IAM / devops / codecommit

AWS CodeCommit (IAM)

JSON →
AWScodecommitdevops

AWS CodeCommit is a fully-managed source control service that hosts secure Git-based repositories.

iamaws
docs ↗
Permissions
Actions in this service
codecommit:GetBranch
codecommit:GetCommit
codecommit:GetFile
codecommit:PutFile
codecommit:CreateBranch
codecommit:ListBranches
codecommit:GetRepository
codecommit:ListRepositories
Policy
Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "codecommit:GetBranch", "codecommit:GetCommit", "codecommit:GetFile", "codecommit:PutFile", "codecommit:CreateBranch", "codecommit:ListBranches", "codecommit:GetRepository", "codecommit:ListRepositories" ], "Resource": "*" } ] }
SDK mapping
Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns
Known gotchas
Avoid codecommit:* — grants full control including delete and modify of repositories and branches
Avoid codecommit:DeleteRepository unless explicitly needed for repository cleanup
Resources
docshttps://servicereference.us-east-1.amazonaws.com/v1/codecommit/codecommit.json ↗