기계 번역으로 제공되는 번역입니다. 제공된 번역과 원본 영어의 내용이 상충하는 경우에는 영어 버전이 우선합니다.
# AWSPanoramaServiceRolePolicy
**설명**: AWS Panorama가 Amazon S3, AWS IoT, AWS IoT GreenGrass, AWS Lambda, Amazon SageMaker 및 Amazon CloudWatch Logs의 리소스를 관리하고 서비스 역할을 AWS IoT, AWS IoT GreenGrass 및 Amazon SageMaker에 전달할 수 있도록 허용합니다.
`AWSPanoramaServiceRolePolicy`은(는) [AWS 관리형 정책](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_managed-vs-inline.html#aws-managed-policies)입니다.
## 이 정책 사용
사용자, 그룹 및 역할에 `AWSPanoramaServiceRolePolicy`를 연결할 수 있습니다.
## 정책 세부 정보
+ **유형**: 서비스 역할 정책
+ **생성 시간**: 2020년 12월 1일, 13:14 UTC
+ **편집된 시간:** 2020년 12월 1일, 13:14 UTC
+ **ARN**: `arn:aws:iam::aws:policy/service-role/AWSPanoramaServiceRolePolicy`
## 정책 버전
**정책 버전:** v1(기본값)
정책의 기본 버전은 정책에 대한 권한을 정의하는 버전입니다. 정책이 있는 사용자 또는 역할이 AWS 리소스에 대한 액세스를 요청하면는 정책의 기본 버전을 AWS 확인하여 요청을 허용할지 여부를 결정합니다.
## JSON 정책 문서
```
{
"Version" : "2012-10-17",
"Statement" : [
{
"Sid" : "PanoramaIoTThingAccess",
"Effect" : "Allow",
"Action" : [
"iot:CreateThing",
"iot:DeleteThing",
"iot:DeleteThingShadow",
"iot:DescribeThing",
"iot:GetThingShadow",
"iot:UpdateThing",
"iot:UpdateThingShadow"
],
"Resource" : [
"arn:aws:iot:*:*:thing/panorama*"
]
},
{
"Sid" : "PanoramaIoTCertificateAccess",
"Effect" : "Allow",
"Action" : [
"iot:AttachThingPrincipal",
"iot:DetachThingPrincipal",
"iot:UpdateCertificate",
"iot:DeleteCertificate",
"iot:AttachPrincipalPolicy",
"iot:DetachPrincipalPolicy"
],
"Resource" : [
"arn:aws:iot:*:*:thing/panorama*",
"arn:aws:iot:*:*:cert/*"
]
},
{
"Sid" : "PanoramaIoTCreateCertificateAndPolicyAccess",
"Effect" : "Allow",
"Action" : [
"iot:CreateKeysAndCertificate",
"iot:CreatePolicy"
],
"Resource" : [
"*"
]
},
{
"Sid" : "PanoramaIoTCreatePolicyVersionAccess",
"Effect" : "Allow",
"Action" : [
"iot:CreatePolicyVersion"
],
"Resource" : [
"arn:aws:iot:*:*:policy/panorama*"
]
},
{
"Sid" : "PanoramaIoTJobAccess",
"Effect" : "Allow",
"Action" : [
"iot:DescribeJobExecution",
"iot:CreateJob",
"iot:DeleteJob"
],
"Resource" : [
"arn:aws:iot:*:*:job/panorama*",
"arn:aws:iot:*:*:thing/panorama*"
]
},
{
"Sid" : "PanoramaIoTEndpointAccess",
"Effect" : "Allow",
"Action" : [
"iot:DescribeEndpoint"
],
"Resource" : [
"*"
]
},
{
"Sid" : "PanoramaAccess",
"Effect" : "Allow",
"Action" : [
"panorama:Describe*",
"panorama:List*",
"panorama:Get*"
],
"Resource" : [
"*"
]
},
{
"Sid" : "PanoramaS3Access",
"Effect" : "Allow",
"Action" : [
"s3:GetObject",
"s3:PutObject",
"s3:DeleteObject",
"s3:DeleteBucket",
"s3:ListBucket",
"s3:GetBucket*",
"s3:CreateBucket"
],
"Resource" : [
"arn:aws:s3:::*aws-panorama*"
]
},
{
"Sid" : "PanoramaIAMPassSageMakerRoleAccess",
"Effect" : "Allow",
"Action" : [
