codecommit:GetBlob

Read

codecommit:GetBlob is a Read access-level action in the codecommit service. Grants permission to view the encoded content of an individual file in an AWS CodeCommit repository from the AWS CodeCommit console

Resource types

ARNs that codecommit:GetBlob can be scoped to in an IAM policy.

arn:${Partition}:codecommit:${Region}:${Account}:${RepositoryName}
repository

Condition keys

Keys you can use in the Condition block of a policy that grants codecommit:GetBlob.

aws:ResourceTag/${TagKey} String

Filters access by tag key-value pairs attached to the resource

Example IAM policy

A minimal policy that allows codecommit:GetBlob. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowCodecommitGetBlob",
      "Effect": "Allow",
      "Action": "codecommit:GetBlob",
      "Resource": "*"
    }
  ]
}

Related actions in codecommit

codecommit:AssociateApprovalRuleTemplateWithRepository Write codecommit:BatchAssociateApprovalRuleTemplateWithRepositories Write codecommit:BatchDescribeMergeConflicts Read codecommit:BatchDisassociateApprovalRuleTemplateFromRepositories Write codecommit:BatchGetCommits Read codecommit:BatchGetPullRequests Read codecommit:BatchGetRepositories Read codecommit:CancelUploadArchive Read codecommit:CreateApprovalRuleTemplate Write codecommit:CreateBranch Write codecommit:CreateCommit Write codecommit:CreatePullRequest Write

View all codecommit actions →