@cloud-copilot/iam-data 0.19.202606271 → 0.19.202607011
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/data/actions/acm.json +451 -3
- package/data/actions/artifact.json +121 -0
- package/data/actions/cleanrooms.json +294 -0
- package/data/actions/connect.json +75 -0
- package/data/actions/ec2.json +83 -3
- package/data/actions/eks.json +15 -0
- package/data/actions/es.json +15 -0
- package/data/actions/events.json +81 -3
- package/data/actions/partnercentral.json +255 -0
- package/data/actions/sagemaker.json +30 -0
- package/data/actions/transform-custom.json +8 -0
- package/data/actions/wafv2.json +29 -1
- package/data/conditionKeys/acm.json +5 -0
- package/data/conditionKeys/artifact.json +15 -0
- package/data/resourceTypes/acm.json +21 -0
- package/data/resourceTypes/artifact.json +7 -0
- package/data/resourceTypes/cleanrooms.json +7 -0
- package/data/resourceTypes/connect.json +4 -1
- package/data/resourceTypes/partnercentral.json +14 -0
- package/data/resourceTypes/wafv2.json +4 -0
- package/package.json +2 -2
package/data/actions/acm.json
CHANGED
|
@@ -11,12 +11,123 @@
|
|
|
11
11
|
"dependentActions": []
|
|
12
12
|
}
|
|
13
13
|
],
|
|
14
|
+
"conditionKeys": [
|
|
15
|
+
"aws:RequestTag/${TagKey}",
|
|
16
|
+
"aws:TagKeys",
|
|
17
|
+
"acm:CertificateKeyPairOrigin"
|
|
18
|
+
],
|
|
19
|
+
"dependentActions": []
|
|
20
|
+
},
|
|
21
|
+
"createacmedomainvalidation": {
|
|
22
|
+
"name": "CreateAcmeDomainValidation",
|
|
23
|
+
"description": "Grants permission to create an ACME domain validation",
|
|
24
|
+
"accessLevel": "Write",
|
|
25
|
+
"resourceTypes": [
|
|
26
|
+
{
|
|
27
|
+
"name": "acme-endpoint",
|
|
28
|
+
"required": true,
|
|
29
|
+
"conditionKeys": [
|
|
30
|
+
"aws:ResourceTag/${TagKey}"
|
|
31
|
+
],
|
|
32
|
+
"dependentActions": [
|
|
33
|
+
"route53:ChangeResourceRecordSets",
|
|
34
|
+
"route53:GetHostedZone"
|
|
35
|
+
]
|
|
36
|
+
}
|
|
37
|
+
],
|
|
14
38
|
"conditionKeys": [
|
|
15
39
|
"aws:RequestTag/${TagKey}",
|
|
16
40
|
"aws:TagKeys"
|
|
17
41
|
],
|
|
18
42
|
"dependentActions": []
|
|
19
43
|
},
|
|
44
|
+
"createacmeendpoint": {
|
|
45
|
+
"name": "CreateAcmeEndpoint",
|
|
46
|
+
"description": "Grants permission to create an ACME endpoint",
|
|
47
|
+
"accessLevel": "Write",
|
|
48
|
+
"resourceTypes": [],
|
|
49
|
+
"conditionKeys": [
|
|
50
|
+
"aws:RequestTag/${TagKey}",
|
|
51
|
+
"aws:TagKeys"
|
|
52
|
+
],
|
|
53
|
+
"dependentActions": []
|
|
54
|
+
},
|
|
55
|
+
"createacmeexternalaccountbinding": {
|
|
56
|
+
"name": "CreateAcmeExternalAccountBinding",
|
|
57
|
+
"description": "Grants permission to create an ACME external account binding",
|
|
58
|
+
"accessLevel": "Write",
|
|
59
|
+
"resourceTypes": [
|
|
60
|
+
{
|
|
61
|
+
"name": "acme-endpoint",
|
|
62
|
+
"required": true,
|
|
63
|
+
"conditionKeys": [
|
|
64
|
+
"aws:ResourceTag/${TagKey}"
|
|
65
|
+
],
|
|
66
|
+
"dependentActions": [
|
|
67
|
+
"iam:PassRole"
|
|
68
|
+
]
|
|
69
|
+
}
|
|
70
|
+
],
|
|
71
|
+
"conditionKeys": [
