@actsecurity/iam-data 0.22.202611061 → 0.22.202611091
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/data/actions/athena.json +89 -0
- package/data/actions/cloudwatch.json +8 -0
- package/data/actions/glue.json +6 -0
- package/data/actions/mgn.json +186 -0
- package/data/actions/ram.json +380 -121
- package/data/actions/ssm.json +16 -0
- package/data/conditionKeys/glue.json +15 -0
- package/data/conditionKeys/ram.json +35 -5
- package/data/conditionPatterns.json +1 -0
- package/data/resourceTypes/athena.json +7 -0
- package/data/resourceTypes/mgn.json +14 -0
- package/data/resourceTypes/ram.json +7 -3
- package/package.json +2 -2
package/data/actions/ram.json
CHANGED
|
@@ -1,4 +1,73 @@
|
|
|
1
1
|
{
|
|
2
|
+
"deletecustomermanagedpermissionpolicy": {
|
|
3
|
+
"name": "DeleteCustomerManagedPermissionPolicy",
|
|
4
|
+
"description": "Grants permission to delete a resource-based policy on a customer-managed permission",
|
|
5
|
+
"accessLevel": "Permissions management, Write",
|
|
6
|
+
"resourceTypes": [
|
|
7
|
+
{
|
|
8
|
+
"name": "customer-managed-permission",
|
|
9
|
+
"required": true,
|
|
10
|
+
"conditionKeys": [
|
|
11
|
+
"aws:ResourceTag/${TagKey}",
|
|
12
|
+
"ram:PermissionArn",
|
|
13
|
+
"ram:PermissionResourceType",
|
|
14
|
+
"ram:ResourceTag/${TagKey}"
|
|
15
|
+
],
|
|
16
|
+
"dependentActions": []
|
|
17
|
+
}
|
|
18
|
+
],
|
|
19
|
+
"conditionKeys": [
|
|
20
|
+
"ram:RequestedPermissionArns",
|
|
21
|
+
"ram:RequestedPermissionResourceTypes"
|
|
22
|
+
],
|
|
23
|
+
"dependentActions": []
|
|
24
|
+
},
|
|
25
|
+
"getcustomermanagedpermissionpolicy": {
|
|
26
|
+
"name": "GetCustomerManagedPermissionPolicy",
|
|
27
|
+
"description": "Grants permission to get a resource-based policy on a customer-managed permission",
|
|
28
|
+
"accessLevel": "Read",
|
|
29
|
+
"resourceTypes": [
|
|
30
|
+
{
|
|
31
|
+
"name": "customer-managed-permission",
|
|
32
|
+
"required": true,
|
|
33
|
+
"conditionKeys": [
|
|
34
|
+
"aws:ResourceTag/${TagKey}",
|
|
35
|
+
"ram:PermissionArn",
|
|
36
|
+
"ram:PermissionResourceType",
|
|
37
|
+
"ram:ResourceTag/${TagKey}"
|
|
38
|
+
],
|
|
39
|
+
"dependentActions": []
|
|
40
|
+
}
|
|
41
|
+
],
|
|
42
|
+
"conditionKeys": [
|
|
43
|
+
"ram:RequestedPermissionArns",
|
|
44
|
+
"ram:RequestedPermissionResourceTypes"
|
|
45
|
+
],
|
|
46
|
+
"dependentActions": []
|
|
47
|
+
},
|
|
48
|
+
"putcustomermanagedpermissionpolicy": {
|
|
49
|
+
"name": "PutCustomerManagedPermissionPolicy",
|
|
50
|
+
"description": "Grants permission to put a resource-based policy on a customer-managed permission",
|
|
51
|
+
"accessLevel": "Permissions management, Write",
|
|
52
|
+
"resourceTypes": [
|
|
53
|
+
{
|
|
54
|
+
"name": "customer-managed-permission",
|
|
55
|
+
"required": true,
|
|
56
|
+
"conditionKeys": [
|
|
57
|
+
"aws:ResourceTag/${TagKey}",
|
|
58
|
+
"ram:PermissionArn",
|
|
59
|
+
"ram:PermissionResourceType",
|
|
60
|
+
"ram:ResourceTag/${TagKey}"
|
|
61
|
+
],
|
|
62
|
+
"dependentActions": []
|
|
63
|
+
}
|
|
64
|
+
],
|
|
65
|
+
"conditionKeys": [
|
|
66
|
+
"ram:RequestedPermissionArns",
|
|
67
|
+
"ram:RequestedPermissionResourceTypes"
|
|
68
|
+
],
|
|
69
|
+
"dependentActions": []
|
|
70
|
+
},
|
|
2
71
|
"acceptresourceshareinvitation": {
|
|
3
72
|
"name": "AcceptResourceShareInvitation",
|
|
4
73
|
