기계 번역으로 제공되는 번역입니다. 제공된 번역과 원본 영어의 내용이 상충하는 경우에는 영어 버전이 우선합니다.
# AWSRefactoringToolkitFullAccess
**설명**:이 정책은 Microsoft Visual Studio용 AWS Toolkit for .NET 리팩터링 확장과 함께 AWS 서비스를 사용할 수 있는 권한을 부여합니다. 로컬 AWS 프로필에 연결하기 위한 것입니다. 이 정책은 Amazon S3에 애플리케이션 아티팩트를 업로드하고 Amazon S3에서 결과 아티팩트를 다운로드할 수 있도록 허용합니다. 이를 통해 AWS CodeBuild를 사용하여 컨테이너 이미지로 애플리케이션을 구축하고 Amazon Elastic Container Registry(Amazon ECR)에서 이미지를 저장하고 검색할 수 있습니다. 또한 Amazon Elastic Container Service(Amazon ECS), VPC 리소스의 선택적 생성, AWS 디렉터리 서비스와 AWS 같은 기존 인프라에 대한 선택적 연결 및 기타 관련 서비스와 같은의 컨테이너 서비스에 애플리케이션을 배포할 수 있습니다.
`AWSRefactoringToolkitFullAccess`은(는) [AWS 관리형 정책](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_managed-vs-inline.html#aws-managed-policies)입니다.
## 이 정책 사용
사용자, 그룹 및 역할에 `AWSRefactoringToolkitFullAccess`를 연결할 수 있습니다.
## 정책 세부 정보
+ **Type**: AWS managed 정책
+ **생성 시간**: 2022년 10월 25일, 16:41 UTC
+ **편집된 시간:** 2026년 2월 12일, 17:57 UTC
+ **ARN**: `arn:aws:iam::aws:policy/AWSRefactoringToolkitFullAccess`
## 정책 버전
**정책 버전:** v8(기본값)
정책의 기본 버전은 정책에 대한 권한을 정의하는 버전입니다. 정책이 있는 사용자 또는 역할이 AWS 리소스에 대한 액세스를 요청하면는 정책의 기본 버전을 AWS 확인하여 요청을 허용할지 여부를 결정합니다.
## JSON 정책 문서
```
{
"Version" : "2012-10-17",
"Statement" : [
{
"Effect" : "Allow",
"Action" : [
"a2c:GetContainerizationJobDetails",
"a2c:GetDeploymentJobDetails",
"a2c:StartContainerizationJob",
"a2c:StartDeploymentJob"
],
"Resource" : "*"
},
{
"Effect" : "Allow",
"Action" : [
"cloudformation:CreateChangeSet",
"cloudformation:CreateStack",
"cloudformation:DescribeChangeSet",
"cloudformation:DescribeStackEvents",
"cloudformation:ExecuteChangeSet",
"cloudformation:UpdateStack",
"cloudformation:TagResource",
"cloudformation:UntagResource"
],
"Resource" : [
"arn:*:cloudformation:*:*:stack/a2c-app-*",
"arn:*:cloudformation:*:*:stack/a2c-build-*",
"arn:*:cloudformation:*:*:stack/application-transformation-app-*"
]
},
{
"Effect" : "Allow",
"Action" : [
"codebuild:CreateProject",
"codebuild:UpdateProject"
],
"Resource" : "arn:aws:codebuild:*:*:project/*",
"Condition" : {
"Null" : {
"aws:RequestTag/a2c-generated" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"codebuild:StartBuild"
],
"Resource" : "arn:aws:codebuild:*:*:project/*"
},
{
"Effect" : "Allow",
"Action" : [
"ec2:CreateSecurityGroup"
],
"Resource" : "*"
},
{
"Effect" : "Allow",
"Action" : [
"ec2:CreateInternetGateway",
"ec2:CreateKeyPair",
"ec2:CreateRoute",
"ec2:CreateRouteTable",
"ec2:CreateSubnet",
"ec2:CreateVpc",
"ec2:AuthorizeSecurityGroupIngress"
],
"Resource" : "*",
"Condition" : {
"Null" : {
"aws:RequestTag/a2c-generated" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ec2:CreateInternetGateway",
"ec2:CreateKeyPair",
"ec2:CreateRoute",
"ec2:CreateRouteTable",
"ec2:CreateSubnet",
"ec2:CreateVpc",
"ec2:AuthorizeSecurityGroupIngress"
],
"Resource" : "*",
"Condition" : {
"Null" : {
"aws:RequestTag/application-transformation" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ec2:CreateTags"
],
"Resource" : "arn:aws:ec2:*:*:security-group/*",
"Condition" : {
"ForAnyValue:StringEquals" : {
"aws:CalledVia" : [
"application-transformation.amazonaws.com"
]
