infra/iam/roles/beam_writer.role.yaml

# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements.  See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to You under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License.  You may obtain a copy of the License at
#
#    http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

# This file is auto-generated by generate_roles.py.
# Do not edit manually.

# This file was generated on 2025-08-11 15:53:17 UTC

description: This is the beam_writer role
permissions:
- bigquery.datasets.create
- bigquery.tables.export
- bigquery.tables.get
- bigquery.tables.getData
- bigquery.tables.list
- bigquerymigration.translation.translate
- cloudkms.cryptoKeyVersions.get
- cloudkms.cryptoKeyVersions.list
- cloudkms.cryptoKeys.get
- cloudkms.cryptoKeys.getIamPolicy
- cloudkms.cryptoKeys.list
- cloudkms.ekmConfigs.get
- cloudkms.ekmConfigs.getIamPolicy
- cloudkms.ekmConnections.get
- cloudkms.ekmConnections.getIamPolicy
- cloudkms.ekmConnections.list
- cloudkms.ekmConnections.verifyConnectivity
- cloudkms.importJobs.get
- cloudkms.importJobs.getIamPolicy
- cloudkms.importJobs.list
- cloudkms.kajPolicyConfigs.get
- cloudkms.keyHandles.create
- cloudkms.keyHandles.get
- cloudkms.keyHandles.list
- cloudkms.keyRings.get
- cloudkms.keyRings.getIamPolicy
- cloudkms.keyRings.list
- cloudkms.keyRings.listEffectiveTags
- cloudkms.keyRings.listTagBindings
- cloudkms.locations.generateRandomBytes
- cloudkms.locations.get
- cloudkms.locations.list
- cloudkms.operations.get
- cloudkms.projects.showEffectiveAutokeyConfig
- cloudkms.projects.showEffectiveKajEnrollmentConfig
- cloudkms.projects.showEffectiveKajPolicyConfig
- cloudsql.instances.login
- container.apiServices.create
- container.apiServices.update
- container.apiServices.updateStatus
- container.auditSinks.create
- container.auditSinks.update
- container.backendConfigs.create
- container.backendConfigs.update
- container.bindings.create
- container.certificateSigningRequests.create
- container.certificateSigningRequests.update
- container.certificateSigningRequests.updateStatus
- container.configMaps.create
- container.configMaps.update
- container.cronJobs.create
- container.cronJobs.update
- container.cronJobs.updateStatus
- container.csiDrivers.create
- container.csiDrivers.update
- container.csiNodeInfos.create
- container.csiNodeInfos.update
- container.csiNodes.create
- container.csiNodes.update
- container.customResourceDefinitions.create
- container.customResourceDefinitions.update
- container.customResourceDefinitions.updateStatus
- container.daemonSets.create
- container.daemonSets.update
- container.daemonSets.updateStatus
- container.deployments.create
- container.deployments.getScale
- container.deployments.rollback
- container.deployments.update
- container.deployments.updateScale
- container.deployments.updateStatus
- container.endpointSlices.create
- container.endpointSlices.update
- container.endpoints.create
- container.endpoints.update
- container.events.create
- container.events.update
- container.frontendConfigs.create
- container.frontendConfigs.update
- container.horizontalPodAutoscalers.create
- container.horizontalPodAutoscalers.update
- container.horizontalPodAutoscalers.updateStatus
- container.ingresses.create
- container.ingresses.update
- container.ingresses.updateStatus
- container.jobs.create
- container.jobs.update
- container.jobs.updateStatus
- container.leases.create
- container.leases.update
- container.limitRanges.create
- container.limitRanges.update
- container.localSubjectAccessReviews.create
- container.managedCertificates.create
- container.managedCertificates.update
- container.namespaces.create
- container.namespaces.update
- container.namespaces.updateStatus
- container.networkPolicies.create
- container.networkPolicies.update
- container.nodes.create
- container.nodes.proxy
- container.nodes.update
- container.nodes.updateStatus
- container.persistentVolumeClaims.create
- container.persistentVolumeClaims.update
- container.persistentVolumeClaims.updateStatus
- container.persistentVolumes.create
- container.persistentVolumes.update
- container.persistentVolumes.updateStatus
- container.podDisruptionBudgets.create
- container.podDisruptionBudgets.update
- container.podDisruptionBudgets.updateStatus
- container.podTemplates.create
- container.podTemplates.update
- container.pods.attach
- container.pods.create
- container.pods.evict
- container.pods.exec
- container.pods.portForward
- container.pods.proxy
- container.pods.update
- container.pods.updateStatus
- container.priorityClasses.create
- container.priorityClasses.update
- container.replicaSets.create
- container.replicaSets.update
- container.replicaSets.updateScale
- container.replicaSets.updateStatus
- container.replicationControllers.create
- container.replicationControllers.update
