🔒Privacidade e Segurança

A LevelFour foi desenvolvida pensando na privacidade dos dados e zero risco para seu negócio.

🛡️ Acesso não invasivo.

• Não acessamos seu código, tráfego de rede ou qualquer dado privado. Coletamos apenas métricas de uso e dados de serviços.

🛡️ Sem riscos para a aplicação.

• As otimizações e economias implementadas não afetam a performance do seu produto ou serviço.

---

👉 IAM Policy

{
  "AWSTemplateFormatVersion": "2010-09-09",
  "Description": "AWS CloudFormation Template for LevelFour's Customers",
  "Parameters": {
    "LevelFourHandshakeID": {
      "Description": "The LevelFour external ID to authenticate your account. Do not change or share this.",
      "MinLength": "1",
      "Type": "String"
    }
  },
  "Resources": {
    "CrossAccountRole": {
      "Type": "AWS::IAM::Role",
      "Properties": {
        "AssumeRolePolicyDocument": {
          "Statement": [
            {
              "Effect": "Allow",
              "Principal": {
                "AWS": "arn:aws:iam::730335248431:root"
              },
              "Action": [
                "sts:AssumeRole"
              ],
              "Condition": {
                "StringEquals": {
                  "sts:ExternalId": {
                    "Ref": "LevelFourHandshakeID"
                  }
                }
              }
            }
          ]
        },
        "ManagedPolicyArns": [
          "arn:aws:iam::aws:policy/ReadOnlyAccess"
        ],
        "Path": "/",
        "Policies": [
          {
            "PolicyName": "LevelFourAccess",
            "PolicyDocument": {
              "Version": "2012-10-17",
              "Statement": [
                {
                  "Sid": "BCMDataExportsActions",
                  "Effect": "Allow",
                  "Action": [
                    "bcm-data-exports:Get*",
                    "bcm-data-exports:List*",
                    "bcm-data-exports:CreateExport",
                    "bcm-data-exports:TagResource",
                    "bcm-data-exports:UntagResource",
                    "bcm-data-exports:UpdateExport"
                  ],
                  "Resource": "*"
                },
                {
                  "Sid": "BudgetsActions",
                  "Effect": "Allow",
                  "Action": [
                    "budgets:View*"
                  ],
                  "Resource": "*"
                },
                {
                  "Sid": "CostExplorerActions",
                  "Effect": "Allow",
                  "Action": [
                    "ce:Describe*",
                    "ce:Get*",
                    "ce:List*"
                  ],
                  "Resource": "*"
                },
                {
                  "Sid": "ComputeOptimizerActions",
                  "Effect": "Allow",
                  "Action": [
                    "compute-optimizer:Describe*",
                    "compute-optimizer:Export*",
                    "compute-optimizer:Get*",
                    "compute-optimizer:PutRecommendationPreferences",
                    "compute-optimizer:UpdateEnrollmentStatus"
                  ],
                  "Resource": "*"
                },
                {
                  "Sid": "CostOptimizationHubActions",
                  "Effect": "Allow",
                  "Action": [
                    "cost-optimization-hub:Get*",
                    "cost-optimization-hub:List*",
                    "cost-optimization-hub:UpdateEnrollmentStatus",
                    "cost-optimization-hub:UpdatePreferences"
                  ],
                  "Resource": "*"
                },
                {
                  "Sid": "CostAndUsageReportActions",
                  "Effect": "Allow",
                  "Action": [
                    "cur:Describe*",
                    "cur:Get*",
                    "cur:List*",
                    "cur:ModifyReportDefinition",
                    "cur:PutClassicReportPreferences",
                    "cur:PutReportDefinition",
                    "cur:TagResource"
                  ],
                  "Resource": "*"
                },
                {
                  "Sid": "IAMServiceLinkedRoleActions",
                  "Effect": "Allow",
                  "Action": [
                    "iam:CreateServiceLinkedRole"
                  ],
                  "Resource": "*"
                },
                {
                  "Sid": "OrganizationsActions",
                  "Effect": "Allow",
                  "Action": [
                    "organizations:Describe*",
                    "organizations:List*"
                  ],
                  "Resource": "*"
                },
                {
                  "Sid": "PricingActions",
                  "Effect": "Allow",
                  "Action": [
                    "pricing:Describe*",
                    "pricing:Get*",
                    "pricing:List*"
                  ],
                  "Resource": "*"
                },
                {
                  "Sid": "S3StorageLensActions",
                  "Effect": "Allow",
                  "Action": [
                    "s3:CreateStorageLensGroup",
                    "s3:PutStorageLensConfiguration",
                    "s3:PutStorageLensConfigurationTagging"
                  ],
                  "Resource": "*"
                },
                {
                  "Sid": "SavingsPlansActions",
                  "Effect": "Allow",
                  "Action": [
                    "savingsplans:Describe*",
                    "savingsplans:List*",
                    "savingsplans:Get*"
                  ],
                  "Resource": "*"
                },
                {
                  "Sid": "ContainerMetricsActions",
                  "Effect": "Allow",
                  "Action": [
                    "autoscaling:Describe*",
                    "cloudwatch:Describe*",
                    "cloudwatch:Get*",
                    "cloudwatch:List*"
                  ],
                  "Resource": "*"
                }
              ]
            }
          }
        ]
      }
    }
  },
  "Outputs": {
    "RoleArn": {
      "Value": {
        "Fn::GetAtt": [
          "CrossAccountRole",
          "Arn"
        ]
      },
      "Description": "The ARN value of the Cross-Account Role with IAM permissions. Add this ARN value to LevelFour Platform."
    },
    "HandshakeID": {
      "Value": {
        "Ref": "LevelFourHandshakeID"
      },
      "Description": "The external ID to authenticate your account. Do not change or share this."
    }
  }
}