@actsecurity/iam-data 0.21.202609181 → 0.21.202609221

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -100,6 +100,16 @@
100
100
  "conditionKeys": [],
101
101
  "dependentActions": []
102
102
  },
103
+ "assumeaccessprofile": {
104
+ "name": "AssumeAccessProfile",
105
+ "description": "Grants permission to assume an access profile",
106
+ "accessLevel": "Permissions management, Write",
107
+ "resourceTypes": [],
108
+ "conditionKeys": [
109
+ "cloudwatch:HasAccessGrant"
110
+ ],
111
+ "dependentActions": []
112
+ },
103
113
  "batchgetservicelevelindicatorreport": {
104
114
  "name": "BatchGetServiceLevelIndicatorReport",
105
115
  "description": "Grants permission to batch get service level indicator report",
@@ -123,6 +133,108 @@
123
133
  "conditionKeys": [],
124
134
  "dependentActions": []
125
135
  },
136
+ "createaccessgrant": {
137
+ "name": "CreateAccessGrant",
138
+ "description": "Grants permission to create an access grant",
139
+ "accessLevel": "Permissions management, Write",
140
+ "resourceTypes": [],
141
+ "conditionKeys": [
142
+ "cloudwatch:HasAccessGrant"
143
+ ],
144
+ "dependentActions": []
145
+ },
146
+ "createaccessprofile": {
147
+ "name": "CreateAccessProfile",
148
+ "description": "Grants permission to create an access profile",
149
+ "accessLevel": "Permissions management, Write",
150
+ "resourceTypes": [],
151
+ "conditionKeys": [
152
+ "cloudwatch:HasAccessGrant"
153
+ ],
154
+ "dependentActions": []
155
+ },
156
+ "createalert": {
157
+ "name": "CreateAlert",
158
+ "description": "Grants permission to create an alert",
159
+ "accessLevel": "Write",
160
+ "resourceTypes": [],
161
+ "conditionKeys": [
162
+ "cloudwatch:HasAccessGrant"
163
+ ],
164
+ "dependentActions": []
165
+ },
166
+ "createdomain": {
167
+ "name": "CreateDomain",
168
+ "description": "Grants permission to create a domain",
169
+ "accessLevel": "Write",
170
+ "resourceTypes": [],
171
+ "conditionKeys": [],
172
+ "dependentActions": []
173
+ },
174
+ "createdomainaccessgrantfororganization": {
175
+ "name": "CreateDomainAccessGrantForOrganization",
176
+ "description": "Grants permission to create a domain access grant for an organization",
177
+ "accessLevel": "Permissions management, Write",
178
+ "resourceTypes": [],
179
+ "conditionKeys": [
180
+ "cloudwatch:HasAccessGrant"
181
+ ],
182
+ "dependentActions": []
183
+ },
184
+ "createdomainfororganization": {
185
+ "name": "CreateDomainForOrganization",
186
+ "description": "Grants permission to create a domain for an organization",
187
+ "accessLevel": "Write",
188
+ "resourceTypes": [],
189
+ "conditionKeys": [],
190
+ "dependentActions": []
191
+ },
192
+ "createingestionendpoint": {
193
+ "name": "CreateIngestionEndpoint",
194
+ "description": "Grants permission to create an ingestion endpoint",
195
+ "accessLevel": "Write",
196
+ "resourceTypes": [],
197
+ "conditionKeys": [],
198
+ "dependentActions": []
199
+ },
200
+ "createintegration": {
201
+ "name": "CreateIntegration",
202
+ "description": "Grants permission to create an integration",
203
+ "accessLevel": "Write",
204
+ "resourceTypes": [],
205
+ "conditionKeys": [
206
+ "cloudwatch:HasAccessGrant"
207
+ ],
208
+ "dependentActions": []
209
+ },
210
+ "createomnidashboard": {
211
+ "name": "CreateOmniDashboard",
212
+ "description": "Grants permission to create an omni dashboard",
213
+ "accessLevel": "Write",
214
+ "resourceTypes": [],
215
+ "conditionKeys": [
216
+ "cloudwatch:HasAccessGrant"
217
+ ],
218
+ "dependentActions": []
219
+ },
220
+ "createomnithread": {
221
+ "name": "CreateOmniThread",
222
+ "description": "Grants permission to create an omni thread",
223
+ "accessLevel": "Write",
224
+ "resourceTypes": [],
225
+ "conditionKeys": [
226
+ "cloudwatch:HasAccessGrant"
227
+ ],
228
+ "dependentActions": []
229
+ },
230
+ "createonetimedeeplinkcode": {
231
+ "name": "CreateOneTimeDeepLinkCode",
232
+ "description": "Grants permission to create a one-time deep link code",
233
+ "accessLevel": "Write",
234
+ "resourceTypes": [],
235
+ "conditionKeys": [],
236
+ "dependentActions": []
237
+ },
126
238
  "createservicelevelobjective": {
127
239
  "name": "CreateServiceLevelObjective",
128
240
  "description": "Grants permission to create a service level objective",
@@ -134,6 +246,58 @@
134
246
  ],
135
247
  "dependentActions": []
136
248
  },
249
+ "createspace": {
250
+ "name": "CreateSpace",
251
+ "description": "Grants permission to create a space",
252
+ "accessLevel": "Write",
253
+ "resourceTypes": [],
254
+ "conditionKeys": [],
255
+ "dependentActions": []
256
+ },
257
+ "createview": {
258
+ "name": "CreateView",
259
+ "description": "Grants permission to create a view",
260
