기계 번역으로 제공되는 번역입니다. 제공된 번역과 원본 영어의 내용이 상충하는 경우에는 영어 버전이 우선합니다. # AWSDeepLensServiceRolePolicy **설명**: Grants AWS DeepLens 액세스 권한 AWS 서비스, DeepLens에 필요한 리소스 및 역할, 그리고 IoT, S3, GreenGrass 및 AWS Lambda를 포함한 종속성. `AWSDeepLensServiceRolePolicy`은(는) [AWS 관리형 정책](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_managed-vs-inline.html#aws-managed-policies)입니다. ## 이 정책 사용 사용자, 그룹 및 역할에 `AWSDeepLensServiceRolePolicy`를 연결할 수 있습니다. ## 정책 세부 정보 + **유형**: 서비스 역할 정책 + **생성 시간**: 2017년 11월 29일, 15:46 UTC + **편집된 시간:** 2019년 9월 25일, 19:25 UTC + **ARN**: `arn:aws:iam::aws:policy/service-role/AWSDeepLensServiceRolePolicy` ## 정책 버전 **정책 버전:** v6(기본값) 정책의 기본 버전은 정책에 대한 권한을 정의하는 버전입니다. 정책이 있는 사용자 또는 역할이 AWS 리소스에 대한 액세스를 요청하면는 정책의 기본 버전을 AWS 확인하여 요청을 허용할지 여부를 결정합니다. ## JSON 정책 문서 ``` { "Version" : "2012-10-17", "Statement" : [ { "Sid" : "DeepLensIoTThingAccess", "Effect" : "Allow", "Action" : [ "iot:CreateThing", "iot:DeleteThing", "iot:DeleteThingShadow", "iot:DescribeThing", "iot:GetThingShadow", "iot:UpdateThing", "iot:UpdateThingShadow" ], "Resource" : [ "arn:aws:iot:*:*:thing/deeplens*" ] }, { "Sid" : "DeepLensIoTCertificateAccess", "Effect" : "Allow", "Action" : [ "iot:AttachThingPrincipal", "iot:DetachThingPrincipal", "iot:UpdateCertificate", "iot:DeleteCertificate", "iot:DetachPrincipalPolicy" ], "Resource" : [ "arn:aws:iot:*:*:thing/deeplens*", "arn:aws:iot:*:*:cert/*" ] }, { "Sid" : "DeepLensIoTCreateCertificateAndPolicyAccess", "Effect" : "Allow", "Action" : [ "iot:CreateKeysAndCertificate", "iot:CreatePolicy", "iot:CreatePolicyVersion" ], "Resource" : [ "*" ] }, { "Sid" : "DeepLensIoTAttachCertificatePolicyAccess", "Effect" : "Allow", "Action" : [ "iot:AttachPrincipalPolicy" ], "Resource" : [ "arn:aws:iot:*:*:policy/deeplens*", "arn:aws:iot:*:*:cert/*" ] }, { "Sid" : "DeepLensIoTDataAccess", "Effect" : "Allow", "Action" : [ "iot:GetThingShadow", "iot:UpdateThingShadow" ], "Resource" : [ "arn:aws:iot:*:*:thing/deeplens*" ] }, { "Sid" : "DeepLensIoTEndpointAccess", "Effect" : "Allow", "Action" : [ "iot:DescribeEndpoint" ], "Resource" : [ "*" ] }, { "Sid" : "DeepLensAccess", "Effect" : "Allow", "Action" : [ "deeplens:*" ], "Resource" : [ "*" ] }, { "Sid" : "DeepLensS3ObjectAccess", "Effect" : "Allow", "Action" : [ "s3:GetObject" ], "Resource" : [ "arn:aws:s3:::deeplens*" ] }, { "Sid" : "DeepLensS3Buckets", "Effect" : "Allow", "Action" : [ "s3:DeleteBucket", "s3:ListBucket" ], "Resource" : [ "arn:aws:s3:::deeplens*" ] }, { "Sid" : "DeepLensCreateS3Buckets", "Effect" : "Allow", "Action" : [ "s3:CreateBucket" ], "Resource" : [ "*" ] }, { "Sid" : "DeepLensIAMPassRoleAccess", "Effect" : "Allow", "Action" : [ "iam:PassRole" ], "Resource" : [ "*" ], "Condition" : { "StringEquals" : { "iam:PassedToService" : [ "greengrass.amazonaws.com", "sagemaker.amazonaws.com" ] } } }, { "Sid" : "DeepLensIAMLambdaPassRoleAccess", "Effect" : "Allow", "Action" : [ "iam:PassRole" ], "Resource" : [ "arn:aws:iam::*:role/AWSDeepLens*", "arn:aws:iam::*:role/service-role/AWSDeepLens*" ], "Condition" : { "StringEqualsIfExists" : { "iam:PassedToService" : "lambda.amazonaws.com" } } }, { "Sid" : "DeepLensGreenGrassAccess", "Effect" : "Allow", "Action" : [ "greengrass:AssociateRoleToGroup", "greengrass:AssociateServiceRoleToAccount", "greengrass:CreateResourceDefinition", "greengrass:CreateResourceDefinitionVersion", "greengrass:CreateCoreDefinition", "greengrass:CreateCoreDefinitionVersion", "greengrass:CreateDeployment", "greengrass:CreateFunctionDefinition", "greengrass:CreateFunctionDefinitionVersion", "greengrass:CreateGroup", "greengrass:CreateGroupCertificateAuthority", "greengrass:CreateGroupVersion", "greengrass:CreateLoggerDefinition", "greengrass:CreateLoggerDefinitionVersion", "greengrass:CreateSubscriptionDefinition", "greengrass:CreateSubscriptionDefinitionVersion", "greengrass:DeleteCoreDefinition", "greengrass:DeleteFunctionDefinition", "greengrass:DeleteGroup", "greengrass:DeleteLoggerDefinition", "greengrass:DeleteSubscriptionDefinition", "greengrass:DisassociateRoleFromGroup", "greengrass:DisassociateServiceRoleFromAccount", "greengrass:GetAssociatedRole", "greengrass:GetConnectivityInfo", "greengrass:GetCoreDefinition", "greengrass:GetCoreDefinitionVersion", "greengrass:GetDeploymentStatus", "greengrass:GetDeviceDefinition", "greengrass:GetDeviceDefinitionVersion", "greengrass:GetFunctionDefinition", "greengrass:GetFunctionDefinitionVersion", "greengrass:GetGroup", "greengrass:GetGroupCertificateAuthority", "greengrass:GetGroupCertificateConfiguration", "greengrass:GetGroupVersion", "greengrass:GetLoggerDefinition", "greengrass:GetLoggerDefinitionVersion", "greengrass:GetResourceDefinition", "greengrass:GetServiceRoleForAccount", "greengrass:GetSubscriptionDefinition", "greengrass:GetSubscriptionDefinitionVersion", "greengrass:ListCoreDefinitionVersions", "greengrass:ListCoreDefinitions", "greengrass:ListDeployments", "greengrass:ListDeviceDefinitionVersions", "greengrass:ListDeviceDefinitions", "greengrass:ListFunctionDefinitionVersions", "greengrass:ListFunctionDefinitions", "greengrass:ListGroupCertificateAuthorities", "greengrass:ListGroupVersions", "greengrass:ListGroups", "greengrass:ListLoggerDefinitionVersions", "greengrass:ListLoggerDefinitions", "greengrass:ListSubscriptionDefinitionVersions", "greengrass:ListSubscriptionDefinitions", "greengrass:ResetDeployments", "greengrass:UpdateConnectivityInfo", "greengrass:UpdateCoreDefinition", "greengrass:UpdateDeviceDefinition", "greengrass:UpdateFunctionDefinition", "greengrass:UpdateGroup", "greengrass:UpdateGroupCertificateConfiguration", "greengrass:UpdateLoggerDefinition", "greengrass:UpdateSubscriptionDefinition", "greengrass:UpdateResourceDefinition" ], "Resource" : [ "*" ] }, { "Sid" : "DeepLensLambdaAdminFunctionAccess", "Effect" : "Allow", "Action" : [ "lambda:CreateFunction", "lambda:DeleteFunction", "lambda:GetFunction", "lambda:GetFunctionConfiguration", "lambda:ListFunctions", "lambda:ListVersionsByFunction", "lambda:PublishVersion", "lambda:UpdateFunctionCode", "lambda:UpdateFunctionConfiguration" ], "Resource" : [ "arn:aws:lambda:*:*:function:deeplens*" ] }, { "Sid" : "DeepLensLambdaUsersFunctionAccess", "Effect" : "Allow", "Action" : [ "lambda:GetFunction", "lambda:GetFunctionConfiguration", "lambda:ListFunctions", "lambda:ListVersionsByFunction" ], "Resource" : [ "arn:aws:lambda:*:*:function:*" ] }, { "Sid" : "DeepLensSageMakerWriteAccess", "Effect" : "Allow", "Action" : [ "sagemaker:CreateTrainingJob", "sagemaker:DescribeTrainingJob", "sagemaker:StopTrainingJob" ], "Resource" : [ "arn:aws:sagemaker:*:*:training-job/deeplens*" ] }, { "Sid" : "DeepLensSageMakerReadAccess", "Effect" : "Allow", "Action" : [ "sagemaker:DescribeTrainingJob" ], "Resource" : [ "arn:aws:sagemaker:*:*:training-job/*" ] }, { "Sid" : "DeepLensKinesisVideoStreamAccess", "Effect" : "Allow", "Action" : [ "kinesisvideo:CreateStream", "kinesisvideo:DescribeStream", "kinesisvideo:DeleteStream" ], "Resource" : [ "arn:aws:kinesisvideo:*:*:stream/deeplens*/*" ] }, { "Sid" : "DeepLensKinesisVideoEndpointAccess", "Effect" : "Allow", "Action" : [ "kinesisvideo:GetDataEndpoint" ], "Resource" : [ "*" ] } ] } ``` ## 자세히 알아보기 + [IAM Identity Center에서 AWS 관리형 정책을 사용하여 권한 세트 생성](https://docs.aws.amazon.com/singlesignon/latest/userguide/howtocreatepermissionset.html) + [IAM 자격 증명 권한 추가 및 제거](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_manage-attach-detach.html) + [IAM 정책의 버전 관리 이해](https://docs.aws.amazon.com//IAM/latest/UserGuide/access_policies_managed-versioning.html) + [AWS 관리형 정책 시작하기 및 최소 권한으로 이동](https://docs.aws.amazon.com//IAM/latest/UserGuide/best-practices.html#bp-use-aws-defined-policies)