25 lines
684 B
JSON
25 lines
684 B
JSON
|
{
|
||
|
|
"Version": "2012-10-17",
|
||
|
|
"Statement": [
|
||
|
|
{
|
||
|
|
"Sid": "AllowOrgsReadOnlyAndIamGetReport",
|
||
|
|
"Effect": "Allow",
|
||
|
|
"Action": [
|
||
|
|
"iam:GetOrganizationsAccessReport",
|
||
|
|
"organizations:Describe*",
|
||
|
|
"organizations:List*"
|
||
|
|
],
|
||
|
|
"Resource": "*"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"Sid": "AllowGenerateReportOnlyForThePolicy",
|
||
|
|
"Effect": "Allow",
|
||
|
|
"Action": "iam:GenerateOrganizationsAccessReport",
|
||
|
|
"Resource": "*",
|
||
|
|
"Condition": {
|
||
|
|
"StringEquals": {"iam:OrganizationsPolicyId": "p-policy123"}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|