Permissions for deploying Data Gateway in AWS
Ensure that you have the following permissions to deploy and delete the Data Gateway in Amazon Web Services (AWS).
You need the following permissions on S3 deployment bucket.
s3:ListBucket
s3:GetObject
s3:PutObject
Table: Permissions to deploy and delete the Data Gateway in AWS
Service name | Deployment permissions | Delete permissions |
|---|---|---|
Lambda | lambda:CreateFunction lambda:AddPermission lambda:CreateAlias lambda:GetFunction lambda:GetFunctionConfiguration lambda:InvokeFunction lambda:ListVersionsByFunction lambda:PublishVersion lambda:CreateEventSourceMapping lambda:GetEventSourceMapping lambda:ListAliases lambda:ListEventSourceMappings lambda:ListFunctions lambda:UpdateEventSourceMapping | lambda:DeleteFunction lambda:RemovePermission lambda:DeleteAlias |
S3 | s3:CreateBucket s3:PutBucketNotification s3:GetBucketPolicyStatus s3:GetBucketPolicy | s3:DeleteBucket s3:DeleteBucketPolicy |
IAM | iam:CreateRole iam:CreatePolicy iam:PutRolePolicy iam:GetRole iam:PassRole | iam:DeleteRole iam:DeletePolicy iam:DeleteRolePolicy |
SQS | sqs:CreateQueue sqs:GetQueueAttributes sqs:SetQueueAttributes | sqs:DeleteQueue |
API gateway | apigateway:PATCH apigateway:GET apigateway:PUT apigateway:POST | apigateway:DELETE |
DynamoDB | dynamodb:CreateTable dynamodb:DescribeTable dynamodb:PutItem | dynamodb:DeleteTable dynamodb:DeleteItem |
events | events:DescribeRule events:PutRule events:PutTargets | events:RemoveTargets events:DeleteRule |
sns | sns:ListTopics sns:CreateTopic sns:SetTopicAttributes sns:Subscribe | sns:DeleteTopic sns:GetTopicAttributes |
cloudwatch | cloudwatch:PutMetricAlarm | cloudwatch:DeleteAlarms |
Cloudformation | cloudformation:GetTemplateSummary cloudformation:ListStacks cloudformation:CreateStack cloudformation:DescribeStackEvents cloudformation:DescribeStacks cloudformation:updateStack | cloudformation:DeleteStack |
Application Autoscaling | application-autoscaling:PutScalingPolicy application-autoscaling:RegisterScalableTarget application-autoscaling:DescribeScalableTargets application-autoscaling:DescribeScalingPolicies | application-autoscaling:DeleteScalingPolicy application-autoscaling:DeregisterScalableTarget application-autoscaling:DescribeScalableTargets application-autoscaling:DescribeScalingPolicies |
States | states:CreateStateMachine states:DescribeStateMachine states:DescribeStateMachineForExecution states:ListStateMachines states:UpdateStateMachine | states:DeleteStateMachine states:DescribeStateMachine states:ListStateMachines |
More Information