翻訳は機械翻訳により提供されています。提供された翻訳内容と英語版の間で齟齬、不一致または矛盾がある場合、英語版が優先します。
# AWSDeadlineCloud-UserAccessFarms
**説明**: Deadline Cloud AWS ファームへのユーザーワークステーションアクセスに、他の必要なサービスを呼び出すための制限された読み取り専用アクセス許可を付与します。このポリシーをスタジオに関連付けられているユーザーロールにアタッチしてください。
`AWSDeadlineCloud-UserAccessFarms` は [AWS マネージドポリシー](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_managed-vs-inline.html#aws-managed-policies)です。
## このポリシーを使用すると
ユーザー、グループおよびロールに `AWSDeadlineCloud-UserAccessFarms` をアタッチできます。
## ポリシーの詳細
+ **タイプ**: AWS 管理ポリシー
+ **作成日時**: 2024 年 4 月 1 日 16:54 UTC
+ **編集日時:** 2026 年 4 月 8 日 16:42 UTC
+ **ARN**: `arn:aws:iam::aws:policy/AWSDeadlineCloud-UserAccessFarms`
## ポリシーのバージョン
**ポリシーのバージョン:** v6 (デフォルト)
ポリシーのデフォルトバージョンは、ポリシーのアクセス許可を定義するバージョンです。ポリシーを持つユーザーまたはロールが AWS リソースへのアクセスをリクエストすると、 はポリシーのデフォルトバージョン AWS をチェックして、リクエストを許可するかどうかを決定します。
## JSON ポリシードキュメント
```
{
"Version" : "2012-10-17",
"Statement" : [
{
"Sid" : "AdditionalPermissions",
"Effect" : "Allow",
"Action" : [
"identitystore:DescribeGroup",
"identitystore:DescribeUser",
"identitystore:ListGroupMembershipsForMember",
"deadline:GetApplicationVersion",
"ec2:DescribeInstanceTypes",
"identitystore:ListUsers",
"deadline:GetMonitorSettings"
],
"Resource" : [
"*"
]
},
{
"Sid" : "OwnerLevelPermissions",
"Effect" : "Allow",
"Action" : [
"deadline:AssociateMemberToFarm",
"deadline:AssociateMemberToFleet",
"deadline:AssociateMemberToJob",
"deadline:AssociateMemberToQueue",
"deadline:CreateBudget",
"deadline:DeleteBudget",
"deadline:DisassociateMemberFromFarm",
"deadline:DisassociateMemberFromFleet",
"deadline:DisassociateMemberFromJob",
"deadline:DisassociateMemberFromQueue",
"deadline:GetBudget",
"deadline:GetSessionsStatisticsAggregation",
"deadline:ListBudgets",
"deadline:StartSessionsStatisticsAggregation",
"deadline:UpdateBudget"
],
"Resource" : [
"*"
],
"Condition" : {
"ForAnyValue:StringEquals" : {
"deadline:FarmMembershipLevels" : [
"OWNER"
]
}
}
},
{
"Sid" : "ManagerLevelMemberAssociation",
"Effect" : "Allow",
"Action" : [
"deadline:AssociateMemberToFarm",
"deadline:AssociateMemberToFleet",
"deadline:AssociateMemberToJob",
"deadline:AssociateMemberToQueue"
],
"Resource" : [
"*"
],
"Condition" : {
"ForAnyValue:StringEquals" : {
"deadline:FarmMembershipLevels" : [
"MANAGER"
]
},
"StringEquals" : {
"deadline:AssociatedMembershipLevel" : [
"MANAGER",
"CONTRIBUTOR",
"VIEWER",
""
],
"deadline:MembershipLevel" : [
"MANAGER",
"CONTRIBUTOR",
"VIEWER"
]
}
}
},
{
"Sid" : "ManagerLevelMemberDisassociation",
"Effect" : "Allow",
"Action" : [
"deadline:DisassociateMemberFromFarm",
"deadline:DisassociateMemberFromFleet",
"deadline:DisassociateMemberFromJob",
"deadline:DisassociateMemberFromQueue"
],
"Resource" : [
"*"
],
"Condition" : {
"ForAnyValue:StringEquals" : {
"deadline:FarmMembershipLevels" : [
"MANAGER"
]
},
"StringEquals" : {
"deadline:AssociatedMembershipLevel" : [
"MANAGER",
"CONTRIBUTOR",
"VIEWER",
""
]
}
}
},
{
"Sid" : "OwnerManagerPermissions",
"Effect" : "Allow",
"Action" : [
"deadline:ListFarmMembers",
"deadline:ListFleetMembers",
"deadline:ListJobMembers",
"deadline:ListQueueMembers",
"deadline:UpdateJob",
