@actsecurity/iam-data 0.21.202608301

package/data/actions/ram.json

@@ -0,0 +1,574 @@
+{
+  "acceptresourceshareinvitation": {
+    "name": "AcceptResourceShareInvitation",
+    "description": "Grants permission to accept the specified resource share invitation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "resource-share-invitation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ram:ResourceShareName",
+      "ram:ShareOwnerAccountId"
+    ],
+    "dependentActions": []
+  },
+  "associateresourceshare": {
+    "name": "AssociateResourceShare",
+    "description": "Grants permission to associate resource(s) and/or principal(s) to a resource share",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "resource-share",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ram:AllowsExternalPrincipals",
+      "ram:Principal",
+      "ram:RequestedResourceType",
+      "ram:ResourceArn",
+      "ram:ResourceShareName",
+      "ram:ResourceTag/${TagKey}",
+      "ram:RetainSharingOnAccountLeaveOrganization"
+    ],
+    "dependentActions": []
+  },
+  "associateresourcesharepermission": {
+    "name": "AssociateResourceSharePermission",
+    "description": "Grants permission to associate a Permission with a Resource Share",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "customer-managed-permission",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "permission",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "resource-share",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createpermission": {
+    "name": "CreatePermission",
+    "description": "Grants permission to create a Permission that can be associated to a Resource Share",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ram:PermissionArn",
+      "ram:PermissionResourceType"
+    ],
+    "dependentActions": []
+  },
+  "createpermissionversion": {
+    "name": "CreatePermissionVersion",
+    "description": "Grants permission to create a new version of a Permission that can be associated to a Resource Share",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "customer-managed-permission",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ram:PermissionArn",
+      "ram:PermissionResourceType"
+    ],
+    "dependentActions": []
+  },
+  "createresourceshare": {
+    "name": "CreateResourceShare",
+    "description": "Grants permission to create a resource share with provided resource(s) and/or principal(s)",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "ram:AllowsExternalPrincipals",
+      "ram:Principal",
+      "ram:RequestedAllowsExternalPrincipals",
+      "ram:RequestedResourceType",
+      "ram:ResourceArn",
+      "ram:RetainSharingOnAccountLeaveOrganization"
+    ],
+    "dependentActions": []
+  },
+  "deletepermission": {
+    "name": "DeletePermission",
+    "description": "Grants permission to delete a specified Permission",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "customer-managed-permission",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ram:PermissionArn",
+      "ram:PermissionResourceType"
+    ],
+    "dependentActions": []
+  },
+  "deletepermissionversion": {
+    "name": "DeletePermissionVersion",
+    "description": "Grants permission to delete a specified version of a permission",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "customer-managed-permission",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ram:PermissionArn",
+      "ram:PermissionResourceType"
+    ],
+    "dependentActions": []
+  },
+  "deleteresourceshare": {
+    "name": "DeleteResourceShare",
+    "description": "Grants permission to delete resource share",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "resource-share",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ram:AllowsExternalPrincipals",
+      "ram:ResourceShareName",
+      "ram:ResourceTag/${TagKey}",
+      "ram:RetainSharingOnAccountLeaveOrganization"
+    ],
+    "dependentActions": []
+  },
+  "disassociateresourceshare": {
+    "name": "DisassociateResourceShare",
+    "description": "Grants permission to disassociate resource(s) and/or principal(s) from a resource share",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "resource-share",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ram:AllowsExternalPrincipals",
+      "ram:Principal",
+      "ram:RequestedResourceType",
+      "ram:ResourceArn",
+      "ram:ResourceShareName",
+      "ram:ResourceTag/${TagKey}",
+      "ram:RetainSharingOnAccountLeaveOrganization"
+    ],
+    "dependentActions": []
+  },
+  "disassociateresourcesharepermission": {
+    "name": "DisassociateResourceSharePermission",
+    "description": "Grants permission to disassociate a Permission from a Resource Share",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "customer-managed-permission",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "permission",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "resource-share",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "enablesharingwithawsorganization": {
+    "name": "EnableSharingWithAwsOrganization",
+    "description": "Grants permission to access customer's organization and create a SLR in the customer's account",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getpermission": {
+    "name": "GetPermission",
+    "description": "Grants permission to get the contents of an AWS RAM permission",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "customer-managed-permission",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "permission",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ram:PermissionArn"
+    ],
+    "dependentActions": []
+  },
+  "getresourcepolicies": {
+    "name": "GetResourcePolicies",
+    "description": "Grants permission to get the policies for the specified resources that you own and have shared",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getresourceshareassociations": {
+    "name": "GetResourceShareAssociations",
+    "description": "Grants permission to get a set of resource share associations from a provided list or with a specified status of the specified type",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getresourceshareinvitations": {
+    "name": "GetResourceShareInvitations",
+    "description": "Grants permission to get resource share invitations by the specified invitation arn or those for the resource share",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getresourceshares": {
