AWS permissions
AWS managed policies you need to assign to user for make CloudExplorer works.
| Service | Read Policy | Write Policy |
|---|---|---|
| Login | - | |
| Cloud Explorer | - | |
| S3 | AmazonS3ReadOnlyAccess | AmazonS3FullAccess |
| Redshift | AmazonRedshiftReadOnlyAccess | AmazonRedshiftFullAccess |
| RDS | AmazonRDSReadOnlyAccess | AmazonRDSFullAccess |
| DynamoDB | AmazonDynamoDBReadOnlyAccess | AmazonDynamoDBFullAccess |
| DocumentDB | AmazonDocDBReadOnlyAccess | AmazonDocDBFullAccess |
| Keyspaces | AmazonKeyspacesReadOnlyAccess | AmazonKeyspacesFullAccess |
| Athena | "lakeformation:Describe", "lakeformation:Get", "lakeformation:List", "sns:ListTopics", "sns:GetTopicAttributes", "s3:Describe", "s3:Get", "s3:List", "s3:Put", "glue:Get", "glue:List", "glue:BatchGet", "athena:List", "athena:Get", "athena:Batch*", "athena:StartQueryExecution", "athena:StopQueryExecution" |
AmazonAthenaFullAccess |
| Redis | AmazonElastiCacheReadOnlyAccess | AmazonElastiCacheFullAccess |
| SSO |