@cloud-copilot/iam-data 0.19.202607021 → 0.19.202607151

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (633) hide show
  1. package/data/actions/a4b.json +149 -78
  2. package/data/actions/access-analyzer.json +5 -11
  3. package/data/actions/account.json +12 -13
  4. package/data/actions/acm-pca.json +8 -8
  5. package/data/actions/acm.json +78 -86
  6. package/data/actions/aco-automation.json +20 -24
  7. package/data/actions/aidevops.json +3 -4
  8. package/data/actions/aiops.json +26 -113
  9. package/data/actions/airflow-serverless.json +8 -8
  10. package/data/actions/airflow.json +7 -7
  11. package/data/actions/amplify.json +4 -4
  12. package/data/actions/amplifybackend.json +1 -3
  13. package/data/actions/amplifyuibuilder.json +22 -77
  14. package/data/actions/aoss.json +5 -5
  15. package/data/actions/apigateway.json +45 -45
  16. package/data/actions/app-integrations.json +78 -133
  17. package/data/actions/appconfig.json +4 -4
  18. package/data/actions/appfabric.json +4 -4
  19. package/data/actions/appflow.json +87 -93
  20. package/data/actions/application-autoscaling.json +16 -18
  21. package/data/actions/application-signals-mcp.json +6 -2
  22. package/data/actions/application-signals.json +10 -11
  23. package/data/actions/applicationinsights.json +10 -11
  24. package/data/actions/appmesh-preview.json +55 -58
  25. package/data/actions/appmesh.json +75 -78
  26. package/data/actions/apprunner.json +78 -82
  27. package/data/actions/appstream.json +8 -8
  28. package/data/actions/appstudio.json +0 -5
  29. package/data/actions/appsync.json +148 -165
  30. package/data/actions/apptest.json +81 -59
  31. package/data/actions/aps.json +8 -17
  32. package/data/actions/arc-region-switch.json +33 -36
  33. package/data/actions/arc-zonal-shift.json +3 -11
  34. package/data/actions/arsenal.json +0 -1
  35. package/data/actions/artifact.json +2 -2
  36. package/data/actions/athena.json +26 -26
  37. package/data/actions/auditmanager.json +10 -10
  38. package/data/actions/autoscaling.json +160 -165
  39. package/data/actions/aws-external-anthropic.json +271 -274
  40. package/data/actions/aws-marketplace-management.json +0 -13
  41. package/data/actions/aws-marketplace.json +49 -61
  42. package/data/actions/aws-portal.json +0 -9
  43. package/data/actions/awsconnector.json +0 -3
  44. package/data/actions/b2bi.json +16 -16
  45. package/data/actions/backup-gateway.json +4 -8
  46. package/data/actions/backup-search.json +3 -5
  47. package/data/actions/backup-storage.json +0 -15
  48. package/data/actions/backup.json +124 -152
  49. package/data/actions/batch.json +46 -48
  50. package/data/actions/bcm-dashboards.json +5 -7
  51. package/data/actions/bcm-data-exports.json +15 -15
  52. package/data/actions/bcm-pricing-calculator.json +3 -3
  53. package/data/actions/bedrock-agentcore.json +191 -254
  54. package/data/actions/bedrock-mantle.json +114 -102
  55. package/data/actions/bedrock.json +209 -219
  56. package/data/actions/billing.json +151 -171
  57. package/data/actions/billingconductor.json +14 -14
  58. package/data/actions/braket.json +18 -21
  59. package/data/actions/budgets.json +10 -18
  60. package/data/actions/bugbust.json +73 -105
  61. package/data/actions/cases.json +2 -2
  62. package/data/actions/cassandra.json +4 -4
  63. package/data/actions/ce.json +102 -114
  64. package/data/actions/chatbot.json +12 -12
  65. package/data/actions/chime.json +102 -181
  66. package/data/actions/cleanrooms-ml.json +13 -13
  67. package/data/actions/cleanrooms.json +136 -243
  68. package/data/actions/cloud9.json +163 -185
  69. package/data/actions/clouddirectory.json +2 -2
  70. package/data/actions/cloudformation.json +30 -35
  71. package/data/actions/cloudfront.json +61 -75
  72. package/data/actions/cloudhsm.json +10 -40
  73. package/data/actions/cloudsearch.json +48 -51
  74. package/data/actions/cloudshell.json +0 -11
  75. package/data/actions/cloudtrail.json +100 -176
  76. package/data/actions/cloudwatch.json +155 -175
  77. package/data/actions/codeartifact.json +4 -4
  78. package/data/actions/codebuild.json +326 -334
  79. package/data/actions/codecatalyst.json +7 -39
  80. package/data/actions/codecommit.json +169 -180
  81. package/data/actions/codeconnections.json +136 -162
  82. package/data/actions/codedeploy.json +12 -13
  83. package/data/actions/codeguru-profiler.json +8 -8
  84. package/data/actions/codeguru-reviewer.json +29 -50
  85. package/data/actions/codeguru-security.json +22 -24
  86. package/data/actions/codeguru.json +0 -1
  87. package/data/actions/codepipeline.json +2 -2
  88. package/data/actions/codestar-connections.json +136 -162
  89. package/data/actions/codestar-notifications.json +8 -8
  90. package/data/actions/codestar.json +105 -76
  91. package/data/actions/codewhisperer.json +85 -90
  92. package/data/actions/cognito-identity.json +13 -13
  93. package/data/actions/cognito-idp.json +86 -74
  94. package/data/actions/cognito-sync.json +23 -25
  95. package/data/actions/comprehend.json +36 -36
  96. package/data/actions/compute-optimizer.json +20 -85
  97. package/data/actions/config.json +13 -49
  98. package/data/actions/connect-campaigns.json +6 -6
  99. package/data/actions/connect.json +366 -590
  100. package/data/actions/consolidatedbilling.json +0 -2
  101. package/data/actions/controltower.json +206 -246
  102. package/data/actions/cost-optimization-hub.json +2 -6
  103. package/data/actions/cur.json +51 -56
  104. package/data/actions/customer-verification.json +0 -5
  105. package/data/actions/databrew.json +16 -16
  106. package/data/actions/dataexchange.json +51 -67
  107. package/data/actions/datapipeline.json +25 -29
  108. package/data/actions/datasync.json +6 -6
  109. package/data/actions/datazone.json +249 -214
  110. package/data/actions/dax.json +3 -14
  111. package/data/actions/deadline.json +140 -391
  112. package/data/actions/detective.json +109 -131
  113. package/data/actions/devicefarm.json +16 -40
  114. package/data/actions/devops-guru.json +2 -8
  115. package/data/actions/directconnect.json +8 -8
  116. package/data/actions/discovery.json +4 -16
  117. package/data/actions/dlm.json +2 -2
  118. package/data/actions/dms.json +90 -124
  119. package/data/actions/docdb-elastic.json +17 -121
  120. package/data/actions/drs.json +568 -728
  121. package/data/actions/ds-data.json +47 -83
  122. package/data/actions/ds.json +160 -277
  123. package/data/actions/dsql.json +64 -82
  124. package/data/actions/dynamodb.json +267 -268
  125. package/data/actions/ebs.json +1 -3
  126. package/data/actions/ec2-instance-connect.json +2 -8
  127. package/data/actions/ec2.json +1305 -1611
  128. package/data/actions/ec2messages.json +4 -4
  129. package/data/actions/ecr-public.json +4 -6
  130. package/data/actions/ecr.json +56 -77
  131. package/data/actions/ecs.json +141 -152
  132. package/data/actions/eks.json +53 -57
  133. package/data/actions/elasticache.json +148 -268
  134. package/data/actions/elasticbeanstalk.json +79 -79
  135. package/data/actions/elasticfilesystem.json +59 -70
  136. package/data/actions/elasticloadbalancing.json +103 -119
  137. package/data/actions/elasticmapreduce.json +275 -298
  138. package/data/actions/elemental-activations.json +0 -13
  139. package/data/actions/elemental-appliances-software.json +0 -14
  140. package/data/actions/elemental-inference.json +2 -2
  141. package/data/actions/elemental-support-cases.json +45 -40
  142. package/data/actions/elemental-support-content.json +0 -1
  143. package/data/actions/emr-containers.json +2 -2
  144. package/data/actions/emr-serverless.json +6 -17
  145. package/data/actions/entityresolution.json +7 -7
  146. package/data/actions/es.json +2 -2
  147. package/data/actions/events.json +71 -74
  148. package/data/actions/eventsbilltoaws.json +4 -4
  149. package/data/actions/evidently.json +120 -50
  150. package/data/actions/evs.json +8 -103
  151. package/data/actions/finops-agent.json +0 -46
  152. package/data/actions/finspace.json +39 -46
  153. package/data/actions/firehose.json +2 -2
  154. package/data/actions/fis.json +69 -74
  155. package/data/actions/fms.json +2 -2
  156. package/data/actions/forecast.json +80 -85
  157. package/data/actions/frauddetector.json +31 -20
  158. package/data/actions/freertos.json +18 -9
  159. package/data/actions/freetier.json +16 -18
  160. package/data/actions/fsx.json +150 -206
  161. package/data/actions/gamelift.json +19 -94
  162. package/data/actions/gameliftstreams.json +6 -16
  163. package/data/actions/geo.json +2 -2
  164. package/data/actions/glacier.json +8 -8
  165. package/data/actions/globalaccelerator.json +4 -8
  166. package/data/actions/glue.json +439 -454
  167. package/data/actions/grafana.json +11 -29
  168. package/data/actions/greengrass.json +31 -33
  169. package/data/actions/groundstation.json +4 -4
  170. package/data/actions/groundtruthlabeling.json +0 -16
  171. package/data/actions/guardduty.json +11 -34
  172. package/data/actions/health-agent.json +286 -252
  173. package/data/actions/health.json +10 -29
  174. package/data/actions/healthlake.json +5 -5
  175. package/data/actions/honeycode.json +115 -130
  176. package/data/actions/iam.json +101 -111
  177. package/data/actions/identity-sync.json +3 -8
  178. package/data/actions/identitystore-auth.json +0 -3
  179. package/data/actions/identitystore.json +38 -96
  180. package/data/actions/imagebuilder.json +33 -173
  181. package/data/actions/inspector.json +1 -1
  182. package/data/actions/inspector2.json +6 -6
  183. package/data/actions/interconnect.json +2 -2
  184. package/data/actions/internetmonitor.json +10 -11
  185. package/data/actions/invoicing.json +46 -51
  186. package/data/actions/iot.json +76 -102
  187. package/data/actions/iotanalytics.json +188 -62
  188. package/data/actions/iotdeviceadvisor.json +2 -2
  189. package/data/actions/iotevents.json +130 -57
  190. package/data/actions/iotfleethub.json +27 -22
  191. package/data/actions/iotfleetwise.json +34 -40
  192. package/data/actions/iotmanagedintegrations.json +10 -10
  193. package/data/actions/iotsitewise.json +38 -45
  194. package/data/actions/iottwinmaker.json +19 -31
  195. package/data/actions/iotwireless.json +16 -24
  196. package/data/actions/ivs.json +39 -39
  197. package/data/actions/ivschat.json +12 -12
  198. package/data/actions/kafka-cluster.json +36 -73
  199. package/data/actions/kafka.json +18 -102
  200. package/data/actions/kafkaconnect.json +11 -34
  201. package/data/actions/kendra-ranking.json +2 -2
  202. package/data/actions/kendra.json +18 -18
  203. package/data/actions/kinesis.json +123 -124
  204. package/data/actions/kinesisanalytics.json +2 -3
  205. package/data/actions/kinesisvideo.json +4 -4
  206. package/data/actions/kms.json +110 -126
  207. package/data/actions/lakeformation.json +11 -20
  208. package/data/actions/lambda.json +113 -138
  209. package/data/actions/launchwizard.json +144 -169
  210. package/data/actions/lex.json +188 -154
  211. package/data/actions/license-manager-linux-subscriptions.json +2 -2
  212. package/data/actions/license-manager-user-subscriptions.json +2 -2
  213. package/data/actions/license-manager.json +5 -5
  214. package/data/actions/lightsail.json +8 -31
  215. package/data/actions/logs.json +195 -198
  216. package/data/actions/lookoutequipment.json +10 -10
  217. package/data/actions/lookoutmetrics.json +134 -58
  218. package/data/actions/lookoutvision.json +64 -50
  219. package/data/actions/m2.json +11 -48
  220. package/data/actions/machinelearning.json +2 -2
  221. package/data/actions/macie2.json +2 -2
  222. package/data/actions/managedblockchain.json +43 -56
  223. package/data/actions/mapcredits.json +0 -3
  224. package/data/actions/mediaconnect.json +8 -43
  225. package/data/actions/mediaconvert.json +6 -6
  226. package/data/actions/mediaimport.json +0 -1
  227. package/data/actions/medialive.json +4 -4
  228. package/data/actions/mediapackage-vod.json +3 -5
  229. package/data/actions/mediapackage.json +3 -5
  230. package/data/actions/mediapackagev2.json +2 -2
  231. package/data/actions/mediastore.json +9 -11
  232. package/data/actions/mediatailor.json +5 -7
  233. package/data/actions/medical-imaging.json +14 -14
  234. package/data/actions/memorydb.json +54 -122
  235. package/data/actions/mgh.json +6 -6
  236. package/data/actions/mgn.json +554 -937
  237. package/data/actions/migrationhub-orchestrator.json +4 -4
  238. package/data/actions/mobiletargeting.json +35 -36
  239. package/data/actions/monitron.json +72 -118
  240. package/data/actions/mpa.json +41 -44
  241. package/data/actions/mq.json +34 -56
  242. package/data/actions/neptune-graph.json +12 -54
  243. package/data/actions/network-firewall.json +14 -29
  244. package/data/actions/networkflowmonitor.json +2 -2
  245. package/data/actions/networkmanager-chat.json +0 -7
  246. package/data/actions/networkmanager.json +44 -99
  247. package/data/actions/networkmonitor.json +2 -2
  248. package/data/actions/nimble.json +475 -221
  249. package/data/actions/notifications-contacts.json +6 -6
  250. package/data/actions/notifications.json +26 -33
  251. package/data/actions/oam.json +4 -8
  252. package/data/actions/observabilityadmin.json +16 -16
  253. package/data/actions/odb.json +161 -171
  254. package/data/actions/omics.json +9 -17
  255. package/data/actions/one.json +105 -85
  256. package/data/actions/opensearch.json +16 -2
  257. package/data/actions/opsworks-cm.json +2 -2
  258. package/data/actions/opsworks.json +4 -4
  259. package/data/actions/organizations.json +39 -43
  260. package/data/actions/osis.json +10 -29
  261. package/data/actions/outposts.json +2 -2
  262. package/data/actions/panorama.json +110 -58
  263. package/data/actions/partnercentral-account-management.json +0 -4
  264. package/data/actions/partnercentral.json +209 -154
  265. package/data/actions/payment-cryptography.json +15 -29
  266. package/data/actions/payments.json +77 -78
  267. package/data/actions/pca-connector-ad.json +8 -29
  268. package/data/actions/pca-connector-scep.json +3 -8
  269. package/data/actions/pcs.json +12 -77
  270. package/data/actions/personalize.json +8 -20
  271. package/data/actions/pi.json +2 -2
  272. package/data/actions/pipes.json +4 -8
  273. package/data/actions/polly.json +1 -3
  274. package/data/actions/private-networks.json +135 -75
  275. package/data/actions/profile.json +43 -62
  276. package/data/actions/proton.json +47 -57
  277. package/data/actions/purchase-orders.json +55 -66
  278. package/data/actions/q.json +112 -173
  279. package/data/actions/qapps.json +122 -127
  280. package/data/actions/qbusiness.json +53 -63
  281. package/data/actions/qdeveloper.json +56 -49
  282. package/data/actions/qldb.json +200 -110
  283. package/data/actions/quicksight.json +543 -564
  284. package/data/actions/ram.json +25 -31
  285. package/data/actions/rbin.json +2 -2
  286. package/data/actions/rds-data.json +2 -6
  287. package/data/actions/rds-db.json +1 -1
  288. package/data/actions/rds.json +233 -380
  289. package/data/actions/redshift-data.json +4 -4
  290. package/data/actions/redshift-serverless.json +48 -99
  291. package/data/actions/redshift.json +424 -369
  292. package/data/actions/refactor-spaces.json +45 -45
  293. package/data/actions/rekognition.json +2 -2
  294. package/data/actions/repostspace.json +8 -8
  295. package/data/actions/resiliencehub.json +182 -227
  296. package/data/actions/resource-explorer-2.json +72 -80
  297. package/data/actions/resource-explorer.json +1 -6
  298. package/data/actions/resource-groups.json +68 -99
  299. package/data/actions/robomaker.json +286 -140
  300. package/data/actions/rolesanywhere.json +5 -11
  301. package/data/actions/route53-recovery-control-config.json +34 -36
  302. package/data/actions/route53-recovery-readiness.json +6 -6
  303. package/data/actions/route53.json +7 -15
  304. package/data/actions/route53domains.json +2 -2
  305. package/data/actions/route53globalresolver.json +8 -12
  306. package/data/actions/route53profiles.json +41 -45
  307. package/data/actions/route53resolver.json +24 -74
  308. package/data/actions/rtbfabric.json +2 -2
  309. package/data/actions/rum.json +4 -10
  310. package/data/actions/s3-object-lambda.json +6 -6
  311. package/data/actions/s3-outposts.json +38 -40
  312. package/data/actions/s3.json +626 -652
  313. package/data/actions/s3express.json +167 -76
  314. package/data/actions/s3files.json +6 -9
  315. package/data/actions/s3tables.json +74 -77
  316. package/data/actions/s3vectors.json +16 -20
  317. package/data/actions/sagemaker-data-science-assistant.json +0 -1
  318. package/data/actions/sagemaker-geospatial.json +9 -21
  319. package/data/actions/sagemaker-mlflow.json +240 -240
  320. package/data/actions/sagemaker-unified-studio-mcp.json +3 -22
  321. package/data/actions/sagemaker.json +374 -614
  322. package/data/actions/savingsplans.json +4 -4
  323. package/data/actions/scheduler.json +9 -15
  324. package/data/actions/schemas.json +4 -4
  325. package/data/actions/scn.json +2 -2
  326. package/data/actions/secretsmanager.json +73 -73
  327. package/data/actions/security-ir.json +4 -12
  328. package/data/actions/securityagent.json +58 -198
  329. package/data/actions/securityhub.json +208 -246
  330. package/data/actions/securitylake.json +17 -215
  331. package/data/actions/servicecatalog.json +81 -97
  332. package/data/actions/servicediscovery.json +57 -60
  333. package/data/actions/serviceextract.json +0 -1
  334. package/data/actions/servicequotas.json +11 -44
  335. package/data/actions/ses.json +387 -374
  336. package/data/actions/shield.json +52 -83
  337. package/data/actions/signer.json +8 -8
  338. package/data/actions/signin.json +123 -23
  339. package/data/actions/simspaceweaver.json +46 -22
  340. package/data/actions/sms-voice.json +35 -64
  341. package/data/actions/sms.json +16 -18
  342. package/data/actions/snow-device-management.json +2 -2
  343. package/data/actions/sns.json +33 -20
  344. package/data/actions/social-messaging.json +152 -2
  345. package/data/actions/sqlworkbench.json +217 -203
  346. package/data/actions/sqs.json +5 -5
  347. package/data/actions/ssm-contacts.json +24 -29
  348. package/data/actions/ssm-guiconnect.json +16 -20
  349. package/data/actions/ssm-incidents.json +15 -24
  350. package/data/actions/ssm-quicksetup.json +10 -10
  351. package/data/actions/ssm-sap.json +7 -7
  352. package/data/actions/ssm.json +114 -133
  353. package/data/actions/ssmmessages.json +2 -2
  354. package/data/actions/sso-directory.json +36 -108
  355. package/data/actions/sso-oauth.json +12 -20
  356. package/data/actions/sso.json +221 -490
  357. package/data/actions/states.json +23 -33
  358. package/data/actions/storagegateway.json +4 -19
  359. package/data/actions/sts.json +191 -122
  360. package/data/actions/support-console.json +0 -13
  361. package/data/actions/support.json +1 -3
  362. package/data/actions/supportapp.json +24 -27
  363. package/data/actions/supportauthz.json +156 -0
  364. package/data/actions/supportplans.json +0 -5
  365. package/data/actions/swf.json +126 -138
  366. package/data/actions/synthetics.json +2 -2
  367. package/data/actions/tag.json +2 -2
  368. package/data/actions/tax.json +24 -27
  369. package/data/actions/textract.json +12 -28
  370. package/data/actions/thinclient.json +44 -57
  371. package/data/actions/timestream-influxdb.json +6 -14
  372. package/data/actions/timestream.json +38 -118
  373. package/data/actions/tiros.json +0 -5
  374. package/data/actions/tnb.json +4 -4
  375. package/data/actions/transcribe.json +29 -52
  376. package/data/actions/transfer.json +38 -64
  377. package/data/actions/transform-custom.json +232 -182
  378. package/data/actions/transform.json +32 -50
  379. package/data/actions/translate.json +2 -2
  380. package/data/actions/trustedadvisor.json +149 -166
  381. package/data/actions/ts.json +26 -21
  382. package/data/actions/vendor-insights.json +129 -88
  383. package/data/actions/verified-access.json +0 -1
  384. package/data/actions/verifiedpermissions.json +4 -6
  385. package/data/actions/voiceid.json +18 -20
  386. package/data/actions/vpc-lattice-svcs.json +7 -7
  387. package/data/actions/vpc-lattice.json +40 -69
  388. package/data/actions/vpce.json +0 -1
  389. package/data/actions/waf-regional.json +9 -13
  390. package/data/actions/waf.json +9 -13
  391. package/data/actions/wafv2.json +82 -136
  392. package/data/actions/wam.json +0 -1
  393. package/data/actions/wellarchitected.json +420 -9
  394. package/data/actions/wickr.json +4 -4
  395. package/data/actions/wisdom.json +55 -60
  396. package/data/actions/workdocs.json +137 -154
  397. package/data/actions/worklink.json +123 -64
  398. package/data/actions/workmail.json +523 -557
  399. package/data/actions/workspaces-instances.json +8 -24
  400. package/data/actions/workspaces-web.json +38 -87
