| codepipeline:CreateCustomActionType | Admin |
| codepipeline:CreatePipeline | Admin |
| codepipeline:DeleteCustomActionType | Admin |
| codepipeline:DeletePipeline | Admin |
| codepipeline:DeleteWebhook | Admin |
| codepipeline:DeregisterWebhookWithThirdParty | Admin |
| codepipeline:ListWebhooks | Admin |
| codepipeline:PutWebhook | Admin |
| codepipeline:RegisterWebhookWithThirdParty | Admin |
| iam:PassRole | Admin |
| s3:CreateBucket | Admin |
| s3:PutBucketPolicy | Admin |
| codepipeline:DisableStageTransition | Operator |
| codepipeline:EnableStageTransition | Operator |
| codepipeline:PollForJobs | Operator |
| codepipeline:PollForThirdPartyJobs | Operator |
| codepipeline:PutActionRevision | Operator |
| codepipeline:PutApprovalResult | Operator |
| codepipeline:PutJobFailureResult | Operator |
| codepipeline:PutJobSuccessResult | Operator |
| codepipeline:PutThirdPartyJobFailureResult | Operator |
| codepipeline:PutThirdPartyJobSuccessResult | Operator |
| codepipeline:RetryStageExecution | Operator |
| codepipeline:StartPipelineExecution | Operator |
| codepipeline:UpdatePipeline | Operator |
| s3:GetObject | Operator |
| codedeploy:GetApplication | Metadata |
| codedeploy:GetDeploymentGroup | Metadata |
| codedeploy:ListApplications | Metadata |
| codedeploy:ListDeploymentGroups | Metadata |
| codepipeline:AcknowledgeJob | Metadata |
| codepipeline:AcknowledgeThirdPartyJob | Metadata |
| codepipeline:GetJobDetails | Metadata |
| codepipeline:GetPipeline | Metadata |
| codepipeline:GetPipelineExecution | Metadata |
| codepipeline:GetPipelineState | Metadata |
| codepipeline:GetThirdPartyJobDetails | Metadata |
| codepipeline:ListActionTypes | Metadata |
| codepipeline:ListPipelineExecutions | Metadata |
| codepipeline:ListPipelines | Metadata |
| elasticbeanstalk:DescribeApplications | Metadata |
| elasticbeanstalk:DescribeEnvironments | Metadata |
| iam:ListRoles | Metadata |
| lambda:GetFunctionConfiguration | Metadata |
| lambda:ListFunctions | Metadata |
| s3:GetBucketPolicy | Metadata |
| s3:ListAllMyBuckets | Metadata |
| s3:ListBucket | Metadata |
