For the complete documentation index, see llms.txt. This page is also available as Markdown.

Reference A: IAM Service Role permissions

AWS CodeCommit permissions configured by the CloudFormation integration template

The AWS CodeCommit CloudFormation template configures these permissions for the service role. You do not need to configure them manually.

  • codecommit:GitPull: Allows users to pull Git repository changes

  • codecommit:ListBranches: Grants the ability to list branches within a repository

  • codecommit:GetBranch: Required to get details about a branch in a repository

  • codecommit:GetPullRequest: Enables fetching details of a specific pull request

  • codecommit:GetFolder: Required to view the contents of a specified folder in a repository from the CodeCommit console

  • codecommit:GetFile: Required to view the encoded content of an individual file and its metadata in a repository from the CodeCommit console

  • codecommit:GetBlob: Allows fetching of an object (such as a file) from a repository

  • codecommit:GetCommitsFromMergeBase: Grants access to commits from the merge base of a branch

  • codecommit:GetCommentsForPullRequest: Allows retrieval of comments associated with a pull request

  • codecommit:PostCommentReply: Required to create a reply to a comment on a comparison between commits or on a pull request

  • codecommit:UpdateComment: Allows updating of comments on pull requests

  • codecommit:PostCommentForPullRequest: Required to post a comment on a pull request in a repository

  • codecommit:GetComment: Permits retrieval of a specific comment on a pull request

  • codecommit:GetCommit: Allows fetching details of a specific commit

  • codecommit:GetDifferences: Grants access to differences (changes) between commits, branches, and so on

  • codecommit:BatchGetRepositories: Enables batch retrieval of repository details

  • codecommit:GetRepository: Permits fetching details of a specific repository

  • codecommit:ListRepositories: Grants the ability to list repositories within an account

  • codecommit:GetRepositoryTriggers: Allows fetching of triggers configured for a repository

  • codecommit:PutRepositoryTriggers: Enables configuration of repository triggers

  • codecommit:TestRepositoryTriggers: Allows testing of repository triggers

  • codecommit:GetTree: Required to view the contents of a specified tree in a repository from the CodeCommit console. This is an IAM policy permission only, not an API action that you can call

  • codecommit:GetReferences: Permits fetching of references (branches, tags, etc.) in a repository

  • codecommit:GetObjectIdentifier: Grants access to object identifiers within a repository

  • codecommit:GetCommitHistory: Allows fetching of commit history for a repository

  • codecommit:BatchGetPullRequests: Required to return information about one or more pull requests in a repository. This is an IAM policy permission only, not an API action that you can call

  • codecommit:BatchGetCommits: Enables batch retrieval of commit details

  • codecommit:GetCommentsForComparedCommit: Required to return information about comments made on the comparison between two commits in a repository

  • codecommit:PostCommentForComparedCommit: Required to create a comment on the comparison between two commits in a repository

  • codecommit:PostCommentReply: Enables posting replies to comments on pull requests

  • codecommit:ListPullRequests: Required to return information about the pull requests for a repository

  • codecommit:DeleteCommentContent: Required to delete the content of a comment made on a change, file, or commit in a repository. Comments cannot be deleted, but the content of a comment can be removed if the user has this permission

  • codecommit:CreateBranch: Permits creation of branches within a repository

  • codecommit:GetBranch: Permits retrieval of branch details

  • codecommit:CreateCommit: Allows creation of commits in a repository

  • codecommit:CreatePullRequest: Enables creation of pull requests in a repository

  • codecommit:PutFile: Required to add a new or modified file to a repository from the CodeCommit console, CodeCommit API, or the AWS CLI

  • codecommit:ListAssociatedApprovalRuleTemplatesForRepository: Grants access to associated approval rule templates for a repository

  • codecommit:ListApprovalRuleTemplates: Allows listing of approval rule templates

  • codecommit:GetApprovalRuleTemplate: Required to return information about an approval rule template in an Amazon Web Services account

  • codecommit:ListRepositoriesForApprovalRuleTemplate: Permits listing of repositories associated with an approval rule template

Last updated

Was this helpful?