"description": "Grants permission to accept the specified resource share invitation",
|
|
@@ -7,14 +76,14 @@
|
|
|
7
76
|
{
|
|
8
77
|
"name": "resource-share-invitation",
|
|
9
78
|
"required": true,
|
|
10
|
-
"conditionKeys": [
|
|
79
|
+
"conditionKeys": [
|
|
80
|
+
"ram:ResourceShareName",
|
|
81
|
+
"ram:ShareOwnerAccountId"
|
|
82
|
+
],
|
|
11
83
|
"dependentActions": []
|
|
12
84
|
}
|
|
13
85
|
],
|
|
14
|
-
"conditionKeys": [
|
|
15
|
-
"ram:ResourceShareName",
|
|
16
|
-
"ram:ShareOwnerAccountId"
|
|
17
|
-
],
|
|
86
|
+
"conditionKeys": [],
|
|
18
87
|
"dependentActions": []
|
|
19
88
|
},
|
|
20
89
|
"associateresourceshare": {
|
|
@@ -25,19 +94,25 @@
|
|
|
25
94
|
{
|
|
26
95
|
"name": "resource-share",
|
|
27
96
|
"required": true,
|
|
28
|
-
"conditionKeys": [
|
|
97
|
+
"conditionKeys": [
|
|
98
|
+
"aws:ResourceTag/${TagKey}",
|
|
99
|
+
"ram:AllowsExternalPrincipals",
|
|
100
|
+
"ram:Principal",
|
|
101
|
+
"ram:RequestedResourceType",
|
|
102
|
+
"ram:ResourceArn",
|
|
103
|
+
"ram:ResourceShareName",
|
|
104
|
+
"ram:ResourceTag/${TagKey}",
|
|
105
|
+
"ram:RetainSharingOnAccountLeaveOrganization"
|
|
106
|
+
],
|
|
29
107
|
"dependentActions": []
|
|
30
108
|
}
|
|
31
109
|
],
|
|
32
110
|
"conditionKeys": [
|
|
33
|
-
"
|
|
34
|
-
"ram:
|
|
35
|
-
"ram:
|
|
36
|
-
"ram:
|
|
37
|
-
"ram:
|
|
38
|
-
"ram:ResourceShareName",
|
|
39
|
-
"ram:ResourceTag/${TagKey}",
|
|
40
|
-
"ram:RetainSharingOnAccountLeaveOrganization"
|
|
111
|
+
"ram:RequestedPermissionArns",
|
|
112
|
+
"ram:RequestedPermissionResourceTypes",
|
|
113
|
+
"ram:RequestedPrincipals",
|
|
114
|
+
"ram:RequestedResourceArns",
|
|
115
|
+
"ram:RequestedResourceTypes"
|
|
41
116
|
],
|
|
42
117
|
"dependentActions": []
|
|
43
118
|
},
|
|
@@ -49,36 +124,68 @@
|
|
|
49
124
|
{
|
|
50
125
|
"name": "customer-managed-permission",
|
|
51
126
|
"required": true,
|
|
52
|
-
"conditionKeys": [
|
|
127
|
+
"conditionKeys": [
|
|
128
|
+
"aws:ResourceTag/${TagKey}",
|
|
129
|
+
"ram:PermissionArn",
|
|
130
|
+
"ram:PermissionResourceType",
|
|
131
|
+
"ram:PermissionTemplateParameter/${ParameterName}",
|
|
132
|
+
"ram:ResourceTag/${TagKey}"
|
|
133
|
+
],
|
|
53
134
|
"dependentActions": []
|
|
54
135
|
},
|
|
55
136
|
{
|
|
56
137
|
"name": "permission",
|
|
57
138
|
"required": true,
|
|
58
|
-
"conditionKeys": [
|
|
139
|
+
"conditionKeys": [
|
|
140
|
+
"ram:PermissionArn",
|
|
141
|
+
"ram:PermissionResourceType",
|
|
142
|
+
"ram:PermissionTemplateParameter/${ParameterName}"
|
|
143
|
+
],
|
|
59
144
|
"dependentActions": []
|
|
60
145
|
},
|
|
61
146
|
{
|
|
62
147
|
"name": "resource-share",
|
|
63
148
|
"required": true,
|
|
64
|
-
"conditionKeys": [
|
|
149
|
+
"conditionKeys": [
|
|
150
|
+
"aws:ResourceTag/${TagKey}",
|
|
151
|
+
"ram:AllowsExternalPrincipals",
|
|
152
|
+
"ram:PermissionArn",
|
|
153
|
+
"ram:ResourceShareName",
|
|
154
|
+
"ram:ResourceTag/${TagKey}",
|
|
155
|
+
"ram:RetainSharingOnAccountLeaveOrganization"
|
|
156
|
+
],
|
|
65
157
|
"dependentActions": []
|
|
66
158
|
}
|
|
67
159
|
],
|
|
68
|
-
"conditionKeys": [
|
|
160
|
+
"conditionKeys": [
|
|
161
|
+
"ram:RequestedPermissionArns",
|
|
162
|
+
"ram:RequestedPermissionResourceTypes"
|
|
163
|
+
],
|
|
69
164
|
"dependentActions": []
|
|
70
165
|
},
|
|
71
166
|
"createpermission": {
|
|
72
167
|
"name": "CreatePermission",
|
|
73
168
|
