APIGatewayServiceRolePolicy.json

{
  "Arn": "arn:aws:iam::aws:policy/aws-service-role/APIGatewayServiceRolePolicy",
  "CreateDate": "2017-10-20T17:23:10Z",
  "DefaultVersionId": "v8",
  "IsAttachable": true,
  "Path": "/aws-service-role/",
  "PolicyId": "ANPAJQQDZNLDBF2ULTWK6",
  "PolicyName": "APIGatewayServiceRolePolicy",
  "PolicyVersion": {
    "CreateDate": "2020-02-25T20:24:49Z",
    "Document": {
      "Statement": [
        {
          "Action": "ec2:CreateTags",
          "Condition": {
            "ForAllValues:StringEquals": {
              "aws:TagKeys": [
                "Owner",
                "VpcLinkId"
              ]
            }
          },
          "Effect": "Allow",
          "Resource": "arn:aws:ec2:*:*:network-interface/*"
        },
        {
          "Action": "ec2:CreateNetworkInterfacePermission",
          "Effect": "Allow",
          "Resource": "arn:aws:ec2:*:*:network-interface/*"
        },
        {
          "Action": "servicediscovery:GetNamespace",
          "Effect": "Allow",
          "Resource": "arn:aws:servicediscovery:*:*:namespace/*"
        },
        {
          "Action": "servicediscovery:GetService",
          "Effect": "Allow",
          "Resource": "arn:aws:servicediscovery:*:*:service/*"
        },
        {
          "Action": [
            "acm:DescribeCertificate"
          ],
          "Effect": "Allow",
          "Resource": "arn:aws:acm:*:*:certificate/*"
        },
        {
          "Action": [
            "ec2:AssignPrivateIpAddresses",
            "ec2:CreateNetworkInterface",
            "ec2:DeleteNetworkInterface",
            "ec2:DeleteNetworkInterfacePermission",
            "ec2:DescribeAvailabilityZones",
            "ec2:DescribeNetworkInterfaceAttribute",
            "ec2:DescribeNetworkInterfacePermissions",
            "ec2:DescribeNetworkInterfaces",
            "ec2:DescribeRouteTables",
            "ec2:DescribeSecurityGroups",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs",
            "ec2:ModifyNetworkInterfaceAttribute",
            "ec2:UnassignPrivateIpAddresses"
          ],
          "Effect": "Allow",
          "Resource": "*"
        },
        {
          "Action": [
            "elasticloadbalancing:AddListenerCertificates",
            "elasticloadbalancing:DescribeListeners",
            "elasticloadbalancing:DescribeLoadBalancers",
            "elasticloadbalancing:ModifyListener",
            "elasticloadbalancing:RemoveListenerCertificates",
            "logs:CreateLogDelivery",
            "logs:DeleteLogDelivery",
            "logs:GetLogDelivery",
            "logs:ListLogDeliveries",
            "logs:UpdateLogDelivery",
            "servicediscovery:DiscoverInstances",
            "xray:GetSamplingRules",
            "xray:GetSamplingTargets",
            "xray:PutTelemetryRecords",
            "xray:PutTraceSegments"
          ],
          "Effect": "Allow",
          "Resource": [
            "*"
          ]
        },
        {
          "Action": [
            "firehose:DescribeDeliveryStream",
            "firehose:PutRecord",
            "firehose:PutRecordBatch"
          ],
          "Effect": "Allow",
          "Resource": "arn:aws:firehose:*:*:deliverystream/amazon-apigateway-*"
        }
      ],
      "Version": "2012-10-17"
    },
    "IsDefaultVersion": true,
    "VersionId": "v8"
  },
  "UpdateDate": "2020-02-25T20:24:49Z"
}