Amazon CloudFront
(cloudfront)
IAM Changes
Services
2021-12-09
2021-12-09
7 new actions, 1 new resource | 31 updated actions
Additions
Actions
CreateResponseHeadersPolicy
Description:
Grants permission to add a new response headers policy to CloudFront
Access:
Write
Resources:
Name: response-headers-policy
Required: Yes
DeleteResponseHeadersPolicy
Description:
Grants permission to delete a response headers policy
Access:
Write
Resources:
Name: response-headers-policy
Required: Yes
GetResponseHeadersPolicy
Description:
Grants permission to get the response headers policy
Access:
Read
Resources:
Name: response-headers-policy
Required: Yes
GetResponseHeadersPolicyConfig
Description:
Grants permission to get the response headers policy configuration
Access:
Read
Resources:
Name: response-headers-policy
Required: Yes
ListDistributionsByResponseHeadersPolicyId
Description:
Grants permission to list distribution IDs for distributions that have a cache behavior that's associated with the specified response headers policy
Access:
List
ListResponseHeadersPolicies
Description:
Grants permission to list all response headers policies that have been created in CloudFront for this account
Access:
List
UpdateResponseHeadersPolicy
Description:
Grants permission to update a response headers policy
Access:
Write
Resources:
Name: response-headers-policy
Required: Yes
Resources
response-headers-policy
Arn:
arn:${Partition}:cloudfront::${Account}:response-headers-policy/${Id}
Updates
Actions
CreateCachePolicy
Resources
+ cache-policy
CreateFieldLevelEncryptionConfig
Resources
+ field-level-encryption
CreateFieldLevelEncryptionProfile
Resources
+ field-level-encryption-profile
CreateFunction
Resources
+ function
CreateOriginRequestPolicy
Resources
+ origin-request-policy
CreateRealtimeLogConfig
Resources
+ realtime-log-config
DeleteCachePolicy
Resources
+ cache-policy
DeleteFieldLevelEncryptionConfig
Resources
+ field-level-encryption
DeleteFieldLevelEncryptionProfile
Resources
+ field-level-encryption-profile
DeleteFunction
Resources
+ function
DeleteOriginRequestPolicy
Resources
+ origin-request-policy
DeleteRealtimeLogConfig
Resources
+ realtime-log-config
DescribeFunction
Resources
+ function
GetCachePolicy
Resources
+ cache-policy
GetCachePolicyConfig
Resources
+ cache-policy
GetFieldLevelEncryption
Resources
+ field-level-encryption
GetFieldLevelEncryptionConfig
Resources
+ field-level-encryption
GetFieldLevelEncryptionProfile
Resources
+ field-level-encryption-profile
GetFieldLevelEncryptionProfileConfig
Resources
+ field-level-encryption-profile
GetFunction
Resources
+ function
GetOriginRequestPolicy
Resources
+ origin-request-policy
GetOriginRequestPolicyConfig
Resources
+ origin-request-policy
GetRealtimeLogConfig
Resources
+ realtime-log-config
PublishFunction
Resources
+ function
TestFunction
Resources
+ function
UpdateCachePolicy
Resources
+ cache-policy
UpdateFieldLevelEncryptionConfig
Resources
+ field-level-encryption
UpdateFieldLevelEncryptionProfile
Resources
+ field-level-encryption-profile
UpdateFunction
Resources
+ function
UpdateOriginRequestPolicy
Resources
+ origin-request-policy
UpdateRealtimeLogConfig
Resources
+ realtime-log-config