"description": "Grants permission to create a Permission that can be associated to a Resource Share",
|
|
74
169
|
"accessLevel": "Write",
|
|
75
|
-
"resourceTypes": [
|
|
170
|
+
"resourceTypes": [
|
|
171
|
+
{
|
|
172
|
+
"name": "customer-managed-permission",
|
|
173
|
+
"required": true,
|
|
174
|
+
"conditionKeys": [
|
|
175
|
+
"aws:RequestTag/${TagKey}",
|
|
176
|
+
"aws:ResourceTag/${TagKey}",
|
|
177
|
+
"ram:PermissionArn",
|
|
178
|
+
"ram:PermissionResourceType",
|
|
179
|
+
"ram:ResourceTag/${TagKey}"
|
|
180
|
+
],
|
|
181
|
+
"dependentActions": []
|
|
182
|
+
}
|
|
183
|
+
],
|
|
76
184
|
"conditionKeys": [
|
|
77
185
|
"aws:RequestTag/${TagKey}",
|
|
78
|
-
"aws:ResourceTag/${TagKey}",
|
|
79
186
|
"aws:TagKeys",
|
|
80
|
-
"ram:
|
|
81
|
-
"ram:
|
|
187
|
+
"ram:RequestedPermissionArns",
|
|
188
|
+
"ram:RequestedPermissionResourceTypes"
|
|
82
189
|
],
|
|
83
190
|
"dependentActions": []
|
|
84
191
|
},
|
|
@@ -90,13 +197,18 @@
|
|
|
90
197
|
{
|
|
91
198
|
"name": "customer-managed-permission",
|
|
92
199
|
"required": true,
|
|
93
|
-
"conditionKeys": [
|
|
200
|
+
"conditionKeys": [
|
|
201
|
+
"aws:ResourceTag/${TagKey}",
|
|
202
|
+
"ram:PermissionArn",
|
|
203
|
+
"ram:PermissionResourceType",
|
|
204
|
+
"ram:ResourceTag/${TagKey}"
|
|
205
|
+
],
|
|
94
206
|
"dependentActions": []
|
|
95
207
|
}
|
|
96
208
|
],
|
|
97
209
|
"conditionKeys": [
|
|
98
|
-
"ram:
|
|
99
|
-
"ram:
|
|
210
|
+
"ram:RequestedPermissionArns",
|
|
211
|
+
"ram:RequestedPermissionResourceTypes"
|
|
100
212
|
],
|
|
101
213
|
"dependentActions": []
|
|
102
214
|
},
|
|
@@ -104,16 +216,50 @@
|
|
|
104
216
|
"name": "CreateResourceShare",
|
|
105
217
|
"description": "Grants permission to create a resource share with provided resource(s) and/or principal(s)",
|
|
106
218
|
"accessLevel": "Write",
|
|
107
|
-
"resourceTypes": [
|
|
219
|
+
"resourceTypes": [
|
|
220
|
+
{
|
|
221
|
+
"name": "customer-managed-permission",
|
|
222
|
+
"required": false,
|
|
223
|
+
"conditionKeys": [
|
|
224
|
+
"ram:PermissionArn",
|
|
225
|
+
"ram:PermissionResourceType",
|
|
226
|
+
"ram:PermissionTemplateParameter/${ParameterName}"
|
|
227
|
+
],
|
|
228
|
+
"dependentActions": []
|
|
229
|
+
},
|
|
230
|
+
{
|
|
231
|
+
"name": "permission",
|
|
232
|
+
"required": false,
|
|
233
|
+
"conditionKeys": [
|
|
234
|
+
"ram:PermissionArn",
|
|
235
|
+
"ram:PermissionResourceType",
|
|
236
|
+
"ram:PermissionTemplateParameter/${ParameterName}"
|
|
237
|
+
],
|
|
238
|
+
"dependentActions": []
|
|
239
|
+
},
|
|
240
|
+
{
|
|
241
|
+
"name": "resource-share",
|
|
242
|
+
"required": true,
|
|
243
|
+
"conditionKeys": [
|
|
244
|
+
"aws:RequestTag/${TagKey}",
|
|
245
|
+
"ram:AllowsExternalPrincipals",
|
|
246
|
+
"ram:Principal",
|
|
247
|
+
"ram:RequestedAllowsExternalPrincipals",
|
|
248
|
+
"ram:RequestedResourceType",
|
|
249
|
+
"ram:ResourceArn",
|
|
250
|
+
"ram:ResourceShareName",
|
|
251
|
+
"ram:RetainSharingOnAccountLeaveOrganization"
|
|
252
|
+
],
|
|
253
|
+
"dependentActions": []
|
|
254
|
+
}
|
|
255
|
+
],
|
|
108
256
|
"conditionKeys": [
|
|
109
|
-
"aws:RequestTag/${TagKey}",
|
|
110
257
|
"aws:TagKeys",
|
|
111
|
-
"ram:
|
|
112
|
-
"ram:
|
|
113
|
-
"ram:
|
|
114
|
-
"ram:
|
|
115
|
-
"ram:
|
|
116
|
-
"ram:RetainSharingOnAccountLeaveOrganization"
|
|
258
|
+
"ram:RequestedPermissionArns",
|
|
259
|
+
