IAM / compute / lightsail

AWS Lightsail (IAM)

JSON →
AWSlightsailcompute

Amazon Lightsail is the easiest way to get started with AWS for developers, offering virtual private servers, storage, databases, and networking.

iamaws
docs ↗
Permissions
Actions in this service
lightsail:GetInstance
lightsail:GetInstances
lightsail:GetDisk
lightsail:GetDisks
lightsail:GetBuckets
lightsail:GetDomains
lightsail:GetStaticIps
lightsail:GetOperations
Policy
Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "lightsail:GetInstance", "lightsail:GetInstances", "lightsail:GetDisk", "lightsail:GetDisks", "lightsail:GetBuckets", "lightsail:GetDomains", "lightsail:GetStaticIps", "lightsail:GetOperations" ], "Resource": "*" } ] }
SDK mapping
Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns
Known gotchas
Avoid lightsail:* — grants full control including instance and disk deletion.
Avoid lightsail:DeleteInstance — can permanently remove a virtual server and its data.
Resources
docshttps://servicereference.us-east-1.amazonaws.com/v1/lightsail/lightsail.json ↗