+ "accessLevel": "Write",
261
+ "resourceTypes": [],
262
+ "conditionKeys": [
263
+ "cloudwatch:HasAccessGrant"
264
+ ],
265
+ "dependentActions": []
266
+ },
267
+ "deleteaccessgrant": {
268
+ "name": "DeleteAccessGrant",
269
+ "description": "Grants permission to delete an access grant",
270
+ "accessLevel": "Permissions management, Write",
271
+ "resourceTypes": [
272
+ {
273
+ "name": "access-grant",
274
+ "required": true,
275
+ "conditionKeys": [],
276
+ "dependentActions": []
277
+ }
278
+ ],
279
+ "conditionKeys": [
280
+ "cloudwatch:HasAccessGrant"
281
+ ],
282
+ "dependentActions": []
283
+ },
284
+ "deleteaccessprofile": {
285
+ "name": "DeleteAccessProfile",
286
+ "description": "Grants permission to delete an access profile",
287
+ "accessLevel": "Permissions management, Write",
288
+ "resourceTypes": [
289
+ {
290
+ "name": "access-profile",
291
+ "required": true,
292
+ "conditionKeys": [],
293
+ "dependentActions": []
294
+ }
295
+ ],
296
+ "conditionKeys": [
297
+ "cloudwatch:HasAccessGrant"
298
+ ],
299
+ "dependentActions": []
300
+ },
137
301
  "deletealarmmuterule": {
138
302
  "name": "DeleteAlarmMuteRule",
139
303
  "description": "Grants permission to delete an alarm mute rule",
@@ -164,6 +328,23 @@
164
328
  "conditionKeys": [],
165
329
  "dependentActions": []
166
330
  },
331
+ "deletealert": {
332
+ "name": "DeleteAlert",
333
+ "description": "Grants permission to delete an alert",
334
+ "accessLevel": "Write",
335
+ "resourceTypes": [
336
+ {
337
+ "name": "alert",
338
+ "required": true,
339
+ "conditionKeys": [],
340
+ "dependentActions": []
341
+ }
342
+ ],
343
+ "conditionKeys": [
344
+ "cloudwatch:HasAccessGrant"
345
+ ],
346
+ "dependentActions": []
347
+ },
167
348
  "deleteanomalydetector": {
168
349
  "name": "DeleteAnomalyDetector",
169
350
  "description": "Grants permission to delete the specified anomaly detection model from your account",
@@ -187,6 +368,68 @@
187
368
  "conditionKeys": [],
188
369
  "dependentActions": []
189
370
  },
371
+ "deletedomain": {
372
+ "name": "DeleteDomain",
373
+ "description": "Grants permission to delete a domain",
374
+ "accessLevel": "Write",
375
+ "resourceTypes": [
376
+ {
377
+ "name": "domain",
378
+ "required": true,
379
+ "conditionKeys": [],
380
+ "dependentActions": []
381
+ }
382
+ ],
383
+ "conditionKeys": [],
384
+ "dependentActions": []
385
+ },
386
+ "deletedomainaccessgrantfororganization": {
387
+ "name": "DeleteDomainAccessGrantForOrganization",
388
+ "description": "Grants permission to delete a domain access grant for an organization",
389
+ "accessLevel": "Permissions management, Write",
390
+ "resourceTypes": [
391
+ {
392
+ "name": "organization-access-grant",
393
+ "required": true,
394
+ "conditionKeys": [],
395
+ "dependentActions": []
396
+ }
397
+ ],
398
+ "conditionKeys": [
399
+ "cloudwatch:HasAccessGrant"
400
+ ],
401
+ "dependentActions": []
402
+ },
403
+ "deletedomainfororganization": {
404
+ "name": "DeleteDomainForOrganization",
405
+ "description": "Grants permission to delete a domain for an organization",
406
+ "accessLevel": "Write",
407
+ "resourceTypes": [
408
+ {
409
+ "name": "organization-domain",
410
+ "required": true,
411
+ "conditionKeys": [],
412
+ "dependentActions": []
413
+ }
414
+ ],
415
+ "conditionKeys": [],
416
+ "dependentActions": []
417
+ },
418
+ "deleteingestionendpoint": {
419
+ "name": "DeleteIngestionEndpoint",
420
+ "description": "Grants permission to delete an ingestion endpoint",
421
+ "accessLevel": "Write",
422
+ "resourceTypes": [
423
+ {
424
+ "name": "ingestion-endpoint",
425
+ "required": true,
426
+ "conditionKeys": [],
427
+ "dependentActions": []
428
+ }
429
+ ],
430
+ "conditionKeys": [],
431
+ "dependentActions": []
432
+ },
190
433
  "deleteinsightrules": {
191
434
  "name": "DeleteInsightRules",
192
435
  "description": "Grants permission to delete a collection of insight rules",
@@ -202,6 +445,23 @@
202
445
  "conditionKeys": [],
203
446
  "dependentActions": []
204
447
  },
448
+ "deleteintegration": {
449
+ "name": "DeleteIntegration",
450
+ "description": "Grants permission to delete an integration",
451
+ "accessLevel": "Write",
452
+ "resourceTypes": [
453
+ {
454
+ "name": "integration",
455
+ "required": true,
456
+ "conditionKeys": [],
457
+ "dependentActions": []
458
+ }
459
+ ],
460
+ "conditionKeys": [
461
+ "cloudwatch:HasAccessGrant"
462
+ ],
463
+ "dependentActions": []
464
+ },
205
465
  "deletemetricstream": {
206
466
  "name": "DeleteMetricStream",
207
467
  "description": "Grants permission to delete the CloudWatch metric stream that you specify",
@@ -217,6 +477,33 @@
217
477
  "conditionKeys": [],
218
478
  "dependentActions": []
219
479
  },
