Skip to content

Commit 6524854

Browse files
committed
adding test file
1 parent 06f47d6 commit 6524854

2 files changed

Lines changed: 132 additions & 1 deletion

File tree

.github/workflows/test-devolv-action.yml.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,4 +37,4 @@ jobs:
3737
with:
3838
tool: drift
3939
policy-name: DevolvTestPolicyHuge
40-
path: ./Devolv-source-code/test-devolv-policy.json
40+
path: ./test-devolv-policy.json

test-devolv-policy.json

Lines changed: 131 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,131 @@
1+
{
2+
"Version": "2012-10-17",
3+
"Statement": [
4+
{
5+
"Sid": "S3List",
6+
"Effect": "Allow",
7+
"Action": "s3:ListBucket",
8+
"Resource": "arn:aws:s3:::example-bucket"
9+
},
10+
{
11+
"Sid": "S3GetObj",
12+
"Effect": "Allow",
13+
"Action": "s3:GetObject",
14+
"Resource": "arn:aws:s3:::example-bucket/*"
15+
},
16+
{
17+
"Sid": "EC2Describe",
18+
"Effect": "Allow",
19+
"Action": "ec2:DescribeInstances",
20+
"Resource": "*"
21+
},
22+
{
23+
"Sid": "EC2Start",
24+
"Effect": "Allow",
25+
"Action": "ec2:StartInstances",
26+
"Resource": "arn:aws:ec2:us-east-1:123456789012:instance/*"
27+
},
28+
{
29+
"Sid": "EC2Stop",
30+
"Effect": "Allow",
31+
"Action": "ec2:StopInstances",
32+
"Resource": "arn:aws:ec2:us-east-1:123456789012:instance/*"
33+
},
34+
{
35+
"Sid": "DynamoGet",
36+
"Effect": "Allow",
37+
"Action": "dynamodb:GetItem",
38+
"Resource": "arn:aws:dynamodb:us-east-1:123456789012:table/ExampleTable"
39+
},
40+
{
41+
"Sid": "DynamoPut",
42+
"Effect": "Allow",
43+
"Action": "dynamodb:PutItem",
44+
"Resource": "arn:aws:dynamodb:us-east-1:123456789012:table/ExampleTable"
45+
},
46+
{
47+
"Sid": "CloudWatchPut",
48+
"Effect": "Allow",
49+
"Action": "cloudwatch:PutMetricData",
50+
"Resource": "*"
51+
},
52+
{
53+
"Sid": "LogsCreateGroup",
54+
"Effect": "Allow",
55+
"Action": "logs:CreateLogGroup",
56+
"Resource": "*"
57+
},
58+
{
59+
"Sid": "LogsCreateStream",
60+
"Effect": "Allow",
61+
"Action": "logs:CreateLogStream",
62+
"Resource": "*"
63+
},
64+
{
65+
"Sid": "LogsPutEvents",
66+
"Effect": "Allow",
67+
"Action": "logs:PutLogEvents",
68+
"Resource": "arn:aws:logs:us-east-1:123456789012:log-group:/aws/lambda/example"
69+
},
70+
{
71+
"Sid": "SQSReceive",
72+
"Effect": "Allow",
73+
"Action": "sqs:ReceiveMessage",
74+
"Resource": "arn:aws:sqs:us-east-1:123456789012:ExampleQueue"
75+
},
76+
{
77+
"Sid": "SQSSend",
78+
"Effect": "Allow",
79+
"Action": "sqs:SendMessage",
80+
"Resource": "arn:aws:sqs:us-east-1:123456789012:ExampleQueue"
81+
},
82+
{
83+
"Sid": "SNSPublish",
84+
"Effect": "Allow",
85+
"Action": "sns:Publish",
86+
"Resource": "arn:aws:sns:us-east-1:123456789012:ExampleTopic"
87+
},
88+
{
89+
"Sid": "FakeServiceAccess1",
90+
"Effect": "Allow",
91+
"Action": "fakeservice:DoSomething",
92+
"Resource": "arn:aws:fakeservice:us-east-1:123456789012:fake-resource/123"
93+
},
94+
{
95+
"Sid": "FakeServiceAccess2",
96+
"Effect": "Allow",
97+
"Action": "fakeservice:DoSomethingElse",
98+
"Resource": "arn:aws:fakeservice:us-east-1:123456789012:fake-resource/456"
99+
},
100+
{
101+
"Sid": "LambdaInvoke",
102+
"Effect": "Allow",
103+
"Action": "lambda:InvokeFunction",
104+
"Resource": "arn:aws:lambda:us-east-1:123456789012:function:ExampleFunction"
105+
},
106+
{
107+
"Sid": "ECSList",
108+
"Effect": "Allow",
109+
"Action": "ecs:ListClusters",
110+
"Resource": "*"
111+
},
112+
{
113+
"Sid": "ECSDescribe",
114+
"Effect": "Allow",
115+
"Action": "ecs:DescribeTasks",
116+
"Resource": "*"
117+
},
118+
{
119+
"Sid": "SSMGetParam",
120+
"Effect": "Allow",
121+
"Action": "ssm:GetParameter",
122+
"Resource": "arn:aws:ssm:us-east-1:123456789012:parameter/ExampleParam"
123+
},
124+
{
125+
"Sid": "SecretsGet",
126+
"Effect": "Allow",
127+
"Action": "secretsmanager:GetSecretValue",
128+
"Resource": "arn:aws:secretsmanager:us-east-1:123456789012:secret:ExampleSecret"
129+
}
130+
]
131+
}

0 commit comments

Comments
 (0)