mirror of
https://github.com/BishopFox/cloudfox.git
synced 2026-11-07 09:56:01 -10:00
97 lines
3.8 KiB
JSON
97 lines
3.8 KiB
JSON
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"apigateway:GET",
|
|
"apprunner:DescribeService",
|
|
"apprunner:ListServices",
|
|
"cloudformation:DescribeStacks",
|
|
"cloudformation:GetTemplate",
|
|
"cloudformation:ListStacks",
|
|
"cloudtrail:LookupEvents",
|
|
"cloudfront:ListDistributions",
|
|
"codebuild:ListProjects",
|
|
"codebuild:BatchGetProjects",
|
|
"codebuild:GetResourcePolicy",
|
|
"dynamodb:ListTables",
|
|
"ec2:DescribeInstanceAttribute",
|
|
"ec2:DescribeInstances",
|
|
"ec2:DescribeNetworkInterfaces",
|
|
"ec2:DescribeRegions",
|
|
"ecr:DescribeImages",
|
|
"ecr:DescribeRepositories",
|
|
"ecs:DescribeTaskDefinition",
|
|
"ecs:ListClusters",
|
|
"ecs:ListTaskDefinitions",
|
|
"ecs:ListTasks",
|
|
"eks:DescribeCluster",
|
|
"eks:DescribeNodegroup",
|
|
"eks:ListClusters",
|
|
"eks:ListNodegroups",
|
|
"elasticache:DescribeCacheClusters",
|
|
"elasticache:DescribeCacheSubnetGroups",
|
|
"elasticache:DescribeReplicationGroups",
|
|
"elasticfilesystem:DescribeFileSystemPolicy",
|
|
"elasticfilesystem:DescribeFileSystems",
|
|
"elasticfilesystem:DescribeMountTargets",
|
|
"eks:DescribeCluster",
|
|
"eks:ListClusters",
|
|
"elasticloadbalancing:DescribeLoadBalancers",
|
|
"elasticloadbalancing:DescribeListeners",
|
|
"fsx:DescribeFileSystems",
|
|
"fsx:DescribeVolumes",
|
|
"glue:ListDevEndpoints",
|
|
"glue:ListJobs",
|
|
"grafana:ListWorkspaces",
|
|
"iam:GetAccountAuthorizationDetails",
|
|
"iam:ListAccessKeys",
|
|
"iam:ListUsers",
|
|
"iam:ListRoles",
|
|
"iam:SimulatePrincipalPolicy",
|
|
"lambda:GetFunctionUrlConfig",
|
|
"lambda:ListFunctions",
|
|
"lambda:GetPolicy",
|
|
"lightsail:GetContainerServices",
|
|
"lightsail:GetInstances",
|
|
"mq:DescribeBroker",
|
|
"mq:ListBrokers",
|
|
"organizations:ListAccounts",
|
|
"es:DescribeDomain",
|
|
"es:ListDomainNames",
|
|
"ram:GetResourceShares",
|
|
"ram:ListResources",
|
|
"rds:DescribeDBInstances",
|
|
"redshift:DescribeClusters",
|
|
"route53:ListHostedZones",
|
|
"route53:ListResourceRecordSets",
|
|
"s3:GetBucketPolicyStatus",
|
|
"s3:GetBucketWebsite",
|
|
"s3:ListAllMyBuckets",
|
|
"s3:GetAccountPublicAccessBlock",
|
|
"s3:GetBucketLocation",
|
|
"s3:GetBucketPolicy",
|
|
"ssm:DescribeParameters",
|
|
"sagemaker:ListProcessingJobs",
|
|
"sagemaker:DescribeProcessingJob",
|
|
"sagemaker:ListTransformJobs",
|
|
"sagemaker:DescribeTransformJob",
|
|
"sagemaker:ListTrainingJobs",
|
|
"sagemaker:DescribeTrainingJob",
|
|
"sagemaker:ListModels",
|
|
"sagemaker:DescribeModel",
|
|
"secretsmanager:ListSecrets",
|
|
"sns:ListTopics",
|
|
"sns:GetTopicAttributes",
|
|
"sqs:ListQueues",
|
|
"sqs:GetQueueAttributes",
|
|
"tag:GetResources"
|
|
|
|
],
|
|
"Resource": "*",
|
|
"Effect": "Allow",
|
|
"Sid": "AllowMoreReadForCloudFox190"
|
|
}
|
|
]
|
|
}
|