本文属于机器翻译版本。若本译文内容与英语原文存在差异，则一律以英文原文为准。
AWSRoboMakerServicePolicy
描述：RoboMaker 服务策略
AWSRoboMakerServicePolicy 是一项 AWS 托管式策略。
使用此策略
此附加到服务相关角色的策略允许服务代表您执行操作。您无法将此策略附加到您的用户、组或角色。
策略详细信息
-
类型：服务相关角色策略
-
创建时间：2018 年 11 月 26 日 06:30 UTC
-
编辑时间：2021 年 11 月 11 日 22:23 UTC
-
ARN:
arn:aws:iam::aws:policy/aws-service-role/AWSRoboMakerServicePolicy
策略版本
策略版本：v6（默认）
此策略的默认版本是定义策略权限的版本。当使用该策略的用户或角色请求访问 AWS 资源时，AWS 会检查策略的默认版本以确定是否允许该请求。
JSON 策略文档
{
"Version" : "2012-10-17",
"Statement" : [
{
"Action" : [
"ec2:CreateNetworkInterfacePermission",
"ec2:DescribeNetworkInterfaces",
"ec2:DeleteNetworkInterface",
"ec2:DescribeSubnets",
"ec2:DescribeVpcs",
"ec2:DescribeSecurityGroups",
"greengrass:CreateDeployment",
"greengrass:CreateGroupVersion",
"greengrass:CreateFunctionDefinition",
"greengrass:CreateFunctionDefinitionVersion",
"greengrass:GetDeploymentStatus",
"greengrass:GetGroup",
"greengrass:GetGroupVersion",
"greengrass:GetCoreDefinitionVersion",
"greengrass:GetFunctionDefinitionVersion",
"greengrass:GetAssociatedRole",
"lambda:CreateFunction",
"robomaker:CreateSimulationJob",
"robomaker:CancelSimulationJob"
],
"Effect" : "Allow",
"Resource" : "*"
},
{
"Action" : [
"robomaker:TagResource"
],
"Effect" : "Allow",
"Resource" : "arn:aws:robomaker:*:*:simulation-job/*"
},
{
"Action" : [
"lambda:UpdateFunctionCode",
"lambda:GetFunction",
"lambda:UpdateFunctionConfiguration",
"lambda:DeleteFunction",
"lambda:ListVersionsByFunction",
"lambda:GetAlias",
"lambda:UpdateAlias",
"lambda:CreateAlias",
"lambda:DeleteAlias"
],
"Effect" : "Allow",
"Resource" : "arn:aws:lambda:*:*:function:aws-robomaker-*"
},
{
"Effect" : "Allow",
"Action" : "iam:PassRole",
"Resource" : "*",
"Condition" : {
"StringEquals" : {
"iam:PassedToService" : [
"lambda.amazonaws.com",
"robomaker.amazonaws.com"
]
}
}
}
]
}了解更多信息