480
+ "deleteomnidashboard": {
481
+ "name": "DeleteOmniDashboard",
482
+ "description": "Grants permission to delete an omni dashboard",
483
+ "accessLevel": "Write",
484
+ "resourceTypes": [
485
+ {
486
+ "name": "omni-dashboard",
487
+ "required": true,
488
+ "conditionKeys": [],
489
+ "dependentActions": []
490
+ }
491
+ ],
492
+ "conditionKeys": [
493
+ "cloudwatch:HasAccessGrant"
494
+ ],
495
+ "dependentActions": []
496
+ },
497
+ "deleteomnithread": {
498
+ "name": "DeleteOmniThread",
499
+ "description": "Grants permission to delete an omni thread",
500
+ "accessLevel": "Write",
501
+ "resourceTypes": [],
502
+ "conditionKeys": [
503
+ "cloudwatch:HasAccessGrant"
504
+ ],
505
+ "dependentActions": []
506
+ },
220
507
  "deleteservicelevelobjective": {
221
508
  "name": "DeleteServiceLevelObjective",
222
509
  "description": "Grants permission to delete a service level objective",
@@ -232,6 +519,38 @@
232
519
  "conditionKeys": [],
233
520
  "dependentActions": []
234
521
  },
522
+ "deletespace": {
523
+ "name": "DeleteSpace",
524
+ "description": "Grants permission to delete a space",
525
+ "accessLevel": "Write",
526
+ "resourceTypes": [
527
+ {
528
+ "name": "space",
529
+ "required": true,
530
+ "conditionKeys": [],
531
+ "dependentActions": []
532
+ }
533
+ ],
534
+ "conditionKeys": [],
535
+ "dependentActions": []
536
+ },
537
+ "deleteview": {
538
+ "name": "DeleteView",
539
+ "description": "Grants permission to delete a view",
540
+ "accessLevel": "Write",
541
+ "resourceTypes": [
542
+ {
543
+ "name": "view",
544
+ "required": true,
545
+ "conditionKeys": [],
546
+ "dependentActions": []
547
+ }
548
+ ],
549
+ "conditionKeys": [
550
+ "cloudwatch:HasAccessGrant"
551
+ ],
552
+ "dependentActions": []
553
+ },
235
554
  "describealarmhistory": {
236
555
  "name": "DescribeAlarmHistory",
237
556
  "description": "Grants permission to retrieve the history for the specified alarm",
@@ -370,6 +689,48 @@
370
689
  "conditionKeys": [],
371
690
  "dependentActions": []
372
691
  },
692
+ "getaccessgrant": {
693
+ "name": "GetAccessGrant",
694
+ "description": "Grants permission to get an access grant",
695
+ "accessLevel": "Read",
696
+ "resourceTypes": [
697
+ {
698
+ "name": "access-grant",
699
+ "required": true,
700
+ "conditionKeys": [],
701
+ "dependentActions": []
702
+ }
703
+ ],
704
+ "conditionKeys": [
705
+ "cloudwatch:HasAccessGrant"
706
+ ],
707
+ "dependentActions": []
708
+ },
709
+ "getaccessprofile": {
710
+ "name": "GetAccessProfile",
711
+ "description": "Grants permission to get an access profile",
712
+ "accessLevel": "Read",
713
+ "resourceTypes": [
714
+ {
715
+ "name": "access-profile",
716
+ "required": true,
717
+ "conditionKeys": [],
718
+ "dependentActions": []
719
+ }
720
+ ],
721
+ "conditionKeys": [
722
+ "cloudwatch:HasAccessGrant"
723
+ ],
724
+ "dependentActions": []
725
+ },
726
+ "getagentgraph": {
727
+ "name": "GetAgentGraph",
728
+ "description": "Grants permission to get an agent graph",
729
+ "accessLevel": "Read",
730
+ "resourceTypes": [],
731
+ "conditionKeys": [],
732
+ "dependentActions": []
733
+ },
373
734
  "getalarmmuterule": {
374
735
  "name": "GetAlarmMuteRule",
375
736
  "description": "Grants permission to get an alarm mute rule",
@@ -385,6 +746,33 @@
385
746
  "conditionKeys": [],
386
747
  "dependentActions": []
387
748
  },
749
+ "getalert": {
750
+ "name": "GetAlert",
751
+ "description": "Grants permission to get an alert",
752
+ "accessLevel": "Read",
753
+ "resourceTypes": [
754
+ {
755
+ "name": "alert",
756
+ "required": true,
757
+ "conditionKeys": [],
758
+ "dependentActions": []
759
+ }
760
+ ],
761
+ "conditionKeys": [
762
+ "cloudwatch:HasAccessGrant"
763
+ ],
764
+ "dependentActions": []
765
+ },
766
+ "getcontextgraph": {
767
+ "name": "GetContextGraph",
768
+ "description": "Grants permission to get a context graph",
769
+ "accessLevel": "Read",
770
+ "resourceTypes": [],
771
+ "conditionKeys": [
772
+ "cloudwatch:HasAccessGrant"
773
+ ],
774
+ "dependentActions": []
775
+ },
388
776
  "getdashboard": {
389
777
  "name": "GetDashboard",
390
778
  "description": "Grants permission to display the details of the CloudWatch dashboard you specify",
@@ -417,6 +805,70 @@
417
805
  ],
418
806
  "dependentActions": []
419
807
  },
808
+ "getdomain": {
809
+ "name": "GetDomain",
810
+ "description": "Grants permission to get a domain",
811
+ "accessLevel": "Read",
812
+ "resourceTypes": [
813
+ {
814
+ "name": "domain",
815
+ "required": true,
816
+ "conditionKeys": [],
817
+ "dependentActions": []
818
+ }
819
+ ],
820
+ "conditionKeys": [
821
+ "cloudwatch:HasAccessGrant"
822
+ ],
823
+ "dependentActions": []
824
+ },
825
+ "getdomainaccessgrantfororganization": {
