aws-iam-language-server 0.0.16 → 0.0.18
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/package.json +1 -1
- package/src/data/condition-keys/global.json +180 -60
- package/src/data/servicereference/actions.json +1 -1
- package/src/data/servicereference/services/a4b.json +1 -1
- package/src/data/servicereference/services/access-analyzer.json +1 -1
- package/src/data/servicereference/services/account.json +1 -1
- package/src/data/servicereference/services/acm-pca.json +1 -1
- package/src/data/servicereference/services/acm.json +1 -1
- package/src/data/servicereference/services/aco-automation.json +1 -1
- package/src/data/servicereference/services/aidevops.json +1 -1
- package/src/data/servicereference/services/aiops.json +1 -1
- package/src/data/servicereference/services/airflow-serverless.json +1 -1
- package/src/data/servicereference/services/airflow.json +1 -1
- package/src/data/servicereference/services/amplify.json +1 -1
- package/src/data/servicereference/services/amplifybackend.json +1 -1
- package/src/data/servicereference/services/amplifyuibuilder.json +1 -1
- package/src/data/servicereference/services/aoss.json +1 -1
- package/src/data/servicereference/services/apigateway.json +1 -1
- package/src/data/servicereference/services/app-integrations.json +1 -1
- package/src/data/servicereference/services/appconfig.json +1 -1
- package/src/data/servicereference/services/appfabric.json +1 -1
- package/src/data/servicereference/services/appflow.json +1 -1
- package/src/data/servicereference/services/application-autoscaling.json +1 -1
- package/src/data/servicereference/services/application-signals.json +1 -1
- package/src/data/servicereference/services/applicationinsights.json +1 -1
- package/src/data/servicereference/services/appmesh-preview.json +1 -1
- package/src/data/servicereference/services/appmesh.json +1 -1
- package/src/data/servicereference/services/apprunner.json +1 -1
- package/src/data/servicereference/services/appstream.json +1 -1
- package/src/data/servicereference/services/appstudio.json +1 -1
- package/src/data/servicereference/services/appsync.json +1 -1
- package/src/data/servicereference/services/apptest.json +1 -1
- package/src/data/servicereference/services/aps.json +1 -1
- package/src/data/servicereference/services/arc-region-switch.json +1 -1
- package/src/data/servicereference/services/arc-zonal-shift.json +1 -1
- package/src/data/servicereference/services/artifact.json +1 -1
- package/src/data/servicereference/services/athena.json +1 -1
- package/src/data/servicereference/services/auditmanager.json +1 -1
- package/src/data/servicereference/services/autoscaling.json +1 -1
- package/src/data/servicereference/services/aws-external-anthropic.json +1 -0
- package/src/data/servicereference/services/aws-marketplace.json +1 -1
- package/src/data/servicereference/services/b2bi.json +1 -1
- package/src/data/servicereference/services/backup-gateway.json +1 -1
- package/src/data/servicereference/services/backup-search.json +1 -1
- package/src/data/servicereference/services/backup.json +1 -1
- package/src/data/servicereference/services/batch.json +1 -1
- package/src/data/servicereference/services/bcm-dashboards.json +1 -1
- package/src/data/servicereference/services/bcm-data-exports.json +1 -1
- package/src/data/servicereference/services/bcm-pricing-calculator.json +1 -1
- package/src/data/servicereference/services/bedrock-agentcore.json +1 -1
- package/src/data/servicereference/services/bedrock-mantle.json +1 -1
- package/src/data/servicereference/services/bedrock.json +1 -1
- package/src/data/servicereference/services/billing.json +1 -1
- package/src/data/servicereference/services/billingconductor.json +1 -1
- package/src/data/servicereference/services/braket.json +1 -1
- package/src/data/servicereference/services/budgets.json +1 -1
- package/src/data/servicereference/services/bugbust.json +1 -1
- package/src/data/servicereference/services/cases.json +1 -1
- package/src/data/servicereference/services/cassandra.json +1 -1
- package/src/data/servicereference/services/ce.json +1 -1
- package/src/data/servicereference/services/chatbot.json +1 -1
- package/src/data/servicereference/services/chime.json +1 -1
- package/src/data/servicereference/services/cleanrooms-ml.json +1 -1
- package/src/data/servicereference/services/cleanrooms.json +1 -1
- package/src/data/servicereference/services/cloud9.json +1 -1
- package/src/data/servicereference/services/clouddirectory.json +1 -1
- package/src/data/servicereference/services/cloudformation.json +1 -1
- package/src/data/servicereference/services/cloudfront-keyvaluestore.json +1 -1
- package/src/data/servicereference/services/cloudfront.json +1 -1
- package/src/data/servicereference/services/cloudhsm.json +1 -1
- package/src/data/servicereference/services/cloudsearch.json +1 -1
- package/src/data/servicereference/services/cloudshell.json +1 -1
- package/src/data/servicereference/services/cloudtrail-data.json +1 -1
- package/src/data/servicereference/services/cloudtrail.json +1 -1
- package/src/data/servicereference/services/cloudwatch.json +1 -1
- package/src/data/servicereference/services/codeartifact.json +1 -1
- package/src/data/servicereference/services/codebuild.json +1 -1
- package/src/data/servicereference/services/codecatalyst.json +1 -1
- package/src/data/servicereference/services/codecommit.json +1 -1
- package/src/data/servicereference/services/codeconnections.json +1 -1
- package/src/data/servicereference/services/codedeploy.json +1 -1
- package/src/data/servicereference/services/codeguru-profiler.json +1 -1
- package/src/data/servicereference/services/codeguru-reviewer.json +1 -1
- package/src/data/servicereference/services/codeguru-security.json +1 -1
- package/src/data/servicereference/services/codepipeline.json +1 -1
- package/src/data/servicereference/services/codestar-connections.json +1 -1
- package/src/data/servicereference/services/codestar-notifications.json +1 -1
- package/src/data/servicereference/services/codestar.json +1 -1
- package/src/data/servicereference/services/codewhisperer.json +1 -1
- package/src/data/servicereference/services/cognito-identity.json +1 -1
- package/src/data/servicereference/services/cognito-idp.json +1 -1
- package/src/data/servicereference/services/cognito-sync.json +1 -1
- package/src/data/servicereference/services/comprehend.json +1 -1
- package/src/data/servicereference/services/comprehendmedical.json +1 -1
- package/src/data/servicereference/services/compute-optimizer.json +1 -1
- package/src/data/servicereference/services/config.json +1 -1
- package/src/data/servicereference/services/connect-campaigns.json +1 -1
- package/src/data/servicereference/services/connect.json +1 -1
- package/src/data/servicereference/services/consoleapp.json +1 -1
- package/src/data/servicereference/services/controlcatalog.json +1 -1
- package/src/data/servicereference/services/controltower.json +1 -1
- package/src/data/servicereference/services/cur.json +1 -1
- package/src/data/servicereference/services/databrew.json +1 -1
- package/src/data/servicereference/services/dataexchange.json +1 -1
- package/src/data/servicereference/services/datapipeline.json +1 -1
- package/src/data/servicereference/services/datasync.json +1 -1
- package/src/data/servicereference/services/datazone.json +1 -1
- package/src/data/servicereference/services/dax.json +1 -1
- package/src/data/servicereference/services/deadline.json +1 -1
- package/src/data/servicereference/services/detective.json +1 -1
- package/src/data/servicereference/services/devicefarm.json +1 -1
- package/src/data/servicereference/services/devops-guru.json +1 -1
- package/src/data/servicereference/services/directconnect.json +1 -1
- package/src/data/servicereference/services/discovery.json +1 -1
- package/src/data/servicereference/services/dlm.json +1 -1
- package/src/data/servicereference/services/dms.json +1 -1
- package/src/data/servicereference/services/docdb-elastic.json +1 -1
- package/src/data/servicereference/services/drs.json +1 -1
- package/src/data/servicereference/services/ds-data.json +1 -1
- package/src/data/servicereference/services/ds.json +1 -1
- package/src/data/servicereference/services/dsql.json +1 -1
- package/src/data/servicereference/services/dynamodb.json +1 -1
- package/src/data/servicereference/services/ebs.json +1 -1
- package/src/data/servicereference/services/ec2-instance-connect.json +1 -1
- package/src/data/servicereference/services/ec2.json +1 -1
- package/src/data/servicereference/services/ec2messages.json +1 -1
- package/src/data/servicereference/services/ecr-public.json +1 -1
- package/src/data/servicereference/services/ecr.json +1 -1
- package/src/data/servicereference/services/ecs.json +1 -1
- package/src/data/servicereference/services/eks-auth.json +1 -1
- package/src/data/servicereference/services/eks.json +1 -1
- package/src/data/servicereference/services/elasticache.json +1 -1
- package/src/data/servicereference/services/elasticbeanstalk.json +1 -1
- package/src/data/servicereference/services/elasticfilesystem.json +1 -1
- package/src/data/servicereference/services/elasticloadbalancing.json +1 -1
- package/src/data/servicereference/services/elasticmapreduce.json +1 -1
- package/src/data/servicereference/services/elastictranscoder.json +1 -1
- package/src/data/servicereference/services/elemental-appliances-software.json +1 -1
- package/src/data/servicereference/services/elemental-inference.json +1 -1
- package/src/data/servicereference/services/elemental-support-cases.json +1 -1
- package/src/data/servicereference/services/emr-containers.json +1 -1
- package/src/data/servicereference/services/emr-serverless.json +1 -1
- package/src/data/servicereference/services/entityresolution.json +1 -1
- package/src/data/servicereference/services/es.json +1 -1
- package/src/data/servicereference/services/events.json +1 -1
- package/src/data/servicereference/services/evidently.json +1 -1
- package/src/data/servicereference/services/evs.json +1 -1
- package/src/data/servicereference/services/execute-api.json +1 -1
- package/src/data/servicereference/services/finspace-api.json +1 -1
- package/src/data/servicereference/services/finspace.json +1 -1
- package/src/data/servicereference/services/firehose.json +1 -1
- package/src/data/servicereference/services/fis.json +1 -1
- package/src/data/servicereference/services/fms.json +1 -1
- package/src/data/servicereference/services/forecast.json +1 -1
- package/src/data/servicereference/services/frauddetector.json +1 -1
- package/src/data/servicereference/services/freertos.json +1 -1
- package/src/data/servicereference/services/fsx.json +1 -1
- package/src/data/servicereference/services/gamelift.json +1 -1
- package/src/data/servicereference/services/gameliftstreams.json +1 -1
- package/src/data/servicereference/services/geo-maps.json +1 -1
- package/src/data/servicereference/services/geo-places.json +1 -1
- package/src/data/servicereference/services/geo-routes.json +1 -1
- package/src/data/servicereference/services/geo.json +1 -1
- package/src/data/servicereference/services/glacier.json +1 -1
- package/src/data/servicereference/services/globalaccelerator.json +1 -1
- package/src/data/servicereference/services/glue.json +1 -1
- package/src/data/servicereference/services/grafana.json +1 -1
- package/src/data/servicereference/services/greengrass.json +1 -1
- package/src/data/servicereference/services/groundstation.json +1 -1
- package/src/data/servicereference/services/guardduty.json +1 -1
- package/src/data/servicereference/services/health-agent.json +1 -1
- package/src/data/servicereference/services/health.json +1 -1
- package/src/data/servicereference/services/healthlake.json +1 -1
- package/src/data/servicereference/services/honeycode.json +1 -1
- package/src/data/servicereference/services/iam.json +1 -1
- package/src/data/servicereference/services/identity-sync.json +1 -1
- package/src/data/servicereference/services/identitystore.json +1 -1
- package/src/data/servicereference/services/imagebuilder.json +1 -1
- package/src/data/servicereference/services/inspector2.json +1 -1
- package/src/data/servicereference/services/interconnect.json +1 -1
- package/src/data/servicereference/services/internetmonitor.json +1 -1
- package/src/data/servicereference/services/invoicing.json +1 -1
- package/src/data/servicereference/services/iot.json +1 -1
- package/src/data/servicereference/services/iotanalytics.json +1 -1
- package/src/data/servicereference/services/iotdeviceadvisor.json +1 -1
- package/src/data/servicereference/services/iotevents.json +1 -1
- package/src/data/servicereference/services/iotfleethub.json +1 -1
- package/src/data/servicereference/services/iotfleetwise.json +1 -1
- package/src/data/servicereference/services/iotjobsdata.json +1 -1
- package/src/data/servicereference/services/iotmanagedintegrations.json +1 -1
- package/src/data/servicereference/services/iotsitewise.json +1 -1
- package/src/data/servicereference/services/iottwinmaker.json +1 -1
- package/src/data/servicereference/services/iotwireless.json +1 -1
- package/src/data/servicereference/services/iq-permission.json +1 -1
- package/src/data/servicereference/services/iq.json +1 -1
- package/src/data/servicereference/services/ivs.json +1 -1
- package/src/data/servicereference/services/ivschat.json +1 -1
- package/src/data/servicereference/services/kafka-cluster.json +1 -1
- package/src/data/servicereference/services/kafka.json +1 -1
- package/src/data/servicereference/services/kafkaconnect.json +1 -1
- package/src/data/servicereference/services/kendra-ranking.json +1 -1
- package/src/data/servicereference/services/kendra.json +1 -1
- package/src/data/servicereference/services/kinesis.json +1 -1
- package/src/data/servicereference/services/kinesisanalytics.json +1 -1
- package/src/data/servicereference/services/kinesisvideo.json +1 -1
- package/src/data/servicereference/services/kms.json +1 -1
- package/src/data/servicereference/services/lakeformation.json +1 -1
- package/src/data/servicereference/services/lambda.json +1 -1
- package/src/data/servicereference/services/launchwizard.json +1 -1
- package/src/data/servicereference/services/lex.json +1 -1
- package/src/data/servicereference/services/license-manager-linux-subscriptions.json +1 -1
- package/src/data/servicereference/services/license-manager-user-subscriptions.json +1 -1
- package/src/data/servicereference/services/license-manager.json +1 -1
- package/src/data/servicereference/services/lightsail.json +1 -1
- package/src/data/servicereference/services/logs.json +1 -1
- package/src/data/servicereference/services/lookoutequipment.json +1 -1
- package/src/data/servicereference/services/lookoutmetrics.json +1 -1
- package/src/data/servicereference/services/lookoutvision.json +1 -1
- package/src/data/servicereference/services/m2.json +1 -1
- package/src/data/servicereference/services/machinelearning.json +1 -1
- package/src/data/servicereference/services/macie2.json +1 -1
- package/src/data/servicereference/services/managedblockchain.json +1 -1
- package/src/data/servicereference/services/mapcredits.json +1 -1
- package/src/data/servicereference/services/mediaconnect.json +1 -1
- package/src/data/servicereference/services/mediaconvert.json +1 -1
- package/src/data/servicereference/services/medialive.json +1 -1
- package/src/data/servicereference/services/mediapackage-vod.json +1 -1
- package/src/data/servicereference/services/mediapackage.json +1 -1
- package/src/data/servicereference/services/mediapackagev2.json +1 -1
- package/src/data/servicereference/services/mediastore.json +1 -1
- package/src/data/servicereference/services/mediatailor.json +1 -1
- package/src/data/servicereference/services/medical-imaging.json +1 -1
- package/src/data/servicereference/services/memorydb.json +1 -1
- package/src/data/servicereference/services/mgh.json +1 -1
- package/src/data/servicereference/services/mgn.json +1 -1
- package/src/data/servicereference/services/migrationhub-orchestrator.json +1 -1
- package/src/data/servicereference/services/mobiletargeting.json +1 -1
- package/src/data/servicereference/services/monitron.json +1 -1
- package/src/data/servicereference/services/mpa.json +1 -1
