Policy: AWSCodeCommitReadOnly ARN: arn:aws:iam::aws:policy/AWSCodeCommitReadOnly Allowed Actions Actions Services codecommit:BatchDescribe* codecommit codecommit:BatchGet* codecommit codecommit:Describe* codecommit codecommit:EvaluatePullRequestApprovalRules codecommit codecommit:Get* codecommit codecommit:GitPull codecommit codecommit:List* codecommit codeguru-reviewer:DescribeCodeReview codeguru-reviewer codeguru-reviewer:DescribeRepositoryAssociation codeguru-reviewer codeguru-reviewer:ListCodeReviews codeguru-reviewer codeguru-reviewer:ListRepositoryAssociations codeguru-reviewer codestar-connections:GetConnection codestar-connections codestar-connections:ListConnections codestar-connections codestar-notifications:DescribeNotificationRule codestar-notifications codestar-notifications:ListEventTypes codestar-notifications codestar-notifications:ListNotificationRules codestar-notifications codestar-notifications:ListTargets codestar-notifications events:DescribeRule events events:ListTargetsByRule events iam:GetSSHPublicKey iam iam:ListAccessKeys iam iam:ListSSHPublicKeys iam iam:ListServiceSpecificCredentials iam iam:ListUsers iam lambda:ListFunctions lambda sns:GetTopicAttributes sns sns:ListSubscriptionsByTopic sns sns:ListTopics sns