aws-iam-language-server 0.0.33 → 0.0.35

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (46) hide show
  1. package/.github/workflows/scrape.yml +25 -7
  2. package/package.json +1 -1
  3. package/src/data/servicereference/actions.json +1 -1
  4. package/src/data/servicereference/services/agentaccess-mcp.json +1 -1
  5. package/src/data/servicereference/services/aidevops.json +1 -1
  6. package/src/data/servicereference/services/apigateway.json +1 -1
  7. package/src/data/servicereference/services/application-signals.json +1 -1
  8. package/src/data/servicereference/services/artifact.json +1 -1
  9. package/src/data/servicereference/services/aws-external-anthropic.json +1 -1
  10. package/src/data/servicereference/services/bedrock-agentcore.json +1 -1
  11. package/src/data/servicereference/services/bedrock-mantle.json +1 -1
  12. package/src/data/servicereference/services/bedrock.json +1 -1
  13. package/src/data/servicereference/services/billing.json +1 -1
  14. package/src/data/servicereference/services/cloudformation.json +1 -1
  15. package/src/data/servicereference/services/cloudwatch.json +1 -1
  16. package/src/data/servicereference/services/config.json +1 -1
  17. package/src/data/servicereference/services/connect.json +1 -1
  18. package/src/data/servicereference/services/datazone.json +1 -1
  19. package/src/data/servicereference/services/ec2.json +1 -1
  20. package/src/data/servicereference/services/ecs.json +1 -1
  21. package/src/data/servicereference/services/eks.json +1 -1
  22. package/src/data/servicereference/services/es.json +1 -1
  23. package/src/data/servicereference/services/events.json +1 -1
  24. package/src/data/servicereference/services/eventsbilltoaws.json +1 -0
  25. package/src/data/servicereference/services/glue.json +1 -1
  26. package/src/data/servicereference/services/guardduty.json +1 -1
  27. package/src/data/servicereference/services/healthlake.json +1 -1
  28. package/src/data/servicereference/services/inspector2.json +1 -1
  29. package/src/data/servicereference/services/lambda.json +1 -1
  30. package/src/data/servicereference/services/lex.json +1 -1
  31. package/src/data/servicereference/services/logs.json +1 -1
  32. package/src/data/servicereference/services/mq.json +1 -1
  33. package/src/data/servicereference/services/odb.json +1 -1
  34. package/src/data/servicereference/services/outposts.json +1 -1
  35. package/src/data/servicereference/services/partnercentral.json +1 -1
  36. package/src/data/servicereference/services/quicksight.json +1 -1
  37. package/src/data/servicereference/services/s3.json +1 -1
  38. package/src/data/servicereference/services/secretsmanager.json +1 -1
  39. package/src/data/servicereference/services/securityagent.json +1 -1
  40. package/src/data/servicereference/services/securityhub.json +1 -1
  41. package/src/data/servicereference/services/signin.json +1 -1
  42. package/src/data/servicereference/services/ssm.json +1 -1
  43. package/src/data/servicereference/services/transform-custom.json +1 -1
  44. package/src/data/servicereference/services/user-subscriptions.json +1 -1
  45. package/src/data/servicereference/services/wafv2.json +1 -1
  46. package/src/data/servicereference/services.json +1 -1
@@ -1 +1 @@
1
- {"name":"secretsmanager","actions":{"BatchGetSecretValue":{"name":"BatchGetSecretValue","service":"secretsmanager","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve and decrypt a list of secrets","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_BatchGetSecretValue.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-BatchGetSecretValue"},"CancelRotateSecret":{"name":"CancelRotateSecret","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to cancel an in-progress secret rotation","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_CancelRotateSecret.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-CancelRotateSecret"},"CreateSecret":{"name":"CreateSecret","service":"secretsmanager","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","secretsmanager:AddReplicaRegions","secretsmanager:Description","secretsmanager:ForceOverwriteReplicaSecret","secretsmanager:KmsKeyArn","secretsmanager:KmsKeyId","secretsmanager:Name","secretsmanager:ResourceTag/tag-key","secretsmanager:Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to create a secret that stores encrypted data that can be queried and rotated","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_CreateSecret.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-CreateSecret"},"DeleteResourcePolicy":{"name":"DeleteResourcePolicy","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to delete the resource policy attached to a secret","accessLevel":"Permissions management","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_DeleteResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-DeleteResourcePolicy"},"DeleteSecret":{"name":"DeleteSecret","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ForceDeleteWithoutRecovery","secretsmanager:RecoveryWindowInDays","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to delete a secret","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_DeleteSecret.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-DeleteSecret"},"DescribeSecret":{"name":"DescribeSecret","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to retrieve the metadata about a secret, but not the encrypted data","accessLevel":"Read","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_DescribeSecret.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-DescribeSecret"},"GetRandomPassword":{"name":"GetRandomPassword","service":"secretsmanager","conditionKeys":[],"resources":[],"description":"Grants permission to generate a random string for use in password creation","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_GetRandomPassword.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-GetRandomPassword"},"GetResourcePolicy":{"name":"GetResourcePolicy","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to get the resource policy attached to a secret","accessLevel":"Read","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_GetResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-GetResourcePolicy"},"GetSecretValue":{"name":"GetSecretValue","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:VersionId","secretsmanager:VersionStage","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to retrieve and decrypt the encrypted data","accessLevel":"Read","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_GetSecretValue.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-GetSecretValue"},"ListSecretVersionIds":{"name":"ListSecretVersionIds","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to list the available versions of a secret","accessLevel":"Read","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_ListSecretVersionIds.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-ListSecretVersionIds"},"ListSecrets":{"name":"ListSecrets","service":"secretsmanager","conditionKeys":[],"resources":[],"description":"Grants permission to list the available secrets","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_ListSecrets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-ListSecrets"},"PutResourcePolicy":{"name":"PutResourcePolicy","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:BlockPublicPolicy","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to attach a resource policy to a secret","accessLevel":"Permissions management","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_PutResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-PutResourcePolicy"},"PutSecretValue":{"name":"PutSecretValue","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to create a new version of the secret with new encrypted data","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_PutSecretValue.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-PutSecretValue"},"RemoveRegionsFromReplication":{"name":"RemoveRegionsFromReplication","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to remove regions from replication","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_RemoveRegionsFromReplication.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-RemoveRegionsFromReplication"},"ReplicateSecretToRegions":{"name":"ReplicateSecretToRegions","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:AddReplicaRegions","secretsmanager:ForceOverwriteReplicaSecret","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to convert an existing secret to a multi-Region secret and begin replicating the secret to a list of new regions","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_ReplicateSecretToRegions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-ReplicateSecretToRegions"},"RestoreSecret":{"name":"RestoreSecret","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to cancel deletion of a secret","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_RestoreSecret.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-RestoreSecret"},"RotateSecret":{"name":"RotateSecret","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ExternalSecretRotationRoleArn","secretsmanager:ModifyRotationRules","secretsmanager:ResourceTag/tag-key","secretsmanager:RotateImmediately","secretsmanager:RotationLambdaARN","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to start rotation of a secret","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_RotateSecret.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-RotateSecret"},"StopReplicationToReplica":{"name":"StopReplicationToReplica","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to remove the secret from replication and promote the secret to a regional secret in the replica Region","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_StopReplicationToReplica.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-StopReplicationToReplica"},"TagResource":{"name":"TagResource","service":"secretsmanager","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to add tags to a secret","accessLevel":"Tagging","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-TagResource"},"UntagResource":{"name":"UntagResource","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to remove tags from a secret","accessLevel":"Tagging","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-UntagResource"},"UpdateSecret":{"name":"UpdateSecret","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:Description","secretsmanager:KmsKeyArn","secretsmanager:KmsKeyId","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:Type","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to update a secret with new metadata or with a new version of the encrypted data","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_UpdateSecret.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-UpdateSecret"},"UpdateSecretVersionStage":{"name":"UpdateSecretVersionStage","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:VersionStage","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to move a stage from one secret to another","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_UpdateSecretVersionStage.