826
+ "name": "GetDomainAccessGrantForOrganization",
827
+ "description": "Grants permission to get a domain access grant for an organization",
828
+ "accessLevel": "Read",
829
+ "resourceTypes": [
830
+ {
831
+ "name": "organization-access-grant",
832
+ "required": true,
833
+ "conditionKeys": [],
834
+ "dependentActions": []
835
+ }
836
+ ],
837
+ "conditionKeys": [
838
+ "cloudwatch:HasAccessGrant"
839
+ ],
840
+ "dependentActions": []
841
+ },
842
+ "getdomainfororganization": {
843
+ "name": "GetDomainForOrganization",
844
+ "description": "Grants permission to get a domain for an organization",
845
+ "accessLevel": "Read",
846
+ "resourceTypes": [
847
+ {
848
+ "name": "organization-domain",
849
+ "required": true,
850
+ "conditionKeys": [],
851
+ "dependentActions": []
852
+ }
853
+ ],
854
+ "conditionKeys": [],
855
+ "dependentActions": []
856
+ },
857
+ "getingestionendpoint": {
858
+ "name": "GetIngestionEndpoint",
859
+ "description": "Grants permission to get an ingestion endpoint",
860
+ "accessLevel": "Read",
861
+ "resourceTypes": [
862
+ {
863
+ "name": "ingestion-endpoint",
864
+ "required": true,
865
+ "conditionKeys": [],
866
+ "dependentActions": []
867
+ }
868
+ ],
869
+ "conditionKeys": [],
870
+ "dependentActions": []
871
+ },
420
872
  "getinsightrulereport": {
421
873
  "name": "GetInsightRuleReport",
422
874
  "description": "Grants permission to return the top-N report of unique contributors over a time range for a given insight rule",
@@ -432,6 +884,33 @@
432
884
  "conditionKeys": [],
433
885
  "dependentActions": []
434
886
  },
887
+ "getintegration": {
888
+ "name": "GetIntegration",
889
+ "description": "Grants permission to get an integration",
890
+ "accessLevel": "Read",
891
+ "resourceTypes": [
892
+ {
893
+ "name": "integration",
894
+ "required": true,
895
+ "conditionKeys": [],
896
+ "dependentActions": []
897
+ }
898
+ ],
899
+ "conditionKeys": [
900
+ "cloudwatch:HasAccessGrant"
901
+ ],
902
+ "dependentActions": []
903
+ },
904
+ "getintelligenceconfiguration": {
905
+ "name": "GetIntelligenceConfiguration",
906
+ "description": "Grants permission to get an intelligence configuration",
907
+ "accessLevel": "Read",
908
+ "resourceTypes": [],
909
+ "conditionKeys": [
910
+ "cloudwatch:HasAccessGrant"
911
+ ],
912
+ "dependentActions": []
913
+ },
435
914
  "getmetricdata": {
436
915
  "name": "GetMetricData",
437
916
  "description": "Grants permission to retrieve batch amounts of CloudWatch classic metric data and perform metric math on retrieved data; and grants permission to retrieve OTLP metric data using PromQL",
@@ -446,7 +925,9 @@
446
925
  "dependentActions": []
447
926
  }
448
927
  ],
449
- "conditionKeys": [],
928
+ "conditionKeys": [
929
+ "cloudwatch:HasAccessGrant"
930
+ ],
450
931
  "dependentActions": []
451
932
  },
452
933
  "getmetricstatistics": {
@@ -480,6 +961,53 @@
480
961
  "conditionKeys": [],
481
962
  "dependentActions": []
482
963
  },
964
+ "getomnidashboard": {
965
+ "name": "GetOmniDashboard",
966
+ "description": "Grants permission to get an omni dashboard",
967
+ "accessLevel": "Read",
968
+ "resourceTypes": [
969
+ {
970
+ "name": "omni-dashboard",
971
+ "required": true,
972
+ "conditionKeys": [],
973
+ "dependentActions": []
974
+ }
975
+ ],
976
+ "conditionKeys": [
977
+ "cloudwatch:HasAccessGrant"
978
+ ],
979
+ "dependentActions": []
980
+ },
981
+ "getomnithread": {
982
+ "name": "GetOmniThread",
983
+ "description": "Grants permission to get an omni thread",
984
+ "accessLevel": "Read",
985
+ "resourceTypes": [],
986
+ "conditionKeys": [
987
+ "cloudwatch:HasAccessGrant"
988
+ ],
989
+ "dependentActions": []
990
+ },
991
+ "getpreferences": {
992
+ "name": "GetPreferences",
993
+ "description": "Grants permission to get preferences",
994
+ "accessLevel": "Read",
995
+ "resourceTypes": [],
996
+ "conditionKeys": [
997
+ "cloudwatch:HasAccessGrant"
998
+ ],
999
+ "dependentActions": []
1000
+ },
1001
+ "getrecords": {
1002
+ "name": "GetRecords",
1003
+ "description": "Grants permission to fetch logs, metrics, and traces",
1004
+ "accessLevel": "Read",
1005
+ "resourceTypes": [],
1006
+ "conditionKeys": [
1007
+ "cloudwatch:HasAccessGrant"
1008
+ ],
1009
+ "dependentActions": []
1010
+ },
483
1011
  "getservice": {
484
1012
  "name": "GetService",
485
1013
  "description": "Grants permission to retrieve information about a service",
@@ -510,37 +1038,183 @@
510
1038
  "conditionKeys": [],
511
1039
  "dependentActions": []
512
1040
  },
513
- "gettopologymap": {
514
- "name": "GetTopologyMap",
515
- "description": "Grants permission to retrieve a CloudWatch topology map",
516
- "accessLevel": "Read",
1041
+ "getspace": {
