{

"Version": "2012-10-17",
"Statement": [
{
"Sid": "VisualEditor0",
"Effect": "Allow",
"Action": [
"glue:BatchCreatePartition",
"ecr:Describe*",
"transfer:TestIdentityProvider",
"glue:GetPartitions",
"logs:Describe*",
"glue:UpdateTable",
"ecs:StartTask",
"ecs:Get*",
"glue:DeleteTable",
"es:ListTags",
"cloudwatch:Describe*",
"logs:Start*",
"ecs:DescribeTaskDefinition",
"es:AddTags",
"ecs:UpdateService",
"appmesh:Get*",
"es:ESHttpHead",
"transfer:DescribeServer",
"transfer:DescribeUser",
"glue:GetUserDefinedFunction",
"ssm:DescribeParameters",
"ecs:RegisterTaskDefinition",
"elasticloadbalancing:Describe*",
"ecs:StopTask",
"glue:GetUserDefinedFunctions",
"es:Describe*",
"ecs:ListTaskDefinitions",
"ec2:Get*",
"glue:UpdateDatabase",
"transfer:StopServer",
"glue:CreateTable",
"glue:GetTables",
"transfer:ListServers",
"logs:Get*",
"glue:DeleteUserDefinedFunction",
"transfer:UpdateUser",
"es:RemoveTags",
"ecr:List*",
"glue:GetPartition",
"es:GetCompatibleElasticsearchVersions",
"transfer:ListUsers",
"es:ListElasticsearchInstanceTypes",
"glue:DeletePartition",
"es:ESHttpPut",
"transfer:UpdateServer",
"transfer:CreateUser",
"glue:BatchDeletePartition",
"transfer:StartServer",
"glue:CreateUserDefinedFunction",
"es:ESHttpDelete",
"appmesh:Describe*",
"ecs:ListServices",
 "logs:Stop*",
"ecs:RunTask",
"es:ESHttpPost",
"S3:*",
"logs:Test*",
"cloudwatch:Get*",
"transfer:ListTagsForResource",
"es:DescribeElasticsearchDomains",
"ecs:List*",
"glue:UpdatePartition",
"ecs:ListClusters",
"es:DescribeReservedElasticsearchInstanceOfferings",
"ecr:Get*",
"glue:UpdateUserDefinedFunction",
"ecs:Describe*",
"transfer:DeleteUser",
"es:ESHttpGet",
"transfer:TagResource",
"cloudwatch:List*",
"iam:ListRoles",
"glue:BatchGetPartition",
"glue:GetDatabases",
"glue:GetTable",
"transfer:UntagResource",
"glue:GetDatabase",
"es:DescribeReservedElasticsearchInstances",
"ecs:ListAccountSettings",
"es:ListDomainNames",
"ec2:Describe*",
"logs:Filter*",
"ecs:ListTaskDefinitionFamilies",
"appmesh:List*",
"es:GetUpgradeStatus",
"es:ListElasticsearchVersions"
],
"Resource": "*"
},
{
"Sid": "VisualEditor1",
"Effect": "Allow",
"Action": [
"ssm:PutParameter",
"ssm:DeleteParameter",
"ssm:GetParameterHistory",
"ssm:DescribeDocumentParameters",
"ssm:GetParametersByPath",
"ssm:GetParameters",
"ssm:GetParameter",
"ssm:DeleteParameters"
],
"Resource": "arn:aws:ssm:*:*:parameter/*"
},
{
"Sid": "ListAndDescribe",
"Effect": "Allow",
"Action": [
"dynamodb:List*",
"dynamodb:Describe*",
"dynamodb:Get*",
 "dynamodb:Query",
"dynamodb:BatchGet",
"dynamodb:Scan",
"dynamodb:DeleteItem",
"dynamodb:UpdateItem",
"dynamodb:PutItem"
],
"Resource": [
"*"
]
},
{
"Effect": "Allow",
"Action": [
"kms:*"
],
"Resource": [
"*"
]
},
{
"Effect": "Allow",
"Action": [
"elasticmapreduce:Describe*",
"elasticmapreduce:List*",
"elasticmapreduce:ViewEventsFromAllClustersInConsole",
"elasticmapreduce:CreateEditor",
"elasticmapreduce:StartEditor",
"elasticmapreduce:DeleteEditor",
"elasticmapreduce:SetTerminationProtection",
"sdb:Select",
"cloudwatch:GetMetricStatistics",
"ec2:TerminateInstances",
"ec2:RunInstances",
"ec2:Describe*",
"ec2:ModifyInstanceAttribute",
"ec2:RequestSpotInstances",
"elasticmapreduce:RunJobFlow",
"elasticmapreduce:TerminateJobFlows",
"elasticmapreduce:OpenEditorInConsole",
"elasticmapreduce:CancelSteps",
"elasticmapreduce:AddJobFlowSteps",
"elasticmapreduce:ViewEventsFromAllClustersInConsole",
"elasticmapreduce:StopEditor"
],
"Resource": "*"
}
]
}