Permissions of IAM Role created by opswitch (v.10.0)
The following IAM Role permissions were created by opswitch when linking AWS accounts. v.10.0 adds EC2 Auto Scaling and ECS permissions.
- Permissions prefixed with Describe
- CreateSnapshot
- DeleteSnapshot
- CreateImage
- DeregisterImage
- CreateTags
- StartInstances
- StopInstances
- ModifyInstanceAttribute
- CopySnapshot
- CopyImage
EC2 Auto Scaling
Section titled “EC2 Auto Scaling”- DescribeAutoScalingGroups
- UpdateAutoScalingGroup
- DescribeServices
- ListClusters
- ListServices
- UpdateService
- Permissions prefixed with Describe
- CreateDBSnapshot
- DeleteDBInstance
- DeleteDBSnapshot
- RestoreDBInstanceFromDBSnapshot
- ListTagsForResource
- AddTagsToResource
- StartDBInstance
- StopDBInstance
- CreateDBClusterSnapshot
- DeleteDBClusterSnapshot
- StartDBCluster
- StopDBCluster
- CopyDBSnapshot
- CopyDBClusterSnapshot
WorkSpaces
Section titled “WorkSpaces”- StartWorkspaces
- DescribeWorkspaces
- DescribeTags
Redshift
Section titled “Redshift”- DescribeClusters
- CreateTags
- SendCommand
- Allow all EC2 instances to execute the AWSEC2-CreateVssSnapshot document.
- GetCommandInvocation
- CreateGrant
- ListAliases
- ListKeyPolicies
- ListKeys
- GetKeyPolicy
CloudFormation
Section titled “CloudFormation”- Permissions prefixed with Describe
- Permissions prefixed with Get
- ListStacks
- CreateChangeSet