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-UpdateSecretVersionStage"},"ValidateResourcePolicy":{"name":"ValidateResourcePolicy","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to validate a resource policy before attaching policy","accessLevel":"Permissions management","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_ValidateResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-ValidateResourcePolicy"}},"resources":[{"service":"secretsmanager","name":"Secret","arnFormats":["arn:${Partition}:secretsmanager:${Region}:${Account}:secret:${SecretId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","secretsmanager:ResourceTag/tag-key","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"name":"aws:RequestTag/${TagKey}","types":["String"],"description":"Filters access by a key that is present in the request the user makes to the Secrets Manager service"},"aws:ResourceTag/${TagKey}":{"name":"aws:ResourceTag/${TagKey}","types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"name":"aws:TagKeys","types":["ArrayOfString"],"description":"Filters access by the list of all the tag key names present in the request the user makes to the Secrets Manager service"},"secretsmanager:AddReplicaRegions":{"name":"secretsmanager:AddReplicaRegions","types":["ArrayOfString"],"description":"Filters access by the list of Regions in which to replicate the secret"},"secretsmanager:BlockPublicPolicy":{"name":"secretsmanager:BlockPublicPolicy","types":["Bool"],"description":"Filters access by whether the resource policy blocks broad AWS account access"},"secretsmanager:Description":{"name":"secretsmanager:Description","types":["String"],"description":"Filters access by the description text in the request"},"secretsmanager:ExternalSecretRotationRoleArn":{"name":"secretsmanager:ExternalSecretRotationRoleArn","types":["ARN"],"description":"Filters access by the managed external secret rotation role ARN in the request"},"secretsmanager:ForceDeleteWithoutRecovery":{"name":"secretsmanager:ForceDeleteWithoutRecovery","types":["Bool"],"description":"Filters access by whether the secret is to be deleted immediately without any recovery window"},"secretsmanager:ForceOverwriteReplicaSecret":{"name":"secretsmanager:ForceOverwriteReplicaSecret","types":["Bool"],"description":"Filters access by whether to overwrite a secret with the same name in the destination Region"},"secretsmanager:KmsKeyArn":{"name":"secretsmanager:KmsKeyArn","types":["ARN"],"description":"Filters access by the key ARN of the KMS key in the request"},"secretsmanager:KmsKeyId":{"name":"secretsmanager:KmsKeyId","types":["String"],"description":"Filters access by the key identifier of the KMS key in the request. Deprecated: Use secretsmanager:KmsKeyArn"},"secretsmanager:ModifyRotationRules":{"name":"secretsmanager:ModifyRotationRules","types":["Bool"],"description":"Filters access by whether the rotation rules of the secret are to be modified"},"secretsmanager:Name":{"name":"secretsmanager:Name","types":["String"],"description":"Filters access by the friendly name of the secret in the request"},"secretsmanager:RecoveryWindowInDays":{"name":"secretsmanager:RecoveryWindowInDays","types":["Numeric"],"description":"Filters access by the number of days that Secrets Manager waits before it can delete the secret"},"secretsmanager:ResourceTag/tag-key":{"name":"secretsmanager:ResourceTag/tag-key","types":["String"],"description":"Filters access by a tag key and value pair"},"secretsmanager:RotateImmediately":{"name":"secretsmanager:RotateImmediately","types":["Bool"],"description":"Filters access by whether the secret is to be rotated immediately"},"secretsmanager:RotationLambdaARN":{"name":"secretsmanager:RotationLambdaARN","types":["ARN"],"description":"Filters access by the ARN of the rotation Lambda function in the request"},"secretsmanager:SecretId":{"name":"secretsmanager:SecretId","types":["ARN"],"description":"Filters access by the SecretID value in the request"},"secretsmanager:SecretPrimaryRegion":{"name":"secretsmanager:SecretPrimaryRegion","types":["String"],"description":"Filters access by primary region in which the secret is created if the secret is a multi-Region secret"},"secretsmanager:Type":{"name":"secretsmanager:Type","types":["String"],"description":"Filters access by the managed external secret type in the request"},"secretsmanager:VersionId":{"name":"secretsmanager:VersionId","types":["String"],"description":"Filters access by the unique identifier of the version of the secret in the request"},"secretsmanager:VersionStage":{"name":"secretsmanager:VersionStage","types":["String"],"description":"Filters access by the list of version stages in the request"},"secretsmanager:resource/AllowRotationLambdaArn":{"name":"secretsmanager:resource/AllowRotationLambdaArn","types":["ARN"],"description":"Filters access by the ARN of the rotation Lambda function associated with the secret"},"secretsmanager:resource/Type":{"name":"secretsmanager:resource/Type","types":["String"],"description":"Filters access by the managed external secret type associated with the secret"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html"}
1
+ {"name":"secretsmanager","actions":{"BatchGetSecretValue":{"name":"BatchGetSecretValue","service":"secretsmanager","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve and decrypt a list of secrets","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_BatchGetSecretValue.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-BatchGetSecretValue"},"CancelRotateSecret":{"name":"CancelRotateSecret","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to cancel an in-progress secret rotation","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_CancelRotateSecret.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-CancelRotateSecret"},"CreateSecret":{"name":"CreateSecret","service":"secretsmanager","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","secretsmanager:AddReplicaRegions","secretsmanager:Description","secretsmanager:ForceOverwriteReplicaSecret","secretsmanager:KmsKeyArn","secretsmanager:KmsKeyId","secretsmanager:Name","secretsmanager:ResourceTag/tag-key","secretsmanager:Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to create a secret that stores encrypted data that can be queried and rotated","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_CreateSecret.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-CreateSecret"},"DeleteResourcePolicy":{"name":"DeleteResourcePolicy","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to delete the resource policy attached to a secret","accessLevel":"Permissions management","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_DeleteResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-DeleteResourcePolicy"},"DeleteSecret":{"name":"DeleteSecret","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ForceDeleteWithoutRecovery","secretsmanager:RecoveryWindowInDays","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to delete a secret","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_DeleteSecret.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-DeleteSecret"},"DescribeSecret":{"name":"DescribeSecret","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to retrieve the metadata about a secret, but not the encrypted data","accessLevel":"Read","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_DescribeSecret.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-DescribeSecret"},"GetRandomPassword":{"name":"GetRandomPassword","service":"secretsmanager","conditionKeys":[],"resources":[],"description":"Grants permission to generate a random string for use in password creation","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_GetRandomPassword.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-GetRandomPassword"},"GetResourcePolicy":{"name":"GetResourcePolicy","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to get the resource policy attached to a secret","accessLevel":"Read","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_GetResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-GetResourcePolicy"},"GetSecretValue":{"name":"GetSecretValue","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:VersionId","secretsmanager:VersionStage","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to retrieve and decrypt the encrypted data","accessLevel":"Read","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_GetSecretValue.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-GetSecretValue"},"ListSecretVersionIds":{"name":"ListSecretVersionIds","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to list the available versions of a secret","accessLevel":"Read","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_ListSecretVersionIds.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-ListSecretVersionIds"},"ListSecrets":{"name":"ListSecrets","service":"secretsmanager","conditionKeys":[],"resources":[],"description":"Grants permission to list the available secrets","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_ListSecrets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-ListSecrets"},"PutResourcePolicy":{"name":"PutResourcePolicy","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:BlockPublicPolicy","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to attach a resource policy to a secret","accessLevel":"Permissions management","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_PutResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-PutResourcePolicy"},"PutSecretValue":{"name":"PutSecretValue","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to create a new version of the secret with new encrypted data","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_PutSecretValue.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-PutSecretValue"},"RemoveRegionsFromReplication":{"name":"RemoveRegionsFromReplication","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to remove regions from replication","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_RemoveRegionsFromReplication.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-RemoveRegionsFromReplication"},"ReplicateSecretToRegions":{"name":"ReplicateSecretToRegions","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:AddReplicaRegions","secretsmanager:ForceOverwriteReplicaSecret","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to convert an existing secret to a multi-Region secret and begin replicating the secret to a list of new regions","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_ReplicateSecretToRegions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-ReplicateSecretToRegions"},"RestoreSecret":{"name":"RestoreSecret","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to cancel deletion of a secret","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_RestoreSecret.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-RestoreSecret"},"RotateSecret":{"name":"RotateSecret","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ExternalSecretRotationRoleArn","secretsmanager:ModifyRotationRules","secretsmanager:ResourceTag/tag-key","secretsmanager:RotateImmediately","secretsmanager:RotationLambdaARN","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to start rotation of a secret","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_RotateSecret.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-RotateSecret"},"StopReplicationToReplica":{"name":"StopReplicationToReplica","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to remove the secret from replication and promote the secret to a regional secret in the replica Region","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_StopReplicationToReplica.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-StopReplicationToReplica"},"TagResource":{"name":"TagResource","service":"secretsmanager","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to add tags to a secret","accessLevel":"Tagging","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-TagResource"},"UntagResource":{"name":"UntagResource","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to remove tags from a secret","accessLevel":"Tagging","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-UntagResource"},"UpdateSecret":{"name":"UpdateSecret","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:Description","secretsmanager:KmsKeyArn","secretsmanager:KmsKeyId","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:Type","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to update a secret with new metadata or with a new version of the encrypted data","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_UpdateSecret.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-UpdateSecret"},"UpdateSecretVersionStage":{"name":"UpdateSecretVersionStage","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:VersionStage","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to move a stage from one secret to another","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_UpdateSecretVersionStage.