"ram:RequestedPermissionResourceTypes",
|
|
260
|
+
"ram:RequestedPrincipals",
|
|
261
|
+
"ram:RequestedResourceArns",
|
|
262
|
+
"ram:RequestedResourceTypes"
|
|
117
263
|
],
|
|
118
264
|
"dependentActions": []
|
|
119
265
|
},
|
|
@@ -125,14 +271,18 @@
|
|
|
125
271
|
{
|
|
126
272
|
"name": "customer-managed-permission",
|
|
127
273
|
"required": true,
|
|
128
|
-
"conditionKeys": [
|
|
274
|
+
"conditionKeys": [
|
|
275
|
+
"aws:ResourceTag/${TagKey}",
|
|
276
|
+
"ram:PermissionArn",
|
|
277
|
+
"ram:PermissionResourceType",
|
|
278
|
+
"ram:ResourceTag/${TagKey}"
|
|
279
|
+
],
|
|
129
280
|
"dependentActions": []
|
|
130
281
|
}
|
|
131
282
|
],
|
|
132
283
|
"conditionKeys": [
|
|
133
|
-
"
|
|
134
|
-
"ram:
|
|
135
|
-
"ram:PermissionResourceType"
|
|
284
|
+
"ram:RequestedPermissionArns",
|
|
285
|
+
"ram:RequestedPermissionResourceTypes"
|
|
136
286
|
],
|
|
137
287
|
"dependentActions": []
|
|
138
288
|
},
|
|
@@ -144,13 +294,18 @@
|
|
|
144
294
|
{
|
|
145
295
|
"name": "customer-managed-permission",
|
|
146
296
|
"required": true,
|
|
147
|
-
"conditionKeys": [
|
|
297
|
+
"conditionKeys": [
|
|
298
|
+
"aws:ResourceTag/${TagKey}",
|
|
299
|
+
"ram:PermissionArn",
|
|
300
|
+
"ram:PermissionResourceType",
|
|
301
|
+
"ram:ResourceTag/${TagKey}"
|
|
302
|
+
],
|
|
148
303
|
"dependentActions": []
|
|
149
304
|
}
|
|
150
305
|
],
|
|
151
306
|
"conditionKeys": [
|
|
152
|
-
"ram:
|
|
153
|
-
"ram:
|
|
307
|
+
"ram:RequestedPermissionArns",
|
|
308
|
+
"ram:RequestedPermissionResourceTypes"
|
|
154
309
|
],
|
|
155
310
|
"dependentActions": []
|
|
156
311
|
},
|
|
@@ -162,17 +317,17 @@
|
|
|
162
317
|
{
|
|
163
318
|
"name": "resource-share",
|
|
164
319
|
"required": true,
|
|
165
|
-
"conditionKeys": [
|
|
320
|
+
"conditionKeys": [
|
|
321
|
+
"aws:ResourceTag/${TagKey}",
|
|
322
|
+
"ram:AllowsExternalPrincipals",
|
|
323
|
+
"ram:ResourceShareName",
|
|
324
|
+
"ram:ResourceTag/${TagKey}",
|
|
325
|
+
"ram:RetainSharingOnAccountLeaveOrganization"
|
|
326
|
+
],
|
|
166
327
|
"dependentActions": []
|
|
167
328
|
}
|
|
168
329
|
],
|
|
169
|
-
"conditionKeys": [
|
|
170
|
-
"aws:ResourceTag/${TagKey}",
|
|
171
|
-
"ram:AllowsExternalPrincipals",
|
|
172
|
-
"ram:ResourceShareName",
|
|
173
|
-
"ram:ResourceTag/${TagKey}",
|
|
174
|
-
"ram:RetainSharingOnAccountLeaveOrganization"
|
|
175
|
-
],
|
|
330
|
+
"conditionKeys": [],
|
|
176
331
|
"dependentActions": []
|
|
177
332
|
},
|
|
178
333
|
"disassociateresourceshare": {
|
|
@@ -183,19 +338,23 @@
|
|
|
183
338
|
{
|
|
184
339
|
"name": "resource-share",
|
|
185
340
|
"required": true,
|
|
186
|
-
"conditionKeys": [
|
|
341
|
+
"conditionKeys": [
|
|
342
|
+
"aws:ResourceTag/${TagKey}",
|
|
343
|
+
"ram:AllowsExternalPrincipals",
|
|
344
|
+
"ram:Principal",
|
|
345
|
+
"ram:RequestedResourceType",
|
|
346
|
+
"ram:ResourceArn",
|
|
347
|
+
"ram:ResourceShareName",
|
|
348
|
+
"ram:ResourceTag/${TagKey}",
|
|
349
|
+
"ram:RetainSharingOnAccountLeaveOrganization"
|
|
350
|
+
],
|
|
187
351
|
"dependentActions": []
|
|
188
352
|
}
|
|
189
353
|
],
|
|
190
354
|
"conditionKeys": [
|
|
191
|
-
"
|
|
192
|
-
"ram:
|
|
193
|
-
"ram:
|
|
194
|
-
"ram:RequestedResourceType",
|
|
195
|
-
"ram:ResourceArn",
|
|
196
|
-
"ram:ResourceShareName",
|
|
197
|
-
"ram:ResourceTag/${TagKey}",
|
|
198
|
-
"ram:RetainSharingOnAccountLeaveOrganization"