|
|
72
|
+
"aws:RequestTag/${TagKey}",
|
|
73
|
+
"aws:TagKeys"
|
|
74
|
+
],
|
|
75
|
+
"dependentActions": []
|
|
76
|
+
},
|
|
77
|
+
"deleteacmedomainvalidation": {
|
|
78
|
+
"name": "DeleteAcmeDomainValidation",
|
|
79
|
+
"description": "Grants permission to delete an ACME domain validation",
|
|
80
|
+
"accessLevel": "Write",
|
|
81
|
+
"resourceTypes": [
|
|
82
|
+
{
|
|
83
|
+
"name": "acme-domain-validation",
|
|
84
|
+
"required": true,
|
|
85
|
+
"conditionKeys": [],
|
|
86
|
+
"dependentActions": []
|
|
87
|
+
}
|
|
88
|
+
],
|
|
89
|
+
"conditionKeys": [
|
|
90
|
+
"aws:ResourceTag/${TagKey}"
|
|
91
|
+
],
|
|
92
|
+
"dependentActions": [
|
|
93
|
+
"route53:ChangeResourceRecordSets",
|
|
94
|
+
"route53:GetChange"
|
|
95
|
+
]
|
|
96
|
+
},
|
|
97
|
+
"deleteacmeendpoint": {
|
|
98
|
+
"name": "DeleteAcmeEndpoint",
|
|
99
|
+
"description": "Grants permission to delete an ACME endpoint",
|
|
100
|
+
"accessLevel": "Write",
|
|
101
|
+
"resourceTypes": [
|
|
102
|
+
{
|
|
103
|
+
"name": "acme-endpoint",
|
|
104
|
+
"required": true,
|
|
105
|
+
"conditionKeys": [],
|
|
106
|
+
"dependentActions": []
|
|
107
|
+
}
|
|
108
|
+
],
|
|
109
|
+
"conditionKeys": [
|
|
110
|
+
"aws:ResourceTag/${TagKey}"
|
|
111
|
+
],
|
|
112
|
+
"dependentActions": []
|
|
113
|
+
},
|
|
114
|
+
"deleteacmeexternalaccountbinding": {
|
|
115
|
+
"name": "DeleteAcmeExternalAccountBinding",
|
|
116
|
+
"description": "Grants permission to delete an ACME external account binding",
|
|
117
|
+
"accessLevel": "Write",
|
|
118
|
+
"resourceTypes": [
|
|
119
|
+
{
|
|
120
|
+
"name": "acme-external-account-binding",
|
|
121
|
+
"required": true,
|
|
122
|
+
"conditionKeys": [],
|
|
123
|
+
"dependentActions": []
|
|
124
|
+
}
|
|
125
|
+
],
|
|
126
|
+
"conditionKeys": [
|
|
127
|
+
"aws:ResourceTag/${TagKey}"
|
|
128
|
+
],
|
|
129
|
+
"dependentActions": []
|
|
130
|
+
},
|
|
20
131
|
"deletecertificate": {
|
|
21
132
|
"name": "DeleteCertificate",
|
|
22
133
|
"description": "Grants permission to delete a certificate and its associated private key",
|
|
@@ -29,7 +140,77 @@
|
|
|
29
140
|
"dependentActions": []
|
|
30
141
|
}
|
|
31
142
|
],
|
|
32
|
-
"conditionKeys": [
|
|
143
|
+
"conditionKeys": [
|
|
144
|
+
"acm:CertificateKeyPairOrigin"
|
|
145
|
+
],
|
|
146
|
+
"dependentActions": []
|
|
147
|
+
},
|
|
148
|
+
"describeacmeaccount": {
|
|
149
|
+
"name": "DescribeAcmeAccount",
|
|
150
|
+
"description": "Grants permission to retrieve details of an ACME account",
|
|
151
|
+
"accessLevel": "Read",
|
|
152
|
+
"resourceTypes": [
|
|
153
|
+
{
|
|
154
|
+
"name": "acme-endpoint",
|
|
155
|
+
"required": true,
|
|
156
|
+
"conditionKeys": [],
|
|
157
|
+
"dependentActions": []
|
|
158
|
+
}
|
|
159
|
+
],
|
|
160
|
+
"conditionKeys": [
|
|
161
|
+
"aws:ResourceTag/${TagKey}"
|
|
162
|
+
],
|
|
163
|
+
"dependentActions": []
|
|
164
|
+
},
|
|
165
|
+
"describeacmedomainvalidation": {
|
|
166
|
+
"name": "DescribeAcmeDomainValidation",
|
|
167
|
+
