coverage.json

[
    {
        "resource_type": "AWS::EC2::SecurityGroup",
        "policy_statements": [
            "cloudformation:GetResource",
            "ec2:DescribeSecurityGroups"
        ],
        "service": "ec2",
        "identifier": "GroupId"
    },
    {
        "resource_type": "AWS::EC2::Subnet",
        "policy_statements": [
            "cloudformation:GetResource",
            "ec2:DescribeSubnets"
        ],
        "service": "ec2",
        "identifier": "SubnetId"
    },
    {
        "resource_type": "AWS::EC2::VPC",
        "policy_statements": [
            "cloudformation:GetResource",
            "ec2:DescribeVpcs"
        ],
        "service": "ec2",
        "identifier": "VpcId"
    },
    {
        "resource_type": "AWS::ECR::Repository",
        "policy_statements": [
            "cloudformation:GetResource",
            "ecr:BatchCheckLayerAvailability",
            "ecr:BatchGetImage",
            "ecr:DescribeRepositories",
            "ecr:GetAuthorizationToken",
            "ecr:GetDownloadUrlForLayer",
            "ecr:GetLifecyclePolicy",
            "ecr:GetRepositoryPolicy",
            "ecr:ListTagsForResource"
        ],
        "service": "ecr",
        "identifier": "RepositoryName:<ImageTag[Optional]>"
    },
    {
        "resource_type": "AWS::IAM::Policy",
        "policy_statements": [
            "iam:GetPolicy"
        ],
        "service": "iam",
        "identifier": "Arn"
    },
    {
        "resource_type": "AWS::IAM::Role",
        "policy_statements": [
            "cloudformation:GetResource",
            "iam:GetRole"
        ],
        "service": "iam",
        "identifier": "RoleName"
    },
    {
        "resource_type": "AWS::KMS::Key",
        "policy_statements": [
            "cloudformation:GetResource",
            "kms:DescribeKey"
        ],
        "service": "kms",
        "identifier": "KeyId"
    },
    {
        "resource_type": "AWS::Lambda::LayerVersion",
        "policy_statements": [
            "cloudformation:GetResource",
            "lambda:GetLayerVersion"
        ],
        "service": "lambda",
        "identifier": "LayerVersionArn"
    },
    {
        "resource_type": "AWS::SSM::Parameter",
        "policy_statements": [
            "cloudformation:GetResource",
            "ssm:GetParameters"
        ],
        "service": "ssm",
        "identifier": "Name"
    },
    {
        "resource_type": "AWS::SecretsManager::Secret",
        "policy_statements": [
            "cloudformation:GetResource",
            "secretsmanager:DescribeSecret"
        ],
        "service": "secretsmanager",
        "identifier": "Arn"
    }
]