Developer Tools: Operator policies
Source control, build, deploy, test and developer assistants.
18 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review. 3 are service-linked role policies, shown with permission data only.
Operator and limited (12)
- AIDevOpsOperatorAppAccessPolicyOperator
Provides access to use the AWS DevOps operator web app for an Agent Space.
- AmazonCodeGuruProfilerAgentAccessOperator
Provides access required by Amazon CodeGuru Profiler agent.
- AmazonCodeGuruReviewerFullAccessOperator
Grants full access to Amazon CodeGuru Reviewer and scoped access to required dependencies.
- AmazonCodeGuruSecurityFullAccessOperator
Provides full access to Amazon CodeGuru Security.
- AmazonCodeGuruSecurityScanAccessOperator
Provides access required for working with Amazon CodeGuru Security scans.
- AWSBugBustPlayerAccessOperator
This IAM policy grants users access to participate in AWS BugBust events
- AWSCloud9EnvironmentMemberOperator
Provides the ability to be invited into AWS Cloud9 shared development environments.
- AWSCloud9UserOperator
Provides permission to create AWS Cloud9 development environments and to manage owned environments.
- AWSCodeBuildDeveloperAccessOperator
Provides access to AWS CodeBuild via the AWS Management Console, but does not allow CodeBuild project administration. Also attach AmazonS3ReadOnlyAccess to provide access to download build artifacts.
- AWSCodeDeployDeployerAccessOperator
Provides access to register and deploy a revision.
- AWSCodePipelineApproverAccessOperator
Provides access to view and approve manual changes for all pipelines
- AWSCodePipelineCustomActionAccessOperator
Provides access for custom actions to poll for jobs details (including temporary credentials) and report status updates to AWS CodePipeline.
Service roles (3)
- AIDevOpsChannelAccessPolicyOperator
Provide access to chat and manage investigations through AWS DevOps Agent for your AgentSpaces
- AIDevOpsConstellationAccessPolicyOperator
Provides permissions required by the AWS DevOps Agent to coordinate with AgentSpaces connected through Agent Space Constellation.
- AmazonSageMakerServiceCatalogProductsEventsServiceRolePolicyOperator
Service role policy used by the AWS CloudWatch Events within the AWS ServiceCatalog provisioned products from Amazon SageMaker portfolio of products. Grants permissions to a subset of related services including CodePipeline and others.
Service-linked roles (3)
- AmazonCodeGuruReviewerServiceRolePolicyOperator
A service-linked role required for Amazon CodeGuru Reviewer to access resources on your behalf.
- AWSBugBustServiceRolePolicyOperator
Grants permissions to AWS BugBust to access resources on your behalf
- AWSCodeStarNotificationsServiceRolePolicyOperator
Allows AWS CodeStar Notifications to access Amazon CloudWatch Events on your behalf
Also relevant to Developer Tools (10)
- AmazonSageMakerAdmin-ServiceCatalogProductsServiceRolePolicyOperator
Service role policy used by the AWS service Catalog service to provision products from Amazon SageMaker portfolio of products. Grants permissions to a set of related services including CodePipeline, CodeBuild, CodeCommit, Glue, CloudFormati…
- AmazonSageMakerServiceCatalogProductsCodePipelineServiceRolePolicyOperator
Service role policy used by the AWS CodePipeline within the AWS ServiceCatalog provisioned products from Amazon SageMaker portfolio of products. Grants permissions to a subset of related services including CodePipeline, CodeBuild and others…
- AWSManagementConsoleBasicUserAccessOperator
Grants access to essential AWS Management Console features and user experience (UX) capabilities for non-administrative users.
- AWSMobileHub_FullAccessOperator
This policy may be attached to any User, Role, or Group, in order to grant users permission to create, delete, and modify projects (and their associated AWS resources) in AWS Mobile Hub. This also includes permissions to generate and downlo…
- AWSProtonCodeBuildProvisioningServiceRolePolicyOperator
Allows AWS Proton to manage Proton resource provisioning using CodeBuild and other AWS services on your behalf.
- AWSProtonDeveloperAccessOperator
Provides access to the AWS Proton APIs and Management Console, but does not allow administration of Proton templates or environments.
- AWSProtonSyncServiceRolePolicyOperator
Policy which allows AWS Proton to sync your git repository contents to Proton or sync Proton contents to your git repositories.
- AWSServiceCatalogSyncServiceRolePolicyOperator
A Service Linked Role for AWS ServiceCatalog to sync Provisioning Artifacts from source repositories
- AWSServiceRoleForCodeWhispererPolicyOperator
This role grants permissions to CodeWhisperer to access data in your account to calculate billing, provides access to create and access security reports in Amazon CodeGuru, and emit data to CloudWatch.
- SageMakerStudioProjectUserRolePolicyOperator
Amazon SageMaker Studio creates IAM roles for projects users to perform data analytics, artificial intelligence, and machine learning actions, and uses this policy when creating these roles to define the permissions.