- container.replicationControllers.updateScale
- container.replicationControllers.updateStatus
- container.resourceQuotas.create
- container.resourceQuotas.update
- container.resourceQuotas.updateStatus
- container.runtimeClasses.create
- container.runtimeClasses.update
- container.secrets.create
- container.secrets.get
- container.secrets.list
- container.secrets.update
- container.serviceAccounts.create
- container.serviceAccounts.createToken
- container.serviceAccounts.update
- container.services.create
- container.services.proxy
- container.services.update
- container.services.updateStatus
- container.statefulSets.create
- container.statefulSets.update
- container.statefulSets.updateScale
- container.statefulSets.updateStatus
- container.storageClasses.create
- container.storageClasses.update
- container.storageStates.create
- container.storageStates.update
- container.storageStates.updateStatus
- container.storageVersionMigrations.create
- container.storageVersionMigrations.update
- container.storageVersionMigrations.updateStatus
- container.subjectAccessReviews.create
- container.thirdPartyObjects.create
- container.thirdPartyObjects.update
- container.updateInfos.create
- container.updateInfos.update
- container.volumeAttachments.create
- container.volumeAttachments.update
- container.volumeAttachments.updateStatus
- container.volumeSnapshotClasses.create
- container.volumeSnapshotClasses.update
- container.volumeSnapshotContents.create
- container.volumeSnapshotContents.update
- container.volumeSnapshotContents.updateStatus
- container.volumeSnapshots.create
- container.volumeSnapshots.update
- container.volumeSnapshots.updateStatus
- dataform.commentThreads.get
- dataform.commentThreads.list
- dataform.comments.get
- dataform.comments.list
- dataform.compilationResults.get
- dataform.compilationResults.list
- dataform.compilationResults.query
- dataform.config.get
- dataform.locations.get
- dataform.locations.list
- dataform.releaseConfigs.get
- dataform.releaseConfigs.list
- dataform.repositories.computeAccessTokenStatus
- dataform.repositories.create
- dataform.repositories.fetchHistory
- dataform.repositories.fetchRemoteBranches
- dataform.repositories.get
- dataform.repositories.getIamPolicy
- dataform.repositories.list
- dataform.repositories.queryDirectoryContents
- dataform.repositories.readFile
- dataform.workflowConfigs.get
- dataform.workflowConfigs.list
- dataform.workflowInvocations.get
- dataform.workflowInvocations.list
- dataform.workflowInvocations.query
- dataform.workspaces.fetchFileDiff
- dataform.workspaces.fetchFileGitStatuses
- dataform.workspaces.fetchGitAheadBehind
- dataform.workspaces.get
- dataform.workspaces.getIamPolicy
- dataform.workspaces.list
- dataform.workspaces.queryDirectoryContents
- dataform.workspaces.readFile
- dataform.workspaces.searchFiles
- dataplex.aspectTypes.get
- dataplex.aspectTypes.getIamPolicy
- dataplex.aspectTypes.list
- dataplex.assetActions.list
- dataplex.assets.get
- dataplex.assets.getIamPolicy
- dataplex.assets.list
- dataplex.content.get
- dataplex.content.getIamPolicy
- dataplex.content.list
- dataplex.dataAttributeBindings.get
- dataplex.dataAttributeBindings.getIamPolicy
- dataplex.dataAttributeBindings.list
- dataplex.dataAttributes.get
- dataplex.dataAttributes.getIamPolicy
- dataplex.dataAttributes.list
- dataplex.dataTaxonomies.get
- dataplex.dataTaxonomies.getIamPolicy
- dataplex.dataTaxonomies.list
- dataplex.datascans.get
- dataplex.datascans.getData
- dataplex.datascans.getIamPolicy
- dataplex.datascans.list
- dataplex.entities.get
- dataplex.entities.list
- dataplex.entries.get
- dataplex.entries.list
- dataplex.entryGroups.export
- dataplex.entryGroups.get
- dataplex.entryGroups.getIamPolicy
- dataplex.entryGroups.list
- dataplex.entryLinks.get
- dataplex.entryTypes.get
- dataplex.entryTypes.getIamPolicy
- dataplex.entryTypes.list
- dataplex.environments.get
- dataplex.environments.getIamPolicy
- dataplex.environments.list
- dataplex.glossaries.get
- dataplex.glossaries.getIamPolicy
- dataplex.glossaries.list
- dataplex.glossaryCategories.get
- dataplex.glossaryCategories.list
- dataplex.glossaryTerms.get
- dataplex.glossaryTerms.list
- dataplex.lakeActions.list
- dataplex.lakes.get
- dataplex.lakes.getIamPolicy
- dataplex.lakes.list
- dataplex.locations.get
- dataplex.locations.list
- dataplex.metadataJobs.get
- dataplex.metadataJobs.list
- dataplex.operations.get
- dataplex.operations.list
- dataplex.partitions.get
- dataplex.partitions.list
- dataplex.projects.search
- dataplex.tasks.get
- dataplex.tasks.getIamPolicy
- dataplex.tasks.list
- dataplex.zoneActions.list
- dataplex.zones.get
- dataplex.zones.getIamPolicy
- dataplex.zones.list
- datastore.entities.allocateIds
- datastore.entities.create
- datastore.entities.update
- trafficdirector.networks.reportMetrics
role_id: beam_writer
stage: GA
title: beam_writer