aws-iam-language-server 0.0.22 → 0.0.26

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (51) hide show
  1. package/.github/workflows/publish.yml +1 -0
  2. package/.github/workflows/scrape-release.yml +36 -0
  3. package/.github/workflows/scrape.yml +56 -0
  4. package/package.json +1 -1
  5. package/src/data/servicereference/actions.json +1 -1
  6. package/src/data/servicereference/services/access-analyzer.json +1 -1
  7. package/src/data/servicereference/services/agentaccess-mcp.json +1 -0
  8. package/src/data/servicereference/services/aidevops.json +1 -1
  9. package/src/data/servicereference/services/application-signals-mcp.json +1 -0
  10. package/src/data/servicereference/services/aws-marketplace.json +1 -1
  11. package/src/data/servicereference/services/bcm-dashboards.json +1 -1
  12. package/src/data/servicereference/services/bedrock-agentcore.json +1 -1
  13. package/src/data/servicereference/services/bedrock.json +1 -1
  14. package/src/data/servicereference/services/braket.json +1 -1
  15. package/src/data/servicereference/services/cases.json +1 -1
  16. package/src/data/servicereference/services/cloudwatch.json +1 -1
  17. package/src/data/servicereference/services/connect-campaigns.json +1 -1
  18. package/src/data/servicereference/services/datazone.json +1 -1
  19. package/src/data/servicereference/services/eks.json +1 -1
  20. package/src/data/servicereference/services/emr-serverless.json +1 -1
  21. package/src/data/servicereference/services/es.json +1 -1
  22. package/src/data/servicereference/services/evs.json +1 -1
  23. package/src/data/servicereference/services/gamelift.json +1 -1
  24. package/src/data/servicereference/services/geo.json +1 -1
  25. package/src/data/servicereference/services/groundstation.json +1 -1
  26. package/src/data/servicereference/services/iottwinmaker.json +1 -1
  27. package/src/data/servicereference/services/ivs.json +1 -1
  28. package/src/data/servicereference/services/kinesis.json +1 -1
  29. package/src/data/servicereference/services/kms.json +1 -1
  30. package/src/data/servicereference/services/networkmonitor.json +1 -1
  31. package/src/data/servicereference/services/observabilityadmin.json +1 -1
  32. package/src/data/servicereference/services/omics.json +1 -1
  33. package/src/data/servicereference/services/partnercentral.json +1 -1
  34. package/src/data/servicereference/services/payment-cryptography.json +1 -1
  35. package/src/data/servicereference/services/personalize.json +1 -1
  36. package/src/data/servicereference/services/profile.json +1 -1
  37. package/src/data/servicereference/services/q.json +1 -1
  38. package/src/data/servicereference/services/redshift.json +1 -1
  39. package/src/data/servicereference/services/researchstudio.json +1 -0
  40. package/src/data/servicereference/services/s3express.json +1 -1
  41. package/src/data/servicereference/services/sagemaker.json +1 -1
  42. package/src/data/servicereference/services/scheduler.json +1 -1
  43. package/src/data/servicereference/services/securityagent.json +1 -1
  44. package/src/data/servicereference/services/securityhub.json +1 -1
  45. package/src/data/servicereference/services/ses.json +1 -1
  46. package/src/data/servicereference/services/trustedadvisor.json +1 -1
  47. package/src/data/servicereference/services/verifiedpermissions.json +1 -1
  48. package/src/data/servicereference/services/wickr.json +1 -1
  49. package/src/data/servicereference/services/wisdom.json +1 -1
  50. package/src/data/servicereference/services.json +1 -1
  51. package/src/handlers/diagnostics/resource.js +6 -3
@@ -0,0 +1 @@
1
+ {"name":"researchstudio","actions":{"AssignPrincipal":{"name":"AssignPrincipal","service":"researchstudio","conditionKeys":[],"resources":[],"description":"Grants permission to assign princiapl","accessLevel":"Write","resourceTypes":[],"operationUrl":"xxx<link>.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbiodiscovery.html#amazonbiodiscovery-AssignPrincipal"},"CreateApplication":{"name":"CreateApplication","service":"researchstudio","conditionKeys":[],"resources":[],"description":"Grants permission to create application","accessLevel":"Write","resourceTypes":[],"operationUrl":"xxx<link>.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbiodiscovery.html#amazonbiodiscovery-CreateApplication"},"DeleteApplication":{"name":"DeleteApplication","service":"researchstudio","conditionKeys":[],"resources":[],"description":"Grants permission to delete application","accessLevel":"Write","resourceTypes":[],"operationUrl":"xxx<link>.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbiodiscovery.html#amazonbiodiscovery-DeleteApplication"},"DeletePrincipal":{"name":"DeletePrincipal","service":"researchstudio","conditionKeys":[],"resources":[],"description":"Grants permission to delete principal","accessLevel":"Write","resourceTypes":[],"operationUrl":"xxx<link>.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbiodiscovery.html#amazonbiodiscovery-DeletePrincipal"},"GetApplication":{"name":"GetApplication","service":"researchstudio","conditionKeys":[],"resources":[],"description":"Grants permission to get application","accessLevel":"Read","resourceTypes":[],"operationUrl":"xxx<link>.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbiodiscovery.html#amazonbiodiscovery-GetApplication"},"ListApplications":{"name":"ListApplications","service":"researchstudio","conditionKeys":[],"resources":[],"description":"Grants permission to list applications","accessLevel":"List","resourceTypes":[],"operationUrl":"xxx<link>.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbiodiscovery.html#amazonbiodiscovery-ListApplications"}},"resources":[],"conditionKeys":{},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbiodiscovery.html"}