- package/src/data/servicereference/services/mq.json +1 -1
- package/src/data/servicereference/services/neptune-db.json +1 -1
- package/src/data/servicereference/services/neptune-graph.json +1 -1
- package/src/data/servicereference/services/network-firewall.json +1 -1
- package/src/data/servicereference/services/networkflowmonitor.json +1 -1
- package/src/data/servicereference/services/networkmanager.json +1 -1
- package/src/data/servicereference/services/networkmonitor.json +1 -1
- package/src/data/servicereference/services/nimble.json +1 -1
- package/src/data/servicereference/services/notifications-contacts.json +1 -1
- package/src/data/servicereference/services/notifications.json +1 -1
- package/src/data/servicereference/services/nova-act.json +1 -1
- package/src/data/servicereference/services/oam.json +1 -1
- package/src/data/servicereference/services/observabilityadmin.json +1 -1
- package/src/data/servicereference/services/odb.json +1 -1
- package/src/data/servicereference/services/omics.json +1 -1
- package/src/data/servicereference/services/one.json +1 -1
- package/src/data/servicereference/services/opensearch.json +1 -1
- package/src/data/servicereference/services/opsworks-cm.json +1 -1
- package/src/data/servicereference/services/opsworks.json +1 -1
- package/src/data/servicereference/services/organizations.json +1 -1
- package/src/data/servicereference/services/osis.json +1 -1
- package/src/data/servicereference/services/outposts.json +1 -1
- package/src/data/servicereference/services/panorama.json +1 -1
- package/src/data/servicereference/services/partnercentral-account-management.json +1 -1
- package/src/data/servicereference/services/partnercentral.json +1 -1
- package/src/data/servicereference/services/payment-cryptography.json +1 -1
- package/src/data/servicereference/services/payments.json +1 -1
- package/src/data/servicereference/services/pca-connector-ad.json +1 -1
- package/src/data/servicereference/services/pca-connector-scep.json +1 -1
- package/src/data/servicereference/services/pcs.json +1 -1
- package/src/data/servicereference/services/personalize.json +1 -1
- package/src/data/servicereference/services/pi.json +1 -1
- package/src/data/servicereference/services/pipes.json +1 -1
- package/src/data/servicereference/services/polly.json +1 -1
- package/src/data/servicereference/services/pricingplanmanager.json +1 -1
- package/src/data/servicereference/services/private-networks.json +1 -1
- package/src/data/servicereference/services/profile.json +1 -1
- package/src/data/servicereference/services/proton.json +1 -1
- package/src/data/servicereference/services/purchase-orders.json +1 -1
- package/src/data/servicereference/services/q.json +1 -1
- package/src/data/servicereference/services/qapps.json +1 -1
- package/src/data/servicereference/services/qbusiness.json +1 -1
- package/src/data/servicereference/services/qdeveloper.json +1 -1
- package/src/data/servicereference/services/qldb.json +1 -1
- package/src/data/servicereference/services/quicksight.json +1 -1
- package/src/data/servicereference/services/ram.json +1 -1
- package/src/data/servicereference/services/rbin.json +1 -1
- package/src/data/servicereference/services/rds-data.json +1 -1
- package/src/data/servicereference/services/rds-db.json +1 -1
- package/src/data/servicereference/services/rds.json +1 -1
- package/src/data/servicereference/services/redshift-data.json +1 -1
- package/src/data/servicereference/services/redshift-serverless.json +1 -1
- package/src/data/servicereference/services/redshift.json +1 -1
- package/src/data/servicereference/services/refactor-spaces.json +1 -1
- package/src/data/servicereference/services/rekognition.json +1 -1
- package/src/data/servicereference/services/repostspace.json +1 -1
- package/src/data/servicereference/services/resiliencehub.json +1 -1
- package/src/data/servicereference/services/resource-explorer-2.json +1 -1
- package/src/data/servicereference/services/resource-groups.json +1 -1
- package/src/data/servicereference/services/robomaker.json +1 -1
- package/src/data/servicereference/services/rolesanywhere.json +1 -1
- package/src/data/servicereference/services/route53-recovery-cluster.json +1 -1
- package/src/data/servicereference/services/route53-recovery-control-config.json +1 -1
- package/src/data/servicereference/services/route53-recovery-readiness.json +1 -1
- package/src/data/servicereference/services/route53.json +1 -1
- package/src/data/servicereference/services/route53globalresolver.json +1 -1
- package/src/data/servicereference/services/route53profiles.json +1 -1
- package/src/data/servicereference/services/route53resolver.json +1 -1
- package/src/data/servicereference/services/rtbfabric.json +1 -1
- package/src/data/servicereference/services/rum.json +1 -1
- package/src/data/servicereference/services/s3-object-lambda.json +1 -1
- package/src/data/servicereference/services/s3-outposts.json +1 -1
- package/src/data/servicereference/services/s3.json +1 -1
- package/src/data/servicereference/services/s3express.json +1 -1
- package/src/data/servicereference/services/s3files.json +1 -0
- package/src/data/servicereference/services/s3tables.json +1 -1
- package/src/data/servicereference/services/s3vectors.json +1 -1
- package/src/data/servicereference/services/sagemaker-geospatial.json +1 -1
- package/src/data/servicereference/services/sagemaker-mlflow.json +1 -1
- package/src/data/servicereference/services/sagemaker.json +1 -1
- package/src/data/servicereference/services/savingsplans.json +1 -1
- package/src/data/servicereference/services/scheduler.json +1 -1
- package/src/data/servicereference/services/schemas.json +1 -1
- package/src/data/servicereference/services/scn.json +1 -1
- package/src/data/servicereference/services/sdb.json +1 -1
- package/src/data/servicereference/services/secretsmanager.json +1 -1
- package/src/data/servicereference/services/security-ir.json +1 -1
- package/src/data/servicereference/services/securityagent.json +1 -1
- package/src/data/servicereference/services/securityhub.json +1 -1
- package/src/data/servicereference/services/securitylake.json +1 -1
- package/src/data/servicereference/services/serverlessrepo.json +1 -1
- package/src/data/servicereference/services/servicecatalog.json +1 -1
- package/src/data/servicereference/services/servicediscovery.json +1 -1
- package/src/data/servicereference/services/servicequotas.json +1 -1
- package/src/data/servicereference/services/ses.json +1 -1
- package/src/data/servicereference/services/shield.json +1 -1
- package/src/data/servicereference/services/signer.json +1 -1
- package/src/data/servicereference/services/signin.json +1 -1
- package/src/data/servicereference/services/simspaceweaver.json +1 -1
- package/src/data/servicereference/services/sms-voice.json +1 -1
- package/src/data/servicereference/services/snow-device-management.json +1 -1
- package/src/data/servicereference/services/sns.json +1 -1
- package/src/data/servicereference/services/social-messaging.json +1 -1
- package/src/data/servicereference/services/sqlworkbench.json +1 -1
- package/src/data/servicereference/services/sqs.json +1 -1
- package/src/data/servicereference/services/ssm-contacts.json +1 -1
- package/src/data/servicereference/services/ssm-incidents.json +1 -1
- package/src/data/servicereference/services/ssm-quicksetup.json +1 -1
- package/src/data/servicereference/services/ssm-sap.json +1 -1
- package/src/data/servicereference/services/ssm.json +1 -1
- package/src/data/servicereference/services/ssmmessages.json +1 -1
- package/src/data/servicereference/services/sso-oauth.json +1 -1
- package/src/data/servicereference/services/sso.json +1 -1
- package/src/data/servicereference/services/states.json +1 -1
- package/src/data/servicereference/services/storagegateway.json +1 -1
- package/src/data/servicereference/services/sts.json +1 -1
- package/src/data/servicereference/services/sustainability.json +1 -1
- package/src/data/servicereference/services/swf.json +1 -1
- package/src/data/servicereference/services/synthetics.json +1 -1
- package/src/data/servicereference/services/textract.json +1 -1
- package/src/data/servicereference/services/thinclient.json +1 -1
- package/src/data/servicereference/services/timestream-influxdb.json +1 -1
- package/src/data/servicereference/services/timestream.json +1 -1
- package/src/data/servicereference/services/tnb.json +1 -1
- package/src/data/servicereference/services/transcribe.json +1 -1
- package/src/data/servicereference/services/transfer.json +1 -1
- package/src/data/servicereference/services/transform-custom.json +1 -1
- package/src/data/servicereference/services/transform.json +1 -1
- package/src/data/servicereference/services/translate.json +1 -1
- package/src/data/servicereference/services/trustedadvisor.json +1 -1
- package/src/data/servicereference/services/ts.json +1 -1
- package/src/data/servicereference/services/user-subscriptions.json +1 -1
- package/src/data/servicereference/services/vendor-insights.json +1 -1
- package/src/data/servicereference/services/verifiedpermissions.json +1 -1
- package/src/data/servicereference/services/voiceid.json +1 -1
- package/src/data/servicereference/services/vpc-lattice-svcs.json +1 -1
- package/src/data/servicereference/services/vpc-lattice.json +1 -1
- package/src/data/servicereference/services/vpce.json +1 -1
- package/src/data/servicereference/services/waf-regional.json +1 -1
- package/src/data/servicereference/services/waf.json +1 -1
- package/src/data/servicereference/services/wafv2.json +1 -1
- package/src/data/servicereference/services/wellarchitected.json +1 -1
- package/src/data/servicereference/services/wickr.json +1 -1
- package/src/data/servicereference/services/wisdom.json +1 -1
- package/src/data/servicereference/services/workdocs.json +1 -1
- package/src/data/servicereference/services/worklink.json +1 -1
- package/src/data/servicereference/services/workmail.json +1 -1
- package/src/data/servicereference/services/workmailmessageflow.json +1 -1
- package/src/data/servicereference/services/workspaces-instances.json +1 -1
- package/src/data/servicereference/services/workspaces-web.json +1 -1
- package/src/data/servicereference/services/workspaces.json +1 -1
- package/src/data/servicereference/services/xray.json +1 -1
- package/src/data/servicereference/services.json +1 -1
- package/src/handlers/completion/action-value.d.ts +0 -2
- package/src/handlers/completion/action-value.js +1 -17
- package/src/handlers/completion/condition-block.js +1 -11
- package/src/handlers/completion/condition-key.d.ts +0 -2
- package/src/handlers/completion/condition-key.js +9 -22
- package/src/handlers/completion/condition-operator.js +2 -1
- package/src/handlers/completion/effect-value.js +10 -6
- package/src/handlers/completion/principal-block-type.js +6 -12
- package/src/handlers/completion/principal-block.js +2 -9
- package/src/handlers/completion/principal-identifier-completions.js +17 -11
- package/src/handlers/completion/principal-type.js +6 -6
- package/src/handlers/completion/principal-value.js +2 -2
- package/src/handlers/completion/resource-value.js +52 -46
- package/src/handlers/completion/statement-block.d.ts +1 -6
- package/src/handlers/completion/statement-block.js +1 -2
- package/src/handlers/completion/statement-key.js +2 -1
- package/src/handlers/diagnostics/action.js +6 -8
- package/src/handlers/hover/action-value.js +20 -10
- package/src/handlers/hover/condition-block.js +4 -8
- package/src/handlers/hover/condition-key.js +10 -7
- package/src/handlers/hover/condition-operator.js +2 -1
- package/src/handlers/hover/effect-value.js +4 -7
- package/src/handlers/hover/index.js +1 -2
- package/src/handlers/hover/principal-block.js +4 -7
- package/src/handlers/hover/principal-type.js +3 -11
- package/src/handlers/hover/principal-typed-value.js +16 -25
- package/src/handlers/hover/resource-value.js +5 -18
- package/src/handlers/hover/statement-key.js +2 -1
- package/src/lib/iam-policy/arn.js +0 -1
- package/src/lib/iam-policy/condition-operators.d.ts +4 -316
- package/src/lib/iam-policy/condition-operators.js +399 -106
- package/src/lib/iam-policy/principals.d.ts +2 -21
- package/src/lib/iam-policy/principals.js +10 -4
- package/src/lib/iam-policy/reference/documentation.d.ts +55 -0
- package/src/lib/iam-policy/reference/documentation.js +171 -0
- package/src/lib/iam-policy/reference/services.d.ts +5 -13
- package/src/lib/iam-policy/reference/services.js +4 -14
- package/src/lib/iam-policy/reference/types.d.ts +21 -11
- package/src/lib/iam-policy/statement-keys.d.ts +2 -2
- package/src/lib/iam-policy/statement-keys.js +64 -112
- package/src/lib/treesitter/yaml.js +26 -2
|
@@ -1 +1 @@
|
|
|
1
|
-
{"name":"consoleapp","actions":{"GetDeviceIdentity":{"name":"GetDeviceIdentity","service":"consoleapp","conditionKeys":[],"resources":[{"name":"DeviceIdentity"}],"description":"Grants permission to retrieve the device identity for a Console Mobile App device","accessLevel":"Read","resourceTypes":[{"name":"DeviceIdentity","required":true}],"operationUrl":"https://docs.aws.amazon.com/consolemobileapp/latest/userguide/permissions-policies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsconsolemobileapp.html#awsconsolemobileapp-GetDeviceIdentity"},"ListDeviceIdentities":{"name":"ListDeviceIdentities","service":"consoleapp","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of device identities","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/consolemobileapp/latest/userguide/permissions-policies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsconsolemobileapp.html#awsconsolemobileapp-ListDeviceIdentities"}},"resources":[{"name":"DeviceIdentity","arnFormats":["arn:${Partition}:consoleapp::${Account}:device/${DeviceId}/identity/${IdentityId}"],"conditionKeys":[]}],"conditionKeys":{},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsconsolemobileapp.html"}
|
|
1
|
+
