codebuild:PutResourcePolicy

Permissions management

codebuild:PutResourcePolicy is a Permissions management access-level action in the codebuild service. Grants permission to create a resource policy for the associated project or report group

Resource types

ARNs that codebuild:PutResourcePolicy can be scoped to in an IAM policy.

arn:${Partition}:codebuild:${Region}:${Account}:project/${ProjectName}
project
arn:${Partition}:codebuild:${Region}:${Account}:report-group/${ReportGroupName}
report-group

Condition keys

Keys you can use in the Condition block of a policy that grants codebuild:PutResourcePolicy.

aws:ResourceTag/${TagKey} String

Filters access by actions based on tag key-value pairs attached to the resource

Example IAM policy

A minimal policy that allows codebuild:PutResourcePolicy. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowCodebuildPutResourcePolicy",
      "Effect": "Allow",
      "Action": "codebuild:PutResourcePolicy",
      "Resource": "*"
    }
  ]
}

Related actions in codebuild

codebuild:BatchDeleteBuilds Write codebuild:BatchGetBuildBatches Read codebuild:BatchGetBuilds Read codebuild:BatchGetCommandExecutions Read codebuild:BatchGetFleets Read codebuild:BatchGetProjects Read codebuild:BatchGetReportGroups Read codebuild:BatchGetReports Read codebuild:BatchGetSandboxes Read codebuild:BatchPutCodeCoverages Write codebuild:BatchPutTestCases Write codebuild:CreateFleet Write

View all codebuild actions →