@cloud-copilot/iam-data 0.19.202607021 → 0.19.202607151

package/data/actions/redshift.json

@@ -1,4 +1,252 @@
 {
+  "authorizeinboundintegration": {
+    "name": "AuthorizeInboundIntegration",
+    "description": "Grants permission to Amazon Redshift to continuously validate that the target namespace can receive data replicated from the source ARN",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "namespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "cancelquery": {
+    "name": "CancelQuery",
+    "description": "Grants permission to cancel a query through the Amazon Redshift console",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "cancelquerysession": {
+    "name": "CancelQuerySession",
+    "description": "Grants permission to see queries in the Amazon Redshift console",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createinboundintegration": {
+    "name": "CreateInboundIntegration",
+    "description": "Grants permission to the source principal to create an integration into the namespace of target data warehouse",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "namespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createqev2idcapplication": {
+    "name": "CreateQev2IdcApplication",
+    "description": "Grants permission to create a qev2 idc application",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createsavedquery": {
+    "name": "CreateSavedQuery",
+    "description": "Grants permission to create saved SQL queries through the Amazon Redshift console",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteqev2idcapplication": {
+    "name": "DeleteQev2IdcApplication",
+    "description": "Grants permission to delete a qev2 idc application",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "qev2idcapplication",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletesavedqueries": {
+    "name": "DeleteSavedQueries",
+    "description": "Grants permission to delete saved SQL queries through the Amazon Redshift console",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeautonomicsdenylist": {
+    "name": "DescribeAutonomicsDenylist",
+    "description": "Grants permission to describe the list of resources that are denylisted from global autonomics decisions for a specified cluster",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeqev2idcapplications": {
+    "name": "DescribeQev2IdcApplications",
+    "description": "Grants permission to describe qev2 idc applications",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describequery": {
+    "name": "DescribeQuery",
+    "description": "Grants permission to describe a query through the Amazon Redshift console",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describesavedqueries": {
+    "name": "DescribeSavedQueries",
+    "description": "Grants permission to describe saved queries through the Amazon Redshift console",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describetable": {
+    "name": "DescribeTable",
+    "description": "Grants permission to describe a table through the Amazon Redshift console",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "executequery": {
+    "name": "ExecuteQuery",
+    "description": "Grants permission to execute a query through the Amazon Redshift console",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "fetchresults": {
+    "name": "FetchResults",
+    "description": "Grants permission to fetch query results through the Amazon Redshift console",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listdatabases": {
+    "name": "ListDatabases",
+    "description": "Grants permission to list databases through the Amazon Redshift console",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listsavedqueries": {
+    "name": "ListSavedQueries",
+    "description": "Grants permission to list saved queries through the Amazon Redshift console",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listschemas": {
+    "name": "ListSchemas",
+    "description": "Grants permission to list schemas through the Amazon Redshift console",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtables": {
+    "name": "ListTables",
+    "description": "Grants permission to list tables through the Amazon Redshift console",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifyautonomicsdenylist": {
+    "name": "ModifyAutonomicsDenylist",
+    "description": "Grants permission to add or remove resources from the global autonomics denylist for a specified cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifyqev2idcapplication": {
+    "name": "ModifyQev2IdcApplication",
+    "description": "Grants permission to modify a qev2 idc application",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "qev2idcapplication",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifysavedquery": {
+    "name": "ModifySavedQuery",
+    "description": "Grants permission to modify an existing saved query through the Amazon Redshift console",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "viewqueriesfromconsole": {
+    "name": "ViewQueriesFromConsole",
+    "description": "Grants permission to view query results through the Amazon Redshift console",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "viewqueriesinconsole": {
+    "name": "ViewQueriesInConsole",
+    "description": "Grants permission to terminate running queries and loads through the Amazon Redshift console",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "acceptreservednodeexchange": {