"description": "Grants permission to retrieve details of an ACME domain validation",
|
|
168
|
+
"accessLevel": "Read",
|
|
169
|
+
"resourceTypes": [
|
|
170
|
+
{
|
|
171
|
+
"name": "acme-domain-validation",
|
|
172
|
+
"required": true,
|
|
173
|
+
"conditionKeys": [],
|
|
174
|
+
"dependentActions": []
|
|
175
|
+
}
|
|
176
|
+
],
|
|
177
|
+
"conditionKeys": [
|
|
178
|
+
"aws:ResourceTag/${TagKey}"
|
|
179
|
+
],
|
|
180
|
+
"dependentActions": []
|
|
181
|
+
},
|
|
182
|
+
"describeacmeendpoint": {
|
|
183
|
+
"name": "DescribeAcmeEndpoint",
|
|
184
|
+
"description": "Grants permission to retrieve details of an ACME endpoint",
|
|
185
|
+
"accessLevel": "Read",
|
|
186
|
+
"resourceTypes": [
|
|
187
|
+
{
|
|
188
|
+
"name": "acme-endpoint",
|
|
189
|
+
"required": true,
|
|
190
|
+
"conditionKeys": [],
|
|
191
|
+
"dependentActions": []
|
|
192
|
+
}
|
|
193
|
+
],
|
|
194
|
+
"conditionKeys": [
|
|
195
|
+
"aws:ResourceTag/${TagKey}"
|
|
196
|
+
],
|
|
197
|
+
"dependentActions": []
|
|
198
|
+
},
|
|
199
|
+
"describeacmeexternalaccountbinding": {
|
|
200
|
+
"name": "DescribeAcmeExternalAccountBinding",
|
|
201
|
+
"description": "Grants permission to retrieve details of an ACME external account binding",
|
|
202
|
+
"accessLevel": "Read",
|
|
203
|
+
"resourceTypes": [
|
|
204
|
+
{
|
|
205
|
+
"name": "acme-external-account-binding",
|
|
206
|
+
"required": true,
|
|
207
|
+
"conditionKeys": [],
|
|
208
|
+
"dependentActions": []
|
|
209
|
+
}
|
|
210
|
+
],
|
|
211
|
+
"conditionKeys": [
|
|
212
|
+
"aws:ResourceTag/${TagKey}"
|
|
213
|
+
],
|
|
33
214
|
"dependentActions": []
|
|
34
215
|
},
|
|
35
216
|
"describecertificate": {
|
|
@@ -72,6 +253,23 @@
|
|
|
72
253
|
"conditionKeys": [],
|
|
73
254
|
"dependentActions": []
|
|
74
255
|
},
|
|
256
|
+
"getacmeexternalaccountbindingcredentials": {
|
|
257
|
+
"name": "GetAcmeExternalAccountBindingCredentials",
|
|
258
|
+
"description": "Grants permission to retrieve credentials for an ACME external account binding",
|
|
259
|
+
"accessLevel": "Read",
|
|
260
|
+
"resourceTypes": [
|
|
261
|
+
{
|
|
262
|
+
"name": "acme-external-account-binding",
|
|
263
|
+
"required": true,
|
|
264
|
+
"conditionKeys": [],
|
|
265
|
+
"dependentActions": []
|
|
266
|
+
}
|
|
267
|
+
],
|
|
268
|
+
"conditionKeys": [
|
|
269
|
+
"aws:ResourceTag/${TagKey}"
|
|
270
|
+
],
|
|
271
|
+
"dependentActions": []
|
|
272
|
+
},
|
|
75
273
|
"getcertificate": {
|
|
76
274
|
"name": "GetCertificate",
|
|
77
275
|
"description": "Grants permission to retrieve a certificate and certificate chain for a certificate ARN",
|
|
@@ -105,6 +303,65 @@
|
|
|
105
303
|
],
|
|
106
304
|
"dependentActions": []
|
|
107
305
|
},
|
|
306
|
+
"listacmeaccounts": {
|
|
307
|
+
"name": "ListAcmeAccounts",
|
|
308
|
+
"description": "Grants permission to list ACME accounts",
|
|
309
|
+
"accessLevel": "List",
|
|
310
|
+
"resourceTypes": [
|
|
311
|
+
{
|
|
312
|
+
"name": "acme-endpoint",
|
|
313
|
+
"required": true,
|
|
314
|
+
"conditionKeys": [],
|
|
315
|
+
"dependentActions": []
|
|
316
|
+
}
|
|
317
|
+
],
|
|
318
|
+
"conditionKeys": [
|
|
319
|
+
"aws:ResourceTag/${TagKey}"
|
|
320
|
+
],
|
|
321
|
+
"dependentActions": []
|
|
322
|
+
},
|
|
323
|
+
"listacmedomainvalidations": {
|
|
324
|
+
"name": "ListAcmeDomainValidations",
|
|
325
|
+
"description": "Grants permission to list ACME domain validations",
|
|
326
|
+
"accessLevel": "List",
|
|
327
|
+
"resourceTypes": [
|
|
328
|
+
{
|
|
329
|
+
"name": "acme-endpoint",
|
|
330
|
+
"required": true,
|
|
331
|
+
"conditionKeys": [],
|
|
332
|
+
"dependentActions": []
|
|
333
|
+
}
|
|
334
|
+
],
|
|
335
|
+
"conditionKeys": [
|
|
336
|
+
"aws:ResourceTag/${TagKey}"
|
|
337
|
+
],
|
|
338
|
+
"dependentActions": []
|
|
339
|
+
},
|
|
340
|
+
"listacmeendpoints": {
|
|
341
|
+
"name": "ListAcmeEndpoints",
|
|
342
|
+
"description": "Grants permission to list ACME endpoints",
|
|
343
|
+
"accessLevel": "List",
|
|
344
|
+
"resourceTypes": [],
|
|
345
|
+
"conditionKeys": [],
|
|
346
|
+
"dependentActions": []
|
|
347
|
+
},
|
|
348
|
+
"listacmeexternalaccountbindings": {
|
|
349
|
+
"name": "ListAcmeExternalAccountBindings",
|
|
350
|
+
"description": "Grants permission to list ACME external account bindings",
|
|
351
|
+
"accessLevel": "List",
|
|
352
|
+
"resourceTypes": [
|
|
353
|
+
{
|
|
354
|
+
"name": "acme-endpoint",
|
|
355
|
+
"required": true,
|
|
356
|
+
"conditionKeys": [],
|
|
357
|
+
"dependentActions": []
|
|
358
|
+
}
|
|
359
|
+
],
|
|
360
|
+
"conditionKeys": [
|
|
361
|
+
"aws:ResourceTag/${TagKey}"
|
|
362
|
+
],
|
|
363
|
+
"dependentActions": []
|
|
364
|
+
},
|
|
108
365
|
"listcertificates": {
|
|
109
366
|
"name": "ListCertificates",
|
|
110
367
|
"description": "Grants permission to retrieve a list of certificates for specific certificate parameters",
|
|
@@ -128,6 +385,39 @@
|
|
|
128
385
|
"conditionKeys": [],
|
|
129
386
|
"dependentActions": []
|
|
130
387
|
},
|
|
388
|
+
"listtagsforresource": {
|
|
389
|
+
"name": "ListTagsForResource",
|
|
390
|
+
"description": "Grants permission to list tags for a resource",
|
|
391
|
+
"accessLevel": "Read",
|
|
392
|
+
"resourceTypes": [
|
|
393
|
+
{
|
|
394
|
+
"name": "acme-domain-validation",
|
|
395
|
+
"required": false,
|
|
396
|
+
"conditionKeys": [
|
|
397
|
+
"aws:ResourceTag/${TagKey}"
|
|
398
|
+
],
|
|
399
|
+
"dependentActions": []
|
|
400
|
+
},
|
|
401
|
+
{
|
|
402
|
+
"name": "acme-endpoint",
|
|
403
|
+
"required": false,
|
|
404
|
+
"conditionKeys": [
|
|
405
|
+
"aws:ResourceTag/${TagKey}"
|
|
406
|
+
],
|
|
407
|
+
"dependentActions": []
|
|
408
|
+
},
|
|
409
|
+
{
|
|
410
|
+
"name": "acme-external-account-binding",
|
|
411
|
+
"required": false,
|
|
412
|
+
"conditionKeys": [
|
|
413
|
+
"aws:ResourceTag/${TagKey}"
|
|
414
|
+
],
|
|
415
|
+
"dependentActions": []
|
|
416
|
+
}
|
|
417
|
+
],
|
|
418
|
+
"conditionKeys": [],
|
|
419
|
+
"dependentActions": []
|
|
420
|
+
},
|
|
131
421
|
"putaccountconfiguration": {
|
|
132
422