|
|
355
|
+
"ram:RequestedPrincipals",
|
|
356
|
+
"ram:RequestedResourceArns",
|
|
357
|
+
"ram:RequestedResourceTypes"
|
|
199
358
|
],
|
|
200
359
|
"dependentActions": []
|
|
201
360
|
},
|
|
@@ -207,23 +366,41 @@
|
|
|
207
366
|
{
|
|
208
367
|
"name": "customer-managed-permission",
|
|
209
368
|
"required": true,
|
|
210
|
-
"conditionKeys": [
|
|
369
|
+
"conditionKeys": [
|
|
370
|
+
"aws:ResourceTag/${TagKey}",
|
|
371
|
+
"ram:PermissionArn",
|
|
372
|
+
"ram:PermissionResourceType",
|
|
373
|
+
"ram:ResourceTag/${TagKey}"
|
|
374
|
+
],
|
|
211
375
|
"dependentActions": []
|
|
212
376
|
},
|
|
213
377
|
{
|
|
214
378
|
"name": "permission",
|
|
215
379
|
"required": true,
|
|
216
|
-
"conditionKeys": [
|
|
380
|
+
"conditionKeys": [
|
|
381
|
+
"ram:PermissionArn",
|
|
382
|
+
"ram:PermissionResourceType"
|
|
383
|
+
],
|
|
217
384
|
"dependentActions": []
|
|
218
385
|
},
|
|
219
386
|
{
|
|
220
387
|
"name": "resource-share",
|
|
221
388
|
"required": true,
|
|
222
|
-
"conditionKeys": [
|
|
389
|
+
"conditionKeys": [
|
|
390
|
+
"aws:ResourceTag/${TagKey}",
|
|
391
|
+
"ram:AllowsExternalPrincipals",
|
|
392
|
+
"ram:PermissionArn",
|
|
393
|
+
"ram:ResourceShareName",
|
|
394
|
+
"ram:ResourceTag/${TagKey}",
|
|
395
|
+
"ram:RetainSharingOnAccountLeaveOrganization"
|
|
396
|
+
],
|
|
223
397
|
"dependentActions": []
|
|
224
398
|
}
|
|
225
399
|
],
|
|
226
|
-
"conditionKeys": [
|
|
400
|
+
"conditionKeys": [
|
|
401
|
+
"ram:RequestedPermissionArns",
|
|
402
|
+
"ram:RequestedPermissionResourceTypes"
|
|
403
|
+
],
|
|
227
404
|
"dependentActions": []
|
|
228
405
|
},
|
|
229
406
|
"enablesharingwithawsorganization": {
|
|
@@ -242,18 +419,27 @@
|
|
|
242
419
|
{
|
|
243
420
|
"name": "customer-managed-permission",
|
|
244
421
|
"required": true,
|
|
245
|
-
"conditionKeys": [
|
|
422
|
+
"conditionKeys": [
|
|
423
|
+
"aws:ResourceTag/${TagKey}",
|
|
424
|
+
"ram:PermissionArn",
|
|
425
|
+
"ram:PermissionResourceType",
|
|
426
|
+
"ram:ResourceTag/${TagKey}"
|
|
427
|
+
],
|
|
246
428
|
"dependentActions": []
|
|
247
429
|
},
|
|
248
430
|
{
|
|
249
431
|
"name": "permission",
|
|
250
432
|
"required": true,
|
|
251
|
-
"conditionKeys": [
|
|
433
|
+
"conditionKeys": [
|
|
434
|
+
"ram:PermissionArn",
|
|
435
|
+
"ram:PermissionResourceType"
|
|
436
|
+
],
|
|
252
437
|
"dependentActions": []
|
|
253
438
|
}
|
|
254
439
|
],
|
|
255
440
|
"conditionKeys": [
|
|
256
|
-
"ram:
|
|
441
|
+
"ram:RequestedPermissionArns",
|
|
442
|
+
"ram:RequestedPermissionResourceTypes"
|
|
257
443
|
],
|
|
258
444
|
"dependentActions": []
|
|
259
445
|
},
|
|
@@ -286,10 +472,7 @@
|
|
|
286
472
|
"description": "Grants permission to get a set of resource shares from a provided list or with a specified status",
|
|
287
473
|
"accessLevel": "Read",
|
|
288
474
|
"resourceTypes": [],
|
|
289
|
-
"conditionKeys": [
|
|
290
|
-
"aws:RequestTag/${TagKey}",
|
|
291
|
-
"aws:TagKeys"
|
|
292
|
-
],
|
|
475
|
+
"conditionKeys": [],
|
|
293
476
|
"dependentActions": []
|
|
294
477
|
},
|
|
295
478
|
"listpendinginvitationresources": {
|
|
@@ -300,44 +483,53 @@
|
|
|
300
483
|
{
|
|
301
484
|
"name": "resource-share-invitation",
|
|
302
485
|
"required": true,
|
|
303
|
-
"conditionKeys": [
|
|
486
|
+
"conditionKeys": [
|
|
487
|
+
"ram:ResourceShareName",
|
|
488
|
+
"ram:ShareOwnerAccountId"
|