     "name": "AcceptReservedNodeExchange",
     "description": "Grants permission to exchange a DC1 reserved node for a DC2 reserved node with no changes to the configuration",
@@ -28,8 +276,8 @@
       }
     ],
     "conditionKeys": [
-      "redshift:ConsumerArn",
-      "redshift:AllowWrites"
+      "redshift:AllowWrites",
+      "redshift:ConsumerArn"
     ],
     "dependentActions": []
   },
@@ -57,7 +305,7 @@
   "authorizedatashare": {
     "name": "AuthorizeDataShare",
     "description": "Grants permission to authorize the specified datashare consumer to consume a datashare",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "datashare",
@@ -67,28 +315,19 @@
       }
     ],
     "conditionKeys": [
-      "redshift:ConsumerIdentifier",
-      "redshift:AllowWrites"
+      "redshift:AllowWrites",
+      "redshift:ConsumerIdentifier"
     ],
     "dependentActions": []
   },
   "authorizeendpointaccess": {
     "name": "AuthorizeEndpointAccess",
     "description": "Grants permission to authorize endpoint related activities for redshift-managed vpc endpoint",
-    "accessLevel": "Permissions management",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "authorizeinboundintegration": {
-    "name": "AuthorizeInboundIntegration",
-    "isPermissionOnly": true,
-    "description": "Grants permission to Amazon Redshift to continuously validate that the target namespace can receive data replicated from the source ARN",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
-        "name": "namespace",
-        "required": true,
+        "name": "cluster",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -99,8 +338,14 @@
   "authorizesnapshotaccess": {
     "name": "AuthorizeSnapshotAccess",
     "description": "Grants permission to the specified AWS account to restore a snapshot",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "snapshot",
         "required": true,
@@ -141,24 +386,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "cancelquery": {
-    "name": "CancelQuery",
-    "isPermissionOnly": true,
-    "description": "Grants permission to cancel a query through the Amazon Redshift console",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "cancelquerysession": {
-    "name": "CancelQuerySession",
-    "isPermissionOnly": true,
-    "description": "Grants permission to see queries in the Amazon Redshift console",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "cancelresize": {
     "name": "CancelResize",
     "description": "Grants permission to cancel a resize operation",
@@ -179,6 +406,12 @@
     "description": "Grants permission to copy a cluster snapshot",
     "accessLevel": "Write",
     "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "snapshot",
         "required": true,
@@ -209,20 +442,7 @@
         "name": "cluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "kms:CreateGrant",
-          "kms:Decrypt",
-          "kms:DescribeKey",
-          "kms:GenerateDataKey",
-          "kms:RetireGrant",
-          "secretsmanager:CreateSecret",
-          "secretsmanager:DeleteSecret",
-          "secretsmanager:DescribeSecret",
-          "secretsmanager:GetRandomPassword",
-          "secretsmanager:RotateSecret",
-          "secretsmanager:TagResource",
-          "secretsmanager:UpdateSecret"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -272,6 +492,12 @@
     "description": "Grants permission to create a manual snapshot of the specified cluster",
     "accessLevel": "Write",
     "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "snapshot",
         "required": true,
@@ -306,7 +532,7 @@
   "createclusteruser": {
     "name": "CreateClusterUser",
     "description": "Grants permission to automatically create the specified Amazon Redshift user if it does not exist",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "dbuser",
@@ -333,15 +559,20 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "acm:DescribeCertificate"
-    ]
+    "dependentActions": []
   },
   "createendpointaccess": {
     "name": "CreateEndpointAccess",
     "description": "Grants permission to create a redshift-managed vpc endpoint",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -399,22 +630,6 @@
     ],
     "dependentActions": []
   },
-  "createinboundintegration": {
-    "name": "CreateInboundIntegration",
-    "isPermissionOnly": true,
-    "description": "Grants permission to the source principal to create an integration into the namespace of target data warehouse",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "namespace",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "createintegration": {
     "name": "CreateIntegration",
     "description": "Grants permission to create an Amazon Redshift zero-ETL integration",
@@ -424,10 +639,7 @@
         "name": "integration",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "kms:CreateGrant",
-          "kms:DescribeKey"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -438,40 +650,12 @@
     ],
     "dependentActions": []
   },
-  "createqev2idcapplication": {
-    "name": "CreateQev2IdcApplication",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create a qev2 idc application",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": [
-      "sso:CreateApplication",
-      "sso:PutApplicationAccessScope",
