@cloud-copilot/iam-data 0.21.202608071 → 0.21.202608131
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/data/actions/account-access.json +164 -0
- package/data/actions/agent-registry.json +302 -0
- package/data/actions/backup.json +90 -34
- package/data/actions/bedrock-agentcore.json +228 -0
- package/data/actions/cleanrooms.json +45 -0
- package/data/actions/connect.json +162 -0
- package/data/actions/datazone.json +8 -0
- package/data/actions/dms.json +98 -22
- package/data/actions/dynamodb.json +21 -0
- package/data/actions/eks.json +6 -0
- package/data/actions/elasticmapreduce.json +92 -0
- package/data/actions/iam.json +12 -6
- package/data/actions/quicksight.json +213 -49
- package/data/actions/securityagent.json +6 -0
- package/data/actions/securityhub.json +15 -0
- package/data/actions/transform-custom.json +34 -0
- package/data/actions/workspaces.json +45 -0
- package/data/categories/machine-learning-and-ai.json +1 -0
- package/data/categories/security-identity-and-compliance.json +1 -0
- package/data/conditionKeys/account-access.json +17 -0
- package/data/conditionKeys/agent-registry.json +17 -0
- package/data/conditionKeys/airflow.json +2 -2
- package/data/conditionKeys/autoscaling.json +5 -0
- package/data/conditionKeys/bedrock-agentcore.json +6 -1
- package/data/conditionKeys/eks.json +15 -0
- package/data/rcpSupportedServices.json +2 -0
- package/data/resourceTypes/account-access.json +9 -0
- package/data/resourceTypes/agent-registry.json +16 -0
- package/data/resourceTypes/backup.json +7 -0
- package/data/resourceTypes/bedrock-agentcore.json +7 -0
- package/data/resourceTypes/connect.json +14 -0
- package/data/resourceTypes/elasticmapreduce.json +8 -0
- package/data/resourceTypes/quicksight.json +7 -0
- package/data/serviceCategories.json +2 -0
- package/data/serviceNames.json +2 -0
- package/data/services.json +2 -0
- package/package.json +2 -2
|
@@ -0,0 +1,164 @@
|
|
|
1
|
+
{
|
|
2
|
+
"createapplication": {
|
|
3
|
+
"name": "CreateApplication",
|
|
4
|
+
"description": "Grants permission to enable an account access manager instance and create an AWS account access application in the associated IAM Identity Center instance",
|
|
5
|
+
"accessLevel": "Write",
|
|
6
|
+
"resourceTypes": [],
|
|
7
|
+
"conditionKeys": [
|
|
8
|
+
"aws:RequestTag/${TagKey}",
|
|
9
|
+
"aws:TagKeys"
|
|
10
|
+
],
|
|
11
|
+
"dependentActions": []
|
|
12
|
+
},
|
|
13
|
+
"createentitlement": {
|
|
14
|
+
"name": "CreateEntitlement",
|
|
15
|
+
"description": "Grants permission to create an entitlement in an account access manager instance",
|
|
16
|
+
"accessLevel": "Write",
|
|
17
|
+
"resourceTypes": [
|
|
18
|
+
{
|
|
19
|
+
"name": "application",
|
|
20
|
+
"required": true,
|
|
21
|
+
"conditionKeys": [],
|
|
22
|
+
"dependentActions": []
|
|
23
|
+
}
|
|
24
|
+
],
|
|
25
|
+
"conditionKeys": [],
|
|
26
|
+
"dependentActions": []
|
|
27
|
+
},
|
|
28
|
+
"deleteapplication": {
|
|
29
|
+
"name": "DeleteApplication",
|
|
30
|
+
