IAM / devops / elasticbeanstalk

AWS Elastic Beanstalk (IAM)

JSON →
AWSelasticbeanstalkdevops

AWS Elastic Beanstalk is an easy-to-use service for deploying and scaling web applications and services developed with Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker.

iamaws
docs ↗
Permissions
Actions in this service
elasticbeanstalk:DescribeApplications
elasticbeanstalk:DescribeEnvironments
elasticbeanstalk:DescribeEvents
elasticbeanstalk:DescribeEnvironmentHealth
elasticbeanstalk:DescribeInstancesHealth
elasticbeanstalk:ListTagsForResource
elasticbeanstalk:DescribeApplicationVersions
elasticbeanstalk:DescribeConfigurationOptions
Policy
Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "elasticbeanstalk:DescribeApplications", "elasticbeanstalk:DescribeEnvironments", "elasticbeanstalk:DescribeEvents", "elasticbeanstalk:DescribeEnvironmentHealth", "elasticbeanstalk:DescribeInstancesHealth", "elasticbeanstalk:ListTagsForResource", "elasticbeanstalk:DescribeApplicationVersions", "elasticbeanstalk:DescribeConfigurationOptions" ], "Resource": "*" } ] }
SDK mapping
Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns
Known gotchas
Avoid elasticbeanstalk:* — grants full control including environment and application deletion.
Avoid elasticbeanstalk:DeleteApplication — can permanently remove an application and all its environments.
Resources
docshttps://servicereference.us-east-1.amazonaws.com/v1/elasticbeanstalk/elasticbeanstalk.json ↗