AWS Continuum (continuum)

Additions

Actions

• AssociateCollector
  
  • Description:  Grants permission to associate a collector with an environment
  • Access:  Write
  • Resources: 

    Name: environments

    Required: Yes

  • Conditions: 

    continuum:CollectorArn

• CreateCodeFinding
  
  • Description:  Grants permission to create a code finding in an environment
  • Access:  Write
  • Resources: 

    Name: code-findings

    Required: Yes

    Name: environments

    Required: Yes

• CreateCodeScan
  
  • Description:  Grants permission to start a code scan of an environment
  • Access:  Write
  • Resources: 

    Name: code-scans

    Required: Yes

    Name: environments

    Required: Yes

• CreateCollector
  
  • Description:  Grants permission to create a collector
  • Access:  Write
  • Resources: 

    Name: collectors

    Required: Yes

• CreateEnvironment
  
  • Description:  Grants permission to create an environment
  • Access:  Write
  • Resources: 

    Name: environments

    Required: Yes

    Name: integrations

    Required: No

  • Conditions: 

    continuum:RepositoryName

• CreateIntegration
  
  • Description:  Grants permission to create an integration with an external source provider
  • Access:  Write
  • Resources: 

    Name: integrations

    Required: Yes

  • Conditions: 

    continuum:S3BucketName

• DeleteCollector
  
  • Description:  Grants permission to delete a collector
  • Access:  Write
  • Resources: 

    Name: collectors

    Required: Yes

• DeleteEnvironment
  
  • Description:  Grants permission to delete an environment
  • Access:  Write
  • Resources: 

    Name: environments

    Required: Yes

• DeleteIntegration
  
  • Description:  Grants permission to delete an integration
  • Access:  Write
  • Resources: 

    Name: integrations

    Required: Yes

• DisassociateCollector
  
  • Description:  Grants permission to disassociate a collector from an environment
  • Access:  Write
  • Resources: 

    Name: environments

    Required: Yes

  • Conditions: 

    continuum:CollectorArn

• GetCodeFinding
  
  • Description:  Grants permission to get a code finding
  • Access:  Read
  • Resources: 

    Name: code-findings

    Required: Yes

• GetCodeIssue
  
  • Description:  Grants permission to get a code issue
  • Access:  Read
  • Resources: 

    Name: code-issues

    Required: Yes

• GetCodeIssueArtifact
  
  • Description:  Grants permission to get an artifact of a code issue
  • Access:  Read
  • Resources: 

    Name: code-issues

    Required: Yes

• GetCodeScan
  
  • Description:  Grants permission to get a code scan
  • Access:  Read
  • Resources: 

    Name: code-scans

    Required: Yes

• GetCollector
  
  • Description:  Grants permission to get a collector
  • Access:  Read
  • Resources: 

    Name: collectors

    Required: Yes

• GetCollectorDataAccessAuthorization
  
  • Description:  Grants permission to access the data of a collector from an environment
  • Access:  Read
  • Resources: 

    Name: collectors

    Required: Yes

  • Conditions: 

    continuum:EnvironmentArn

• GetEnvironment
  
  • Description:  Grants permission to get an environment
  • Access:  Read
  • Resources: 

    Name: environments

    Required: Yes

• GetIntegration
  
  • Description:  Grants permission to get an integration
  • Access:  Read
  • Resources: 

    Name: integrations

    Required: Yes

• GetResourcePolicy
  
  • Description:  Grants permission to get the resource policy attached to a resource
  • Access:  Read
  • Resources: 

    Name: collectors

    Required: Yes

• ListAssociatedCollectors
  
  • Description:  Grants permission to list the collectors associated with an environment
  • Access:  List
  • Resources: 

    Name: environments

    Required: Yes

• ListAssociatedEnvironments
  
  • Description:  Grants permission to list the environments associated with a collector
  • Access:  List
  • Resources: 

    Name: collectors

    Required: Yes

• ListCodeFindings
  
  • Description:  Grants permission to list the code findings in an environment
  • Access:  List
  • Resources: 

    Name: environments

    Required: Yes

• ListCodeIssueArtifacts
  
  • Description:  Grants permission to list the artifacts of a code issue
  • Access:  List
  • Resources: 

    Name: code-issues

    Required: Yes

• ListCodeIssues
  
  • Description:  Grants permission to list the code issues in an environment
  • Access:  List
  • Resources: 

    Name: environments

    Required: Yes

• ListCodeScans
  
  • Description:  Grants permission to list the code scans of an environment
  • Access:  List
  • Resources: 

    Name: environments

    Required: Yes

• ListCollectors
  
  • Description:  Grants permission to list collectors
  • Access:  List
  • Resources: 

    Name: collectors

    Required: Yes

• ListEnvironments
  
  • Description:  Grants permission to list environments
  • Access:  List
  • Resources: 

    Name: environments

    Required: Yes

• ListIntegrations
  
  • Description:  Grants permission to list integrations
  • Access:  List
  • Resources: 

    Name: integrations

    Required: Yes

• PutResourcePolicy
  
  • Description:  Grants permission to attach a resource policy to a resource
  • Access:  Write
  • Resources: 

    Name: collectors

    Required: Yes

• StartIntegrationAuthorization
  
  • Description:  Grants permission to start an OAuth authorization for a new integration
  • Access:  Write
• UpdateCollector
  
  • Description:  Grants permission to update a collector
  • Access:  Write
  • Resources: 

    Name: collectors

    Required: Yes

• UpdateEnvironment
  
  • Description:  Grants permission to update an environment
  • Access:  Write
  • Resources: 

    Name: environments

    Required: Yes

    Name: integrations

    Required: No

  • Conditions: 

    continuum:RepositoryName

• UpdateIntegration
  
  • Description:  Grants permission to update the IAM role of an Amazon S3 integration
  • Access:  Write
  • Resources: 

    Name: integrations

    Required: Yes

Resources

• code-findings
  
  • Arn:  arn:${Partition}:continuum:${Region}:${Account}:environments/${EnvironmentId}/code-findings/${FindingId}
• code-issues
  
  • Arn:  arn:${Partition}:continuum:${Region}:${Account}:environments/${EnvironmentId}/code-issues/${IssueId}
• code-scans
  
  • Arn:  arn:${Partition}:continuum:${Region}:${Account}:environments/${EnvironmentId}/code-scans/${ScanRunId}
• collectors
  
  • Arn:  arn:${Partition}:continuum:${Region}:${Account}:collectors/${CollectorId}
• environments
  
  • Arn:  arn:${Partition}:continuum:${Region}:${Account}:environments/${EnvironmentId}
• integrations
  
  • Arn:  arn:${Partition}:continuum:${Region}:${Account}:integrations/${IntegrationId}

Conditions

• continuum:CollectorArn
  
  • Description:  Filters access by the ARNs of the collectors in an AssociateCollector or DisassociateCollector request
  • Type:  ArrayOfARN
• continuum:EnvironmentArn
  
  • Description:  Filters access by the ARN of the environment that requests access to the data of a collector
  • Type:  ARN
• continuum:RepositoryName
  
  • Description:  Filters access by the repositories, as lowercase owner/repo values, that a CreateEnvironment or UpdateEnvironment request selects as sources
  • Type:  ArrayOfString
• continuum:S3BucketName
  
  • Description:  Filters access by the name of the Amazon S3 bucket in a CreateIntegration request
  • Type:  String