|
489
|
+
],
|
|
304
490
|
"dependentActions": []
|
|
305
491
|
}
|
|
306
492
|
],
|
|
307
|
-
"conditionKeys": [
|
|
308
|
-
"ram:ResourceShareName"
|
|
309
|
-
],
|
|
493
|
+
"conditionKeys": [],
|
|
310
494
|
"dependentActions": []
|
|
311
495
|
},
|
|
312
496
|
"listpermissionassociations": {
|
|
313
497
|
"name": "ListPermissionAssociations",
|
|
314
498
|
"description": "Grants permission to list information about the permission and any associations",
|
|
315
499
|
"accessLevel": "List",
|
|
500
|
+
"resourceTypes": [],
|
|
501
|
+
"conditionKeys": [
|
|
502
|
+
"ram:RequestedPermissionArns",
|
|
503
|
+
"ram:RequestedPermissionResourceTypes"
|
|
504
|
+
],
|
|
505
|
+
"dependentActions": []
|
|
506
|
+
},
|
|
507
|
+
"listpermissionversions": {
|
|
508
|
+
"name": "ListPermissionVersions",
|
|
509
|
+
"description": "Grants permission to list the versions of an AWS RAM permission",
|
|
510
|
+
"accessLevel": "List",
|
|
316
511
|
"resourceTypes": [
|
|
317
512
|
{
|
|
318
513
|
"name": "customer-managed-permission",
|
|
319
514
|
"required": true,
|
|
320
|
-
"conditionKeys": [
|
|
515
|
+
"conditionKeys": [
|
|
516
|
+
"aws:ResourceTag/${TagKey}",
|
|
517
|
+
"ram:PermissionArn",
|
|
518
|
+
"ram:PermissionResourceType",
|
|
519
|
+
"ram:ResourceTag/${TagKey}"
|
|
520
|
+
],
|
|
321
521
|
"dependentActions": []
|
|
322
522
|
},
|
|
323
523
|
{
|
|
324
524
|
"name": "permission",
|
|
325
525
|
"required": true,
|
|
326
|
-
"conditionKeys": [
|
|
526
|
+
"conditionKeys": [
|
|
527
|
+
"ram:PermissionArn",
|
|
528
|
+
"ram:PermissionResourceType"
|
|
529
|
+
],
|
|
327
530
|
"dependentActions": []
|
|
328
531
|
}
|
|
329
532
|
],
|
|
330
|
-
"conditionKeys": [
|
|
331
|
-
"ram:PermissionArn",
|
|
332
|
-
"ram:PermissionResourceType"
|
|
333
|
-
],
|
|
334
|
-
"dependentActions": []
|
|
335
|
-
},
|
|
336
|
-
"listpermissionversions": {
|
|
337
|
-
"name": "ListPermissionVersions",
|
|
338
|
-
"description": "Grants permission to list the versions of an AWS RAM permission",
|
|
339
|
-
"accessLevel": "List",
|
|
340
|
-
"resourceTypes": [],
|
|
341
533
|
"conditionKeys": [],
|
|
342
534
|
"dependentActions": []
|
|
343
535
|
},
|
|
@@ -373,16 +565,17 @@
|
|
|
373
565
|
{
|
|
374
566
|
"name": "resource-share",
|
|
375
567
|
"required": true,
|
|
376
|
-
"conditionKeys": [
|
|
568
|
+
"conditionKeys": [
|
|
569
|
+
"aws:ResourceTag/${TagKey}",
|
|
570
|
+
"ram:AllowsExternalPrincipals",
|
|
571
|
+
"ram:ResourceShareName",
|
|
572
|
+
"ram:ResourceTag/${TagKey}",
|
|
573
|
+
"ram:RetainSharingOnAccountLeaveOrganization"
|
|
574
|
+
],
|
|
377
575
|
"dependentActions": []
|
|
378
576
|
}
|
|
379
577
|
],
|
|
380
|
-
"conditionKeys": [
|
|
381
|
-
"aws:ResourceTag/${TagKey}",
|
|
382
|
-
"ram:AllowsExternalPrincipals",
|
|
383
|
-
"ram:ResourceShareName",
|
|
384
|
-
"ram:RetainSharingOnAccountLeaveOrganization"
|
|
385
|
-
],
|
|
578
|
+
"conditionKeys": [],
|
|
386
579
|
"dependentActions": []
|
|
387
580
|
},
|
|
388
581
|
"listresourcetypes": {
|
|
@@ -417,13 +610,16 @@
|
|
|
417
610
|
{
|
|
418
611
|
"name": "customer-managed-permission",
|
|
419
612
|
"required": true,
|
|
420
|
-
"conditionKeys": [
|
|
613
|
+
"conditionKeys": [
|
|
614
|
+
"ram:PermissionArn",
|
|
615
|
+
"ram:PermissionResourceType"
|
|
616
|
+
],
|
|
421
617
|
"dependentActions": []
|
|
422
618
|
}
|
|
423
619