  401. package/data/actions/workspaces.json +131 -154
  402. package/data/actions/xray.json +29 -33
  403. package/data/categories/analytics.json +41 -0
  404. package/data/categories/application-integration.json +20 -0
  405. package/data/categories/blockchain.json +9 -0
  406. package/data/categories/business-applications.json +32 -0
  407. package/data/categories/cloud-financial-management.json +34 -0
  408. package/data/categories/compute.json +23 -0
  409. package/data/categories/containers.json +14 -0
  410. package/data/categories/customer-enablement.json +8 -0
  411. package/data/categories/databases.json +17 -0
  412. package/data/categories/developer-tools.json +27 -0
  413. package/data/categories/end-user-computing.json +14 -0
  414. package/data/categories/front-end-web-and-mobile.json +17 -0
  415. package/data/categories/game-tech.json +8 -0
  416. package/data/categories/internet-of-things.json +20 -0
  417. package/data/categories/machine-learning-and-ai.json +50 -0
  418. package/data/categories/management-and-governance.json +77 -0
  419. package/data/categories/media.json +24 -0
  420. package/data/categories/migration-and-transfer.json +25 -0
  421. package/data/categories/networking-and-content-delivery.json +36 -0
  422. package/data/categories/quantum-technologies.json +7 -0
  423. package/data/categories/satellite.json +7 -0
  424. package/data/categories/security-identity-and-compliance.json +55 -0
  425. package/data/categories/storage.json +25 -0
  426. package/data/categories.json +25 -0
  427. package/data/categoryNames.json +25 -0
  428. package/data/conditionKeys/bedrock-agentcore.json +72 -2
  429. package/data/conditionKeys/signin.json +25 -0
  430. package/data/conditionKeys/sts.json +370 -0
  431. package/data/conditionKeys/supportauthz.json +17 -0
  432. package/data/conditionPatterns.json +60 -0
  433. package/data/resourceTypes/a4b.json +34 -34
  434. package/data/resourceTypes/acm.json +9 -9
  435. package/data/resourceTypes/amplify.json +4 -4
  436. package/data/resourceTypes/amplifybackend.json +18 -18
  437. package/data/resourceTypes/apigateway.json +105 -105
  438. package/data/resourceTypes/app-integrations.json +12 -12
  439. package/data/resourceTypes/appconfig.json +16 -16
  440. package/data/resourceTypes/appfabric.json +6 -6
  441. package/data/resourceTypes/appflow.json +7 -7
  442. package/data/resourceTypes/application-signals.json +6 -6
  443. package/data/resourceTypes/appmesh-preview.json +14 -14
  444. package/data/resourceTypes/appmesh.json +20 -20
  445. package/data/resourceTypes/apprunner.json +9 -9
  446. package/data/resourceTypes/appstream.json +21 -21
  447. package/data/resourceTypes/appstudio.json +4 -4
  448. package/data/resourceTypes/appsync.json +26 -26
  449. package/data/resourceTypes/aps.json +16 -16
  450. package/data/resourceTypes/artifact.json +11 -11
  451. package/data/resourceTypes/athena.json +12 -12
  452. package/data/resourceTypes/auditmanager.json +4 -4
  453. package/data/resourceTypes/aws-marketplace.json +21 -21
  454. package/data/resourceTypes/b2bi.json +7 -7
  455. package/data/resourceTypes/backup-search.json +6 -6
  456. package/data/resourceTypes/backup.json +16 -16
  457. package/data/resourceTypes/batch.json +20 -20
  458. package/data/resourceTypes/bcm-data-exports.json +7 -7
  459. package/data/resourceTypes/bedrock-agentcore.json +91 -91
  460. package/data/resourceTypes/bedrock-mantle.json +6 -6
  461. package/data/resourceTypes/bedrock.json +113 -113
  462. package/data/resourceTypes/billingconductor.json +7 -7
  463. package/data/resourceTypes/braket.json +10 -10
  464. package/data/resourceTypes/cases.json +7 -7
  465. package/data/resourceTypes/cassandra.json +6 -6
  466. package/data/resourceTypes/ce.json +10 -10
  467. package/data/resourceTypes/chime.json +28 -28
  468. package/data/resourceTypes/cleanrooms-ml.json +27 -27
  469. package/data/resourceTypes/cleanrooms.json +6 -6
  470. package/data/resourceTypes/cloudformation.json +8 -8
  471. package/data/resourceTypes/cloudfront.json +50 -50
  472. package/data/resourceTypes/cloudtrail.json +12 -12
  473. package/data/resourceTypes/cloudwatch.json +6 -6
  474. package/data/resourceTypes/codeartifact.json +9 -9
  475. package/data/resourceTypes/codebuild.json +8 -8
  476. package/data/resourceTypes/codecatalyst.json +4 -4
  477. package/data/resourceTypes/codewhisperer.json +6 -6
  478. package/data/resourceTypes/comprehend.json +38 -38
  479. package/data/resourceTypes/config.json +17 -17
  480. package/data/resourceTypes/connect.json +123 -123
  481. package/data/resourceTypes/controltower.json +7 -7
  482. package/data/resourceTypes/databrew.json +12 -12
  483. package/data/resourceTypes/dataexchange.json +25 -25
  484. package/data/resourceTypes/datasync.json +14 -14
  485. package/data/resourceTypes/devicefarm.json +52 -52
  486. package/data/resourceTypes/directconnect.json +7 -7
  487. package/data/resourceTypes/dms.json +8 -8
  488. package/data/resourceTypes/drs.json +10 -10
  489. package/data/resourceTypes/dynamodb.json +16 -16
  490. package/data/resourceTypes/ec2.json +201 -201
  491. package/data/resourceTypes/ecr-public.json +4 -4
  492. package/data/resourceTypes/eks.json +38 -38
  493. package/data/resourceTypes/elasticache.json +66 -66
  494. package/data/resourceTypes/elasticbeanstalk.json +4 -4
  495. package/data/resourceTypes/elasticfilesystem.json +6 -6
  496. package/data/resourceTypes/elasticloadbalancing.json +17 -17
  497. package/data/resourceTypes/emr-containers.json +7 -7
  498. package/data/resourceTypes/entityresolution.json +12 -12
  499. package/data/resourceTypes/es.json +13 -13
  500. package/data/resourceTypes/events.json +41 -41
  501. package/data/resourceTypes/evidently.json +9 -9
  502. package/data/resourceTypes/execute-api.json +4 -4
  503. package/data/resourceTypes/finspace.json +22 -22
  504. package/data/resourceTypes/fms.json +6 -6
  505. package/data/resourceTypes/forecast.json +25 -25
  506. package/data/resourceTypes/frauddetector.json +20 -20
  507. package/data/resourceTypes/fsx.json +20 -20
  508. package/data/resourceTypes/gamelift.json +6 -6
  509. package/data/resourceTypes/geo.json +7 -7
  510. package/data/resourceTypes/globalaccelerator.json +6 -6
  511. package/data/resourceTypes/glue.json +61 -61
  512. package/data/resourceTypes/greengrass.json +30 -27
  513. package/data/resourceTypes/groundstation.json +7 -7
  514. package/data/resourceTypes/guardduty.json +12 -12
  515. package/data/resourceTypes/health-agent.json +16 -16
  516. package/data/resourceTypes/honeycode.json +8 -8
  517. package/data/resourceTypes/iam.json +7 -7
  518. package/data/resourceTypes/identitystore.json +16 -16
  519. package/data/resourceTypes/imagebuilder.json +25 -25
  520. package/data/resourceTypes/inspector2.json +16 -16
  521. package/data/resourceTypes/internetmonitor.json +4 -4
  522. package/data/resourceTypes/iot.json +99 -99
  523. package/data/resourceTypes/iotevents.json +6 -6
  524. package/data/resourceTypes/iotfleetwise.json +6 -6
  525. package/data/resourceTypes/iotsitewise.json +27 -27
  526. package/data/resourceTypes/iottwinmaker.json +12 -12
  527. package/data/resourceTypes/iotwireless.json +39 -39
  528. package/data/resourceTypes/iq.json +29 -29
  529. package/data/resourceTypes/ivs.json +33 -33
  530. package/data/resourceTypes/ivschat.json +6 -6
  531. package/data/resourceTypes/kafka-cluster.json +4 -4
  532. package/data/resourceTypes/kafka.json +10 -10
  533. package/data/resourceTypes/kafkaconnect.json +7 -7
  534. package/data/resourceTypes/kendra.json +19 -19
  535. package/data/resourceTypes/kinesis.json +7 -7
  536. package/data/resourceTypes/kinesisvideo.json +6 -6
  537. package/data/resourceTypes/lambda.json +6 -6
  538. package/data/resourceTypes/lex.json +2 -2
  539. package/data/resourceTypes/license-manager-user-subscriptions.json +7 -7
  540. package/data/resourceTypes/license-manager.json +20 -20
  541. package/data/resourceTypes/lightsail.json +52 -52
  542. package/data/resourceTypes/logs.json +24 -24
  543. package/data/resourceTypes/lookoutequipment.json +12 -12
  544. package/data/resourceTypes/lookoutmetrics.json +7 -7
  545. package/data/resourceTypes/managedblockchain.json +17 -17
  546. package/data/resourceTypes/mediaconvert.json +10 -10
  547. package/data/resourceTypes/medialive.json +47 -47
  548. package/data/resourceTypes/mediapackage.json +6 -6
  549. package/data/resourceTypes/mediapackagev2.json +13 -13
  550. package/data/resourceTypes/mediastore.json +4 -4
  551. package/data/resourceTypes/mediatailor.json +14 -14
  552. package/data/resourceTypes/memorydb.json +25 -25
  553. package/data/resourceTypes/mgh.json +8 -8
  554. package/data/resourceTypes/mgn.json +33 -33
  555. package/data/resourceTypes/migrationhub-orchestrator.json +6 -6
  556. package/data/resourceTypes/mobiletargeting.json +79 -79
  557. package/data/resourceTypes/neptune-graph.json +4 -4
  558. package/data/resourceTypes/network-firewall.json +28 -28
  559. package/data/resourceTypes/networkmanager.json +26 -26
  560. package/data/resourceTypes/nimble.json +27 -27
  561. package/data/resourceTypes/notifications.json +11 -11
  562. package/data/resourceTypes/observabilityadmin.json +9 -9
  563. package/data/resourceTypes/omics.json +18 -18
  564. package/data/resourceTypes/one.json +7 -7
  565. package/data/resourceTypes/opsworks-cm.json +4 -4
  566. package/data/resourceTypes/organizations.json +10 -10
  567. package/data/resourceTypes/osis.json +4 -4
  568. package/data/resourceTypes/panorama.json +7 -7
  569. package/data/resourceTypes/partnercentral.json +63 -63
  570. package/data/resourceTypes/payment-cryptography.json +8 -8
  571. package/data/resourceTypes/personalize.json +48 -48
  572. package/data/resourceTypes/private-networks.json +12 -12
  573. package/data/resourceTypes/profile.json +32 -32
  574. package/data/resourceTypes/proton.json +39 -39
  575. package/data/resourceTypes/q.json +6 -6
  576. package/data/resourceTypes/qbusiness.json +22 -22
  577. package/data/resourceTypes/qldb.json +7 -7
  578. package/data/resourceTypes/quicksight.json +106 -106
  579. package/data/resourceTypes/ram.json +17 -17
  580. package/data/resourceTypes/rds.json +42 -42
  581. package/data/resourceTypes/redshift-data.json +4 -4
  582. package/data/resourceTypes/redshift-serverless.json +15 -15
  583. package/data/resourceTypes/redshift.json +8 -8
  584. package/data/resourceTypes/refactor-spaces.json +14 -14
  585. package/data/resourceTypes/rekognition.json +6 -6
  586. package/data/resourceTypes/resiliencehub.json +9 -9
  587. package/data/resourceTypes/resource-explorer-2.json +7 -7
  588. package/data/resourceTypes/robomaker.json +27 -27
  589. package/data/resourceTypes/rolesanywhere.json +6 -6
  590. package/data/resourceTypes/route53-recovery-readiness.json +12 -12
  591. package/data/resourceTypes/route53.json +8 -8
  592. package/data/resourceTypes/route53resolver.json +34 -34
  593. package/data/resourceTypes/s3.json +41 -41
  594. package/data/resourceTypes/s3express.json +8 -8
  595. package/data/resourceTypes/s3files.json +6 -6
  596. package/data/resourceTypes/s3tables.json +8 -8
  597. package/data/resourceTypes/sagemaker.json +223 -223
  598. package/data/resourceTypes/scheduler.json +4 -4
  599. package/data/resourceTypes/scn.json +13 -13
  600. package/data/resourceTypes/securityagent.json +15 -15
  601. package/data/resourceTypes/securityhub.json +22 -22
  602. package/data/resourceTypes/ses.json +17 -17
  603. package/data/resourceTypes/signer.json +4 -4
  604. package/data/resourceTypes/signin.json +11 -3
  605. package/data/resourceTypes/sms-voice.json +11 -11
  606. package/data/resourceTypes/sqlworkbench.json +12 -12
  607. package/data/resourceTypes/ssm-incidents.json +7 -7
  608. package/data/resourceTypes/ssm.json +21 -21
  609. package/data/resourceTypes/sso.json +14 -14
  610. package/data/resourceTypes/states.json +18 -18
  611. package/data/resourceTypes/storagegateway.json +8 -2
  612. package/data/resourceTypes/sts.json +8 -8
  613. package/data/resourceTypes/supportauthz.json +13 -0
  614. package/data/resourceTypes/thinclient.json +6 -6
  615. package/data/resourceTypes/timestream.json +6 -6
  616. package/data/resourceTypes/tnb.json +12 -12
  617. package/data/resourceTypes/transcribe.json +21 -21
  618. package/data/resourceTypes/transfer.json +23 -23
  619. package/data/resourceTypes/transform.json +4 -4
  620. package/data/resourceTypes/translate.json +6 -6
  621. package/data/resourceTypes/waf-regional.json +19 -19
  622. package/data/resourceTypes/waf.json +19 -19
  623. package/data/resourceTypes/wafv2.json +35 -35
  624. package/data/resourceTypes/wellarchitected.json +17 -3
  625. package/data/resourceTypes/wisdom.json +12 -12
  626. package/data/resourceTypes/workspaces-instances.json +6 -6
  627. package/data/resourceTypes/workspaces-web.json +23 -23
  628. package/data/resourceTypes/workspaces.json +14 -14
  629. package/data/serviceCategories.json +454 -0
  630. package/data/serviceNames.json +1 -0
  631. package/data/services.json +1 -0
  632. package/data/unassociatedConditions.json +30 -0
  633. package/package.json +2 -2
package/data/actions/ec2.json CHANGED
@@ -1,4 +1,588 @@
1
1
  {
2
+ "associateverifiedaccessinstancewebacl": {
3
+ "name": "AssociateVerifiedAccessInstanceWebAcl",
4
+ "description": "Grants permission to associate an AWS Web Application Firewall (WAF) web access control list (ACL) with a Verified Access instance",
5
+ "accessLevel": "Write",
6
+ "resourceTypes": [
7
+ {
8
+ "name": "verified-access-instance",
9
+ "required": true,
10
+ "conditionKeys": [
11
+ "aws:ResourceTag/${TagKey}",
12
+ "ec2:ResourceTag/${TagKey}"
13
+ ],
14
+ "dependentActions": []
15
+ }
16
+ ],
17
+ "conditionKeys": [
18
+ "ec2:Region"
19
+ ],
20
+ "dependentActions": []
21
+ },
22
+ "attachappliancetonatgateway": {
23
+ "name": "AttachApplianceToNatGateway",
24
+ "description": "Grants permission to attach an appliance with a public/private Natgateway",
25
+ "accessLevel": "Permissions management, Write",
26
+ "resourceTypes": [
27
+ {
28
+ "name": "natgateway",
29
+ "required": true,
30
+ "conditionKeys": [
31
+ "aws:ResourceTag/${TagKey}",
32
+ "ec2:ResourceTag/${TagKey}"
33
+ ],
34
+ "dependentActions": []
35
+ }
36
+ ],
37
+ "conditionKeys": [
38
+ "ec2:Region"
39
+ ],
40
+ "dependentActions": []
41
+ },
42
+ "attachresourcestoplacementgroup": {
43
+ "name": "AttachResourcesToPlacementGroup",
44
+ "description": "Grants permission to attach resources to a placement group",
45
+ "accessLevel": "Permissions management, Write",
46
+ "resourceTypes": [
47
+ {
48
+ "name": "placement-group",
49
+ "required": true,
50
+ "conditionKeys": [
51
+ "aws:ResourceTag/${TagKey}",
52
+ "ec2:PlacementGroupName",
53
+ "ec2:PlacementGroupStrategy",
54
+ "ec2:ResourceTag/${TagKey}"
55
+ ],
56
+ "dependentActions": []
57
+ }
58
+ ],
59
+ "conditionKeys": [
60
+ "ec2:Region"
61
+ ],
62
+ "dependentActions": []
63
+ },
64
+ "createcoippoolpermission": {
65
+ "name": "CreateCoipPoolPermission",
66
+ "description": "Grants permission to allow a service to access a customer-owned IP (CoIP) pool",
67
+ "accessLevel": "Permissions management, Write",
68
+ "resourceTypes": [
69
+ {
70
+ "name": "coip-pool",
71
+ "required": true,
72
+ "conditionKeys": [
73
+ "aws:ResourceTag/${TagKey}",
74
+ "ec2:ResourceTag/${TagKey}"
75
+ ],
76
+ "dependentActions": []
77
+ }
78
+ ],
79
+ "conditionKeys": [
80
+ "ec2:Region"
81
+ ],
82
+ "dependentActions": []
83
+ },
84
+ "createlocalgatewayroutetablepermission": {
85
+ "name": "CreateLocalGatewayRouteTablePermission",
86
+ "description": "Grants permission to allow a service to access a local gateway route table",
87
+ "accessLevel": "Permissions management, Write",
88
+ "resourceTypes": [
89
+ {
90
+ "name": "local-gateway-route-table",
91
+ "required": true,
92
+ "conditionKeys": [
93
+ "aws:ResourceTag/${TagKey}",
94
+ "ec2:ResourceTag/${TagKey}"
95
+ ],
96
+ "dependentActions": []
97
+ }
98
+ ],
99
+ "conditionKeys": [
100
+ "ec2:Region"
101
+ ],
102
+ "dependentActions": []
103
+ },
104
+ "createodbnetworkpeering": {
105
+ "name": "CreateOdbNetworkPeering",
106
+ "description": "Grants permission to allow Oracle Database@AWS to create a peering connection between an ODB network and a VPC",
107
+ "accessLevel": "Permissions management, Write",
108
+ "resourceTypes": [
109
+ {
110
+ "name": "vpc",
111
+ "required": true,
112
+ "conditionKeys": [
113
+ "aws:ResourceTag/${TagKey}",
114
+ "ec2:ResourceTag/${TagKey}",
115
+ "ec2:Tenancy",
116
+ "ec2:VpcID"
117
+ ],
118
+ "dependentActions": []
119
+ }
120
+ ],
121
+ "conditionKeys": [
122
+ "ec2:Region"
123
+ ],
124
+ "dependentActions": []
125
+ },
126
+ "deletecoippoolpermission": {
127
+ "name": "DeleteCoipPoolPermission",
128
+ "description": "Grants permission to deny a service from accessing a customer-owned IP (CoIP) pool",
129
+ "accessLevel": "Permissions management, Write",
130
+ "resourceTypes": [
131
+ {
132
+ "name": "coip-pool",
133
+ "required": true,
134
+ "conditionKeys": [
135
+ "aws:ResourceTag/${TagKey}",
136
+ "ec2:ResourceTag/${TagKey}"
137
+ ],
138
+ "dependentActions": []
139
+ }
140
+ ],
141
+ "conditionKeys": [
142
+ "ec2:Region"
143
+ ],
144
+ "dependentActions": []
145
+ },
146
+ "deletelocalgatewayroutetablepermission": {
147
+ "name": "DeleteLocalGatewayRouteTablePermission",
148
+ "description": "Grants permission to deny a service from accessing a local gateway route table",
149
+ "accessLevel": "Permissions management, Write",
150
+ "resourceTypes": [
151
+ {
152
+ "name": "local-gateway-route-table",
153
+ "required": true,
154
+ "conditionKeys": [
155
+ "aws:ResourceTag/${TagKey}",
156
+ "ec2:ResourceTag/${TagKey}"
157
+ ],
158
+ "dependentActions": []
159
+ }
160
+ ],
161
+ "conditionKeys": [
162
+ "ec2:Region"
163
+ ],
164
+ "dependentActions": []
165
+ },
166
+ "deleteodbnetworkpeering": {
167
+ "name": "DeleteOdbNetworkPeering",
168
+ "description": "Grants permission to allow Oracle Database@AWS to delete a peering connection between an ODB network and a VPC",
169
+ "accessLevel": "Permissions management, Write",
170
+ "resourceTypes": [
171
+ {
172
+ "name": "vpc",
173
+ "required": true,
174
+ "conditionKeys": [
175
+ "aws:ResourceTag/${TagKey}",
176
+ "ec2:ResourceTag/${TagKey}",
177
+ "ec2:Tenancy",
178
+ "ec2:VpcID"
179
+ ],
180
+ "dependentActions": []
181
+ }
182
+ ],
183
+ "conditionKeys": [
184
+ "ec2:Region"
185
+ ],
186
+ "dependentActions": []
187
+ },
188
+ "deleteresourcepolicy": {
189
+ "name": "DeleteResourcePolicy",
190
+ "description": "Grants permission to remove an IAM policy that enables cross-account sharing from a resource",
191
+ "accessLevel": "Permissions management, Write",
192
+ "resourceTypes": [
193
+ {
194
+ "name": "ipam-pool",
195
+ "required": false,
196
+ "conditionKeys": [
197
+ "aws:ResourceTag/${TagKey}",
198
+ "ec2:ResourceTag/${TagKey}"
199
+ ],
200
+ "dependentActions": []
201
+ },
202
+ {
203
+ "name": "placement-group",
204
+ "required": false,
205
+ "conditionKeys": [
206
+ "aws:ResourceTag/${TagKey}",
207
+ "ec2:PlacementGroupName",
208
+ "ec2:PlacementGroupStrategy",
209
+ "ec2:ResourceTag/${TagKey}"
210
+ ],
211
+ "dependentActions": []
212
+ },
213
+ {
214
+ "name": "verified-access-group",
215
+ "required": false,
216
+ "conditionKeys": [
217
+ "aws:ResourceTag/${TagKey}",
218
+ "ec2:ResourceTag/${TagKey}"
219
+ ],
220
+ "dependentActions": []
221
+ }
222
+ ],
223
+ "conditionKeys": [
224
+ "ec2:Region"
225
+ ],
226
+ "dependentActions": []
227
+ },
228
+ "describelocalgatewayroutetablepermissions": {
229
+ "name": "DescribeLocalGatewayRouteTablePermissions",
230
+ "description": "Grants permission to allow a service to describe local gateway route table permissions",
231
+ "accessLevel": "List",
232
+ "resourceTypes": [],
233
+ "conditionKeys": [
234
+ "ec2:Region"
235
+ ],
236
+ "dependentActions": []
237
+ },
238
+ "describeverifiedaccessinstancewebaclassociations": {
239
+ "name": "DescribeVerifiedAccessInstanceWebAclAssociations",
240
+ "description": "Grants permission to describe the AWS Web Application Firewall (WAF) web access control list (ACL) associations for a Verified Access instance",
241
+ "accessLevel": "List",
242
+ "resourceTypes": [],
243
+ "conditionKeys": [
244
+ "ec2:Region"
245
+ ],
246
+ "dependentActions": []
247
+ },
248
+ "detachappliancefromnatgateway": {
249
+ "name": "DetachApplianceFromNatGateway",
250
+ "description": "Grants permission to detach an appliance from a public/private Natgateway",
251
+ "accessLevel": "Permissions management, Write",
252
+ "resourceTypes": [
253
+ {
254
+ "name": "natgateway",
255
+ "required": true,
256
+ "conditionKeys": [
257
+ "aws:ResourceTag/${TagKey}",
258
+ "ec2:ResourceTag/${TagKey}"
259
+ ],
260
+ "dependentActions": []
261
+ }
262
+ ],
263
+ "conditionKeys": [
264
+ "ec2:Region"
265
+ ],
266
+ "dependentActions": []