"description": "Grants permission to delete an account access manager instance and its AWS account access application in the associated IAM Identity Center instance",
|
|
31
|
+
"accessLevel": "Write",
|
|
32
|
+
"resourceTypes": [
|
|
33
|
+
{
|
|
34
|
+
"name": "application",
|
|
35
|
+
"required": true,
|
|
36
|
+
"conditionKeys": [],
|
|
37
|
+
"dependentActions": []
|
|
38
|
+
}
|
|
39
|
+
],
|
|
40
|
+
"conditionKeys": [],
|
|
41
|
+
"dependentActions": []
|
|
42
|
+
},
|
|
43
|
+
"deleteentitlement": {
|
|
44
|
+
"name": "DeleteEntitlement",
|
|
45
|
+
"description": "Grants permission to delete an entitlement in an account access manager instance",
|
|
46
|
+
"accessLevel": "Write",
|
|
47
|
+
"resourceTypes": [
|
|
48
|
+
{
|
|
49
|
+
"name": "application",
|
|
50
|
+
"required": true,
|
|
51
|
+
"conditionKeys": [],
|
|
52
|
+
"dependentActions": []
|
|
53
|
+
}
|
|
54
|
+
],
|
|
55
|
+
"conditionKeys": [],
|
|
56
|
+
"dependentActions": []
|
|
57
|
+
},
|
|
58
|
+
"getapplication": {
|
|
59
|
+
"name": "GetApplication",
|
|
60
|
+
"description": "Grants permission to describe an account access manager instance",
|
|
61
|
+
"accessLevel": "Read",
|
|
62
|
+
"resourceTypes": [
|
|
63
|
+
{
|
|
64
|
+
"name": "application",
|
|
65
|
+
"required": true,
|
|
66
|
+
"conditionKeys": [],
|
|
67
|
+
"dependentActions": []
|
|
68
|
+
}
|
|
69
|
+
],
|
|
70
|
+
"conditionKeys": [],
|
|
71
|
+
"dependentActions": []
|
|
72
|
+
},
|
|
73
|
+
"getentitlement": {
|
|
74
|
+
"name": "GetEntitlement",
|
|
75
|
+
"description": "Grants permission to get entitlement details for an account access manager instance",
|
|
76
|
+
"accessLevel": "Read",
|
|
77
|
+
"resourceTypes": [
|
|
78
|
+
{
|
|
79
|
+
"name": "application",
|
|
80
|
+
"required": true,
|
|
81
|
+
"conditionKeys": [],
|
|
82
|
+
"dependentActions": []
|
|
83
|
+
}
|
|
84
|
+
],
|
|
85
|
+
"conditionKeys": [],
|
|
86
|
+
"dependentActions": []
|
|
87
|
+
},
|
|
88
|
+
"listapplications": {
|
|
89
|
+
"name": "ListApplications",
|
|
90
|
+
"description": "Grants permission to list account access manager instances",
|
|
91
|
+
"accessLevel": "List",
|
|
92
|
+
"resourceTypes": [],
|
|
93
|
+
"conditionKeys": [],
|
|
94
|
+
"dependentActions": []
|
|
95
|
+
},
|
|
96
|
+
"listentitlements": {
|
|
97
|
+
"name": "ListEntitlements",
|
|
98
|
+
"description": "Grants permission to list entitlements for an account access manager instance",
|
|
99
|
+
"accessLevel": "List",
|
|
100
|
+
"resourceTypes": [
|
|
101
|
+
{
|
|
102
|
+
"name": "application",
|
|
103
|
+
"required": true,
|
|
104
|
+
"conditionKeys": [],
|
|
105
|
+
"dependentActions": []
|
|
106
|
+
}
|
|
107
|
+
],
|
|
108
|
+
"conditionKeys": [],
|
|
109
|
+
"dependentActions": []
|
|
110
|
+
},
|
|
111
|
+
"listtagsforresource": {
|
|
112
|
+
"name": "ListTagsForResource",
|
|
113
|
+
"description": "Grants permission to list tags for an account access manager resource",
|
|
114
|
+
"accessLevel": "Read",
|
|
115
|
+
"resourceTypes": [
|
|
116
|
+
{
|
|
117
|
+
"name": "application",
|
|
118
|
+
"required": true,
