Permissions for @turbot/aws-directconnect
Taking a look at permissions and associated grant levels for each permission for Direct Connect:
| Permission | Grant Level | Help |
|---|---|---|
| directconnect:AllocateConnectionOnInterconnect | Admin | Admins can manage interconnects. |
| directconnect:AllocateHostedConnection | Admin | Admins can manage hosted connections. |
| directconnect:AllocatePrivateVirtualInterface | Admin | Admins can manage virtual interfaces. |
| directconnect:AllocatePublicVirtualInterface | Admin | Admins can manage virtual interfaces. |
| directconnect:AssociateConnectionWithLag | Admin | Admins can manage link aggregation groups (LAGs). |
| directconnect:AssociateHostedConnection | Admin | Admins can manage hosted connections. |
| directconnect:AssociateVirtualInterface | Admin | Admins can manage virtual interfaces. |
| directconnect:ConfirmConnection | Admin | Admins can manage connections. |
| directconnect:ConfirmPrivateVirtualInterface | Admin | Admins can manage virtual interfaces. |
| directconnect:ConfirmPublicVirtualInterface | Admin | Admins can manage virtual interfaces. |
| directconnect:CreateBGPPeer | Admin | Admins can manage virtual interfaces. |
| directconnect:CreateConnection | Admin | Admins can manage connections. |
| directconnect:CreateDirectConnectGateway | Admin | Admins can manage direct connect gateway. |
| directconnect:CreateDirectConnectGatewayAssociation | Admin | Admins can manage direct connect gateway. |
| directconnect:CreateInterconnect | Admin | Admins can manage interconnects. |
| directconnect:CreateLag | Admin | Admins can manage link aggregation groups (LAGs). |
| directconnect:CreatePrivateVirtualInterface | Admin | Admins can manage virtual interfaces. |
| directconnect:CreatePublicVirtualInterface | Admin | Admins can manage virtual interfaces. |
| directconnect:DeleteBGPPeer | Admin | Admins can manage virtual interfaces. |
| directconnect:DeleteConnection | Admin | Admins can manage connections. |
| directconnect:DeleteDirectConnectGateway | Admin | Admins can manage direct connect gateway. |
| directconnect:DeleteDirectConnectGatewayAssociation | Admin | Admins can manage direct connect gateway. |
| directconnect:DeleteInterconnect | Admin | Admins can manage interconnects. |
| directconnect:DeleteLag | Admin | Admins can manage link aggregation groups (LAGs). |
| directconnect:DeleteVirtualInterface | Admin | Admins can manage virtual interfaces. |
| directconnect:DescribeConnectionLoa | Admin | Retrival of LOA-CFAs restricted to admins. |
| directconnect:DescribeConnections | Metadata | |
| directconnect:DescribeConnectionsOnInterconnect | Metadata | |
| directconnect:DescribeDirectConnectGatewayAssociations | Metadata | List of all direct connect gateway and virtual private gateway (VGW) associations. |
| directconnect:DescribeDirectConnectGatewayAttachments | Metadata | List of all direct connect gateway and virtual interface (VIF) attachments. |
| directconnect:DescribeDirectConnectGateways | Metadata | |
| directconnect:DescribeHostedConnections | Metadata | |
| directconnect:DescribeInterconnectLoa | Admin | Deprecated in favor of DescribeLoa but included to simplify policy document. |
| directconnect:DescribeInterconnects | Metadata | |
| directconnect:DescribeLags | Metadata | |
| directconnect:DescribeLoa | Admin | Retrival of LOA-CFAs restricted to admins. |
| directconnect:DescribeLocations | Metadata | |
| directconnect:DescribeTags | Metadata | |
| directconnect:DescribeVirtualGateways | Metadata | |
| directconnect:DescribeVirtualInterfaces | Metadata | |
| directconnect:DisassociateConnectionFromLag | Admin | Admins can manage link aggregation groups (LAGs). |
| directconnect:TagResource | Operator | |
| directconnect:UntagResource | Operator | |
| directconnect:UpdateDirectConnectGateway | Admin | |
| directconnect:UpdateLag | Admin | Admins can manage link aggregation groups (LAGs). |
| directconnect:UpdateVirtualInterfaceAttributes | Admin | |
| ec2:DescribeVpnGateways | Metadata | Required for accepting virtual interfaces. |