AWS Lightsail (IAM)

aws compute

Amazon Lightsail is the easiest way to get started with AWS for developers, offering virtual private servers, storage, databases, and networking.

Common permissions

lightsail:GetInstancelightsail:GetInstanceslightsail:GetDisklightsail:GetDiskslightsail:GetBucketslightsail:GetDomainslightsail:GetStaticIpslightsail:GetOperations

Least-privilege example

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "lightsail:GetInstance",
        "lightsail:GetInstances",
        "lightsail:GetDisk",
        "lightsail:GetDisks",
        "lightsail:GetBuckets",
        "lightsail:GetDomains",
        "lightsail:GetStaticIps",
        "lightsail:GetOperations"
      ],
      "Resource": "*"
    }
  ]
}

Warnings

Avoid lightsail:* — grants full control including instance and disk deletion.
Avoid lightsail:DeleteInstance — can permanently remove a virtual server and its data.

Resources

AWS referenceservicereference.us-east-1.amazonaws.com/v1/lightsail/lightsail.json ↗

API

full doc /v1/iam/lightsail