-      "sso:PutApplicationAuthenticationMethod",
-      "sso:PutApplicationGrant"
-    ]
-  },
   "createredshiftidcapplication": {
     "name": "CreateRedshiftIdcApplication",
     "description": "Grants permission to create a redshift idc application",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "sso:CreateApplication",
-      "sso:PutApplicationAccessScope",
-      "sso:PutApplicationAuthenticationMethod",
-      "sso:PutApplicationGrant"
-    ]
-  },
-  "createsavedquery": {
-    "name": "CreateSavedQuery",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create saved SQL queries through the Amazon Redshift console",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
     "dependentActions": []
   },
   "createscheduledaction": {
@@ -485,7 +669,7 @@
   "createsnapshotcopygrant": {
     "name": "CreateSnapshotCopyGrant",
     "description": "Grants permission to create a snapshot copy grant and encrypt copied snapshots in a destination AWS Region",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "snapshotcopygrant",
@@ -521,7 +705,7 @@
   "createtags": {
     "name": "CreateTags",
     "description": "Grants permission to add one or more tags to a specified resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "cluster",
@@ -619,6 +803,12 @@
     "description": "Grants permission to create a usage limit",
     "accessLevel": "Write",
     "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "usagelimit",
         "required": true,
@@ -635,7 +825,7 @@
   "deauthorizedatashare": {
     "name": "DeauthorizeDataShare",
     "description": "Grants permission to remove permission from the specified datashare consumer to consume a datashare",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "datashare",
@@ -707,6 +897,12 @@
     "description": "Grants permission to delete a manual snapshot",
     "accessLevel": "Write",
     "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "snapshot",
         "required": true,
@@ -821,27 +1017,16 @@
     "name": "DeletePartner",
     "description": "Grants permission to delete a partner integration from a cluster",
     "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "deleteqev2idcapplication": {
-    "name": "DeleteQev2IdcApplication",
-    "isPermissionOnly": true,
-    "description": "Grants permission to delete a qev2 idc application",
-    "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "qev2idcapplication",
-        "required": true,
+        "name": "cluster",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "sso:DeleteApplication"
-    ]
+    "dependentActions": []
   },
   "deleteredshiftidcapplication": {
     "name": "DeleteRedshiftIdcApplication",
@@ -856,14 +1041,12 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "sso:DeleteApplication"
-    ]
+    "dependentActions": []
   },
   "deleteresourcepolicy": {
     "name": "DeleteResourcePolicy",
     "description": "Grants permission to delete the resource policy for a specified resource",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "namespace",
@@ -875,15 +1058,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deletesavedqueries": {
-    "name": "DeleteSavedQueries",
-    "isPermissionOnly": true,
-    "description": "Grants permission to delete saved SQL queries through the Amazon Redshift console",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deletescheduledaction": {
     "name": "DeleteScheduledAction",
     "description": "Grants permission to delete an Amazon Redshift scheduled action",
@@ -925,7 +1099,7 @@
   "deletetags": {
     "name": "DeleteTags",
     "description": "Grants permission to delete a tag or tags from a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "cluster",
@@ -1049,26 +1223,10 @@
     "dependentActions": []
   },
   "describeauthenticationprofiles": {
-    "name": "DescribeAuthenticationProfiles",
-    "description": "Grants permission to describe created Amazon Redshift authentication profiles",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "describeautonomicsdenylist": {
-    "name": "DescribeAutonomicsDenylist",
-    "isPermissionOnly": true,
-    "description": "Grants permission to describe the list of resources that are denylisted from global autonomics decisions for a specified cluster",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "cluster",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "name": "DescribeAuthenticationProfiles",
+    "description": "Grants permission to describe created Amazon Redshift authentication profiles",
+    "accessLevel": "Read",
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -1115,7 +1273,14 @@
     "name": "DescribeClusterSnapshots",
     "description": "Grants permission to describe one or more snapshot objects, which contain metadata about your cluster snapshots",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -1202,7 +1367,14 @@
     "name": "DescribeEndpointAccess",
     "description": "Grants permission to describe redshift-managed vpc endpoints",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -1210,7 +1382,14 @@
     "name": "DescribeEndpointAuthorization",
     "description": "Grants permission to authorize describe activity for redshift-managed vpc endpoint",
     "accessLevel": "List",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -1300,7 +1479,14 @@
     "name": "DescribeNodeConfigurationOptions",