|
|
119
|
+
"conditionKeys": [],
|
|
120
|
+
"dependentActions": []
|
|
121
|
+
}
|
|
122
|
+
],
|
|
123
|
+
"conditionKeys": [
|
|
124
|
+
"aws:ResourceTag/${TagKey}"
|
|
125
|
+
],
|
|
126
|
+
"dependentActions": []
|
|
127
|
+
},
|
|
128
|
+
"tagresource": {
|
|
129
|
+
"name": "TagResource",
|
|
130
|
+
"description": "Grants permission to tag an account access manager resource",
|
|
131
|
+
"accessLevel": "Tagging, Write",
|
|
132
|
+
"resourceTypes": [
|
|
133
|
+
{
|
|
134
|
+
"name": "application",
|
|
135
|
+
"required": false,
|
|
136
|
+
"conditionKeys": [],
|
|
137
|
+
"dependentActions": []
|
|
138
|
+
}
|
|
139
|
+
],
|
|
140
|
+
"conditionKeys": [
|
|
141
|
+
"aws:RequestTag/${TagKey}",
|
|
142
|
+
"aws:ResourceTag/${TagKey}",
|
|
143
|
+
"aws:TagKeys"
|
|
144
|
+
],
|
|
145
|
+
"dependentActions": []
|
|
146
|
+
},
|
|
147
|
+
"untagresource": {
|
|
148
|
+
"name": "UntagResource",
|
|
149
|
+
"description": "Grants permission to remove tags from an account access manager resource",
|
|
150
|
+
"accessLevel": "Tagging, Write",
|
|
151
|
+
"resourceTypes": [
|
|
152
|
+
{
|
|
153
|
+
"name": "application",
|
|
154
|
+
"required": false,
|
|
155
|
+
"conditionKeys": [],
|
|
156
|
+
"dependentActions": []
|
|
157
|
+
}
|
|
158
|
+
],
|
|
159
|
+
"conditionKeys": [
|
|
160
|
+
"aws:TagKeys"
|
|
161
|
+
],
|
|
162
|
+
"dependentActions": []
|
|
163
|
+
}
|
|
164
|
+
}
|
|
@@ -0,0 +1,302 @@
|
|
|
1
|
+
{
|
|
2
|
+
"createregistry": {
|
|
3
|
+
"name": "CreateRegistry",
|
|
4
|
+
"description": "Grants permission to create a new registry",
|
|
5
|
+
"accessLevel": "Write",
|
|
6
|
+
"resourceTypes": [],
|
|
7
|
+
"conditionKeys": [
|
|
8
|
+
"aws:RequestTag/${TagKey}",
|
|
9
|
+
"aws:TagKeys"
|
|
10
|
+
],
|
|
11
|
+
"dependentActions": []
|
|
12
|
+
},
|
|
13
|
+
"createregistryrecord": {
|
|
14
|
+
"name": "CreateRegistryRecord",
|
|
15
|
+
"description": "Grants permission to create a new registry record",
|
|
16
|
+
"accessLevel": "Write",
|
|
17
|
+
"resourceTypes": [
|
|
18
|
+
{
|
|
19
|
+
"name": "registry",
|
|
20
|
+
"required": true,
|
|
21
|
+
"conditionKeys": [],
|
|
22
|
+
"dependentActions": []
|
|
23
|
+
}
|
|
24
|
+
],
|
|
25
|
+
"conditionKeys": [
|
|
26
|
+
"aws:RequestTag/${TagKey}",
|
|
27
|
+
"aws:TagKeys"
|
|
28
|
+
],
|
|
29
|
+
"dependentActions": []
|
|
30
|
+
},
|
|
31
|
+
"deleteregistry": {
|
|
32
|
+
"name": "DeleteRegistry",
|
|
33
|
+
"description": "Grants permission to delete an existing registry",
|
|
34
|
+
"accessLevel": "Write",
|
|
35
|
+
"resourceTypes": [
|
|
36
|
+
{
|
|
37
|
+
"name": "registry",
|
|
38
|
+
"required": true,
|
|
39
|
+
"conditionKeys": [],
|
|
40
|
+
"dependentActions": []
|
|
41
|
+
}
|
|
42
|
+
],
|
|
43
|
+
"conditionKeys": [],
|
|
44
|
+
"dependentActions": []
|
|
45
|
+
},
|
|
46
|
+
"deleteregistryrecord": {
|
|
47
|
+
"name": "DeleteRegistryRecord",
|
|
48
|
+
"description": "Grants permission to delete an existing registry record",
|
|
49
|
+
"accessLevel": "Write",
|
|
50
|
+
"resourceTypes": [
|
|
51
|
