IAM / networking / vpc-lattice

Amazon VPC Lattice (IAM)

JSON →
AWSvpc-latticenetworking

Amazon VPC Lattice is a fully managed application networking service that connects, monitors, and secures communications between your services.

iamaws
docs ↗
Permissions
Actions in this service
vpc-lattice:GetService
vpc-lattice:ListServices
vpc-lattice:CreateService
vpc-lattice:GetListener
vpc-lattice:ListListeners
vpc-lattice:GetTargetGroup
vpc-lattice:ListTargetGroups
vpc-lattice:ListTargets
Policy
Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "vpc-lattice:GetService", "vpc-lattice:ListServices", "vpc-lattice:CreateService", "vpc-lattice:GetListener", "vpc-lattice:ListListeners", "vpc-lattice:GetTargetGroup", "vpc-lattice:ListTargetGroups", "vpc-lattice:ListTargets" ], "Resource": "*" } ] }
SDK mapping
Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns
Known gotchas
Avoid vpc-lattice:* — grants full control including delete/modify of services, listeners, and target groups
Avoid vpc-lattice:PutAuthPolicy — can overwrite auth policies, potentially exposing services
Resources
docshttps://servicereference.us-east-1.amazonaws.com/v1/vpc-lattice/vpc-lattice.json ↗