267
+ },
268
+ "detachresourcesfromplacementgroup": {
269
+ "name": "DetachResourcesFromPlacementGroup",
270
+ "description": "Grants permission to detach resources from a placement group",
271
+ "accessLevel": "Permissions management, Write",
272
+ "resourceTypes": [
273
+ {
274
+ "name": "placement-group",
275
+ "required": true,
276
+ "conditionKeys": [
277
+ "aws:ResourceTag/${TagKey}",
278
+ "ec2:PlacementGroupName",
279
+ "ec2:PlacementGroupStrategy",
280
+ "ec2:ResourceTag/${TagKey}"
281
+ ],
282
+ "dependentActions": []
283
+ }
284
+ ],
285
+ "conditionKeys": [
286
+ "ec2:Region"
287
+ ],
288
+ "dependentActions": []
289
+ },
290
+ "disassociateverifiedaccessinstancewebacl": {
291
+ "name": "DisassociateVerifiedAccessInstanceWebAcl",
292
+ "description": "Grants permission to disassociate an AWS Web Application Firewall (WAF) web access control list (ACL) from a Verified Access instance",
293
+ "accessLevel": "Write",
294
+ "resourceTypes": [
295
+ {
296
+ "name": "verified-access-instance",
297
+ "required": true,
298
+ "conditionKeys": [
299
+ "aws:ResourceTag/${TagKey}",
300
+ "ec2:ResourceTag/${TagKey}"
301
+ ],
302
+ "dependentActions": []
303
+ }
304
+ ],
305
+ "conditionKeys": [
306
+ "ec2:Region"
307
+ ],
308
+ "dependentActions": []
309
+ },
310
+ "getresourcepolicy": {
311
+ "name": "GetResourcePolicy",
312
+ "description": "Grants permission to describe an IAM policy that enables cross-account sharing",
313
+ "accessLevel": "Read",
314
+ "resourceTypes": [
315
+ {
316
+ "name": "ipam-pool",
317
+ "required": false,
318
+ "conditionKeys": [
319
+ "aws:ResourceTag/${TagKey}",
320
+ "ec2:ResourceTag/${TagKey}"
321
+ ],
322
+ "dependentActions": []
323
+ },
324
+ {
325
+ "name": "placement-group",
326
+ "required": false,
327
+ "conditionKeys": [
328
+ "aws:ResourceTag/${TagKey}",
329
+ "ec2:PlacementGroupName",
330
+ "ec2:PlacementGroupStrategy",
331
+ "ec2:ResourceTag/${TagKey}"
332
+ ],
333
+ "dependentActions": []
334
+ },
335
+ {
336
+ "name": "verified-access-group",
337
+ "required": false,
338
+ "conditionKeys": [
339
+ "aws:ResourceTag/${TagKey}",
340
+ "ec2:ResourceTag/${TagKey}"
341
+ ],
342
+ "dependentActions": []
343
+ }
344
+ ],
345
+ "conditionKeys": [
346
+ "ec2:Region"
347
+ ],
348
+ "dependentActions": []
349
+ },
350
+ "getverifiedaccessinstancewebacl": {
351
+ "name": "GetVerifiedAccessInstanceWebAcl",
352
+ "description": "Grants permission to show the AWS Web Application Firewall (WAF) web access control list (ACL) for a Verified Access instance",
353
+ "accessLevel": "List",
354
+ "resourceTypes": [
355
+ {
356
+ "name": "verified-access-instance",
357
+ "required": true,
358
+ "conditionKeys": [
359
+ "aws:ResourceTag/${TagKey}",
360
+ "ec2:ResourceTag/${TagKey}"
361
+ ],
362
+ "dependentActions": []
363
+ }
364
+ ],
365
+ "conditionKeys": [
366
+ "ec2:Region"
367
+ ],
368
+ "dependentActions": []
369
+ },
370
+ "importbyoipcidrtoipam": {
371
+ "name": "ImportByoipCidrToIpam",
372
+ "description": "Grants permission to transfer existing BYOIP IPv4 CIDRs to IPAM",
373
+ "accessLevel": "Write",
374
+ "resourceTypes": [
375
+ {
376
+ "name": "ipam-pool",
377
+ "required": true,
378
+ "conditionKeys": [
379
+ "aws:ResourceTag/${TagKey}",
380
+ "ec2:ResourceTag/${TagKey}"
381
+ ],
382
+ "dependentActions": []
383
+ }
384
+ ],
385
+ "conditionKeys": [
386
+ "ec2:Region"
387
+ ],
388
+ "dependentActions": []
389
+ },
390
+ "injectapierror": {
391
+ "name": "InjectApiError",
392
+ "description": "Grants permission to temporarily inject errors for target API requests",
393
+ "accessLevel": "Write",
394
+ "resourceTypes": [],
395
+ "conditionKeys": [
396
+ "ec2:FisActionId",
397
+ "ec2:FisTargetArns",
398
+ "ec2:Region"
399
+ ],
400
+ "dependentActions": []
401
+ },
402
+ "injectvolumeiolatency": {
403
+ "name": "InjectVolumeIOLatency",
404
+ "description": "Grants permission to temporarily inject latency to I/O operations for a target Amazon EBS volume",
405
+ "accessLevel": "Write",
406
+ "resourceTypes": [
407
+ {
408
+ "name": "volume",
409
+ "required": true,
410
+ "conditionKeys": [
411
+ "aws:ResourceTag/${TagKey}",
412
+ "ec2:AvailabilityZone",
413
+ "ec2:AvailabilityZoneId",
414
+ "ec2:Encrypted",
415
+ "ec2:ParentSnapshot",
416
+ "ec2:ResourceTag/${TagKey}",
417
+ "ec2:VolumeID",
418
+ "ec2:VolumeIops",
419
+ "ec2:VolumeSize",
420
+ "ec2:VolumeThroughput",
421
+ "ec2:VolumeType"
422
+ ],
423
+ "dependentActions": []
424
+ }
425
+ ],
426
+ "conditionKeys": [
427
+ "ec2:Region"
428
+ ],
429
+ "dependentActions": []
430
+ },
431
+ "modifyodbnetworkpeering": {
432
+ "name": "ModifyOdbNetworkPeering",
433
+ "description": "Grants permission to allow Oracle Database@AWS to modify the settings of a peering connection between an ODB network and a VPC",
434
+ "accessLevel": "Permissions management, Write",
435
+ "resourceTypes": [
436
+ {
437
+ "name": "vpc",
438
+ "required": true,
439
+ "conditionKeys": [
440
+ "aws:ResourceTag/${TagKey}",
441
+ "ec2:Attribute/${AttributeName}",
442
+ "ec2:ResourceTag/${TagKey}",
443
+ "ec2:Tenancy",
444
+ "ec2:VpcID"
445
+ ],
446
+ "dependentActions": []
447
+ }
448
+ ],
449
+ "conditionKeys": [
450
+ "ec2:Region"
451
+ ],
452
+ "dependentActions": []
453
+ },
454
+ "pausevolumeio": {
455
+ "name": "PauseVolumeIO",
456
+ "description": "Grants permission to temporarily pause I/O operations for a target Amazon EBS volume",
457
+ "accessLevel": "Write",
458
+ "resourceTypes": [
459
+ {
460
+ "name": "instance",
461
+ "required": false,
462
+ "conditionKeys": [
463
+ "aws:ResourceTag/${TagKey}",
464
+ "ec2:AvailabilityZone",
465
+ "ec2:CpuOptionsAmdSevSnp",
466
+ "ec2:EbsOptimized",
467
+ "ec2:InstanceAutoRecovery",
468
+ "ec2:InstanceBandwidthWeighting",
469
+ "ec2:InstanceID",
470
+ "ec2:InstanceMarketType",
471
+ "ec2:InstanceMetadataTags",
472
+ "ec2:InstanceProfile",
473
+ "ec2:InstanceType",
474
+ "ec2:ManagedResourceOperator",
475
+ "ec2:MetadataHttpEndpoint",
476
+ "ec2:MetadataHttpPutResponseHopLimit",
477
+ "ec2:MetadataHttpTokens",
478
+ "ec2:ResourceTag/${TagKey}",
479
+ "ec2:RootDeviceType",
480
+ "ec2:Tenancy"
481
+ ],
482
+ "dependentActions": []
483
+ },
484
+ {
485
+ "name": "volume",
486
+ "required": true,
487
+ "conditionKeys": [
488
+ "aws:ResourceTag/${TagKey}",
489
+ "ec2:AvailabilityZone",
490
+ "ec2:AvailabilityZoneId",
491
+ "ec2:Encrypted",
492
+ "ec2:ManagedResourceOperator",
493
+ "ec2:ParentSnapshot",
494
+ "ec2:ResourceTag/${TagKey}",
495
+ "ec2:VolumeID",
496
+ "ec2:VolumeIops",
497
+ "ec2:VolumeSize",
498
+ "ec2:VolumeThroughput",
499
+ "ec2:VolumeType"
500
+ ],
501
+ "dependentActions": []
502
+ }
503
+ ],
504
+ "conditionKeys": [
505
+ "ec2:Region"
506
+ ],
507
+ "dependentActions": []
508
+ },
509
+ "putresourcepolicy": {
510
+ "name": "PutResourcePolicy",
511
+ "description": "Grants permission to attach an IAM policy that enables cross-account sharing to a resource",
512
+ "accessLevel": "Permissions management, Write",
513
+ "resourceTypes": [
514
+ {
515
+ "name": "ipam-pool",
516
+ "required": false,
517
+ "conditionKeys": [
518
+ "aws:ResourceTag/${TagKey}",
519
+ "ec2:ResourceTag/${TagKey}"
520
+ ],
521
+ "dependentActions": []
522
+ },
523
+ {
524
+ "name": "placement-group",
525
+ "required": false,
526
+ "conditionKeys": [
527
+ "aws:ResourceTag/${TagKey}",
528
+ "ec2:PlacementGroupName",
529
+ "ec2:PlacementGroupStrategy",
530
+ "ec2:ResourceTag/${TagKey}"
531
+ ],
532
+ "dependentActions": []
533
+ },
534
+ {
535
+ "name": "verified-access-group",
536
+ "required": false,
537
+ "conditionKeys": [
538
+ "aws:ResourceTag/${TagKey}",
539
+ "ec2:ResourceTag/${TagKey}"
540
+ ],
541
+ "dependentActions": []
542
+ }
543
+ ],
544
+ "conditionKeys": [
545
+ "ec2:Region"
546
+ ],
547
+ "dependentActions": []
548
+ },
549
+ "sendspotinstanceinterruptions": {
550
+ "name": "SendSpotInstanceInterruptions",
551
+ "description": "Grants permission to interrupt a Spot Instance",
552
+ "accessLevel": "Write",
553
+ "resourceTypes": [
554
+ {
555
+ "name": "instance",
556
+ "required": true,
557
+ "conditionKeys": [
558
+ "aws:ResourceTag/${TagKey}",
559
+ "ec2:AvailabilityZone",
560
+ "ec2:AvailabilityZoneId",
561
+ "ec2:CpuOptionsAmdSevSnp",
562
+ "ec2:EbsOptimized",
563
+ "ec2:InstanceAutoRecovery",
564
+ "ec2:InstanceBandwidthWeighting",
565
+ "ec2:InstanceID",
566
+ "ec2:InstanceMarketType",
567
+ "ec2:InstanceMetadataTags",
568
+ "ec2:InstanceProfile",
569
+ "ec2:InstanceType",
570
+ "ec2:ManagedResourceOperator",
571
+ "ec2:MetadataHttpEndpoint",
572
+ "ec2:MetadataHttpPutResponseHopLimit",
573
+ "ec2:MetadataHttpTokens",
574
+ "ec2:ResourceTag/${TagKey}",
575
+ "ec2:RootDeviceType",
576
+ "ec2:Tenancy"
577
+ ],
578
+ "dependentActions": []
579
+ }
580
+ ],
581
+ "conditionKeys": [
582
+ "ec2:Region"
583
+ ],
584
+ "dependentActions": []
585
+ },
2
586
  "acceptaddresstransfer": {
3
587
  "name": "AcceptAddressTransfer",
4
588
  "description": "Grants permission to accept an Elastic IP address transfer",
@@ -14,9 +598,7 @@
14
598
  "ec2:Domain",
15
599
  "ec2:PublicIpAddress"
16
600
  ],
17
- "dependentActions": [
18
- "ec2:CreateTags"
19
- ]
601
+ "dependentActions": []
20
602
  }
21
603
  ],
22
604
  "conditionKeys": [
@@ -255,9 +837,7 @@
255
837
  "aws:RequestTag/${TagKey}",
256
838
  "aws:TagKeys"
257
839
  ],
258
- "dependentActions": [
259
- "ec2:CreateTags"
260
- ]
840
+ "dependentActions": []
261
841
  },
262
842
  {
263
843
  "name": "ipam-pool",
@@ -300,9 +880,7 @@
300
880
  "ec2:InstanceType",
301
881
  "ec2:Quantity"
302
882
  ],
303
- "dependentActions": [
304
- "ec2:CreateTags"
305
- ]
883
+ "dependentActions": []
306
884
  }
307
885
  ],
308
886
  "conditionKeys": [
@@ -322,9 +900,7 @@
322
900
  "aws:ResourceTag/${TagKey}",
323
901
  "ec2:ResourceTag/${TagKey}"
324
902
  ],
325
- "dependentActions": [
326
- "ec2:CreateTags"
327
- ]
903
+ "dependentActions": []
328
904
  },
329
905
  {
330
906
  "name": "ipam-pool-allocation",
@@ -683,9 +1259,7 @@
683
1259
  "ec2:RootDeviceType",
684
1260
  "ec2:Tenancy"
685
1261
  ],
686
- "dependentActions": [
687
- "iam:PassRole"
688
- ]
1262
+ "dependentActions": []
689
1263
  }
690
1264
  ],
691
1265
  "conditionKeys": [
@@ -735,9 +1309,7 @@
735
1309
  "aws:ResourceTag/${TagKey}",
736
1310
  "ec2:ResourceTag/${TagKey}"
737
1311
  ],
738
- "dependentActions": [
739
- "ec2:CreateTags"
740
- ]
1312
+ "dependentActions": []
741
1313
  },
742
1314
  {
743
1315
  "name": "ipam-resource-discovery",
@@ -834,32 +1406,32 @@
834
1406
  "accessLevel": "Write",
835
1407
  "resourceTypes": [
836
1408
  {
837
- "name": "route-table",
838
- "required": true,
1409
+ "name": "internet-gateway",
1410
+ "required": false,
839
1411
  "conditionKeys": [
840
1412
  "aws:ResourceTag/${TagKey}",
841
- "ec2:ResourceTag/${TagKey}",
842
- "ec2:RouteTableID",
843
- "ec2:Vpc"
1413
+ "ec2:InternetGatewayID",
1414
+ "ec2:ResourceTag/${TagKey}"
844
1415
  ],
845
1416
  "dependentActions": []
846
1417
  },
847
1418
  {
848
- "name": "internet-gateway",
1419
+ "name": "ipv4pool-ec2",
849
1420
  "required": false,
850
1421
  "conditionKeys": [
851
1422
  "aws:ResourceTag/${TagKey}",
852
- "ec2:InternetGatewayID",
853
1423
  "ec2:ResourceTag/${TagKey}"
854
1424
  ],
855
1425
  "dependentActions": []
856
1426
  },
857
1427
  {
858
- "name": "ipv4pool-ec2",
859
- "required": false,
1428
+ "name": "route-table",
1429
+ "required": true,
860
1430
  "conditionKeys": [
861
1431
  "aws:ResourceTag/${TagKey}",
862
- "ec2:ResourceTag/${TagKey}"
1432
+ "ec2:ResourceTag/${TagKey}",
1433
+ "ec2:RouteTableID",
1434
+ "ec2:Vpc"
863
1435
  ],
864
1436
  "dependentActions": []
865
1437
  },
@@ -931,6 +1503,15 @@
931
1503
  "description": "Grants permission to associate a CIDR block with a subnet",
932
1504
  "accessLevel": "Write",
933
1505
  "resourceTypes": [
1506
+ {
1507
+ "name": "ipam-pool",
1508
+ "required": false,
1509
+ "conditionKeys": [
1510
+ "aws:ResourceTag/${TagKey}",
1511
+ "ec2:ResourceTag/${TagKey}"
1512
+ ],
1513
+ "dependentActions": []
1514
+ },
934
1515
  {
935
1516
  "name": "subnet",
936
1517
  "required": true,
@@ -944,15 +1525,6 @@
944
1525
  "ec2:Vpc"
945
1526
  ],
946
1527
  "dependentActions": []
947
- },
948
- {
949
- "name": "ipam-pool",
950
- "required": false,
951
- "conditionKeys": [
952
- "aws:ResourceTag/${TagKey}",
953
- "ec2:ResourceTag/${TagKey}"
954
- ],
955
- "dependentActions": []
956
1528
  }
957
1529
  ],
958
1530
  "conditionKeys": [
@@ -1076,45 +1648,11 @@
1076
1648
  ],
1077
1649
  "dependentActions": []
1078
1650
  },
1079
- "associateverifiedaccessinstancewebacl": {
1080
- "name": "AssociateVerifiedAccessInstanceWebAcl",
1081
- "isPermissionOnly": true,
1082
- "description": "Grants permission to associate an AWS Web Application Firewall (WAF) web access control list (ACL) with a Verified Access instance",
1083
- "accessLevel": "Write",
1084
- "resourceTypes": [
1085
- {
1086
- "name": "verified-access-instance",
1087
- "required": true,
1088
- "conditionKeys": [
1089
- "aws:ResourceTag/${TagKey}",
1090
- "ec2:ResourceTag/${TagKey}"
1091
- ],
1092
- "dependentActions": []
1093
- }
1094
- ],
1095
- "conditionKeys": [
1096
- "ec2:Region"
1097
- ],
1098
- "dependentActions": []
1099
- },
1100
1651
  "associatevpccidrblock": {
1101
1652
  "name": "AssociateVpcCidrBlock",
1102
1653
  "description": "Grants permission to associate a CIDR block with a VPC",
1103
1654
  "accessLevel": "Write",
1104
1655
  "resourceTypes": [
1105
- {
1106
- "name": "vpc",
1107
- "required": true,
1108
- "conditionKeys": [
1109
- "aws:ResourceTag/${TagKey}",
1110
- "ec2:Ipv4IpamPoolId",
1111
- "ec2:Ipv6IpamPoolId",
1112
- "ec2:ResourceTag/${TagKey}",
1113
- "ec2:Tenancy",
1114
- "ec2:VpcID"
1115
- ],
1116
- "dependentActions": []
1117
- },
1118
1656
  {
1119
1657
  "name": "ipam-pool",
1120
1658
  "required": false,
@@ -1132,25 +1670,17 @@
1132
1670
  "ec2:ResourceTag/${TagKey}"
1133
1671
  ],
1134
1672
  "dependentActions": []
1135
- }
1136
- ],
1137
- "conditionKeys": [
1138
- "ec2:Region"
1139
- ],
1140
- "dependentActions": []
1141
- },
1142
- "attachappliancetonatgateway": {
1143
- "name": "AttachApplianceToNatGateway",
1144
- "isPermissionOnly": true,
1145
- "description": "Grants permission to attach an appliance with a public/private Natgateway",
1146
- "accessLevel": "Permissions management",
1147
- "resourceTypes": [
1673
+ },
1148
1674
  {
1149
- "name": "natgateway",
1675
+ "name": "vpc",
1150
1676
  "required": true,
1151
1677
  "conditionKeys": [
1152
1678
  "aws:ResourceTag/${TagKey}",
1153
- "ec2:ResourceTag/${TagKey}"
1679
+ "ec2:Ipv4IpamPoolId",
1680
+ "ec2:Ipv6IpamPoolId",
1681
+ "ec2:ResourceTag/${TagKey}",
1682
+ "ec2:Tenancy",
1683
+ "ec2:VpcID"
1154
1684
  ],
1155
1685
  "dependentActions": []
1156
1686
  }
@@ -1330,29 +1860,6 @@
1330
1860
  ],
1331
1861
  "dependentActions": []
1332
1862
  },
1333
- "attachresourcestoplacementgroup": {
1334
- "name": "AttachResourcesToPlacementGroup",
1335
- "isPermissionOnly": true,
1336
- "description": "Grants permission to attach resources to a placement group",
1337
- "accessLevel": "Permissions management",
1338
- "resourceTypes": [
1339
- {
1340
- "name": "placement-group",
1341
- "required": true,
1342
- "conditionKeys": [
1343
- "aws:ResourceTag/${TagKey}",
1344
- "ec2:PlacementGroupName",
1345
- "ec2:PlacementGroupStrategy",
1346
- "ec2:ResourceTag/${TagKey}"
1347
- ],
1348
- "dependentActions": []
1349
- }
1350
- ],
1351
- "conditionKeys": [
1352
- "ec2:Region"
1353
- ],
1354
- "dependentActions": []
1355
- },
1356
1863
  "attachverifiedaccesstrustprovider": {
1357
1864
  "name": "AttachVerifiedAccessTrustProvider",
1358
1865
  "description": "Grants permission to attach a trust provider to a Verified Access instance",
@@ -1513,9 +2020,7 @@
1513
2020
  "ec2:SecurityGroupID",
1514
2021
  "ec2:Vpc"
1515
2022
  ],
1516
- "dependentActions": [
1517
- "ec2:CreateTags"
1518
- ]
2023
+ "dependentActions": []
1519
2024
  },
1520
2025
  {
1521
2026
  "name": "security-group-rule",
@@ -1546,9 +2051,7 @@
1546
2051
  "ec2:SecurityGroupID",
1547
2052
  "ec2:Vpc"
1548
2053
  ],
1549
- "dependentActions": [
1550
- "ec2:CreateTags"
1551
- ]
2054
+ "dependentActions": []
1552
2055
  },
1553
2056
  {
1554
2057
  "name": "security-group-rule",
@@ -1626,9 +2129,7 @@
1626
2129
  "aws:ResourceTag/${TagKey}",
1627
2130
  "ec2:ResourceTag/${TagKey}"
1628
2131
  ],
1629
- "dependentActions": [
1630
- "ec2:CancelCapacityReservation"
1631
- ]
2132
+ "dependentActions": []
1632
2133
  }
1633
2134
  ],
1634
2135
  "conditionKeys": [
@@ -1698,7 +2199,7 @@
1698
2199
  "cancelimagelaunchpermission": {
1699
2200
  "name": "CancelImageLaunchPermission",
1700
2201
  "description": "Grants permission to remove your AWS account from the launch permissions for the specified AMI",
1701
- "accessLevel": "Permissions management",
2202
+ "accessLevel": "Permissions management, Write",
1702
2203
  "resourceTypes": [
1703
2204
  {
1704
2205
  "name": "image",
@@ -1842,9 +2343,7 @@
1842
2343
  "ec2:ImageID",
1843
2344
  "ec2:Owner"
1844
2345
  ],
1845
- "dependentActions": [
1846
- "ec2:CreateTags"
1847
- ]
2346
+ "dependentActions": []
1848
2347
  },
1849
2348
  {
1850
2349
  "name": "snapshot",
@@ -1882,9 +2381,7 @@
1882
2381
  "ec2:SnapshotTime",
1883
2382
  "ec2:VolumeSize"
1884
2383
  ],
1885
- "dependentActions": [
1886
- "ec2:CreateTags"
1887
- ]
2384
+ "dependentActions": []
1888
2385
  }
1889
2386
  ],
1890
2387
  "conditionKeys": [
@@ -1915,9 +2412,7 @@
1915
2412
  "ec2:VolumeThroughput",
1916
2413
  "ec2:VolumeType"
1917
2414
  ],
1918
- "dependentActions": [
1919
- "ec2:CreateTags"
1920
- ]
2415
+ "dependentActions": []
1921
2416
  }
1922
2417
  ],
1923
2418
  "conditionKeys": [
@@ -1937,9 +2432,7 @@
1937
2432
  "aws:RequestTag/${TagKey}",
1938
2433
  "aws:TagKeys"
1939
2434
  ],
1940
- "dependentActions": [
1941
- "ec2:CreateTags"
1942
- ]
2435
+ "dependentActions": []
1943
2436
  }
1944
2437
  ],
1945
2438
  "conditionKeys": [
@@ -1973,9 +2466,7 @@
1973
2466
  "ec2:PlacementGroup",
1974
2467
  "ec2:Tenancy"
1975
2468
  ],
1976
- "dependentActions": [
1977
- "ec2:CreateTags"
1978
- ]
2469
+ "dependentActions": []
1979
2470
  }
1980
2471
  ],
1981
2472
  "conditionKeys": [
@@ -2010,9 +2501,7 @@
2010
2501
  "ec2:SourceCapacityReservationId",
2011
2502
  "ec2:Tenancy"
2012
2503
  ],
2013
- "dependentActions": [
2014
- "ec2:CreateTags"
2015
- ]
2504
+ "dependentActions": []
2016
2505
  }
2017
2506
  ],
2018
2507
  "conditionKeys": [
@@ -2032,9 +2521,7 @@
2032
2521
  "aws:ResourceTag/${TagKey}",
2033
2522
  "ec2:ResourceTag/${TagKey}"
2034
2523
  ],
2035
- "dependentActions": [
2036
- "ec2:CreateTags"
2037
- ]
2524
+ "dependentActions": []
2038
2525
  },
2039
2526
  {
2040
2527
  "name": "capacity-reservation-cancellation-quote",
@@ -2063,12 +2550,7 @@
2063
2550
  "aws:RequestTag/${TagKey}",
2064
2551
  "aws:TagKeys"
2065
2552
  ],
2066
- "dependentActions": [
2067
- "ec2:CreateCapacityReservation",
2068
- "ec2:CreateTags",
2069
- "ec2:DescribeCapacityReservations",
2070
- "ec2:DescribeInstances"
2071
- ]
2553
+ "dependentActions": []
2072
2554
  }
2073
2555
  ],
2074
2556
  "conditionKeys": [
@@ -2088,9 +2570,7 @@
2088
2570
  "aws:RequestTag/${TagKey}",
2089
2571
  "aws:TagKeys"
2090
2572
  ],
2091
- "dependentActions": [
2092
- "ec2:CreateTags"
2093
- ]
2573
+ "dependentActions": []
2094
2574
  },
2095
2575
  {
2096
2576
  "name": "vpc",
@@ -2127,9 +2607,7 @@
2127
2607
  "ec2:SamlProviderArn",
2128
2608
  "ec2:ServerCertificateArn"
2129
2609
  ],
2130
- "dependentActions": [
2131
- "ec2:CreateTags"
2132
- ]
2610
+ "dependentActions": []
2133
2611
  },
2134
2612
  {
2135
2613
  "name": "security-group",
@@ -2236,9 +2714,7 @@
2236
2714
  "aws:RequestTag/${TagKey}",
2237
2715
  "aws:TagKeys"
2238
2716
  ],
2239
- "dependentActions": [
2240
- "ec2:CreateTags"
2241
- ]
2717
+ "dependentActions": []
2242
2718
  },
2243
2719
  {
2244
2720
  "name": "local-gateway-route-table",
@@ -2255,27 +2731,6 @@
2255
2731
  ],
2256
2732
  "dependentActions": []
2257
2733
  },
2258
- "createcoippoolpermission": {
2259
- "name": "CreateCoipPoolPermission",
2260
- "isPermissionOnly": true,
2261
- "description": "Grants permission to allow a service to access a customer-owned IP (CoIP) pool",
2262
- "accessLevel": "Permissions management",
2263
- "resourceTypes": [
2264
- {
2265
- "name": "coip-pool",
2266
- "required": true,
2267
- "conditionKeys": [
2268
- "aws:ResourceTag/${TagKey}",
2269
- "ec2:ResourceTag/${TagKey}"
2270
- ],
2271
- "dependentActions": []
2272
- }
2273
- ],
2274
- "conditionKeys": [
2275
- "ec2:Region"
2276
- ],
2277
- "dependentActions": []
2278
- },
2279
2734
  "createcustomergateway": {
2280
2735
  "name": "CreateCustomerGateway",
2281
2736
  "description": "Grants permission to create a customer gateway, which provides information to AWS about your customer gateway device",
@@ -2288,9 +2743,7 @@
2288
2743
  "aws:RequestTag/${TagKey}",
2289
2744
  "aws:TagKeys"
2290
2745
  ],
2291
- "dependentActions": [
2292
- "ec2:CreateTags"
2293
- ]
2746
+ "dependentActions": []
2294