|
"name": "PutAccountConfiguration",
|
|
133
423
|
"description": "Grants permission to update account level configuration in AWS Certificate Manager",
|
|
@@ -182,7 +472,8 @@
|
|
|
182
472
|
"acm:ValidationMethod",
|
|
183
473
|
"acm:KeyAlgorithm",
|
|
184
474
|
"acm:CertificateAuthority",
|
|
185
|
-
"acm:Export"
|
|
475
|
+
"acm:Export",
|
|
476
|
+
"acm:CertificateKeyPairOrigin"
|
|
186
477
|
],
|
|
187
478
|
"dependentActions": []
|
|
188
479
|
},
|
|
@@ -201,6 +492,40 @@
|
|
|
201
492
|
"conditionKeys": [],
|
|
202
493
|
"dependentActions": []
|
|
203
494
|
},
|
|
495
|
+
"revokeacmeaccount": {
|
|
496
|
+
"name": "RevokeAcmeAccount",
|
|
497
|
+
"description": "Grants permission to revoke an ACME account",
|
|
498
|
+
"accessLevel": "Write",
|
|
499
|
+
"resourceTypes": [
|
|
500
|
+
{
|
|
501
|
+
"name": "acme-endpoint",
|
|
502
|
+
"required": true,
|
|
503
|
+
"conditionKeys": [],
|
|
504
|
+
"dependentActions": []
|
|
505
|
+
}
|
|
506
|
+
],
|
|
507
|
+
"conditionKeys": [
|
|
508
|
+
"aws:ResourceTag/${TagKey}"
|
|
509
|
+
],
|
|
510
|
+
"dependentActions": []
|
|
511
|
+
},
|
|
512
|
+
"revokeacmeexternalaccountbinding": {
|
|
513
|
+
"name": "RevokeAcmeExternalAccountBinding",
|
|
514
|
+
"description": "Grants permission to revoke an ACME external account binding",
|
|
515
|
+
"accessLevel": "Write",
|
|
516
|
+
"resourceTypes": [
|
|
517
|
+
{
|
|
518
|
+
"name": "acme-external-account-binding",
|
|
519
|
+
"required": true,
|
|
520
|
+
"conditionKeys": [],
|
|
521
|
+
"dependentActions": []
|
|
522
|
+
}
|
|
523
|
+
],
|
|
524
|
+
"conditionKeys": [
|
|
525
|
+
"aws:ResourceTag/${TagKey}"
|
|
526
|
+
],
|
|
527
|
+
"dependentActions": []
|
|
528
|
+
},
|
|
204
529
|
"revokecertificate": {
|
|
205
530
|
"name": "RevokeCertificate",
|
|
206
531
|
"description": "Grants permission to revoke an exportable certificate",
|
|
@@ -214,7 +539,8 @@
|
|
|
214
539
|
}
|
|
215
540
|
],
|
|
216
541
|
"conditionKeys": [
|
|
217
|
-
"acm:DomainNames"
|
|
542
|
+
"acm:DomainNames",
|
|
543
|
+
"acm:CertificateKeyPairOrigin"
|
|
218
544
|
],
|
|
219
545
|
"dependentActions": []
|
|
220
546
|
},
|
|
@@ -226,6 +552,128 @@
|
|
|
226
552
|
"conditionKeys": [],
|
|
227
553
|
"dependentActions": []
|
|
228
554
|
},
|
|
555
|
+
"tagresource": {
|
|
556
|
+
"name": "TagResource",
|
|
557
|
+
"description": "Grants permission to add tags to a resource",
|
|
558
|
+
"accessLevel": "Tagging",
|
|
559
|
+
"resourceTypes": [
|
|
560
|
+
{
|
|
561
|
+
"name": "acme-domain-validation",
|
|
562
|
+
"required": false,
|
|
563
|
+
"conditionKeys": [
|
|
564
|
+
"aws:ResourceTag/${TagKey}"
|
|
565
|
+
],
|
|
566
|
+
"dependentActions": []
|
|
567
|
+
},
|
|
568
|
+
{
|
|
569
|
+
"name": "acme-endpoint",
|
|
570
|
+
"required": false,
|
|
571
|
+
"conditionKeys": [
|
|
572
|
+
"aws:ResourceTag/${TagKey}"
|
|
573
|
+
],
|
|
574
|
+
"dependentActions": []
|
|
575
|
+
},
|
|
576
|
+
{
|
|
577
|
+
"name": "acme-external-account-binding",
|
|
578
|
+
"required": false,
|
|