{"name":"consoleapp","actions":{"GetDeviceIdentity":{"name":"GetDeviceIdentity","service":"consoleapp","conditionKeys":[],"resources":[{"name":"DeviceIdentity"}],"description":"Grants permission to retrieve the device identity for a Console Mobile App device","accessLevel":"Read","resourceTypes":[{"name":"DeviceIdentity","required":true}],"operationUrl":"https://docs.aws.amazon.com/consolemobileapp/latest/userguide/permissions-policies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsconsolemobileapp.html#awsconsolemobileapp-GetDeviceIdentity"},"ListDeviceIdentities":{"name":"ListDeviceIdentities","service":"consoleapp","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of device identities","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/consolemobileapp/latest/userguide/permissions-policies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsconsolemobileapp.html#awsconsolemobileapp-ListDeviceIdentities"}},"resources":[{"service":"consoleapp","name":"DeviceIdentity","arnFormats":["arn:${Partition}:consoleapp::${Account}:device/${DeviceId}/identity/${IdentityId}"],"conditionKeys":[]}],"conditionKeys":{},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsconsolemobileapp.html"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"name":"controlcatalog","actions":{"GetControl":{"name":"GetControl","service":"controlcatalog","conditionKeys":[],"resources":[{"name":"control"}],"description":"Grants permission to return details about a specific control","accessLevel":"Read","resourceTypes":[{"name":"control","required":true}],"operationUrl":"https://docs.aws.amazon.com/controlcatalog/latest/APIReference/API_GetControl.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontrolcatalog.html#awscontrolcatalog-GetControl"},"ListCommonControls":{"name":"ListCommonControls","service":"controlcatalog","conditionKeys":[],"resources":[],"description":"Grants permission to return a paginated list of common controls from the AWS Control Catalog","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controlcatalog/latest/APIReference/API_ListCommonControls.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontrolcatalog.html#awscontrolcatalog-ListCommonControls"},"ListControlMappings":{"name":"ListControlMappings","service":"controlcatalog","conditionKeys":[],"resources":[],"description":"Grants permission to return a paginated list of control mappings from the AWS Control Catalog","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controlcatalog/latest/APIReference/API_ListControlMappings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontrolcatalog.html#awscontrolcatalog-ListControlMappings"},"ListControls":{"name":"ListControls","service":"controlcatalog","conditionKeys":[],"resources":[{"name":"control"}],"description":"Grants permission to return a paginated list of all available controls in the AWS Control Catalog library","accessLevel":"List","resourceTypes":[{"name":"control","required":true}],"operationUrl":"https://docs.aws.amazon.com/controlcatalog/latest/APIReference/API_ListControls.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontrolcatalog.html#awscontrolcatalog-ListControls"},"ListDomains":{"name":"ListDomains","service":"controlcatalog","conditionKeys":[],"resources":[],"description":"Grants permission to return a paginated list of domains from the AWS Control Catalog","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controlcatalog/latest/APIReference/API_ListDomains.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontrolcatalog.html#awscontrolcatalog-ListDomains"},"ListObjectives":{"name":"ListObjectives","service":"controlcatalog","conditionKeys":[],"resources":[],"description":"Grants permission to return a paginated list of objectives from the AWS Control Catalog","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controlcatalog/latest/APIReference/API_ListObjectives.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontrolcatalog.html#awscontrolcatalog-ListObjectives"}},"resources":[{"name":"common-control","arnFormats":["arn:${Partition}:controlcatalog:::common-control/${CommonControlId}"],"conditionKeys":[]},{"name":"control","arnFormats":["arn:${Partition}:controlcatalog:::control/${ControlId}"],"conditionKeys":[]},{"name":"domain","arnFormats":["arn:${Partition}:controlcatalog:::domain/${DomainId}"],"conditionKeys":[]},{"name":"objective","arnFormats":["arn:${Partition}:controlcatalog:::objective/${ObjectiveId}"],"conditionKeys":[]}],"conditionKeys":{},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontrolcatalog.html"}
|
|
1
|
+
{"name":"controlcatalog","actions":{"GetControl":{"name":"GetControl","service":"controlcatalog","conditionKeys":[],"resources":[{"name":"control"}],"description":"Grants permission to return details about a specific control","accessLevel":"Read","resourceTypes":[{"name":"control","required":true}],"operationUrl":"https://docs.aws.amazon.com/controlcatalog/latest/APIReference/API_GetControl.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontrolcatalog.html#awscontrolcatalog-GetControl"},"ListCommonControls":{"name":"ListCommonControls","service":"controlcatalog","conditionKeys":[],"resources":[],"description":"Grants permission to return a paginated list of common controls from the AWS Control Catalog","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controlcatalog/latest/APIReference/API_ListCommonControls.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontrolcatalog.html#awscontrolcatalog-ListCommonControls"},"ListControlMappings":{"name":"ListControlMappings","service":"controlcatalog","conditionKeys":[],"resources":[],"description":"Grants permission to return a paginated list of control mappings from the AWS Control Catalog","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controlcatalog/latest/APIReference/API_ListControlMappings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontrolcatalog.html#awscontrolcatalog-ListControlMappings"},"ListControls":{"name":"ListControls","service":"controlcatalog","conditionKeys":[],"resources":[{"name":"control"}],"description":"Grants permission to return a paginated list of all available controls in the AWS Control Catalog library","accessLevel":"List","resourceTypes":[{"name":"control","required":true}],"operationUrl":"https://docs.aws.amazon.com/controlcatalog/latest/APIReference/API_ListControls.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontrolcatalog.html#awscontrolcatalog-ListControls"},"ListDomains":{"name":"ListDomains","service":"controlcatalog","conditionKeys":[],"resources":[],"description":"Grants permission to return a paginated list of domains from the AWS Control Catalog","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controlcatalog/latest/APIReference/API_ListDomains.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontrolcatalog.html#awscontrolcatalog-ListDomains"},"ListObjectives":{"name":"ListObjectives","service":"controlcatalog","conditionKeys":[],"resources":[],"description":"Grants permission to return a paginated list of objectives from the AWS Control Catalog","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controlcatalog/latest/APIReference/API_ListObjectives.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontrolcatalog.html#awscontrolcatalog-ListObjectives"}},"resources":[{"service":"controlcatalog","name":"common-control","arnFormats":["arn:${Partition}:controlcatalog:::common-control/${CommonControlId}"],"conditionKeys":[]},{"service":"controlcatalog","name":"control","arnFormats":["arn:${Partition}:controlcatalog:::control/${ControlId}"],"conditionKeys":[]},{"service":"controlcatalog","name":"domain","arnFormats":["arn:${Partition}:controlcatalog:::domain/${DomainId}"],"conditionKeys":[]},{"service":"controlcatalog","name":"objective","arnFormats":["arn:${Partition}:controlcatalog:::objective/${ObjectiveId}"],"conditionKeys":[]}],"conditionKeys":{},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontrolcatalog.html"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"name":"controltower","actions":{"CreateLandingZone":{"name":"CreateLandingZone","service":"controltower","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a landing zone","accessLevel":"Write","resourceTypes":[],"dependentActions":["controltower:TagResource"],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_CreateLandingZone.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-CreateLandingZone"},"CreateManagedAccount":{"name":"CreateManagedAccount","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to create an account managed by AWS Control Tower","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-CreateManagedAccount"},"DeleteLandingZone":{"name":"DeleteLandingZone","service":"controltower","conditionKeys":[],"resources":[{"name":"LandingZone"}],"description":"Grants permission to delete AWS Control Tower landing zone","accessLevel":"Write","resourceTypes":[{"name":"LandingZone","required":true}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_DeleteLandingZone.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DeleteLandingZone"},"DeregisterManagedAccount":{"name":"DeregisterManagedAccount","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to deregister an account created through the account factory from AWS Control Tower","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DeregisterManagedAccount"},"DeregisterOrganizationalUnit":{"name":"DeregisterOrganizationalUnit","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to deregister an organizational unit from AWS Control Tower management","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DeregisterOrganizationalUnit"},"DescribeAccountFactoryConfig":{"name":"DescribeAccountFactoryConfig","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to describe the current account factory configuration","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DescribeAccountFactoryConfig"},"DescribeCoreService":{"name":"DescribeCoreService","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to describe resources managed by core accounts in AWS Control Tower","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/how-control-tower-works.html#what-shared","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DescribeCoreService"},"DescribeGuardrail":{"name":"DescribeGuardrail","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to describe a guardrail","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/controls.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DescribeGuardrail"},"DescribeGuardrailForTarget":{"name":"DescribeGuardrailForTarget","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to describe a guardrail for a organizational unit","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/controls.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DescribeGuardrailForTarget"},"DescribeLandingZoneConfiguration":{"name":"DescribeLandingZoneConfiguration","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to describe the current Landing Zone configuration","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/step-two.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DescribeLandingZoneConfiguration"},"DescribeManagedAccount":{"name":"DescribeManagedAccount","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to describe an account created through account factory","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DescribeManagedAccount"},"DescribeManagedOrganizationalUnit":{"name":"DescribeManagedOrganizationalUnit","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to describe an AWS Organizations organizational unit managed by AWS Control Tower","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DescribeManagedOrganizationalUnit"},"DescribeRegisterOrganizationalUnitOperation":{"name":"DescribeRegisterOrganizationalUnitOperation","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to describe a Register Organizational Unit Operation","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/about-extending-governance.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DescribeRegisterOrganizationalUnitOperation"},"DescribeSingleSignOn":{"name":"DescribeSingleSignOn","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to describe the current AWS Control Tower IAM Identity Center configuration","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/sso.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DescribeSingleSignOn"},"DisableBaseline":{"name":"DisableBaseline","service":"controltower","conditionKeys":[],"resources":[{"name":"EnabledBaseline"}],"description":"Grants permission to disable a Baseline on a target","accessLevel":"Write","resourceTypes":[{"name":"EnabledBaseline","required":true}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_DisableBaseline.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DisableBaseline"},"DisableControl":{"name":"DisableControl","service":"controltower","conditionKeys":[],"resources":[{"name":"EnabledControl"}],"description":"Grants permission to remove a control from an organizational unit","accessLevel":"Write","resourceTypes":[{"name":"EnabledControl","required":true}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_DisableControl.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DisableControl"},"DisableGuardrail":{"name":"DisableGuardrail","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to disable a guardrail from an organizational unit","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/enable-controls-on-ou.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DisableGuardrail"},"EnableBaseline":{"name":"EnableBaseline","service":"controltower","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to enable a Baseline on a target","accessLevel":"Write","resourceTypes":[],"dependentActions":["controltower:TagResource"],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_EnableBaseline.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-EnableBaseline"},"EnableControl":{"name":"EnableControl","service":"controltower","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"EnabledControl"}],"description":"Grants permission to activate a control for an organizational unit","accessLevel":"Write","resourceTypes":[{"name":"EnabledControl","required":false}],"dependentActions":["controltower:TagResource"],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_EnableControl.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-EnableControl"},"EnableGuardrail":{"name":"EnableGuardrail","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to enable a guardrail to an organizational unit","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/enable-controls-on-ou.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-EnableGuardrail"},"GetAccountInfo":{"name":"GetAccountInfo","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to describe an account email and validate that it exists","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/accounts.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-GetAccountInfo"},"GetAvailableUpdates":{"name":"GetAvailableUpdates","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list available updates for the current AWS Control Tower deployment","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/configuration-updates.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-GetAvailableUpdates"},"GetBaseline":{"name":"GetBaseline","service":"controltower","conditionKeys":[],"resources":[{"name":"Baseline"}],"description":"Grants permission to get Baseline details","accessLevel":"Read","resourceTypes":[{"name":"Baseline","required":true}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetBaseline.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-GetBaseline"},"GetBaselineOperation":{"name":"GetBaselineOperation","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to get the current status of a particular Baseline operation","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetBaselineOperation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-GetBaselineOperation"},"GetControlOperation":{"name":"GetControlOperation","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to get the current status of a particular EnabledControl or DisableControl operation","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetControlOperation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-GetControlOperation"},"GetEnabledBaseline":{"name":"GetEnabledBaseline","service":"controltower","conditionKeys":[],"resources":[{"name":"EnabledBaseline"}],"description":"Grants permission to get an enabled Baseline","accessLevel":"Read","resourceTypes":[{"name":"EnabledBaseline","required":true}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetEnabledBaseline.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-GetEnabledBaseline"},"GetEnabledControl":{"name":"GetEnabledControl","service":"controltower","conditionKeys":[],"resources":[{"name":"EnabledControl"}],"description":"Grants permission to get an enabled control from an organizational unit","accessLevel":"Read","resourceTypes":[{"name":"EnabledControl","required":true}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetEnabledControl.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-GetEnabledControl"},"GetGuardrailComplianceStatus":{"name":"GetGuardrailComplianceStatus","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to get the current compliance status of a guardrail","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/controls.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-GetGuardrailComplianceStatus"},"GetHomeRegion":{"name":"GetHomeRegion","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to get the home region of the AWS Control Tower setup","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/how-control-tower-works.html#region-how","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-GetHomeRegion"},"GetLandingZone":{"name":"GetLandingZone","service":"controltower","conditionKeys":[],"resources":[{"name":"LandingZone"}],"description":"Grants permission to get the current status of the landing zone setup","accessLevel":"Read","resourceTypes":[{"name":"LandingZone","required":true}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetLandingZone.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-GetLandingZone"},"GetLandingZoneDriftStatus":{"name":"GetLandingZoneDriftStatus","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to get the current landing zone drift status","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/drift.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-GetLandingZoneDriftStatus"},"GetLandingZoneOperation":{"name":"GetLandingZoneOperation","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to get the current status of a particular landing zone operation","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetLandingZoneOperation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-GetLandingZoneOperation"},"GetLandingZoneStatus":{"name":"GetLandingZoneStatus","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to get the current status of the landing zone setup","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-with-control-tower.html#step-two","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-GetLandingZoneStatus"},"ListBaselines":{"name":"ListBaselines","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list Baselines","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListBaselines.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListBaselines"},"ListControlOperations":{"name":"ListControlOperations","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list all control operations","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListControlOperations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListControlOperations"},"ListDirectoryGroups":{"name":"ListDirectoryGroups","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list the current directory groups available through IAM Identity Center","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/sso.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListDirectoryGroups"},"ListDriftDetails":{"name":"ListDriftDetails","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list occurrences of drift in AWS Control Tower","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/drift.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListDriftDetails"},"ListEnabledBaselines":{"name":"ListEnabledBaselines","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list enabled Baselines","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListEnabledBaselines.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListEnabledBaselines"},"ListEnabledControls":{"name":"ListEnabledControls","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list all enabled controls in a specified organizational unit","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListEnabledControls.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListEnabledControls"},"ListEnabledGuardrails":{"name":"ListEnabledGuardrails","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list currently enabled guardrails","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/controls.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListEnabledGuardrails"},"ListExtendGovernancePrecheckDetails":{"name":"ListExtendGovernancePrecheckDetails","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list Precheck details for an Organizational Unit","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/about-extending-governance.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListExtendGovernancePrecheckDetails"},"ListExternalConfigRuleCompliance":{"name":"ListExternalConfigRuleCompliance","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list the compliance of external AWS Config rules","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/review-compliance.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListExternalConfigRuleCompliance"},"ListGuardrailViolations":{"name":"ListGuardrailViolations","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list existing guardrail violations","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/controls.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListGuardrailViolations"},"ListGuardrails":{"name":"ListGuardrails","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list all available guardrails","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/controls.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListGuardrails"},"ListGuardrailsForTarget":{"name":"ListGuardrailsForTarget","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list guardrails and their current state for a organizational unit","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/controls.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListGuardrailsForTarget"},"ListLandingZoneOperations":{"name":"ListLandingZoneOperations","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list all landing zone operations","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListLandingZoneOperations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListLandingZoneOperations"},"ListLandingZones":{"name":"ListLandingZones","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list all landing zones","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListLandingZones.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListLandingZones"},"ListManagedAccounts":{"name":"ListManagedAccounts","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list accounts managed through AWS Control Tower","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListManagedAccounts"},"ListManagedAccountsForGuardrail":{"name":"ListManagedAccountsForGuardrail","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list managed accounts with a specified guardrail applied","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListManagedAccountsForGuardrail"},"ListManagedAccountsForParent":{"name":"ListManagedAccountsForParent","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list managed accounts under an organizational unit","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListManagedAccountsForParent"},"ListManagedOrganizationalUnits":{"name":"ListManagedOrganizationalUnits","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list organizational units managed by AWS Control Tower","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListManagedOrganizationalUnits"},"ListManagedOrganizationalUnitsForGuardrail":{"name":"ListManagedOrganizationalUnitsForGuardrail","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list managed organizational units that have a specified guardrail applied","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListManagedOrganizationalUnitsForGuardrail"},"ListTagsForResource":{"name":"ListTagsForResource","service":"controltower","conditionKeys":[],"resources":[{"name":"EnabledBaseline"},{"name":"EnabledControl"},{"name":"LandingZone"}],"description":"Grants permission to list the tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"EnabledBaseline","required":false},{"name":"EnabledControl","required":false},{"name":"LandingZone","required":false}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListTagsForResource"},"ManageOrganizationalUnit":{"name":"ManageOrganizationalUnit","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to set up an organizational unit to be managed by AWS Control Tower","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ManageOrganizationalUnit"},"PerformPreLaunchChecks":{"name":"PerformPreLaunchChecks","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to perform validations in an account","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-prereqs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-PerformPreLaunchChecks"},"ResetEnabledBaseline":{"name":"ResetEnabledBaseline","service":"controltower","conditionKeys":[],"resources":[{"name":"EnabledBaseline"}],"description":"Grants permission to reset an enabled Baseline","accessLevel":"Write","resourceTypes":[{"name":"EnabledBaseline","required":true}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_ResetEnabledBaseline.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ResetEnabledBaseline"},"ResetEnabledControl":{"name":"ResetEnabledControl","service":"controltower","conditionKeys":[],"resources":[{"name":"EnabledControl"}],"description":"Grants permission to reset an enabled control for an organizational unit","accessLevel":"Write","resourceTypes":[{"name":"EnabledControl","required":true}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_ResetEnabledControl.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ResetEnabledControl"},"ResetLandingZone":{"name":"ResetLandingZone","service":"controltower","conditionKeys":[],"resources":[{"name":"LandingZone"}],"description":"Grants permission to reset a landing zone","accessLevel":"Write","resourceTypes":[{"name":"LandingZone","required":true}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_ResetLandingZone.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ResetLandingZone"},"SetupLandingZone":{"name":"SetupLandingZone","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to set up or update AWS Control Tower landing zone","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-with-control-tower.html#step-two","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-SetupLandingZone"},"TagResource":{"name":"TagResource","service":"controltower","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"EnabledBaseline"},{"name":"EnabledControl"},{"name":"LandingZone"}],"description":"Grants permission to add tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"EnabledBaseline","required":false},{"name":"EnabledControl","required":false},{"name":"LandingZone","required":false}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-TagResource"},"UntagResource":{"name":"UntagResource","service":"controltower","conditionKeys":["aws:TagKeys"],"resources":[{"name":"EnabledBaseline"},{"name":"EnabledControl"},{"name":"LandingZone"}],"description":"Grants permission to remove tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"EnabledBaseline","required":false},{"name":"EnabledControl","required":false},{"name":"LandingZone","required":false}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-UntagResource"},"UpdateAccountFactoryConfig":{"name":"UpdateAccountFactoryConfig","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to update the account factory configuration","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-UpdateAccountFactoryConfig"},"UpdateEnabledBaseline":{"name":"UpdateEnabledBaseline","service":"controltower","conditionKeys":[],"resources":[{"name":"EnabledBaseline"}],"description":"Grants permission to update an enabled Baseline","accessLevel":"Write","resourceTypes":[{"name":"EnabledBaseline","required":true}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_UpdateEnabledBaseline.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-UpdateEnabledBaseline"},"UpdateEnabledControl":{"name":"UpdateEnabledControl","service":"controltower","conditionKeys":[],"resources":[{"name":"EnabledControl"}],"description":"Grants permission to update an enabled control for an organizational unit","accessLevel":"Write","resourceTypes":[{"name":"EnabledControl","required":true}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_UpdateEnabledControl.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-UpdateEnabledControl"},"UpdateLandingZone":{"name":"UpdateLandingZone","service":"controltower","conditionKeys":[],"resources":[{"name":"LandingZone"}],"description":"Grants permission to update a landing zone","accessLevel":"Write","resourceTypes":[{"name":"LandingZone","required":true}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_UpdateLandingZone.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-UpdateLandingZone"}},"resources":[{"name":"Baseline","arnFormats":["arn:${Partition}:controltower:${Region}::baseline/${BaselineId}"],"conditionKeys":[]},{"name":"EnabledBaseline","arnFormats":["arn:${Partition}:controltower:${Region}:${Account}:enabledbaseline/${EnabledBaselineId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"EnabledControl","arnFormats":["arn:${Partition}:controltower:${Region}:${Account}:enabledcontrol/${EnabledControlId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"LandingZone","arnFormats":["arn:${Partition}:controltower:${Region}:${Account}:landingzone/${LandingZoneId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html"}
|
|
1
|
+
{"name":"controltower","actions":{"CreateLandingZone":{"name":"CreateLandingZone","service":"controltower","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a landing zone","accessLevel":"Write","resourceTypes":[],"dependentActions":["controltower:TagResource"],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_CreateLandingZone.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-CreateLandingZone"},"CreateManagedAccount":{"name":"CreateManagedAccount","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to create an account managed by AWS Control Tower","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-CreateManagedAccount"},"DeleteLandingZone":{"name":"DeleteLandingZone","service":"controltower","conditionKeys":[],"resources":[{"name":"LandingZone"}],"description":"Grants permission to delete AWS Control Tower landing zone","accessLevel":"Write","resourceTypes":[{"name":"LandingZone","required":true}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_DeleteLandingZone.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DeleteLandingZone"},"DeregisterManagedAccount":{"name":"DeregisterManagedAccount","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to deregister an account created through the account factory from AWS Control Tower","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DeregisterManagedAccount"},"DeregisterOrganizationalUnit":{"name":"DeregisterOrganizationalUnit","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to deregister an organizational unit from AWS Control Tower management","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DeregisterOrganizationalUnit"},"DescribeAccountFactoryConfig":{"name":"DescribeAccountFactoryConfig","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to describe the current account factory configuration","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DescribeAccountFactoryConfig"},"DescribeCoreService":{"name":"DescribeCoreService","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to describe resources managed by core accounts in AWS Control Tower","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/how-control-tower-works.html#what-shared","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DescribeCoreService"},"DescribeGuardrail":{"name":"DescribeGuardrail","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to describe a guardrail","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/controls.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DescribeGuardrail"},"DescribeGuardrailForTarget":{"name":"DescribeGuardrailForTarget","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to describe a guardrail for a organizational unit","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/controls.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DescribeGuardrailForTarget"},"DescribeLandingZoneConfiguration":{"name":"DescribeLandingZoneConfiguration","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to describe the current Landing Zone configuration","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/step-two.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DescribeLandingZoneConfiguration"},"DescribeManagedAccount":{"name":"DescribeManagedAccount","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to describe an account created through account factory","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DescribeManagedAccount"},"DescribeManagedOrganizationalUnit":{"name":"DescribeManagedOrganizationalUnit","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to describe an AWS Organizations organizational unit managed by AWS Control Tower","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DescribeManagedOrganizationalUnit"},"DescribeRegisterOrganizationalUnitOperation":{"name":"DescribeRegisterOrganizationalUnitOperation","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to describe a Register Organizational Unit Operation","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/about-extending-governance.