2747
  }
2295
2748
  ],
2296
2749
  "conditionKeys": [
@@ -2344,9 +2797,7 @@
2344
2797
  "ec2:RootDeviceType",
2345
2798
  "ec2:Tenancy"
2346
2799
  ],
2347
- "dependentActions": [
2348
- "ec2:CreateTags"
2349
- ]
2800
+ "dependentActions": []
2350
2801
  },
2351
2802
  {
2352
2803
  "name": "mac-modification-task",
@@ -2376,9 +2827,7 @@
2376
2827
  "aws:TagKeys",
2377
2828
  "ec2:DhcpOptionsID"
2378
2829
  ],
2379
- "dependentActions": [
2380
- "ec2:CreateTags"
2381
- ]
2830
+ "dependentActions": []
2382
2831
  }
2383
2832
  ],
2384
2833
  "conditionKeys": [
@@ -2398,9 +2847,7 @@
2398
2847
  "aws:RequestTag/${TagKey}",
2399
2848
  "aws:TagKeys"
2400
2849
  ],
2401
- "dependentActions": [
2402
- "ec2:CreateTags"
2403
- ]
2850
+ "dependentActions": []
2404
2851
  },
2405
2852
  {
2406
2853
  "name": "vpc",
@@ -2431,9 +2878,21 @@
2431
2878
  "aws:RequestTag/${TagKey}",
2432
2879
  "aws:TagKeys"
2433
2880
  ],
2434
- "dependentActions": [
2435
- "ec2:CreateTags"
2436
- ]
2881
+ "dependentActions": []
2882
+ },
2883
+ {
2884
+ "name": "image",
2885
+ "required": false,
2886
+ "conditionKeys": [
2887
+ "aws:ResourceTag/${TagKey}",
2888
+ "ec2:ImageID",
2889
+ "ec2:ImageType",
2890
+ "ec2:Owner",
2891
+ "ec2:Public",
2892
+ "ec2:ResourceTag/${TagKey}",
2893
+ "ec2:RootDeviceType"
2894
+ ],
2895
+ "dependentActions": []
2437
2896
  },
2438
2897
  {
2439
2898
  "name": "instance",
@@ -2455,20 +2914,6 @@
2455
2914
  ],
2456
2915
  "dependentActions": []
2457
2916
  },
2458
- {
2459
- "name": "image",
2460
- "required": false,
2461
- "conditionKeys": [
2462
- "aws:ResourceTag/${TagKey}",
2463
- "ec2:ImageID",
2464
- "ec2:ImageType",
2465
- "ec2:Owner",
2466
- "ec2:Public",
2467
- "ec2:ResourceTag/${TagKey}",
2468
- "ec2:RootDeviceType"
2469
- ],
2470
- "dependentActions": []
2471
- },
2472
2917
  {
2473
2918
  "name": "launch-template",
2474
2919
  "required": false,
@@ -2532,26 +2977,6 @@
2532
2977
  "description": "Grants permission to create one or more flow logs to capture IP traffic for a network interface",
2533
2978
  "accessLevel": "Write",
2534
2979
  "resourceTypes": [
2535
- {
2536
- "name": "vpc-flow-log",
2537
- "required": true,
2538
- "conditionKeys": [
2539
- "aws:RequestTag/${TagKey}",
2540
- "aws:TagKeys"
2541
- ],
2542
- "dependentActions": [
2543
- "autoscaling:DescribeTags",
2544
- "ec2:CreateTags",
2545
- "ec2:DescribeTags",
2546
- "ecs:ListClusters",
2547
- "ecs:ListContainerInstances",
2548
- "ecs:ListServices",
2549
- "ecs:ListTaskDefinitions",
2550
- "ecs:ListTasks",
2551
- "iam:CreateServiceLinkedRole",
2552
- "iam:PassRole"
2553
- ]
2554
- },
2555
2980
  {
2556
2981
  "name": "natgateway",
2557
2982
  "required": false,
@@ -2617,6 +3042,15 @@
2617
3042
  "ec2:VpcID"
2618
3043
  ],
2619
3044
  "dependentActions": []
3045
+ },
3046
+ {
3047
+ "name": "vpc-flow-log",
3048
+ "required": true,
3049
+ "conditionKeys": [
3050
+ "aws:RequestTag/${TagKey}",
3051
+ "aws:TagKeys"
3052
+ ],
3053
+ "dependentActions": []
2620
3054
  }
2621
3055
  ],
2622
3056
  "conditionKeys": [
@@ -2638,9 +3072,7 @@
2638
3072
  "ec2:Owner",
2639
3073
  "ec2:Public"
2640
3074
  ],
2641
- "dependentActions": [
2642
- "ec2:CreateTags"
2643
- ]
3075
+ "dependentActions": []
2644
3076
  }
2645
3077
  ],
2646
3078
  "conditionKeys": [
@@ -2662,9 +3094,7 @@
2662
3094
  "ec2:ImageID",
2663
3095
  "ec2:Owner"
2664
3096
  ],
2665
- "dependentActions": [
2666
- "ec2:CreateTags"
2667
- ]
3097
+ "dependentActions": []
2668
3098
  },
2669
3099
  {
2670
3100
  "name": "instance",
@@ -2732,9 +3162,7 @@
2732
3162
  "ec2:ResourceTag/${TagKey}",
2733
3163
  "ec2:RootDeviceType"
2734
3164
  ],
2735
- "dependentActions": [
2736
- "ec2:CreateTags"
2737
- ]
3165
+ "dependentActions": []
2738
3166
  },
2739
3167
  {
2740
3168
  "name": "image-usage-report",
@@ -2764,30 +3192,28 @@
2764
3192
  "aws:TagKeys",
2765
3193
  "ec2:SubnetID"
2766
3194
  ],
2767
- "dependentActions": [
2768
- "ec2:CreateTags"
2769
- ]
3195
+ "dependentActions": []
2770
3196
  },
2771
3197
  {
2772
- "name": "subnet",
2773
- "required": true,
3198
+ "name": "security-group",
3199
+ "required": false,
2774
3200
  "conditionKeys": [
2775
3201
  "aws:ResourceTag/${TagKey}",
2776
- "ec2:AvailabilityZone",
2777
- "ec2:AvailabilityZoneId",
2778
3202
  "ec2:ResourceTag/${TagKey}",
2779
- "ec2:SubnetID",
3203
+ "ec2:SecurityGroupID",
2780
3204
  "ec2:Vpc"
2781
3205
  ],
2782
3206
  "dependentActions": []
2783
3207
  },
2784
3208
  {
2785
- "name": "security-group",
2786
- "required": false,
3209
+ "name": "subnet",
3210
+ "required": true,
2787
3211
  "conditionKeys": [
2788
3212
  "aws:ResourceTag/${TagKey}",
3213
+ "ec2:AvailabilityZone",
3214
+ "ec2:AvailabilityZoneId",
2789
3215
  "ec2:ResourceTag/${TagKey}",
2790
- "ec2:SecurityGroupID",
3216
+ "ec2:SubnetID",
2791
3217
  "ec2:Vpc"
2792
3218
  ],
2793
3219
  "dependentActions": []
@@ -2810,9 +3236,7 @@
2810
3236
  "aws:RequestTag/${TagKey}",
2811
3237
  "aws:TagKeys"
2812
3238
  ],
2813
- "dependentActions": [
2814
- "ec2:CreateTags"
2815
- ]
3239
+ "dependentActions": []
2816
3240
  }
2817
3241
  ],
2818
3242
  "conditionKeys": [
@@ -2832,9 +3256,7 @@
2832
3256
  "aws:RequestTag/${TagKey}",
2833
3257
  "aws:TagKeys"
2834
3258
  ],
2835
- "dependentActions": [
2836
- "ec2:CreateTags"
2837
- ]
3259
+ "dependentActions": []
2838
3260
  },
2839
3261
  {
2840
3262
  "name": "instance",
@@ -2882,9 +3304,7 @@
2882
3304
  "aws:TagKeys",
2883
3305
  "ec2:InternetGatewayID"
2884
3306
  ],
2885
- "dependentActions": [
2886
- "ec2:CreateTags"
2887
- ]
3307
+ "dependentActions": []
2888
3308
  }
2889
3309
  ],
2890
3310
  "conditionKeys": [
@@ -2920,9 +3340,7 @@
2920
3340
  "ec2:TargetInstanceCount",
2921
3341
  "ec2:Tenancy"
2922
3342
  ],
2923
- "dependentActions": [
2924
- "ec2:CreateTags"
2925
- ]
3343
+ "dependentActions": []
2926
3344
  }
2927
3345
  ],
2928
3346
  "conditionKeys": [
@@ -2942,10 +3360,7 @@
2942
3360
  "aws:RequestTag/${TagKey}",
2943
3361
  "aws:TagKeys"
2944
3362
  ],
2945
- "dependentActions": [
2946
- "ec2:CreateTags",
2947
- "iam:CreateServiceLinkedRole"
2948
- ]
3363
+ "dependentActions": []
2949
3364
  }
2950
3365
  ],
2951
3366
  "conditionKeys": [
@@ -2965,9 +3380,7 @@
2965
3380
  "aws:ResourceTag/${TagKey}",
2966
3381
  "ec2:ResourceTag/${TagKey}"
2967
3382
  ],
2968
- "dependentActions": [
2969
- "ec2:CreateTags"
2970
- ]
3383
+ "dependentActions": []
2971
3384
  },
2972
3385
  {
2973
3386
  "name": "ipam-external-resource-verification-token",
@@ -2996,9 +3409,7 @@
2996
3409
  "aws:ResourceTag/${TagKey}",
2997
3410
  "ec2:ResourceTag/${TagKey}"
2998
3411
  ],
2999
- "dependentActions": [
3000
- "ec2:CreateTags"
3001
- ]
3412
+ "dependentActions": []
3002
3413
  },
3003
3414
  {
3004
3415
  "name": "ipam-policy",
@@ -3027,9 +3438,7 @@
3027
3438
  "aws:RequestTag/${TagKey}",
3028
3439
  "aws:TagKeys"
3029
3440
  ],
3030
- "dependentActions": [
3031
- "ec2:CreateTags"
3032
- ]
3441
+ "dependentActions": []
3033
3442
  },
3034
3443
  {
3035
3444
  "name": "ipam-scope",
@@ -3058,9 +3467,7 @@
3058
3467
  "aws:ResourceTag/${TagKey}",
3059
3468
  "ec2:ResourceTag/${TagKey}"
3060
3469
  ],
3061
- "dependentActions": [
3062
- "ec2:CreateTags"
3063
- ]
3470
+ "dependentActions": []
3064
3471
  },
3065
3472
  {
3066
3473
  "name": "ipam-prefix-list-resolver",
@@ -3098,9 +3505,7 @@
3098
3505
  "aws:ResourceTag/${TagKey}",
3099
3506
  "ec2:ResourceTag/${TagKey}"
3100
3507
  ],
3101
- "dependentActions": [
3102
- "ec2:CreateTags"
3103
- ]
3508
+ "dependentActions": []
3104
3509
  },
3105
3510
  {
3106
3511
  "name": "ipam-prefix-list-resolver-target",
@@ -3129,10 +3534,7 @@
3129
3534
  "aws:RequestTag/${TagKey}",
3130
3535
  "aws:TagKeys"
3131
3536
  ],
3132
- "dependentActions": [
3133
- "ec2:CreateTags",
3134
- "iam:CreateServiceLinkedRole"
3135
- ]
3537
+ "dependentActions": []
3136
3538
  }
3137
3539
  ],
3138
3540
  "conditionKeys": [
@@ -3152,9 +3554,7 @@
3152
3554
  "aws:ResourceTag/${TagKey}",
3153
3555
  "ec2:ResourceTag/${TagKey}"
3154
3556
  ],
3155
- "dependentActions": [
3156
- "ec2:CreateTags"
3157
- ]
3557
+ "dependentActions": []
3158
3558
  },
3159
3559
  {
3160
3560
  "name": "ipam-scope",
@@ -3184,9 +3584,7 @@
3184
3584
  "aws:TagKeys",
3185
3585
  "ec2:KeyPairType"
3186
3586
  ],
3187
- "dependentActions": [
3188
- "ec2:CreateTags"
3189
- ]
3587
+ "dependentActions": []
3190
3588
  }
3191
3589
  ],
3192
3590
  "conditionKeys": [
@@ -3206,10 +3604,7 @@
3206
3604
  "aws:RequestTag/${TagKey}",
3207
3605
  "aws:TagKeys"
3208
3606
  ],
3209
- "dependentActions": [
3210
- "ec2:CreateTags",
3211
- "ssm:GetParameters"
3212
- ]
3607
+ "dependentActions": []
3213
3608
  }
3214
3609
  ],
3215
3610
  "conditionKeys": [
@@ -3230,9 +3625,7 @@
3230
3625
  "ec2:ManagedResourceOperator",
3231
3626
  "ec2:ResourceTag/${TagKey}"
3232
3627
  ],
3233
- "dependentActions": [
3234
- "ssm:GetParameters"
3235
- ]
3628
+ "dependentActions": []
3236
3629
  }
3237
3630
  ],
3238
3631
  "conditionKeys": [
@@ -3303,9 +3696,7 @@
3303
3696
  "aws:ResourceTag/${TagKey}",
3304
3697
  "ec2:ResourceTag/${TagKey}"
3305
3698
  ],
3306
- "dependentActions": [
3307
- "ec2:CreateTags"
3308
- ]
3699
+ "dependentActions": []
3309
3700
  },
3310
3701
  {
3311
3702
  "name": "local-gateway-route-table",
@@ -3322,27 +3713,6 @@
3322
3713
  ],
3323
3714
  "dependentActions": []
3324
3715
  },
3325
- "createlocalgatewayroutetablepermission": {
3326
- "name": "CreateLocalGatewayRouteTablePermission",
3327
- "isPermissionOnly": true,
3328
- "description": "Grants permission to allow a service to access a local gateway route table",
3329
- "accessLevel": "Permissions management",
3330
- "resourceTypes": [
3331
- {
3332
- "name": "local-gateway-route-table",
3333
- "required": true,
3334
- "conditionKeys": [
3335
- "aws:ResourceTag/${TagKey}",
3336
- "ec2:ResourceTag/${TagKey}"
3337
- ],
3338
- "dependentActions": []
3339
- }
3340
- ],
3341
- "conditionKeys": [
3342
- "ec2:Region"
3343
- ],
3344
- "dependentActions": []
3345
- },
3346
3716
  "createlocalgatewayroutetablevirtualinterfacegroupassociation": {
3347
3717
  "name": "CreateLocalGatewayRouteTableVirtualInterfaceGroupAssociation",
3348
3718
  "description": "Grants permission to create a local gateway route table virtual interface group association",
@@ -3355,9 +3725,7 @@
3355
3725
  "aws:ResourceTag/${TagKey}",
3356
3726
  "ec2:ResourceTag/${TagKey}"
3357
3727
  ],
3358
- "dependentActions": [
3359
- "ec2:CreateTags"
3360
- ]
3728
+ "dependentActions": []
3361
3729
  },
3362
3730
  {
3363
3731
  "name": "local-gateway-route-table-virtual-interface-group-association",
@@ -3395,9 +3763,7 @@
3395
3763
  "aws:ResourceTag/${TagKey}",
3396
3764
  "ec2:ResourceTag/${TagKey}"
3397
3765
  ],
3398
- "dependentActions": [
3399
- "ec2:CreateTags"
3400
- ]
3766
+ "dependentActions": []
3401
3767
  },
3402
3768
  {
3403
3769
  "name": "local-gateway-route-table-vpc-association",
@@ -3437,9 +3803,7 @@
3437
3803
  "aws:RequestTag/${TagKey}",
3438
3804
  "aws:TagKeys"
3439
3805
  ],
3440
- "dependentActions": [
3441
- "ec2:CreateTags"
3442
- ]
3806
+ "dependentActions": []
3443
3807
  },
3444
3808
  {
3445
3809
  "name": "local-gateway-virtual-interface-group",
@@ -3477,9 +3841,7 @@
3477
3841
  "aws:ResourceTag/${TagKey}",
3478
3842
  "ec2:ResourceTag/${TagKey}"
3479
3843
  ],
3480
- "dependentActions": [
3481
- "ec2:CreateTags"
3482
- ]
3844
+ "dependentActions": []
3483
3845
  },
3484
3846
  {
3485
3847
  "name": "local-gateway-virtual-interface-group",
@@ -3522,9 +3884,7 @@
3522
3884
  "ec2:RootDeviceType",
3523
3885
  "ec2:Tenancy"
3524
3886
  ],
3525
- "dependentActions": [
3526
- "ec2:CreateTags"
3527
- ]
3887
+ "dependentActions": []
3528
3888
  },
3529
3889
  {
3530
3890
  "name": "mac-modification-task",
@@ -3553,9 +3913,7 @@
3553
3913
  "aws:RequestTag/${TagKey}",
3554
3914
  "aws:TagKeys"
3555
3915
  ],
3556
- "dependentActions": [
3557
- "ec2:CreateTags"
3558
- ]
3916
+ "dependentActions": []
3559
3917
  }
3560
3918
  ],
3561
3919
  "conditionKeys": [
@@ -3568,17 +3926,6 @@
3568
3926
  "description": "Grants permission to create a NAT gateway in a subnet",
3569
3927
  "accessLevel": "Write",
3570
3928
  "resourceTypes": [
3571
- {
3572
- "name": "natgateway",
3573
- "required": true,
3574
- "conditionKeys": [
3575
- "aws:RequestTag/${TagKey}",
3576
- "aws:TagKeys"
3577
- ],
3578
- "dependentActions": [
3579
- "ec2:CreateTags"
3580
- ]
3581
- },
3582
3929
  {
3583
3930
  "name": "elastic-ip",
3584
3931
  "required": false,
@@ -3591,6 +3938,15 @@
3591
3938
  ],
3592
3939
  "dependentActions": []
3593
3940
  },
3941
+ {
3942
+ "name": "natgateway",
3943
+ "required": true,
3944
+ "conditionKeys": [
3945
+ "aws:RequestTag/${TagKey}",
3946
+ "aws:TagKeys"
3947
+ ],
3948
+ "dependentActions": []
3949
+ },
3594
3950
  {
3595
3951
  "name": "subnet",
3596
3952
  "required": false,
@@ -3636,9 +3992,7 @@
3636
3992
  "aws:TagKeys",
3637
3993
  "ec2:NetworkAclID"
3638
3994
  ],
3639
- "dependentActions": [
3640
- "ec2:CreateTags"
3641
- ]
3995
+ "dependentActions": []
3642
3996
  },
3643
3997
  {
3644
3998
  "name": "vpc",
@@ -3691,9 +4045,7 @@
3691
4045
  "aws:RequestTag/${TagKey}",
3692
4046
  "aws:TagKeys"
3693
4047
  ],
3694
- "dependentActions": [
3695
- "ec2:CreateTags"
3696
- ]
4048
+ "dependentActions": []
3697
4049
  }
3698
4050
  ],
3699
4051
  "conditionKeys": [
@@ -3706,17 +4058,6 @@
3706
4058
  "description": "Grants permission to create a path to analyze for reachability",
3707
4059
  "accessLevel": "Write",
3708
4060
  "resourceTypes": [
3709
- {
3710
- "name": "network-insights-path",
3711
- "required": true,
3712
- "conditionKeys": [
3713
- "aws:RequestTag/${TagKey}",
3714
- "aws:TagKeys"
3715
- ],
3716
- "dependentActions": [
3717
- "ec2:CreateTags"
3718
- ]
3719
- },
3720
4061
  {
3721
4062
  "name": "instance",
3722
4063
  "required": false,
@@ -3754,6 +4095,15 @@
3754
4095
  ],
3755
4096
  "dependentActions": []
3756
4097
  },
4098
+ {
4099
+ "name": "network-insights-path",
4100
+ "required": true,
4101
+ "conditionKeys": [
4102
+ "aws:RequestTag/${TagKey}",
4103
+ "aws:TagKeys"
4104
+ ],
4105
+ "dependentActions": []
4106
+ },
3757
4107
  {
3758
4108
  "name": "network-interface",
3759
4109
  "required": false,
@@ -3835,30 +4185,28 @@
3835
4185
  "aws:TagKeys",
3836
4186
  "ec2:NetworkInterfaceID"
3837
4187
  ],
3838
- "dependentActions": [
3839
- "ec2:CreateTags"
3840
- ]
4188
+ "dependentActions": []
3841
4189
  },
3842
4190
  {
3843
- "name": "subnet",
3844
- "required": true,
4191
+ "name": "security-group",
4192
+ "required": false,
3845
4193
  "conditionKeys": [
3846
4194
  "aws:ResourceTag/${TagKey}",
3847
- "ec2:AvailabilityZone",
3848
- "ec2:AvailabilityZoneId",
3849
4195
  "ec2:ResourceTag/${TagKey}",
3850
- "ec2:SubnetID",
4196
+ "ec2:SecurityGroupID",
3851
4197
  "ec2:Vpc"
3852
4198
  ],
3853
4199
  "dependentActions": []
3854
4200
  },
3855
4201
  {
3856
- "name": "security-group",
3857
- "required": false,
4202
+ "name": "subnet",
4203
+ "required": true,
3858
4204
  "conditionKeys": [
3859
4205
  "aws:ResourceTag/${TagKey}",
4206
+ "ec2:AvailabilityZone",
4207
+ "ec2:AvailabilityZoneId",
3860
4208
  "ec2:ResourceTag/${TagKey}",
3861
- "ec2:SecurityGroupID",
4209
+ "ec2:SubnetID",
3862
4210
  "ec2:Vpc"
3863
4211
  ],
3864
4212
  "dependentActions": []
@@ -3872,7 +4220,7 @@
3872
4220
  "createnetworkinterfacepermission": {
3873
4221
  "name": "CreateNetworkInterfacePermission",
3874
4222
  "description": "Grants permission to create a permission for an AWS-authorized user to perform certain operations on a network interface",
3875
- "accessLevel": "Permissions management",
4223
+ "accessLevel": "Permissions management, Write",
3876
4224
  "resourceTypes": [
3877
4225
  {
3878
4226
  "name": "network-interface",
@@ -3897,29 +4245,6 @@
3897
4245
  ],
3898
4246
  "dependentActions": []
3899
4247
  },
3900
- "createodbnetworkpeering": {
3901
- "name": "CreateOdbNetworkPeering",
3902
- "isPermissionOnly": true,
3903
- "description": "Grants permission to allow Oracle Database@AWS to create a peering connection between an ODB network and a VPC",
3904
- "accessLevel": "Permissions management",
3905
- "resourceTypes": [
3906
- {
3907
- "name": "vpc",
3908
- "required": true,
3909
- "conditionKeys": [
3910
- "aws:ResourceTag/${TagKey}",
3911
- "ec2:ResourceTag/${TagKey}",
3912
- "ec2:Tenancy",
3913
- "ec2:VpcID"
3914
- ],
3915
- "dependentActions": []
3916
- }
3917
- ],
3918
- "conditionKeys": [
3919
- "ec2:Region"
3920
- ],
3921
- "dependentActions": []
3922
- },
3923
4248
  "createplacementgroup": {
3924
4249
  "name": "CreatePlacementGroup",
3925
4250
  "description": "Grants permission to create a placement group",
@@ -3934,9 +4259,7 @@
3934
4259
  "ec2:PlacementGroupName",
3935
4260
  "ec2:PlacementGroupStrategy"
3936
4261
  ],
3937
- "dependentActions": [
3938
- "ec2:CreateTags"
3939
- ]
4262
+ "dependentActions": []
3940
4263
  }
3941
4264
  ],
3942
4265
  "conditionKeys": [
@@ -3956,9 +4279,7 @@
3956
4279
  "aws:RequestTag/${TagKey}",
3957
4280
  "aws:TagKeys"
3958
4281
  ],
3959
- "dependentActions": [
3960
- "ec2:CreateTags"
3961
- ]
4282
+ "dependentActions": []
3962
4283
  }
3963
4284
  ],
3964
4285
  "conditionKeys": [
@@ -3971,6 +4292,20 @@
3971
4292
  "description": "Grants permission to create a root volume replacement task",
3972
4293
  "accessLevel": "Write",
3973
4294
  "resourceTypes": [
4295
+ {
4296
+ "name": "image",
4297
+ "required": false,
4298
+ "conditionKeys": [
4299
+ "aws:ResourceTag/${TagKey}",
4300
+ "ec2:ImageID",
4301
+ "ec2:ImageType",
4302
+ "ec2:Owner",
4303
+ "ec2:Public",
4304
+ "ec2:ResourceTag/${TagKey}",
4305
+ "ec2:RootDeviceType"
4306
+ ],
4307
+ "dependentActions": []
4308
+ },
3974
4309
  {
3975
4310
  "name": "instance",
3976
4311
  "required": true,
@@ -3997,41 +4332,14 @@
3997
4332
  "ec2:RootDeviceType",
3998
4333
  "ec2:Tenancy"
3999
4334
  ],
4000
- "dependentActions": [
4001
- "ec2:CreateTags"
4002
- ]
4003
- },
4004
- {
4005
- "name": "replace-root-volume-task",
4006
- "required": true,
4007
- "conditionKeys": [
4008
- "aws:RequestTag/${TagKey}",
4009
- "aws:TagKeys"
4010
- ],
4011
- "dependentActions": []
4012
- },
4013
- {
4014
- "name": "volume",
4015
- "required": true,
4016
- "conditionKeys": [
4017
- "aws:RequestTag/${TagKey}",
4018
- "aws:TagKeys",
4019
- "ec2:VolumeID",
4020
- "ec2:VolumeInitializationRate"
4021
- ],
4022
4335
  "dependentActions": []
4023
4336
  },
4024
4337
  {
4025
- "name": "image",
4026
- "required": false,
4027
- "conditionKeys": [
4028
- "aws:ResourceTag/${TagKey}",
4029
- "ec2:ImageID",
4030
- "ec2:ImageType",
4031
- "ec2:Owner",
4032
- "ec2:Public",
4033
- "ec2:ResourceTag/${TagKey}",
4034
- "ec2:RootDeviceType"
4338
+ "name": "replace-root-volume-task",
4339
+ "required": true,
4340
+ "conditionKeys": [
4341
+ "aws:RequestTag/${TagKey}",
4342
+ "aws:TagKeys"
4035
4343
  ],
4036
4344
  "dependentActions": []
4037
4345
  },
@@ -4048,6 +4356,17 @@
4048
4356
  "ec2:VolumeSize"
4049
4357
  ],
4050
4358
  "dependentActions": []
4359
+ },
4360
+ {
4361
+ "name": "volume",
4362
+ "required": true,
4363
+ "conditionKeys": [
4364
+ "aws:RequestTag/${TagKey}",
4365
+ "aws:TagKeys",
4366
+ "ec2:VolumeID",
4367
+ "ec2:VolumeInitializationRate"
4368
+ ],
4369
+ "dependentActions": []
4051
4370
  }
4052
4371
  ],
4053
4372
  "conditionKeys": [
@@ -4079,9 +4398,7 @@
4079
4398
  "ec2:ImageID",
4080
4399
  "ec2:Owner"
4081
4400
  ],
4082
- "dependentActions": [
4083
- "ec2:CreateTags"
4084
- ]
4401
+ "dependentActions": []
4085
4402
  }
4086
4403
  ],
4087
4404
  "conditionKeys": [
@@ -4094,6 +4411,12 @@
4094
4411
  "description": "Grants permission to create a route in a VPC route table",
4095
4412
  "accessLevel": "Write",
4096
4413
  "resourceTypes": [
4414
+ {
4415
+ "name": "instance",
4416
+ "required": false,
4417
+ "conditionKeys": [],
4418
+ "dependentActions": []
4419
+ },
4097
4420
  {
4098
4421
  "name": "route-table",
4099
4422
  "required": true,
@@ -4123,10 +4446,7 @@
4123
4446
  "aws:RequestTag/${TagKey}",
4124
4447
  "aws:TagKeys"
4125
4448
  ],
4126
- "dependentActions": [
4127
- "ec2:CreateTags",
4128
- "sns:CreateTopic"
4129
- ]
4449
+ "dependentActions": []
4130
4450
  }
4131
4451
  ],
4132
4452
  "conditionKeys": [
@@ -4146,14 +4466,7 @@
4146
4466
  "aws:ResourceTag/${TagKey}",
4147
4467
  "ec2:ResourceTag/${TagKey}"
4148
4468
  ],
4149
- "dependentActions": [
4150
- "ec2:AuthorizeSecurityGroupIngress",
4151
- "ec2:CreateNetworkInterface",
4152
- "ec2:CreateNetworkInterfacePermission",
4153
- "ec2:CreateSecurityGroup",
4154
- "ec2:CreateTags",
4155
- "ec2:DescribeSecurityGroups"
4156
- ]
4469
+ "dependentActions": []
4157
4470
  },
4158
4471
  {
4159
4472
  "name": "route-server-endpoint",
@@ -4197,10 +4510,7 @@
4197
4510
  "ec2:AvailabilityZone",
4198
4511
  "ec2:ResourceTag/${TagKey}"
4199
4512
  ],
4200
- "dependentActions": [
4201
- "ec2:AuthorizeSecurityGroupIngress",
4202
- "ec2:CreateTags"
4203
- ]
4513
+ "dependentActions": []
4204
4514
  },
4205
4515
  {
4206
4516
  "name": "route-server-peer",
