LiveOpsPoppy

Screenshots

⤢

⤢

⤢

‹›

What you'd be asked to approve

Before LiveOpsPoppy can touch your AWS account, AgentsPoppy shows this exact grant and waits for your yes. This preview is computed from the poppy's reviewed package by the same assessor code the app runs — it is the approval screen, shown early.

• cloudformationIts own

  Can create, change and delete only CLOUDFORMATION resources named arn:aws:cloudformation:*:*:stack/LiveOpsPoppy* — it cannot change or delete any CLOUDFORMATION resource with a different name.

  7 actions

  CreateStack · UpdateStack · ContinueUpdateRollback · DeleteStack · DescribeStacks · DescribeStackEvents · DescribeStackResources
• dynamodbIts own

  Can create, change and delete only DYNAMODB resources named arn:aws:dynamodb:*:*:table/LiveOpsPoppy* — it cannot change or delete any DYNAMODB resource with a different name.

  13 actions

  CreateTable · DeleteTable · DescribeTable · UpdateTimeToLive · DescribeTimeToLive · TagResource · ListTagsOfResource · Query · Scan · GetItem · PutItem · UpdateItem · DeleteItem
• lambdaIts own

  Can create, change and delete only LAMBDA resources named arn:aws:lambda:*:*:function:LiveOpsPoppy* — it cannot change or delete any LAMBDA resource with a different name.

  13 actions

  CreateFunction · DeleteFunction · GetFunction · UpdateFunctionCode · UpdateFunctionConfiguration · CreateFunctionUrlConfig · DeleteFunctionUrlConfig · GetFunctionUrlConfig · AddPermission · RemovePermission · GetPolicy · TagResource · ListTags
• iamIts own

  Can create, change and delete IAM identities and permissions named arn:aws:iam::*:role/LiveOpsPoppy* — this controls who can do what in your account.

  11 actions

  CreateRole · DeleteRole · GetRole · PassRole · PutRolePolicy · DeleteRolePolicy · GetRolePolicy · TagRole · ListRoleTags · PutRolePermissionsBoundary · DeleteRolePermissionsBoundary
• logsIts own

  Can create, change and delete only LOGS resources named arn:aws:logs:*:*:log-group:/aws/lambda/LiveOpsPoppy* — it cannot change or delete any LOGS resource with a different name.

  5 actions

  CreateLogGroup · DeleteLogGroup · PutRetentionPolicy · TagResource · ListTagsForResource
• s3Its own

  Can create, change and delete only S3 resources named arn:aws:s3:::liveopspoppy-deploy-* — it cannot change or delete any S3 resource with a different name.

  5 actions

  CreateBucket · DeleteBucket · ListBucket · PutBucketTagging · GetBucketLocation
• s3Its own

  Can create, change and delete only S3 resources named arn:aws:s3:::liveopspoppy-deploy-*/* — it cannot change or delete any S3 resource with a different name.

  3 actions

  PutObject · GetObject · DeleteObject
• pricingBroad

  Can read any PRICING resource in your account. AWS offers no way to narrow this: this action accepts no resource limit at all, so this is the tightest form the grant can take.

  1 action

  GetProducts
• cognito-idpBroad

  Can create new COGNITO-IDP resources in your account, but cannot change or delete anything that already exists. Its tag writes are compiled with conditions: it can only claim or release its own label, never another resource's.

  6 actions

  CreateUserPool · CreateUserPoolClient · DescribeUserPool · DescribeUserPoolClient · TagResource · UntagResource
• cognito-idpIts own

  Can create, change and delete only COGNITO-IDP resources tagged as its own — it cannot change or delete any COGNITO-IDP resource with a different tag.

  9 actions

  DeleteUserPool · UpdateUserPool · DeleteUserPoolClient · UpdateUserPoolClient · AdminCreateUser · AdminDeleteUser · ListUsers · GetUserPoolMfaConfig · SetUserPoolMfaConfig

Nothing can be approved from a web page. The real Approve lives in the AgentsPoppy app on your machine, where this grant meets your actual AWS account — and where you can reject it, or tear down everything it created, at any time.

About LiveOpsPoppy

Change balance values, prices and feature flags in your LIVE game without shipping an update — and see what players actually do, on infrastructure you own. LiveOpsPoppy deploys a serverless LiveOps backend (event collector, remote config, daily dashboards) into your own AWS account, then hands you a generated SDK: one C# file for Unity, or a plain REST contract for any other engine. Costs pennies at indie scale and nearly nothing at idle — the dashboard estimates what you're spending, and never pretends an estimate is a bill. Player events go to YOUR account — nothing passes through us. One click removes everything it created.

What you get

Pricing

Prices are read live from the developer's own listing. Whatever this poppy costs, the cloud resources it creates are billed by AWS directly to you — AgentsPoppy never marks them up. Paid features are bought inside the app; the developer is the merchant of record.

Data & privacy

Developer & support

Support for the poppy itself comes from its developer. For the AgentsPoppy app, see Security or our terms.