Skip to content

Commit

Permalink
Sort IAM policies alphabetically
Browse files Browse the repository at this point in the history
Signed-off-by: Phil Ewels <[email protected]>
  • Loading branch information
ewels committed Nov 19, 2024
1 parent f261384 commit 3a89a75
Showing 1 changed file with 16 additions and 16 deletions.
32 changes: 16 additions & 16 deletions docs/aws.md
Original file line number Diff line number Diff line change
Expand Up @@ -46,54 +46,54 @@ Minimal permissions policies to be attached to the AWS account used by Nextflow
- To use AWS Batch:

```json
"batch:DescribeJobQueues"
"batch:CancelJob"
"batch:SubmitJob"
"batch:ListJobs"
"batch:DescribeComputeEnvironments"
"batch:TerminateJob"
"batch:DescribeJobDefinitions"
"batch:DescribeJobQueues"
"batch:DescribeJobs"
"batch:ListJobs"
"batch:RegisterJobDefinition"
"batch:DescribeJobDefinitions"
"batch:SubmitJob"
"batch:TagResource"
"batch:TerminateJob"
```

- To view [EC2](https://aws.amazon.com/ec2/) instances:

```json
"ecs:DescribeTasks"
"ec2:DescribeInstanceAttribute"
"ec2:DescribeInstances"
"ec2:DescribeInstanceStatus"
"ec2:DescribeInstanceTypes"
"ec2:DescribeInstanceAttribute"
"ecs:DescribeContainerInstances"
"ec2:DescribeInstanceStatus"
"ecs:DescribeTasks"
```

- To pull container images from [ECR](https://aws.amazon.com/ecr/) repositories:

```json
"ecr:GetAuthorizationToken"
"ecr:BatchCheckLayerAvailability"
"ecr:GetDownloadUrlForLayer"
"ecr:GetRepositoryPolicy"
"ecr:DescribeRepositories"
"ecr:ListImages"
"ecr:DescribeImages"
"ecr:BatchGetImage"
"ecr:DescribeImages"
"ecr:DescribeImageScanFindings"
"ecr:DescribeRepositories"
"ecr:GetAuthorizationToken"
"ecr:GetDownloadUrlForLayer"
"ecr:GetLifecyclePolicy"
"ecr:GetLifecyclePolicyPreview"
"ecr:GetRepositoryPolicy"
"ecr:ListImages"
"ecr:ListTagsForResource"
"ecr:DescribeImageScanFindings"
```

:::{note}
If you are running Fargate or Fargate Spot, you may need the following policies in addition to the listed above:
```json
"ec2:DescribeSubnets"
"ecs:CreateCluster"
"ecs:DeleteCluster"
"ecs:DescribeClusters"
"ecs:ListClusters"
"ec2:DescribeSubnets"
```
:::

Expand Down

0 comments on commit 3a89a75

Please sign in to comment.