@@ -4231,9 +4541,7 @@
4231
4541
  "aws:TagKeys",
4232
4542
  "ec2:RouteTableID"
4233
4543
  ],
4234
- "dependentActions": [
4235
- "ec2:CreateTags"
4236
- ]
4544
+ "dependentActions": []
4237
4545
  },
4238
4546
  {
4239
4547
  "name": "vpc",
@@ -4264,9 +4572,7 @@
4264
4572
  "aws:RequestTag/${TagKey}",
4265
4573
  "aws:TagKeys"
4266
4574
  ],
4267
- "dependentActions": [
4268
- "ec2:CreateTags"
4269
- ]
4575
+ "dependentActions": []
4270
4576
  }
4271
4577
  ],
4272
4578
  "conditionKeys": [
@@ -4286,9 +4592,7 @@
4286
4592
  "aws:ResourceTag/${TagKey}",
4287
4593
  "ec2:ResourceTag/${TagKey}"
4288
4594
  ],
4289
- "dependentActions": [
4290
- "ec2:CreateTags"
4291
- ]
4595
+ "dependentActions": []
4292
4596
  },
4293
4597
  {
4294
4598
  "name": "secondary-subnet",
@@ -4318,9 +4622,7 @@
4318
4622
  "aws:TagKeys",
4319
4623
  "ec2:SecurityGroupID"
4320
4624
  ],
4321
- "dependentActions": [
4322
- "ec2:CreateTags"
4323
- ]
4625
+ "dependentActions": []
4324
4626
  },
4325
4627
  {
4326
4628
  "name": "vpc",
@@ -4358,9 +4660,7 @@
4358
4660
  "ec2:SourceOutpostArn",
4359
4661
  "ec2:VolumeSize"
4360
4662
  ],
4361
- "dependentActions": [
4362
- "ec2:CreateTags"
4363
- ]
4663
+ "dependentActions": []
4364
4664
  },
4365
4665
  {
4366
4666
  "name": "volume",
@@ -4409,9 +4709,7 @@
4409
4709
  "ec2:RootDeviceType",
4410
4710
  "ec2:Tenancy"
4411
4711
  ],
4412
- "dependentActions": [
4413
- "ec2:CreateTags"
4414
- ]
4712
+ "dependentActions": []
4415
4713
  },
4416
4714
  {
4417
4715
  "name": "snapshot",
@@ -4491,6 +4789,15 @@
4491
4789
  "description": "Grants permission to create a subnet in a VPC",
4492
4790
  "accessLevel": "Write",
4493
4791
  "resourceTypes": [
4792
+ {
4793
+ "name": "ipam-pool",
4794
+ "required": false,
4795
+ "conditionKeys": [
4796
+ "aws:ResourceTag/${TagKey}",
4797
+ "ec2:ResourceTag/${TagKey}"
4798
+ ],
4799
+ "dependentActions": []
4800
+ },
4494
4801
  {
4495
4802
  "name": "subnet",
4496
4803
  "required": true,
@@ -4501,9 +4808,7 @@
4501
4808
  "ec2:Ipv6IpamPoolId",
4502
4809
  "ec2:SubnetID"
4503
4810
  ],
4504
- "dependentActions": [
4505
- "ec2:CreateTags"
4506
- ]
4811
+ "dependentActions": []
4507
4812
  },
4508
4813
  {
4509
4814
  "name": "vpc",
@@ -4515,15 +4820,6 @@
4515
4820
  "ec2:VpcID"
4516
4821
  ],
4517
4822
  "dependentActions": []
4518
- },
4519
- {
4520
- "name": "ipam-pool",
4521
- "required": false,
4522
- "conditionKeys": [
4523
- "aws:ResourceTag/${TagKey}",
4524
- "ec2:ResourceTag/${TagKey}"
4525
- ],
4526
- "dependentActions": []
4527
4823
  }
4528
4824
  ],
4529
4825
  "conditionKeys": [
@@ -4547,9 +4843,7 @@
4547
4843
  "ec2:SubnetID",
4548
4844
  "ec2:Vpc"
4549
4845
  ],
4550
- "dependentActions": [
4551
- "ec2:CreateTags"
4552
- ]
4846
+ "dependentActions": []
4553
4847
  }
4554
4848
  ],
4555
4849
  "conditionKeys": [
@@ -4560,7 +4854,7 @@
4560
4854
  "createtags": {
4561
4855
  "name": "CreateTags",
4562
4856
  "description": "Grants permission to add or overwrite one or more tags for Amazon EC2 resources",
4563
- "accessLevel": "Tagging",
4857
+ "accessLevel": "Tagging, Write",
4564
4858
  "resourceTypes": [
4565
4859
  {
4566
4860
  "name": "capacity-block",
@@ -5851,9 +6145,7 @@
5851
6145
  "aws:RequestTag/${TagKey}",
5852
6146
  "aws:TagKeys"
5853
6147
  ],
5854
- "dependentActions": [
5855
- "ec2:CreateTags"
5856
- ]
6148
+ "dependentActions": []
5857
6149
  }
5858
6150
  ],
5859
6151
  "conditionKeys": [
@@ -5873,9 +6165,7 @@
5873
6165
  "aws:ResourceTag/${TagKey}",
5874
6166
  "ec2:ResourceTag/${TagKey}"
5875
6167
  ],
5876
- "dependentActions": [
5877
- "ec2:CreateTags"
5878
- ]
6168
+ "dependentActions": []
5879
6169
  },
5880
6170
  {
5881
6171
  "name": "traffic-mirror-filter-rule",
@@ -5909,9 +6199,7 @@
5909
6199
  "ec2:Subnet",
5910
6200
  "ec2:Vpc"
5911
6201
  ],
5912
- "dependentActions": [
5913
- "ec2:CreateTags"
5914
- ]
6202
+ "dependentActions": []
5915
6203
  },
5916
6204
  {
5917
6205
  "name": "traffic-mirror-filter",
@@ -5951,17 +6239,6 @@
5951
6239
  "description": "Grants permission to create a traffic mirror target",
5952
6240
  "accessLevel": "Write",
5953
6241
  "resourceTypes": [
5954
- {
5955
- "name": "traffic-mirror-target",
5956
- "required": true,
5957
- "conditionKeys": [
5958
- "aws:RequestTag/${TagKey}",
5959
- "aws:TagKeys"
5960
- ],
5961
- "dependentActions": [
5962
- "ec2:CreateTags"
5963
- ]
5964
- },
5965
6242
  {
5966
6243
  "name": "network-interface",
5967
6244
  "required": false,
@@ -5972,6 +6249,15 @@
5972
6249
  ],
5973
6250
  "dependentActions": []
5974
6251
  },
6252
+ {
6253
+ "name": "traffic-mirror-target",
6254
+ "required": true,
6255
+ "conditionKeys": [
6256
+ "aws:RequestTag/${TagKey}",
6257
+ "aws:TagKeys"
6258
+ ],
6259
+ "dependentActions": []
6260
+ },
5975
6261
  {
5976
6262
  "name": "vpc-endpoint",
5977
6263
  "required": false,
@@ -6002,9 +6288,7 @@
6002
6288
  "aws:TagKeys",
6003
6289
  "ec2:transitGatewayId"
6004
6290
  ],
6005
- "dependentActions": [
6006
- "ec2:CreateTags"
6007
- ]
6291
+ "dependentActions": []
6008
6292
  }
6009
6293
  ],
6010
6294
  "conditionKeys": [
@@ -6025,9 +6309,7 @@
6025
6309
  "aws:TagKeys",
6026
6310
  "ec2:transitGatewayAttachmentId"
6027
6311
  ],
6028
- "dependentActions": [
6029
- "ec2:CreateTags"
6030
- ]
6312
+ "dependentActions": []
6031
6313
  }
6032
6314
  ],
6033
6315
  "conditionKeys": [
@@ -6048,9 +6330,7 @@
6048
6330
  "ec2:ResourceTag/${TagKey}",
6049
6331
  "ec2:transitGatewayAttachmentId"
6050
6332
  ],
6051
- "dependentActions": [
6052
- "ec2:CreateTags"
6053
- ]
6333
+ "dependentActions": []
6054
6334
  },
6055
6335
  {
6056
6336
  "name": "transit-gateway-connect-peer",
@@ -6081,18 +6361,6 @@
6081
6361
  "ec2:ResourceTag/${TagKey}",
6082
6362
  "ec2:transitGatewayId"
6083
6363
  ],
6084
- "dependentActions": [
6085
- "ec2:CreateTags"
6086
- ]
6087
- },
6088
- {
6089
- "name": "transit-gateway-metering-policy",
6090
- "required": true,
6091
- "conditionKeys": [
6092
- "aws:RequestTag/${TagKey}",
6093
- "aws:TagKeys",
6094
- "ec2:transitGatewayMeteringPolicyId"
6095
- ],
6096
6364
  "dependentActions": []
6097
6365
  },
6098
6366
  {
@@ -6104,6 +6372,16 @@
6104
6372
  "ec2:transitGatewayAttachmentId"
6105
6373
  ],
6106
6374
  "dependentActions": []
6375
+ },
6376
+ {
6377
+ "name": "transit-gateway-metering-policy",
6378
+ "required": true,
6379
+ "conditionKeys": [
6380
+ "aws:RequestTag/${TagKey}",
6381
+ "aws:TagKeys",
6382
+ "ec2:transitGatewayMeteringPolicyId"
6383
+ ],
6384
+ "dependentActions": []
6107
6385
  }
6108
6386
  ],
6109
6387
  "conditionKeys": [
@@ -6117,22 +6395,22 @@
6117
6395
  "accessLevel": "Write",
6118
6396
  "resourceTypes": [
6119
6397
  {
6120
- "name": "transit-gateway-metering-policy",
6121
- "required": true,
6398
+ "name": "transit-gateway-attachment",
6399
+ "required": false,
6122
6400
  "conditionKeys": [
6123
6401
  "aws:ResourceTag/${TagKey}",
6124
6402
  "ec2:ResourceTag/${TagKey}",
6125
- "ec2:transitGatewayMeteringPolicyId"
6403
+ "ec2:transitGatewayAttachmentId"
6126
6404
  ],
6127
6405
  "dependentActions": []
6128
6406
  },
6129
6407
  {
6130
- "name": "transit-gateway-attachment",
6131
- "required": false,
6408
+ "name": "transit-gateway-metering-policy",
6409
+ "required": true,
6132
6410
  "conditionKeys": [
6133
6411
  "aws:ResourceTag/${TagKey}",
6134
6412
  "ec2:ResourceTag/${TagKey}",
6135
- "ec2:transitGatewayAttachmentId"
6413
+ "ec2:transitGatewayMeteringPolicyId"
6136
6414
  ],
6137
6415
  "dependentActions": []
6138
6416
  }
@@ -6155,9 +6433,7 @@
6155
6433
  "ec2:ResourceTag/${TagKey}",
6156
6434
  "ec2:transitGatewayId"
6157
6435
  ],
6158
- "dependentActions": [
6159
- "ec2:CreateTags"
6160
- ]
6436
+ "dependentActions": []
6161
6437
  },
6162
6438
  {
6163
6439
  "name": "transit-gateway-multicast-domain",
@@ -6188,9 +6464,7 @@
6188
6464
  "ec2:ResourceTag/${TagKey}",
6189
6465
  "ec2:transitGatewayId"
6190
6466
  ],
6191
- "dependentActions": [
6192
- "ec2:CreateTags"
6193
- ]
6467
+ "dependentActions": []
6194
6468
  },
6195
6469
  {
6196
6470
  "name": "transit-gateway-attachment",
@@ -6221,9 +6495,7 @@
6221
6495
  "ec2:ResourceTag/${TagKey}",
6222
6496
  "ec2:transitGatewayId"
6223
6497
  ],
6224
- "dependentActions": [
6225
- "ec2:CreateTags"
6226
- ]
6498
+ "dependentActions": []
6227
6499
  },
6228
6500
  {
6229
6501
  "name": "transit-gateway-policy-table",
@@ -6256,22 +6528,22 @@
6256
6528
  "dependentActions": []
6257
6529
  },
6258
6530
  {
6259
- "name": "transit-gateway-route-table",
6260
- "required": true,
6531
+ "name": "transit-gateway-attachment",
6532
+ "required": false,
6261
6533
  "conditionKeys": [
6262
6534
  "aws:ResourceTag/${TagKey}",
6263
6535
  "ec2:ResourceTag/${TagKey}",
6264
- "ec2:transitGatewayRouteTableId"
6536
+ "ec2:transitGatewayAttachmentId"
6265
6537
  ],
6266
6538
  "dependentActions": []
6267
6539
  },
6268
6540
  {
6269
- "name": "transit-gateway-attachment",
6270
- "required": false,
6541
+ "name": "transit-gateway-route-table",
6542
+ "required": true,
6271
6543
  "conditionKeys": [
6272
6544
  "aws:ResourceTag/${TagKey}",
6273
6545
  "ec2:ResourceTag/${TagKey}",
6274
- "ec2:transitGatewayAttachmentId"
6546
+ "ec2:transitGatewayRouteTableId"
6275
6547
  ],
6276
6548
  "dependentActions": []
6277
6549
  }
@@ -6287,22 +6559,22 @@
6287
6559
  "accessLevel": "Write",
6288
6560
  "resourceTypes": [
6289
6561
  {
6290
- "name": "transit-gateway-route-table",
6291
- "required": true,
6562
+ "name": "transit-gateway-attachment",
6563
+ "required": false,
6292
6564
  "conditionKeys": [
6293
6565
  "aws:ResourceTag/${TagKey}",
6294
6566
  "ec2:ResourceTag/${TagKey}",
6295
- "ec2:transitGatewayRouteTableId"
6567
+ "ec2:transitGatewayAttachmentId"
6296
6568
  ],
6297
6569
  "dependentActions": []
6298
6570
  },
6299
6571
  {
6300
- "name": "transit-gateway-attachment",
6301
- "required": false,
6572
+ "name": "transit-gateway-route-table",
6573
+ "required": true,
6302
6574
  "conditionKeys": [
6303
6575
  "aws:ResourceTag/${TagKey}",
6304
6576
  "ec2:ResourceTag/${TagKey}",
6305
- "ec2:transitGatewayAttachmentId"
6577
+ "ec2:transitGatewayRouteTableId"
6306
6578
  ],
6307
6579
  "dependentActions": []
6308
6580
  }
@@ -6325,9 +6597,7 @@
6325
6597
  "ec2:ResourceTag/${TagKey}",
6326
6598
  "ec2:transitGatewayId"
6327
6599
  ],
6328
- "dependentActions": [
6329
- "ec2:CreateTags"
6330
- ]
6600
+ "dependentActions": []
6331
6601
  },
6332
6602
  {
6333
6603
  "name": "transit-gateway-route-table",
@@ -6358,9 +6628,7 @@
6358
6628
  "ec2:ResourceTag/${TagKey}",
6359
6629
  "ec2:transitGatewayAttachmentId"
6360
6630
  ],
6361
- "dependentActions": [
6362
- "ec2:CreateTags"
6363
- ]
6631
+ "dependentActions": []
6364
6632
  },
6365
6633
  {
6366
6634
  "name": "transit-gateway-route-table",
@@ -6403,9 +6671,7 @@
6403
6671
  "ec2:SubnetID",
6404
6672
  "ec2:Vpc"
6405
6673
  ],
6406
- "dependentActions": [
6407
- "ec2:CreateTags"
6408
- ]
6674
+ "dependentActions": []
6409
6675
  },
6410
6676
  {
6411
6677
  "name": "transit-gateway",
@@ -6449,26 +6715,6 @@
6449
6715
  "description": "Grants permission to create a Verified Access endpoint",
6450
6716
  "accessLevel": "Write",
6451
6717
  "resourceTypes": [
6452
- {
6453
- "name": "verified-access-endpoint",
6454
- "required": true,
6455
- "conditionKeys": [
6456
- "aws:RequestTag/${TagKey}",
6457
- "aws:TagKeys"
6458
- ],
6459
- "dependentActions": [
6460
- "ec2:CreateTags"
6461
- ]
6462
- },
6463
- {
6464
- "name": "verified-access-group",
6465
- "required": true,
6466
- "conditionKeys": [
6467
- "aws:ResourceTag/${TagKey}",
6468
- "ec2:ResourceTag/${TagKey}"
6469
- ],
6470
- "dependentActions": []
6471
- },
6472
6718
  {
6473
6719
  "name": "network-interface",
6474
6720
  "required": false,
@@ -6507,6 +6753,24 @@
6507
6753
  "ec2:Vpc"
6508
6754
  ],
6509
6755
  "dependentActions": []
6756
+ },
6757
+ {
6758
+ "name": "verified-access-endpoint",
6759
+ "required": true,
6760
+ "conditionKeys": [
6761
+ "aws:RequestTag/${TagKey}",
6762
+ "aws:TagKeys"
6763
+ ],
6764
+ "dependentActions": []
6765
+ },
6766
+ {
6767
+ "name": "verified-access-group",
6768
+ "required": true,
6769
+ "conditionKeys": [
6770
+ "aws:ResourceTag/${TagKey}",
6771
+ "ec2:ResourceTag/${TagKey}"
6772
+ ],
6773
+ "dependentActions": []
6510
6774
  }
6511
6775
  ],
6512
6776
  "conditionKeys": [
@@ -6526,9 +6790,7 @@
6526
6790
  "aws:RequestTag/${TagKey}",
6527
6791
  "aws:TagKeys"
6528
6792
  ],
6529
- "dependentActions": [
6530
- "ec2:CreateTags"
6531
- ]
6793
+ "dependentActions": []
6532
6794
  },
6533
6795
  {
6534
6796
  "name": "verified-access-instance",
@@ -6557,9 +6819,7 @@
6557
6819
  "aws:RequestTag/${TagKey}",
6558
6820
  "aws:TagKeys"
6559
6821
  ],
6560
- "dependentActions": [
6561
- "ec2:CreateTags"
6562
- ]
6822
+ "dependentActions": []
6563
6823
  }
6564
6824
  ],
6565
6825
  "conditionKeys": [
@@ -6579,9 +6839,7 @@
6579
6839
  "aws:RequestTag/${TagKey}",
6580
6840
  "aws:TagKeys"
6581
6841
  ],
6582
- "dependentActions": [
6583
- "ec2:CreateTags"
6584
- ]
6842
+ "dependentActions": []
6585
6843
  }
6586
6844
  ],
6587
6845
  "conditionKeys": [
@@ -6594,6 +6852,20 @@
6594
6852
  "description": "Grants permission to create an EBS volume",
6595
6853
  "accessLevel": "Write",
6596
6854
  "resourceTypes": [
6855
+ {
6856
+ "name": "snapshot",
6857
+ "required": false,
6858
+ "conditionKeys": [
6859
+ "aws:ResourceTag/${TagKey}",
6860
+ "ec2:Encrypted",
6861
+ "ec2:Owner",
6862
+ "ec2:ParentVolume",
6863
+ "ec2:ResourceTag/${TagKey}",
6864
+ "ec2:SnapshotTime",
6865
+ "ec2:VolumeSize"
6866
+ ],
6867
+ "dependentActions": []
6868
+ },
6597
6869
  {
6598
6870
  "name": "volume",
6599
6871
  "required": true,
@@ -6612,22 +6884,6 @@
6612
6884
  "ec2:VolumeThroughput",
6613
6885
  "ec2:VolumeType"
6614
6886
  ],
6615
- "dependentActions": [
6616
- "ec2:CreateTags"
6617
- ]
6618
- },
6619
- {
6620
- "name": "snapshot",
6621
- "required": false,
6622
- "conditionKeys": [
6623
- "aws:ResourceTag/${TagKey}",
6624
- "ec2:Encrypted",
6625
- "ec2:Owner",
6626
- "ec2:ParentVolume",
6627
- "ec2:ResourceTag/${TagKey}",
6628
- "ec2:SnapshotTime",
6629
- "ec2:VolumeSize"
6630
- ],
6631
6887
  "dependentActions": []
6632
6888
  }
6633
6889
  ],
@@ -6641,20 +6897,6 @@
6641
6897
  "description": "Grants permission to create a VPC with a specified CIDR block",
6642
6898
  "accessLevel": "Write",
6643
6899
  "resourceTypes": [
6644
- {
6645
- "name": "vpc",
6646
- "required": true,
6647
- "conditionKeys": [
6648
- "aws:RequestTag/${TagKey}",
6649
- "aws:TagKeys",
6650
- "ec2:Ipv4IpamPoolId",
6651
- "ec2:Ipv6IpamPoolId",
6652
- "ec2:VpcID"
6653
- ],
6654
- "dependentActions": [
6655
- "ec2:CreateTags"
6656
- ]
6657
- },
6658
6900
  {
6659
6901
  "name": "ipam-pool",
6660
6902
  "required": false,
@@ -6672,6 +6914,18 @@
6672
6914
  "ec2:ResourceTag/${TagKey}"
6673
6915
  ],
6674
6916
  "dependentActions": []
6917
+ },
6918
+ {
6919
+ "name": "vpc",
6920
+ "required": true,
6921
+ "conditionKeys": [
6922
+ "aws:RequestTag/${TagKey}",
6923
+ "aws:TagKeys",
6924
+ "ec2:Ipv4IpamPoolId",
6925
+ "ec2:Ipv6IpamPoolId",
6926
+ "ec2:VpcID"
6927
+ ],
6928
+ "dependentActions": []
6675
6929
  }
6676
6930
  ],
6677
6931
  "conditionKeys": [
@@ -6684,17 +6938,6 @@
6684
6938
  "description": "Grants permission to create an exclusion list for blocked public access on a VPC",
6685
6939
  "accessLevel": "Write",
6686
6940
  "resourceTypes": [
6687
- {
6688
- "name": "vpc-block-public-access-exclusion",
6689
- "required": true,
6690
- "conditionKeys": [
6691
- "aws:RequestTag/${TagKey}",
6692
- "aws:TagKeys"
6693
- ],
6694
- "dependentActions": [
6695
- "ec2:CreateTags"
6696
- ]
6697
- },
6698
6941
  {
6699
6942
  "name": "subnet",
6700
6943
  "required": false,
@@ -6720,6 +6963,15 @@
6720
6963
  "ec2:VpcID"
6721
6964
  ],
6722
6965
  "dependentActions": []
6966
+ },
6967
+ {
6968
+ "name": "vpc-block-public-access-exclusion",
6969
+ "required": true,
6970
+ "conditionKeys": [
6971
+ "aws:RequestTag/${TagKey}",
6972
+ "aws:TagKeys"
6973
+ ],
6974
+ "dependentActions": []
6723
6975
  }
6724
6976
  ],
6725
6977
  "conditionKeys": [
@@ -6741,9 +6993,7 @@
6741
6993
  "ec2:Tenancy",
6742
6994
  "ec2:VpcID"
6743
6995
  ],
6744
- "dependentActions": [
6745
- "ec2:CreateTags"
6746
- ]
6996
+ "dependentActions": []
6747
6997
  },
6748
6998
  {
6749
6999
  "name": "vpc-encryption-control",
@@ -6766,63 +7016,57 @@
6766
7016
  "accessLevel": "Write",
6767
7017
  "resourceTypes": [
6768
7018
  {
6769
- "name": "vpc",
6770
- "required": true,
7019
+ "name": "route-table",
7020
+ "required": false,
6771
7021
  "conditionKeys": [
6772
7022
  "aws:ResourceTag/${TagKey}",
6773
7023
  "ec2:ResourceTag/${TagKey}",
6774
- "ec2:VpcID"
7024
+ "ec2:RouteTableID"
6775
7025
  ],
6776
- "dependentActions": [
6777
- "ec2:CreateTags",
6778
- "ec2:DescribeSecurityGroups",
6779
- "ec2:DescribeSubnets",
6780
- "ec2:DescribeVpcs",
6781
- "route53:AssociateVPCWithHostedZone"
6782
- ]
7026
+ "dependentActions": []
6783
7027
  },
6784
7028
  {
6785
- "name": "vpc-endpoint",
6786
- "required": true,
7029
+ "name": "security-group",
7030
+ "required": false,
6787
7031
  "conditionKeys": [
6788
- "aws:RequestTag/${TagKey}",
6789
- "aws:TagKeys",
6790
- "ec2:VpceMultiRegion",
6791
- "ec2:VpcePrivateDnsPreference",
6792
- "ec2:VpcePrivateDnsSpecifiedDomains",
6793
- "ec2:VpceServiceName",
6794
- "ec2:VpceServiceOwner",
6795
- "ec2:VpceServiceRegion"
7032
+ "aws:ResourceTag/${TagKey}",
7033
+ "ec2:ResourceTag/${TagKey}",
7034
+ "ec2:SecurityGroupID"
6796
7035
  ],
6797
7036
  "dependentActions": []
6798
7037
  },
6799
7038
  {
6800
- "name": "route-table",
7039
+ "name": "subnet",
6801
7040
  "required": false,
6802
7041
  "conditionKeys": [
6803
7042
  "aws:ResourceTag/${TagKey}",
6804
7043
  "ec2:ResourceTag/${TagKey}",
6805
- "ec2:RouteTableID"
7044
+ "ec2:SubnetID"
6806
7045
  ],
6807
7046
  "dependentActions": []
6808
7047
  },
6809
7048
  {
6810
- "name": "security-group",
6811
- "required": false,
7049
+ "name": "vpc",
7050
+ "required": true,
6812
7051
  "conditionKeys": [
6813
7052
  "aws:ResourceTag/${TagKey}",
6814
7053
  "ec2:ResourceTag/${TagKey}",
6815
- "ec2:SecurityGroupID"
7054
+ "ec2:VpcID"
6816
7055
  ],
6817
7056
  "dependentActions": []
6818
7057
  },
6819
7058
  {
6820
- "name": "subnet",
6821
- "required": false,
7059
+ "name": "vpc-endpoint",
7060
+ "required": true,
6822
7061
  "conditionKeys": [
6823
- "aws:ResourceTag/${TagKey}",
6824
- "ec2:ResourceTag/${TagKey}",
6825
- "ec2:SubnetID"
7062
+ "aws:RequestTag/${TagKey}",
7063
+ "aws:TagKeys",
7064
+ "ec2:VpceMultiRegion",
7065
+ "ec2:VpcePrivateDnsPreference",
7066
+ "ec2:VpcePrivateDnsSpecifiedDomains",
7067
+ "ec2:VpceServiceName",
7068
+ "ec2:VpceServiceOwner",
7069
+ "ec2:VpceServiceRegion"
6826
7070
  ],
6827
7071
  "dependentActions": []
6828
7072
  }
@@ -6878,9 +7122,7 @@
6878
7122
  "ec2:VpceServicePrivateDnsName",
6879
7123
  "ec2:VpceServiceRegion"
6880
7124
  ],
6881
- "dependentActions": [
6882
- "ec2:CreateTags"
6883
- ]
7125
+ "dependentActions": []
6884
7126
  }
6885
7127
  ],
6886
7128
  "conditionKeys": [
@@ -6902,9 +7144,7 @@
6902
7144
  "ec2:Tenancy",
6903
7145
  "ec2:VpcID"
6904
7146
  ],
6905
- "dependentActions": [
6906
- "ec2:CreateTags"
6907
- ]
7147
+ "dependentActions": []
6908
7148
  },
6909
7149
  {
6910
7150
  "name": "vpc-peering-connection",
@@ -6929,17 +7169,6 @@
6929
7169
  "description": "Grants permission to create a VPN concentrator that aggregates multiple VPN connections to a transit gateway",
6930
7170
  "accessLevel": "Write",
6931
7171
  "resourceTypes": [
6932
- {
6933
- "name": "vpn-concentrator",
6934
- "required": true,
6935
- "conditionKeys": [
6936
- "aws:RequestTag/${TagKey}",
6937
- "aws:TagKeys"
6938
- ],
6939
- "dependentActions": [
6940
- "ec2:CreateTags"
6941
- ]
6942
- },
6943
7172
  {
6944
7173
  "name": "transit-gateway",
6945
7174
  "required": false,
@@ -6949,6 +7178,15 @@
6949
7178
  "ec2:transitGatewayId"
6950
7179
  ],
6951
7180
  "dependentActions": []
7181
+ },
7182
+ {
7183
+ "name": "vpn-concentrator",
7184
+ "required": true,
7185
+ "conditionKeys": [
7186
+ "aws:RequestTag/${TagKey}",
7187
+ "aws:TagKeys"
7188
+ ],
7189
+ "dependentActions": []
6952
7190
  }
6953
7191
  ],
6954
7192
  "conditionKeys": [
@@ -6968,35 +7206,6 @@
6968
7206
  "aws:ResourceTag/${TagKey}",
6969
7207
  "ec2:ResourceTag/${TagKey}"
6970
7208
  ],
6971
- "dependentActions": [
6972
- "ec2:CreateTags"
6973
- ]
6974
- },
6975
- {
6976
- "name": "vpn-connection",
6977
- "required": true,
6978
- "conditionKeys": [
6979
- "aws:RequestTag/${TagKey}",
6980
- "aws:TagKeys",
6981
- "ec2:AuthenticationType",
6982
- "ec2:DPDTimeoutSeconds",
6983
- "ec2:GatewayType",
6984
- "ec2:IKEVersions",
6985
- "ec2:InsideTunnelCidr",
6986
- "ec2:InsideTunnelIpv6Cidr",
6987
- "ec2:Phase1DHGroup",
6988
- "ec2:Phase1EncryptionAlgorithms",
6989
- "ec2:Phase1IntegrityAlgorithms",
6990
- "ec2:Phase1LifetimeSeconds",
6991
- "ec2:Phase2DHGroup",
6992
- "ec2:Phase2EncryptionAlgorithms",
6993
- "ec2:Phase2IntegrityAlgorithms",
6994
