{"Version": "2012-10-17", "Statement": [{"Sid": "AllowElasticBeanstalkReadOnly", "Effect": "Allow", "Action": ["autoscaling:DescribeAutoScalingGroups", "ec2:Describe*", "elasticbeanstalk:Check*", "elasticbeanstalk:DescribeApplicationVersions", "elasticbeanstalk:DescribeApplications", "elasticbeanstalk:DescribeConfigurationSettings", "elasticbeanstalk:DescribeEnvironmentHealth", "elasticbeanstalk:DescribeEnvironmentManagedActions", "elasticbeanstalk:DescribeEnvironmentManagedActionHistory", "elasticbeanstalk:DescribeEnvironmentResources", "elasticbeanstalk:DescribeEnvironments", "elasticbeanstalk:DescribeEvents", "elasticbeanstalk:DescribeInstancesHealth", "elasticbeanstalk:DescribePlatformVersion", "elasticbeanstalk:List*", "elasticbeanstalk:RequestEnvironmentInfo", "elasticbeanstalk:RetrieveEnvironmentInfo", "elasticbeanstalk:CreateStorageLocation"], "Resource": ["*"]}, {"Sid": "CloudwatchReadOnly", "Effect": "Allow", "Action": ["cloudwatch:Describe*", "cloudwatch:Get*", "cloudwatch:List*"], "Resource": ["*"]}, {"Sid": "CloudformationDeny", "Effect": "Deny", "Action": ["cloudformation:Describe*", "cloudformation:Get*", "cloudformation:List*"], "Resource": ["arn:aws:cloudformation:us-east-1:437795906767:stack/prod-cloudsearch-etl-20150714/*", "arn:aws:cloudformation:us-east-1:437795906767:stack/Orchard-Web-Services/*", "arn:aws:cloudformation:us-east-1:437795906767:stack/SoundScan/*"]}, {"Sid": "CloudformationReadOnly", "Effect": "Allow", "Action": ["cloudformation:Describe*", "cloudformation:Get*", "cloudformation:List*"], "Resource": ["*"]}, {"Sid": "SNSReadOnly", "Effect": "Allow", "Action": ["sns:Get*", "sns:List*"], "Resource": ["*"]}, {"Sid": "SQSReadOnly", "Effect": "Allow", "Action": ["sqs:Get*", "sqs:List*"], "Resource": ["*"]}, {"Sid": "S3ListAllBuckets", "Effect": "Allow", "Action": ["s3:ListAllMyBuckets"], "Resource": ["arn:aws:s3:::*"]}, {"Sid": "S3AccessForLogRequests", "Effect": "Allow", "Action": ["s3:Get*", "s3:List*", "s3:Put*"], "Resource": ["arn:aws:s3:::elasticbeanstalk-*", "arn:aws:s3:::elasticbeanstalk-*/*"]}, {"Sid": "S3ElasticBeanstalkShared", "Effect": "Allow", "Action": "s3:*", "Resource": ["arn:aws:s3:::elasticbeanstalk-env-resources-us-east-1", "arn:aws:s3:::elasticbeanstalk-env-resources-us-east-1/*"]}]}