+
{
|
|
52
|
+
"name": "registry-record",
|
|
53
|
+
"required": true,
|
|
54
|
+
"conditionKeys": [],
|
|
55
|
+
"dependentActions": []
|
|
56
|
+
}
|
|
57
|
+
],
|
|
58
|
+
"conditionKeys": [],
|
|
59
|
+
"dependentActions": []
|
|
60
|
+
},
|
|
61
|
+
"getdiscoverableregistryrecord": {
|
|
62
|
+
"name": "GetDiscoverableRegistryRecord",
|
|
63
|
+
"description": "Grants permission to retrieve an individual approved registry record. This is a permission-only action used for fine-grained access control with BatchGetApprovedRegistryRecord",
|
|
64
|
+
"accessLevel": "Read",
|
|
65
|
+
"resourceTypes": [
|
|
66
|
+
{
|
|
67
|
+
"name": "registry-record",
|
|
68
|
+
"required": true,
|
|
69
|
+
"conditionKeys": [],
|
|
70
|
+
"dependentActions": []
|
|
71
|
+
}
|
|
72
|
+
],
|
|
73
|
+
"conditionKeys": [],
|
|
74
|
+
"dependentActions": []
|
|
75
|
+
},
|
|
76
|
+
"getregistry": {
|
|
77
|
+
"name": "GetRegistry",
|
|
78
|
+
"description": "Grants permission to retrieve an existing registry",
|
|
79
|
+
"accessLevel": "Read",
|
|
80
|
+
"resourceTypes": [
|
|
81
|
+
{
|
|
82
|
+
"name": "registry",
|
|
83
|
+
"required": true,
|
|
84
|
+
"conditionKeys": [],
|
|
85
|
+
"dependentActions": []
|
|
86
|
+
}
|
|
87
|
+
],
|
|
88
|
+
"conditionKeys": [],
|
|
89
|
+
"dependentActions": []
|
|
90
|
+
},
|
|
91
|
+
"getregistryrecord": {
|
|
92
|
+
"name": "GetRegistryRecord",
|
|
93
|
+
"description": "Grants permission to retrieve an existing registry record",
|
|
94
|
+
"accessLevel": "Read",
|
|
95
|
+
"resourceTypes": [
|
|
96
|
+
{
|
|
97
|
+
"name": "registry-record",
|
|
98
|
+
"required": true,
|
|
99
|
+
"conditionKeys": [],
|
|
100
|
+
"dependentActions": []
|
|
101
|
+
}
|
|
102
|
+
],
|
|
103
|
+
"conditionKeys": [],
|
|
104
|
+
"dependentActions": []
|
|
105
|
+
},
|
|
106
|
+
"invokeregistrymcp": {
|
|
107
|
+
"name": "InvokeRegistryMcp",
|
|
108
|
+
"description": "Grants permission to invoke an MCP operation against an existing registry",
|
|
109
|
+
"accessLevel": "Read",
|
|
110
|
+
"resourceTypes": [
|
|
111
|
+
{
|
|
112
|
+
"name": "registry",
|
|
113
|
+
"required": true,
|
|
114
|
+
"conditionKeys": [],
|
|
115
|
+
"dependentActions": []
|
|
116
|
+
}
|
|
117
|
+
],
|
|
118
|
+
"conditionKeys": [],
|
|
119
|
+
"dependentActions": []
|
|
120
|
+
},
|
|
121
|
+
"listdiscoverableregistryrecords": {
|
|
122
|
+
"name": "ListDiscoverableRegistryRecords",
|
|
123
|
+
"description": "Grants permission to list approved registry records in a registry",
|
|
124
|
+
"accessLevel": "List",
|
|
125
|
+
"resourceTypes": [
|
|
126
|
+
{
|
|
127
|
+
"name": "registry",
|
|
128
|
+
"required": true,
|
|
129
|
+
"conditionKeys": [],
|
|
130
|
+
"dependentActions": []
|
|
131
|
+
}
|
|
132
|
+
],
|
|
133
|
+
"conditionKeys": [],
|
|
134
|
+
"dependentActions": []
|
|
135
|
+
},
|
|
136
|
+
"listregistries": {
|
|
137
|
+
"name": "ListRegistries",
|
|
138
|
+
"description": "Grants permission to list existing registries",
|
|
139
|
+
"accessLevel": "List",
|
|
140
|
+
"resourceTypes": [],
