AWS política gerenciada: AmazonDataZoneDomainExecutionRolePolicy

Essa é a política padrão para a função de DataZone DomainExecutionRole serviço da Amazon. Essa função é usada pela Amazon DataZone para catalogar, descobrir, controlar, compartilhar e analisar dados no DataZone domínio da Amazon. Essa função fornece acesso a toda a Amazon DataZone APIs necessária para o uso do portal de dados, bem como RAM permissões para oferecer suporte ao uso de contas associadas em um DataZone domínio da Amazon.

Você pode anexar a AmazonDataZoneDomainExecutionRolePolicy política ao seuAmazonDataZoneDomainExecutionRole.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "DomainExecutionRoleStatement",
            "Effect": "Allow",
            "Action": [
                "datazone:ListTimeSeriesDataPoints",
                "datazone:GetTimeSeriesDataPoint",
                "datazone:DeleteTimeSeriesDataPoints",
                "datazone:AcceptPredictions",
                "datazone:AcceptSubscriptionRequest",
                "datazone:CancelSubscription",
                "datazone:CreateAsset",
                "datazone:CreateAssetRevision",
                "datazone:CreateAssetType",
                "datazone:CreateDataSource",
                "datazone:CreateEnvironment",
                "datazone:CreateEnvironmentBlueprint",
                "datazone:CreateEnvironmentProfile",
                "datazone:CreateFormType",
                "datazone:CreateGlossary",
                "datazone:CreateGlossaryTerm",
                "datazone:CreateListingChangeSet",
                "datazone:CreateProject",
                "datazone:CreateProjectMembership",
                "datazone:CreateSubscriptionGrant",
                "datazone:CreateSubscriptionRequest",
                "datazone:DeleteAsset",
                "datazone:DeleteAssetType",
                "datazone:DeleteDataSource",
                "datazone:DeleteEnvironment",
                "datazone:DeleteEnvironmentBlueprint",
                "datazone:DeleteEnvironmentProfile",
                "datazone:DeleteFormType",
                "datazone:DeleteGlossary",
                "datazone:DeleteGlossaryTerm",
                "datazone:DeleteListing",
                "datazone:DeleteProject",
                "datazone:DeleteProjectMembership",
                "datazone:DeleteSubscriptionGrant",
                "datazone:DeleteSubscriptionRequest",
                "datazone:DeleteSubscriptionTarget",
                "datazone:GetAsset",
                "datazone:GetAssetType",
                "datazone:GetDataSource",
                "datazone:GetDataSourceRun",
                "datazone:GetDomain",
                "datazone:GetEnvironment",
                "datazone:GetEnvironmentActionLink",
                "datazone:GetEnvironmentBlueprint",
                "datazone:GetEnvironmentCredentials",
                "datazone:GetEnvironmentProfile",
                "datazone:GetFormType",
                "datazone:GetGlossary",
                "datazone:GetGlossaryTerm",
                "datazone:GetGroupProfile",
                "datazone:GetListing",
                "datazone:GetProject",
                "datazone:GetSubscription",
                "datazone:GetSubscriptionEligibility",
                "datazone:GetSubscriptionGrant",
                "datazone:GetSubscriptionRequestDetails",
                "datazone:GetSubscriptionTarget",
                "datazone:GetUserProfile",
                "datazone:ListAccountEnvironments",
                "datazone:ListAssetRevisions",
                "datazone:ListDataSourceRunActivities",
                "datazone:ListDataSourceRuns",
                "datazone:ListDataSources",
                "datazone:ListEnvironmentBlueprintConfigurations",
                "datazone:ListEnvironmentBlueprintConfigurationSummaries",
                "datazone:ListEnvironmentBlueprints",
                "datazone:ListEnvironmentProfiles",
                "datazone:ListEnvironments",
                "datazone:ListGroupsForUser",
                "datazone:ListNotifications",
                "datazone:ListProjectMemberships",
                "datazone:ListProjects",
                "datazone:ListSubscriptionGrants",
                "datazone:ListSubscriptionRequests",
                "datazone:ListSubscriptionTargets",
                "datazone:ListSubscriptions",
                "datazone:ListWarehouseMetadata",
                "datazone:RejectPredictions",
                "datazone:RejectSubscriptionRequest",
                "datazone:RevokeSubscription",
                "datazone:Search",
                "datazone:SearchGroupProfiles",
                "datazone:SearchListings",
                "datazone:SearchTypes",
                "datazone:SearchUserProfiles",
                "datazone:StartDataSourceRun",
                "datazone:UpdateDataSource",
                "datazone:UpdateEnvironment",
                "datazone:UpdateEnvironmentBlueprint",
                "datazone:UpdateEnvironmentDeploymentStatus",
                "datazone:UpdateEnvironmentProfile",
                "datazone:UpdateGlossary",
                "datazone:UpdateGlossaryTerm",
                "datazone:UpdateProject",
                "datazone:UpdateSubscriptionGrantStatus",
                "datazone:UpdateSubscriptionRequest",
                "datazone:StartMetadataGenerationRun",
                "datazone:GetMetadataGenerationRun",
                "datazone:CancelMetadataGenerationRun",
                "datazone:ListMetadataGenerationRuns",
                "datazone:GetEnvironmentAction",
                "datazone:ListEnvironmentActions",
                "datazone:ListLineageNodeHistory", 
                "datazone:GetLineageNode", 
                "datazone:CreateAssetFilter",
                "datazone:DeleteAssetFilter",
                "datazone:GetAssetFilter",
                "datazone:ListAssetFilters",
                "datazone:UpdateAssetFilter"
            ],
            "Resource": "*"
        },
        {
            "Sid": "RAMResourceShareStatement",
            "Effect": "Allow",
            "Action": "ram:GetResourceShareAssociations",
            "Resource": "*"
        }
    ]
}