File size: 1,435 Bytes
1866d85 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 | {
"Version": "2012-10-17",
"Statement": [
{
"Sid": "InspectAndManageBenchmarkWorkers",
"Effect": "Allow",
"Action": [
"ec2:Describe*",
"ec2:RunInstances",
"ec2:CreateTags",
"ec2:StartInstances",
"ec2:StopInstances",
"ec2:TerminateInstances"
],
"Resource": "*"
},
{
"Sid": "ControlWorkersThroughSSM",
"Effect": "Allow",
"Action": [
"ssm:CancelCommand",
"ssm:DescribeInstanceInformation",
"ssm:GetCommandInvocation",
"ssm:ListCommandInvocations",
"ssm:ListCommands",
"ssm:ResumeSession",
"ssm:SendCommand",
"ssm:StartSession",
"ssm:TerminateSession"
],
"Resource": "*"
},
{
"Sid": "BenchmarkObjectStorage",
"Effect": "Allow",
"Action": [
"s3:GetObject",
"s3:PutObject",
"s3:ListBucket"
],
"Resource": [
"arn:aws:s3:::REPLACE_BUCKET",
"arn:aws:s3:::REPLACE_BUCKET/*"
]
},
{
"Sid": "ReadCapacity",
"Effect": "Allow",
"Action": [
"servicequotas:GetServiceQuota",
"servicequotas:ListServiceQuotas"
],
"Resource": "*"
},
{
"Sid": "PassWorkerRole",
"Effect": "Allow",
"Action": "iam:PassRole",
"Resource": "arn:aws:iam::REPLACE_ACCOUNT_ID:role/REPLACE_WORKER_ROLE"
}
]
}
|