|
|
141
|
+
"conditionKeys": [],
|
|
142
|
+
"dependentActions": []
|
|
143
|
+
},
|
|
144
|
+
"listregistryrecords": {
|
|
145
|
+
"name": "ListRegistryRecords",
|
|
146
|
+
"description": "Grants permission to list existing registry records in a registry",
|
|
147
|
+
"accessLevel": "List",
|
|
148
|
+
"resourceTypes": [
|
|
149
|
+
{
|
|
150
|
+
"name": "registry",
|
|
151
|
+
"required": true,
|
|
152
|
+
"conditionKeys": [],
|
|
153
|
+
"dependentActions": []
|
|
154
|
+
}
|
|
155
|
+
],
|
|
156
|
+
"conditionKeys": [],
|
|
157
|
+
"dependentActions": []
|
|
158
|
+
},
|
|
159
|
+
"listtagsforresource": {
|
|
160
|
+
"name": "ListTagsForResource",
|
|
161
|
+
"description": "Grants permission to list tags for an Agent Registry resource",
|
|
162
|
+
"accessLevel": "List",
|
|
163
|
+
"resourceTypes": [
|
|
164
|
+
{
|
|
165
|
+
"name": "registry",
|
|
166
|
+
"required": false,
|
|
167
|
+
"conditionKeys": [],
|
|
168
|
+
"dependentActions": []
|
|
169
|
+
},
|
|
170
|
+
{
|
|
171
|
+
"name": "registry-record",
|
|
172
|
+
"required": false,
|
|
173
|
+
"conditionKeys": [],
|
|
174
|
+
"dependentActions": []
|
|
175
|
+
}
|
|
176
|
+
],
|
|
177
|
+
"conditionKeys": [],
|
|
178
|
+
"dependentActions": []
|
|
179
|
+
},
|
|
180
|
+
"searchdiscoverableregistryrecords": {
|
|
181
|
+
"name": "SearchDiscoverableRegistryRecords",
|
|
182
|
+
"description": "Grants permission to search for registry records",
|
|
183
|
+
"accessLevel": "Read",
|
|
184
|
+
"resourceTypes": [
|
|
185
|
+
{
|
|
186
|
+
"name": "registry",
|
|
187
|
+
"required": true,
|
|
188
|
+
"conditionKeys": [],
|
|
189
|
+
"dependentActions": []
|
|
190
|
+
}
|
|
191
|
+
],
|
|
192
|
+
"conditionKeys": [],
|
|
193
|
+
"dependentActions": []
|
|
194
|
+
},
|
|
195
|
+
"submitregistryrecordforapproval": {
|
|
196
|
+
"name": "SubmitRegistryRecordForApproval",
|
|
197
|
+
"description": "Grants permission to submit a registry record for approval",
|
|
198
|
+
"accessLevel": "Write",
|
|
199
|
+
"resourceTypes": [
|
|
200
|
+
{
|
|
201
|
+
"name": "registry-record",
|
|
202
|
+
"required": true,
|
|
203
|
+
"conditionKeys": [],
|
|
204
|
+
"dependentActions": []
|
|
205
|
+
}
|
|
206
|
+
],
|
|
207
|
+
"conditionKeys": [],
|
|
208
|
+
"dependentActions": []
|
|
209
|
+
},
|
|
210
|
+
"tagresource": {
|
|
211
|
+
"name": "TagResource",
|
|
212
|
+
"description": "Grants permission to tag an Agent Registry resource",
|
|
213
|
+
"accessLevel": "Tagging, Write",
|
|
214
|
+
"resourceTypes": [
|
|
215
|
+
{
|
|
216
|
+
"name": "registry",
|
|
217
|
+
"required": false,
|
|
218
|
+
"conditionKeys": [],
|
|
219
|
+
"dependentActions": []
|
|
220
|
+
},
|
|
221
|
+
{
|
|
222
|
+
"name": "registry-record",
|
|
223
|
+
"required": false,
|
|
224
|
+
"conditionKeys": [],
|
|
225
|
+
"dependentActions": []
|
|
226
|
+
}
|
|
227
|
+
],
|
|
228
|
+
"conditionKeys": [
|
|
229
|
+
"aws:RequestTag/${TagKey}",
|
|
230
|
+
"aws:TagKeys"
|
|
231
|
+
],
|
|
232
|
+
"dependentActions": []
|
|
233
|
+
},
|
|
234
|
+
"untagresource": {
