Reference A: IAM Service Role permissions
AWS CodeCommit permissions configured by the CloudFormation integration template
The AWS CodeCommit CloudFormation template configures these permissions for the service role. You do not need to configure them manually.
codecommit:GitPull: Allows users to pull Git repository changes
codecommit:ListBranches: Grants the ability to list branches within a repository
codecommit:GetBranch: Required to get details about a branch in a repository
codecommit:GetPullRequest: Enables fetching details of a specific pull request
codecommit:GetFolder: Required to view the contents of a specified folder in a repository from the CodeCommit console
codecommit:GetFile: Required to view the encoded content of an individual file and its metadata in a repository from the CodeCommit console
codecommit:GetBlob: Allows fetching of an object (such as a file) from a repository
codecommit:GetCommitsFromMergeBase: Grants access to commits from the merge base of a branch
codecommit:GetCommentsForPullRequest: Allows retrieval of comments associated with a pull request
codecommit:PostCommentReply: Required to create a reply to a comment on a comparison between commits or on a pull request
codecommit:UpdateComment: Allows updating of comments on pull requests
codecommit:PostCommentForPullRequest: Required to post a comment on a pull request in a repository
codecommit:GetComment: Permits retrieval of a specific comment on a pull request
codecommit:GetCommit: Allows fetching details of a specific commit
codecommit:GetDifferences: Grants access to differences (changes) between commits, branches, and so on
codecommit:BatchGetRepositories: Enables batch retrieval of repository details
codecommit:GetRepository: Permits fetching details of a specific repository
codecommit:ListRepositories: Grants the ability to list repositories within an account
codecommit:GetRepositoryTriggers: Allows fetching of triggers configured for a repository
codecommit:PutRepositoryTriggers: Enables configuration of repository triggers
codecommit:TestRepositoryTriggers: Allows testing of repository triggers
codecommit:GetTree: Required to view the contents of a specified tree in a repository from the CodeCommit console. This is an IAM policy permission only, not an API action that you can call
codecommit:GetReferences: Permits fetching of references (branches, tags, etc.) in a repository
codecommit:GetObjectIdentifier: Grants access to object identifiers within a repository
codecommit:GetCommitHistory: Allows fetching of commit history for a repository
codecommit:BatchGetPullRequests: Required to return information about one or more pull requests in a repository. This is an IAM policy permission only, not an API action that you can call
codecommit:BatchGetCommits: Enables batch retrieval of commit details
codecommit:GetCommentsForComparedCommit: Required to return information about comments made on the comparison between two commits in a repository
codecommit:PostCommentForComparedCommit: Required to create a comment on the comparison between two commits in a repository
codecommit:PostCommentReply: Enables posting replies to comments on pull requests
codecommit:ListPullRequests: Required to return information about the pull requests for a repository
codecommit:DeleteCommentContent: Required to delete the content of a comment made on a change, file, or commit in a repository. Comments cannot be deleted, but the content of a comment can be removed if the user has this permission
codecommit:CreateBranch: Permits creation of branches within a repository
codecommit:GetBranch: Permits retrieval of branch details
codecommit:CreateCommit: Allows creation of commits in a repository
codecommit:CreatePullRequest: Enables creation of pull requests in a repository
codecommit:PutFile: Required to add a new or modified file to a repository from the CodeCommit console, CodeCommit API, or the AWS CLI
codecommit:ListAssociatedApprovalRuleTemplatesForRepository: Grants access to associated approval rule templates for a repository
codecommit:ListApprovalRuleTemplates: Allows listing of approval rule templates
codecommit:GetApprovalRuleTemplate: Required to return information about an approval rule template in an Amazon Web Services account
codecommit:ListRepositoriesForApprovalRuleTemplate: Permits listing of repositories associated with an approval rule template
Last updated
Was this helpful?