1042
+ "name": "GetSpace",
1043
+ "description": "Grants permission to get a space",
1044
+ "accessLevel": "Read",
1045
+ "resourceTypes": [
1046
+ {
1047
+ "name": "space",
1048
+ "required": true,
1049
+ "conditionKeys": [],
1050
+ "dependentActions": []
1051
+ }
1052
+ ],
1053
+ "conditionKeys": [
1054
+ "cloudwatch:HasAccessGrant"
1055
+ ],
1056
+ "dependentActions": []
1057
+ },
1058
+ "getspacecredentials": {
1059
+ "name": "GetSpaceCredentials",
1060
+ "description": "Grants permission to get space credentials",
1061
+ "accessLevel": "Read",
1062
+ "resourceTypes": [],
1063
+ "conditionKeys": [],
1064
+ "dependentActions": []
1065
+ },
1066
+ "getspacecredentialsfororganization": {
1067
+ "name": "GetSpaceCredentialsForOrganization",
1068
+ "description": "Grants permission to get space credentials for an organization",
1069
+ "accessLevel": "Read",
1070
+ "resourceTypes": [],
1071
+ "conditionKeys": [],
1072
+ "dependentActions": []
1073
+ },
1074
+ "gettelemetryqueryresults": {
1075
+ "name": "GetTelemetryQueryResults",
1076
+ "description": "Grants permission to get telemetry query results",
1077
+ "accessLevel": "Read",
1078
+ "resourceTypes": [],
1079
+ "conditionKeys": [
1080
+ "cloudwatch:HasAccessGrant"
1081
+ ],
1082
+ "dependentActions": []
1083
+ },
1084
+ "gettopologymap": {
1085
+ "name": "GetTopologyMap",
1086
+ "description": "Grants permission to retrieve a CloudWatch topology map",
1087
+ "accessLevel": "Read",
1088
+ "resourceTypes": [],
1089
+ "conditionKeys": [],
1090
+ "dependentActions": []
1091
+ },
1092
+ "getview": {
1093
+ "name": "GetView",
1094
+ "description": "Grants permission to get a view",
1095
+ "accessLevel": "Read",
1096
+ "resourceTypes": [
1097
+ {
1098
+ "name": "view",
1099
+ "required": true,
1100
+ "conditionKeys": [],
1101
+ "dependentActions": []
1102
+ }
1103
+ ],
1104
+ "conditionKeys": [
1105
+ "cloudwatch:HasAccessGrant"
1106
+ ],
1107
+ "dependentActions": []
1108
+ },
1109
+ "invokeintegration": {
1110
+ "name": "InvokeIntegration",
1111
+ "description": "Grants permission to invoke an integration",
1112
+ "accessLevel": "Write",
1113
+ "resourceTypes": [],
1114
+ "conditionKeys": [
1115
+ "cloudwatch:HasAccessGrant"
1116
+ ],
1117
+ "dependentActions": []
1118
+ },
1119
+ "listaccessgrants": {
1120
+ "name": "ListAccessGrants",
1121
+ "description": "Grants permission to list access grants",
1122
+ "accessLevel": "List",
1123
+ "resourceTypes": [],
1124
+ "conditionKeys": [
1125
+ "cloudwatch:HasAccessGrant"
1126
+ ],
1127
+ "dependentActions": []
1128
+ },
1129
+ "listaccessprofiles": {
1130
+ "name": "ListAccessProfiles",
1131
+ "description": "Grants permission to list access profiles",
1132
+ "accessLevel": "List",
1133
+ "resourceTypes": [],
1134
+ "conditionKeys": [
1135
+ "cloudwatch:HasAccessGrant"
1136
+ ],
1137
+ "dependentActions": []
1138
+ },
1139
+ "listalarmmuterules": {
1140
+ "name": "ListAlarmMuteRules",
1141
+ "description": "Grants permission to retrieve a list of alarm mute rules owned by the user's account",
1142
+ "accessLevel": "List",
1143
+ "resourceTypes": [
1144
+ {
1145
+ "name": "alarm-mute-rule",
1146
+ "required": true,
1147
+ "conditionKeys": [],
1148
+ "dependentActions": []
1149
+ }
1150
+ ],
1151
+ "conditionKeys": [],
1152
+ "dependentActions": []
1153
+ },
1154
+ "listalertcontributors": {
1155
+ "name": "ListAlertContributors",
1156
+ "description": "Grants permission to list alert contributors",
1157
+ "accessLevel": "List",
1158
+ "resourceTypes": [],
1159
+ "conditionKeys": [
1160
+ "cloudwatch:HasAccessGrant"
1161
+ ],
1162
+ "dependentActions": []
1163
+ },
1164
+ "listalerts": {
1165
+ "name": "ListAlerts",
1166
+ "description": "Grants permission to list alerts",
1167
+ "accessLevel": "List",
1168
+ "resourceTypes": [],
1169
+ "conditionKeys": [
1170
+ "cloudwatch:HasAccessGrant"
1171
+ ],
1172
+ "dependentActions": []
1173
+ },
1174
+ "listdashboards": {
1175
+ "name": "ListDashboards",
1176
+ "description": "Grants permission to return a list of all CloudWatch dashboards in your account",
1177
+ "accessLevel": "List",
1178
+ "resourceTypes": [],
1179
+ "conditionKeys": [],
1180
+ "dependentActions": []
1181
+ },
1182
+ "listdomainaccessgrantsfororganization": {
1183
+ "name": "ListDomainAccessGrantsForOrganization",
1184
+ "description": "Grants permission to list domain access grants for an organization",
1185
+ "accessLevel": "List",
517
1186
  "resourceTypes": [],
518
- "conditionKeys": [],
1187
+ "conditionKeys": [
1188
+ "cloudwatch:HasAccessGrant"
1189
+ ],
519
1190
  "dependentActions": []
520
1191
  },
521
- "listalarmmuterules": {
522
- "name": "ListAlarmMuteRules",
523