579
|
+
"conditionKeys": [
|
|
580
|
+
"aws:ResourceTag/${TagKey}"
|
|
581
|
+
],
|
|
582
|
+
"dependentActions": []
|
|
583
|
+
}
|
|
584
|
+
],
|
|
585
|
+
"conditionKeys": [
|
|
586
|
+
"aws:RequestTag/${TagKey}",
|
|
587
|
+
"aws:TagKeys"
|
|
588
|
+
],
|
|
589
|
+
"dependentActions": []
|
|
590
|
+
},
|
|
591
|
+
"untagresource": {
|
|
592
|
+
"name": "UntagResource",
|
|
593
|
+
"description": "Grants permission to remove tags from a resource",
|
|
594
|
+
"accessLevel": "Tagging",
|
|
595
|
+
"resourceTypes": [
|
|
596
|
+
{
|
|
597
|
+
"name": "acme-domain-validation",
|
|
598
|
+
"required": false,
|
|
599
|
+
"conditionKeys": [
|
|
600
|
+
"aws:ResourceTag/${TagKey}"
|
|
601
|
+
],
|
|
602
|
+
"dependentActions": []
|
|
603
|
+
},
|
|
604
|
+
{
|
|
605
|
+
"name": "acme-endpoint",
|
|
606
|
+
"required": false,
|
|
607
|
+
"conditionKeys": [
|
|
608
|
+
"aws:ResourceTag/${TagKey}"
|
|
609
|
+
],
|
|
610
|
+
"dependentActions": []
|
|
611
|
+
},
|
|
612
|
+
{
|
|
613
|
+
"name": "acme-external-account-binding",
|
|
614
|
+
"required": false,
|
|
615
|
+
"conditionKeys": [
|
|
616
|
+
"aws:ResourceTag/${TagKey}"
|
|
617
|
+
],
|
|
618
|
+
"dependentActions": []
|
|
619
|
+
}
|
|
620
|
+
],
|
|
621
|
+
"conditionKeys": [
|
|
622
|
+
"aws:TagKeys"
|
|
623
|
+
],
|
|
624
|
+
"dependentActions": []
|
|
625
|
+
},
|
|
626
|
+
"updateacmedomainvalidation": {
|
|
627
|
+
"name": "UpdateAcmeDomainValidation",
|
|
628
|
+
"description": "Grants permission to update an ACME domain validation",
|
|
629
|
+
"accessLevel": "Write",
|
|
630
|
+
"resourceTypes": [
|
|
631
|
+
{
|
|
632
|
+
"name": "acme-domain-validation",
|
|
633
|
+
"required": true,
|
|
634
|
+
"conditionKeys": [],
|
|
635
|
+
"dependentActions": []
|
|
636
|
+
}
|
|
637
|
+
],
|
|
638
|
+
"conditionKeys": [
|
|
639
|
+
"aws:ResourceTag/${TagKey}"
|
|
640
|
+
],
|
|
641
|
+
"dependentActions": []
|
|
642
|
+
},
|
|
643
|
+
"updateacmeendpoint": {
|
|
644
|
+
"name": "UpdateAcmeEndpoint",
|
|
645
|
+
"description": "Grants permission to update an ACME endpoint",
|
|
646
|
+
"accessLevel": "Write",
|
|
647
|
+
"resourceTypes": [
|
|
648
|
+
{
|
|
649
|
+
"name": "acme-endpoint",
|
|
650
|
+
"required": true,
|
|
651
|
+
"conditionKeys": [],
|
|
652
|
+
"dependentActions": []
|
|
653
|
+
}
|
|
654
|
+
],
|
|
655
|
+
"conditionKeys": [
|
|
656
|
+
"aws:ResourceTag/${TagKey}"
|
|
657
|
+
],
|
|
658
|
+
"dependentActions": []
|
|
659
|
+
},
|
|
660
|
+
"updatecertificate": {
|
|
661
|
+
"name": "UpdateCertificate",
|
|
662
|
+
"description": "Grants permission to update a certificate",
|
|
663
|
+
"accessLevel": "Write",
|
|
664
|
+
"resourceTypes": [
|
|
665
|
+
{
|
|
666
|
+
"name": "certificate",
|
|
667
|
+
"required": true,
|
|
668
|
+
"conditionKeys": [],
|
|
669
|
+
"dependentActions": []
|
|
670
|
+
}
|
|
671
|
+
],
|
|
672
|
+
"conditionKeys": [
|
|
673
|
+
"acm:CertificateKeyPairOrigin"
|
|
674
|
+
],
|
|
675
|
+
"dependentActions": []
|
|
676
|
+
},
|
|
229
677
|
"updatecertificateoptions": {
