Permissions for @turbot/aws-efs
Taking a look at permissions and associated grant levels for each permission for EFS:
Permission | Grant Level | Help |
---|---|---|
elasticfilesystem:Backup | Admin | |
elasticfilesystem:ClientMount | Admin | |
elasticfilesystem:ClientRootAccess | Admin | |
elasticfilesystem:ClientWrite | Admin | |
elasticfilesystem:CreateAccessPoint | Admin | |
elasticfilesystem:CreateFileSystem | Admin | |
elasticfilesystem:CreateMountTarget | Admin | |
elasticfilesystem:CreateReplicationConfiguration | Admin | |
elasticfilesystem:CreateTags | Operator | Operators can manage tagging and modifying existing file systems. |
elasticfilesystem:DeleteAccessPoint | Admin | |
elasticfilesystem:DeleteFileSystem | Admin | |
elasticfilesystem:DeleteFileSystemPolicy | Admin | |
elasticfilesystem:DeleteMountTarget | Admin | |
elasticfilesystem:DeleteReplicationConfiguration | Admin | |
elasticfilesystem:DeleteTags | Operator | Operators can manage tagging and modifying existing file systems. |
elasticfilesystem:DescribeAccessPoints | Metadata | |
elasticfilesystem:DescribeAccountPreferences | Metadata | |
elasticfilesystem:DescribeBackupPolicy | Metadata | |
elasticfilesystem:DescribeFileSystemPolicy | Metadata | |
elasticfilesystem:DescribeFileSystems | Metadata | |
elasticfilesystem:DescribeLifecycleConfiguration | Metadata | |
elasticfilesystem:DescribeMountTargetSecurityGroups | Metadata | |
elasticfilesystem:DescribeMountTargets | Metadata | |
elasticfilesystem:DescribeReplicationConfigurations | Metadata | |
elasticfilesystem:DescribeTags | Metadata | |
elasticfilesystem:ListTagsForResource | Metadata | |
elasticfilesystem:ModifyMountTargetSecurityGroups | Operator | Operators can manage tagging and modifying existing file systems. |
elasticfilesystem:PutAccountPreferences | Admin | |
elasticfilesystem:PutBackupPolicy | Admin | |
elasticfilesystem:PutFileSystemPolicy | Admin | |
elasticfilesystem:PutLifecycleConfiguration | Admin | |
elasticfilesystem:Restore | Admin | |
elasticfilesystem:TagResource | Operator | |
elasticfilesystem:UntagResource | Operator | |
elasticfilesystem:UpdateFileSystem | Admin |