- "description": "Grants permission to retrieve a list of alarm mute rules owned by the user's account",
1192
+ "listdomains": {
1193
+ "name": "ListDomains",
1194
+ "description": "Grants permission to list domains",
524
1195
  "accessLevel": "List",
525
- "resourceTypes": [
526
- {
527
- "name": "alarm-mute-rule",
528
- "required": true,
529
- "conditionKeys": [],
530
- "dependentActions": []
531
- }
532
- ],
1196
+ "resourceTypes": [],
533
1197
  "conditionKeys": [],
534
1198
  "dependentActions": []
535
1199
  },
536
- "listdashboards": {
537
- "name": "ListDashboards",
538
- "description": "Grants permission to return a list of all CloudWatch dashboards in your account",
1200
+ "listingestionendpoints": {
1201
+ "name": "ListIngestionEndpoints",
1202
+ "description": "Grants permission to list ingestion endpoints",
539
1203
  "accessLevel": "List",
540
1204
  "resourceTypes": [],
541
1205
  "conditionKeys": [],
542
1206
  "dependentActions": []
543
1207
  },
1208
+ "listintegrations": {
1209
+ "name": "ListIntegrations",
1210
+ "description": "Grants permission to list integrations",
1211
+ "accessLevel": "List",
1212
+ "resourceTypes": [],
1213
+ "conditionKeys": [
1214
+ "cloudwatch:HasAccessGrant"
1215
+ ],
1216
+ "dependentActions": []
1217
+ },
544
1218
  "listmanagedinsightrules": {
545
1219
  "name": "ListManagedInsightRules",
546
1220
  "description": "Grants permission to list available managed Insight Rules for a given Resource ARN",
@@ -575,7 +1249,29 @@
575
1249
  "dependentActions": []
576
1250
  }
577
1251
  ],
578
- "conditionKeys": [],
1252
+ "conditionKeys": [
1253
+ "cloudwatch:HasAccessGrant"
1254
+ ],
1255
+ "dependentActions": []
1256
+ },
1257
+ "listomnidashboards": {
1258
+ "name": "ListOmniDashboards",
1259
+ "description": "Grants permission to list omni dashboards",
1260
+ "accessLevel": "List",
1261
+ "resourceTypes": [],
1262
+ "conditionKeys": [
1263
+ "cloudwatch:HasAccessGrant"
1264
+ ],
1265
+ "dependentActions": []
1266
+ },
1267
+ "listomnithreads": {
1268
+ "name": "ListOmniThreads",
1269
+ "description": "Grants permission to list omni threads",
1270
+ "accessLevel": "List",
1271
+ "resourceTypes": [],
1272
+ "conditionKeys": [
1273
+ "cloudwatch:HasAccessGrant"
1274
+ ],
579
1275
  "dependentActions": []
580
1276
  },
581
1277
  "listservicelevelobjectives": {
@@ -594,6 +1290,36 @@
594
1290
  "conditionKeys": [],
595
1291
  "dependentActions": []
596
1292
  },
1293
+ "listspaceaccess": {
1294
+ "name": "ListSpaceAccess",
1295
+ "description": "Grants permission to list access to a space",
1296
+ "accessLevel": "List",
1297
+ "resourceTypes": [],
1298
+ "conditionKeys": [
1299
+ "cloudwatch:HasAccessGrant"
1300
+ ],
1301
+ "dependentActions": []
1302
+ },
1303
+ "listspaces": {
1304
+ "name": "ListSpaces",
1305
+ "description": "Grants permission to list spaces",
1306
+ "accessLevel": "List",
1307
+ "resourceTypes": [],
1308
+ "conditionKeys": [
1309
+ "cloudwatch:HasAccessGrant"
1310
+ ],
1311
+ "dependentActions": []
1312
+ },
1313
+ "listspacesfororganization": {
1314
+ "name": "ListSpacesForOrganization",
1315
+ "description": "Grants permission to list spaces for an organization",
1316
+ "accessLevel": "List",
1317
+ "resourceTypes": [],
1318
+ "conditionKeys": [
1319
+ "cloudwatch:HasAccessGrant"
1320
+ ],
1321
+ "dependentActions": []
1322
+ },
597
1323
  "listtagsforresource": {
598
1324
  "name": "ListTagsForResource",
599
1325
  "description": "Grants permission to list tags for an Amazon CloudWatch resource",
@@ -664,7 +1390,9 @@
664
1390
  "dependentActions": []
665
1391
  }
666
1392
  ],
667
- "conditionKeys": [],
1393
+ "conditionKeys": [
1394
+ "cloudwatch:HasAccessGrant"
1395
+ ],
668
1396
  "dependentActions": [],
669
1397
  "scenarios": [
670
1398
  {
@@ -741,6 +1469,36 @@
741
1469
  }
742
1470
  ]
743
1471
  },
1472
+ "listtelemetryfields": {
1473
+ "name": "ListTelemetryFields",
1474
+ "description": "Grants permission to list telemetry fields",
1475
+ "accessLevel": "List",
1476
+ "resourceTypes": [],
1477
+ "conditionKeys": [
1478
+ "cloudwatch:HasAccessGrant"
1479
+ ],
1480
+ "dependentActions": []
1481
+ },
1482
+ "listtelemetryquerysessions": {
1483
+ "name": "ListTelemetryQuerySessions",
1484
+ "description": "Grants permission to list telemetry query sessions",
1485
+ "accessLevel": "List",
1486
+ "resourceTypes": [],
1487
+ "conditionKeys": [
1488
+ "cloudwatch:HasAccessGrant"
1489
+ ],
1490
+ "dependentActions": []
1491
+ },
1492
+ "listviews": {
1493
+ "name": "ListViews",
1494
+ "description": "Grants permission to list views",
1495
+ "accessLevel": "List",
1496
+ "resourceTypes": [],
1497
+ "conditionKeys": [
1498
+ "cloudwatch:HasAccessGrant"
1499
+ ],
1500