|
|
235
|
+
"name": "UntagResource",
|
|
236
|
+
"description": "Grants permission to untag an Agent Registry resource",
|
|
237
|
+
"accessLevel": "Tagging, Write",
|
|
238
|
+
"resourceTypes": [
|
|
239
|
+
{
|
|
240
|
+
"name": "registry",
|
|
241
|
+
"required": false,
|
|
242
|
+
"conditionKeys": [],
|
|
243
|
+
"dependentActions": []
|
|
244
|
+
},
|
|
245
|
+
{
|
|
246
|
+
"name": "registry-record",
|
|
247
|
+
"required": false,
|
|
248
|
+
"conditionKeys": [],
|
|
249
|
+
"dependentActions": []
|
|
250
|
+
}
|
|
251
|
+
],
|
|
252
|
+
"conditionKeys": [
|
|
253
|
+
"aws:TagKeys"
|
|
254
|
+
],
|
|
255
|
+
"dependentActions": []
|
|
256
|
+
},
|
|
257
|
+
"updateregistry": {
|
|
258
|
+
"name": "UpdateRegistry",
|
|
259
|
+
"description": "Grants permission to update an existing registry",
|
|
260
|
+
"accessLevel": "Write",
|
|
261
|
+
"resourceTypes": [
|
|
262
|
+
{
|
|
263
|
+
"name": "registry",
|
|
264
|
+
"required": true,
|
|
265
|
+
"conditionKeys": [],
|
|
266
|
+
"dependentActions": []
|
|
267
|
+
}
|
|
268
|
+
],
|
|
269
|
+
"conditionKeys": [],
|
|
270
|
+
"dependentActions": []
|
|
271
|
+
},
|
|
272
|
+
"updateregistryrecord": {
|
|
273
|
+
"name": "UpdateRegistryRecord",
|
|
274
|
+
"description": "Grants permission to update an existing registry record",
|
|
275
|
+
"accessLevel": "Write",
|
|
276
|
+
"resourceTypes": [
|
|
277
|
+
{
|
|
278
|
+
"name": "registry-record",
|
|
279
|
+
"required": true,
|
|
280
|
+
"conditionKeys": [],
|
|
281
|
+
"dependentActions": []
|
|
282
|
+
}
|
|
283
|
+
],
|
|
284
|
+
"conditionKeys": [],
|
|
285
|
+
"dependentActions": []
|
|
286
|
+
},
|
|
287
|
+
"updateregistryrecordstatus": {
|
|
288
|
+
"name": "UpdateRegistryRecordStatus",
|
|
289
|
+
"description": "Grants permission to update the status of a registry record",
|
|
290
|
+
"accessLevel": "Write",
|
|
291
|
+
"resourceTypes": [
|
|
292
|
+
{
|
|
293
|
+
"name": "registry-record",
|
|
294
|
+
"required": true,
|
|
295
|
+
"conditionKeys": [],
|
|
296
|
+
"dependentActions": []
|
|
297
|
+
}
|
|
298
|
+
],
|
|
299
|
+
"conditionKeys": [],
|
|
300
|
+
"dependentActions": []
|
|
301
|
+
}
|
|
302
|
+
}
|
package/data/actions/backup.json
CHANGED
|
@@ -34,32 +34,6 @@
|
|
|
34
34
|
],
|
|
35
35
|
"dependentActions": []
|
|
36
36
|
},
|
|
37
|
-
"createbackupaccesspoint": {
|
|
38
|
-
"name": "CreateBackupAccessPoint",
|
|
39
|
-
"description": "Grants permission to create a new access point for backup instant access",
|
|
40
|
-
"accessLevel": "Write",
|
|
41
|
-
"resourceTypes": [
|
|
42
|
-
{
|
|
43
|
-
"name": "recoveryPoint",
|
|
44
|
-
"required": true,
|
|
45
|
-
"conditionKeys": [],
|
|
46
|
-
"dependentActions": []
|
|
47
|
-
}
|
|
48
|
-
],
|
|
49
|
-
"conditionKeys": [
|
|
50
|
-
"aws:RequestTag/${TagKey}",
|
|
51
|
-
"aws:TagKeys"
|
|
52
|
-
],
|
|
53
|
-
"dependentActions": []
|
|
54
|
-
},
|
|
55
|
-
"deletebackupaccesspoint": {
|
|
56
|
-
"name": "DeleteBackupAccessPoint",
|
|
57
|
-
"description": "Grants permission to delete the access point",
|
|
58
