lightsail:GetContainerAPIMetadata is a Read access-level action in the lightsail service. Grants permission to view information about Amazon Lightsail containers, such as the current version of the Lightsail Control (lightsailctl) plugin
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows lightsail:GetContainerAPIMetadata. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowLightsailGetContainerAPIMetadata",
"Effect": "Allow",
"Action": "lightsail:GetContainerAPIMetadata",
"Resource": "*"
}
]
}