Merge pull request #2187 from udondan/update-aws-managed-policies

Author: udondan

docs/source/_static/managed-policies/AIDevOpsAgentAccessPolicy.json

@@ -183,8 +183,33 @@
         "codeartifact:List*",
         "codebuild:BatchGetFleets",
         "codebuild:List*",
+        "codecommit:BatchDescribe*",
+        "codecommit:BatchGet*",
+        "codecommit:Describe*",
+        "codecommit:EvaluatePullRequestApprovalRules",
+        "codecommit:GetApprovalRuleTemplate",
+        "codecommit:GetBranch",
+        "codecommit:GetComment",
+        "codecommit:GetCommentReactions",
+        "codecommit:GetCommentsForComparedCommit",
+        "codecommit:GetCommentsForPullRequest",
+        "codecommit:GetCommit",
+        "codecommit:GetCommitHistory",
+        "codecommit:GetCommitsFromMergeBase",
+        "codecommit:GetDifferences",
+        "codecommit:GetMergeCommit",
+        "codecommit:GetMergeConflicts",
+        "codecommit:GetMergeOptions",
+        "codecommit:GetObjectIdentifier",
+        "codecommit:GetPullRequest",
+        "codecommit:GetPullRequestApprovalStates",
+        "codecommit:GetPullRequestOverrideState",
+        "codecommit:GetReferences",
         "codecommit:GetRepository",
         "codecommit:GetRepositoryTriggers",
+        "codecommit:GetTree",
+        "codecommit:GetUploadArchiveStatus",
+        "codecommit:List*",
         "codedeploy:BatchGetDeployments",
         "codedeploy:BatchGetDeploymentTargets",
         "codedeploy:GetApplication",
@@ -231,8 +256,10 @@
         "comprehend:Describe*",
         "comprehend:List*",
         "config:Describe*",
+        "config:GetAggregateResourceConfig",
         "config:GetStoredQuery",
         "config:List*",
+        "config:SelectAggregateResourceConfig",
         "connect:Describe*",
         "connect:GetTaskTemplate",
         "connect:List*",
@@ -377,6 +404,7 @@
         "glue:GetJobBookmark",
         "glue:GetJobRun",
         "glue:GetJobRuns",
+        "glue:getPartition",
         "glue:GetPartitions",
         "glue:GetRegistry",
         "glue:GetResourcePolicy",
@@ -502,13 +530,19 @@
         "kinesisanalytics:Describe*",
         "kinesisanalytics:List*",
         "kinesisvideo:Describe*",
+        "kms:DescribeCustomKeyStores",
         "kms:DescribeKey",
-        "kms:ListResourceTags",
-        "kms:ListKeys",
         "kms:GetKeyPolicy",
         "kms:GetKeyRotationStatus",
+        "kms:GetParametersForImport",
+        "kms:GetPublicKey",
         "kms:ListAliases",
+        "kms:ListGrants",
+        "kms:ListKeyPolicies",
         "kms:ListKeyRotations",
+        "kms:ListKeys",
+        "kms:ListResourceTags",
+        "kms:ListRetirableGrants",
         "lakeformation:Describe*",
         "lakeformation:GetLFTag",
         "lakeformation:GetResourceLFTags",

docs/source/_static/managed-policies/AWSMarketplaceSellerFullAccess.json

@@ -108,6 +108,7 @@
         "aws-marketplace-management:PutAdditionalSellerNotificationRecipients",
         "payments:GetPaymentInstrument",
         "payments:CreatePaymentInstrument",
+        "payments:DeletePaymentInstrument",
         "tax:GetTaxInterview",
         "tax:PutTaxInterview",
         "tax:GetTaxInfoReportingDocument",

docs/source/_static/managed-policies/AWSServiceCatalogAppRegistryFullAccess.json

@@ -15,6 +15,25 @@
         }
       }
     },
+    {
+      "Sid": "CloudFormationTagOnCreate",
+      "Effect": "Allow",
+      "Action": [
+        "cloudformation:TagResource",
+        "cloudformation:UntagResource"
+      ],
+      "Resource": "*",
+      "Condition": {
+        "ForAnyValue:StringEquals": {
+          "aws:CalledVia": "servicecatalog-appregistry.amazonaws.com"
+        },
+        "StringEquals": {
+          "cloudformation:CreateAction": [
+            "UpdateStack"
+          ]
+        }
+      }
+    },
     {
       "Sid": "AppRegistryResourceGroupsIntegration",
       "Effect": "Allow",