|
-
"accessLevel": "Write",
|
|
59
|
-
"resourceTypes": [],
|
|
60
|
-
"conditionKeys": [],
|
|
61
|
-
"dependentActions": []
|
|
62
|
-
},
|
|
63
37
|
"deletebackupvaultsharingpolicy": {
|
|
64
38
|
"name": "DeleteBackupVaultSharingPolicy",
|
|
65
39
|
"description": "Grants permission to delete backup vault sharing policy",
|
|
@@ -75,14 +49,6 @@
|
|
|
75
49
|
"conditionKeys": [],
|
|
76
50
|
"dependentActions": []
|
|
77
51
|
},
|
|
78
|
-
"describebackupaccesspoint": {
|
|
79
|
-
"name": "DescribeBackupAccessPoint",
|
|
80
|
-
"description": "Grants permission to return information about the specified access point",
|
|
81
|
-
"accessLevel": "Read",
|
|
82
|
-
"resourceTypes": [],
|
|
83
|
-
"conditionKeys": [],
|
|
84
|
-
"dependentActions": []
|
|
85
|
-
},
|
|
86
52
|
"getbackupvaultsharingpolicy": {
|
|
87
53
|
"name": "GetBackupVaultSharingPolicy",
|
|
88
54
|
"description": "Grants permission to get backup vault sharing policy",
|
|
@@ -168,6 +134,24 @@
|
|
|
168
134
|
"conditionKeys": [],
|
|
169
135
|
"dependentActions": []
|
|
170
136
|
},
|
|
137
|
+
"createbackupaccesspoint": {
|
|
138
|
+
"name": "CreateBackupAccessPoint",
|
|
139
|
+
"description": "Grants permission to create a new backup access point",
|
|
140
|
+
"accessLevel": "Write",
|
|
141
|
+
"resourceTypes": [
|
|
142
|
+
{
|
|
143
|
+
"name": "recoveryPoint",
|
|
144
|
+
"required": true,
|
|
145
|
+
"conditionKeys": [],
|
|
146
|
+
"dependentActions": []
|
|
147
|
+
}
|
|
148
|
+
],
|
|
149
|
+
"conditionKeys": [
|
|
150
|
+
"aws:RequestTag/${TagKey}",
|
|
151
|
+
"aws:TagKeys"
|
|
152
|
+
],
|
|
153
|
+
"dependentActions": []
|
|
154
|
+
},
|
|
171
155
|
"createbackupplan": {
|
|
172
156
|
"name": "CreateBackupPlan",
|
|
173
157
|
"description": "Grants permission to create a new backup plan",
|
|
@@ -363,6 +347,21 @@
|
|
|
363
347
|
],
|
|
364
348
|
"dependentActions": []
|
|
365
349
|
},
|
|
350
|
+
"deletebackupaccesspoint": {
|
|
351
|
+
"name": "DeleteBackupAccessPoint",
|
|
352
|
+
"description": "Grants permission to delete the backup access point",
|
|
353
|
+
"accessLevel": "Write",
|
|
354
|
+
"resourceTypes": [
|
|
355
|
+
{
|
|
356
|
+
"name": "backupAccessPoint",
|
|
357
|
+
"required": true,
|
|
358
|
+
"conditionKeys": [],
|
|
359
|
+
"dependentActions": []
|
|
360
|
+
}
|
|
361
|
+
],
|
|
362
|
+
"conditionKeys": [],
|
|
363
|
+
"dependentActions": []
|
|
364
|
+
},
|
|
366
365
|
"deletebackupplan": {
|
|
367
366
|
"name": "DeleteBackupPlan",
|
|
368
367
|
"description": "Grants permission to delete a backup plan",
|
|
@@ -543,6 +542,21 @@
|
|
|
543
542
|
"conditionKeys": [],
|
|
544
543
|
"dependentActions": []
|
|
545
544
|
},
|
|
545
|
+
"describebackupaccesspoint": {
|
|
546
|
+
"name": "DescribeBackupAccessPoint",
|
|
547
|
+
"description": "Grants permission to return information about the specified backup access point",
|
|
548
|
+
"accessLevel": "Read",
|
|
549
|
+
"resourceTypes": [
|
|
550
|
+
{
|
|
551
|
+
"name": "backupAccessPoint",
|
|
552
|
+
"required": true,
|
|
553
|