|
|
230
678
|
"name": "UpdateCertificateOptions",
|
|
231
679
|
"description": "Grants permission to update a certificate configuration. Use this to specify whether to opt in to or out of certificate transparency logging",
|
|
@@ -29,6 +29,39 @@
|
|
|
29
29
|
"conditionKeys": [],
|
|
30
30
|
"dependentActions": []
|
|
31
31
|
},
|
|
32
|
+
"createcomplianceinquiry": {
|
|
33
|
+
"name": "CreateComplianceInquiry",
|
|
34
|
+
"description": "Grants permission to create a compliance inquiry",
|
|
35
|
+
"accessLevel": "Write",
|
|
36
|
+
"resourceTypes": [
|
|
37
|
+
{
|
|
38
|
+
"name": "compliance-inquiry",
|
|
39
|
+
"required": true,
|
|
40
|
+
"conditionKeys": [],
|
|
41
|
+
"dependentActions": []
|
|
42
|
+
}
|
|
43
|
+
],
|
|
44
|
+
"conditionKeys": [
|
|
45
|
+
"aws:RequestTag/${TagKey}",
|
|
46
|
+
"aws:TagKeys"
|
|
47
|
+
],
|
|
48
|
+
"dependentActions": []
|
|
49
|
+
},
|
|
50
|
+
"exportcomplianceinquiry": {
|
|
51
|
+
"name": "ExportComplianceInquiry",
|
|
52
|
+
"description": "Grants permission to export a compliance inquiry",
|
|
53
|
+
"accessLevel": "Read",
|
|
54
|
+
"resourceTypes": [
|
|
55
|
+
{
|
|
56
|
+
"name": "compliance-inquiry",
|
|
57
|
+
"required": true,
|
|
58
|
+
"conditionKeys": [],
|
|
59
|
+
"dependentActions": []
|
|
60
|
+
}
|
|
61
|
+
],
|
|
62
|
+
"conditionKeys": [],
|
|
63
|
+
"dependentActions": []
|
|
64
|
+
},
|
|
32
65
|
"getaccountsettings": {
|
|
33
66
|
"name": "GetAccountSettings",
|
|
34
67
|
"description": "Grants permission to get the account settings for Artifact",
|
|
@@ -52,6 +85,21 @@
|
|
|
52
85
|
"conditionKeys": [],
|
|
53
86
|
"dependentActions": []
|
|
54
87
|
},
|
|
88
|
+
"getcomplianceinquirymetadata": {
|
|
89
|
+
"name": "GetComplianceInquiryMetadata",
|
|
90
|
+
"description": "Grants permission to get metadata associated with a compliance inquiry",
|
|
91
|
+
"accessLevel": "Read",
|
|
92
|
+
"resourceTypes": [
|
|
93
|
+
{
|
|
94
|
+
"name": "compliance-inquiry",
|
|
95
|
+
"required": true,
|
|
96
|
+
"conditionKeys": [],
|
|
97
|
+
"dependentActions": []
|
|
98
|
+
}
|
|
99
|
+
],
|
|
100
|
+
"conditionKeys": [],
|
|
101
|
+
"dependentActions": []
|
|
102
|
+
},
|
|
55
103
|
"getcustomeragreement": {
|
|
56
104
|
"name": "GetCustomerAgreement",
|
|
57
105
|
"description": "Grants permission to get an AWS agreement that has been accepted by the customer account",
|
|
@@ -135,6 +183,29 @@
|
|
|
135
183
|
"conditionKeys": [],
|
|
136
184
|
"dependentActions": []
|
|
137
185
|
},
|
|
186
|
+
"listcomplianceinquiries": {
|
|
187
|
+
"name": "ListComplianceInquiries",
|
|
188
|
+
"description": "Grants permission to list compliance inquiries submitted by the customer account",
|
|
189
|
+
"accessLevel": "List",
|
|
190
|
+
"resourceTypes": [],
|
|
191
|
+
"conditionKeys": [],
|
|
192
|
+
"dependentActions": []
|
|
193
|
+
},
|
|
194
|
+
"listcomplianceinquiryqueries": {
|
|
195
|
+
"name": "ListComplianceInquiryQueries",
|
|
196
|
+
"description": "Grants permission to list queries for a compliance inquiry",
