AWS politique gérée : AmazonDataZoneDomainExecutionRolePolicy

Il s'agit de la politique par défaut pour le rôle DataZone DomainExecutionRole de service Amazon. Ce rôle est utilisé par Amazon DataZone pour cataloguer, découvrir, gérer, partager et analyser les données du DataZone domaine Amazon. Ce rôle permet d'accéder à tous les Amazon DataZone APIs nécessaires à l'utilisation du portail de données, ainsi que RAM des autorisations pour prendre en charge l'utilisation des comptes associés dans un DataZone domaine Amazon.

Vous pouvez joindre la AmazonDataZoneDomainExecutionRolePolicy politique à votreAmazonDataZoneDomainExecutionRole.

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Sid": "DomainExecutionRoleStatement",
			"Effect": "Allow",
			"Action": [
				"datazone:AcceptPredictions",
				"datazone:AcceptSubscriptionRequest",
				"datazone:AddEntityOwner",
				"datazone:AddPolicyGrant",
				"datazone:CancelMetadataGenerationRun",
				"datazone:CancelSubscription",
				"datazone:CreateAsset",
				"datazone:CreateAssetFilter",
				"datazone:CreateAssetRevision",
				"datazone:CreateAssetType",
				"datazone:CreateDataProduct",
				"datazone:CreateDataProductRevision",
				"datazone:CreateDataSource",
				"datazone:CreateDomainUnit",
				"datazone:CreateEnvironment",
				"datazone:CreateEnvironmentBlueprint",
				"datazone:CreateEnvironmentProfile",
				"datazone:CreateFormType",
				"datazone:CreateGlossary",
				"datazone:CreateGlossaryTerm",
				"datazone:CreateListingChangeSet",
				"datazone:CreateProject",
				"datazone:CreateProjectMembership",
				"datazone:CreateSubscriptionGrant",
				"datazone:CreateSubscriptionRequest",
				"datazone:DeleteAsset",
				"datazone:DeleteAssetFilter",
				"datazone:DeleteAssetType",
				"datazone:DeleteDataProduct",
				"datazone:DeleteDataSource",
				"datazone:DeleteDomainUnit",
				"datazone:DeleteEnvironment",
				"datazone:DeleteEnvironmentBlueprint",
				"datazone:DeleteEnvironmentProfile",
				"datazone:DeleteFormType",
				"datazone:DeleteGlossary",
				"datazone:DeleteGlossaryTerm",
				"datazone:DeleteListing",
				"datazone:DeleteProject",
				"datazone:DeleteProjectMembership",
				"datazone:DeleteSubscriptionGrant",
				"datazone:DeleteSubscriptionRequest",
				"datazone:DeleteSubscriptionTarget",
				"datazone:DeleteTimeSeriesDataPoints",
				"datazone:GetAsset",
				"datazone:GetAssetFilter",
				"datazone:GetAssetType",
				"datazone:GetDataProduct",
				"datazone:GetDataSource",
				"datazone:GetDataSourceRun",
				"datazone:GetDomain",
				"datazone:GetDomainUnit",
				"datazone:GetEnvironment",
				"datazone:GetEnvironmentAction",
				"datazone:GetEnvironmentActionLink",
				"datazone:GetEnvironmentBlueprint",
				"datazone:GetEnvironmentCredentials",
				"datazone:GetEnvironmentProfile",
				"datazone:GetFormType",
				"datazone:GetGlossary",
				"datazone:GetGlossaryTerm",
				"datazone:GetGroupProfile",
				"datazone:GetLineageNode",
				"datazone:GetListing",
				"datazone:GetMetadataGenerationRun",
				"datazone:GetProject",
				"datazone:GetSubscription",
				"datazone:GetSubscriptionEligibility",
				"datazone:GetSubscriptionGrant",
				"datazone:GetSubscriptionRequestDetails",
				"datazone:GetSubscriptionTarget",
				"datazone:GetTimeSeriesDataPoint",
				"datazone:GetUserProfile",
				"datazone:ListAccountEnvironments",
				"datazone:ListAssetFilters",
				"datazone:ListAssetRevisions",
				"datazone:ListDataProductRevisions",
				"datazone:ListDataSourceRunActivities",
				"datazone:ListDataSourceRuns",
				"datazone:ListDataSources",
				"datazone:ListDomainUnitsForParent",
				"datazone:ListEntityOwners",
				"datazone:ListEnvironmentActions",
				"datazone:ListEnvironmentBlueprintConfigurationSummaries",
				"datazone:ListEnvironmentBlueprintConfigurations",
				"datazone:ListEnvironmentBlueprints",
				"datazone:ListEnvironmentProfiles",
				"datazone:ListEnvironments",
				"datazone:ListGroupsForUser",
				"datazone:ListLineageNodeHistory",
				"datazone:ListMetadataGenerationRuns",
				"datazone:ListNotifications",
				"datazone:ListPolicyGrants",
				"datazone:ListProjectMemberships",
				"datazone:ListProjects",
				"datazone:ListSubscriptionGrants",
				"datazone:ListSubscriptionRequests",
				"datazone:ListSubscriptionTargets",
				"datazone:ListSubscriptions",
				"datazone:ListTimeSeriesDataPoints",
				"datazone:ListWarehouseMetadata",
				"datazone:RejectPredictions",
				"datazone:RejectSubscriptionRequest",
				"datazone:RemoveEntityOwner",
				"datazone:RemovePolicyGrant",
				"datazone:RevokeSubscription",
				"datazone:Search",
				"datazone:SearchGroupProfiles",
				"datazone:SearchListings",
				"datazone:SearchTypes",
				"datazone:SearchUserProfiles",
				"datazone:StartDataSourceRun",
				"datazone:StartMetadataGenerationRun",
				"datazone:UpdateAssetFilter",
				"datazone:UpdateDataSource",
				"datazone:UpdateDomainUnit",
				"datazone:UpdateEnvironment",
				"datazone:UpdateEnvironmentBlueprint",
				"datazone:UpdateEnvironmentDeploymentStatus",
				"datazone:UpdateEnvironmentProfile",
				"datazone:UpdateGlossary",
				"datazone:UpdateGlossaryTerm",
				"datazone:UpdateProject",
				"datazone:UpdateSubscriptionGrantStatus",
				"datazone:UpdateSubscriptionRequest"
			],
			"Resource": "*"
		},
		{
			"Sid": "RAMResourceShareStatement",
			"Effect": "Allow",
			"Action": "ram:GetResourceShareAssociations",
			"Resource": "*"
		}
	]
}