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ec2:CreateTags"
],
"Resource" : "*",
"Condition" : {
"StringEquals" : {
"ec2:CreateAction" : [
"AuthorizeSecurityGroupIngress",
"CreateInternetGateway",
"CreateKeyPair",
"CreateRoute",
"CreateRouteTable",
"CreateSubnet",
"CreateVpc"
]
},
"Null" : {
"aws:RequestTag/application-transformation" : "false"
},
"ForAnyValue:StringEquals" : {
"aws:CalledVia" : [
"application-transformation.amazonaws.com"
]
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ec2:AssociateRouteTable",
"ec2:AttachInternetGateway",
"ec2:AuthorizeSecurityGroupIngress",
"ec2:DeleteTags",
"ec2:ModifySubnetAttribute",
"ec2:ModifyVpcAttribute",
"ec2:RevokeSecurityGroupIngress",
"ec2:CreateSubnet",
"ec2:CreateRoute",
"ec2:CreateRouteTable"
],
"Resource" : "*",
"Condition" : {
"Null" : {
"aws:ResourceTag/a2c-generated" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ec2:AssociateRouteTable",
"ec2:AttachInternetGateway",
"ec2:AuthorizeSecurityGroupIngress",
"ec2:DeleteTags",
"ec2:ModifySubnetAttribute",
"ec2:ModifyVpcAttribute",
"ec2:RevokeSecurityGroupIngress",
"ec2:CreateSubnet",
"ec2:CreateRoute",
"ec2:CreateRouteTable"
],
"Resource" : "*",
"Condition" : {
"Null" : {
"aws:ResourceTag/application-transformation" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ecr:CreateRepository",
"ecr:TagResource"
],
"Resource" : "arn:*:ecr:*:*:repository/*",
"Condition" : {
"Null" : {
"aws:RequestTag/a2c-generated" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ecr:CreateRepository",
"ecr:TagResource"
],
"Resource" : "arn:*:ecr:*:*:repository/*",
"Condition" : {
"Null" : {
"aws:RequestTag/application-transformation" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ecr:GetLifecyclePolicy",
"ecr:GetRepositoryPolicy",
"ecr:ListImages",
"ecr:ListTagsForResource",
"ecr:TagResource",
"ecr:UntagResource"
],
"Resource" : "arn:*:ecr:*:*:repository/*",
"Condition" : {
"Null" : {
"aws:ResourceTag/a2c-generated" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ecr:GetLifecyclePolicy",
"ecr:GetRepositoryPolicy",
"ecr:ListImages",
"ecr:ListTagsForResource",
"ecr:TagResource",
"ecr:UntagResource"
],
"Resource" : "arn:*:ecr:*:*:repository/*",
"Condition" : {
"Null" : {
"aws:ResourceTag/application-transformation" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ecs:CreateCluster",
"ecs:CreateService",
"ecs:RegisterTaskDefinition",
"ecs:TagResource"
],
"Resource" : "*",
"Condition" : {
"Null" : {
"aws:RequestTag/a2c-generated" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ecs:CreateCluster",
"ecs:CreateService",
"ecs:RegisterTaskDefinition",
"ecs:TagResource"
],
"Resource" : "*",
"Condition" : {
"Null" : {
"aws:RequestTag/application-transformation" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ecs:UpdateService",
"ecs:TagResource",
"ecs:UntagResource"
],
"Resource" : "*",
"Condition" : {
"Null" : {
"aws:ResourceTag/a2c-generated" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ecs:UpdateService",
"ecs:TagResource",
"ecs:UntagResource"
],
"Resource" : "*",
"Condition" : {
"Null" : {
"aws:ResourceTag/application-transformation" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ecs:DescribeTaskDefinition"