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DescribeRegisterOrganizationalUnitOperation"},"DescribeSingleSignOn":{"name":"DescribeSingleSignOn","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to describe the current AWS Control Tower IAM Identity Center configuration","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/sso.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DescribeSingleSignOn"},"DisableBaseline":{"name":"DisableBaseline","service":"controltower","conditionKeys":[],"resources":[{"name":"EnabledBaseline"}],"description":"Grants permission to disable a Baseline on a target","accessLevel":"Write","resourceTypes":[{"name":"EnabledBaseline","required":true}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_DisableBaseline.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DisableBaseline"},"DisableControl":{"name":"DisableControl","service":"controltower","conditionKeys":[],"resources":[{"name":"EnabledControl"}],"description":"Grants permission to remove a control from an organizational unit","accessLevel":"Write","resourceTypes":[{"name":"EnabledControl","required":true}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_DisableControl.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DisableControl"},"DisableGuardrail":{"name":"DisableGuardrail","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to disable a guardrail from an organizational unit","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/enable-controls-on-ou.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-DisableGuardrail"},"EnableBaseline":{"name":"EnableBaseline","service":"controltower","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to enable a Baseline on a target","accessLevel":"Write","resourceTypes":[],"dependentActions":["controltower:TagResource"],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_EnableBaseline.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-EnableBaseline"},"EnableControl":{"name":"EnableControl","service":"controltower","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"EnabledControl"}],"description":"Grants permission to activate a control for an organizational unit","accessLevel":"Write","resourceTypes":[{"name":"EnabledControl","required":false}],"dependentActions":["controltower:TagResource"],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_EnableControl.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-EnableControl"},"EnableGuardrail":{"name":"EnableGuardrail","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to enable a guardrail to an organizational unit","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/enable-controls-on-ou.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-EnableGuardrail"},"GetAccountInfo":{"name":"GetAccountInfo","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to describe an account email and validate that it exists","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/accounts.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-GetAccountInfo"},"GetAvailableUpdates":{"name":"GetAvailableUpdates","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list available updates for the current AWS Control Tower deployment","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/configuration-updates.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-GetAvailableUpdates"},"GetBaseline":{"name":"GetBaseline","service":"controltower","conditionKeys":[],"resources":[{"name":"Baseline"}],"description":"Grants permission to get Baseline details","accessLevel":"Read","resourceTypes":[{"name":"Baseline","required":true}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetBaseline.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-GetBaseline"},"GetBaselineOperation":{"name":"GetBaselineOperation","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to get the current status of a particular Baseline operation","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetBaselineOperation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-GetBaselineOperation"},"GetControlOperation":{"name":"GetControlOperation","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to get the current status of a particular EnabledControl or DisableControl operation","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetControlOperation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-GetControlOperation"},"GetEnabledBaseline":{"name":"GetEnabledBaseline","service":"controltower","conditionKeys":[],"resources":[{"name":"EnabledBaseline"}],"description":"Grants permission to get an enabled Baseline","accessLevel":"Read","resourceTypes":[{"name":"EnabledBaseline","required":true}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetEnabledBaseline.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-GetEnabledBaseline"},"GetEnabledControl":{"name":"GetEnabledControl","service":"controltower","conditionKeys":[],"resources":[{"name":"EnabledControl"}],"description":"Grants permission to get an enabled control from an organizational unit","accessLevel":"Read","resourceTypes":[{"name":"EnabledControl","required":true}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetEnabledControl.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-GetEnabledControl"},"GetGuardrailComplianceStatus":{"name":"GetGuardrailComplianceStatus","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to get the current compliance status of a guardrail","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/controls.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-GetGuardrailComplianceStatus"},"GetHomeRegion":{"name":"GetHomeRegion","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to get the home region of the AWS Control Tower setup","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/how-control-tower-works.html#region-how","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-GetHomeRegion"},"GetLandingZone":{"name":"GetLandingZone","service":"controltower","conditionKeys":[],"resources":[{"name":"LandingZone"}],"description":"Grants permission to get the current status of the landing zone setup","accessLevel":"Read","resourceTypes":[{"name":"LandingZone","required":true}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetLandingZone.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-GetLandingZone"},"GetLandingZoneDriftStatus":{"name":"GetLandingZoneDriftStatus","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to get the current landing zone drift status","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/drift.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-GetLandingZoneDriftStatus"},"GetLandingZoneOperation":{"name":"GetLandingZoneOperation","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to get the current status of a particular landing zone operation","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetLandingZoneOperation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-GetLandingZoneOperation"},"GetLandingZoneStatus":{"name":"GetLandingZoneStatus","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to get the current status of the landing zone setup","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-with-control-tower.html#step-two","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-GetLandingZoneStatus"},"ListBaselines":{"name":"ListBaselines","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list Baselines","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListBaselines.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListBaselines"},"ListControlOperations":{"name":"ListControlOperations","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list all control operations","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListControlOperations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListControlOperations"},"ListDirectoryGroups":{"name":"ListDirectoryGroups","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list the current directory groups available through IAM Identity Center","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/sso.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListDirectoryGroups"},"ListDriftDetails":{"name":"ListDriftDetails","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list occurrences of drift in AWS Control Tower","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/drift.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListDriftDetails"},"ListEnabledBaselines":{"name":"ListEnabledBaselines","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list enabled Baselines","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListEnabledBaselines.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListEnabledBaselines"},"ListEnabledControls":{"name":"ListEnabledControls","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list all enabled controls in a specified organizational unit","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListEnabledControls.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListEnabledControls"},"ListEnabledGuardrails":{"name":"ListEnabledGuardrails","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list currently enabled guardrails","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/controls.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListEnabledGuardrails"},"ListExtendGovernancePrecheckDetails":{"name":"ListExtendGovernancePrecheckDetails","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list Precheck details for an Organizational Unit","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/about-extending-governance.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListExtendGovernancePrecheckDetails"},"ListExternalConfigRuleCompliance":{"name":"ListExternalConfigRuleCompliance","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list the compliance of external AWS Config rules","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/review-compliance.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListExternalConfigRuleCompliance"},"ListGuardrailViolations":{"name":"ListGuardrailViolations","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list existing guardrail violations","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/controls.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListGuardrailViolations"},"ListGuardrails":{"name":"ListGuardrails","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list all available guardrails","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/controls.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListGuardrails"},"ListGuardrailsForTarget":{"name":"ListGuardrailsForTarget","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list guardrails and their current state for a organizational unit","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/controls.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListGuardrailsForTarget"},"ListLandingZoneOperations":{"name":"ListLandingZoneOperations","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list all landing zone operations","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListLandingZoneOperations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListLandingZoneOperations"},"ListLandingZones":{"name":"ListLandingZones","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list all landing zones","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListLandingZones.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListLandingZones"},"ListManagedAccounts":{"name":"ListManagedAccounts","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list accounts managed through AWS Control Tower","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListManagedAccounts"},"ListManagedAccountsForGuardrail":{"name":"ListManagedAccountsForGuardrail","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list managed accounts with a specified guardrail applied","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListManagedAccountsForGuardrail"},"ListManagedAccountsForParent":{"name":"ListManagedAccountsForParent","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list managed accounts under an organizational unit","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListManagedAccountsForParent"},"ListManagedOrganizationalUnits":{"name":"ListManagedOrganizationalUnits","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list organizational units managed by AWS Control Tower","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListManagedOrganizationalUnits"},"ListManagedOrganizationalUnitsForGuardrail":{"name":"ListManagedOrganizationalUnitsForGuardrail","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to list managed organizational units that have a specified guardrail applied","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListManagedOrganizationalUnitsForGuardrail"},"ListTagsForResource":{"name":"ListTagsForResource","service":"controltower","conditionKeys":[],"resources":[{"name":"EnabledBaseline"},{"name":"EnabledControl"},{"name":"LandingZone"}],"description":"Grants permission to list the tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"EnabledBaseline","required":false},{"name":"EnabledControl","required":false},{"name":"LandingZone","required":false}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ListTagsForResource"},"ManageOrganizationalUnit":{"name":"ManageOrganizationalUnit","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to set up an organizational unit to be managed by AWS Control Tower","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ManageOrganizationalUnit"},"PerformPreLaunchChecks":{"name":"PerformPreLaunchChecks","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to perform validations in an account","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-prereqs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-PerformPreLaunchChecks"},"ResetEnabledBaseline":{"name":"ResetEnabledBaseline","service":"controltower","conditionKeys":[],"resources":[{"name":"EnabledBaseline"}],"description":"Grants permission to reset an enabled Baseline","accessLevel":"Write","resourceTypes":[{"name":"EnabledBaseline","required":true}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_ResetEnabledBaseline.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ResetEnabledBaseline"},"ResetEnabledControl":{"name":"ResetEnabledControl","service":"controltower","conditionKeys":[],"resources":[{"name":"EnabledControl"}],"description":"Grants permission to reset an enabled control for an organizational unit","accessLevel":"Write","resourceTypes":[{"name":"EnabledControl","required":true}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_ResetEnabledControl.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ResetEnabledControl"},"ResetLandingZone":{"name":"ResetLandingZone","service":"controltower","conditionKeys":[],"resources":[{"name":"LandingZone"}],"description":"Grants permission to reset a landing zone","accessLevel":"Write","resourceTypes":[{"name":"LandingZone","required":true}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_ResetLandingZone.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-ResetLandingZone"},"SetupLandingZone":{"name":"SetupLandingZone","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to set up or update AWS Control Tower landing zone","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-with-control-tower.html#step-two","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-SetupLandingZone"},"TagResource":{"name":"TagResource","service":"controltower","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"EnabledBaseline"},{"name":"EnabledControl"},{"name":"LandingZone"}],"description":"Grants permission to add tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"EnabledBaseline","required":false},{"name":"EnabledControl","required":false},{"name":"LandingZone","required":false}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-TagResource"},"UntagResource":{"name":"UntagResource","service":"controltower","conditionKeys":["aws:TagKeys"],"resources":[{"name":"EnabledBaseline"},{"name":"EnabledControl"},{"name":"LandingZone"}],"description":"Grants permission to remove tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"EnabledBaseline","required":false},{"name":"EnabledControl","required":false},{"name":"LandingZone","required":false}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-UntagResource"},"UpdateAccountFactoryConfig":{"name":"UpdateAccountFactoryConfig","service":"controltower","conditionKeys":[],"resources":[],"description":"Grants permission to update the account factory configuration","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-UpdateAccountFactoryConfig"},"UpdateEnabledBaseline":{"name":"UpdateEnabledBaseline","service":"controltower","conditionKeys":[],"resources":[{"name":"EnabledBaseline"}],"description":"Grants permission to update an enabled Baseline","accessLevel":"Write","resourceTypes":[{"name":"EnabledBaseline","required":true}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_UpdateEnabledBaseline.