|
],
|
|
424
620
|
"conditionKeys": [
|
|
425
|
-
"ram:
|
|
426
|
-
"ram:
|
|
621
|
+
"ram:RequestedPermissionArns",
|
|
622
|
+
"ram:RequestedPermissionResourceTypes"
|
|
427
623
|
],
|
|
428
624
|
"dependentActions": []
|
|
429
625
|
},
|
|
@@ -435,7 +631,12 @@
|
|
|
435
631
|
{
|
|
436
632
|
"name": "resource-share",
|
|
437
633
|
"required": true,
|
|
438
|
-
"conditionKeys": [
|
|
634
|
+
"conditionKeys": [
|
|
635
|
+
"aws:ResourceTag/${TagKey}",
|
|
636
|
+
"ram:AllowsExternalPrincipals",
|
|
637
|
+
"ram:ResourceShareName",
|
|
638
|
+
"ram:ResourceTag/${TagKey}"
|
|
639
|
+
],
|
|
439
640
|
"dependentActions": []
|
|
440
641
|
}
|
|
441
642
|
],
|
|
@@ -450,14 +651,14 @@
|
|
|
450
651
|
{
|
|
451
652
|
"name": "resource-share-invitation",
|
|
452
653
|
"required": true,
|
|
453
|
-
"conditionKeys": [
|
|
654
|
+
"conditionKeys": [
|
|
655
|
+
"ram:ResourceShareName",
|
|
656
|
+
"ram:ShareOwnerAccountId"
|
|
657
|
+
],
|
|
454
658
|
"dependentActions": []
|
|
455
659
|
}
|
|
456
660
|
],
|
|
457
|
-
"conditionKeys": [
|
|
458
|
-
"ram:ResourceShareName",
|
|
459
|
-
"ram:ShareOwnerAccountId"
|
|
460
|
-
],
|
|
661
|
+
"conditionKeys": [],
|
|
461
662
|
"dependentActions": []
|
|
462
663
|
},
|
|
463
664
|
"replacepermissionassociations": {
|
|
@@ -468,19 +669,29 @@
|
|
|
468
669
|
{
|
|
469
670
|
"name": "customer-managed-permission",
|
|
470
671
|
"required": true,
|
|
471
|
-
"conditionKeys": [
|
|
672
|
+
"conditionKeys": [
|
|
673
|
+
"aws:ResourceTag/${TagKey}",
|
|
674
|
+
"ram:PermissionArn",
|
|
675
|
+
"ram:PermissionResourceType",
|
|
676
|
+
"ram:PermissionTemplateParameter/${ParameterName}",
|
|
677
|
+
"ram:ResourceTag/${TagKey}"
|
|
678
|
+
],
|
|
472
679
|
"dependentActions": []
|
|
473
680
|
},
|
|
474
681
|
{
|
|
475
682
|
"name": "permission",
|
|
476
683
|
"required": true,
|
|
477
|
-
"conditionKeys": [
|
|
684
|
+
"conditionKeys": [
|
|
685
|
+
"ram:PermissionArn",
|
|
686
|
+
"ram:PermissionResourceType",
|
|
687
|
+
"ram:PermissionTemplateParameter/${ParameterName}"
|
|
688
|
+
],
|
|
478
689
|
"dependentActions": []
|
|
479
690
|
}
|
|
480
691
|
],
|
|
481
692
|
"conditionKeys": [
|
|
482
|
-
"ram:
|
|
483
|
-
"ram:
|
|
693
|
+
"ram:RequestedPermissionArns",
|
|
694
|
+
"ram:RequestedPermissionResourceTypes"
|
|
484
695
|
],
|
|
485
696
|
"dependentActions": []
|
|
486
697
|
},
|
|
@@ -492,13 +703,18 @@
|
|
|
492
703
|
{
|
|
493
704
|
"name": "customer-managed-permission",
|
|
494
705
|
"required": true,
|
|
495
|
-
"conditionKeys": [
|
|
706
|
+
"conditionKeys": [
|
|
707
|
+
"aws:ResourceTag/${TagKey}",
|
|
708
|
+
"ram:PermissionArn",
|
|
709
|
+
"ram:PermissionResourceType",
|
|
710
|
+
"ram:ResourceTag/${TagKey}"
|
|
711
|
+
],
|
|
496
712
|
"dependentActions": []
|
|
497
713
|
}
|
|
498
714
|
],
|
|
499
715
|
"conditionKeys": [
|
|
500
|
-
"ram:
|
|
501
|
-
"ram:
|
|
716
|
+
"ram:RequestedPermissionArns",
|
|
717
|
+
"ram:RequestedPermissionResourceTypes"
|
|
502
718
|
],
|
|
503
719
|
"dependentActions": []
|
|
504
720
|
},
|
|
@@ -510,13 +726,23 @@
|
|
|
510
726
|
{
|
|
511
727
|
"name": "customer-managed-permission",
|
|
512
728
|
"required": false,
|
|
513
|
-
"conditionKeys": [
|
|
729
|
+
"conditionKeys": [
|
|
730
|
+
"aws:ResourceTag/${TagKey}",
|
|
731
|
+
"ram:PermissionArn",
|
|
732
|
+
"ram:PermissionResourceType",
|
|
733
|
+
