AWS CodeStar Service Role是用于AWS CodeStar项目中的服务角色。如果在描述中标记了“DO NOT USE”,则意味着不应该使用该角色创建任何新的CodeStar项目。 可以使用其他AWS IAM角色来代替CodeStar Service Role,具体取决于需要为项目执行哪些任务。以下是一个示例,使用具有所需权限的自定义IAM角色来创建CodeStar项目:
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"codecommit:CreateRepository",
"codecommit:DeleteRepository",
"codecommit:ListRepositories",
"codecommit:BatchGetRepositories",
"codecommit:GetRepository",
"codecommit:CreateBranch",
"codecommit:DeleteBranch",
"codecommit:GetBranch",
"codecommit:ListBranches",
"codecommit:MergeBranchesByFastForward",
"codecommit:MergeBranchesBySquash",
"codecommit:MergeBranchesByThreeWay",
"codecommit:UpdateDefaultBranch",
"codecommit:GetMergeConflicts",
"codecommit:BatchDescribeMergeConflicts",
"codecommit:CompleteMerge",
"codecommit:CancelUploadArchive",
"codecommit:GetUploadArchiveStatus",
"codecommit:UploadArchive"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"cloudformation:*"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"iam:GetRole",
"iam:PassRole"
],
"Resource": "arn:aws:iam::123456789012:role/MyCustomRole"
},
{
"Effect": "Allow",
"Action": [
"s3:*"
],
"Resource": [
"arn:aws:s3:::my-bucket/*",
"arn:aws:s3:::