Sage-Bionetworks/Interactome — pull request #34 by NJLucyk (2014-03-01 02:29:45+00:00)
Title: Changed role used to a better named one

The policy on the new role is this:
{
"Version": "2012-10-17",
"Statement": [
{
"Action": [
"dynamodb:GetItem",
"dynamodb:BatchGetItem",
"dynamodb:Query",
"dynamodb:Scan",
"dynamodb:DescribeTable",
"dynamodb:ListTables",
"dynamodb:PutItem",
"dynamodb:BatchPutItem",
"dynamodb:UpdateItem",
"s3:Get*",
"s3:List*"
],
"Effect": "Allow",
"Resource": [
"arn:aws:dynamodb:us-west-2:005837367462:table/*",
"arn:aws:s3:::sagebionetworks-interactome-abstracts"
]
},
{
"Effect":"Allow",
"Action":"sns:Publish",
"Resource":[
"arn:aws:sns:us-west-2:005837367462:abstracts_disliked",
"arn:aws:sns:us-west-2:005837367462:abstracts_liked",
"arn:aws:sns:us-west-2:005837367462:abstracts_req"
]
}
]
}

The policy could probably be written to be less wordy (Batch* and stuff) but oh well.

Basically to read the policy, action is what you can do on the resources. So if you add a new sns topic for the interactome to use, you will need to add it to this resource list.