"ram:ResourceTag/${TagKey}"
|
|
734
|
+
],
|
|
514
735
|
"dependentActions": []
|
|
515
736
|
},
|
|
516
737
|
{
|
|
517
738
|
"name": "resource-share",
|
|
518
739
|
"required": false,
|
|
519
|
-
"conditionKeys": [
|
|
740
|
+
"conditionKeys": [
|
|
741
|
+
"aws:ResourceTag/${TagKey}",
|
|
742
|
+
"ram:AllowsExternalPrincipals",
|
|
743
|
+
"ram:ResourceShareName",
|
|
744
|
+
"ram:ResourceTag/${TagKey}"
|
|
745
|
+
],
|
|
520
746
|
"dependentActions": []
|
|
521
747
|
}
|
|
522
748
|
],
|
|
@@ -534,13 +760,23 @@
|
|
|
534
760
|
{
|
|
535
761
|
"name": "customer-managed-permission",
|
|
536
762
|
"required": false,
|
|
537
|
-
"conditionKeys": [
|
|
763
|
+
"conditionKeys": [
|
|
764
|
+
"aws:ResourceTag/${TagKey}",
|
|
765
|
+
"ram:PermissionArn",
|
|
766
|
+
"ram:PermissionResourceType",
|
|
767
|
+
"ram:ResourceTag/${TagKey}"
|
|
768
|
+
],
|
|
538
769
|
"dependentActions": []
|
|
539
770
|
},
|
|
540
771
|
{
|
|
541
772
|
"name": "resource-share",
|
|
542
773
|
"required": false,
|
|
543
|
-
"conditionKeys": [
|
|
774
|
+
"conditionKeys": [
|
|
775
|
+
"aws:ResourceTag/${TagKey}",
|
|
776
|
+
"ram:AllowsExternalPrincipals",
|
|
777
|
+
"ram:ResourceShareName",
|
|
778
|
+
"ram:ResourceTag/${TagKey}"
|
|
779
|
+
],
|
|
544
780
|
"dependentActions": []
|
|
545
781
|
}
|
|
546
782
|
],
|
|
@@ -549,6 +785,29 @@
|
|
|
549
785
|
],
|
|
550
786
|
"dependentActions": []
|
|
551
787
|
},
|
|
788
|
+
"updatepermission": {
|
|
789
|
+
"name": "UpdatePermission",
|
|
790
|
+
"description": "Grants permission to update a customer managed permission, such as to deprecate it or restore it",
|
|
791
|
+
"accessLevel": "Write",
|
|
792
|
+
"resourceTypes": [
|
|
793
|
+
{
|
|
794
|
+
"name": "customer-managed-permission",
|
|
795
|
+
"required": true,
|
|
796
|
+
"conditionKeys": [
|
|
797
|
+
"aws:ResourceTag/${TagKey}",
|
|
798
|
+
"ram:PermissionArn",
|
|
799
|
+
"ram:PermissionResourceType",
|
|
800
|
+
"ram:ResourceTag/${TagKey}"
|
|
801
|
+
],
|
|
802
|
+
"dependentActions": []
|
|
803
|
+
}
|
|
804
|
+
],
|
|
805
|
+
"conditionKeys": [
|
|
806
|
+
"ram:RequestedPermissionArns",
|
|
807
|
+
"ram:RequestedPermissionResourceTypes"
|
|
808
|
+
],
|
|
809
|
+
"dependentActions": []
|
|
810
|
+
},
|
|
552
811
|
"updateresourceshare": {
|
|
553
812
|
"name": "UpdateResourceShare",
|
|
554
813
|
"description": "Grants permission to update attributes of the resource share",
|
|
@@ -557,18 +816,18 @@
|
|
|
557
816
|
{
|
|
558
817
|
"name": "resource-share",
|
|
559
818
|
"required": true,
|
|
560
|
-
"conditionKeys": [
|
|
819
|
+
"conditionKeys": [
|
|
820
|
+
"aws:ResourceTag/${TagKey}",
|
|
821
|
+
"ram:AllowsExternalPrincipals",
|
|
822
|
+
"ram:RequestedAllowsExternalPrincipals",
|
|
823
|
+
"ram:ResourceShareName",
|
|
824
|
+
"ram:ResourceTag/${TagKey}",
|
|
825
|
+
"ram:RetainSharingOnAccountLeaveOrganization"
|
|
826
|
+
],
|
|
561
827
|
"dependentActions": []
|
|
562
828
|
}
|
|
563
829
|
],
|
|
564
|
-
"conditionKeys": [
|
|
565
|
-
"aws:ResourceTag/${TagKey}",
|
|
566
|
-
"ram:AllowsExternalPrincipals",
|
|
567
|
-
"ram:RequestedAllowsExternalPrincipals",
|
|
568
|
-
"ram:ResourceShareName",
|
|
569
|
-
"ram:ResourceTag/${TagKey}",
|
|
570
|
-
"ram:RetainSharingOnAccountLeaveOrganization"
|
|
571
|
-
],
|
|
830
|
+
"conditionKeys": [],
|
|
572
831
|
"dependentActions": []
|
|
573
832
|
}
|
|
574
833
|
}
|