     "description": "Grants permission to describe properties of possible node configurations such as node type, number of nodes, and disk usage for the specified action type",
     "accessLevel": "List",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -1316,25 +1502,14 @@
     "name": "DescribePartners",
     "description": "Grants permission to retrieve information about the partner integrations defined for a cluster",
     "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "describeqev2idcapplications": {
-    "name": "DescribeQev2IdcApplications",
-    "isPermissionOnly": true,
-    "description": "Grants permission to describe qev2 idc applications",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "describequery": {
-    "name": "DescribeQuery",
-    "isPermissionOnly": true,
-    "description": "Grants permission to describe a query through the Amazon Redshift console",
-    "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -1344,10 +1519,7 @@
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "sso:GetApplicationGrant",
-      "sso:ListApplicationAccessScopes"
-    ]
+    "dependentActions": []
   },
   "describereservednodeexchangestatus": {
     "name": "DescribeReservedNodeExchangeStatus",
@@ -1388,15 +1560,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describesavedqueries": {
-    "name": "DescribeSavedQueries",
-    "isPermissionOnly": true,
-    "description": "Grants permission to describe saved queries through the Amazon Redshift console",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "describescheduledactions": {
     "name": "DescribeScheduledActions",
     "description": "Grants permission to describe created Amazon Redshift scheduled actions",
@@ -1418,6 +1581,12 @@
     "description": "Grants permission to describe snapshot schedules",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "snapshotschedule",
         "required": true,
@@ -1436,20 +1605,18 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describetable": {
-    "name": "DescribeTable",
-    "isPermissionOnly": true,
-    "description": "Grants permission to describe a table through the Amazon Redshift console",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "describetablerestorestatus": {
     "name": "DescribeTableRestoreStatus",
     "description": "Grants permission to describe status of one or more table restore requests made using the RestoreTableFromClusterSnapshot API action",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -1551,6 +1718,12 @@
     "description": "Grants permission to describe usage limits",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "usagelimit",
         "required": true,
@@ -1638,15 +1811,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "executequery": {
-    "name": "ExecuteQuery",
-    "isPermissionOnly": true,
-    "description": "Grants permission to execute a query through the Amazon Redshift console",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "failoverprimarycompute": {
     "name": "FailoverPrimaryCompute",
     "description": "Grants permission to failover the primary compute of an Multi-AZ cluster to another AZ",
@@ -1662,29 +1826,20 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "fetchresults": {
-    "name": "FetchResults",
-    "isPermissionOnly": true,
-    "description": "Grants permission to fetch query results through the Amazon Redshift console",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getclustercredentials": {
     "name": "GetClusterCredentials",
     "description": "Grants permission to get temporary credentials to access an Amazon Redshift database by the specified AWS account",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "dbuser",
-        "required": true,
+        "name": "dbname",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "dbname",
-        "required": false,
+        "name": "dbuser",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -1733,7 +1888,14 @@
     "name": "GetReservedNodeExchangeConfigurationOptions",
     "description": "Grants permission to get the configuration options for the reserved-node exchange",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -1763,7 +1925,7 @@
   "joingroup": {
     "name": "JoinGroup",
     "description": "Grants permission to join the specified Amazon Redshift group",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "dbgroup",
@@ -1775,47 +1937,18 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listdatabases": {
-    "name": "ListDatabases",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list databases through the Amazon Redshift console",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listrecommendations": {
     "name": "ListRecommendations",
     "description": "Grants permission to list Advisor recommendations",
     "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "listsavedqueries": {
-    "name": "ListSavedQueries",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list saved queries through the Amazon Redshift console",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "listschemas": {
-    "name": "ListSchemas",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list schemas through the Amazon Redshift console",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "listtables": {
-    "name": "ListTables",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list tables through the Amazon Redshift console",