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-UpdateEnabledBaseline"},"UpdateEnabledControl":{"name":"UpdateEnabledControl","service":"controltower","conditionKeys":[],"resources":[{"name":"EnabledControl"}],"description":"Grants permission to update an enabled control for an organizational unit","accessLevel":"Write","resourceTypes":[{"name":"EnabledControl","required":true}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_UpdateEnabledControl.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-UpdateEnabledControl"},"UpdateLandingZone":{"name":"UpdateLandingZone","service":"controltower","conditionKeys":[],"resources":[{"name":"LandingZone"}],"description":"Grants permission to update a landing zone","accessLevel":"Write","resourceTypes":[{"name":"LandingZone","required":true}],"operationUrl":"https://docs.aws.amazon.com/controltower/latest/APIReference/API_UpdateLandingZone.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html#awscontroltower-UpdateLandingZone"}},"resources":[{"service":"controltower","name":"Baseline","arnFormats":["arn:${Partition}:controltower:${Region}::baseline/${BaselineId}"],"conditionKeys":[]},{"service":"controltower","name":"EnabledBaseline","arnFormats":["arn:${Partition}:controltower:${Region}:${Account}:enabledbaseline/${EnabledBaselineId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"controltower","name":"EnabledControl","arnFormats":["arn:${Partition}:controltower:${Region}:${Account}:enabledcontrol/${EnabledControlId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"controltower","name":"LandingZone","arnFormats":["arn:${Partition}:controltower:${Region}:${Account}:landingzone/${LandingZoneId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"name":"aws:RequestTag/${TagKey}","types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"name":"aws:ResourceTag/${TagKey}","types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"name":"aws:TagKeys","types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"name":"cur","actions":{"DeleteReportDefinition":{"name":"DeleteReportDefinition","service":"cur","conditionKeys":[],"resources":[{"name":"cur"}],"description":"Grants permission to delete Cost and Usage Report Definition","accessLevel":"Write","resourceTypes":[{"name":"cur","required":true}],"operationUrl":"https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_cur_DeleteReportDefinition.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscostandusagereport.html#awscostandusagereport-DeleteReportDefinition"},"DescribeReportDefinitions":{"name":"DescribeReportDefinitions","service":"cur","conditionKeys":[],"resources":[],"description":"Grants permission to get Cost and Usage Report Definitions","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_cur_DescribeReportDefinitions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscostandusagereport.html#awscostandusagereport-DescribeReportDefinitions"},"GetClassicReport":{"name":"GetClassicReport","service":"cur","conditionKeys":[],"resources":[],"description":"Grants permission to get Bills CSV report","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cur/latest/userguide/security.html#user-permissions","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscostandusagereport.html#awscostandusagereport-GetClassicReport"},"GetClassicReportPreferences":{"name":"GetClassicReportPreferences","service":"cur","conditionKeys":[],"resources":[],"description":"Grants permission to get the classic report enablement status for Usage Reports","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cur/latest/userguide/security.html#user-permissions","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscostandusagereport.html#awscostandusagereport-GetClassicReportPreferences"},"GetUsageReport":{"name":"GetUsageReport","service":"cur","conditionKeys":[],"resources":[],"description":"Grants permission to get list of AWS services, usage type and operation for the Usage Report workflow. Allows or denies download of usage reports too","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cur/latest/userguide/security.html#user-permissions","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscostandusagereport.html#awscostandusagereport-GetUsageReport"},"ListTagsForResource":{"name":"ListTagsForResource","service":"cur","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"cur"}],"description":"Grants permission to list tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"cur","required":true}],"operationUrl":"https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_cur_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscostandusagereport.html#awscostandusagereport-ListTagsForResource"},"ModifyReportDefinition":{"name":"ModifyReportDefinition","service":"cur","conditionKeys":[],"resources":[{"name":"cur"}],"description":"Grants permission to modify Cost and Usage Report Definition","accessLevel":"Write","resourceTypes":[{"name":"cur","required":true}],"operationUrl":"https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_cur_ModifyReportDefinition.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscostandusagereport.html#awscostandusagereport-ModifyReportDefinition"},"PutClassicReportPreferences":{"name":"PutClassicReportPreferences","service":"cur","conditionKeys":[],"resources":[],"description":"Grants permission to enable classic reports","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cur/latest/userguide/security.html#user-permissions","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscostandusagereport.html#awscostandusagereport-PutClassicReportPreferences"},"PutReportDefinition":{"name":"PutReportDefinition","service":"cur","conditionKeys":[],"resources":[{"name":"cur"}],"description":"Grants permission to write Cost and Usage Report Definition","accessLevel":"Write","resourceTypes":[{"name":"cur","required":true}],"operationUrl":"https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_cur_PutReportDefinition.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscostandusagereport.html#awscostandusagereport-PutReportDefinition"},"TagResource":{"name":"TagResource","service":"cur","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"cur"}],"description":"Grants permission to tag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"cur","required":true}],"operationUrl":"https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_cur_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscostandusagereport.html#awscostandusagereport-TagResource"},"UntagResource":{"name":"UntagResource","service":"cur","conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"cur"}],"description":"Grants permission to untag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"cur","required":true}],"operationUrl":"https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_cur_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscostandusagereport.html#awscostandusagereport-UntagResource"},"ValidateReportDestination":{"name":"ValidateReportDestination","service":"cur","conditionKeys":[],"resources":[],"description":"Grants permission to validates if the s3 bucket exists with appropriate permissions for CUR delivery","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cur/latest/userguide/security.html#user-permissions","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscostandusagereport.html#awscostandusagereport-ValidateReportDestination"}},"resources":[{"name":"cur","arnFormats":["arn:${Partition}:cur:${Region}:${Account}:definition/${ReportName}"],"conditionKeys":[]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscostandusagereport.html"}
|
|
1
|
+
{"name":"cur","actions":{"DeleteReportDefinition":{"name":"DeleteReportDefinition","service":"cur","conditionKeys":[],"resources":[{"name":"cur"}],"description":"Grants permission to delete Cost and Usage Report Definition","accessLevel":"Write","resourceTypes":[{"name":"cur","required":true}],"operationUrl":"https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_cur_DeleteReportDefinition.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscostandusagereport.html#awscostandusagereport-DeleteReportDefinition"},"DescribeReportDefinitions":{"name":"DescribeReportDefinitions","service":"cur","conditionKeys":[],"resources":[],"description":"Grants permission to get Cost and Usage Report Definitions","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_cur_DescribeReportDefinitions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscostandusagereport.html#awscostandusagereport-DescribeReportDefinitions"},"GetClassicReport":{"name":"GetClassicReport","service":"cur","conditionKeys":[],"resources":[],"description":"Grants permission to get Bills CSV report","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cur/latest/userguide/security.html#user-permissions","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscostandusagereport.html#awscostandusagereport-GetClassicReport"},"GetClassicReportPreferences":{"name":"GetClassicReportPreferences","service":"cur","conditionKeys":[],"resources":[],"description":"Grants permission to get the classic report enablement status for Usage Reports","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cur/latest/userguide/security.html#user-permissions","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscostandusagereport.html#awscostandusagereport-GetClassicReportPreferences"},"GetUsageReport":{"name":"GetUsageReport","service":"cur","conditionKeys":[],"resources":[],"description":"Grants permission to get list of AWS services, usage type and operation for the Usage Report workflow. Allows or denies download of usage reports too","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cur/latest/userguide/security.html#user-permissions","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscostandusagereport.html#awscostandusagereport-GetUsageReport"},"ListTagsForResource":{"name":"ListTagsForResource","service":"cur","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"cur"}],"description":"Grants permission to list tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"cur","required":true}],"operationUrl":"https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_cur_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscostandusagereport.html#awscostandusagereport-ListTagsForResource"},"ModifyReportDefinition":{"name":"ModifyReportDefinition","service":"cur","conditionKeys":[],"resources":[{"name":"cur"}],"description":"Grants permission to modify Cost and Usage Report Definition","accessLevel":"Write","resourceTypes":[{"name":"cur","required":true}],"operationUrl":"https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_cur_ModifyReportDefinition.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscostandusagereport.html#awscostandusagereport-ModifyReportDefinition"},"PutClassicReportPreferences":{"name":"PutClassicReportPreferences","service":"cur","conditionKeys":[],"resources":[],"description":"Grants permission to enable classic reports","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cur/latest/userguide/security.html#user-permissions","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscostandusagereport.html#awscostandusagereport-PutClassicReportPreferences"},"PutReportDefinition":{"name":"PutReportDefinition","service":"cur","conditionKeys":[],"resources":[{"name":"cur"}],"description":"Grants permission to write Cost and Usage Report Definition","accessLevel":"Write","resourceTypes":[{"name":"cur","required":true}],"operationUrl":"https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_cur_PutReportDefinition.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscostandusagereport.html#awscostandusagereport-PutReportDefinition"},"TagResource":{"name":"TagResource","service":"cur","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"cur"}],"description":"Grants permission to tag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"cur","required":true}],"operationUrl":"https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_cur_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscostandusagereport.html#awscostandusagereport-TagResource"},"UntagResource":{"name":"UntagResource","service":"cur","conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"cur"}],"description":"Grants permission to untag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"cur","required":true}],"operationUrl":"https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_cur_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscostandusagereport.html#awscostandusagereport-UntagResource"},"ValidateReportDestination":{"name":"ValidateReportDestination","service":"cur","conditionKeys":[],"resources":[],"description":"Grants permission to validates if the s3 bucket exists with appropriate permissions for CUR delivery","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cur/latest/userguide/security.html#user-permissions","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscostandusagereport.html#awscostandusagereport-ValidateReportDestination"}},"resources":[{"service":"cur","name":"cur","arnFormats":["arn:${Partition}:cur:${Region}:${Account}:definition/${ReportName}"],"conditionKeys":[]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"name":"aws:RequestTag/${TagKey}","types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"name":"aws:ResourceTag/${TagKey}","types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"name":"aws:TagKeys","types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscostandusagereport.html"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"name":"databrew","actions":{"BatchDeleteRecipeVersion":{"name":"BatchDeleteRecipeVersion","service":"databrew","conditionKeys":[],"resources":[{"name":"Recipe"}],"description":"Grants permission to delete one or more recipe versions","accessLevel":"Write","resourceTypes":[{"name":"Recipe","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_BatchDeleteRecipeVersion.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-BatchDeleteRecipeVersion"},"CreateDataset":{"name":"CreateDataset","service":"databrew","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a dataset","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_CreateDataset.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-CreateDataset"},"CreateProfileJob":{"name":"CreateProfileJob","service":"databrew","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a profile job","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_CreateProfileJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-CreateProfileJob"},"CreateProject":{"name":"CreateProject","service":"databrew","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a project","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_CreateProject.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-CreateProject"},"CreateRecipe":{"name":"CreateRecipe","service":"databrew","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a recipe","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_CreateRecipe.