|
|
197
|
+
"accessLevel": "List",
|
|
198
|
+
"resourceTypes": [
|
|
199
|
+
{
|
|
200
|
+
"name": "compliance-inquiry",
|
|
201
|
+
"required": true,
|
|
202
|
+
"conditionKeys": [],
|
|
203
|
+
"dependentActions": []
|
|
204
|
+
}
|
|
205
|
+
],
|
|
206
|
+
"conditionKeys": [],
|
|
207
|
+
"dependentActions": []
|
|
208
|
+
},
|
|
138
209
|
"listcustomeragreements": {
|
|
139
210
|
"name": "ListCustomerAgreements",
|
|
140
211
|
"description": "Grants permission to list customer-agreement resources that have been accepted by the customer account",
|
|
@@ -159,6 +230,21 @@
|
|
|
159
230
|
"conditionKeys": [],
|
|
160
231
|
"dependentActions": []
|
|
161
232
|
},
|
|
233
|
+
"listtagsforresource": {
|
|
234
|
+
"name": "ListTagsForResource",
|
|
235
|
+
"description": "Grants permission to list all tags on an AWS Artifact resource",
|
|
236
|
+
"accessLevel": "Read",
|
|
237
|
+
"resourceTypes": [
|
|
238
|
+
{
|
|
239
|
+
"name": "compliance-inquiry",
|
|
240
|
+
"required": true,
|
|
241
|
+
"conditionKeys": [],
|
|
242
|
+
"dependentActions": []
|
|
243
|
+
}
|
|
244
|
+
],
|
|
245
|
+
"conditionKeys": [],
|
|
246
|
+
"dependentActions": []
|
|
247
|
+
},
|
|
162
248
|
"putaccountsettings": {
|
|
163
249
|
"name": "PutAccountSettings",
|
|
164
250
|
"description": "Grants permission to put account settings for Artifact",
|
|
@@ -167,6 +253,24 @@
|
|
|
167
253
|
"conditionKeys": [],
|
|
168
254
|
"dependentActions": []
|
|
169
255
|
},
|
|
256
|
+
"tagresource": {
|
|
257
|
+
"name": "TagResource",
|
|
258
|
+
"description": "Grants permission to associate a set of tags with an AWS Artifact resource",
|
|
259
|
+
"accessLevel": "Tagging",
|
|
260
|
+
"resourceTypes": [
|
|
261
|
+
{
|
|
262
|
+
"name": "compliance-inquiry",
|
|
263
|
+
"required": true,
|
|
264
|
+
"conditionKeys": [],
|
|
265
|
+
"dependentActions": []
|
|
266
|
+
}
|
|
267
|
+
],
|
|
268
|
+
"conditionKeys": [
|
|
269
|
+
"aws:RequestTag/${TagKey}",
|
|
270
|
+
"aws:TagKeys"
|
|
271
|
+
],
|
|
272
|
+
"dependentActions": []
|
|
273
|
+
},
|
|
170
274
|
"terminateagreement": {
|
|
171
275
|
"name": "TerminateAgreement",
|
|
172
276
|
"description": "Grants permission to terminate a customer agreement that was previously accepted by the customer account",
|
|
@@ -181,5 +285,22 @@
|
|
|
181
285
|
],
|
|
182
286
|
"conditionKeys": [],
|
|
183
287
|
"dependentActions": []
|
|
288
|
+
},
|
|
289
|
+
"untagresource": {
|
|
290
|
+
"name": "UntagResource",
|
|
291
|
+
"description": "Grants permission to remove the association of tags from an AWS Artifact resource",
|
|
292
|
+
"accessLevel": "Tagging",
|
|
293
|
+
"resourceTypes": [
|
|
294
|
+
{
|
|
295
|
+
"name": "compliance-inquiry",
|
|
296
|
+
"required": true,
|
|
297
|
+
"conditionKeys": [],
|
|
298
|
+
"dependentActions": []
|
|
299
|
+
}
|
|
300
|
+
],
|
|
301
|
+
"conditionKeys": [
|
|
302
|
+
"aws:TagKeys"
|
|
303
|
+
],
|
|
304
|
+
"dependentActions": []
|
|
184
305
|
}
|
|
185
306
|
}
|