aws-beanstalk-trigger-redeploy
Restart/rebuild re-runs deploy hooks (.ebextensions) on the instances.
match (effective permission)
{
"action": "elasticbeanstalk:RestartAppServer",
"resource_type": "AWS::ElasticBeanstalk::Environment"
}
emit
| target type | Compute |
|---|---|
| source | <principal> |
| target | <Elastic Beanstalk environment> |
| permissions | elasticbeanstalk:RestartAppServer |
| conditions | iam_permission |
Narrative
{principal.name} can restart/rebuild {environment.name} (elasticbeanstalk:RestartAppServer), re-running its deploy hooks.
Raw rule rules/derived/aws/beanstalk.yaml
id: aws-beanstalk-trigger-redeploy
emits: CanTrigger
description: Restart/rebuild re-runs deploy hooks (.ebextensions) on the instances.
match_effective_permission:
action: elasticbeanstalk:RestartAppServer
resource_type: AWS::ElasticBeanstalk::Environment
optional_permission: elasticbeanstalk:RebuildEnvironment
emit:
target_type: Compute
source: <principal>
target: <Elastic Beanstalk environment>
permissions:
- elasticbeanstalk:RestartAppServer
conditions:
- iam_permission
note: elasticbeanstalk:RebuildEnvironment is an optional stronger trigger (see optional_permission)
that re-provisions instances; RestartAppServer only re-runs deploy hooks on existing instances.
narrative: '{principal.name} can restart/rebuild {environment.name} (elasticbeanstalk:RestartAppServer),
re-running its deploy hooks.'