- "ec2:Phase2LifetimeSeconds",
6995
- "ec2:RekeyFuzzPercentage",
6996
- "ec2:RekeyMarginTimeSeconds",
6997
- "ec2:ReplayWindowSizePackets",
6998
- "ec2:RoutingType"
6999
- ],
7000
7209
  "dependentActions": []
7001
7210
  },
7002
7211
  {
@@ -7028,6 +7237,33 @@
7028
7237
  ],
7029
7238
  "dependentActions": []
7030
7239
  },
7240
+ {
7241
+ "name": "vpn-connection",
7242
+ "required": true,
7243
+ "conditionKeys": [
7244
+ "aws:RequestTag/${TagKey}",
7245
+ "aws:TagKeys",
7246
+ "ec2:AuthenticationType",
7247
+ "ec2:DPDTimeoutSeconds",
7248
+ "ec2:GatewayType",
7249
+ "ec2:IKEVersions",
7250
+ "ec2:InsideTunnelCidr",
7251
+ "ec2:InsideTunnelIpv6Cidr",
7252
+ "ec2:Phase1DHGroup",
7253
+ "ec2:Phase1EncryptionAlgorithms",
7254
+ "ec2:Phase1IntegrityAlgorithms",
7255
+ "ec2:Phase1LifetimeSeconds",
7256
+ "ec2:Phase2DHGroup",
7257
+ "ec2:Phase2EncryptionAlgorithms",
7258
+ "ec2:Phase2IntegrityAlgorithms",
7259
+ "ec2:Phase2LifetimeSeconds",
7260
+ "ec2:RekeyFuzzPercentage",
7261
+ "ec2:RekeyMarginTimeSeconds",
7262
+ "ec2:ReplayWindowSizePackets",
7263
+ "ec2:RoutingType"
7264
+ ],
7265
+ "dependentActions": []
7266
+ },
7031
7267
  {
7032
7268
  "name": "vpn-gateway",
7033
7269
  "required": false,
@@ -7075,9 +7311,7 @@
7075
7311
  "aws:RequestTag/${TagKey}",
7076
7312
  "aws:TagKeys"
7077
7313
  ],
7078
- "dependentActions": [
7079
- "ec2:CreateTags"
7080
- ]
7314
+ "dependentActions": []
7081
7315
  }
7082
7316
  ],
7083
7317
  "conditionKeys": [
@@ -7230,27 +7464,6 @@
7230
7464
  ],
7231
7465
  "dependentActions": []
7232
7466
  },
7233
- "deletecoippoolpermission": {
7234
- "name": "DeleteCoipPoolPermission",
7235
- "isPermissionOnly": true,
7236
- "description": "Grants permission to deny a service from accessing a customer-owned IP (CoIP) pool",
7237
- "accessLevel": "Permissions management",
7238
- "resourceTypes": [
7239
- {
7240
- "name": "coip-pool",
7241
- "required": true,
7242
- "conditionKeys": [
7243
- "aws:ResourceTag/${TagKey}",
7244
- "ec2:ResourceTag/${TagKey}"
7245
- ],
7246
- "dependentActions": []
7247
- }
7248
- ],
7249
- "conditionKeys": [
7250
- "ec2:Region"
7251
- ],
7252
- "dependentActions": []
7253
- },
7254
7467
  "deletecustomergateway": {
7255
7468
  "name": "DeleteCustomerGateway",
7256
7469
  "description": "Grants permission to delete a customer gateway",
@@ -7729,27 +7942,6 @@
7729
7942
  ],
7730
7943
  "dependentActions": []
7731
7944
  },
7732
- "deletelocalgatewayroutetablepermission": {
7733
- "name": "DeleteLocalGatewayRouteTablePermission",
7734
- "isPermissionOnly": true,
7735
- "description": "Grants permission to deny a service from accessing a local gateway route table",
7736
- "accessLevel": "Permissions management",
7737
- "resourceTypes": [
7738
- {
7739
- "name": "local-gateway-route-table",
7740
- "required": true,
7741
- "conditionKeys": [
7742
- "aws:ResourceTag/${TagKey}",
7743
- "ec2:ResourceTag/${TagKey}"
7744
- ],
7745
- "dependentActions": []
7746
- }
7747
- ],
7748
- "conditionKeys": [
7749
- "ec2:Region"
7750
- ],
7751
- "dependentActions": []
7752
- },
7753
7945
  "deletelocalgatewayroutetablevirtualinterfacegroupassociation": {
7754
7946
  "name": "DeleteLocalGatewayRouteTableVirtualInterfaceGroupAssociation",
7755
7947
  "description": "Grants permission to delete a local gateway route table virtual interface group association",
@@ -8023,7 +8215,7 @@
8023
8215
  "deletenetworkinterfacepermission": {
8024
8216
  "name": "DeleteNetworkInterfacePermission",
8025
8217
  "description": "Grants permission to delete a permission that is associated with a network interface",
8026
- "accessLevel": "Permissions management",
8218
+ "accessLevel": "Permissions management, Write",
8027
8219
  "resourceTypes": [
8028
8220
  {
8029
8221
  "name": "network-interface",
@@ -8045,29 +8237,6 @@
8045
8237
  ],
8046
8238
  "dependentActions": []
8047
8239
  },
8048
- "deleteodbnetworkpeering": {
8049
- "name": "DeleteOdbNetworkPeering",
8050
- "isPermissionOnly": true,
8051
- "description": "Grants permission to allow Oracle Database@AWS to delete a peering connection between an ODB network and a VPC",
8052
- "accessLevel": "Permissions management",
8053
- "resourceTypes": [
8054
- {
8055
- "name": "vpc",
8056
- "required": true,
8057
- "conditionKeys": [
8058
- "aws:ResourceTag/${TagKey}",
8059
- "ec2:ResourceTag/${TagKey}",
8060
- "ec2:Tenancy",
8061
- "ec2:VpcID"
8062
- ],
8063
- "dependentActions": []
8064
- }
8065
- ],
8066
- "conditionKeys": [
8067
- "ec2:Region"
8068
- ],
8069
- "dependentActions": []
8070
- },
8071
8240
  "deleteplacementgroup": {
8072
8241
  "name": "DeletePlacementGroup",
8073
8242
  "description": "Grants permission to delete a placement group",
@@ -8096,75 +8265,34 @@
8096
8265
  "accessLevel": "Write",
8097
8266
  "resourceTypes": [
8098
8267
  {
8099
- "name": "ipv4pool-ec2",
8100
- "required": true,
8101
- "conditionKeys": [
8102
- "aws:ResourceTag/${TagKey}",
8103
- "ec2:ResourceTag/${TagKey}"
8104
- ],
8105
- "dependentActions": []
8106
- }
8107
- ],
8108
- "conditionKeys": [
8109
- "ec2:Region"
8110
- ],
8111
- "dependentActions": []
8112
- },
8113
- "deletequeuedreservedinstances": {
8114
- "name": "DeleteQueuedReservedInstances",
8115
- "description": "Grants permission to delete the queued purchases for the specified Reserved Instances",
8116
- "accessLevel": "Write",
8117
- "resourceTypes": [
8118
- {
8119
- "name": "reserved-instances",
8120
- "required": true,
8121
- "conditionKeys": [
8122
- "aws:ResourceTag/${TagKey}",
8123
- "ec2:InstanceType",
8124
- "ec2:ReservedInstancesOfferingType",
8125
- "ec2:ResourceTag/${TagKey}",
8126
- "ec2:Tenancy"
8127
- ],
8128
- "dependentActions": []
8129
- }
8130
- ],
8131
- "conditionKeys": [
8132
- "ec2:Region"
8133
- ],
8134
- "dependentActions": []
8135
- },
8136
- "deleteresourcepolicy": {
8137
- "name": "DeleteResourcePolicy",
8138
- "isPermissionOnly": true,
8139
- "description": "Grants permission to remove an IAM policy that enables cross-account sharing from a resource",
8140
- "accessLevel": "Permissions management",
8141
- "resourceTypes": [
8142
- {
8143
- "name": "ipam-pool",
8144
- "required": false,
8145
- "conditionKeys": [
8146
- "aws:ResourceTag/${TagKey}",
8147
- "ec2:ResourceTag/${TagKey}"
8148
- ],
8149
- "dependentActions": []
8150
- },
8151
- {
8152
- "name": "placement-group",
8153
- "required": false,
8268
+ "name": "ipv4pool-ec2",
8269
+ "required": true,
8154
8270
  "conditionKeys": [
8155
8271
  "aws:ResourceTag/${TagKey}",
8156
- "ec2:PlacementGroupName",
8157
- "ec2:PlacementGroupStrategy",
8158
8272
  "ec2:ResourceTag/${TagKey}"
8159
8273
  ],
8160
8274
  "dependentActions": []
8161
- },
8275
+ }
8276
+ ],
8277
+ "conditionKeys": [
8278
+ "ec2:Region"
8279
+ ],
8280
+ "dependentActions": []
8281
+ },
8282
+ "deletequeuedreservedinstances": {
8283
+ "name": "DeleteQueuedReservedInstances",
8284
+ "description": "Grants permission to delete the queued purchases for the specified Reserved Instances",
8285
+ "accessLevel": "Write",
8286
+ "resourceTypes": [
8162
8287
  {
8163
- "name": "verified-access-group",
8164
- "required": false,
8288
+ "name": "reserved-instances",
8289
+ "required": true,
8165
8290
  "conditionKeys": [
8166
8291
  "aws:ResourceTag/${TagKey}",
8167
- "ec2:ResourceTag/${TagKey}"
8292
+ "ec2:InstanceType",
8293
+ "ec2:ReservedInstancesOfferingType",
8294
+ "ec2:ResourceTag/${TagKey}",
8295
+ "ec2:Tenancy"
8168
8296
  ],
8169
8297
  "dependentActions": []
8170
8298
  }
@@ -8208,9 +8336,7 @@
8208
8336
  "aws:ResourceTag/${TagKey}",
8209
8337
  "ec2:ResourceTag/${TagKey}"
8210
8338
  ],
8211
- "dependentActions": [
8212
- "sns:DeleteTopic"
8213
- ]
8339
+ "dependentActions": []
8214
8340
  }
8215
8341
  ],
8216
8342
  "conditionKeys": [
@@ -8231,11 +8357,7 @@
8231
8357
  "ec2:AvailabilityZone",
8232
8358
  "ec2:ResourceTag/${TagKey}"
8233
8359
  ],
8234
- "dependentActions": [
8235
- "ec2:DeleteNetworkInterface",
8236
- "ec2:DeleteSecurityGroup",
8237
- "ec2:RevokeSecurityGroupIngress"
8238
- ]
8360
+ "dependentActions": []
8239
8361
  }
8240
8362
  ],
8241
8363
  "conditionKeys": [
@@ -8256,9 +8378,7 @@
8256
8378
  "ec2:AvailabilityZone",
8257
8379
  "ec2:ResourceTag/${TagKey}"
8258
8380
  ],
8259
- "dependentActions": [
8260
- "ec2:RevokeSecurityGroupIngress"
8261
- ]
8381
+ "dependentActions": []
8262
8382
  }
8263
8383
  ],
8264
8384
  "conditionKeys": [
@@ -8424,7 +8544,7 @@
8424
8544
  "deletetags": {
8425
8545
  "name": "DeleteTags",
8426
8546
  "description": "Grants permission to delete one or more tags from Amazon EC2 resources",
8427
- "accessLevel": "Tagging",
8547
+ "accessLevel": "Tagging, Write",
8428
8548
  "resourceTypes": [
8429
8549
  {
8430
8550
  "name": "capacity-block",
@@ -11503,9 +11623,7 @@
11503
11623
  "conditionKeys": [
11504
11624
  "ec2:Region"
11505
11625
  ],
11506
- "dependentActions": [
11507
- "ssm:GetParameters"
11508
- ]
11626
+ "dependentActions": []
11509
11627
  },
11510
11628
  "describelaunchtemplates": {
11511
11629
  "name": "DescribeLaunchTemplates",
@@ -11517,17 +11635,6 @@
11517
11635
  ],
11518
11636
  "dependentActions": []
11519
11637
  },
11520
- "describelocalgatewayroutetablepermissions": {
11521
- "name": "DescribeLocalGatewayRouteTablePermissions",
11522
- "isPermissionOnly": true,
11523
- "description": "Grants permission to allow a service to describe local gateway route table permissions",
11524
- "accessLevel": "List",
11525
- "resourceTypes": [],
11526
- "conditionKeys": [
11527
- "ec2:Region"
11528
- ],
11529
- "dependentActions": []
11530
- },
11531
11638
  "describelocalgatewayroutetablevirtualinterfacegroupassociations": {
11532
11639
  "name": "DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations",
11533
11640
  "description": "Grants permission to describe the associations between virtual interface groups and local gateway route tables",
@@ -12348,17 +12455,6 @@
12348
12455
  ],
12349
12456
  "dependentActions": []
12350
12457
  },
12351
- "describeverifiedaccessinstancewebaclassociations": {
12352
- "name": "DescribeVerifiedAccessInstanceWebAclAssociations",
12353
- "isPermissionOnly": true,
12354
- "description": "Grants permission to describe the AWS Web Application Firewall (WAF) web access control list (ACL) associations for a Verified Access instance",
12355
- "accessLevel": "List",
12356
- "resourceTypes": [],
12357
- "conditionKeys": [
12358
- "ec2:Region"
12359
- ],
12360
- "dependentActions": []
12361
- },
12362
12458
  "describeverifiedaccessinstances": {
12363
12459
  "name": "DescribeVerifiedAccessInstances",
12364
12460
  "description": "Grants permission to describe the specified Verified Access instances or all Verified Access instances",
@@ -12645,27 +12741,6 @@
12645
12741
  ],
12646
12742
  "dependentActions": []
12647
12743
  },
12648
- "detachappliancefromnatgateway": {
12649
- "name": "DetachApplianceFromNatGateway",
12650
- "isPermissionOnly": true,
12651
- "description": "Grants permission to detach an appliance from a public/private Natgateway",
12652
- "accessLevel": "Permissions management",
12653
- "resourceTypes": [
12654
- {
12655
- "name": "natgateway",
12656
- "required": true,
12657
- "conditionKeys": [
12658
- "aws:ResourceTag/${TagKey}",
12659
- "ec2:ResourceTag/${TagKey}"
12660
- ],
12661
- "dependentActions": []
12662
- }
12663
- ],
12664
- "conditionKeys": [
12665
- "ec2:Region"
12666
- ],
12667
- "dependentActions": []
12668
- },
12669
12744
  "detachclassiclinkvpc": {
12670
12745
  "name": "DetachClassicLinkVpc",
12671
12746
  "description": "Grants permission to unlink (detach) a linked EC2-Classic instance from a VPC",
@@ -12822,29 +12897,6 @@
12822
12897
  ],
12823
12898
  "dependentActions": []
12824
12899
  },
12825
- "detachresourcesfromplacementgroup": {
12826
- "name": "DetachResourcesFromPlacementGroup",
12827
- "isPermissionOnly": true,
12828
- "description": "Grants permission to detach resources from a placement group",
12829
- "accessLevel": "Permissions management",
12830
- "resourceTypes": [
12831
- {
12832
- "name": "placement-group",
12833
- "required": true,
12834
- "conditionKeys": [
12835
- "aws:ResourceTag/${TagKey}",
12836
- "ec2:PlacementGroupName",
12837
- "ec2:PlacementGroupStrategy",
12838
- "ec2:ResourceTag/${TagKey}"
12839
- ],
12840
- "dependentActions": []
12841
- }
12842
- ],
12843
- "conditionKeys": [
12844
- "ec2:Region"
12845
- ],
12846
- "dependentActions": []
12847
- },
12848
12900
  "detachverifiedaccesstrustprovider": {
12849
12901
  "name": "DetachVerifiedAccessTrustProvider",
12850
12902
  "description": "Grants permission to detach a trust provider from a Verified Access instance",
@@ -12879,27 +12931,6 @@
12879
12931
  "description": "Grants permission to detach an EBS volume from an instance",
12880
12932
  "accessLevel": "Write",
12881
12933
  "resourceTypes": [
12882
- {
12883
- "name": "volume",
12884
- "required": true,
12885
- "conditionKeys": [
12886
- "aws:ResourceTag/${TagKey}",
12887
- "ec2:AvailabilityZone",
12888
- "ec2:AvailabilityZoneId",
12889
- "ec2:Encrypted",
12890
- "ec2:ManagedResourceOperator",
12891
- "ec2:ParentSnapshot",
12892
- "ec2:ParentVolume",
12893
- "ec2:ResourceTag/${TagKey}",
12894
- "ec2:VolumeID",
12895
- "ec2:VolumeInitializationRate",
12896
- "ec2:VolumeIops",
12897
- "ec2:VolumeSize",
12898
- "ec2:VolumeThroughput",
12899
- "ec2:VolumeType"
12900
- ],
12901
- "dependentActions": []
12902
- },
12903
12934
  {
12904
12935
  "name": "instance",
12905
12936
  "required": false,
@@ -12927,6 +12958,27 @@
12927
12958
  "ec2:Tenancy"
12928
12959
  ],
12929
12960
  "dependentActions": []
12961
+ },
12962
+ {
12963
+ "name": "volume",
12964
+ "required": true,
12965
+ "conditionKeys": [
12966
+ "aws:ResourceTag/${TagKey}",
12967
+ "ec2:AvailabilityZone",
12968
+ "ec2:AvailabilityZoneId",
12969
+ "ec2:Encrypted",
12970
+ "ec2:ManagedResourceOperator",
12971
+ "ec2:ParentSnapshot",
12972
+ "ec2:ParentVolume",
12973
+ "ec2:ResourceTag/${TagKey}",
12974
+ "ec2:VolumeID",
12975
+ "ec2:VolumeInitializationRate",
12976
+ "ec2:VolumeIops",
12977
+ "ec2:VolumeSize",
12978
+ "ec2:VolumeThroughput",
12979
+ "ec2:VolumeType"
12980
+ ],
12981
+ "dependentActions": []
12930
12982
  }
12931
12983
  ],
12932
12984
  "conditionKeys": [
@@ -13108,7 +13160,7 @@
13108
13160
  "disableimageblockpublicaccess": {
13109
13161
  "name": "DisableImageBlockPublicAccess",
13110
13162
  "description": "Grants permission to disable block public access for AMIs at the account level in the specified AWS Region",
13111
- "accessLevel": "Permissions management",
13163
+ "accessLevel": "Permissions management, Write",
13112
13164
  "resourceTypes": [],
13113
13165
  "conditionKeys": [
13114
13166
  "ec2:Region"
@@ -13208,9 +13260,7 @@
13208
13260
  "conditionKeys": [
13209
13261
  "ec2:Region"
13210
13262
  ],
13211
- "dependentActions": [
13212
- "organizations:DeregisterDelegatedAdministrator"
13213
- ]
13263
+ "dependentActions": []
13214
13264
  },
13215
13265
  "disableipampolicy": {
13216
13266
  "name": "DisableIpamPolicy",
@@ -13276,7 +13326,7 @@
13276
13326
  "disablesnapshotblockpublicaccess": {
13277
13327
  "name": "DisableSnapshotBlockPublicAccess",
13278
13328
  "description": "Grants permission to disable the block public access for snapshots setting for a Region",
13279
- "accessLevel": "Permissions management",
13329
+ "accessLevel": "Permissions management, Write",
13280
13330
  "resourceTypes": [],
13281
13331
  "conditionKeys": [
13282
13332
  "ec2:Region"
@@ -13289,22 +13339,22 @@
13289
13339
  "accessLevel": "Write",
13290
13340
  "resourceTypes": [
13291
13341
  {
13292
- "name": "transit-gateway-route-table",
13293
- "required": true,
13342
+ "name": "transit-gateway-attachment",
13343
+ "required": false,
13294
13344
  "conditionKeys": [
13295
13345
  "aws:ResourceTag/${TagKey}",
13296
13346
  "ec2:ResourceTag/${TagKey}",
13297
- "ec2:transitGatewayRouteTableId"
13347
+ "ec2:transitGatewayAttachmentId"
13298
13348
  ],
13299
13349
  "dependentActions": []
13300
13350
  },
13301
13351
  {
13302
- "name": "transit-gateway-attachment",
13303
- "required": false,
13352
+ "name": "transit-gateway-route-table",
13353
+ "required": true,
13304
13354
  "conditionKeys": [
13305
13355
  "aws:ResourceTag/${TagKey}",
13306
13356
  "ec2:ResourceTag/${TagKey}",
13307
- "ec2:transitGatewayAttachmentId"
13357
+ "ec2:transitGatewayRouteTableId"
13308
13358
  ],
13309
13359
  "dependentActions": []
13310
13360
  },
@@ -13937,27 +13987,6 @@
13937
13987
  ],
13938
13988
  "dependentActions": []
13939
13989
  },
13940
- "disassociateverifiedaccessinstancewebacl": {
13941
- "name": "DisassociateVerifiedAccessInstanceWebAcl",
13942
- "isPermissionOnly": true,
13943
- "description": "Grants permission to disassociate an AWS Web Application Firewall (WAF) web access control list (ACL) from a Verified Access instance",
13944
- "accessLevel": "Write",
13945
- "resourceTypes": [
13946
- {
13947
- "name": "verified-access-instance",
13948
- "required": true,
13949
- "conditionKeys": [
13950
- "aws:ResourceTag/${TagKey}",
13951
- "ec2:ResourceTag/${TagKey}"
13952
- ],
13953
- "dependentActions": []
13954
- }
13955
- ],
13956
- "conditionKeys": [
13957
- "ec2:Region"
13958
- ],
13959
- "dependentActions": []
13960
- },
13961
13990
  "disassociatevpccidrblock": {
13962
13991
  "name": "DisassociateVpcCidrBlock",
13963
13992
  "description": "Grants permission to disassociate a CIDR block from a VPC",
@@ -14060,25 +14089,7 @@
14060
14089
  "ec2:ResourceTag/${TagKey}",
14061
14090
  "ec2:RootDeviceType"
14062
14091
  ],
14063
- "dependentActions": [
14064
- "ec2:CreateLaunchTemplate",
14065
- "ec2:CreateSnapshot",
14066
- "ec2:CreateTags",
14067
- "ec2:DeleteSnapshot",
14068
- "ec2:DescribeImages",
14069
- "ec2:DescribeInstanceAttribute",
14070
- "ec2:DescribeInstanceStatus",
14071
- "ec2:DescribeInstanceTypeOfferings",
14072
- "ec2:DescribeInstances",
14073
- "ec2:DescribeLaunchTemplateVersions",
14074
- "ec2:DescribeLaunchTemplates",
14075
- "ec2:DescribeSnapshots",
14076
- "ec2:DescribeSubnets",
14077
- "ec2:RunInstances",
14078
- "ec2:StopInstances",
14079
- "ec2:TerminateInstances",
14080
- "iam:PassRole"
14081
- ]
14092
+ "dependentActions": []
14082
14093
  },
14083
14094
  {
14084
14095
  "name": "launch-template",
@@ -14151,7 +14162,7 @@
14151
14162
  "enableimageblockpublicaccess": {
14152
14163
  "name": "EnableImageBlockPublicAccess",
14153
14164
  "description": "Grants permission to enable block public access for AMIs at the account level in the specified AWS Region",
14154
- "accessLevel": "Permissions management",
14165
+ "accessLevel": "Permissions management, Write",
14155
14166
  "resourceTypes": [],
14156
14167
  "conditionKeys": [
14157
14168
  "ec2:Region"
@@ -14251,11 +14262,7 @@
14251
14262
  "conditionKeys": [
14252
14263
  "ec2:Region"
14253
14264
  ],
14254
- "dependentActions": [
14255
- "iam:CreateServiceLinkedRole",
14256
- "organizations:EnableAWSServiceAccess",
14257
- "organizations:RegisterDelegatedAdministrator"
14258
- ]
14265
+ "dependentActions": []
14259
14266
  },
14260
14267
  "enableipampolicy": {
14261
14268
  "name": "EnableIpamPolicy",
@@ -14285,10 +14292,7 @@
14285
14292
  "conditionKeys": [
14286
14293
  "ec2:Region"
14287
14294
  ],
14288
- "dependentActions": [
14289
- "iam:CreateServiceLinkedRole",
14290
- "organizations:EnableAWSServiceAccess"
14291
- ]
14295
+ "dependentActions": []
14292
14296
  },
14293
14297
  "enablerouteserverpropagation": {
14294
14298
  "name": "EnableRouteServerPropagation",
@@ -14334,7 +14338,7 @@
14334
14338
  "enablesnapshotblockpublicaccess": {
14335
14339
  "name": "EnableSnapshotBlockPublicAccess",
14336
14340
  "description": "Grants permission to enable or modify the block public access for snapshots setting for a Region",
14337
- "accessLevel": "Permissions management",
14341
+ "accessLevel": "Permissions management, Write",
14338
14342
  "resourceTypes": [],
14339
14343
  "conditionKeys": [
14340
14344
  "ec2:Region"
@@ -14347,22 +14351,22 @@
14347
14351
  "accessLevel": "Write",
14348
14352
  "resourceTypes": [
14349
14353
  {
14350
- "name": "transit-gateway-route-table",
14351
- "required": true,
14354
+ "name": "transit-gateway-attachment",
14355
+ "required": false,
14352
14356
  "conditionKeys": [
14353
14357
  "aws:ResourceTag/${TagKey}",
14354
14358
  "ec2:ResourceTag/${TagKey}",
14355
- "ec2:transitGatewayRouteTableId"
14359
+ "ec2:transitGatewayAttachmentId"
14356
14360
  ],
14357
14361
  "dependentActions": []
14358
14362
  },
14359
14363
  {
14360
- "name": "transit-gateway-attachment",
14361
- "required": false,
14364
+ "name": "transit-gateway-route-table",
14365
+ "required": true,
14362
14366
  "conditionKeys": [
14363
14367
  "aws:ResourceTag/${TagKey}",
14364
14368
  "ec2:ResourceTag/${TagKey}",
14365
- "ec2:transitGatewayAttachmentId"
14369
+ "ec2:transitGatewayRouteTableId"
14366
14370
  ],
14367
14371
  "dependentActions": []
14368
14372
  },
@@ -14551,9 +14555,7 @@
14551
14555
  "aws:RequestTag/${TagKey}",
14552
14556
  "aws:TagKeys"
14553
