AWS Chalice所需的AWS IAM策略

Question

AWS Chalice要求的IAM角色策略是什么。

Github中没有官方文档吗？

运行AWS Chalice需要哪些权限？

Answer 1

截至2020年7月9日，Github上没有正式文档，并且有Open issue on documentation regarding IAM。

所需的权限是

1. API网关
2. IAM
3. Lambda

对我有用的政策

{
"Version": "2012-10-17",
"Statement": [
    {
        "Sid": "Stmt1471020565000",
        "Effect": "Allow",
        "Action": [
            "iam:AttachRolePolicy",
            "iam:DeleteRolePolicy",
            "iam:DetachRolePolicy",
            "iam:CreateRole",
            "iam:PutRolePolicy",
            "iam:GetRole",
            "iam:PassRole"
        ],
        "Resource": [
            "*"
        ]
    },
    {
        "Sid": "Stmt1471020565001",
        "Effect": "Allow",
        "Action": [
            "apigateway:GET",
            "apigateway:HEAD",
            "apigateway:POST"
        ],
        "Resource": [
            "arn:aws:apigateway:ap-south-1::/restapis",
            "arn:aws:apigateway:ap-south-1::/restapis/*/resources",
            "arn:aws:apigateway:ap-south-1::/restapis/*/resources/*"
        ]
    },
    {
        "Sid": "Stmt1471020565002",
        "Effect": "Allow",
        "Action": [
            "apigateway:DELETE"
        ],
        "Resource": [
            "arn:aws:apigateway:ap-south-1::/restapis/*/resources/*"
        ]
    },
    {
        "Sid": "Stmt1471020565003",
        "Effect": "Allow",
        "Action": [
            "apigateway:POST"
        ],
        "Resource": [
            "arn:aws:apigateway:ap-south-1::/restapis/*/deployments",
            "arn:aws:apigateway:ap-south-1::/restapis/*/resources/*"
        ]
    },
    {
        "Sid": "Stmt1471020565004",
        "Effect": "Allow",
        "Action": [
            "apigateway:PUT"
        ],
        "Resource": [
            "arn:aws:apigateway:ap-south-1::/restapis/*/methods/GET",
            "arn:aws:apigateway:ap-south-1::/restapis/*/methods/GET/*",
            "arn:aws:apigateway:ap-south-1::/restapis/*/methods/POST",
            "arn:aws:apigateway:ap-south-1::/restapis/*/methods/POST/*",
            "arn:aws:apigateway:ap-south-1::/restapis/*/methods/PUT",
            "arn:aws:apigateway:ap-south-1::/restapis/*/methods/PUT/*"
        ]
    },
    {
        "Sid": "Stmt1471020565005",
        "Effect": "Allow",
        "Action": [
            "apigateway:PATCH"
        ],
        "Resource": [
            "arn:aws:apigateway:ap-south-1::/restapis/*"
        ]
    },
    {
        "Effect": "Allow",
        "Action": "lambda:*",
        "Resource": "*"
    }
]
}