packages/constructs/L3/governance/roles-l3-construct/policy-statements/app-based/dataops-basic-policy.yaml [45:73]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
      - 'glue:StartNotebook'
      - 'glue:TerminateNotebook'
      - 'glue:TestConnection'
      - 'glue:UseGlueStudio'
    Resource:
      - '*'

  - Sid: GlueDataBrewNoResourceReadAccess
    Effect: Allow
    Action:
      -  'databrew:ListDatasets'        # Grants permission to list datasets in your account
      -  'databrew:ListJobs'        # Grants permission to list jobs in your account
      -  'databrew:ListProjects'        # Grants permission to list projects in your account
      -  'databrew:ListRecipes'        # Grants permission to list recipes in your account
      -  'databrew:ListRulesets'        # Grants permission to list rulesets in your account
      -  'databrew:ListSchedules'        # Grants permission to list schedules in your account
    Resource:
      - '*'
  - Sid: GlueDataBrewNoResourceWriteAccess
    Action:
      -  'databrew:CreateDataset'        # Grants permission to create a dataset
      -  'databrew:CreateProfileJob'        # Grants permission to create a profile job
      -  'databrew:CreateProject'        # Grants permission to create a project
      -  'databrew:CreateRecipe'        # Grants permission to create a recipe
      -  'databrew:CreateRecipeJob'        # Grants permission to create a recipe job
      -  'databrew:CreateRuleset'        # Grants permission to create a ruleset
      -  'databrew:CreateSchedule'        # Grants permission to create a schedule
    Resource:
      - '*'
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



packages/constructs/L3/governance/roles-l3-construct/policy-statements/domain-based/dataops-basic-policy.yaml [40:68]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
      -  'glue:StartNotebook'        # Grants permission to start Glue Studio Notebooks
      -  'glue:TerminateNotebook'        # Grants permission to terminate Glue Studio Notebooks
      -  'glue:TestConnection'        # Grants permission to test connection in Glue Studio
      -  'glue:UseGlueStudio'        # Grants permission to use Glue Studio and access its internal APIs
    Resource:
      - '*'

  - Sid: GlueDataBrewNoResourceReadAccess
    Effect: Allow
    Action:
      -  'databrew:ListDatasets'        # Grants permission to list datasets in your account
      -  'databrew:ListJobs'        # Grants permission to list jobs in your account
      -  'databrew:ListProjects'        # Grants permission to list projects in your account
      -  'databrew:ListRecipes'        # Grants permission to list recipes in your account
      -  'databrew:ListRulesets'        # Grants permission to list rulesets in your account
      -  'databrew:ListSchedules'        # Grants permission to list schedules in your account
    Resource:
      - '*'
  - Sid: GlueDataBrewNoResourceWriteAccess
    Action:
      -  'databrew:CreateDataset'        # Grants permission to create a dataset
      -  'databrew:CreateProfileJob'        # Grants permission to create a profile job
      -  'databrew:CreateProject'        # Grants permission to create a project
      -  'databrew:CreateRecipe'        # Grants permission to create a recipe
      -  'databrew:CreateRecipeJob'        # Grants permission to create a recipe job
      -  'databrew:CreateRuleset'        # Grants permission to create a ruleset
      -  'databrew:CreateSchedule'        # Grants permission to create a schedule
    Resource:
      - '*'
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