14557
  ],
14554
- "dependentActions": [
14555
- "ec2:CreateTags"
14556
- ]
14558
+ "dependentActions": []
14557
14559
  },
14558
14560
  {
14559
14561
  "name": "image",
@@ -15308,8 +15310,8 @@
15308
15310
  "accessLevel": "Read",
15309
15311
  "resourceTypes": [
15310
15312
  {
15311
- "name": "ipam-scope",
15312
- "required": true,
15313
+ "name": "ipam-pool",
15314
+ "required": false,
15313
15315
  "conditionKeys": [
15314
15316
  "aws:ResourceTag/${TagKey}",
15315
15317
  "ec2:ResourceTag/${TagKey}"
@@ -15317,8 +15319,8 @@
15317
15319
  "dependentActions": []
15318
15320
  },
15319
15321
  {
15320
- "name": "ipam-pool",
15321
- "required": false,
15322
+ "name": "ipam-scope",
15323
+ "required": true,
15322
15324
  "conditionKeys": [
15323
15325
  "aws:ResourceTag/${TagKey}",
15324
15326
  "ec2:ResourceTag/${TagKey}"
@@ -15491,72 +15493,31 @@
15491
15493
  "ec2:ProductCode",
15492
15494
  "ec2:ResourceTag/${TagKey}",
15493
15495
  "ec2:RootDeviceType",
15494
- "ec2:Tenancy"
15495
- ],
15496
- "dependentActions": []
15497
- }
15498
- ],
15499
- "conditionKeys": [
15500
- "ec2:Region"
15501
- ],
15502
- "dependentActions": []
15503
- },
15504
- "getreservedinstancesexchangequote": {
15505
- "name": "GetReservedInstancesExchangeQuote",
15506
- "description": "Grants permission to return a quote and exchange information for exchanging one or more Convertible Reserved Instances for a new Convertible Reserved Instance",
15507
- "accessLevel": "Read",
15508
- "resourceTypes": [
15509
- {
15510
- "name": "reserved-instances",
15511
- "required": true,
15512
- "conditionKeys": [
15513
- "aws:ResourceTag/${TagKey}",
15514
- "ec2:AvailabilityZone",
15515
- "ec2:InstanceType",
15516
- "ec2:ReservedInstancesOfferingType",
15517
- "ec2:ResourceTag/${TagKey}",
15518
- "ec2:Tenancy"
15519
- ],
15520
- "dependentActions": []
15521
- }
15522
- ],
15523
- "conditionKeys": [
15524
- "ec2:Region"
15525
- ],
15526
- "dependentActions": []
15527
- },
15528
- "getresourcepolicy": {
15529
- "name": "GetResourcePolicy",
15530
- "isPermissionOnly": true,
15531
- "description": "Grants permission to describe an IAM policy that enables cross-account sharing",
15532
- "accessLevel": "Read",
15533
- "resourceTypes": [
15534
- {
15535
- "name": "ipam-pool",
15536
- "required": false,
15537
- "conditionKeys": [
15538
- "aws:ResourceTag/${TagKey}",
15539
- "ec2:ResourceTag/${TagKey}"
15540
- ],
15541
- "dependentActions": []
15542
- },
15543
- {
15544
- "name": "placement-group",
15545
- "required": false,
15546
- "conditionKeys": [
15547
- "aws:ResourceTag/${TagKey}",
15548
- "ec2:PlacementGroupName",
15549
- "ec2:PlacementGroupStrategy",
15550
- "ec2:ResourceTag/${TagKey}"
15496
+ "ec2:Tenancy"
15551
15497
  ],
15552
15498
  "dependentActions": []
15553
- },
15499
+ }
15500
+ ],
15501
+ "conditionKeys": [
15502
+ "ec2:Region"
15503
+ ],
15504
+ "dependentActions": []
15505
+ },
15506
+ "getreservedinstancesexchangequote": {
15507
+ "name": "GetReservedInstancesExchangeQuote",
15508
+ "description": "Grants permission to return a quote and exchange information for exchanging one or more Convertible Reserved Instances for a new Convertible Reserved Instance",
15509
+ "accessLevel": "Read",
15510
+ "resourceTypes": [
15554
15511
  {
15555
- "name": "verified-access-group",
15556
- "required": false,
15512
+ "name": "reserved-instances",
15513
+ "required": true,
15557
15514
  "conditionKeys": [
15558
15515
  "aws:ResourceTag/${TagKey}",
15559
- "ec2:ResourceTag/${TagKey}"
15516
+ "ec2:AvailabilityZone",
15517
+ "ec2:InstanceType",
15518
+ "ec2:ReservedInstancesOfferingType",
15519
+ "ec2:ResourceTag/${TagKey}",
15520
+ "ec2:Tenancy"
15560
15521
  ],
15561
15522
  "dependentActions": []
15562
15523
  }
@@ -15883,27 +15844,6 @@
15883
15844
  ],
15884
15845
  "dependentActions": []
15885
15846
  },
15886
- "getverifiedaccessinstancewebacl": {
15887
- "name": "GetVerifiedAccessInstanceWebAcl",
15888
- "isPermissionOnly": true,
15889
- "description": "Grants permission to show the AWS Web Application Firewall (WAF) web access control list (ACL) for a Verified Access instance",
15890
- "accessLevel": "List",
15891
- "resourceTypes": [
15892
- {
15893
- "name": "verified-access-instance",
15894
- "required": true,
15895
- "conditionKeys": [
15896
- "aws:ResourceTag/${TagKey}",
15897
- "ec2:ResourceTag/${TagKey}"
15898
- ],
15899
- "dependentActions": []
15900
- }
15901
- ],
15902
- "conditionKeys": [
15903
- "ec2:Region"
15904
- ],
15905
- "dependentActions": []
15906
- },
15907
15847
  "getvpcresourcesblockingencryptionenforcement": {
15908
15848
  "name": "GetVpcResourcesBlockingEncryptionEnforcement",
15909
15849
  "description": "Grants permission to describe resources that would block VPC Encryption Control enforcement",
@@ -15982,27 +15922,6 @@
15982
15922
  ],
15983
15923
  "dependentActions": []
15984
15924
  },
15985
- "importbyoipcidrtoipam": {
15986
- "name": "ImportByoipCidrToIpam",
15987
- "isPermissionOnly": true,
15988
- "description": "Grants permission to transfer existing BYOIP IPv4 CIDRs to IPAM",
15989
- "accessLevel": "Write",
15990
- "resourceTypes": [
15991
- {
15992
- "name": "ipam-pool",
15993
- "required": true,
15994
- "conditionKeys": [
15995
- "aws:ResourceTag/${TagKey}",
15996
- "ec2:ResourceTag/${TagKey}"
15997
- ],
15998
- "dependentActions": []
15999
- }
16000
- ],
16001
- "conditionKeys": [
16002
- "ec2:Region"
16003
- ],
16004
- "dependentActions": []
16005
- },
16006
15925
  "importclientvpnclientcertificaterevocationlist": {
16007
15926
  "name": "ImportClientVpnClientCertificateRevocationList",
16008
15927
  "description": "Grants permission to upload a client certificate revocation list to a Client VPN endpoint",
@@ -16046,9 +15965,7 @@
16046
15965
  "ec2:Public",
16047
15966
  "ec2:RootDeviceType"
16048
15967
  ],
16049
- "dependentActions": [
16050
- "ec2:CreateTags"
16051
- ]
15968
+ "dependentActions": []
16052
15969
  },
16053
15970
  {
16054
15971
  "name": "import-image-task",
@@ -16099,43 +16016,43 @@
16099
16016
  "dependentActions": []
16100
16017
  },
16101
16018
  {
16102
- "name": "volume",
16103
- "required": true,
16019
+ "name": "security-group",
16020
+ "required": false,
16104
16021
  "conditionKeys": [
16105
16022
  "aws:ResourceTag/${TagKey}",
16106
- "ec2:AvailabilityZone",
16107
- "ec2:Encrypted",
16108
- "ec2:ManagedResourceOperator",
16109
- "ec2:ParentSnapshot",
16110
16023
  "ec2:ResourceTag/${TagKey}",
16111
- "ec2:VolumeID",
16112
- "ec2:VolumeIops",
16113
- "ec2:VolumeSize",
16114
- "ec2:VolumeThroughput",
16115
- "ec2:VolumeType"
16024
+ "ec2:SecurityGroupID",
16025
+ "ec2:Vpc"
16116
16026
  ],
16117
16027
  "dependentActions": []
16118
16028
  },
16119
16029
  {
16120
- "name": "security-group",
16030
+ "name": "subnet",
16121
16031
  "required": false,
16122
16032
  "conditionKeys": [
16123
16033
  "aws:ResourceTag/${TagKey}",
16034
+ "ec2:AvailabilityZone",
16124
16035
  "ec2:ResourceTag/${TagKey}",
16125
- "ec2:SecurityGroupID",
16036
+ "ec2:SubnetID",
16126
16037
  "ec2:Vpc"
16127
16038
  ],
16128
16039
  "dependentActions": []
16129
16040
  },
16130
16041
  {
16131
- "name": "subnet",
16132
- "required": false,
16042
+ "name": "volume",
16043
+ "required": true,
16133
16044
  "conditionKeys": [
16134
16045
  "aws:ResourceTag/${TagKey}",
16135
16046
  "ec2:AvailabilityZone",
16047
+ "ec2:Encrypted",
16048
+ "ec2:ManagedResourceOperator",
16049
+ "ec2:ParentSnapshot",
16136
16050
  "ec2:ResourceTag/${TagKey}",
16137
- "ec2:SubnetID",
16138
- "ec2:Vpc"
16051
+ "ec2:VolumeID",
16052
+ "ec2:VolumeIops",
16053
+ "ec2:VolumeSize",
16054
+ "ec2:VolumeThroughput",
16055
+ "ec2:VolumeType"
16139
16056
  ],
16140
16057
  "dependentActions": []
16141
16058
  }
@@ -16157,9 +16074,7 @@
16157
16074
  "aws:RequestTag/${TagKey}",
16158
16075
  "aws:TagKeys"
16159
16076
  ],
16160
- "dependentActions": [
16161
- "ec2:CreateTags"
16162
- ]
16077
+ "dependentActions": []
16163
16078
  }
16164
16079
  ],
16165
16080
  "conditionKeys": [
@@ -16179,9 +16094,7 @@
16179
16094
  "aws:RequestTag/${TagKey}",
16180
16095
  "aws:TagKeys"
16181
16096
  ],
16182
- "dependentActions": [
16183
- "ec2:CreateTags"
16184
- ]
16097
+ "dependentActions": []
16185
16098
  },
16186
16099
  {
16187
16100
  "name": "snapshot",
@@ -16233,49 +16146,6 @@
16233
16146
  ],
16234
16147
  "dependentActions": []
16235
16148
  },
16236
- "injectapierror": {
16237
- "name": "InjectApiError",
16238
- "isPermissionOnly": true,
16239
- "description": "Grants permission to temporarily inject errors for target API requests",
16240
- "accessLevel": "Write",
16241
- "resourceTypes": [],
16242
- "conditionKeys": [
16243
- "ec2:FisActionId",
16244
- "ec2:FisTargetArns",
16245
- "ec2:Region"
16246
- ],
16247
- "dependentActions": []
16248
- },
16249
- "injectvolumeiolatency": {
16250
- "name": "InjectVolumeIOLatency",
16251
- "isPermissionOnly": true,
16252
- "description": "Grants permission to temporarily inject latency to I/O operations for a target Amazon EBS volume",
16253
- "accessLevel": "Write",
16254
- "resourceTypes": [
16255
- {
16256
- "name": "volume",
16257
- "required": true,
16258
- "conditionKeys": [
16259
- "aws:ResourceTag/${TagKey}",
16260
- "ec2:AvailabilityZone",
16261
- "ec2:AvailabilityZoneId",
16262
- "ec2:Encrypted",
16263
- "ec2:ParentSnapshot",
16264
- "ec2:ResourceTag/${TagKey}",
16265
- "ec2:VolumeID",
16266
- "ec2:VolumeIops",
16267
- "ec2:VolumeSize",
16268
- "ec2:VolumeThroughput",
16269
- "ec2:VolumeType"
16270
- ],
16271
- "dependentActions": []
16272
- }
16273
- ],
16274
- "conditionKeys": [
16275
- "ec2:Region"
16276
- ],
16277
- "dependentActions": []
16278
- },
16279
16149
  "listimagesinrecyclebin": {
16280
16150
  "name": "ListImagesInRecycleBin",
16281
16151
  "description": "Grants permission to list Amazon Machine Images (AMIs) that are currently in the Recycle Bin",
@@ -16405,9 +16275,7 @@
16405
16275
  "ec2:Attribute/${AttributeName}",
16406
16276
  "ec2:ResourceTag/${TagKey}"
16407
16277
  ],
16408
- "dependentActions": [
16409
- "ec2:ModifyCapacityReservation"
16410
- ]
16278
+ "dependentActions": []
16411
16279
  }
16412
16280
  ],
16413
16281
  "conditionKeys": [
@@ -16724,6 +16592,14 @@
16724
16592
  "description": "Grants permission to modify the Capacity Reservation settings for a stopped instance",
16725
16593
  "accessLevel": "Write",
16726
16594
  "resourceTypes": [
16595
+ {
16596
+ "name": "capacity-reservation",
16597
+ "required": false,
16598
+ "conditionKeys": [
16599
+ "aws:ResourceTag/${TagKey}"
16600
+ ],
16601
+ "dependentActions": []
16602
+ },
16727
16603
  {
16728
16604
  "name": "instance",
16729
16605
  "required": true,
@@ -16753,14 +16629,6 @@
16753
16629
  "ec2:Tenancy"
16754
16630
  ],
16755
16631
  "dependentActions": []
16756
- },
16757
- {
16758
- "name": "capacity-reservation",
16759
- "required": false,
16760
- "conditionKeys": [
16761
- "aws:ResourceTag/${TagKey}"
16762
- ],
16763
- "dependentActions": []
16764
16632
  }
16765
16633
  ],
16766
16634
  "conditionKeys": [
@@ -17084,6 +16952,15 @@
17084
16952
  "description": "Grants permission to modify the placement attributes for an instance",
17085
16953
  "accessLevel": "Write",
17086
16954
  "resourceTypes": [
16955
+ {
16956
+ "name": "dedicated-host",
16957
+ "required": false,
16958
+ "conditionKeys": [
16959
+ "aws:ResourceTag/${TagKey}",
16960
+ "ec2:ResourceTag/${TagKey}"
16961
+ ],
16962
+ "dependentActions": []
16963
+ },
17087
16964
  {
17088
16965
  "name": "instance",
17089
16966
  "required": true,
@@ -17114,15 +16991,6 @@
17114
16991
  ],
17115
16992
  "dependentActions": []
17116
16993
  },
17117
- {
17118
- "name": "dedicated-host",
17119
- "required": false,
17120
- "conditionKeys": [
17121
- "aws:ResourceTag/${TagKey}",
17122
- "ec2:ResourceTag/${TagKey}"
17123
- ],
17124
- "dependentActions": []
17125
- },
17126
16994
  {
17127
16995
  "name": "placement-group",
17128
16996
  "required": false,
@@ -17468,22 +17336,6 @@
17468
17336
  "description": "Grants permission to modify an attribute of a network interface",
17469
17337
  "accessLevel": "Write",
17470
17338
  "resourceTypes": [
17471
- {
17472
- "name": "network-interface",
17473
- "required": true,
17474
- "conditionKeys": [
17475
- "aws:ResourceTag/${TagKey}",
17476
- "ec2:Attribute",
17477
- "ec2:Attribute/${AttributeName}",
17478
- "ec2:AvailabilityZone",
17479
- "ec2:ManagedResourceOperator",
17480
- "ec2:NetworkInterfaceID",
17481
- "ec2:ResourceTag/${TagKey}",
17482
- "ec2:Subnet",
17483
- "ec2:Vpc"
17484
- ],
17485
- "dependentActions": []
17486
- },
17487
17339
  {
17488
17340
  "name": "instance",
17489
17341
  "required": false,
@@ -17513,49 +17365,41 @@
17513
17365
  "dependentActions": []
17514
17366
  },
17515
17367
  {
17516
- "name": "security-group",
17517
- "required": false,
17368
+ "name": "network-interface",
17369
+ "required": true,
17518
17370
  "conditionKeys": [
17519
17371
  "aws:ResourceTag/${TagKey}",
17372
+ "ec2:Attribute",
17373
+ "ec2:Attribute/${AttributeName}",
17374
+ "ec2:AvailabilityZone",
17375
+ "ec2:ManagedResourceOperator",
17376
+ "ec2:NetworkInterfaceID",
17520
17377
  "ec2:ResourceTag/${TagKey}",
17521
- "ec2:SecurityGroupID",
17378
+ "ec2:Subnet",
17522
17379
  "ec2:Vpc"
17523
17380
  ],
17524
17381
  "dependentActions": []
17525
17382
  },
17526
17383
  {
17527
- "name": "subnet",
17384
+ "name": "security-group",
17528
17385
  "required": false,
17529
17386
  "conditionKeys": [
17530
17387
  "aws:ResourceTag/${TagKey}",
17531
- "ec2:AvailabilityZone",
17532
- "ec2:AvailabilityZoneId",
17533
17388
  "ec2:ResourceTag/${TagKey}",
17389
+ "ec2:SecurityGroupID",
17534
17390
  "ec2:Vpc"
17535
17391
  ],
17536
17392
  "dependentActions": []
17537
- }
17538
- ],
17539
- "conditionKeys": [
17540
- "ec2:Region"
17541
- ],
17542
- "dependentActions": []
17543
- },
17544
- "modifyodbnetworkpeering": {
17545
- "name": "ModifyOdbNetworkPeering",
17546
- "isPermissionOnly": true,
17547
- "description": "Grants permission to allow Oracle Database@AWS to modify the settings of a peering connection between an ODB network and a VPC",
17548
- "accessLevel": "Permissions management",
17549
- "resourceTypes": [
17393
+ },
17550
17394
  {
17551
- "name": "vpc",
17552
- "required": true,
17395
+ "name": "subnet",
17396
+ "required": false,
17553
17397
  "conditionKeys": [
17554
17398
  "aws:ResourceTag/${TagKey}",
17555
- "ec2:Attribute/${AttributeName}",
17399
+ "ec2:AvailabilityZone",
17400
+ "ec2:AvailabilityZoneId",
17556
17401
  "ec2:ResourceTag/${TagKey}",
17557
- "ec2:Tenancy",
17558
- "ec2:VpcID"
17402
+ "ec2:Vpc"
17559
17403
  ],
17560
17404
  "dependentActions": []
17561
17405
  }
@@ -17684,28 +17528,28 @@
17684
17528
  "accessLevel": "Write",
17685
17529
  "resourceTypes": [
17686
17530
  {
17687
- "name": "security-group",
17688
- "required": true,
17531
+ "name": "prefix-list",
17532
+ "required": false,
17689
17533
  "conditionKeys": [
17690
17534
  "aws:ResourceTag/${TagKey}",
17691
- "ec2:ResourceTag/${TagKey}",
17692
- "ec2:SecurityGroupID",
17693
- "ec2:Vpc"
17535
+ "ec2:ResourceTag/${TagKey}"
17694
17536
  ],
17695
17537
  "dependentActions": []
17696
17538
  },
17697
17539
  {
17698
- "name": "security-group-rule",
17540
+ "name": "security-group",
17699
17541
  "required": true,
17700
17542
  "conditionKeys": [
17701
17543
  "aws:ResourceTag/${TagKey}",
17702
- "ec2:ResourceTag/${TagKey}"
17544
+ "ec2:ResourceTag/${TagKey}",
17545
+ "ec2:SecurityGroupID",
17546
+ "ec2:Vpc"
17703
17547
  ],
17704
17548
  "dependentActions": []
17705
17549
  },
17706
17550
  {
17707
- "name": "prefix-list",
17708
- "required": false,
17551
+ "name": "security-group-rule",
17552
+ "required": true,
17709
17553
  "conditionKeys": [
17710
17554
  "aws:ResourceTag/${TagKey}",
17711
17555
  "ec2:ResourceTag/${TagKey}"
@@ -17721,7 +17565,7 @@
17721
17565
  "modifysnapshotattribute": {
17722
17566
  "name": "ModifySnapshotAttribute",
17723
17567
  "description": "Grants permission to add or remove permission settings for a snapshot",
17724
- "accessLevel": "Permissions management",
17568
+ "accessLevel": "Permissions management, Write",
17725
17569
  "resourceTypes": [
17726
17570
  {
17727
17571
  "name": "snapshot",
@@ -17783,23 +17627,23 @@
17783
17627
  "description": "Grants permission to modify a Spot Fleet request",
17784
17628
  "accessLevel": "Write",
17785
17629
  "resourceTypes": [
17786
- {
17787
- "name": "spot-fleet-request",
17788
- "required": true,
17630
+ {
17631
+ "name": "launch-template",
17632
+ "required": false,
17789
17633
  "conditionKeys": [
17790
17634
  "aws:ResourceTag/${TagKey}",
17791
- "ec2:Attribute",
17792
- "ec2:Attribute/${AttributeName}",
17635
+ "ec2:ManagedResourceOperator",
17793
17636
  "ec2:ResourceTag/${TagKey}"
17794
17637
  ],
17795
17638
  "dependentActions": []
17796
17639
  },
17797
17640
  {
17798
- "name": "launch-template",
17799
- "required": false,
17641
+ "name": "spot-fleet-request",
17642
+ "required": true,
17800
17643
  "conditionKeys": [
17801
17644
  "aws:ResourceTag/${TagKey}",
17802
- "ec2:ManagedResourceOperator",
17645
+ "ec2:Attribute",
17646
+ "ec2:Attribute/${AttributeName}",
17803
17647
  "ec2:ResourceTag/${TagKey}"
17804
17648
  ],
17805
17649
  "dependentActions": []
@@ -17910,21 +17754,21 @@
17910
17754
  "accessLevel": "Write",
17911
17755
  "resourceTypes": [
17912
17756
  {
17913
- "name": "traffic-mirror-session",
17914
- "required": true,
17757
+ "name": "traffic-mirror-filter",
17758
+ "required": false,
17915
17759
  "conditionKeys": [
17916
17760
  "aws:ResourceTag/${TagKey}",
17917
- "ec2:Attribute",
17918
- "ec2:Attribute/${AttributeName}",
17919
17761
  "ec2:ResourceTag/${TagKey}"
17920
17762
  ],
17921
17763
  "dependentActions": []
17922
17764
  },
17923
17765
  {
17924
- "name": "traffic-mirror-filter",
17925
- "required": false,
17766
+ "name": "traffic-mirror-session",
17767
+ "required": true,
17926
17768
  "conditionKeys": [
17927
17769
  "aws:ResourceTag/${TagKey}",
17770
+ "ec2:Attribute",
17771
+ "ec2:Attribute/${AttributeName}",
17928
17772
  "ec2:ResourceTag/${TagKey}"
17929
17773
  ],
17930
17774
  "dependentActions": []
@@ -17983,23 +17827,23 @@
17983
17827
  "accessLevel": "Write",
17984
17828
  "resourceTypes": [
17985
17829
  {
17986
- "name": "transit-gateway-metering-policy",
17987
- "required": true,
17830
+ "name": "transit-gateway-attachment",
17831
+ "required": false,
17988
17832
  "conditionKeys": [
17989
17833
  "aws:ResourceTag/${TagKey}",
17990
- "ec2:Attribute/${AttributeName}",
17991
17834
  "ec2:ResourceTag/${TagKey}",
17992
- "ec2:transitGatewayMeteringPolicyId"
17835
+ "ec2:transitGatewayAttachmentId"
17993
17836
  ],
17994
17837
  "dependentActions": []
17995
17838
  },
17996
17839
  {
17997
- "name": "transit-gateway-attachment",
17998
- "required": false,
17840
+ "name": "transit-gateway-metering-policy",
17841
+ "required": true,
17999
17842
  "conditionKeys": [
18000
17843
  "aws:ResourceTag/${TagKey}",
17844
+ "ec2:Attribute/${AttributeName}",
18001
17845
  "ec2:ResourceTag/${TagKey}",
18002
- "ec2:transitGatewayAttachmentId"
17846
+ "ec2:transitGatewayMeteringPolicyId"
18003
17847
  ],
18004
17848
  "dependentActions": []
18005
17849
  }
@@ -18026,24 +17870,24 @@
18026
17870
  "dependentActions": []
18027
17871
  },
18028
17872
  {
18029
- "name": "transit-gateway-route-table",
18030
- "required": true,
17873
+ "name": "transit-gateway-attachment",
17874
+ "required": false,
18031
17875
  "conditionKeys": [
18032
17876
  "aws:ResourceTag/${TagKey}",
18033
- "ec2:Attribute",
18034
- "ec2:Attribute/${AttributeName}",
18035
17877
  "ec2:ResourceTag/${TagKey}",
18036
- "ec2:transitGatewayRouteTableId"
17878
+ "ec2:transitGatewayAttachmentId"
18037
17879
  ],
18038
17880
  "dependentActions": []
18039
17881
  },
18040
17882
  {
18041
- "name": "transit-gateway-attachment",
18042
- "required": false,
17883
+ "name": "transit-gateway-route-table",
17884
+ "required": true,
18043
17885
  "conditionKeys": [
18044
17886
  "aws:ResourceTag/${TagKey}",
17887
+ "ec2:Attribute",
17888
+ "ec2:Attribute/${AttributeName}",
18045
17889
  "ec2:ResourceTag/${TagKey}",
18046
- "ec2:transitGatewayAttachmentId"
17890
+ "ec2:transitGatewayRouteTableId"
18047
17891
  ],
18048
17892
  "dependentActions": []
18049
17893
  }
@@ -18059,27 +17903,27 @@
18059
17903
  "accessLevel": "Write",
18060
17904
  "resourceTypes": [
18061
17905
  {
18062
- "name": "transit-gateway-attachment",
18063
- "required": true,
17906
+ "name": "subnet",
17907
+ "required": false,
18064
17908
  "conditionKeys": [
18065
17909
  "aws:ResourceTag/${TagKey}",
18066
- "ec2:Attribute",
18067
- "ec2:Attribute/${AttributeName}",
17910
+ "ec2:AvailabilityZone",
17911
+ "ec2:AvailabilityZoneId",
18068
17912
  "ec2:ResourceTag/${TagKey}",
18069
- "ec2:transitGatewayAttachmentId"
17913
+ "ec2:SubnetID",
17914
+ "ec2:Vpc"
18070
17915
  ],
18071
17916
  "dependentActions": []
18072
17917
  },
18073
17918
  {
18074
- "name": "subnet",
18075
- "required": false,
17919
