+| <a name="input_action"></a> [action](#input\_action) | List of actions allowed by policy and periodically triggered. By default,<br>this list contains all policies which the lambda can act upon. You should<br>only override this list if you do not want to execute more actions as they<br>become available in future lambda upgrades. If you instead wish to extend<br>this list, or ignore a subset of actions, use \"include\" and \"exclude\". | `list(string)` | <pre>[<br> "apigateway:Get*",<br> "apigatewayv2:Get*",<br> "autoscaling:Describe*",<br> "cloudformation:Describe*",<br> "cloudformation:List*",<br> "cloudfront:List*",<br> "dynamodb:Describe*",<br> "dynamodb:List*",<br> "ec2:Describe*",<br> "ecs:Describe*",<br> "ecs:List*",<br> "eks:Describe*",<br> "eks:List*",<br> "elasticbeanstalk:Describe*",<br> "elasticache:Describe*",<br> "elasticfilesystem:Describe*",<br> "elasticloadbalancing:Describe*",<br> "elasticmapreduce:Describe*",<br> "elasticmapreduce:List*",<br> "events:List*",<br> "firehose:Describe*",<br> "firehose:List*",<br> "iam:Get*",<br> "iam:List*",<br> "kinesis:Describe*",<br> "kinesis:List*",<br> "kms:Describe*",<br> "kms:List*",<br> "lambda:List*",<br> "logs:Describe*",<br> "organizations:Describe*",<br> "organizations:List*",<br> "rds:Describe*",<br> "redshift:Describe*",<br> "route53:List*",<br> "s3:GetBucket*",<br> "s3:List*",<br> "secretsmanager:List*",<br> "sns:Get*",<br> "sns:List*",<br> "sqs:Get*",<br> "sqs:List*",<br> "synthetics:Describe*",<br> "synthetics:List*"<br>]</pre> | no |
0 commit comments