"iam:PassRole"
],
"Resource" : [
"arn:aws:iam::*:role/AWSPanoramaSageMakerRole",
"arn:aws:iam::*:role/service-role/AWSPanoramaSageMakerRole"
],
"Condition" : {
"StringEquals" : {
"iam:PassedToService" : [
"sagemaker.amazonaws.com"
]
}
}
},
{
"Sid" : "PanoramaIAMPassGreengrassRoleAccess",
"Effect" : "Allow",
"Action" : [
"iam:PassRole"
],
"Resource" : [
"arn:aws:iam::*:role/AWSPanoramaGreengrassGroupRole",
"arn:aws:iam::*:role/service-role/AWSPanoramaGreengrassGroupRole",
"arn:aws:iam::*:role/AWSPanoramaGreengrassRole",
"arn:aws:iam::*:role/service-role/AWSPanoramaGreengrassRole"
],
"Condition" : {
"StringEquals" : {
"iam:PassedToService" : [
"greengrass.amazonaws.com"
]
}
}
},
{
"Sid" : "PanoramaIAMPassIoTRoleAccess",
"Effect" : "Allow",
"Action" : [
"iam:PassRole"
],
"Resource" : [
"arn:aws:iam::*:role/AWSPanoramaApplianceRole",
"arn:aws:iam::*:role/service-role/AWSPanoramaApplianceRole"
],
"Condition" : {
"StringEqualsIfExists" : {
"iam:PassedToService" : "iot.amazonaws.com"
}
}
},
{
"Sid" : "PanoramaGreenGrassAccess",
"Effect" : "Allow",
"Action" : [
"greengrass:AssociateRoleToGroup",
"greengrass:AssociateServiceRoleToAccount",
"greengrass:CreateResourceDefinition",
"greengrass:CreateResourceDefinitionVersion",
"greengrass:CreateCoreDefinition",
"greengrass:CreateCoreDefinitionVersion",
"greengrass:CreateDeployment",
"greengrass:CreateFunctionDefinition",
"greengrass:CreateFunctionDefinitionVersion",
"greengrass:CreateGroup",
"greengrass:CreateGroupCertificateAuthority",
"greengrass:CreateGroupVersion",
"greengrass:CreateLoggerDefinition",
"greengrass:CreateLoggerDefinitionVersion",
"greengrass:CreateSubscriptionDefinition",
"greengrass:CreateSubscriptionDefinitionVersion",
"greengrass:DeleteCoreDefinition",
"greengrass:DeleteFunctionDefinition",
"greengrass:DeleteResourceDefinition",
"greengrass:DeleteGroup",
"greengrass:DeleteLoggerDefinition",
"greengrass:DeleteSubscriptionDefinition",
"greengrass:DisassociateRoleFromGroup",
"greengrass:DisassociateServiceRoleFromAccount",
"greengrass:GetAssociatedRole",
"greengrass:GetConnectivityInfo",
"greengrass:GetCoreDefinition",
"greengrass:GetCoreDefinitionVersion",
"greengrass:GetDeploymentStatus",
"greengrass:GetDeviceDefinition",
"greengrass:GetDeviceDefinitionVersion",
"greengrass:GetFunctionDefinition",
"greengrass:GetFunctionDefinitionVersion",
"greengrass:GetGroup",
"greengrass:GetGroupCertificateAuthority",
"greengrass:GetGroupCertificateConfiguration",
"greengrass:GetGroupVersion",
"greengrass:GetLoggerDefinition",
"greengrass:GetLoggerDefinitionVersion",
"greengrass:GetResourceDefinition",
"greengrass:GetServiceRoleForAccount",