+ "name": "transit-gateway-attachment",
17920
+ "required": true,
18076
17921
  "conditionKeys": [
18077
17922
  "aws:ResourceTag/${TagKey}",
18078
- "ec2:AvailabilityZone",
18079
- "ec2:AvailabilityZoneId",
17923
+ "ec2:Attribute",
17924
+ "ec2:Attribute/${AttributeName}",
18080
17925
  "ec2:ResourceTag/${TagKey}",
18081
- "ec2:SubnetID",
18082
- "ec2:Vpc"
17926
+ "ec2:transitGatewayAttachmentId"
18083
17927
  ],
18084
17928
  "dependentActions": []
18085
17929
  }
@@ -18094,16 +17938,6 @@
18094
17938
  "description": "Grants permission to modify the configuration of a Verified Access endpoint",
18095
17939
  "accessLevel": "Write",
18096
17940
  "resourceTypes": [
18097
- {
18098
- "name": "verified-access-endpoint",
18099
- "required": true,
18100
- "conditionKeys": [
18101
- "aws:ResourceTag/${TagKey}",
18102
- "ec2:Attribute/${AttributeName}",
18103
- "ec2:ResourceTag/${TagKey}"
18104
- ],
18105
- "dependentActions": []
18106
- },
18107
17941
  {
18108
17942
  "name": "subnet",
18109
17943
  "required": false,
@@ -18117,6 +17951,16 @@
18117
17951
  ],
18118
17952
  "dependentActions": []
18119
17953
  },
17954
+ {
17955
+ "name": "verified-access-endpoint",
17956
+ "required": true,
17957
+ "conditionKeys": [
17958
+ "aws:ResourceTag/${TagKey}",
17959
+ "ec2:Attribute/${AttributeName}",
17960
+ "ec2:ResourceTag/${TagKey}"
17961
+ ],
17962
+ "dependentActions": []
17963
+ },
18120
17964
  {
18121
17965
  "name": "verified-access-group",
18122
17966
  "required": false,
@@ -18420,19 +18264,6 @@
18420
18264
  "description": "Grants permission to modify an attribute of a VPC endpoint",
18421
18265
  "accessLevel": "Write",
18422
18266
  "resourceTypes": [
18423
- {
18424
- "name": "vpc-endpoint",
18425
- "required": true,
18426
- "conditionKeys": [
18427
- "aws:ResourceTag/${TagKey}",
18428
- "ec2:Attribute",
18429
- "ec2:Attribute/${AttributeName}",
18430
- "ec2:ResourceTag/${TagKey}",
18431
- "ec2:VpceMultiRegion",
18432
- "ec2:VpceServiceRegion"
18433
- ],
18434
- "dependentActions": []
18435
- },
18436
18267
  {
18437
18268
  "name": "route-table",
18438
18269
  "required": false,
@@ -18466,6 +18297,19 @@
18466
18297
  "ec2:Vpc"
18467
18298
  ],
18468
18299
  "dependentActions": []
18300
+ },
18301
+ {
18302
+ "name": "vpc-endpoint",
18303
+ "required": true,
18304
+ "conditionKeys": [
18305
+ "aws:ResourceTag/${TagKey}",
18306
+ "ec2:Attribute",
18307
+ "ec2:Attribute/${AttributeName}",
18308
+ "ec2:ResourceTag/${TagKey}",
18309
+ "ec2:VpceMultiRegion",
18310
+ "ec2:VpceServiceRegion"
18311
+ ],
18312
+ "dependentActions": []
18469
18313
  }
18470
18314
  ],
18471
18315
  "conditionKeys": [
@@ -18556,7 +18400,7 @@
18556
18400
  "modifyvpcendpointservicepermissions": {
18557
18401
  "name": "ModifyVpcEndpointServicePermissions",
18558
18402
  "description": "Grants permission to modify the permissions for a VPC endpoint service",
18559
- "accessLevel": "Permissions management",
18403
+ "accessLevel": "Permissions management, Write",
18560
18404
  "resourceTypes": [
18561
18405
  {
18562
18406
  "name": "vpc-endpoint-service",
@@ -18854,62 +18698,6 @@
18854
18698
  ],
18855
18699
  "dependentActions": []
18856
18700
  },
18857
- "pausevolumeio": {
18858
- "name": "PauseVolumeIO",
18859
- "isPermissionOnly": true,
18860
- "description": "Grants permission to temporarily pause I/O operations for a target Amazon EBS volume",
18861
- "accessLevel": "Write",
18862
- "resourceTypes": [
18863
- {
18864
- "name": "volume",
18865
- "required": true,
18866
- "conditionKeys": [
18867
- "aws:ResourceTag/${TagKey}",
18868
- "ec2:AvailabilityZone",
18869
- "ec2:AvailabilityZoneId",
18870
- "ec2:Encrypted",
18871
- "ec2:ManagedResourceOperator",
18872
- "ec2:ParentSnapshot",
18873
- "ec2:ResourceTag/${TagKey}",
18874
- "ec2:VolumeID",
18875
- "ec2:VolumeIops",
18876
- "ec2:VolumeSize",
18877
- "ec2:VolumeThroughput",
18878
- "ec2:VolumeType"
18879
- ],
18880
- "dependentActions": []
18881
- },
18882
- {
18883
- "name": "instance",
18884
- "required": false,
18885
- "conditionKeys": [
18886
- "aws:ResourceTag/${TagKey}",
18887
- "ec2:AvailabilityZone",
18888
- "ec2:CpuOptionsAmdSevSnp",
18889
- "ec2:EbsOptimized",
18890
- "ec2:InstanceAutoRecovery",
18891
- "ec2:InstanceBandwidthWeighting",
18892
- "ec2:InstanceID",
18893
- "ec2:InstanceMarketType",
18894
- "ec2:InstanceMetadataTags",
18895
- "ec2:InstanceProfile",
18896
- "ec2:InstanceType",
18897
- "ec2:ManagedResourceOperator",
18898
- "ec2:MetadataHttpEndpoint",
18899
- "ec2:MetadataHttpPutResponseHopLimit",
18900
- "ec2:MetadataHttpTokens",
18901
- "ec2:ResourceTag/${TagKey}",
18902
- "ec2:RootDeviceType",
18903
- "ec2:Tenancy"
18904
- ],
18905
- "dependentActions": []
18906
- }
18907
- ],
18908
- "conditionKeys": [
18909
- "ec2:Region"
18910
- ],
18911
- "dependentActions": []
18912
- },
18913
18701
  "provisionbyoipcidr": {
18914
18702
  "name": "ProvisionByoipCidr",
18915
18703
  "description": "Grants permission to provision an address range for use in AWS through bring your own IP addresses (BYOIP), and to create a corresponding address pool",
@@ -18946,8 +18734,8 @@
18946
18734
  "accessLevel": "Write",
18947
18735
  "resourceTypes": [
18948
18736
  {
18949
- "name": "ipam-pool",
18950
- "required": true,
18737
+ "name": "ipam-external-resource-verification-token",
18738
+ "required": false,
18951
18739
  "conditionKeys": [
18952
18740
  "aws:ResourceTag/${TagKey}",
18953
18741
  "ec2:ResourceTag/${TagKey}"
@@ -18955,8 +18743,8 @@
18955
18743
  "dependentActions": []
18956
18744
  },
18957
18745
  {
18958
- "name": "ipam-external-resource-verification-token",
18959
- "required": false,
18746
+ "name": "ipam-pool",
18747
+ "required": true,
18960
18748
  "conditionKeys": [
18961
18749
  "aws:ResourceTag/${TagKey}",
18962
18750
  "ec2:ResourceTag/${TagKey}"
@@ -19011,9 +18799,7 @@
19011
18799
  "aws:TagKeys",
19012
18800
  "ec2:CapacityReservationFleet"
19013
18801
  ],
19014
- "dependentActions": [
19015
- "ec2:CreateTags"
19016
- ]
18802
+ "dependentActions": []
19017
18803
  }
19018
18804
  ],
19019
18805
  "conditionKeys": [
@@ -19053,9 +18839,7 @@
19053
18839
  "aws:ResourceTag/${TagKey}",
19054
18840
  "ec2:ResourceTag/${TagKey}"
19055
18841
  ],
19056
- "dependentActions": [
19057
- "ec2:CreateTags"
19058
- ]
18842
+ "dependentActions": []
19059
18843
  }
19060
18844
  ],
19061
18845
  "conditionKeys": [
@@ -19083,47 +18867,6 @@
19083
18867
  ],
19084
18868
  "dependentActions": []
19085
18869
  },
19086
- "putresourcepolicy": {
19087
- "name": "PutResourcePolicy",
19088
- "isPermissionOnly": true,
19089
- "description": "Grants permission to attach an IAM policy that enables cross-account sharing to a resource",
19090
- "accessLevel": "Permissions management",
19091
- "resourceTypes": [
19092
- {
19093
- "name": "ipam-pool",
19094
- "required": false,
19095
- "conditionKeys": [
19096
- "aws:ResourceTag/${TagKey}",
19097
- "ec2:ResourceTag/${TagKey}"
19098
- ],
19099
- "dependentActions": []
19100
- },
19101
- {
19102
- "name": "placement-group",
19103
- "required": false,
19104
- "conditionKeys": [
19105
- "aws:ResourceTag/${TagKey}",
19106
- "ec2:PlacementGroupName",
19107
- "ec2:PlacementGroupStrategy",
19108
- "ec2:ResourceTag/${TagKey}"
19109
- ],
19110
- "dependentActions": []
19111
- },
19112
- {
19113
- "name": "verified-access-group",
19114
- "required": false,
19115
- "conditionKeys": [
19116
- "aws:ResourceTag/${TagKey}",
19117
- "ec2:ResourceTag/${TagKey}"
19118
- ],
19119
- "dependentActions": []
19120
- }
19121
- ],
19122
- "conditionKeys": [
19123
- "ec2:Region"
19124
- ],
19125
- "dependentActions": []
19126
- },
19127
18870
  "rebootinstances": {
19128
18871
  "name": "RebootInstances",
19129
18872
  "description": "Grants permission to request a reboot of one or more instances",
@@ -19177,9 +18920,7 @@
19177
18920
  "ec2:ImageID",
19178
18921
  "ec2:Owner"
19179
18922
  ],
19180
- "dependentActions": [
19181
- "ec2:CreateTags"
19182
- ]
18923
+ "dependentActions": []
19183
18924
  },
19184
18925
  {
19185
18926
  "name": "snapshot",
@@ -19552,9 +19293,7 @@
19552
19293
  "ec2:RootDeviceType",
19553
19294
  "ec2:Tenancy"
19554
19295
  ],
19555
- "dependentActions": [
19556
- "iam:PassRole"
19557
- ]
19296
+ "dependentActions": []
19558
19297
  }
19559
19298
  ],
19560
19299
  "conditionKeys": [
@@ -19634,6 +19373,12 @@
19634
19373
  "description": "Grants permission to replace a route within a route table in a VPC",
19635
19374
  "accessLevel": "Write",
19636
19375
  "resourceTypes": [
19376
+ {
19377
+ "name": "instance",
19378
+ "required": false,
19379
+ "conditionKeys": [],
19380
+ "dependentActions": []
19381
+ },
19637
19382
  {
19638
19383
  "name": "route-table",
19639
19384
  "required": true,
@@ -19657,28 +19402,26 @@
19657
19402
  "accessLevel": "Write",
19658
19403
  "resourceTypes": [
19659
19404
  {
19660
- "name": "route-table",
19661
- "required": true,
19405
+ "name": "internet-gateway",
19406
+ "required": false,
19662
19407
  "conditionKeys": [
19663
19408
  "aws:ResourceTag/${TagKey}",
19664
- "ec2:ResourceTag/${TagKey}",
19665
- "ec2:RouteTableID",
19666
- "ec2:Vpc"
19409
+ "ec2:InternetGatewayID",
19410
+ "ec2:ResourceTag/${TagKey}"
19667
19411
  ],
19668
19412
  "dependentActions": []
19669
19413
  },
19670
19414
  {
19671
- "name": "internet-gateway",
19415
+ "name": "ipv4pool-ec2",
19672
19416
  "required": false,
19673
19417
  "conditionKeys": [
19674
19418
  "aws:ResourceTag/${TagKey}",
19675
- "ec2:InternetGatewayID",
19676
19419
  "ec2:ResourceTag/${TagKey}"
19677
19420
  ],
19678
19421
  "dependentActions": []
19679
19422
  },
19680
19423
  {
19681
- "name": "ipv4pool-ec2",
19424
+ "name": "ipv6pool-ec2",
19682
19425
  "required": false,
19683
19426
  "conditionKeys": [
19684
19427
  "aws:ResourceTag/${TagKey}",
@@ -19687,11 +19430,13 @@
19687
19430
  "dependentActions": []
19688
19431
  },
19689
19432
  {
19690
- "name": "ipv6pool-ec2",
19691
- "required": false,
19433
+ "name": "route-table",
19434
+ "required": true,
19692
19435
  "conditionKeys": [
19693
19436
  "aws:ResourceTag/${TagKey}",
19694
- "ec2:ResourceTag/${TagKey}"
19437
+ "ec2:ResourceTag/${TagKey}",
19438
+ "ec2:RouteTableID",
19439
+ "ec2:Vpc"
19695
19440
  ],
19696
19441
  "dependentActions": []
19697
19442
  },
@@ -19729,22 +19474,22 @@
19729
19474
  "accessLevel": "Write",
19730
19475
  "resourceTypes": [
19731
19476
  {
19732
- "name": "transit-gateway-route-table",
19733
- "required": true,
19477
+ "name": "transit-gateway-attachment",
19478
+ "required": false,
19734
19479
  "conditionKeys": [
19735
19480
  "aws:ResourceTag/${TagKey}",
19736
19481
  "ec2:ResourceTag/${TagKey}",
19737
- "ec2:transitGatewayRouteTableId"
19482
+ "ec2:transitGatewayAttachmentId"
19738
19483
  ],
19739
19484
  "dependentActions": []
19740
19485
  },
19741
19486
  {
19742
- "name": "transit-gateway-attachment",
19743
- "required": false,
19487
+ "name": "transit-gateway-route-table",
19488
+ "required": true,
19744
19489
  "conditionKeys": [
19745
19490
  "aws:ResourceTag/${TagKey}",
19746
19491
  "ec2:ResourceTag/${TagKey}",
19747
- "ec2:transitGatewayAttachmentId"
19492
+ "ec2:transitGatewayRouteTableId"
19748
19493
  ],
19749
19494
  "dependentActions": []
19750
19495
  }
@@ -19800,17 +19545,6 @@
19800
19545
  "description": "Grants permission to create a Spot Fleet request",
19801
19546
  "accessLevel": "Write",
19802
19547
  "resourceTypes": [
19803
- {
19804
- "name": "spot-fleet-request",
19805
- "required": true,
19806
- "conditionKeys": [
19807
- "aws:RequestTag/${TagKey}",
19808
- "aws:TagKeys"
19809
- ],
19810
- "dependentActions": [
19811
- "ec2:CreateTags"
19812
- ]
19813
- },
19814
19548
  {
19815
19549
  "name": "image",
19816
19550
  "required": false,
@@ -19884,6 +19618,15 @@
19884
19618
  ],
19885
19619
  "dependentActions": []
19886
19620
  },
19621
+ {
19622
+ "name": "spot-fleet-request",
19623
+ "required": true,
19624
+ "conditionKeys": [
19625
+ "aws:RequestTag/${TagKey}",
19626
+ "aws:TagKeys"
19627
+ ],
19628
+ "dependentActions": []
19629
+ },
19887
19630
  {
19888
19631
  "name": "subnet",
19889
19632
  "required": false,
@@ -19908,18 +19651,6 @@
19908
19651
  "description": "Grants permission to create a Spot Instance request",
19909
19652
  "accessLevel": "Write",
19910
19653
  "resourceTypes": [
19911
- {
19912
- "name": "spot-instances-request",
19913
- "required": true,
19914
- "conditionKeys": [
19915
- "aws:RequestTag/${TagKey}",
19916
- "aws:TagKeys"
19917
- ],
19918
- "dependentActions": [
19919
- "ec2:CreateTags",
19920
- "iam:PassRole"
19921
- ]
19922
- },
19923
19654
  {
19924
19655
  "name": "image",
19925
19656
  "required": false,
@@ -19999,6 +19730,15 @@
19999
19730
  ],
20000
19731
  "dependentActions": []
20001
19732
  },
19733
+ {
19734
+ "name": "spot-instances-request",
19735
+ "required": true,
19736
+ "conditionKeys": [
19737
+ "aws:RequestTag/${TagKey}",
19738
+ "aws:TagKeys"
19739
+ ],
19740
+ "dependentActions": []
19741
+ },
20002
19742
  {
20003
19743
  "name": "subnet",
20004
19744
  "required": false,
@@ -20170,7 +19910,7 @@
20170
19910
  "resetsnapshotattribute": {
20171
19911
  "name": "ResetSnapshotAttribute",
20172
19912
  "description": "Grants permission to reset permission settings for a snapshot",
20173
- "accessLevel": "Permissions management",
19913
+ "accessLevel": "Permissions management, Write",
20174
19914
  "resourceTypes": [
20175
19915
  {
20176
19916
  "name": "snapshot",
@@ -20407,6 +20147,40 @@
20407
20147
  "description": "Grants permission to launch one or more instances",
20408
20148
  "accessLevel": "Write",
20409
20149
  "resourceTypes": [
20150
+ {
20151
+ "name": "capacity-reservation",
20152
+ "required": false,
20153
+ "conditionKeys": [
20154
+ "aws:ResourceTag/${TagKey}",
20155
+ "ec2:IsLaunchTemplateResource",
20156
+ "ec2:LaunchTemplate"
20157
+ ],
20158
+ "dependentActions": []
20159
+ },
20160
+ {
20161
+ "name": "elastic-gpu",
20162
+ "required": false,
20163
+ "conditionKeys": [
20164
+ "aws:ResourceTag/${TagKey}",
20165
+ "ec2:ElasticGpuType",
20166
+ "ec2:IsLaunchTemplateResource",
20167
+ "ec2:LaunchTemplate",
20168
+ "ec2:ResourceTag/${TagKey}"
20169
+ ],
20170
+ "dependentActions": []
20171
+ },
20172
+ {
20173
+ "name": "elastic-inference",
20174
+ "required": false,
20175
+ "conditionKeys": [],
20176
+ "dependentActions": []
20177
+ },
20178
+ {
20179
+ "name": "group",
20180
+ "required": false,
20181
+ "conditionKeys": [],
20182
+ "dependentActions": []
20183
+ },
20410
20184
  {
20411
20185
  "name": "image",
20412
20186
  "required": true,
@@ -20421,11 +20195,7 @@
20421
20195
  "ec2:ResourceTag/${TagKey}",
20422
20196
  "ec2:RootDeviceType"
20423
20197
  ],
20424
- "dependentActions": [
20425
- "ec2:CreateTags",
20426
- "iam:PassRole",
20427
- "ssm:GetParameters"
20428
- ]
20198
+ "dependentActions": []
20429
20199
  },
20430
20200
  {
20431
20201
  "name": "instance",
@@ -20457,86 +20227,6 @@
20457
20227
  ],
20458
20228
  "dependentActions": []
20459
20229
  },
20460
- {
20461
- "name": "network-interface",
20462
- "required": true,
20463
- "conditionKeys": [
20464
- "aws:RequestTag/${TagKey}",
20465
- "aws:TagKeys",
20466
- "ec2:AssociatePublicIpAddress",
20467
- "ec2:AuthorizedService",
20468
- "ec2:AvailabilityZone",
20469
- "ec2:IsLaunchTemplateResource",
20470
- "ec2:LaunchTemplate",
20471
- "ec2:ManagedResourceOperator",
20472
- "ec2:NetworkInterfaceID",
20473
- "ec2:Subnet",
20474
- "ec2:Vpc"
20475
- ],
20476
- "dependentActions": []
20477
- },
20478
- {
20479
- "name": "security-group",
20480
- "required": true,
20481
- "conditionKeys": [
20482
- "aws:ResourceTag/${TagKey}",
20483
- "ec2:IsLaunchTemplateResource",
20484
- "ec2:LaunchTemplate",
20485
- "ec2:ResourceTag/${TagKey}",
20486
- "ec2:SecurityGroupID",
20487
- "ec2:Vpc"
20488
- ],
20489
- "dependentActions": []
20490
- },
20491
- {
20492
- "name": "subnet",
20493
- "required": true,
20494
- "conditionKeys": [
20495
- "aws:ResourceTag/${TagKey}",
20496
- "ec2:AvailabilityZone",
20497
- "ec2:AvailabilityZoneId",
20498
- "ec2:IsLaunchTemplateResource",
20499
- "ec2:LaunchTemplate",
20500
- "ec2:ResourceTag/${TagKey}",
20501
- "ec2:SubnetID",
20502
- "ec2:Vpc"
20503
- ],
20504
- "dependentActions": []
20505
- },
20506
- {
20507
- "name": "capacity-reservation",
20508
- "required": false,
20509
- "conditionKeys": [
20510
- "aws:ResourceTag/${TagKey}",
20511
- "ec2:IsLaunchTemplateResource",
20512
- "ec2:LaunchTemplate"
20513
- ],
20514
- "dependentActions": []
20515
- },
20516
- {
20517
- "name": "elastic-gpu",
20518
- "required": false,
20519
- "conditionKeys": [
20520
- "aws:ResourceTag/${TagKey}",
20521
- "ec2:ElasticGpuType",
20522
- "ec2:IsLaunchTemplateResource",
20523
- "ec2:LaunchTemplate",
20524
- "ec2:ResourceTag/${TagKey}"
20525
- ],
20526
- "dependentActions": []
20527
- },
20528
- {
20529
- "name": "elastic-inference",
20530
- "required": false,
20531
- "conditionKeys": [],
20532
- "dependentActions": []
20533
- },
20534
- {
20535
- "name": "group",
20536
- "required": false,
20537
- "conditionKeys": [],
20538
- "dependentActions": []
20539
- },
20540
20230
  {
20541
20231
  "name": "key-pair",
20542
20232
  "required": false,
@@ -20568,6 +20258,24 @@
20568
20258
  "conditionKeys": [],
20569
20259
  "dependentActions": []
20570
20260
  },
20261
+ {
20262
+ "name": "network-interface",
20263
+ "required": true,
20264
+ "conditionKeys": [
20265
+ "aws:RequestTag/${TagKey}",
20266
+ "aws:TagKeys",
20267
+ "ec2:AssociatePublicIpAddress",
20268
+ "ec2:AuthorizedService",
20269
+ "ec2:AvailabilityZone",
20270
+ "ec2:IsLaunchTemplateResource",
20271
+ "ec2:LaunchTemplate",
20272
+ "ec2:ManagedResourceOperator",
20273
+ "ec2:NetworkInterfaceID",
20274
+ "ec2:Subnet",
20275
+ "ec2:Vpc"
20276
+ ],
20277
+ "dependentActions": []
20278
+ },
20571
20279
  {
20572
20280
  "name": "placement-group",
20573
20281
  "required": false,
@@ -20599,6 +20307,19 @@
20599
20307
  ],
20600
20308
  "dependentActions": []
20601
20309
  },
20310
+ {
20311
+ "name": "security-group",
20312
+ "required": true,
20313
+ "conditionKeys": [
20314
+ "aws:ResourceTag/${TagKey}",
20315
+ "ec2:IsLaunchTemplateResource",
20316
+ "ec2:LaunchTemplate",
20317
+ "ec2:ResourceTag/${TagKey}",
20318
+ "ec2:SecurityGroupID",
20319
+ "ec2:Vpc"
20320
+ ],
20321
+ "dependentActions": []
20322
+ },
20602
20323
  {
20603
20324
  "name": "snapshot",
20604
20325
  "required": false,
@@ -20624,6 +20345,21 @@
20624
20345
  ],
20625
20346
  "dependentActions": []
20626
20347
  },
20348
+ {
20349
+ "name": "subnet",
20350
+ "required": true,
20351
+ "conditionKeys": [
20352
+ "aws:ResourceTag/${TagKey}",
20353
+ "ec2:AvailabilityZone",
20354
+ "ec2:AvailabilityZoneId",
20355
+ "ec2:IsLaunchTemplateResource",
20356
+ "ec2:LaunchTemplate",
20357
+ "ec2:ResourceTag/${TagKey}",
20358
+ "ec2:SubnetID",
20359
+ "ec2:Vpc"
20360
+ ],
20361
+ "dependentActions": []
20362
+ },
20627
20363
  {
20628
20364
  "name": "volume",
20629
20365
  "required": false,
@@ -20973,44 +20709,6 @@
20973
20709
  ],
20974
20710
  "dependentActions": []
20975
20711
  },
20976
- "sendspotinstanceinterruptions": {
20977
- "name": "SendSpotInstanceInterruptions",
20978
- "isPermissionOnly": true,
20979
- "description": "Grants permission to interrupt a Spot Instance",
20980
- "accessLevel": "Write",
20981
- "resourceTypes": [
20982
- {
20983
- "name": "instance",
20984
- "required": true,
20985
- "conditionKeys": [
20986
- "aws:ResourceTag/${TagKey}",
20987
- "ec2:AvailabilityZone",
20988
- "ec2:AvailabilityZoneId",
20989
- "ec2:CpuOptionsAmdSevSnp",
20990
- "ec2:EbsOptimized",
20991
- "ec2:InstanceAutoRecovery",
20992
- "ec2:InstanceBandwidthWeighting",
20993
- "ec2:InstanceID",
20994
- "ec2:InstanceMarketType",
20995
- "ec2:InstanceMetadataTags",
20996
- "ec2:InstanceProfile",
20997
- "ec2:InstanceType",
20998
- "ec2:ManagedResourceOperator",
20999
- "ec2:MetadataHttpEndpoint",
21000
- "ec2:MetadataHttpPutResponseHopLimit",
21001
- "ec2:MetadataHttpTokens",
21002
- "ec2:ResourceTag/${TagKey}",
21003
- "ec2:RootDeviceType",
21004
- "ec2:Tenancy"
21005
- ],
21006
- "dependentActions": []
21007
- }
21008
- ],
21009
- "conditionKeys": [
21010
- "ec2:Region"
21011
- ],
21012
- "dependentActions": []
21013
- },
21014
20712
  "startdeclarativepoliciesreport": {
21015
20713
  "name": "StartDeclarativePoliciesReport",
21016
20714
  "description": "Grants permission to start a declarative policies report",
@@ -21075,9 +20773,7 @@
21075
20773
  "aws:ResourceTag/${TagKey}",
21076
20774
  "ec2:ResourceTag/${TagKey}"
21077
20775
  ],
21078
- "dependentActions": [
21079
- "ec2:CreateTags"
21080
- ]
20776
+ "dependentActions": []
21081
20777
  },
21082
20778
  {
21083
20779
  "name": "network-insights-access-scope-analysis",
@@ -21106,9 +20802,7 @@
21106
20802
  "aws:RequestTag/${TagKey}",
21107
20803
  "aws:TagKeys"
21108
20804
  ],
21109
- "dependentActions": [
21110
- "ec2:CreateTags"
21111
- ]
20805
+ "dependentActions": []
21112
20806
  },
21113
20807
  {
21114
20808
  "name": "network-insights-path",