glue-read.yml

mode: crud
name: 'glue-read'

read:
- arn:aws:glue:*:*:catalog
- arn:aws:glue:*:*:database/*
- arn:aws:glue:*:*:table/*
- arn:aws:glue:*:*:tableVersion/*
- arn:aws:glue:*:*:connection/*
- arn:aws:glue:*:*:userDefinedFunction/*
- arn:aws:glue:*:*:devEndpoint/*
- arn:aws:glue:*:*:job/*
- arn:aws:glue:*:*:trigger/*
- arn:aws:glue:*:*:crawler/*
- arn:aws:glue:*:*:workflow/*
- arn:aws:glue:*:*:mlTransform/*
- arn:aws:glue:*:*:registry/*
- arn:aws:glue:*:*:schema/*

list:
- arn:aws:glue:*:*:catalog
- arn:aws:glue:*:*:database/*
- arn:aws:glue:*:*:table/*
- arn:aws:glue:*:*:tableVersion/*
- arn:aws:glue:*:*:connection/*
- arn:aws:glue:*:*:userDefinedFunction/*
- arn:aws:glue:*:*:devEndpoint/*
- arn:aws:glue:*:*:job/*
- arn:aws:glue:*:*:trigger/*
- arn:aws:glue:*:*:crawler/*
- arn:aws:glue:*:*:workflow/*
- arn:aws:glue:*:*:mlTransform/*
- arn:aws:glue:*:*:registry/*
- arn:aws:glue:*:*:schema/*

tagging:
- arn:aws:glue:*:*:catalog
- arn:aws:glue:*:*:database/demo_*
- arn:aws:glue:*:*:table/demo_*/*
- arn:aws:glue:*:*:tableVersion/demo_*
- arn:aws:glue:*:*:connection/demo_*
- arn:aws:glue:*:*:userDefinedFunction/demo_*
- arn:aws:glue:*:*:devEndpoint/demo_*
- arn:aws:glue:*:*:job/demo_*
- arn:aws:glue:*:*:trigger/demo_*
- arn:aws:glue:*:*:crawler/demo_*
- arn:aws:glue:*:*:workflow/demo_*
- arn:aws:glue:*:*:mlTransform/demo_*
- arn:aws:glue:*:*:registry/demo_*
- arn:aws:glue:*:*:schema/demo_*

# Actions that do not support resource constraints
wildcard-only:
  single-actions: # standalone actions
  - 'glue:ListSchemas'
  # Service-wide
  service-read:
  - 'glue'
  service-write:
  - ''
  service-list:
  - 'glue'
  service-tagging:
  - 'glue'
  service-permissions-management:
  - ''

# Skip resource constraint requirements by listing actions here.
skip-resource-constraints:
- ''
# Exclude actions from the output by specifying them here. Accepts wildcards, like kms:Delete*
exclude-actions:
- ''