"greengrass:GetSubscriptionDefinition",
"greengrass:GetSubscriptionDefinitionVersion",
"greengrass:ListCoreDefinitionVersions",
"greengrass:ListCoreDefinitions",
"greengrass:ListDeployments",
"greengrass:ListDeviceDefinitionVersions",
"greengrass:ListDeviceDefinitions",
"greengrass:ListFunctionDefinitionVersions",
"greengrass:ListFunctionDefinitions",
"greengrass:ListGroupCertificateAuthorities",
"greengrass:ListGroupVersions",
"greengrass:ListGroups",
"greengrass:ListLoggerDefinitionVersions",
"greengrass:ListLoggerDefinitions",
"greengrass:ListSubscriptionDefinitionVersions",
"greengrass:ListSubscriptionDefinitions",
"greengrass:ResetDeployments",
"greengrass:UpdateConnectivityInfo",
"greengrass:UpdateCoreDefinition",
"greengrass:UpdateDeviceDefinition",
"greengrass:UpdateFunctionDefinition",
"greengrass:UpdateGroup",
"greengrass:UpdateGroupCertificateConfiguration",
"greengrass:UpdateLoggerDefinition",
"greengrass:UpdateSubscriptionDefinition",
"greengrass:UpdateResourceDefinition"
],
"Resource" : [
"*"
]
},
{
"Sid" : "PanoramaLambdaUsersFunctionAccess",
"Effect" : "Allow",
"Action" : [
"lambda:GetFunction",
"lambda:GetFunctionConfiguration",
"lambda:ListFunctions",
"lambda:ListVersionsByFunction"
],
"Resource" : [
"arn:aws:lambda:*:*:function:*"
]
},
{
"Sid" : "PanoramaSageMakerWriteAccess",
"Effect" : "Allow",
"Action" : [
"sagemaker:CreateTrainingJob",
"sagemaker:StopTrainingJob",
"sagemaker:CreateCompilationJob",
"sagemaker:DescribeCompilationJob",
"sagemaker:StopCompilationJob"
],
"Resource" : [
"arn:aws:sagemaker:*:*:training-job/panorama*",
"arn:aws:sagemaker:*:*:compilation-job/panorama*"
]
},
{
"Sid" : "PanoramaSageMakerListAccess",
"Effect" : "Allow",
"Action" : [
"sagemaker:ListCompilationJobs"
],
"Resource" : [
"*"
]
},
{
"Sid" : "PanoramaSageMakerReadAccess",
"Effect" : "Allow",
"Action" : [
"sagemaker:DescribeTrainingJob"
],
"Resource" : [
"arn:aws:sagemaker:*:*:training-job/*"
]
},
{
"Sid" : "PanoramaCWLogsAccess",
"Effect" : "Allow",
"Action" : [
"iot:AttachPolicy",
"iot:CreateRoleAlias"
],
"Resource" : [
"arn:aws:iot:*:*:policy/panorama*",
"arn:aws:iot:*:*:rolealias/panorama*"
]
}
]
}
```
## 자세히 알아보기
+ [IAM Identity Center에서 AWS 관리형 정책을 사용하여 권한 세트 생성](https://docs.aws.amazon.com/singlesignon/latest/userguide/howtocreatepermissionset.html)
+ [IAM 자격 증명 권한 추가 및 제거](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_manage-attach-detach.html)
+ [IAM 정책의 버전 관리 이해](https://docs.aws.amazon.com//IAM/latest/UserGuide/access_policies_managed-versioning.html)
+ [AWS 관리형 정책 시작하기 및 최소 권한으로 이동](https://docs.aws.amazon.com//IAM/latest/UserGuide/best-practices.html#bp-use-aws-defined-policies)