+ "dependentActions": []
1501
+ },
744
1502
  "putalarmmuterule": {
745
1503
  "name": "PutAlarmMuteRule",
746
1504
  "description": "Grants permission to create or update an alarm mute rule",
@@ -829,6 +1587,16 @@
829
1587
  ],
830
1588
  "dependentActions": []
831
1589
  },
1590
+ "putintelligenceconfiguration": {
1591
+ "name": "PutIntelligenceConfiguration",
1592
+ "description": "Grants permission to configure an intelligence configuration",
1593
+ "accessLevel": "Write",
1594
+ "resourceTypes": [],
1595
+ "conditionKeys": [
1596
+ "cloudwatch:HasAccessGrant"
1597
+ ],
1598
+ "dependentActions": []
1599
+ },
832
1600
  "putlogalarm": {
833
1601
  "name": "PutLogAlarm",
834
1602
  "description": "Grants permission to create or update a log-based alarm and associate it with a CloudWatch Logs Insights scheduled query",
@@ -924,6 +1692,24 @@
924
1692
  ],
925
1693
  "dependentActions": []
926
1694
  },
1695
+ "querytraces": {
1696
+ "name": "QueryTraces",
1697
+ "description": "Grants permission to query traces",
1698
+ "accessLevel": "Write",
1699
+ "resourceTypes": [],
1700
+ "conditionKeys": [],
1701
+ "dependentActions": []
1702
+ },
1703
+ "searchprincipals": {
1704
+ "name": "SearchPrincipals",
1705
+ "description": "Grants permission to search principals",
1706
+ "accessLevel": "Write",
1707
+ "resourceTypes": [],
1708
+ "conditionKeys": [
1709
+ "cloudwatch:HasAccessGrant"
1710
+ ],
1711
+ "dependentActions": []
1712
+ },
927
1713
  "setalarmstate": {
928
1714
  "name": "SetAlarmState",
929
1715
  "description": "Grants permission to temporarily set the state of an alarm for testing purposes",
@@ -954,6 +1740,36 @@
954
1740
  "conditionKeys": [],
955
1741
  "dependentActions": []
956
1742
  },
1743
+ "startomnithreadsession": {
1744
+ "name": "StartOmniThreadSession",
1745
+ "description": "Grants permission to start an omni thread session",
1746
+ "accessLevel": "Write",
1747
+ "resourceTypes": [],
1748
+ "conditionKeys": [
1749
+ "cloudwatch:HasAccessGrant"
1750
+ ],
1751
+ "dependentActions": []
1752
+ },
1753
+ "starttelemetryquery": {
1754
+ "name": "StartTelemetryQuery",
1755
+ "description": "Grants permission to start a telemetry query",
1756
+ "accessLevel": "Write",
1757
+ "resourceTypes": [],
1758
+ "conditionKeys": [
1759
+ "cloudwatch:HasAccessGrant"
1760
+ ],
1761
+ "dependentActions": []
1762
+ },
1763
+ "starttelemetryquerysession": {
1764
+ "name": "StartTelemetryQuerySession",
1765
+ "description": "Grants permission to start a telemetry query session",
1766
+ "accessLevel": "Write",
1767
+ "resourceTypes": [],
1768
+ "conditionKeys": [
1769
+ "cloudwatch:HasAccessGrant"
1770
+ ],
1771
+ "dependentActions": []
1772
+ },
957
1773
  "stopmetricstreams": {
958
1774
  "name": "StopMetricStreams",
959
1775
  "description": "Grants permission to stop all CloudWatch metric streams that you specify",
@@ -969,6 +1785,36 @@
969
1785
  "conditionKeys": [],
970
1786
  "dependentActions": []
971
1787
  },
1788
+ "stoptelemetryquery": {
1789
+ "name": "StopTelemetryQuery",
1790
+ "description": "Grants permission to stop a telemetry query",
1791
+ "accessLevel": "Write",
1792
+ "resourceTypes": [],
1793
+ "conditionKeys": [
1794
+ "cloudwatch:HasAccessGrant"
1795
+ ],
1796
+ "dependentActions": []
1797
+ },
1798
+ "stoptelemetryquerysession": {
1799
+ "name": "StopTelemetryQuerySession",
1800
+ "description": "Grants permission to stop a telemetry query session",
1801
+ "accessLevel": "Write",
1802
+ "resourceTypes": [],
1803
+ "conditionKeys": [
1804
+ "cloudwatch:HasAccessGrant"
1805
+ ],
1806
+ "dependentActions": []
1807
+ },
1808
+ "submitfeedback": {
1809
+ "name": "SubmitFeedback",
1810
+ "description": "Grants permission to submit feedback",
1811
+ "accessLevel": "Write",
1812
+ "resourceTypes": [],
1813
+ "conditionKeys": [
1814
+ "cloudwatch:HasAccessGrant"
1815
+ ],
1816
+ "dependentActions": []
1817
+ },
972
1818
  "tagresource": {
973
1819
  "name": "TagResource",
974
1820
  "description": "Grants permission to add tags to an Amazon CloudWatch resource",
@@ -1041,7 +1887,8 @@
1041
1887
  ],
1042
1888
  "conditionKeys": [
1043
1889
  "aws:RequestTag/${TagKey}",
1044
- "aws:TagKeys"
1890
+ "aws:TagKeys",
1891
+ "cloudwatch:HasAccessGrant"
1045
1892
  ],
1046
1893
  "dependentActions": [],
1047
1894
  "scenarios": [
@@ -1190,7 +2037,8 @@
1190
2037
  }
1191
2038
  ],
1192
2039
  "conditionKeys": [
1193
- "aws:TagKeys"
2040
+ "aws:TagKeys",
2041
+ "cloudwatch:HasAccessGrant"
1194
2042
  ],
1195
2043
  "dependentActions": [],
1196
2044
  "scenarios": [
@@ -1268,6 +2116,139 @@
1268
2116
  }
1269
2117
  ]
1270
2118
  },
2119
+ "updateaccessprofile": {
2120
+ "name": "UpdateAccessProfile",
2121