@@ -1 +1 @@
1
- {"name":"s3express","actions":{"CreateAccessPoint":{"name":"CreateAccessPoint","service":"s3express","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:LocationName","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to create a new access point","accessLevel":"Write","resourceTypes":[{"name":"accesspoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessPoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-CreateAccessPoint"},"CreateBucket":{"name":"CreateBucket","service":"s3express","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","s3express:LocationName","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to create a new bucket","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucket.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-CreateBucket"},"CreateSession":{"name":"CreateSession","service":"s3express","conditionKeys":["s3express:AllAccessRestrictedToLocalZoneGroup","s3express:Permissions","s3express:ResourceAccount","s3express:SessionMode","s3express:TlsVersion","s3express:authType","s3express:signatureAge","s3express:signatureversion","s3express:x-amz-content-sha256","s3express:x-amz-server-side-encryption","s3express:x-amz-server-side-encryption-aws-kms-key-id"],"resources":[{"name":"accesspoint"},{"name":"bucket"}],"description":"Grants permission to Create Session token which is used for object APIs such as PutObject, GetObject, etc","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true},{"name":"accesspoint","required":false}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-CreateSession"},"DeleteAccessPoint":{"name":"DeleteAccessPoint","service":"s3express","conditionKeys":["s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to delete the access point named in the URI","accessLevel":"Write","resourceTypes":[{"name":"accesspoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-DeleteAccessPoint"},"DeleteAccessPointPolicy":{"name":"DeleteAccessPointPolicy","service":"s3express","conditionKeys":["s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to delete the policy on a specified access point","accessLevel":"Permissions management","resourceTypes":[{"name":"accesspoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPointPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-DeleteAccessPointPolicy"},"DeleteAccessPointScope":{"name":"DeleteAccessPointScope","service":"s3express","conditionKeys":["s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to delete the scope configuration on a specified access point","accessLevel":"Permissions management","resourceTypes":[{"name":"accesspoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPointScope.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-DeleteAccessPointScope"},"DeleteBucket":{"name":"DeleteBucket","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to delete the bucket named in the URI","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucket.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-DeleteBucket"},"DeleteBucketPolicy":{"name":"DeleteBucketPolicy","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to delete the policy on a specified bucket","accessLevel":"Permissions management","resourceTypes":[{"name":"bucket","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-DeleteBucketPolicy"},"GetAccessPoint":{"name":"GetAccessPoint","service":"s3express","conditionKeys":["s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to return configuration information about the specified access point","accessLevel":"Read","resourceTypes":[{"name":"accesspoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-GetAccessPoint"},"GetAccessPointPolicy":{"name":"GetAccessPointPolicy","service":"s3express","conditionKeys":["s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to return the access point policy associated with the specified access point","accessLevel":"Read","resourceTypes":[{"name":"accesspoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-GetAccessPointPolicy"},"GetAccessPointScope":{"name":"GetAccessPointScope","service":"s3express","conditionKeys":["s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to return the scope configuration associated with the specified access point","accessLevel":"Read","resourceTypes":[{"name":"accesspoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointScope.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-GetAccessPointScope"},"GetBucketPolicy":{"name":"GetBucketPolicy","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to return the policy of the specified bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-GetBucketPolicy"},"GetEncryptionConfiguration":{"name":"GetEncryptionConfiguration","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to return the default encryption configuration for a directory bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketEncryption.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-GetEncryptionConfiguration"},"GetLifecycleConfiguration":{"name":"GetLifecycleConfiguration","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to return the lifecycle configuration information set on a directory bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketLifecycleConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-GetLifecycleConfiguration"},"GetMetricsConfiguration":{"name":"GetMetricsConfiguration","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to get a metrics configuration of a directory bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketMetricsConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-GetMetricsConfiguration"},"ListAccessPointsForDirectoryBuckets":{"name":"ListAccessPointsForDirectoryBuckets","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[],"description":"Grants permission to list access points","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListAccessPointsForDirectoryBuckets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-ListAccessPointsForDirectoryBuckets"},"ListAllMyDirectoryBuckets":{"name":"ListAllMyDirectoryBuckets","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[],"description":"Grants permission to list all directory buckets owned by the authenticated sender of the request","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListDirectoryBuckets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-ListAllMyDirectoryBuckets"},"ListTagsForResource":{"name":"ListTagsForResource","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"},{"name":"bucket"}],"description":"Grants permission to lists all of the tags for a specified resource","accessLevel":"List","resourceTypes":[{"name":"accesspoint","required":false},{"name":"bucket","required":false}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-ListTagsForResource"},"PutAccessPointPolicy":{"name":"PutAccessPointPolicy","service":"s3express","conditionKeys":["s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to associate an access policy with a specified access point","accessLevel":"Permissions management","resourceTypes":[{"name":"accesspoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessPointPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-PutAccessPointPolicy"},"PutAccessPointScope":{"name":"PutAccessPointScope","service":"s3express","conditionKeys":["s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to associate an access point with a specified access point scope configuration","accessLevel":"Permissions management","resourceTypes":[{"name":"accesspoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessPointScope.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-PutAccessPointScope"},"PutBucketPolicy":{"name":"PutBucketPolicy","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to add or replace a bucket policy on a bucket","accessLevel":"Permissions management","resourceTypes":[{"name":"bucket","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-PutBucketPolicy"},"PutEncryptionConfiguration":{"name":"PutEncryptionConfiguration","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to set the encryption configuration for a directory bucket","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketEncryption.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-PutEncryptionConfiguration"},"PutLifecycleConfiguration":{"name":"PutLifecycleConfiguration","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to create a new lifecycle configuration for the directory bucket or replace an existing lifecycle configuration","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketLifecycleConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-PutLifecycleConfiguration"},"PutMetricsConfiguration":{"name":"PutMetricsConfiguration","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to set or update a metrics configuration for the CloudWatch request metrics of a directory bucket","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketMetricsConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-PutMetricsConfiguration"},"TagResource":{"name":"TagResource","service":"s3express","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"},{"name":"bucket"}],"description":"Grants permission to create a new user-defined tag or update an existing tag","accessLevel":"Tagging","resourceTypes":[{"name":"accesspoint","required":false},{"name":"bucket","required":false}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-TagResource"},"UntagResource":{"name":"UntagResource","service":"s3express","conditionKeys":["aws:TagKeys","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"},{"name":"bucket"}],"description":"Grants permission to remove the specified user-defined tags from an S3 resource","accessLevel":"Tagging","resourceTypes":[{"name":"accesspoint","required":false},{"name":"bucket","required":false}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-UntagResource"}},"resources":[{"service":"s3express","name":"accesspoint","arnFormats":["arn:${Partition}:s3express:${Region}:${Account}:accesspoint/${AccessPointName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","s3express:AccessPointTag/${TagKey}"]},{"service":"s3express","name":"bucket","arnFormats":["arn:${Partition}:s3express:${Region}:${Account}:bucket/${BucketName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","s3express:BucketTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"name":"aws:RequestTag/${TagKey}","types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"name":"aws:ResourceTag/${TagKey}","types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"name":"aws:TagKeys","types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"s3express:AccessPointNetworkOrigin":{"name":"s3express:AccessPointNetworkOrigin","types":["String"],"description":"Filters access by the network origin (Internet or VPC)"},"s3express:AccessPointTag/${TagKey}":{"name":"s3express:AccessPointTag/${TagKey}","types":["String"],"description":"Filters access by tag key-value pairs attached to the access point"},"s3express:AllAccessRestrictedToLocalZoneGroup":{"name":"s3express:AllAccessRestrictedToLocalZoneGroup","types":["String"],"description":"Filters access by AWS Local Zone network border group(s) provided in this condition key"},"s3express:BucketTag/${TagKey}":{"name":"s3express:BucketTag/${TagKey}","types":["String"],"description":"Filters