Sub-account permission template

Policy

For more information about policies, see access control.

Sample template

This policy grants a sub-account the permission to list all projects, along with all DataHub permissions for the test_ss project.

{
  "Statement": [
    {
      "Action": [
        "dhs:ListProject"
      ],
      "Effect": "Allow",
      "Resource": "acs:dhs:*:*:projects/*"
    },
    {
      "Action": [
        "dhs:GetProject"
      ],
      "Effect": "Allow",
      "Resource": "acs:dhs:*:*:projects/test_ss"
    },
    {
      "Action": [
        "dhs:*Topic",
        "dhs:*Shard",
        "dhs:*Subscription",
        "dhs:*Connector",
        "dhs:*Records"
      ],
      "Effect": "Allow",
      "Resource": "acs:dhs:*:*:projects/test_ss/topics/*"
    }
  ],
  "Version": "1"
}