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-UpdateSecretVersionStage"},"ValidateResourcePolicy":{"name":"ValidateResourcePolicy","service":"secretsmanager","conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to validate a resource policy before attaching policy","accessLevel":"Permissions management","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_ValidateResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-ValidateResourcePolicy"}},"resources":[{"service":"secretsmanager","name":"Secret","arnFormats":["arn:${Partition}:secretsmanager:${Region}:${Account}:secret:${SecretId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","secretsmanager:ResourceTag/tag-key","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"name":"aws:RequestTag/${TagKey}","types":["String"],"description":"Filters access by a key that is present in the request the user makes to the Secrets Manager service"},"aws:ResourceTag/${TagKey}":{"name":"aws:ResourceTag/${TagKey}","types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"name":"aws:TagKeys","types":["ArrayOfString"],"description":"Filters access by the list of all the tag key names present in the request the user makes to the Secrets Manager service"},"secretsmanager:AddReplicaRegions":{"name":"secretsmanager:AddReplicaRegions","types":["ArrayOfString"],"description":"Filters access by the list of Regions in which to replicate the secret"},"secretsmanager:BlockPublicPolicy":{"name":"secretsmanager:BlockPublicPolicy","types":["Bool"],"description":"Filters access by whether the resource policy blocks broad AWS account access"},"secretsmanager:Description":{"name":"secretsmanager:Description","types":["String"],"description":"Filters access by the description text in the request"},"secretsmanager:ExternalSecretRotationRoleArn":{"name":"secretsmanager:ExternalSecretRotationRoleArn","types":["ARN"],"description":"Filters access by the managed external secret rotation role ARN in the request"},"secretsmanager:ForceDeleteWithoutRecovery":{"name":"secretsmanager:ForceDeleteWithoutRecovery","types":["Bool"],"description":"Filters access by whether the secret is to be deleted immediately without any recovery window"},"secretsmanager:ForceOverwriteReplicaSecret":{"name":"secretsmanager:ForceOverwriteReplicaSecret","types":["Bool"],"description":"Filters access by whether to overwrite a secret with the same name in the destination Region"},"secretsmanager:KmsKeyArn":{"name":"secretsmanager:KmsKeyArn","types":["ARN"],"description":"Filters access by the key ARN of the KMS key in the request"},"secretsmanager:KmsKeyId":{"name":"secretsmanager:KmsKeyId","types":["String"],"description":"Filters access by the key identifier of the KMS key in the request. Deprecated: Use secretsmanager:KmsKeyArn"},"secretsmanager:ModifyRotationRules":{"name":"secretsmanager:ModifyRotationRules","types":["Bool"],"description":"Filters access by whether the rotation rules of the secret are to be modified"},"secretsmanager:Name":{"name":"secretsmanager:Name","types":["String"],"description":"Filters access by the friendly name of the secret in the request"},"secretsmanager:RecoveryWindowInDays":{"name":"secretsmanager:RecoveryWindowInDays","types":["Numeric"],"description":"Filters access by the number of days that Secrets Manager waits before it can delete the secret"},"secretsmanager:ResourceTag/tag-key":{"name":"secretsmanager:ResourceTag/tag-key","types":["String"],"description":"Filters access by a tag key and value pair"},"secretsmanager:RotateImmediately":{"name":"secretsmanager:RotateImmediately","types":["Bool"],"description":"Filters access by whether the secret is to be rotated immediately"},"secretsmanager:RotationLambdaARN":{"name":"secretsmanager:RotationLambdaARN","types":["ARN"],"description":"Filters access by the ARN of the rotation Lambda function in the request"},"secretsmanager:SecretId":{"name":"secretsmanager:SecretId","types":["ARN"],"description":"Filters access by the SecretID value in the request"},"secretsmanager:SecretPrimaryRegion":{"name":"secretsmanager:SecretPrimaryRegion","types":["String"],"description":"Filters access by primary region in which the secret is created if the secret is a multi-Region secret"},"secretsmanager:Type":{"name":"secretsmanager:Type","types":["String"],"description":"Filters access by the managed external secret type in the request"},"secretsmanager:VersionId":{"name":"secretsmanager:VersionId","types":["String"],"description":"Filters access by the unique identifier of the version of the secret in the request"},"secretsmanager:VersionStage":{"name":"secretsmanager:VersionStage","types":["String"],"description":"Filters access by the list of version stages in the request"},"secretsmanager:resource/AllowRotationLambdaArn":{"name":"secretsmanager:resource/AllowRotationLambdaArn","types":["ARN"],"description":"Filters access by the ARN of the rotation Lambda function associated with the secret"},"secretsmanager:resource/Type":{"name":"secretsmanager:resource/Type","types":["String"],"description":"Filters access by the managed external secret type associated with the secret"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html"}
@@ -1 +1 @@
1
- {"name":"securityagent","actions":{"AddArtifact":{"name":"AddArtifact","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to add an Artifact for the given Agent Space","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_AddArtifact.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-AddArtifact"},"BatchDeleteCodeReviews":{"name":"BatchDeleteCodeReviews","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to delete multiple code reviews in a single request","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchDeleteCodeReviews.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchDeleteCodeReviews"},"BatchDeletePentests":{"name":"BatchDeletePentests","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to delete multiple penetration tests in a single request","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchDeletePentests.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchDeletePentests"},"BatchDeleteThreatModels":{"name":"BatchDeleteThreatModels","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to delete multiple threat models in a single request","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchDeleteThreatModels.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchDeleteThreatModels"},"BatchDeleteThreats":{"name":"BatchDeleteThreats","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to delete multiple threats","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchDeleteThreats.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchDeleteThreats"},"BatchGetAgentSpaces":{"name":"BatchGetAgentSpaces","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple agent spaces in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetAgentSpaces.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetAgentSpaces"},"BatchGetArtifactMetadata":{"name":"BatchGetArtifactMetadata","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve one or more Artifact Metadata records for the given Agent Space","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetArtifactMetadata.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetArtifactMetadata"},"BatchGetCodeReviewJobTasks":{"name":"BatchGetCodeReviewJobTasks","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple code review job tasks in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetCodeReviewJobTasks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetCodeReviewJobTasks"},"BatchGetCodeReviewJobs":{"name":"BatchGetCodeReviewJobs","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple code review jobs in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetCodeReviewJobs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetCodeReviewJobs"},"BatchGetCodeReviews":{"name":"BatchGetCodeReviews","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple code reviews in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetCodeReviews.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetCodeReviews"},"BatchGetFindings":{"name":"BatchGetFindings","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple security testing findings in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetFindings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetFindings"},"BatchGetPentestJobContentMetadata":{"name":"BatchGetPentestJobContentMetadata","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple pentest job contents metadata in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetPentestJobContentMetadata.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetPentestJobContentMetadata"},"BatchGetPentestJobTasks":{"name":"BatchGetPentestJobTasks","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple pentest job tasks in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetPentestJobTasks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetPentestJobTasks"},"BatchGetPentestJobs":{"name":"BatchGetPentestJobs","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple security testing jobs in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetPentestJobs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetPentestJobs"},"BatchGetPentests":{"name":"BatchGetPentests","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple penetration tests in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetPentests.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetPentests"},"BatchGetTargetDomains":{"name":"BatchGetTargetDomains","service":"securityagent","conditionKeys":[],"resources":[{"name":"TargetDomain"}],"description":"Grants permission to retrieve multiple target domains in a single request","accessLevel":"Read","resourceTypes":[{"name":"TargetDomain","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetTargetDomains.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetTargetDomains"},"BatchGetThreatModelJobTasks":{"name":"BatchGetThreatModelJobTasks","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple tasks for a threat model job in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetThreatModelJobTasks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetThreatModelJobTasks"},"BatchGetThreatModelJobs":{"name":"BatchGetThreatModelJobs","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve details for one or more threat model jobs","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetThreatModelJobs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetThreatModelJobs"},"BatchGetThreatModels":{"name":"BatchGetThreatModels","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple threat models in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetThreatModels.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetThreatModels"},"BatchGetThreats":{"name":"BatchGetThreats","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve details for one or more threats","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetThreats.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetThreats"},"CreateAgentSpace":{"name":"CreateAgentSpace","service":"securityagent","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an agent space record","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt","kms:DescribeKey","kms:GenerateDataKeyWithoutPlaintext"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateAgentSpace.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateAgentSpace"},"CreateApplication":{"name":"CreateApplication","service":"securityagent","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new application","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole","kms:DescribeKey","sso:CreateApplication"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateApplication.