elasticbeanstalk:DescribeEnvironmentResources is a Read access-level action in the elasticbeanstalk service. Grants permission to retrieve a list of AWS resources for an environment
ARNs that elasticbeanstalk:DescribeEnvironmentResources can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants elasticbeanstalk:DescribeEnvironmentResources.
Filters actions based on tag key-value pairs attached to the resource
Filters access by the application that contains the resource that the action operates on
A minimal policy that allows elasticbeanstalk:DescribeEnvironmentResources. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowElasticbeanstalkDescribeEnvironmentResources",
"Effect": "Allow",
"Action": "elasticbeanstalk:DescribeEnvironmentResources",
"Resource": "*"
}
]
}