationInsights::Application", "AWS::ResourceGroups::Group" ] } } }, { "Effect" : "Allow", "Action" : [ "cloudformation:DeleteStack", "cloudformation:ExecuteChangeSet", "cloudformation:DeleteChangeSet", "cloudformation:DescribeChangeSet", "cloudformation:DescribeStacks", "cloudformation:DescribeStackEvents", "cloudformation:DescribeStackResource", "cloudformation:DescribeStackResources", "cloudformation:GetTemplate" ], "Resource" : "arn:aws:cloudformation:*:*:stack/sms-app-*/*" }, { "Effect" : "Allow", "Action" : [ "cloudformation:ValidateTemplate", "s3:ListAllMyBuckets" ], "Resource" : "*" }, { "Effect" : "Allow", "Action" : [ "s3:CreateBucket", "s3:DeleteBucket", "s3:DeleteObject", "s3:GetBucketAcl", "s3:GetBucketLocation", "s3:GetObject", "s3:ListBucket", "s3:PutObject", "s3:PutObjectAcl", "s3:PutLifecycleConfiguration" ], "Resource" : "arn:aws:s3:::sms-app-*" }, { "Effect" : "Allow", "Action" : [ "sms:CreateReplicationJob", "sms:DeleteReplicationJob", "sms:GetReplicationJobs", "sms:GetReplicationRuns", "sms:GetServers", "sms:ImportServerCatalog", "sms:StartOnDemandReplicationRun", "sms:UpdateReplicationJob" ], "Resource" : "*" }, { "Effect" : "Allow", "Action" : "ssm:SendCommand", "Resource" : [ "arn:aws:ssm:*::document/AWS-RunRemoteScript", "arn:aws:s3:::sms-app-*" ] }, { "Effect" : "Allow", "Action" : "ssm:SendCommand", "Resource" : "arn:aws:ec2:*:*:instance/*", "Condition" : { "StringEquals" : { "ssm:resourceTag/UseForSMSApplicationValidation" : [ "true" ] } } }, { "Effect" : "Allow", "Action" : [ "ssm:CancelCommand", "ssm:GetCommandInvocation" ], "Resource" : "*" }, { "Effect" : "Allow", "Action" : "ec2:CreateTags", "Resource" : "arn:aws:ec2:*:*:snapshot/*", "Condition" : { "StringEquals" : { "ec2:CreateAction" : "CopySnapshot" } } }, { "Effect" : "Allow", "Action" : "ec2:CopySnapshot", "Resource" : "arn:aws:ec2:*:*:snapshot/*", "Condition" : { "StringLike" : { "aws:RequestTag/SMSJobId" : [ "sms-*" ] } } }, { "Effect" : "Allow", "Action" : [ "ec2:ModifySnapshotAttribute", "ec2:DeleteSnapshot" ], "Resource" : "arn:aws:ec2:*:*:snapshot/*", "Condition" : { "StringLike" : { "ec2:ResourceTag/SMSJobId" : [ "sms-*" ] } } }, { "Effect" : "Allow", "Action" : [ "ec2:CopyImage", "ec2:DescribeImages", "ec2:DescribeInstances", "ec2:DescribeSnapshots", "ec2:DescribeSnapshotAttribute", "ec2:DeregisterImage", "ec2:ImportImage", "ec2:DescribeImportImageTasks", "ec2:GetEbsEncryptionByDefault" ], "Resource" : "*" }, { "Effect" : "Allow", "Action" : [ "iam:GetRole", "iam:GetInstanceProfile" ], "Resource" : "*" }, { "Effect" : "Allow", "Action" : [ "ec2:DisassociateIamInstanceProfile", "ec2:AssociateIamInstanceProfile", "ec2:ReplaceIamInstanceProfileAssociation" ], "Resource" : "arn:aws:ec2:*:*:instance/*", "Condition" : { "StringLike" : { "ec2:ResourceTag/aws:cloudformation:stack-id" : "arn:aws:cloudformation:*:*:stack/sms-app-*/*" } } }, { "Effect" : "Allow", "Action" : "iam:PassRole", "Resource" : "*", "Condition" : { "StringEquals" : { "iam:PassedToService" : "ec2.amazonaws.com" } } }, { "Effect" : "Allow", "Action" : "iam:PassRole", "Resource" : "*", "Condition" : { "StringEqualsIfExists" : { "iam:PassedToService" : "cloudformation.amazonaws.com" }, "StringLike" : { "iam:AssociatedResourceArn" : "arn:aws:cloudformation:*:*:stack/sms-app-*/*" } } }, { "Effect" : "Allow", "Action" : [ "ec2:RunInstances" ], "Resource" : "*" }, { "Effect" : "Allow", "Action" : [ "ec2:CreateTags", "ec2:DeleteTags" ], "Resource" : "arn:aws:ec2:*:*:instance/*" }, { "Effect" : "Allow", "Action" : [ "ec2:ModifyInstanceAttribute", "ec2:StopInstances", "ec2:StartInstances", "ec2:TerminateInstances" ], "Resource" : "*", "Condition" : { "StringLike" : { "ec2:ResourceTag/aws:cloudformation:stack-id" : "arn:aws:cloudformation:*:*:stack/sms-app-*/*" } } }, { "Effect" : "Allow", "Action" : [ "applicationinsights:Describe*", "applicationinsights:List*", "cloudformation:ListStackResources" ], "Resource" : "*" }, { "Effect" : "Allow", "Action" : [ "applicationinsights:CreateApplication", "applicationinsights:CreateComponent", "applicationinsights:UpdateApplication", "applicationinsights:DeleteApplication", "applicationinsights:UpdateComponentConfiguration", "applicationinsights:DeleteComponent" ], "Resource" : "arn:aws:applicationinsights:*:*:application/resource-group/sms-app-*" }, { "Effect" : "Allow", "Action" : [ "resource-groups:CreateGroup", "resource-groups:GetGroup", "resource-groups:UpdateGroup", "resource-groups:DeleteGroup" ], "Resource" : "arn:aws:resource-groups:*:*:group/sms-app-*", "Condition" : { "StringLike" : { "aws:ResourceTag/aws:cloudformation:stack-id" : "arn:aws:cloudformation:*:*:stack/sms-app-*/*" } } }, { "Effect" : "Allow", "Action" : [ "iam:CreateServiceLinkedRole" ], "Resource" : [ "arn:aws:iam::*:role/aws-service-role/application-insights.amazonaws.com/AWSServiceRoleForApplicationInsights" ], "Condition" : { "StringEquals" : { "iam:AWSServiceName" : "application-insights.amazonaws.com" } } } ] }
Más información