-    "accessLevel": "List",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -1842,22 +1975,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "modifyautonomicsdenylist": {
-    "name": "ModifyAutonomicsDenylist",
-    "isPermissionOnly": true,
-    "description": "Grants permission to add or remove resources from the global autonomics denylist for a specified cluster",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "cluster",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "modifycluster": {
     "name": "ModifyCluster",
     "description": "Grants permission to modify the settings of a cluster",
@@ -1871,21 +1988,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "acm:DescribeCertificate",
-      "kms:CreateGrant",
-      "kms:Decrypt",
-      "kms:DescribeKey",
-      "kms:GenerateDataKey",
-      "kms:RetireGrant",
-      "secretsmanager:CreateSecret",
-      "secretsmanager:DeleteSecret",
-      "secretsmanager:DescribeSecret",
-      "secretsmanager:GetRandomPassword",
-      "secretsmanager:RotateSecret",
-      "secretsmanager:TagResource",
-      "secretsmanager:UpdateSecret"
-    ]
+    "dependentActions": []
   },
   "modifyclusterdbrevision": {
     "name": "ModifyClusterDbRevision",
@@ -1905,7 +2008,7 @@
   "modifyclusteriamroles": {
     "name": "ModifyClusterIamRoles",
     "description": "Grants permission to modify the list of AWS Identity and Access Management (IAM) roles that can be used by a cluster to access other AWS services",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "cluster",
@@ -2005,9 +2108,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "acm:DescribeCertificate"
-    ]
+    "dependentActions": []
   },
   "modifyendpointaccess": {
     "name": "ModifyEndpointAccess",
@@ -2049,24 +2150,6 @@
     ],
     "dependentActions": []
   },
-  "modifyqev2idcapplication": {
-    "name": "ModifyQev2IdcApplication",
-    "isPermissionOnly": true,
-    "description": "Grants permission to modify a qev2 idc application",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "qev2idcapplication",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": [
-      "sso:UpdateApplication"
-    ]
-  },
   "modifyredshiftidcapplication": {
     "name": "ModifyRedshiftIdcApplication",
     "description": "Grants permission to modify a redshift idc application",
@@ -2080,23 +2163,6 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "sso:DeleteApplicationAccessScope",
-      "sso:DeleteApplicationGrant",
-      "sso:GetApplicationGrant",
-      "sso:ListApplicationAccessScopes",
-      "sso:PutApplicationAccessScope",
-      "sso:PutApplicationGrant",
-      "sso:UpdateApplication"
-    ]
-  },
-  "modifysavedquery": {
-    "name": "ModifySavedQuery",
-    "isPermissionOnly": true,
-    "description": "Grants permission to modify an existing saved query through the Amazon Redshift console",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
     "dependentActions": []
   },
   "modifyscheduledaction": {
@@ -2178,7 +2244,7 @@
   "putresourcepolicy": {
     "name": "PutResourcePolicy",
     "description": "Grants permission to update the resource policy for a specified resource",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "namespace",
@@ -2216,7 +2282,7 @@
   "rejectdatashare": {
     "name": "RejectDataShare",
     "description": "Grants permission to decline a datashare shared from another account",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "datashare",
@@ -2267,20 +2333,7 @@
         "name": "cluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "kms:CreateGrant",
-          "kms:Decrypt",
-          "kms:DescribeKey",
-          "kms:GenerateDataKey",
-          "kms:RetireGrant",
-          "secretsmanager:CreateSecret",
-          "secretsmanager:DeleteSecret",
-          "secretsmanager:DescribeSecret",
-          "secretsmanager:GetRandomPassword",
-          "secretsmanager:RotateSecret",
-          "secretsmanager:TagResource",
-          "secretsmanager:UpdateSecret"
-        ]
+        "dependentActions": []
       },
       {
         "name": "snapshot",
@@ -2354,16 +2407,29 @@
   "revokeendpointaccess": {
     "name": "RevokeEndpointAccess",
     "description": "Grants permission to revoke access for endpoint related activities for redshift-managed vpc endpoint",
-    "accessLevel": "Permissions management",
-    "resourceTypes": [],
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
   "revokesnapshotaccess": {
     "name": "RevokeSnapshotAccess",
     "description": "Grants permission to revoke access from the specified AWS account to restore a snapshot",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "snapshot",
         "required": true,
@@ -2393,25 +2459,14 @@
     "name": "UpdatePartnerStatus",
     "description": "Grants permission to update the status of a partner integration",
     "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "viewqueriesfromconsole": {
-    "name": "ViewQueriesFromConsole",
-    "isPermissionOnly": true,
-    "description": "Grants permission to view query results through the Amazon Redshift console",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "viewqueriesinconsole": {
-    "name": "ViewQueriesInConsole",
-    "isPermissionOnly": true,
-    "description": "Grants permission to terminate running queries and loads through the Amazon Redshift console",
-    "accessLevel": "List",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   }