cloudfront.yml

Actions:
  - Name: cloudfront:AssociateAlias
  - Name: cloudfront:CopyDistribution
  - Name: cloudfront:CreateCachePolicy
  - Name: cloudfront:CreateCloudFrontOriginAccessIdentity
  - Name: cloudfront:CreateContinuousDeploymentPolicy
  - Name: cloudfront:CreateDistribution
  - Name: cloudfront:CreateFieldLevelEncryptionConfig
  - Name: cloudfront:CreateFieldLevelEncryptionProfile
  - Name: cloudfront:CreateFunction
  - Name: cloudfront:CreateInvalidation
  - Name: cloudfront:CreateKeyGroup
  - Name: cloudfront:CreateKeyValueStore
  - Name: cloudfront:CreateMonitoringSubscription
  - Name: cloudfront:CreateOriginAccessControl
  - Name: cloudfront:CreateOriginRequestPolicy
  - Name: cloudfront:CreatePublicKey
  - Name: cloudfront:CreateRealtimeLogConfig
  - Name: cloudfront:CreateResponseHeadersPolicy
  - Name: cloudfront:CreateStreamingDistribution
  - Name: cloudfront:CreateStreamingDistributionWithTags
  - Name: cloudfront:DeleteCachePolicy
  - Name: cloudfront:DeleteCloudFrontOriginAccessIdentity
  - Name: cloudfront:DeleteContinuousDeploymentPolicy
  - Name: cloudfront:DeleteDistribution
  - Name: cloudfront:DeleteFieldLevelEncryptionConfig
  - Name: cloudfront:DeleteFieldLevelEncryptionProfile
  - Name: cloudfront:DeleteFunction
  - Name: cloudfront:DeleteKeyGroup
  - Name: cloudfront:DeleteKeyValueStore
  - Name: cloudfront:DeleteMonitoringSubscription
  - Name: cloudfront:DeleteOriginAccessControl
  - Name: cloudfront:DeleteOriginRequestPolicy
  - Name: cloudfront:DeletePublicKey
  - Name: cloudfront:DeleteRealtimeLogConfig
  - Name: cloudfront:DeleteResponseHeadersPolicy
  - Name: cloudfront:DeleteStreamingDistribution
  - Name: cloudfront:DescribeFunction
  - Name: cloudfront:DescribeKeyValueStore
  - Name: cloudfront:GetCachePolicy
  - Name: cloudfront:GetCachePolicyConfig
  - Name: cloudfront:GetCloudFrontOriginAccessIdentity
  - Name: cloudfront:GetCloudFrontOriginAccessIdentityConfig
  - Name: cloudfront:GetContinuousDeploymentPolicy
  - Name: cloudfront:GetContinuousDeploymentPolicyConfig
  - Name: cloudfront:GetDistribution
  - Name: cloudfront:GetDistributionConfig
  - Name: cloudfront:GetFieldLevelEncryption
  - Name: cloudfront:GetFieldLevelEncryptionConfig
  - Name: cloudfront:GetFieldLevelEncryptionProfile
  - Name: cloudfront:GetFieldLevelEncryptionProfileConfig
  - Name: cloudfront:GetFunction
  - Name: cloudfront:GetInvalidation
  - Name: cloudfront:GetKeyGroup
  - Name: cloudfront:GetKeyGroupConfig
  - Name: cloudfront:GetMonitoringSubscription
  - Name: cloudfront:GetOriginAccessControl
  - Name: cloudfront:GetOriginAccessControlConfig
  - Name: cloudfront:GetOriginRequestPolicy
  - Name: cloudfront:GetOriginRequestPolicyConfig
  - Name: cloudfront:GetPublicKey
  - Name: cloudfront:GetPublicKeyConfig
  - Name: cloudfront:GetRealtimeLogConfig
  - Name: cloudfront:GetResponseHeadersPolicy
  - Name: cloudfront:GetResponseHeadersPolicyConfig
  - Name: cloudfront:GetStreamingDistribution