"deadline:UpdateSession",
"deadline:UpdateStep",
"deadline:UpdateTask"
],
"Resource" : [
"*"
],
"Condition" : {
"ForAnyValue:StringEquals" : {
"deadline:FarmMembershipLevels" : [
"OWNER",
"MANAGER"
]
}
}
},
{
"Sid" : "OwnerManagerContributorPermissions",
"Effect" : "Allow",
"Action" : [
"deadline:AssumeQueueRoleForUser",
"deadline:CreateJob"
],
"Resource" : [
"*"
],
"Condition" : {
"ForAnyValue:StringEquals" : {
"deadline:FarmMembershipLevels" : [
"OWNER",
"MANAGER",
"CONTRIBUTOR"
]
}
}
},
{
"Sid" : "AllLevelsPermissions",
"Effect" : "Allow",
"Action" : [
"deadline:AssumeFleetRoleForRead",
"deadline:AssumeQueueRoleForRead",
"deadline:GetFarm",
"deadline:GetFleet",
"deadline:GetJob",
"deadline:GetJobTemplate",
"deadline:GetQueue",
"deadline:GetQueueEnvironment",
"deadline:GetQueueFleetAssociation",
"deadline:GetSession",
"deadline:GetSessionAction",
"deadline:GetStep",
"deadline:GetStorageProfile",
"deadline:GetStorageProfileForQueue",
"deadline:GetTask",
"deadline:GetWorker",
"deadline:ListJobParameterDefinitions",
"deadline:ListQueueEnvironments",
"deadline:ListQueueFleetAssociations",
"deadline:ListSessionActions",
"deadline:ListSessions",
"deadline:ListSessionsForWorker",
"deadline:ListStepConsumers",
"deadline:ListStepDependencies",
"deadline:ListSteps",
"deadline:ListStorageProfiles",
"deadline:ListStorageProfilesForQueue",
"deadline:ListTasks",
"deadline:ListWorkers",
"deadline:SearchJobs",
"deadline:SearchSteps",
"deadline:SearchTasks",
"deadline:SearchWorkers"
],
"Resource" : [
"*"
],
"Condition" : {
"ForAnyValue:StringEquals" : {
"deadline:FarmMembershipLevels" : [
"OWNER",
"MANAGER",
"CONTRIBUTOR",
"VIEWER"
]
}
}
},
{
"Sid" : "ListBasedOnMembership",
"Effect" : "Allow",
"Action" : [
"deadline:ListFarms",
"deadline:ListFleets",
"deadline:ListJobs",
"deadline:ListQueues"
],
"Resource" : [
"*"
],
"Condition" : {
"StringEquals" : {
"deadline:RequesterPrincipalId" : "${deadline:PrincipalId}"
}
}
},
{
"Sid" : "AllowKmsAccessViaIdentityCenter",
"Effect" : "Allow",
"Action" : [
"kms:Decrypt"
],
"Resource" : [
"*"
],
"Condition" : {
"ArnLike" : {
"kms:EncryptionContext:aws:sso:instance-arn" : "arn:*:sso:::instance/*"
},
"StringLike" : {
"kms:ViaService" : "sso.*.amazonaws.com"
}
}
},
{
"Sid" : "AllowKmsAccessViaIdentityStore",
"Effect" : "Allow",
"Action" : [
"kms:Decrypt"
],
"Resource" : [
"*"
],
"Condition" : {
"ArnLike" : {
"kms:EncryptionContext:aws:identitystore:identitystore-arn" : "arn:*:identitystore::*:identitystore/*"
},
"StringLike" : {
"kms:ViaService" : "identitystore.*.amazonaws.com"
}
}
}
]
}
```
## 詳細情報
+ [IAM Identity Center で AWS マネージドポリシーを使用してアクセス許可セットを作成する](https://docs.aws.amazon.com/singlesignon/latest/userguide/howtocreatepermissionset.html)
+ [IAM ID のアクセス許可の追加および削除](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_manage-attach-detach.html)
+ [IAM ポリシーのバージョニングについて理解する](https://docs.aws.amazon.com//IAM/latest/UserGuide/access_policies_managed-versioning.html)
+ [AWS 管理ポリシーの使用を開始し、最小特権のアクセス許可に移行する](https://docs.aws.amazon.com//IAM/latest/UserGuide/best-practices.html#bp-use-aws-defined-policies)