Add CodeConnections policy

PRX · Sep 19, 2024 · 716d590 · 716d590
1 parent 33c2891
commit 716d590
Showing 1 changed file with 17 additions and 0 deletions.
diff --git a/ci/template.yml b/ci/template.yml
@@ -101,6 +101,23 @@ Resources:
                 Effect: Allow
                 Resource: "*" # TODO
             Version: "2012-10-17"
+        - PolicyName: CodeConnectionsUse
+          PolicyDocument:
+            Statement:
+              - Action:
+                  # Likely includes actions that aren't needed, I made this up -CPK
+                  - codeconnections:GetConnectionToken
+                  - codeconnections:GetRepositoryLink
+                  - codeconnections:ListConnections
+                  - codeconnections:GetInstallationUrl
+                  - codeconnections:GetConnection
+                  - codeconnections:PassConnection
+                  - codeconnections:GetIndividualAccessToken
+                  - codeconnections:PassRepository
+                  - codeconnections:UseConnection
+                Effect: Allow
+                Resource: "*"
+            Version: "2012-10-17"
       Tags:
         - { Key: prx:meta:tagging-version, Value: "2021-04-07" }
         - { Key: prx:cloudformation:stack-name, Value: !Ref AWS::StackName }