Proxylity

Role and Policy Template Generator

This page can be used to help with the process of creating IAM roles for use with Proxylity. Choose the options you'd like and the ouput format:

Trust Policy

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::874091625462:role/frontend-app-global-CustomerAccountAccessRole-kU2GZaWN1Ofw"
      },
      "Action": "sts:AssumeRole"
    },
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::874091625462:root"
      },
      "Action": "sts:AssumeRole",
      "Condition": {
        "StringEquals": {
          "sts:ExternalId": "a275635733d459f188a99adc9a12c519"
        }
      }
    },
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::874091625462:root"
      },
      "Action": "sts:AssumeRole",
      "Condition": {
        "StringLike": {
          "sts:ExternalId": "arn:aws:states:*:874091625462:stateMachine:ListDestinations-*"
        }
      }
    }
  ]
}

Permissions

  {
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "Lambda",
            "Effect": "Allow",
            "Action": [
                "lambda:InvokeFunction",
                "lambda:InvokeAsync"
            ],
            "Resource": [
                "arn:aws:lambda:us-west-2:303627368183:function:radius-authorize",
                "arn:aws:lambda:us-west-2:303627368183:function:radius-authorize:*"
            ]
        },
        {
            "Sid": "Firehose",
            "Effect": "Allow",
            "Action": [
                "firehose:PutRecord",
                "firehose:PutRecordBatch"
            ],
            "Resource": [
                "arn:aws:firehose:us-west-2:303627368183:deliverystream/logging"
            ]
        },
        {
            "Sid": "ListDestinations",
            "Effect": "Allow",
            "Action": [
                "lambda:ListFunctions",
                "states:ListStateMachines",
                "s3:ListAllMyBuckets",
                "dynamodb:ListTables",
                "firehose:ListDeliveryStreams",
                "logs:DescribeLogGroups",
                "SNS:ListTopics",
                "sqs:listqueues"
            ],
            "Resource": [
                "*"
            ]
        }
    ]
}