access by tag key-value pairs attached to the bucket"},"s3express:DataAccessPointAccount":{"name":"s3express:DataAccessPointAccount","types":["String"],"description":"Filters access by the AWS Account ID that owns the access point"},"s3express:DataAccessPointArn":{"name":"s3express:DataAccessPointArn","types":["ARN"],"description":"Filters access by an access point Amazon Resource Name (ARN)"},"s3express:LocationName":{"name":"s3express:LocationName","types":["String"],"description":"Filters access by a specific Availability Zone or Local Zone ID"},"s3express:Permissions":{"name":"s3express:Permissions","types":["ArrayOfString"],"description":"Filters access by the permission requested by Access Point Scope configuration, such as GetObject, PutObject"},"s3express:ResourceAccount":{"name":"s3express:ResourceAccount","types":["String"],"description":"Filters access by the resource owner AWS account ID"},"s3express:SessionMode":{"name":"s3express:SessionMode","types":["String"],"description":"Filters access by the permission requested by CreateSession API, such as ReadOnly and ReadWrite"},"s3express:TlsVersion":{"name":"s3express:TlsVersion","types":["Numeric"],"description":"Filters access by the TLS version used by the client"},"s3express:authType":{"name":"s3express:authType","types":["String"],"description":"Filters access by authentication method"},"s3express:signatureAge":{"name":"s3express:signatureAge","types":["Numeric"],"description":"Filters access by the age in milliseconds of the request signature"},"s3express:signatureversion":{"name":"s3express:signatureversion","types":["String"],"description":"Filters access by the AWS Signature Version used on the request"},"s3express:x-amz-content-sha256":{"name":"s3express:x-amz-content-sha256","types":["String"],"description":"Filters access by unsigned content in your bucket"},"s3express:x-amz-server-side-encryption":{"name":"s3express:x-amz-server-side-encryption","types":["String"],"description":"Filters access by server-side encryption"},"s3express:x-amz-server-side-encryption-aws-kms-key-id":{"name":"s3express:x-amz-server-side-encryption-aws-kms-key-id","types":["ARN"],"description":"Filters access by AWS KMS customer managed key for server-side encryption"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html"}
1
+ {"name":"s3express","actions":{"CreateAccessPoint":{"name":"CreateAccessPoint","service":"s3express","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:LocationName","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to create a new access point","accessLevel":"Write","resourceTypes":[{"name":"accesspoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessPoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-CreateAccessPoint"},"CreateBucket":{"name":"CreateBucket","service":"s3express","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","s3express:LocationName","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to create a new bucket","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucket.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-CreateBucket"},"CreateSession":{"name":"CreateSession","service":"s3express","conditionKeys":["s3express:AllAccessRestrictedToLocalZoneGroup","s3express:Permissions","s3express:ResourceAccount","s3express:SessionMode","s3express:TlsVersion","s3express:authType","s3express:signatureAge","s3express:signatureversion","s3express:x-amz-content-sha256","s3express:x-amz-server-side-encryption","s3express:x-amz-server-side-encryption-aws-kms-key-id"],"resources":[{"name":"accesspoint"},{"name":"bucket"}],"description":"Grants permission to Create Session token which is used for object APIs such as PutObject, GetObject, etc","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true},{"name":"accesspoint","required":false}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-CreateSession"},"DeleteAccessPoint":{"name":"DeleteAccessPoint","service":"s3express","conditionKeys":["s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to delete the access point named in the URI","accessLevel":"Write","resourceTypes":[{"name":"accesspoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-DeleteAccessPoint"},"DeleteAccessPointPolicy":{"name":"DeleteAccessPointPolicy","service":"s3express","conditionKeys":["s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to delete the policy on a specified access point","accessLevel":"Permissions management","resourceTypes":[{"name":"accesspoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPointPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-DeleteAccessPointPolicy"},"DeleteAccessPointScope":{"name":"DeleteAccessPointScope","service":"s3express","conditionKeys":["s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to delete the scope configuration on a specified access point","accessLevel":"Permissions management","resourceTypes":[{"name":"accesspoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPointScope.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-DeleteAccessPointScope"},"DeleteBucket":{"name":"DeleteBucket","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to delete the bucket named in the URI","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucket.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-DeleteBucket"},"DeleteBucketPolicy":{"name":"DeleteBucketPolicy","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to delete the policy on a specified bucket","accessLevel":"Permissions management","resourceTypes":[{"name":"bucket","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-DeleteBucketPolicy"},"GetAccessPoint":{"name":"GetAccessPoint","service":"s3express","conditionKeys":["s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to return configuration information about the specified access point","accessLevel":"Read","resourceTypes":[{"name":"accesspoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-GetAccessPoint"},"GetAccessPointPolicy":{"name":"GetAccessPointPolicy","service":"s3express","conditionKeys":["s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to return the access point policy associated with the specified access point","accessLevel":"Read","resourceTypes":[{"name":"accesspoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-GetAccessPointPolicy"},"GetAccessPointScope":{"name":"GetAccessPointScope","service":"s3express","conditionKeys":["s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to return the scope configuration associated with the specified access point","accessLevel":"Read","resourceTypes":[{"name":"accesspoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointScope.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-GetAccessPointScope"},"GetBucketPolicy":{"name":"GetBucketPolicy","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to return the policy of the specified bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-GetBucketPolicy"},"GetEncryptionConfiguration":{"name":"GetEncryptionConfiguration","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to return the default encryption configuration for a directory bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketEncryption.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-GetEncryptionConfiguration"},"GetInventoryConfiguration":{"name":"GetInventoryConfiguration","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to return an inventory configuration identified by the inventory configuration ID for a S3 directory bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketInventoryConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-GetInventoryConfiguration"},"GetLifecycleConfiguration":{"name":"GetLifecycleConfiguration","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to return the lifecycle configuration information set on a directory bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketLifecycleConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-GetLifecycleConfiguration"},"GetMetricsConfiguration":{"name":"GetMetricsConfiguration","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to get a metrics configuration of a directory bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketMetricsConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-GetMetricsConfiguration"},"ListAccessPointsForDirectoryBuckets":{"name":"ListAccessPointsForDirectoryBuckets","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[],"description":"Grants permission to list access points","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListAccessPointsForDirectoryBuckets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-ListAccessPointsForDirectoryBuckets"},"ListAllMyDirectoryBuckets":{"name":"ListAllMyDirectoryBuckets","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[],"description":"Grants permission to list all directory buckets owned by the authenticated sender of the request","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListDirectoryBuckets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-ListAllMyDirectoryBuckets"},"ListTagsForResource":{"name":"ListTagsForResource","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"},{"name":"bucket"}],"description":"Grants permission to lists all of the tags for a specified resource","accessLevel":"List","resourceTypes":[{"name":"accesspoint","required":false},{"name":"bucket","required":false}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-ListTagsForResource"},"PutAccessPointPolicy":{"name":"PutAccessPointPolicy","service":"s3express","conditionKeys":["s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to associate an access policy with a specified access point","accessLevel":"Permissions management","resourceTypes":[{"name":"accesspoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessPointPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-PutAccessPointPolicy"},"PutAccessPointScope":{"name":"PutAccessPointScope","service":"s3express","conditionKeys":["s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to associate an access point with a specified access point scope configuration","accessLevel":"Permissions management","resourceTypes":[{"name":"accesspoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessPointScope.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-PutAccessPointScope"},"PutBucketPolicy":{"name":"PutBucketPolicy","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to add or replace a bucket policy on a bucket","accessLevel":"Permissions management","resourceTypes":[{"name":"bucket","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-PutBucketPolicy"},"PutEncryptionConfiguration":{"name":"PutEncryptionConfiguration","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to set the encryption configuration for a directory bucket","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketEncryption.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-PutEncryptionConfiguration"},"PutInventoryConfiguration":{"name":"PutInventoryConfiguration","service":"s3express","conditionKeys":["s3express:InventoryAccessibleOptionalFields","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to add an inventory configuration to the bucket, identified by the inventory ID","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketInventoryConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-PutInventoryConfiguration"},"PutLifecycleConfiguration":{"name":"PutLifecycleConfiguration","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to create a new lifecycle configuration for the directory bucket or replace an existing lifecycle configuration","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketLifecycleConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-PutLifecycleConfiguration"},"PutMetricsConfiguration":{"name":"PutMetricsConfiguration","service":"s3express","conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to set or update a metrics configuration for the CloudWatch request metrics of a directory bucket","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketMetricsConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-PutMetricsConfiguration"},"TagResource":{"name":"TagResource","service":"s3express","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"},{"name":"bucket"}],"description":"Grants permission to create a new user-defined tag or update an existing tag","accessLevel":"Tagging","resourceTypes":[{"name":"accesspoint","required":false},{"name":"bucket","required":false}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-TagResource"},"UntagResource":{"name":"UntagResource","service":"s3express","conditionKeys":["aws:TagKeys","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"},{"name":"bucket"}],"description":"Grants permission to remove the specified user-defined tags from an S3 resource","accessLevel":"Tagging","resourceTypes":[{"name":"accesspoint","required":false},{"name":"bucket","required":false}],"operationUrl":"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html#amazons3express-UntagResource"}},"resources":[{"service":"s3express","name":"accesspoint","arnFormats":["arn:${Partition}:s3express:${Region}:${Account}:accesspoint/${AccessPointName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","s3express:AccessPointTag/${TagKey}"]},{"service":"s3express","name":"bucket","arnFormats":["arn:${Partition}:s3express:${Region}:${Account}:bucket/${BucketName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","s3express:BucketTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"name":"aws:RequestTag/${TagKey}","types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"name":"aws:ResourceTag/${TagKey}","types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"name":"aws:TagKeys","types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"s3express:AccessPointNetworkOrigin":{"name":"s3express:AccessPointNetworkOrigin","types":["String"],"description":"Filters access by the network origin (Internet or VPC)"},"s3express:AccessPointTag/${TagKey}":{"name":"s3express:AccessPointTag/${TagKey}","types":["String"],"description":"Filters access by tag key-value pairs attached to the access point"},"s3express:AllAccessRestrictedToLocalZoneGroup":{"name":"s3express:AllAccessRestrictedToLocalZoneGroup","types":["String"],"description":"Filters access by AWS Local Zone network border group(s) provided in this condition key"},"s3express:BucketTag/${TagKey}":{"name":"s3express:BucketTag/${TagKey}","types":["String"],"description":"Filters access by tag key-value pairs attached to the bucket"},"s3express:DataAccessPointAccount":{"name":"s3express:DataAccessPointAccount","types":["String"],"description":"Filters access by the AWS Account ID that owns the access point"},"s3express:DataAccessPointArn":{"name":"s3express:DataAccessPointArn","types":["ARN"],"description":"Filters access by an access point Amazon Resource Name (ARN)"},"s3express:InventoryAccessibleOptionalFields":{"name":"s3express:InventoryAccessibleOptionalFields","types":["ArrayOfString"],"description":"Filters access by restricting which optional metadata fields a user can add when configuring S3 Inventory reports"},"s3express:LocationName":{"name":"s3express:LocationName","types":["String"],"description":"Filters access by a specific Availability Zone or Local Zone ID"},"s3express:Permissions":{"name":"s3express:Permissions","types":["ArrayOfString"],"description":"Filters access by the permission requested by Access Point Scope configuration, such as GetObject, PutObject"},"s3express:ResourceAccount":{"name":"s3express:ResourceAccount","types":["String"],"description":"Filters access by the resource owner AWS account ID"},"s3express:SessionMode":{"name":"s3express:SessionMode","types":["String"],"description":"Filters access by the permission requested by CreateSession API, such as ReadOnly and ReadWrite"},"s3express:TlsVersion":{"name":"s3express:TlsVersion","types":["Numeric"],"description":"Filters access by the TLS version used by the client"},"s3express:authType":{"name":"s3express:authType","types":["String"],"description":"Filters access by authentication method"},"s3express:signatureAge":{"name":"s3express:signatureAge","types":["Numeric"],"description":"Filters access by the age in milliseconds of the request signature"},"s3express:signatureversion":{"name":"s3express:signatureversion","types":["String"],"description":"Filters access by the AWS Signature Version used on the request"},"s3express:x-amz-content-sha256":{"name":"s3express:x-amz-content-sha256","types":["String"],"description":"Filters access by unsigned content in your bucket"},"s3express:x-amz-server-side-encryption":{"name":"s3express:x-amz-server-side-encryption","types":["String"],"description":"Filters access by server-side encryption"},"s3express:x-amz-server-side-encryption-aws-kms-key-id":{"name":"s3express:x-amz-server-side-encryption-aws-kms-key-id","types":["ARN"],"description":"Filters access by AWS KMS customer managed key for server-side encryption"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html"}