+ "description": "Grants permission to update an access profile",
2122
+ "accessLevel": "Permissions management, Write",
2123
+ "resourceTypes": [
2124
+ {
2125
+ "name": "access-profile",
2126
+ "required": true,
2127
+ "conditionKeys": [],
2128
+ "dependentActions": []
2129
+ }
2130
+ ],
2131
+ "conditionKeys": [
2132
+ "cloudwatch:HasAccessGrant"
2133
+ ],
2134
+ "dependentActions": []
2135
+ },
2136
+ "updatealert": {
2137
+ "name": "UpdateAlert",
2138
+ "description": "Grants permission to update an alert",
2139
+ "accessLevel": "Write",
2140
+ "resourceTypes": [
2141
+ {
2142
+ "name": "alert",
2143
+ "required": true,
2144
+ "conditionKeys": [],
2145
+ "dependentActions": []
2146
+ }
2147
+ ],
2148
+ "conditionKeys": [
2149
+ "cloudwatch:HasAccessGrant"
2150
+ ],
2151
+ "dependentActions": []
2152
+ },
2153
+ "updatedomain": {
2154
+ "name": "UpdateDomain",
2155
+ "description": "Grants permission to update a domain",
2156
+ "accessLevel": "Write",
2157
+ "resourceTypes": [
2158
+ {
2159
+ "name": "domain",
2160
+ "required": true,
2161
+ "conditionKeys": [],
2162
+ "dependentActions": []
2163
+ }
2164
+ ],
2165
+ "conditionKeys": [],
2166
+ "dependentActions": []
2167
+ },
2168
+ "updatedomainfororganization": {
2169
+ "name": "UpdateDomainForOrganization",
2170
+ "description": "Grants permission to update a domain for an organization",
2171
+ "accessLevel": "Write",
2172
+ "resourceTypes": [
2173
+ {
2174
+ "name": "organization-domain",
2175
+ "required": true,
2176
+ "conditionKeys": [],
2177
+ "dependentActions": []
2178
+ }
2179
+ ],
2180
+ "conditionKeys": [],
2181
+ "dependentActions": []
2182
+ },
2183
+ "updateingestionendpoint": {
2184
+ "name": "UpdateIngestionEndpoint",
2185
+ "description": "Grants permission to update an ingestion endpoint",
2186
+ "accessLevel": "Write",
2187
+ "resourceTypes": [
2188
+ {
2189
+ "name": "ingestion-endpoint",
2190
+ "required": true,
2191
+ "conditionKeys": [],
2192
+ "dependentActions": []
2193
+ }
2194
+ ],
2195
+ "conditionKeys": [],
2196
+ "dependentActions": []
2197
+ },
2198
+ "updateintegration": {
2199
+ "name": "UpdateIntegration",
2200
+ "description": "Grants permission to update an integration",
2201
+ "accessLevel": "Write",
2202
+ "resourceTypes": [
2203
+ {
2204
+ "name": "integration",
2205
+ "required": true,
2206
+ "conditionKeys": [],
2207
+ "dependentActions": []
2208
+ }
2209
+ ],
2210
+ "conditionKeys": [
2211
+ "cloudwatch:HasAccessGrant"
2212
+ ],
2213
+ "dependentActions": []
2214
+ },
2215
+ "updateomnidashboard": {
2216
+ "name": "UpdateOmniDashboard",
2217
+ "description": "Grants permission to update an omni dashboard",
2218
+ "accessLevel": "Write",
2219
+ "resourceTypes": [
2220
+ {
2221
+ "name": "omni-dashboard",
2222
+ "required": true,
2223
+ "conditionKeys": [],
2224
+ "dependentActions": []
2225
+ }
2226
+ ],
2227
+ "conditionKeys": [
2228
+ "cloudwatch:HasAccessGrant"
2229
+ ],
2230
+ "dependentActions": []
2231
+ },
2232
+ "updateomnithread": {
2233
+ "name": "UpdateOmniThread",
2234
+ "description": "Grants permission to update an omni thread",
2235
+ "accessLevel": "Write",
2236
+ "resourceTypes": [],
2237
+ "conditionKeys": [
2238
+ "cloudwatch:HasAccessGrant"
2239
+ ],
2240
+ "dependentActions": []
2241
+ },
2242
+ "updatepreferences": {
2243
+ "name": "UpdatePreferences",
2244
+ "description": "Grants permission to update preferences",
2245
+ "accessLevel": "Write",
2246
+ "resourceTypes": [],
2247
+ "conditionKeys": [
2248
+ "cloudwatch:HasAccessGrant"
2249
+ ],
2250
+ "dependentActions": []
2251
+ },
1271
2252
  "updateservicelevelobjective": {
1272
2253
  "name": "UpdateServiceLevelObjective",
1273
2254
  "description": "Grants permission to update a service level objective",
@@ -1282,5 +2263,39 @@
1282
2263
  ],
1283
2264
  "conditionKeys": [],
1284
2265
  "dependentActions": []
2266
+ },
2267
+ "updatespace": {
2268
+ "name": "UpdateSpace",
2269
+ "description": "Grants permission to update a space",
2270
+ "accessLevel": "Write",
2271
+ "resourceTypes": [
2272
+ {
2273
+ "name": "space",
2274
+ "required": true,
2275
+ "conditionKeys": [],
2276
+ "dependentActions": []
2277
+ }
2278
+ ],
2279
+ "conditionKeys": [
2280
+ "cloudwatch:HasAccessGrant"
2281
+ ],
2282
+ "dependentActions": []
2283
+ },
2284
+ "updateview": {
2285
+ "name": "UpdateView",
2286
+ "description": "Grants permission to update a view",
2287
+ "accessLevel": "Write",
2288
+ "resourceTypes": [
2289
+ {
2290
+ "name": "view",
2291
+ "required": true,
2292
+ "conditionKeys": [],
2293
+ "dependentActions": []
2294
+ }
2295
+ ],
2296
+ "conditionKeys": [
2297
+ "cloudwatch:HasAccessGrant"
2298
+ ],
2299
+ "dependentActions": []
1285
2300
  }
1286
2301
  }