opswitch が作成したIAM Role の権限に関して(v.5.0)
opswitchがAWSアカウント連携時に作成したIAM Roleの権限は以下になります。
- 先頭にDescribeが付く権限
- CreateSnapshot
- DeleteSnapshot
- CreateImage
- DeregisterImage
- CreateTags
- StartInstances
- StopInstances
- ModifyInstanceAttribute
- CopySnapshot
- CopyImage
- 先頭にDescribeが付く権限
- CreateDBSnapshot
- DeleteDBInstance
- DeleteDBSnapshot
- RestoreDBInstanceFromDBSnapshot
- ListTagsForResource
- AddTagsToResource
- StartDBInstance
- StopDBInstance
- CreateDBClusterSnapshot
- DeleteDBClusterSnapshot
- StartDBCluster
- StopDBCluster
- CopyDBSnapshot
- CopyDBClusterSnapshot
WorkSpaces
Section titled “WorkSpaces”- StartWorkspaces
- DescribeWorkspaces
- DescribeTags
Redshift
Section titled “Redshift”- DescribeClusters
- CreateTags
CloudFormation
Section titled “CloudFormation”- 先頭にDescribeが付く権限
- 先頭にGetが付く権限
- CreateStackSet
- CreateChangeSet