IAM / devops / codedeploy

AWS CodeDeploy (IAM)

JSON →
AWScodedeploydevops

AWS CodeDeploy automates code deployments to any instance, including Amazon EC2 instances and on-premises servers.

iamaws
docs ↗
Permissions
Actions in this service
codedeploy:ListApplications
codedeploy:GetApplication
codedeploy:CreateDeployment
codedeploy:GetDeployment
codedeploy:ListDeployments
codedeploy:GetDeploymentGroup
codedeploy:ListDeploymentGroups
codedeploy:StopDeployment
Policy
Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "codedeploy:ListApplications", "codedeploy:GetApplication", "codedeploy:CreateDeployment", "codedeploy:GetDeployment", "codedeploy:ListDeployments", "codedeploy:GetDeploymentGroup", "codedeploy:ListDeploymentGroups", "codedeploy:StopDeployment" ], "Resource": "*" } ] }
SDK mapping
Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns
Known gotchas
Avoid codedeploy:* — grants full control including delete and modify of applications and deployment groups
Avoid codedeploy:DeleteApplication and codedeploy:DeleteDeploymentGroup unless explicitly needed for cleanup
Resources
docshttps://servicereference.us-east-1.amazonaws.com/v1/codedeploy/codedeploy.json ↗