diff --git a/tests/translator/input/all_policy_templates.yaml b/tests/translator/input/all_policy_templates.yaml index b6d97bd814..47509c70ea 100644 --- a/tests/translator/input/all_policy_templates.yaml +++ b/tests/translator/input/all_policy_templates.yaml @@ -145,3 +145,9 @@ Resources: - StepFunctionsExecutionPolicy: StateMachineName: name + + - CodeCommitCrudPolicy: + RepositoryName: name + + - CodeCommitReadPolicy: + RepositoryName: name diff --git a/tests/translator/output/all_policy_templates.json b/tests/translator/output/all_policy_templates.json index 124d0b1d81..ba1fd00f49 100644 --- a/tests/translator/output/all_policy_templates.json +++ b/tests/translator/output/all_policy_templates.json @@ -1237,6 +1237,141 @@ } ] } + }, + { + "PolicyName": "KitchenSinkFunctionRolePolicy50", + "PolicyDocument": { + "Statement": [ + { + "Effect": "Allow", + "Action": [ + "codecommit:GitPull", + "codecommit:GitPush", + "codecommit:CreateBranch", + "codecommit:DeleteBranch", + "codecommit:GetBranch", + "codecommit:ListBranches", + "codecommit:MergeBranchesByFastForward", + "codecommit:MergeBranchesBySquash", + "codecommit:MergeBranchesByThreeWay", + "codecommit:UpdateDefaultBranch", + "codecommit:BatchDescribeMergeConflicts", + "codecommit:CreateUnreferencedMergeCommit", + "codecommit:DescribeMergeConflicts", + "codecommit:GetMergeCommit", + "codecommit:GetMergeOptions", + "codecommit:BatchGetPullRequests", + "codecommit:CreatePullRequest", + "codecommit:DescribePullRequestEvents", + "codecommit:GetCommentsForPullRequest", + "codecommit:GetCommitsFromMergeBase", + "codecommit:GetMergeConflicts", + "codecommit:GetPullRequest", + "codecommit:ListPullRequests", + "codecommit:MergePullRequestByFastForward", + "codecommit:MergePullRequestBySquash", + "codecommit:MergePullRequestByThreeWay", + "codecommit:PostCommentForPullRequest", + "codecommit:UpdatePullRequestDescription", + "codecommit:UpdatePullRequestStatus", + "codecommit:UpdatePullRequestTitle", + "codecommit:DeleteFile", + "codecommit:GetBlob", + "codecommit:GetFile", + "codecommit:GetFolder", + "codecommit:PutFile", + "codecommit:DeleteCommentContent", + "codecommit:GetComment", + "codecommit:GetCommentsForComparedCommit", + "codecommit:PostCommentForComparedCommit", + "codecommit:PostCommentReply", + "codecommit:UpdateComment", + "codecommit:BatchGetCommits", + "codecommit:CreateCommit", + "codecommit:GetCommit", + "codecommit:GetCommitHistory", + "codecommit:GetDifferences", + "codecommit:GetObjectIdentifier", + "codecommit:GetReferences", + "codecommit:GetTree", + "codecommit:GetRepository", + "codecommit:UpdateRepositoryDescription", + "codecommit:ListTagsForResource", + "codecommit:TagResource", + "codecommit:UntagResource", + "codecommit:GetRepositoryTriggers", + "codecommit:PutRepositoryTriggers", + "codecommit:TestRepositoryTriggers", + "codecommit:GetBranch", + "codecommit:GetCommit", + "codecommit:UploadArchive", + "codecommit:GetUploadArchiveStatus", + "codecommit:CancelUploadArchive" + ], + "Resource": { + "Fn::Sub": [ + "arn:${AWS::Partition}:codecommit:${AWS::Region}:${AWS::AccountId}:${repositoryName}", + { + "repositoryName": "name" + } + ] + } + } + ] + } + }, + { + "PolicyName": "KitchenSinkFunctionRolePolicy51", + "PolicyDocument": { + "Statement": [ + { + "Effect": "Allow", + "Action": [ + "codecommit:GitPull", + "codecommit:GetBranch", + "codecommit:ListBranches", + "codecommit:BatchDescribeMergeConflicts", + "codecommit:DescribeMergeConflicts", + "codecommit:GetMergeCommit", + "codecommit:GetMergeOptions", + "codecommit:BatchGetPullRequests", + "codecommit:DescribePullRequestEvents", + "codecommit:GetCommentsForPullRequest", + "codecommit:GetCommitsFromMergeBase", + "codecommit:GetMergeConflicts", + "codecommit:GetPullRequest", + "codecommit:ListPullRequests", + "codecommit:GetBlob", + "codecommit:GetFile", + "codecommit:GetFolder", + "codecommit:GetComment", + "codecommit:GetCommentsForComparedCommit", + "codecommit:BatchGetCommits", + "codecommit:GetCommit", + "codecommit:GetCommitHistory", + "codecommit:GetDifferences", + "codecommit:GetObjectIdentifier", + "codecommit:GetReferences", + "codecommit:GetTree", + "codecommit:GetRepository", + "codecommit:ListTagsForResource", + "codecommit:GetRepositoryTriggers", + "codecommit:TestRepositoryTriggers", + "codecommit:GetBranch", + "codecommit:GetCommit", + "codecommit:GetUploadArchiveStatus" + ], + "Resource": { + "Fn::Sub": [ + "arn:${AWS::Partition}:codecommit:${AWS::Region}:${AWS::AccountId}:${repositoryName}", + { + "repositoryName": "name" + } + ] + } + } + ] + } } ], "AssumeRolePolicyDocument": { diff --git a/tests/translator/output/aws-cn/all_policy_templates.json b/tests/translator/output/aws-cn/all_policy_templates.json index 077d08a214..36123aedfd 100644 --- a/tests/translator/output/aws-cn/all_policy_templates.json +++ b/tests/translator/output/aws-cn/all_policy_templates.json @@ -1236,6 +1236,141 @@ } ] } + }, + { + "PolicyName": "KitchenSinkFunctionRolePolicy50", + "PolicyDocument": { + "Statement": [ + { + "Effect": "Allow", + "Action": [ + "codecommit:GitPull", + "codecommit:GitPush", + "codecommit:CreateBranch", + "codecommit:DeleteBranch", + "codecommit:GetBranch", + "codecommit:ListBranches", + "codecommit:MergeBranchesByFastForward", + "codecommit:MergeBranchesBySquash", + "codecommit:MergeBranchesByThreeWay", + "codecommit:UpdateDefaultBranch", + "codecommit:BatchDescribeMergeConflicts", + "codecommit:CreateUnreferencedMergeCommit", + "codecommit:DescribeMergeConflicts", + "codecommit:GetMergeCommit", + "codecommit:GetMergeOptions", + "codecommit:BatchGetPullRequests", + "codecommit:CreatePullRequest", + "codecommit:DescribePullRequestEvents", + "codecommit:GetCommentsForPullRequest", + "codecommit:GetCommitsFromMergeBase", + "codecommit:GetMergeConflicts", + "codecommit:GetPullRequest", + "codecommit:ListPullRequests", + "codecommit:MergePullRequestByFastForward", + "codecommit:MergePullRequestBySquash", + "codecommit:MergePullRequestByThreeWay", + "codecommit:PostCommentForPullRequest", + "codecommit:UpdatePullRequestDescription", + "codecommit:UpdatePullRequestStatus", + "codecommit:UpdatePullRequestTitle", + "codecommit:DeleteFile", + "codecommit:GetBlob", + "codecommit:GetFile", + "codecommit:GetFolder", + "codecommit:PutFile", + "codecommit:DeleteCommentContent", + "codecommit:GetComment", + "codecommit:GetCommentsForComparedCommit", + "codecommit:PostCommentForComparedCommit", + "codecommit:PostCommentReply", + "codecommit:UpdateComment", + "codecommit:BatchGetCommits", + "codecommit:CreateCommit", + "codecommit:GetCommit", + "codecommit:GetCommitHistory", + "codecommit:GetDifferences", + "codecommit:GetObjectIdentifier", + "codecommit:GetReferences", + "codecommit:GetTree", + "codecommit:GetRepository", + "codecommit:UpdateRepositoryDescription", + "codecommit:ListTagsForResource", + "codecommit:TagResource", + "codecommit:UntagResource", + "codecommit:GetRepositoryTriggers", + "codecommit:PutRepositoryTriggers", + "codecommit:TestRepositoryTriggers", + "codecommit:GetBranch", + "codecommit:GetCommit", + "codecommit:UploadArchive", + "codecommit:GetUploadArchiveStatus", + "codecommit:CancelUploadArchive" + ], + "Resource": { + "Fn::Sub": [ + "arn:${AWS::Partition}:codecommit:${AWS::Region}:${AWS::AccountId}:${repositoryName}", + { + "repositoryName": "name" + } + ] + } + } + ] + } + }, + { + "PolicyName": "KitchenSinkFunctionRolePolicy51", + "PolicyDocument": { + "Statement": [ + { + "Effect": "Allow", + "Action": [ + "codecommit:GitPull", + "codecommit:GetBranch", + "codecommit:ListBranches", + "codecommit:BatchDescribeMergeConflicts", + "codecommit:DescribeMergeConflicts", + "codecommit:GetMergeCommit", + "codecommit:GetMergeOptions", + "codecommit:BatchGetPullRequests", + "codecommit:DescribePullRequestEvents", + "codecommit:GetCommentsForPullRequest", + "codecommit:GetCommitsFromMergeBase", + "codecommit:GetMergeConflicts", + "codecommit:GetPullRequest", + "codecommit:ListPullRequests", + "codecommit:GetBlob", + "codecommit:GetFile", + "codecommit:GetFolder", + "codecommit:GetComment", + "codecommit:GetCommentsForComparedCommit", + "codecommit:BatchGetCommits", + "codecommit:GetCommit", + "codecommit:GetCommitHistory", + "codecommit:GetDifferences", + "codecommit:GetObjectIdentifier", + "codecommit:GetReferences", + "codecommit:GetTree", + "codecommit:GetRepository", + "codecommit:ListTagsForResource", + "codecommit:GetRepositoryTriggers", + "codecommit:TestRepositoryTriggers", + "codecommit:GetBranch", + "codecommit:GetCommit", + "codecommit:GetUploadArchiveStatus" + ], + "Resource": { + "Fn::Sub": [ + "arn:${AWS::Partition}:codecommit:${AWS::Region}:${AWS::AccountId}:${repositoryName}", + { + "repositoryName": "name" + } + ] + } + } + ] + } } ], "AssumeRolePolicyDocument": { diff --git a/tests/translator/output/aws-us-gov/all_policy_templates.json b/tests/translator/output/aws-us-gov/all_policy_templates.json index b1162b2f1e..256e76cc72 100644 --- a/tests/translator/output/aws-us-gov/all_policy_templates.json +++ b/tests/translator/output/aws-us-gov/all_policy_templates.json @@ -1237,6 +1237,141 @@ } ] } + }, + { + "PolicyName": "KitchenSinkFunctionRolePolicy50", + "PolicyDocument": { + "Statement": [ + { + "Effect": "Allow", + "Action": [ + "codecommit:GitPull", + "codecommit:GitPush", + "codecommit:CreateBranch", + "codecommit:DeleteBranch", + "codecommit:GetBranch", + "codecommit:ListBranches", + "codecommit:MergeBranchesByFastForward", + "codecommit:MergeBranchesBySquash", + "codecommit:MergeBranchesByThreeWay", + "codecommit:UpdateDefaultBranch", + "codecommit:BatchDescribeMergeConflicts", + "codecommit:CreateUnreferencedMergeCommit", + "codecommit:DescribeMergeConflicts", + "codecommit:GetMergeCommit", + "codecommit:GetMergeOptions", + "codecommit:BatchGetPullRequests", + "codecommit:CreatePullRequest", + "codecommit:DescribePullRequestEvents", + "codecommit:GetCommentsForPullRequest", + "codecommit:GetCommitsFromMergeBase", + "codecommit:GetMergeConflicts", + "codecommit:GetPullRequest", + "codecommit:ListPullRequests", + "codecommit:MergePullRequestByFastForward", + "codecommit:MergePullRequestBySquash", + "codecommit:MergePullRequestByThreeWay", + "codecommit:PostCommentForPullRequest", + "codecommit:UpdatePullRequestDescription", + "codecommit:UpdatePullRequestStatus", + "codecommit:UpdatePullRequestTitle", + "codecommit:DeleteFile", + "codecommit:GetBlob", + "codecommit:GetFile", + "codecommit:GetFolder", + "codecommit:PutFile", + "codecommit:DeleteCommentContent", + "codecommit:GetComment", + "codecommit:GetCommentsForComparedCommit", + "codecommit:PostCommentForComparedCommit", + "codecommit:PostCommentReply", + "codecommit:UpdateComment", + "codecommit:BatchGetCommits", + "codecommit:CreateCommit", + "codecommit:GetCommit", + "codecommit:GetCommitHistory", + "codecommit:GetDifferences", + "codecommit:GetObjectIdentifier", + "codecommit:GetReferences", + "codecommit:GetTree", + "codecommit:GetRepository", + "codecommit:UpdateRepositoryDescription", + "codecommit:ListTagsForResource", + "codecommit:TagResource", + "codecommit:UntagResource", + "codecommit:GetRepositoryTriggers", + "codecommit:PutRepositoryTriggers", + "codecommit:TestRepositoryTriggers", + "codecommit:GetBranch", + "codecommit:GetCommit", + "codecommit:UploadArchive", + "codecommit:GetUploadArchiveStatus", + "codecommit:CancelUploadArchive" + ], + "Resource": { + "Fn::Sub": [ + "arn:${AWS::Partition}:codecommit:${AWS::Region}:${AWS::AccountId}:${repositoryName}", + { + "repositoryName": "name" + } + ] + } + } + ] + } + }, + { + "PolicyName": "KitchenSinkFunctionRolePolicy51", + "PolicyDocument": { + "Statement": [ + { + "Effect": "Allow", + "Action": [ + "codecommit:GitPull", + "codecommit:GetBranch", + "codecommit:ListBranches", + "codecommit:BatchDescribeMergeConflicts", + "codecommit:DescribeMergeConflicts", + "codecommit:GetMergeCommit", + "codecommit:GetMergeOptions", + "codecommit:BatchGetPullRequests", + "codecommit:DescribePullRequestEvents", + "codecommit:GetCommentsForPullRequest", + "codecommit:GetCommitsFromMergeBase", + "codecommit:GetMergeConflicts", + "codecommit:GetPullRequest", + "codecommit:ListPullRequests", + "codecommit:GetBlob", + "codecommit:GetFile", + "codecommit:GetFolder", + "codecommit:GetComment", + "codecommit:GetCommentsForComparedCommit", + "codecommit:BatchGetCommits", + "codecommit:GetCommit", + "codecommit:GetCommitHistory", + "codecommit:GetDifferences", + "codecommit:GetObjectIdentifier", + "codecommit:GetReferences", + "codecommit:GetTree", + "codecommit:GetRepository", + "codecommit:ListTagsForResource", + "codecommit:GetRepositoryTriggers", + "codecommit:TestRepositoryTriggers", + "codecommit:GetBranch", + "codecommit:GetCommit", + "codecommit:GetUploadArchiveStatus" + ], + "Resource": { + "Fn::Sub": [ + "arn:${AWS::Partition}:codecommit:${AWS::Region}:${AWS::AccountId}:${repositoryName}", + { + "repositoryName": "name" + } + ] + } + } + ] + } } ], "AssumeRolePolicyDocument": {