constructor()

in extras/agc-minimal-permissions/lib/permissions-stack.ts [8:65]

• 47 lines of code
• 1 McCabe index (conditional complexity)

  constructor(scope: cdk.Construct, id: string, props?: cdk.StackProps) {
    super(scope, id, props);

    // The code that defines your stack goes here
    let agcAdminPolicy = new ManagedPolicy(this, 'agc-admin-policy', {
      description: "managed policy for amazon genomics cli admins"
    })

    let agcUserPolicy = new ManagedPolicy(this, 'agc-user-policy', {
      description: "managed policy for amazon genomics cli users"
    });

    let perms = new stmt.AgcPermissions(this);

    agcAdminPolicy.addStatements(
      // explicit permissions
      ...perms.vpc(),
      ...perms.s3Create(),
      ...perms.s3Destroy(),
      ...perms.s3Read(),
      ...perms.s3Write(),
      ...perms.dynamodbCreate(),
      ...perms.dynamodbRead(),
      ...perms.dynamodbWrite(),
      ...perms.dynamodbDestroy(),
      ...perms.ssmCreate(),
      ...perms.ssmRead(),
      ...perms.ssmDestroy(),
      ...perms.cloudformationAdmin(),
      ...perms.ecr(),
      ...perms.deactivate(),
    );

    agcUserPolicy.addStatements(
      // poweruser + iam permissions is sufficient
      ...perms.iam(),
        
      ...perms.ec2(),
      ...perms.s3Read(),
      ...perms.s3Write(),
      ...perms.dynamodbRead(),
      ...perms.dynamodbWrite(),
      ...perms.ssmRead(),
      ...perms.cloudformationUser(),
      ...perms.batch(),
      ...perms.ecs(),
      ...perms.elb(),
      ...perms.apigw(),
      ...perms.efs(),
      ...perms.cloudmap(),
      ...perms.logs(),
      ...perms.route53(),
    );

    this.adminPolicy = agcAdminPolicy;
    this.userPolicy = agcUserPolicy;

  }