  - Name: cloudfront:GetStreamingDistributionConfig
  - Name: cloudfront:ListCachePolicies
  - Name: cloudfront:ListCloudFrontOriginAccessIdentities
  - Name: cloudfront:ListConflictingAliases
  - Name: cloudfront:ListContinuousDeploymentPolicies
  - Name: cloudfront:ListDistributions
  - Name: cloudfront:ListDistributionsByCachePolicyId
  - Name: cloudfront:ListDistributionsByKeyGroup
  - Name: cloudfront:ListDistributionsByOriginRequestPolicyId
  - Name: cloudfront:ListDistributionsByRealtimeLogConfig
  - Name: cloudfront:ListDistributionsByResponseHeadersPolicyId
  - Name: cloudfront:ListDistributionsByWebACLId
  - Name: cloudfront:ListFieldLevelEncryptionConfigs
  - Name: cloudfront:ListFieldLevelEncryptionProfiles
  - Name: cloudfront:ListFunctions
  - Name: cloudfront:ListInvalidations
  - Name: cloudfront:ListKeyGroups
  - Name: cloudfront:ListKeyValueStores
  - Name: cloudfront:ListOriginAccessControls
  - Name: cloudfront:ListOriginRequestPolicies
  - Name: cloudfront:ListPublicKeys
  - Name: cloudfront:ListRealtimeLogConfigs
  - Name: cloudfront:ListResponseHeadersPolicies
  - Name: cloudfront:ListStreamingDistributions
  - Name: cloudfront:ListTagsForResource
  - Name: cloudfront:PublishFunction
  - Name: cloudfront:TagResource
  - Name: cloudfront:TestFunction
  - Name: cloudfront:UntagResource
  - Name: cloudfront:UpdateCachePolicy
  - Name: cloudfront:UpdateCloudFrontOriginAccessIdentity
  - Name: cloudfront:UpdateContinuousDeploymentPolicy
  - Name: cloudfront:UpdateDistribution
  - Name: cloudfront:UpdateDistributionWithStagingConfig
  - Name: cloudfront:UpdateFieldLevelEncryptionConfig
  - Name: cloudfront:UpdateFieldLevelEncryptionProfile
  - Name: cloudfront:UpdateFunction
  - Name: cloudfront:UpdateKeyGroup
  - Name: cloudfront:UpdateKeyValueStore
  - Name: cloudfront:UpdateOriginAccessControl
  - Name: cloudfront:UpdateOriginRequestPolicy
  - Name: cloudfront:UpdatePublicKey
  - Name: cloudfront:UpdateRealtimeLogConfig
  - Name: cloudfront:UpdateResponseHeadersPolicy
  - Name: cloudfront:UpdateStreamingDistribution

  # actions with no corresponding API
  - Name: cloudfront:AllowVendedLogDeliveryForResource
  - Name: cloudfront:CreateAnycastIpList
  - Name: cloudfront:CreateSavingsPlan
  - Name: cloudfront:CreateVpcOrigin
  - Name: cloudfront:DeleteAnycastIpList
  - Name: cloudfront:DeleteVpcOrigin
  - Name: cloudfront:GetAnycastIpList
  - Name: cloudfront:GetSavingsPlan
  - Name: cloudfront:GetVpcOrigin
  - Name: cloudfront:ListAnycastIpLists
  - Name: cloudfront:ListDistributionsByAnycastIpListId
  - Name: cloudfront:ListDistributionsByLambdaFunction
  - Name: cloudfront:ListDistributionsByVpcOriginId
  - Name: cloudfront:ListRateCards
  - Name: cloudfront:ListSavingsPlans
  - Name: cloudfront:ListUsages
  - Name: cloudfront:ListVpcOrigins
  - Name: cloudfront:UpdateSavingsPlan
  - Name: cloudfront:UpdateVpcOrigin

  # APIs without an IAM action
  - Name: cloudfront:CreateDistributionWithTags