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateApplication"},"CreateCodeReview":{"name":"CreateCodeReview","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to create a new code review configuration","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateCodeReview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateCodeReview"},"CreateDesignReview":{"name":"CreateDesignReview","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to create a design review","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateDesignReview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateDesignReview"},"CreateIntegration":{"name":"CreateIntegration","service":"securityagent","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a security testing integration","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateIntegration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateIntegration"},"CreateMembership":{"name":"CreateMembership","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to add a single member to a agent space with specified role","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateMembership.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateMembership"},"CreateOneTimeLoginSession":{"name":"CreateOneTimeLoginSession","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to create a one time login session","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateOneTimeLoginSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateOneTimeLoginSession"},"CreatePentest":{"name":"CreatePentest","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to create a new penetration test configuration","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreatePentest.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreatePentest"},"CreateSecurityRequirement":{"name":"CreateSecurityRequirement","service":"securityagent","conditionKeys":[],"resources":[{"name":"SecurityRequirementPack"}],"description":"Grants permission to add a customer managed Security Requirement","accessLevel":"Write","resourceTypes":[{"name":"SecurityRequirementPack","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateSecurityRequirement.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateSecurityRequirement"},"CreateTargetDomain":{"name":"CreateTargetDomain","service":"securityagent","conditionKeys":[],"resources":[],"description":"Grants permission to create a target domain record","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateTargetDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateTargetDomain"},"CreateThreat":{"name":"CreateThreat","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to create a threat in a threat model","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateThreat.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateThreat"},"CreateThreatModel":{"name":"CreateThreatModel","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to create a new threat model configuration","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateThreatModel.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateThreatModel"},"DeleteAgentSpace":{"name":"DeleteAgentSpace","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to delete an agent space record","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DeleteAgentSpace.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DeleteAgentSpace"},"DeleteApplication":{"name":"DeleteApplication","service":"securityagent","conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to delete application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DeleteApplication.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DeleteApplication"},"DeleteArtifact":{"name":"DeleteArtifact","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to delete an Artifact","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DeleteArtifact.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DeleteArtifact"},"DeleteDesignReview":{"name":"DeleteDesignReview","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to delete a design review","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DeleteDesignReview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DeleteDesignReview"},"DeleteIntegration":{"name":"DeleteIntegration","service":"securityagent","conditionKeys":[],"resources":[{"name":"Integration"}],"description":"Grants permission to delete the integration of an application","accessLevel":"Write","resourceTypes":[{"name":"Integration","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DeleteIntegration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DeleteIntegration"},"DeleteMembership":{"name":"DeleteMembership","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to remove a single member associated to an agent space","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DeleteMembership.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DeleteMembership"},"DeleteSecurityRequirement":{"name":"DeleteSecurityRequirement","service":"securityagent","conditionKeys":[],"resources":[{"name":"SecurityRequirementPack"}],"description":"Grants permission to delete a customer managed Security Requirement","accessLevel":"Write","resourceTypes":[{"name":"SecurityRequirementPack","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DeleteSecurityRequirement.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DeleteSecurityRequirement"},"DeleteTargetDomain":{"name":"DeleteTargetDomain","service":"securityagent","conditionKeys":[],"resources":[{"name":"TargetDomain"}],"description":"Grants permission to delete a target domain record","accessLevel":"Write","resourceTypes":[{"name":"TargetDomain","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DeleteTargetDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DeleteTargetDomain"},"GetApplication":{"name":"GetApplication","service":"securityagent","conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to get application details by application ID","accessLevel":"Read","resourceTypes":[{"name":"Application","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_GetApplication.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-GetApplication"},"GetArtifact":{"name":"GetArtifact","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve an Artifact for the given Agent Space","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_GetArtifact.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-GetArtifact"},"GetDesignReview":{"name":"GetDesignReview","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to get the status of the associated agent space design review","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_GetDesignReview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-GetDesignReview"},"GetDesignReviewArtifact":{"name":"GetDesignReviewArtifact","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to get design review artifact for a specific document","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_GetDesignReviewArtifact.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-GetDesignReviewArtifact"},"GetDesignReviewFeedback":{"name":"GetDesignReviewFeedback","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to get feedback for a design review comment","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_GetDesignReviewFeedback.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-GetDesignReviewFeedback"},"GetIntegration":{"name":"GetIntegration","service":"securityagent","conditionKeys":[],"resources":[{"name":"Integration"}],"description":"Grants permission to get the integration metadata by ID","accessLevel":"Read","resourceTypes":[{"name":"Integration","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_GetIntegration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-GetIntegration"},"GetSecurityRequirement":{"name":"GetSecurityRequirement","service":"securityagent","conditionKeys":[],"resources":[{"name":"SecurityRequirementPack"}],"description":"Grants permission to retrieve a Security Requirement","accessLevel":"Read","resourceTypes":[{"name":"SecurityRequirementPack","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_GetSecurityRequirement.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-GetSecurityRequirement"},"InitiateProviderRegistration":{"name":"InitiateProviderRegistration","service":"securityagent","conditionKeys":[],"resources":[],"description":"Grants permission to initiate the registration of Security Agent App for the given provider (eg: GitHub)","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_InitiateProviderRegistration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-InitiateProviderRegistration"},"ListAgentSpaces":{"name":"ListAgentSpaces","service":"securityagent","conditionKeys":[],"resources":[],"description":"Grants permission to list agent spaces","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListAgentSpaces.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListAgentSpaces"},"ListApplications":{"name":"ListApplications","service":"securityagent","conditionKeys":[],"resources":[],"description":"Grants permission to list all applications in the account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListApplications.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListApplications"},"ListArtifacts":{"name":"ListArtifacts","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list all artifacts for the given agent space","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListArtifacts.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListArtifacts"},"ListCodeReviewJobTasks":{"name":"ListCodeReviewJobTasks","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list tasks associated with a code review job","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListCodeReviewJobTasks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListCodeReviewJobTasks"},"ListCodeReviewJobsForCodeReview":{"name":"ListCodeReviewJobsForCodeReview","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list code review jobs associated with a code review","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListCodeReviewJobsForCodeReview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListCodeReviewJobsForCodeReview"},"ListCodeReviews":{"name":"ListCodeReviews","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list code reviews with optional filtering by status","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListCodeReviews.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListCodeReviews"},"ListDesignReviewComments":{"name":"ListDesignReviewComments","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list design review comments","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListDesignReviewComments.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListDesignReviewComments"},"ListDesignReviews":{"name":"ListDesignReviews","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list all design reviews for the given agent space","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListDesignReviews.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListDesignReviews"},"ListDiscoveredEndpoints":{"name":"ListDiscoveredEndpoints","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list discovered endpoints associated with a pentest job with optional URI prefix filtering","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListDiscoveredEndpoints.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListDiscoveredEndpoints"},"ListFindings":{"name":"ListFindings","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list findings with filtering and pagination support","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListFindings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListFindings"},"ListIntegratedResources":{"name":"ListIntegratedResources","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list integrated resources for an agent space","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListIntegratedResources.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListIntegratedResources"},"ListIntegrations":{"name":"ListIntegrations","service":"securityagent","conditionKeys":[],"resources":[],"description":"Grants permission to get the integrations owned by the caller's AWS account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListIntegrations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListIntegrations"},"ListMemberships":{"name":"ListMemberships","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list all members associated to an agent space with pagination support","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListMemberships.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListMemberships"},"ListPentestJobTasks":{"name":"ListPentestJobTasks","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list pentest job tasks associated with a pentest job","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListPentestJobTasks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListPentestJobTasks"},"ListPentestJobsForPentest":{"name":"ListPentestJobsForPentest","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list penetration test jobs associated with a penetration test","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListPentestJobsForPentest.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListPentestJobsForPentest"},"ListPentests":{"name":"ListPentests","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list penetration tests with optional filtering by status","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListPentests.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListPentests"},"ListResourcesFromIntegration":{"name":"ListResourcesFromIntegration","service":"securityagent","conditionKeys":[],"resources":[{"name":"Integration"}],"description":"Grants permission to list resources from Integration","accessLevel":"List","resourceTypes":[{"name":"Integration","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListResourcesFromIntegration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListResourcesFromIntegration"},"ListSecurityRequirements":{"name":"ListSecurityRequirements","service":"securityagent","conditionKeys":[],"resources":[{"name":"SecurityRequirementPack"}],"description":"Grants permission to list all Security Requirements","accessLevel":"List","resourceTypes":[{"name":"SecurityRequirementPack","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListSecurityRequirements.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListSecurityRequirements"},"ListTagsForResource":{"name":"ListTagsForResource","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"},{"name":"Application"},{"name":"Integration"},{"name":"SecurityRequirementPack"},{"name":"TargetDomain"}],"description":"Grants permission to list the tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":false},{"name":"Application","required":false},{"name":"Integration","required":false},{"name":"SecurityRequirementPack","required":false},{"name":"TargetDomain","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListTagsForResource"},"ListTargetDomains":{"name":"ListTargetDomains","service":"securityagent","conditionKeys":[],"resources":[],"description":"Grants permission to list target domains","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListTargetDomains.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListTargetDomains"},"ListThreatModelJobTasks":{"name":"ListThreatModelJobTasks","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list tasks associated with a specific threat model job","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListThreatModelJobTasks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListThreatModelJobTasks"},"ListThreatModelJobs":{"name":"ListThreatModelJobs","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list threat model jobs for a threat model","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListThreatModelJobs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListThreatModelJobs"},"ListThreatModels":{"name":"ListThreatModels","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list threat models for an agent space","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListThreatModels.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListThreatModels"},"ListThreats":{"name":"ListThreats","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list threats for a threat model job with filtering and pagination support","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListThreats.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListThreats"},"PutDesignReviewFeedback":{"name":"PutDesignReviewFeedback","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to submit feedback for a design review comment","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_PutDesignReviewFeedback.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-PutDesignReviewFeedback"},"StartCodeRemediation":{"name":"StartCodeRemediation","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to start code remediation for the findings","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt","kms:GenerateDataKey"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_StartCodeRemediation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-StartCodeRemediation"},"StartCodeReviewJob":{"name":"StartCodeReviewJob","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to initiate the execution of a code review","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt","kms:GenerateDataKey"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_StartCodeReviewJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-StartCodeReviewJob"},"StartPentestJob":{"name":"StartPentestJob","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to initiate the execution of a penetration test","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt","kms:GenerateDataKey"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_StartPentestJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-StartPentestJob"},"StartThreatModelJob":{"name":"StartThreatModelJob","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to initiate the execution of a threat model job","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt","kms:GenerateDataKey"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_StartThreatModelJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-StartThreatModelJob"},"StopCodeReviewJob":{"name":"StopCodeReviewJob","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to stop the execution of a running code review","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_StopCodeReviewJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-StopCodeReviewJob"},"StopPentestJob":{"name":"StopPentestJob","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to stop the execution of a running penetration test","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_StopPentestJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-StopPentestJob"},"StopThreatModelJob":{"name":"StopThreatModelJob","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to stop a running threat model job","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_StopThreatModelJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-StopThreatModelJob"},"TagResource":{"name":"TagResource","service":"securityagent","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"AgentSpace"},{"name":"Application"},{"name":"Integration"},{"name":"SecurityRequirementPack"},{"name":"TargetDomain"}],"description":"Grants permission to add tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"AgentSpace","required":false},{"name":"Application","required":false},{"name":"Integration","required":false},{"name":"SecurityRequirementPack","required":false},{"name":"TargetDomain","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-TagResource"},"ToggleManagedSecurityRequirement":{"name":"ToggleManagedSecurityRequirement","service":"securityagent","conditionKeys":[],"resources":[{"name":"SecurityRequirementPack"}],"description":"Grants permission to toggle the status of a managed Security Requirement","accessLevel":"Write","resourceTypes":[{"name":"SecurityRequirementPack","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ToggleManagedSecurityRequirement.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ToggleManagedSecurityRequirement"},"UntagResource":{"name":"UntagResource","service":"securityagent","conditionKeys":["aws:TagKeys"],"resources":[{"name":"AgentSpace"},{"name":"Application"},{"name":"Integration"},{"name":"SecurityRequirementPack"},{"name":"TargetDomain"}],"description":"Grants permission to remove tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"AgentSpace","required":false},{"name":"Application","required":false},{"name":"Integration","required":false},{"name":"SecurityRequirementPack","required":false},{"name":"TargetDomain","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UntagResource"},"UpdateAgentSpace":{"name":"UpdateAgentSpace","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to update an agent space record","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdateAgentSpace.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdateAgentSpace"},"UpdateApplication":{"name":"UpdateApplication","service":"securityagent","conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to update application configuration","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["iam:PassRole","kms:DescribeKey"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdateApplication.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdateApplication"},"UpdateCodeReview":{"name":"UpdateCodeReview","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to update an existing code review with new configuration or settings","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdateCodeReview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdateCodeReview"},"UpdateFinding":{"name":"UpdateFinding","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to update an existing security finding with new details or status","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdateFinding.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdateFinding"},"UpdateIntegratedResources":{"name":"UpdateIntegratedResources","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to update integrated resources for an agent space","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdateIntegratedResources.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdateIntegratedResources"},"UpdatePentest":{"name":"UpdatePentest","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to update an existing penetration test with new configuration or settings","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdatePentest.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdatePentest"},"UpdateSecurityRequirement":{"name":"UpdateSecurityRequirement","service":"securityagent","conditionKeys":[],"resources":[{"name":"SecurityRequirementPack"}],"description":"Grants permission to update a customer managed Security Requirement","accessLevel":"Write","resourceTypes":[{"name":"SecurityRequirementPack","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdateSecurityRequirement.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdateSecurityRequirement"},"UpdateTargetDomain":{"name":"UpdateTargetDomain","service":"securityagent","conditionKeys":[],"resources":[{"name":"TargetDomain"}],"description":"Grants permission to update a target domain record","accessLevel":"Write","resourceTypes":[{"name":"TargetDomain","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdateTargetDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdateTargetDomain"},"UpdateThreat":{"name":"UpdateThreat","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to update a threat","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdateThreat.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdateThreat"},"UpdateThreatModel":{"name":"UpdateThreatModel","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to update an existing threat model with new configuration","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdateThreatModel.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdateThreatModel"},"VerifyTargetDomain":{"name":"VerifyTargetDomain","service":"securityagent","conditionKeys":[],"resources":[{"name":"TargetDomain"}],"description":"Grants permission to verify ownership for a registered target domain","accessLevel":"Write","resourceTypes":[{"name":"TargetDomain","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_VerifyTargetDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-VerifyTargetDomain"}},"resources":[{"service":"securityagent","name":"AgentSpace","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:agent-space/${AgentId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"securityagent","name":"Application","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:application/${ApplicationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"securityagent","name":"Integration","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:integration/${IntegrationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"securityagent","name":"SecurityRequirementPack","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:security-requirement-pack/${SecurityRequirementPackId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"securityagent","name":"TargetDomain","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:target-domain/${TargetDomainId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"name":"aws:RequestTag/${TagKey}","types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"name":"aws:ResourceTag/${TagKey}","types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"name":"aws:TagKeys","types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html"}