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-CreateRecipe"},"CreateRecipeJob":{"name":"CreateRecipeJob","service":"databrew","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a recipe job","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_CreateRecipeJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-CreateRecipeJob"},"CreateRuleset":{"name":"CreateRuleset","service":"databrew","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a ruleset","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_CreateRuleset.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-CreateRuleset"},"CreateSchedule":{"name":"CreateSchedule","service":"databrew","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a schedule","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_CreateSchedule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-CreateSchedule"},"DeleteDataset":{"name":"DeleteDataset","service":"databrew","conditionKeys":[],"resources":[{"name":"Dataset"}],"description":"Grants permission to delete a dataset","accessLevel":"Write","resourceTypes":[{"name":"Dataset","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_DeleteDataset.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-DeleteDataset"},"DeleteJob":{"name":"DeleteJob","service":"databrew","conditionKeys":[],"resources":[{"name":"Job"}],"description":"Grants permission to delete a job","accessLevel":"Write","resourceTypes":[{"name":"Job","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_DeleteJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-DeleteJob"},"DeleteProject":{"name":"DeleteProject","service":"databrew","conditionKeys":[],"resources":[{"name":"Project"}],"description":"Grants permission to delete a project","accessLevel":"Write","resourceTypes":[{"name":"Project","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_DeleteProject.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-DeleteProject"},"DeleteRecipeVersion":{"name":"DeleteRecipeVersion","service":"databrew","conditionKeys":[],"resources":[{"name":"Recipe"}],"description":"Grants permission to delete a recipe version","accessLevel":"Write","resourceTypes":[{"name":"Recipe","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_DeleteRecipeVersion.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-DeleteRecipeVersion"},"DeleteRuleset":{"name":"DeleteRuleset","service":"databrew","conditionKeys":[],"resources":[{"name":"Ruleset"}],"description":"Grants permission to delete a ruleset","accessLevel":"Write","resourceTypes":[{"name":"Ruleset","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_DeleteRuleset.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-DeleteRuleset"},"DeleteSchedule":{"name":"DeleteSchedule","service":"databrew","conditionKeys":[],"resources":[{"name":"Schedule"}],"description":"Grants permission to delete a schedule","accessLevel":"Write","resourceTypes":[{"name":"Schedule","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_DeleteSchedule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-DeleteSchedule"},"DescribeDataset":{"name":"DescribeDataset","service":"databrew","conditionKeys":[],"resources":[{"name":"Dataset"}],"description":"Grants permission to view details about a dataset","accessLevel":"Read","resourceTypes":[{"name":"Dataset","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_DescribeDataset.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-DescribeDataset"},"DescribeJob":{"name":"DescribeJob","service":"databrew","conditionKeys":[],"resources":[{"name":"Job"}],"description":"Grants permission to view details about a job","accessLevel":"Read","resourceTypes":[{"name":"Job","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_DescribeJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-DescribeJob"},"DescribeJobRun":{"name":"DescribeJobRun","service":"databrew","conditionKeys":[],"resources":[{"name":"Job"}],"description":"Grants permission to view details about job run for a given job","accessLevel":"Read","resourceTypes":[{"name":"Job","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_DescribeJobRun.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-DescribeJobRun"},"DescribeProject":{"name":"DescribeProject","service":"databrew","conditionKeys":[],"resources":[{"name":"Project"}],"description":"Grants permission to view details about a project","accessLevel":"Read","resourceTypes":[{"name":"Project","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_DescribeProject.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-DescribeProject"},"DescribeRecipe":{"name":"DescribeRecipe","service":"databrew","conditionKeys":[],"resources":[{"name":"Recipe"}],"description":"Grants permission to view details about a recipe","accessLevel":"Read","resourceTypes":[{"name":"Recipe","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_DescribeRecipe.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-DescribeRecipe"},"DescribeRuleset":{"name":"DescribeRuleset","service":"databrew","conditionKeys":[],"resources":[{"name":"Ruleset"}],"description":"Grants permission to view details about a ruleset","accessLevel":"Read","resourceTypes":[{"name":"Ruleset","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_DescribeRuleset.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-DescribeRuleset"},"DescribeSchedule":{"name":"DescribeSchedule","service":"databrew","conditionKeys":[],"resources":[{"name":"Schedule"}],"description":"Grants permission to view details about a schedule","accessLevel":"Read","resourceTypes":[{"name":"Schedule","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_DescribeSchedule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-DescribeSchedule"},"ListDatasets":{"name":"ListDatasets","service":"databrew","conditionKeys":[],"resources":[],"description":"Grants permission to list datasets in your account","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_ListDatasets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-ListDatasets"},"ListJobRuns":{"name":"ListJobRuns","service":"databrew","conditionKeys":[],"resources":[{"name":"Job"}],"description":"Grants permission to list job runs for a given job","accessLevel":"Read","resourceTypes":[{"name":"Job","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_ListJobRuns.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-ListJobRuns"},"ListJobs":{"name":"ListJobs","service":"databrew","conditionKeys":[],"resources":[],"description":"Grants permission to list jobs in your account","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_ListJobs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-ListJobs"},"ListProjects":{"name":"ListProjects","service":"databrew","conditionKeys":[],"resources":[],"description":"Grants permission to list projects in your account","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_ListProjects.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-ListProjects"},"ListRecipeVersions":{"name":"ListRecipeVersions","service":"databrew","conditionKeys":[],"resources":[{"name":"Recipe"}],"description":"Grants permission to list versions in your recipe","accessLevel":"Read","resourceTypes":[{"name":"Recipe","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_ListRecipeVersions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-ListRecipeVersions"},"ListRecipes":{"name":"ListRecipes","service":"databrew","conditionKeys":[],"resources":[],"description":"Grants permission to list recipes in your account","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_ListRecipes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-ListRecipes"},"ListRulesets":{"name":"ListRulesets","service":"databrew","conditionKeys":[],"resources":[],"description":"Grants permission to list rulesets in your account","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_ListRulesets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-ListRulesets"},"ListSchedules":{"name":"ListSchedules","service":"databrew","conditionKeys":[],"resources":[],"description":"Grants permission to list schedules in your account","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_ListSchedules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-ListSchedules"},"ListTagsForResource":{"name":"ListTagsForResource","service":"databrew","conditionKeys":[],"resources":[{"name":"Dataset"},{"name":"Job"},{"name":"Project"},{"name":"Recipe"},{"name":"Ruleset"},{"name":"Schedule"}],"description":"Grants permission to retrieve tags associated with a resource","accessLevel":"Read","resourceTypes":[{"name":"Dataset","required":false},{"name":"Job","required":false},{"name":"Project","required":false},{"name":"Recipe","required":false},{"name":"Ruleset","required":false},{"name":"Schedule","required":false}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-ListTagsForResource"},"PublishRecipe":{"name":"PublishRecipe","service":"databrew","conditionKeys":[],"resources":[{"name":"Recipe"}],"description":"Grants permission to publish a major verison of a recipe","accessLevel":"Write","resourceTypes":[{"name":"Recipe","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_PublishRecipe.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-PublishRecipe"},"SendProjectSessionAction":{"name":"SendProjectSessionAction","service":"databrew","conditionKeys":[],"resources":[{"name":"Project"}],"description":"Grants permission to submit an action to the interactive session for a project","accessLevel":"Write","resourceTypes":[{"name":"Project","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_SendProjectSessionAction.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-SendProjectSessionAction"},"StartJobRun":{"name":"StartJobRun","service":"databrew","conditionKeys":[],"resources":[{"name":"Job"}],"description":"Grants permission to start running a job","accessLevel":"Write","resourceTypes":[{"name":"Job","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_StartJobRun.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-StartJobRun"},"StartProjectSession":{"name":"StartProjectSession","service":"databrew","conditionKeys":[],"resources":[{"name":"Project"}],"description":"Grants permission to start an interactive session for a project","accessLevel":"Write","resourceTypes":[{"name":"Project","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_StartProjectSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-StartProjectSession"},"StopJobRun":{"name":"StopJobRun","service":"databrew","conditionKeys":[],"resources":[{"name":"Job"}],"description":"Grants permission to stop a job run for a job","accessLevel":"Write","resourceTypes":[{"name":"Job","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_StopJobRun.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-StopJobRun"},"TagResource":{"name":"TagResource","service":"databrew","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Dataset"},{"name":"Job"},{"name":"Project"},{"name":"Recipe"},{"name":"Ruleset"},{"name":"Schedule"}],"description":"Grants permission to add tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"Dataset","required":false},{"name":"Job","required":false},{"name":"Project","required":false},{"name":"Recipe","required":false},{"name":"Ruleset","required":false},{"name":"Schedule","required":false}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-TagResource"},"UntagResource":{"name":"UntagResource","service":"databrew","conditionKeys":["aws:TagKeys"],"resources":[{"name":"Dataset"},{"name":"Job"},{"name":"Project"},{"name":"Recipe"},{"name":"Ruleset"},{"name":"Schedule"}],"description":"Grants permission to remove tags associated with a resource","accessLevel":"Tagging","resourceTypes":[{"name":"Dataset","required":false},{"name":"Job","required":false},{"name":"Project","required":false},{"name":"Recipe","required":false},{"name":"Ruleset","required":false},{"name":"Schedule","required":false}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-UntagResource"},"UpdateDataset":{"name":"UpdateDataset","service":"databrew","conditionKeys":[],"resources":[{"name":"Dataset"}],"description":"Grants permission to modify a dataset","accessLevel":"Write","resourceTypes":[{"name":"Dataset","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_UpdateDataset.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-UpdateDataset"},"UpdateProfileJob":{"name":"UpdateProfileJob","service":"databrew","conditionKeys":[],"resources":[{"name":"Job"}],"description":"Grants permission to modify a profile job","accessLevel":"Write","resourceTypes":[{"name":"Job","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_UpdateProfileJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-UpdateProfileJob"},"UpdateProject":{"name":"UpdateProject","service":"databrew","conditionKeys":[],"resources":[{"name":"Project"}],"description":"Grants permission to modify a project","accessLevel":"Write","resourceTypes":[{"name":"Project","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_UpdateProject.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-UpdateProject"},"UpdateRecipe":{"name":"UpdateRecipe","service":"databrew","conditionKeys":[],"resources":[{"name":"Recipe"}],"description":"Grants permission to modify a recipe","accessLevel":"Write","resourceTypes":[{"name":"Recipe","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_UpdateRecipe.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-UpdateRecipe"},"UpdateRecipeJob":{"name":"UpdateRecipeJob","service":"databrew","conditionKeys":[],"resources":[{"name":"Job"}],"description":"Grants permission to modify a recipe job","accessLevel":"Write","resourceTypes":[{"name":"Job","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_UpdateRecipeJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-UpdateRecipeJob"},"UpdateRuleset":{"name":"UpdateRuleset","service":"databrew","conditionKeys":[],"resources":[{"name":"Ruleset"}],"description":"Grants permission to modify a ruleset","accessLevel":"Write","resourceTypes":[{"name":"Ruleset","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_UpdateRuleset.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-UpdateRuleset"},"UpdateSchedule":{"name":"UpdateSchedule","service":"databrew","conditionKeys":[],"resources":[{"name":"Schedule"}],"description":"Grants permission to modify a schedule","accessLevel":"Write","resourceTypes":[{"name":"Schedule","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_UpdateSchedule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-UpdateSchedule"}},"resources":[{"name":"Dataset","arnFormats":["arn:${Partition}:databrew:${Region}:${Account}:dataset/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Job","arnFormats":["arn:${Partition}:databrew:${Region}:${Account}:job/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Project","arnFormats":["arn:${Partition}:databrew:${Region}:${Account}:project/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Recipe","arnFormats":["arn:${Partition}:databrew:${Region}:${Account}:recipe/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Ruleset","arnFormats":["arn:${Partition}:databrew:${Region}:${Account}:ruleset/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Schedule","arnFormats":["arn:${Partition}:databrew:${Region}:${Account}:schedule/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html"}
|
|
1
|
+