],
"Resource" : "*",
"Condition" : {
"ForAnyValue:StringEquals" : {
"aws:CalledVia" : "cloudformation.amazonaws.com"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ecs:ExecuteCommand"
],
"Resource" : "*",
"Condition" : {
"StringLike" : {
"ecs:container-name" : "a2c-sidecar"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ecs:ExecuteCommand"
],
"Resource" : "*",
"Condition" : {
"StringLike" : {
"ecs:container-name" : "application-transformation-sidecar"
}
}
},
{
"Effect" : "Allow",
"Action" : "iam:CreateServiceLinkedRole",
"Resource" : "arn:aws:iam::*:role/aws-service-role/ecs.amazonaws.com/AWSServiceRoleForECS",
"Condition" : {
"StringLike" : {
"iam:AWSServiceName" : "ecs.amazonaws.com"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"logs:CreateLogGroup",
"logs:TagResource"
],
"Resource" : [
"arn:aws:logs:*:*:log-group:/aws/codebuild/*:*",
"arn:aws:logs:*:*:log-group:/aws/ecs/containerinsights/*:*",
"arn:aws:logs:*:*:log-group:/aws/ecs/container-logs/*:*"
],
"Condition" : {
"Null" : {
"aws:RequestTag/a2c-generated" : "false"
},
"ForAllValues:StringEquals" : {
"aws:TagKeys" : [
"a2c-generated"
]
}
}
},
{
"Effect" : "Allow",
"Action" : [
"logs:CreateLogGroup",
"logs:TagResource"
],
"Resource" : [
"arn:aws:logs:*:*:log-group:/aws/ecs/containerinsights/*:*",
"arn:aws:logs:*:*:log-group:/aws/ecs/container-logs/*:*"
],
"Condition" : {
"Null" : {
"aws:RequestTag/application-transformation" : "false"
},
"ForAllValues:StringEquals" : {
"aws:TagKeys" : [
"application-transformation"
]
}
}
},
{
"Effect" : "Allow",
"Action" : [
"logs:GetLogEvents"
],
"Resource" : [
"arn:aws:logs:*:*:log-group:/aws/codebuild/*:*",
"arn:aws:logs:*:*:log-group:/aws/ecs/containerinsights/*:*",
"arn:aws:logs:*:*:log-group:/aws/ecs/container-logs/*:*"
],
"Condition" : {
"Null" : {
"aws:ResourceTag/a2c-generated" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"logs:GetLogEvents"
],
"Resource" : [
"arn:aws:logs:*:*:log-group:/aws/ecs/containerinsights/*:*",
"arn:aws:logs:*:*:log-group:/aws/ecs/container-logs/*:*"
],
"Condition" : {
"Null" : {
"aws:ResourceTag/application-transformation" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ssm:AddTagsToResource",
"ssm:GetParameters",
"ssm:PutParameter",
"ssm:RemoveTagsFromResource"
],
"Resource" : "arn:aws:ssm:*:*:parameter/a2c-generated-check-ecs-slr-*"
},
{
"Effect" : "Allow",
"Action" : [
"ssm:DescribeSessions",
"ssmmessages:CreateControlChannel",
"ssmmessages:CreateDataChannel",
"ssmmessages:OpenControlChannel",
"ssmmessages:OpenDataChannel"
],
"Resource" : "*"
},
{
"Effect" : "Allow",
"Action" : [
"s3:DeleteObject",
"s3:GetObject",
"s3:PutObject"
],
"Resource" : [
"arn:aws:s3:::*/refactoringtoolkit*",
"arn:aws:s3:::*/a2c-generated*",
"arn:aws:s3:::*/application-transformation*"
]
},
{
"Effect" : "Allow",
"Action" : [
"s3:ListBucket"
],
"Resource" : "arn:aws:s3:::*",
"Condition" : {
"StringLike" : {
"s3:prefix" : [
"application-transformation",
"refactoringtoolkit"
]
}
}
},
{
"Effect" : "Allow",
"Action" : [
"cloudformation:DescribeStacks",