+
"conditionKeys": [],
|
|
554
|
+
"dependentActions": []
|
|
555
|
+
}
|
|
556
|
+
],
|
|
557
|
+
"conditionKeys": [],
|
|
558
|
+
"dependentActions": []
|
|
559
|
+
},
|
|
546
560
|
"describebackupjob": {
|
|
547
561
|
"name": "DescribeBackupJob",
|
|
548
562
|
"description": "Grants permission to describe a backup job",
|
|
@@ -925,6 +939,30 @@
|
|
|
925
939
|
"conditionKeys": [],
|
|
926
940
|
"dependentActions": []
|
|
927
941
|
},
|
|
942
|
+
"listbackupaccesspoints": {
|
|
943
|
+
"name": "ListBackupAccessPoints",
|
|
944
|
+
"description": "Grants permission to list backup access points in the caller's account",
|
|
945
|
+
"accessLevel": "List",
|
|
946
|
+
"resourceTypes": [],
|
|
947
|
+
"conditionKeys": [],
|
|
948
|
+
"dependentActions": []
|
|
949
|
+
},
|
|
950
|
+
"listbackupaccesspointsbyrecoverypoint": {
|
|
951
|
+
"name": "ListBackupAccessPointsByRecoveryPoint",
|
|
952
|
+
"description": "Grants permission to list backup access points associated with a recovery point",
|
|
953
|
+
"accessLevel": "List",
|
|
954
|
+
"resourceTypes": [],
|
|
955
|
+
"conditionKeys": [],
|
|
956
|
+
"dependentActions": []
|
|
957
|
+
},
|
|
958
|
+
"listbackupaccesspointsbyresource": {
|
|
959
|
+
"name": "ListBackupAccessPointsByResource",
|
|
960
|
+
"description": "Grants permission to list backup access points associated with a resource",
|
|
961
|
+
"accessLevel": "List",
|
|
962
|
+
"resourceTypes": [],
|
|
963
|
+
"conditionKeys": [],
|
|
964
|
+
"dependentActions": []
|
|
965
|
+
},
|
|
928
966
|
"listbackupjobsummaries": {
|
|
929
967
|
"name": "ListBackupJobSummaries",
|
|
930
968
|
"description": "Grants permission to list backup job summaries",
|
|
@@ -1195,6 +1233,12 @@
|
|
|
1195
1233
|
"description": "Grants permission to list tags for a resource",
|
|
1196
1234
|
"accessLevel": "Read",
|
|
1197
1235
|
"resourceTypes": [
|
|
1236
|
+
{
|
|
1237
|
+
"name": "backupAccessPoint",
|
|
1238
|
+
"required": false,
|
|
1239
|
+
"conditionKeys": [],
|
|
1240
|
+
"dependentActions": []
|
|
1241
|
+
},
|
|
1198
1242
|
{
|
|
1199
1243
|
"name": "backupPlan",
|
|
1200
1244
|
"required": false,
|
|
@@ -1415,6 +1459,12 @@
|
|
|
1415
1459
|
"description": "Grants permission to tag a resource",
|
|
1416
1460
|
"accessLevel": "Tagging, Write",
|
|
1417
1461
|
"resourceTypes": [
|
|
1462
|
+
{
|
|
1463
|
+
"name": "backupAccessPoint",
|
|
1464
|
+
"required": false,
|
|
1465
|
+
"conditionKeys": [],
|
|
1466
|
+
"dependentActions": []
|
|
1467
|
+
},
|
|
1418
1468
|
{
|
|
1419
1469
|
"name": "backupPlan",
|
|
1420
1470
|
"required": false,
|
|
@@ -1475,6 +1525,12 @@
|
|
|
1475
1525
|
"description": "Grants permission to untag a resource",
|
|
1476
1526
|
"accessLevel": "Tagging, Write",
|
|
1477
1527
|
"resourceTypes": [
|
|
1528
|
+
{
|
|
1529
|
+
"name": "backupAccessPoint",
|
|
1530
|
+
"required": false,
|
|
1531
|
+
"conditionKeys": [],
|
|
1532
|
+
"dependentActions": []
|
|
1533
|
+
},
|
|
1478
1534
|
{
|
|
1479
1535
|
"name": "backupPlan",
|
|
1480
1536
|
"required": false,
|