{"name":"databrew","actions":{"BatchDeleteRecipeVersion":{"name":"BatchDeleteRecipeVersion","service":"databrew","conditionKeys":[],"resources":[{"name":"Recipe"}],"description":"Grants permission to delete one or more recipe versions","accessLevel":"Write","resourceTypes":[{"name":"Recipe","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_BatchDeleteRecipeVersion.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-BatchDeleteRecipeVersion"},"CreateDataset":{"name":"CreateDataset","service":"databrew","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a dataset","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_CreateDataset.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-CreateDataset"},"CreateProfileJob":{"name":"CreateProfileJob","service":"databrew","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a profile job","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_CreateProfileJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-CreateProfileJob"},"CreateProject":{"name":"CreateProject","service":"databrew","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a project","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_CreateProject.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-CreateProject"},"CreateRecipe":{"name":"CreateRecipe","service":"databrew","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a recipe","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_CreateRecipe.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-CreateRecipe"},"CreateRecipeJob":{"name":"CreateRecipeJob","service":"databrew","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a recipe job","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_CreateRecipeJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-CreateRecipeJob"},"CreateRuleset":{"name":"CreateRuleset","service":"databrew","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a ruleset","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_CreateRuleset.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-CreateRuleset"},"CreateSchedule":{"name":"CreateSchedule","service":"databrew","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a schedule","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_CreateSchedule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-CreateSchedule"},"DeleteDataset":{"name":"DeleteDataset","service":"databrew","conditionKeys":[],"resources":[{"name":"Dataset"}],"description":"Grants permission to delete a dataset","accessLevel":"Write","resourceTypes":[{"name":"Dataset","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_DeleteDataset.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-DeleteDataset"},"DeleteJob":{"name":"DeleteJob","service":"databrew","conditionKeys":[],"resources":[{"name":"Job"}],"description":"Grants permission to delete a job","accessLevel":"Write","resourceTypes":[{"name":"Job","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_DeleteJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-DeleteJob"},"DeleteProject":{"name":"DeleteProject","service":"databrew","conditionKeys":[],"resources":[{"name":"Project"}],"description":"Grants permission to delete a project","accessLevel":"Write","resourceTypes":[{"name":"Project","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_DeleteProject.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-DeleteProject"},"DeleteRecipeVersion":{"name":"DeleteRecipeVersion","service":"databrew","conditionKeys":[],"resources":[{"name":"Recipe"}],"description":"Grants permission to delete a recipe version","accessLevel":"Write","resourceTypes":[{"name":"Recipe","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_DeleteRecipeVersion.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-DeleteRecipeVersion"},"DeleteRuleset":{"name":"DeleteRuleset","service":"databrew","conditionKeys":[],"resources":[{"name":"Ruleset"}],"description":"Grants permission to delete a ruleset","accessLevel":"Write","resourceTypes":[{"name":"Ruleset","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_DeleteRuleset.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-DeleteRuleset"},"DeleteSchedule":{"name":"DeleteSchedule","service":"databrew","conditionKeys":[],"resources":[{"name":"Schedule"}],"description":"Grants permission to delete a schedule","accessLevel":"Write","resourceTypes":[{"name":"Schedule","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_DeleteSchedule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-DeleteSchedule"},"DescribeDataset":{"name":"DescribeDataset","service":"databrew","conditionKeys":[],"resources":[{"name":"Dataset"}],"description":"Grants permission to view details about a dataset","accessLevel":"Read","resourceTypes":[{"name":"Dataset","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_DescribeDataset.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-DescribeDataset"},"DescribeJob":{"name":"DescribeJob","service":"databrew","conditionKeys":[],"resources":[{"name":"Job"}],"description":"Grants permission to view details about a job","accessLevel":"Read","resourceTypes":[{"name":"Job","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_DescribeJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-DescribeJob"},"DescribeJobRun":{"name":"DescribeJobRun","service":"databrew","conditionKeys":[],"resources":[{"name":"Job"}],"description":"Grants permission to view details about job run for a given job","accessLevel":"Read","resourceTypes":[{"name":"Job","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_DescribeJobRun.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-DescribeJobRun"},"DescribeProject":{"name":"DescribeProject","service":"databrew","conditionKeys":[],"resources":[{"name":"Project"}],"description":"Grants permission to view details about a project","accessLevel":"Read","resourceTypes":[{"name":"Project","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_DescribeProject.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-DescribeProject"},"DescribeRecipe":{"name":"DescribeRecipe","service":"databrew","conditionKeys":[],"resources":[{"name":"Recipe"}],"description":"Grants permission to view details about a recipe","accessLevel":"Read","resourceTypes":[{"name":"Recipe","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_DescribeRecipe.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-DescribeRecipe"},"DescribeRuleset":{"name":"DescribeRuleset","service":"databrew","conditionKeys":[],"resources":[{"name":"Ruleset"}],"description":"Grants permission to view details about a ruleset","accessLevel":"Read","resourceTypes":[{"name":"Ruleset","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_DescribeRuleset.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-DescribeRuleset"},"DescribeSchedule":{"name":"DescribeSchedule","service":"databrew","conditionKeys":[],"resources":[{"name":"Schedule"}],"description":"Grants permission to view details about a schedule","accessLevel":"Read","resourceTypes":[{"name":"Schedule","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_DescribeSchedule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-DescribeSchedule"},"ListDatasets":{"name":"ListDatasets","service":"databrew","conditionKeys":[],"resources":[],"description":"Grants permission to list datasets in your account","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_ListDatasets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-ListDatasets"},"ListJobRuns":{"name":"ListJobRuns","service":"databrew","conditionKeys":[],"resources":[{"name":"Job"}],"description":"Grants permission to list job runs for a given job","accessLevel":"Read","resourceTypes":[{"name":"Job","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_ListJobRuns.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-ListJobRuns"},"ListJobs":{"name":"ListJobs","service":"databrew","conditionKeys":[],"resources":[],"description":"Grants permission to list jobs in your account","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_ListJobs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-ListJobs"},"ListProjects":{"name":"ListProjects","service":"databrew","conditionKeys":[],"resources":[],"description":"Grants permission to list projects in your account","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_ListProjects.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-ListProjects"},"ListRecipeVersions":{"name":"ListRecipeVersions","service":"databrew","conditionKeys":[],"resources":[{"name":"Recipe"}],"description":"Grants permission to list versions in your recipe","accessLevel":"Read","resourceTypes":[{"name":"Recipe","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_ListRecipeVersions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-ListRecipeVersions"},"ListRecipes":{"name":"ListRecipes","service":"databrew","conditionKeys":[],"resources":[],"description":"Grants permission to list recipes in your account","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_ListRecipes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-ListRecipes"},"ListRulesets":{"name":"ListRulesets","service":"databrew","conditionKeys":[],"resources":[],"description":"Grants permission to list rulesets in your account","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_ListRulesets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-ListRulesets"},"ListSchedules":{"name":"ListSchedules","service":"databrew","conditionKeys":[],"resources":[],"description":"Grants permission to list schedules in your account","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_ListSchedules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-ListSchedules"},"ListTagsForResource":{"name":"ListTagsForResource","service":"databrew","conditionKeys":[],"resources":[{"name":"Dataset"},{"name":"Job"},{"name":"Project"},{"name":"Recipe"},{"name":"Ruleset"},{"name":"Schedule"}],"description":"Grants permission to retrieve tags associated with a resource","accessLevel":"Read","resourceTypes":[{"name":"Dataset","required":false},{"name":"Job","required":false},{"name":"Project","required":false},{"name":"Recipe","required":false},{"name":"Ruleset","required":false},{"name":"Schedule","required":false}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-ListTagsForResource"},"PublishRecipe":{"name":"PublishRecipe","service":"databrew","conditionKeys":[],"resources":[{"name":"Recipe"}],"description":"Grants permission to publish a major verison of a recipe","accessLevel":"Write","resourceTypes":[{"name":"Recipe","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_PublishRecipe.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-PublishRecipe"},"SendProjectSessionAction":{"name":"SendProjectSessionAction","service":"databrew","conditionKeys":[],"resources":[{"name":"Project"}],"description":"Grants permission to submit an action to the interactive session for a project","accessLevel":"Write","resourceTypes":[{"name":"Project","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_SendProjectSessionAction.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-SendProjectSessionAction"},"StartJobRun":{"name":"StartJobRun","service":"databrew","conditionKeys":[],"resources":[{"name":"Job"}],"description":"Grants permission to start running a job","accessLevel":"Write","resourceTypes":[{"name":"Job","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_StartJobRun.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-StartJobRun"},"StartProjectSession":{"name":"StartProjectSession","service":"databrew","conditionKeys":[],"resources":[{"name":"Project"}],"description":"Grants permission to start an interactive session for a project","accessLevel":"Write","resourceTypes":[{"name":"Project","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_StartProjectSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-StartProjectSession"},"StopJobRun":{"name":"StopJobRun","service":"databrew","conditionKeys":[],"resources":[{"name":"Job"}],"description":"Grants permission to stop a job run for a job","accessLevel":"Write","resourceTypes":[{"name":"Job","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_StopJobRun.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-StopJobRun"},"TagResource":{"name":"TagResource","service":"databrew","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Dataset"},{"name":"Job"},{"name":"Project"},{"name":"Recipe"},{"name":"Ruleset"},{"name":"Schedule"}],"description":"Grants permission to add tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"Dataset","required":false},{"name":"Job","required":false},{"name":"Project","required":false},{"name":"Recipe","required":false},{"name":"Ruleset","required":false},{"name":"Schedule","required":false}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-TagResource"},"UntagResource":{"name":"UntagResource","service":"databrew","conditionKeys":["aws:TagKeys"],"resources":[{"name":"Dataset"},{"name":"Job"},{"name":"Project"},{"name":"Recipe"},{"name":"Ruleset"},{"name":"Schedule"}],"description":"Grants permission to remove tags associated with a resource","accessLevel":"Tagging","resourceTypes":[{"name":"Dataset","required":false},{"name":"Job","required":false},{"name":"Project","required":false},{"name":"Recipe","required":false},{"name":"Ruleset","required":false},{"name":"Schedule","required":false}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-UntagResource"},"UpdateDataset":{"name":"UpdateDataset","service":"databrew","conditionKeys":[],"resources":[{"name":"Dataset"}],"description":"Grants permission to modify a dataset","accessLevel":"Write","resourceTypes":[{"name":"Dataset","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_UpdateDataset.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-UpdateDataset"},"UpdateProfileJob":{"name":"UpdateProfileJob","service":"databrew","conditionKeys":[],"resources":[{"name":"Job"}],"description":"Grants permission to modify a profile job","accessLevel":"Write","resourceTypes":[{"name":"Job","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_UpdateProfileJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-UpdateProfileJob"},"UpdateProject":{"name":"UpdateProject","service":"databrew","conditionKeys":[],"resources":[{"name":"Project"}],"description":"Grants permission to modify a project","accessLevel":"Write","resourceTypes":[{"name":"Project","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_UpdateProject.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-UpdateProject"},"UpdateRecipe":{"name":"UpdateRecipe","service":"databrew","conditionKeys":[],"resources":[{"name":"Recipe"}],"description":"Grants permission to modify a recipe","accessLevel":"Write","resourceTypes":[{"name":"Recipe","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_UpdateRecipe.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-UpdateRecipe"},"UpdateRecipeJob":{"name":"UpdateRecipeJob","service":"databrew","conditionKeys":[],"resources":[{"name":"Job"}],"description":"Grants permission to modify a recipe job","accessLevel":"Write","resourceTypes":[{"name":"Job","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_UpdateRecipeJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-UpdateRecipeJob"},"UpdateRuleset":{"name":"UpdateRuleset","service":"databrew","conditionKeys":[],"resources":[{"name":"Ruleset"}],"description":"Grants permission to modify a ruleset","accessLevel":"Write","resourceTypes":[{"name":"Ruleset","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_UpdateRuleset.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-UpdateRuleset"},"UpdateSchedule":{"name":"UpdateSchedule","service":"databrew","conditionKeys":[],"resources":[{"name":"Schedule"}],"description":"Grants permission to modify a schedule","accessLevel":"Write","resourceTypes":[{"name":"Schedule","required":true}],"operationUrl":"https://docs.aws.amazon.com/databrew/latest/dg/API_UpdateSchedule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html#awsgluedatabrew-UpdateSchedule"}},"resources":[{"service":"databrew","name":"Dataset","arnFormats":["arn:${Partition}:databrew:${Region}:${Account}:dataset/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"databrew","name":"Job","arnFormats":["arn:${Partition}:databrew:${Region}:${Account}:job/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"databrew","name":"Project","arnFormats":["arn:${Partition}:databrew:${Region}:${Account}:project/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"databrew","name":"Recipe","arnFormats":["arn:${Partition}:databrew:${Region}:${Account}:recipe/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"databrew","name":"Ruleset","arnFormats":["arn:${Partition}:databrew:${Region}:${Account}:ruleset/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"databrew","name":"Schedule","arnFormats":["arn:${Partition}:databrew:${Region}:${Account}:schedule/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"name":"aws:RequestTag/${TagKey}","types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"name":"aws:ResourceTag/${TagKey}","types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"name":"aws:TagKeys","types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsgluedatabrew.html"}
|