"cloudformation:ListStacks",
"clouddirectory:ListDirectories",
"codebuild:BatchGetProjects",
"codebuild:BatchGetBuilds",
"ds:DescribeDirectories",
"ec2:DescribeAccountAttributes",
"ec2:DescribeAvailabilityZones",
"ec2:DescribeImages",
"ec2:DescribeInternetGateways",
"ec2:DescribeKeyPairs",
"ec2:DescribeNetworkInterfaces",
"ec2:DescribeRouteTables",
"ec2:DescribeSecurityGroups",
"ec2:DescribeSubnets",
"ec2:DescribeVpcs",
"ec2:DescribeRegions",
"ecr:DescribeImages",
"ecr:DescribeRepositories",
"ecs:DescribeClusters",
"ecs:DescribeServices",
"ecs:DescribeTasks",
"ecs:ListTagsForResource",
"ecs:ListTasks",
"iam:ListRoles",
"s3:GetBucketLocation",
"s3:GetBucketVersioning",
"s3:ListAllMyBuckets",
"secretsmanager:ListSecrets"
],
"Resource" : "*"
},
{
"Effect" : "Allow",
"Action" : "iam:GetRole",
"Resource" : "arn:aws:iam::*:role/aws-service-role/ecs.amazonaws.com/AWSServiceRoleForECS"
},
{
"Effect" : "Allow",
"Action" : [
"s3:GetObject"
],
"Resource" : [
"arn:aws:s3:::aws.portingassistant.dotnet.datastore",
"arn:aws:s3:::aws.portingassistant.dotnet.datastore/*"
]
},
{
"Effect" : "Allow",
"Action" : [
"application-transformation:StartPortingCompatibilityAssessment",
"application-transformation:GetPortingCompatibilityAssessment",
"application-transformation:StartPortingRecommendationAssessment",
"application-transformation:GetPortingRecommendationAssessment",
"application-transformation:PutLogData",
"application-transformation:PutMetricData",
"application-transformation:StartContainerization",
"application-transformation:GetContainerization",
"application-transformation:StartDeployment",
"application-transformation:GetDeployment"
],
"Resource" : "*"
},
{
"Effect" : "Allow",
"Action" : [
"kms:Decrypt",
"kms:Encrypt",
"kms:DescribeKey",
"kms:GenerateDataKey"
],
"Resource" : "arn:aws:kms:*::*",
"Condition" : {
"ForAnyValue:StringLike" : {
"kms:ResourceAliases" : "alias/application-transformation*"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ecr:InitiateLayerUpload",
"ecr:PutImage",
"ecr:UploadLayerPart",
"ecr:CompleteLayerUpload",
"ecr:BatchCheckLayerAvailability",
"ecr:GetDownloadUrlForLayer"
],
"Resource" : "arn:*:ecr:*:*:repository/*",
"Condition" : {
"Null" : {
"ecr:ResourceTag/application-transformation" : "false"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"ecr:GetAuthorizationToken"
],
"Resource" : "*"
},
{
"Effect" : "Allow",
"Action" : [
"kms:CreateGrant"
],
"Resource" : "arn:aws:kms:*::*",
"Condition" : {
"Bool" : {
"kms:GrantIsForAWSResource" : true
},
"ForAnyValue:StringLike" : {
"kms:ResourceAliases" : "alias/application-transformation*"
}
}
}
]
}
```
## 자세히 알아보기
+ [IAM Identity Center에서 AWS 관리형 정책을 사용하여 권한 세트 생성](https://docs.aws.amazon.com/singlesignon/latest/userguide/howtocreatepermissionset.html)
+ [IAM 자격 증명 권한 추가 및 제거](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_manage-attach-detach.html)
+ [IAM 정책의 버전 관리 이해](https://docs.aws.amazon.com//IAM/latest/UserGuide/access_policies_managed-versioning.html)
+ [AWS 관리형 정책 시작하기 및 최소 권한으로 전환](https://docs.aws.amazon.com//IAM/latest/UserGuide/best-practices.html#bp-use-aws-defined-policies)