IAM / devops / codepipeline

AWS CodePipeline (IAM)

JSON →
AWScodepipelinedevops

AWS CodePipeline is a fully managed continuous delivery service that helps you automate your release pipelines.

iamaws
docs ↗
Permissions
Actions in this service
codepipeline:ListPipelines
codepipeline:GetPipeline
codepipeline:GetPipelineState
codepipeline:StartPipelineExecution
codepipeline:StopPipelineExecution
codepipeline:GetPipelineExecution
codepipeline:ListActionExecutions
codepipeline:ListPipelineExecutions
Policy
Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "codepipeline:ListPipelines", "codepipeline:GetPipeline", "codepipeline:GetPipelineState", "codepipeline:StartPipelineExecution", "codepipeline:StopPipelineExecution", "codepipeline:GetPipelineExecution", "codepipeline:ListActionExecutions", "codepipeline:ListPipelineExecutions" ], "Resource": "*" } ] }
SDK mapping
Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns
Known gotchas
Avoid codepipeline:* — grants full control including pipeline deletion and configuration changes
Avoid codepipeline:DeletePipeline and codepipeline:UpdatePipeline — can break continuous delivery workflows
Resources
docshttps://servicereference.us-east-1.amazonaws.com/v1/codepipeline/codepipeline.json ↗