- Effect: Allow
    Action: 
    - s3:ListBucket
    - s3:GetBucketAcl
    Resource:
    - arn:aws:s3:::{{codeBucket}}
    - arn:aws:s3:::amazon-reviews-pds
  - Effect: Allow
    Action:
    - s3:PutObject
    - s3:GetObject
    Resource:
    - arn:aws:s3:::{{codeBucket}}/*
    - arn:aws:s3:::amazon-reviews-pds/parquet/*
  - Effect: Allow
    Action:
    - s3:DeleteObject
    Resource:
    - arn:aws:s3:::{{codeBucket}}/*
  - Effect: Allow
    Action:
    - kms:Encrypt
    - kms:Decrypt
    - kms:GenerateDataKey*
    - kms:DescribeKey
    Resource:
      - '*'  
  - Effect: Allow
    Action:
    - logs:PutLogEvents
    - logs:CreateLogStream
    - logs:DescribeLogGroups
    - logs:DescribeLogStreams
    Resource:
    - arn:aws:logs:*:*:*
  - Effect: Allow
    Action:
    - glue:Get*
    - glue:BatchCreatePartition
    - glue:UpdateTable
    - glue:CreateTable
    - glue:CreateDatabase
    - glue:DeleteTable
    - glue:DeleteDatabase
    Resource:
    - arn:aws:glue:{{AWS_REGION}}:{{ACCOUNT}}:catalog
    - arn:aws:glue:{{AWS_REGION}}:{{ACCOUNT}}:database/*
    - arn:aws:glue:{{AWS_REGION}}:{{ACCOUNT}}:table/*
    - arn:aws:glue:{{AWS_REGION}}:{{ACCOUNT}}:userDefinedFunction/*