+    "name": "GetResourceShares",
+    "description": "Grants permission to get a set of resource shares from a provided list or with a specified status",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "listpendinginvitationresources": {
+    "name": "ListPendingInvitationResources",
+    "description": "Grants permission to list the resources in a resource share that is shared with you but that the invitation is still pending for",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "resource-share-invitation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ram:ResourceShareName"
+    ],
+    "dependentActions": []
+  },
+  "listpermissionassociations": {
+    "name": "ListPermissionAssociations",
+    "description": "Grants permission to list information about the permission and any associations",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "customer-managed-permission",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "permission",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ram:PermissionArn",
+      "ram:PermissionResourceType"
+    ],
+    "dependentActions": []
+  },
+  "listpermissionversions": {
+    "name": "ListPermissionVersions",
+    "description": "Grants permission to list the versions of an AWS RAM permission",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listpermissions": {
+    "name": "ListPermissions",
+    "description": "Grants permission to list the AWS RAM permissions",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listprincipals": {
+    "name": "ListPrincipals",
+    "description": "Grants permission to list the principals that you have shared resources with or that have shared resources with you",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listreplacepermissionassociationswork": {
+    "name": "ListReplacePermissionAssociationsWork",
+    "description": "Grants permission to retrieve the status of the asynchronous permission replacement",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listresourcesharepermissions": {
+    "name": "ListResourceSharePermissions",
+    "description": "Grants permission to list the Permissions associated with a Resource Share",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "resource-share",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ram:AllowsExternalPrincipals",
+      "ram:ResourceShareName",
+      "ram:RetainSharingOnAccountLeaveOrganization"
+    ],
+    "dependentActions": []
+  },
+  "listresourcetypes": {
+    "name": "ListResourceTypes",
+    "description": "Grants permission to list the shareable resource types supported by AWS RAM",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listresources": {
+    "name": "ListResources",
+    "description": "Grants permission to list the resources that you added to resource shares or the resources that are shared with you",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listsourceassociations": {
+    "name": "ListSourceAssociations",
+    "description": "Grants permission to list source associations for resource shares",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "promotepermissioncreatedfrompolicy": {
+    "name": "PromotePermissionCreatedFromPolicy",
+    "description": "Grants permission to create a separate, fully manageable customer managed permission",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "customer-managed-permission",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ram:PermissionArn",
+      "ram:PermissionResourceType"
+    ],
+    "dependentActions": []
+  },
+  "promoteresourcesharecreatedfrompolicy": {
+    "name": "PromoteResourceShareCreatedFromPolicy",
+    "description": "Grants permission to promote the specified resource share",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "resource-share",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "rejectresourceshareinvitation": {
+    "name": "RejectResourceShareInvitation",
+    "description": "Grants permission to reject the specified resource share invitation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "resource-share-invitation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ram:ResourceShareName",
+      "ram:ShareOwnerAccountId"
+    ],
+    "dependentActions": []
+  },
+  "replacepermissionassociations": {
+    "name": "ReplacePermissionAssociations",
+    "description": "Grants permission to update all resource shares to a new permission",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "customer-managed-permission",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "permission",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ram:PermissionArn",
+      "ram:PermissionResourceType"
+    ],
+    "dependentActions": []
+  },
+  "setdefaultpermissionversion": {
+    "name": "SetDefaultPermissionVersion",
+    "description": "Grants permission to specify a version number as the default version for the respective customer managed permission",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "customer-managed-permission",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ram:PermissionArn",
+      "ram:PermissionResourceType"
+    ],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to tag the specified resource share or permission",
+    "accessLevel": "Tagging, Write",
+    "resourceTypes": [
+      {
+        "name": "customer-managed-permission",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "resource-share",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to untag the specified resource share or permission",
+    "accessLevel": "Tagging, Write",
+    "resourceTypes": [
+      {
+        "name": "customer-managed-permission",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "resource-share",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "updateresourceshare": {
+    "name": "UpdateResourceShare",
+    "description": "Grants permission to update attributes of the resource share",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "resource-share",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ram:AllowsExternalPrincipals",
+      "ram:RequestedAllowsExternalPrincipals",
+      "ram:ResourceShareName",
+      "ram:ResourceTag/${TagKey}",
+      "ram:RetainSharingOnAccountLeaveOrganization"
+    ],
+    "dependentActions": []
+  }
+}