1
+ {"name":"securityagent","actions":{"AddArtifact":{"name":"AddArtifact","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to add an Artifact for the given Agent Space","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_AddArtifact.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-AddArtifact"},"BatchCreateSecurityRequirements":{"name":"BatchCreateSecurityRequirements","service":"securityagent","conditionKeys":[],"resources":[{"name":"SecurityRequirementPack"}],"description":"Grants permission to batch create security requirements in a customer managed pack","accessLevel":"Write","resourceTypes":[{"name":"SecurityRequirementPack","required":true}],"dependentActions":["kms:Decrypt","kms:GenerateDataKeyWithoutPlaintext","kms:ReEncryptFrom","kms:ReEncryptTo"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchCreateSecurityRequirements.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchCreateSecurityRequirements"},"BatchDeleteCodeReviews":{"name":"BatchDeleteCodeReviews","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to delete multiple code reviews in a single request","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchDeleteCodeReviews.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchDeleteCodeReviews"},"BatchDeletePentests":{"name":"BatchDeletePentests","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to delete multiple penetration tests in a single request","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchDeletePentests.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchDeletePentests"},"BatchDeleteSecurityRequirements":{"name":"BatchDeleteSecurityRequirements","service":"securityagent","conditionKeys":[],"resources":[{"name":"SecurityRequirementPack"}],"description":"Grants permission to batch delete security requirements from a customer managed pack","accessLevel":"Write","resourceTypes":[{"name":"SecurityRequirementPack","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchDeleteSecurityRequirements.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchDeleteSecurityRequirements"},"BatchDeleteThreatModels":{"name":"BatchDeleteThreatModels","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to delete multiple threat models in a single request","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchDeleteThreatModels.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchDeleteThreatModels"},"BatchDeleteThreats":{"name":"BatchDeleteThreats","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to delete multiple threats","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchDeleteThreats.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchDeleteThreats"},"BatchGetAgentSpaces":{"name":"BatchGetAgentSpaces","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple agent spaces in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetAgentSpaces.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetAgentSpaces"},"BatchGetArtifactMetadata":{"name":"BatchGetArtifactMetadata","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve one or more Artifact Metadata records for the given Agent Space","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetArtifactMetadata.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetArtifactMetadata"},"BatchGetCodeReviewJobTasks":{"name":"BatchGetCodeReviewJobTasks","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple code review job tasks in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetCodeReviewJobTasks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetCodeReviewJobTasks"},"BatchGetCodeReviewJobs":{"name":"BatchGetCodeReviewJobs","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple code review jobs in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetCodeReviewJobs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetCodeReviewJobs"},"BatchGetCodeReviews":{"name":"BatchGetCodeReviews","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple code reviews in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetCodeReviews.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetCodeReviews"},"BatchGetFindings":{"name":"BatchGetFindings","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple security testing findings in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetFindings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetFindings"},"BatchGetPentestJobContentMetadata":{"name":"BatchGetPentestJobContentMetadata","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple pentest job contents metadata in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetPentestJobContentMetadata.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetPentestJobContentMetadata"},"BatchGetPentestJobTasks":{"name":"BatchGetPentestJobTasks","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple pentest job tasks in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetPentestJobTasks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetPentestJobTasks"},"BatchGetPentestJobs":{"name":"BatchGetPentestJobs","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple security testing jobs in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetPentestJobs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetPentestJobs"},"BatchGetPentests":{"name":"BatchGetPentests","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple penetration tests in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetPentests.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetPentests"},"BatchGetSecurityRequirements":{"name":"BatchGetSecurityRequirements","service":"securityagent","conditionKeys":[],"resources":[{"name":"SecurityRequirementPack"}],"description":"Grants permission to retrieve multiple security requirements in a single request","accessLevel":"Read","resourceTypes":[{"name":"SecurityRequirementPack","required":true}],"dependentActions":["kms:Decrypt","kms:GenerateDataKeyWithoutPlaintext","kms:ReEncryptFrom","kms:ReEncryptTo"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetSecurityRequirements.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetSecurityRequirements"},"BatchGetTargetDomains":{"name":"BatchGetTargetDomains","service":"securityagent","conditionKeys":[],"resources":[{"name":"TargetDomain"}],"description":"Grants permission to retrieve multiple target domains in a single request","accessLevel":"Read","resourceTypes":[{"name":"TargetDomain","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetTargetDomains.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetTargetDomains"},"BatchGetThreatModelJobTasks":{"name":"BatchGetThreatModelJobTasks","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple tasks for a threat model job in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetThreatModelJobTasks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetThreatModelJobTasks"},"BatchGetThreatModelJobs":{"name":"BatchGetThreatModelJobs","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve details for one or more threat model jobs","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetThreatModelJobs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetThreatModelJobs"},"BatchGetThreatModels":{"name":"BatchGetThreatModels","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple threat models in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetThreatModels.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetThreatModels"},"BatchGetThreats":{"name":"BatchGetThreats","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve details for one or more threats","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetThreats.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetThreats"},"BatchUpdateSecurityRequirements":{"name":"BatchUpdateSecurityRequirements","service":"securityagent","conditionKeys":[],"resources":[{"name":"SecurityRequirementPack"}],"description":"Grants permission to batch update security requirements within a customer managed pack","accessLevel":"Write","resourceTypes":[{"name":"SecurityRequirementPack","required":true}],"dependentActions":["kms:Decrypt","kms:GenerateDataKeyWithoutPlaintext","kms:ReEncryptFrom","kms:ReEncryptTo"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchUpdateSecurityRequirements.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchUpdateSecurityRequirements"},"CreateAgentSpace":{"name":"CreateAgentSpace","service":"securityagent","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an agent space record","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt","kms:DescribeKey","kms:GenerateDataKeyWithoutPlaintext"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateAgentSpace.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateAgentSpace"},"CreateApplication":{"name":"CreateApplication","service":"securityagent","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new application","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole","kms:DescribeKey","sso:CreateApplication"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateApplication.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateApplication"},"CreateCodeReview":{"name":"CreateCodeReview","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to create a new code review configuration","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateCodeReview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateCodeReview"},"CreateDesignReview":{"name":"CreateDesignReview","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to create a design review","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateDesignReview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateDesignReview"},"CreateIntegration":{"name":"CreateIntegration","service":"securityagent","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a security testing integration","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateIntegration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateIntegration"},"CreateMembership":{"name":"CreateMembership","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to add a single member to a agent space with specified role","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateMembership.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateMembership"},"CreateOneTimeLoginSession":{"name":"CreateOneTimeLoginSession","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to create a one time login session","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateOneTimeLoginSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateOneTimeLoginSession"},"CreatePentest":{"name":"CreatePentest","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to create a new penetration test configuration","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreatePentest.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreatePentest"},"CreatePrivateConnection":{"name":"CreatePrivateConnection","service":"securityagent","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a private connection for VPC Lattice integration","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreatePrivateConnection.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreatePrivateConnection"},"CreateSecurityRequirement":{"name":"CreateSecurityRequirement","service":"securityagent","conditionKeys":[],"resources":[{"name":"SecurityRequirementPack"}],"description":"Grants permission to add a customer managed Security Requirement","accessLevel":"Write","resourceTypes":[{"name":"SecurityRequirementPack","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateSecurityRequirement.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateSecurityRequirement"},"CreateSecurityRequirementPack":{"name":"CreateSecurityRequirementPack","service":"securityagent","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a customer managed security requirement pack","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt","kms:DescribeKey","kms:GenerateDataKeyWithoutPlaintext","kms:ReEncryptFrom","kms:ReEncryptTo"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateSecurityRequirementPack.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateSecurityRequirementPack"},"CreateTargetDomain":{"name":"CreateTargetDomain","service":"securityagent","conditionKeys":[],"resources":[],"description":"Grants permission to create a target domain record","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateTargetDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateTargetDomain"},"CreateThreat":{"name":"CreateThreat","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to create a threat in a threat model","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateThreat.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateThreat"},"CreateThreatModel":{"name":"CreateThreatModel","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to create a new threat model configuration","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateThreatModel.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateThreatModel"},"DeleteAgentSpace":{"name":"DeleteAgentSpace","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to delete an agent space record","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DeleteAgentSpace.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DeleteAgentSpace"},"DeleteApplication":{"name":"DeleteApplication","service":"securityagent","conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to delete application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DeleteApplication.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DeleteApplication"},"DeleteArtifact":{"name":"DeleteArtifact","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to delete an Artifact","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DeleteArtifact.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DeleteArtifact"},"DeleteDesignReview":{"name":"DeleteDesignReview","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to delete a design review","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DeleteDesignReview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DeleteDesignReview"},"DeleteIntegration":{"name":"DeleteIntegration","service":"securityagent","conditionKeys":[],"resources":[{"name":"Integration"}],"description":"Grants permission to delete the integration of an application","accessLevel":"Write","resourceTypes":[{"name":"Integration","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DeleteIntegration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DeleteIntegration"},"DeleteMembership":{"name":"DeleteMembership","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to remove a single member associated to an agent space","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DeleteMembership.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DeleteMembership"},"DeletePrivateConnection":{"name":"DeletePrivateConnection","service":"securityagent","conditionKeys":[],"resources":[{"name":"PrivateConnection"}],"description":"Grants permission to delete a private connection","accessLevel":"Write","resourceTypes":[{"name":"PrivateConnection","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DeletePrivateConnection.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DeletePrivateConnection"},"DeleteSecurityRequirement":{"name":"DeleteSecurityRequirement","service":"securityagent","conditionKeys":[],"resources":[{"name":"SecurityRequirementPack"}],"description":"Grants permission to delete a customer managed Security Requirement","accessLevel":"Write","resourceTypes":[{"name":"SecurityRequirementPack","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DeleteSecurityRequirement.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DeleteSecurityRequirement"},"DeleteSecurityRequirementPack":{"name":"DeleteSecurityRequirementPack","service":"securityagent","conditionKeys":[],"resources":[{"name":"SecurityRequirementPack"}],"description":"Grants permission to delete a customer managed security requirement pack and all its associated security requirements","accessLevel":"Write","resourceTypes":[{"name":"SecurityRequirementPack","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DeleteSecurityRequirementPack.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DeleteSecurityRequirementPack"},"DeleteTargetDomain":{"name":"DeleteTargetDomain","service":"securityagent","conditionKeys":[],"resources":[{"name":"TargetDomain"}],"description":"Grants permission to delete a target domain record","accessLevel":"Write","resourceTypes":[{"name":"TargetDomain","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DeleteTargetDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DeleteTargetDomain"},"DescribePrivateConnection":{"name":"DescribePrivateConnection","service":"securityagent","conditionKeys":[],"resources":[{"name":"PrivateConnection"}],"description":"Grants permission to describe a private connection","accessLevel":"Read","resourceTypes":[{"name":"PrivateConnection","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DescribePrivateConnection.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DescribePrivateConnection"},"GetApplication":{"name":"GetApplication","service":"securityagent","conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to get application details by application ID","accessLevel":"Read","resourceTypes":[{"name":"Application","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_GetApplication.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-GetApplication"},"GetArtifact":{"name":"GetArtifact","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve an Artifact for the given Agent Space","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_GetArtifact.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-GetArtifact"},"GetDesignReview":{"name":"GetDesignReview","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to get the status of the associated agent space design review","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_GetDesignReview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-GetDesignReview"},"GetDesignReviewArtifact":{"name":"GetDesignReviewArtifact","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to get design review artifact for a specific document","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_GetDesignReviewArtifact.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-GetDesignReviewArtifact"},"GetDesignReviewFeedback":{"name":"GetDesignReviewFeedback","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to get feedback for a design review comment","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_GetDesignReviewFeedback.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-GetDesignReviewFeedback"},"GetIntegration":{"name":"GetIntegration","service":"securityagent","conditionKeys":[],"resources":[{"name":"Integration"}],"description":"Grants permission to get the integration metadata by ID","accessLevel":"Read","resourceTypes":[{"name":"Integration","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_GetIntegration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-GetIntegration"},"GetProviderRegistrationManifest":{"name":"GetProviderRegistrationManifest","service":"securityagent","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the provider registration manifest used for browser-based integration registration","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_GetProviderRegistrationManifest.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-GetProviderRegistrationManifest"},"GetSecurityRequirement":{"name":"GetSecurityRequirement","service":"securityagent","conditionKeys":[],"resources":[{"name":"SecurityRequirementPack"}],"description":"Grants permission to retrieve a Security Requirement","accessLevel":"Read","resourceTypes":[{"name":"SecurityRequirementPack","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_GetSecurityRequirement.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-GetSecurityRequirement"},"GetSecurityRequirementPack":{"name":"GetSecurityRequirementPack","service":"securityagent","conditionKeys":[],"resources":[{"name":"SecurityRequirementPack"}],"description":"Grants permission to retrieve a security requirement pack","accessLevel":"Read","resourceTypes":[{"name":"SecurityRequirementPack","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_GetSecurityRequirementPack.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-GetSecurityRequirementPack"},"HandleProviderRegistrationCallback":{"name":"HandleProviderRegistrationCallback","service":"securityagent","conditionKeys":[],"resources":[],"description":"Grants permission to handle the provider OAuth registration callback that completes integration setup","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_HandleProviderRegistrationCallback.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-HandleProviderRegistrationCallback"},"ImportSecurityRequirements":{"name":"ImportSecurityRequirements","service":"securityagent","conditionKeys":[],"resources":[{"name":"SecurityRequirementPack"}],"description":"Grants permission to import security requirements from uploaded documents for a customer managed security requirement pack","accessLevel":"Write","resourceTypes":[{"name":"SecurityRequirementPack","required":true}],"dependentActions":["kms:Decrypt","kms:GenerateDataKeyWithoutPlaintext","kms:ReEncryptFrom","kms:ReEncryptTo"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ImportSecurityRequirements.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ImportSecurityRequirements"},"InitiateProviderRegistration":{"name":"InitiateProviderRegistration","service":"securityagent","conditionKeys":[],"resources":[],"description":"Grants permission to initiate the registration of Security Agent App for the given provider (eg: GitHub)","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_InitiateProviderRegistration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-InitiateProviderRegistration"},"ListAgentSpaces":{"name":"ListAgentSpaces","service":"securityagent","conditionKeys":[],"resources":[],"description":"Grants permission to list agent spaces","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListAgentSpaces.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListAgentSpaces"},"ListApplications":{"name":"ListApplications","service":"securityagent","conditionKeys":[],"resources":[],"description":"Grants permission to list all applications in the account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListApplications.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListApplications"},"ListArtifacts":{"name":"ListArtifacts","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list all artifacts for the given agent space","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListArtifacts.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListArtifacts"},"ListCodeReviewJobTasks":{"name":"ListCodeReviewJobTasks","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list tasks associated with a code review job","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListCodeReviewJobTasks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListCodeReviewJobTasks"},"ListCodeReviewJobsForCodeReview":{"name":"ListCodeReviewJobsForCodeReview","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list code review jobs associated with a code review","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListCodeReviewJobsForCodeReview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListCodeReviewJobsForCodeReview"},"ListCodeReviews":{"name":"ListCodeReviews","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list code reviews with optional filtering by status","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListCodeReviews.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListCodeReviews"},"ListDesignReviewComments":{"name":"ListDesignReviewComments","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list design review comments","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListDesignReviewComments.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListDesignReviewComments"},"ListDesignReviews":{"name":"ListDesignReviews","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list all design reviews for the given agent space","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListDesignReviews.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListDesignReviews"},"ListDiscoveredEndpoints":{"name":"ListDiscoveredEndpoints","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list discovered endpoints associated with a pentest job with optional URI prefix filtering","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListDiscoveredEndpoints.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListDiscoveredEndpoints"},"ListFindings":{"name":"ListFindings","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list findings with filtering and pagination support","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListFindings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListFindings"},"ListIntegratedResources":{"name":"ListIntegratedResources","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list integrated resources for an agent space","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListIntegratedResources.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListIntegratedResources"},"ListIntegrations":{"name":"ListIntegrations","service":"securityagent","conditionKeys":[],"resources":[],"description":"Grants permission to get the integrations owned by the caller's AWS account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListIntegrations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListIntegrations"},"ListMemberships":{"name":"ListMemberships","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list all members associated to an agent space with pagination support","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListMemberships.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListMemberships"},"ListPentestJobTasks":{"name":"ListPentestJobTasks","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list pentest job tasks associated with a pentest job","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListPentestJobTasks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListPentestJobTasks"},"ListPentestJobsForPentest":{"name":"ListPentestJobsForPentest","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list penetration test jobs associated with a penetration test","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListPentestJobsForPentest.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListPentestJobsForPentest"},"ListPentests":{"name":"ListPentests","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list penetration tests with optional filtering by status","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListPentests.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListPentests"},"ListPrivateConnections":{"name":"ListPrivateConnections","service":"securityagent","conditionKeys":[],"resources":[],"description":"Grants permission to list private connections in the account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListPrivateConnections.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListPrivateConnections"},"ListResourcesFromIntegration":{"name":"ListResourcesFromIntegration","service":"securityagent","conditionKeys":[],"resources":[{"name":"Integration"}],"description":"Grants permission to list resources from Integration","accessLevel":"List","resourceTypes":[{"name":"Integration","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListResourcesFromIntegration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListResourcesFromIntegration"},"ListSecurityRequirementPacks":{"name":"ListSecurityRequirementPacks","service":"securityagent","conditionKeys":[],"resources":[],"description":"Grants permission to list all security requirement packs in the account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListSecurityRequirementPacks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListSecurityRequirementPacks"},"ListSecurityRequirements":{"name":"ListSecurityRequirements","service":"securityagent","conditionKeys":[],"resources":[{"name":"SecurityRequirementPack"}],"description":"Grants permission to list all Security Requirements","accessLevel":"List","resourceTypes":[{"name":"SecurityRequirementPack","required":true}],"dependentActions":["kms:Decrypt","kms:GenerateDataKeyWithoutPlaintext","kms:ReEncryptFrom","kms:ReEncryptTo"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListSecurityRequirements.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListSecurityRequirements"},"ListTagsForResource":{"name":"ListTagsForResource","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"},{"name":"Application"},{"name":"Integration"},{"name":"PrivateConnection"},{"name":"SecurityRequirementPack"},{"name":"TargetDomain"}],"description":"Grants permission to list the tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":false},{"name":"Application","required":false},{"name":"Integration","required":false},{"name":"PrivateConnection","required":false},{"name":"SecurityRequirementPack","required":false},{"name":"TargetDomain","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListTagsForResource"},"ListTargetDomains":{"name":"ListTargetDomains","service":"securityagent","conditionKeys":[],"resources":[],"description":"Grants permission to list target domains","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListTargetDomains.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListTargetDomains"},"ListThreatModelJobTasks":{"name":"ListThreatModelJobTasks","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list tasks associated with a specific threat model job","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListThreatModelJobTasks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListThreatModelJobTasks"},"ListThreatModelJobs":{"name":"ListThreatModelJobs","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list threat model jobs for a threat model","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListThreatModelJobs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListThreatModelJobs"},"ListThreatModels":{"name":"ListThreatModels","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list threat models for an agent space","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListThreatModels.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListThreatModels"},"ListThreats":{"name":"ListThreats","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list threats for a threat model job with filtering and pagination support","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListThreats.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListThreats"},"PutDesignReviewFeedback":{"name":"PutDesignReviewFeedback","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to submit feedback for a design review comment","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_PutDesignReviewFeedback.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-PutDesignReviewFeedback"},"StartCodeRemediation":{"name":"StartCodeRemediation","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to start code remediation for the findings","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt","kms:GenerateDataKey"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_StartCodeRemediation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-StartCodeRemediation"},"StartCodeReviewJob":{"name":"StartCodeReviewJob","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to initiate the execution of a code review","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt","kms:GenerateDataKey"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_StartCodeReviewJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-StartCodeReviewJob"},"StartPentestJob":{"name":"StartPentestJob","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to initiate the execution of a penetration test","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt","kms:GenerateDataKey"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_StartPentestJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-StartPentestJob"},"StartThreatModelJob":{"name":"StartThreatModelJob","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to initiate the execution of a threat model job","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt","kms:GenerateDataKey"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_StartThreatModelJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-StartThreatModelJob"},"StopCodeReviewJob":{"name":"StopCodeReviewJob","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to stop the execution of a running code review","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_StopCodeReviewJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-StopCodeReviewJob"},"StopPentestJob":{"name":"StopPentestJob","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to stop the execution of a running penetration test","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_StopPentestJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-StopPentestJob"},"StopThreatModelJob":{"name":"StopThreatModelJob","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to stop a running threat model job","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_StopThreatModelJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-StopThreatModelJob"},"TagResource":{"name":"TagResource","service":"securityagent","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"AgentSpace"},{"name":"Application"},{"name":"Integration"},{"name":"PrivateConnection"},{"name":"SecurityRequirementPack"},{"name":"TargetDomain"}],"description":"Grants permission to add tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"AgentSpace","required":false},{"name":"Application","required":false},{"name":"Integration","required":false},{"name":"PrivateConnection","required":false},{"name":"SecurityRequirementPack","required":false},{"name":"TargetDomain","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-TagResource"},"ToggleManagedSecurityRequirement":{"name":"ToggleManagedSecurityRequirement","service":"securityagent","conditionKeys":[],"resources":[{"name":"SecurityRequirementPack"}],"description":"Grants permission to toggle the status of a managed Security Requirement","accessLevel":"Write","resourceTypes":[{"name":"SecurityRequirementPack","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ToggleManagedSecurityRequirement.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ToggleManagedSecurityRequirement"},"UntagResource":{"name":"UntagResource","service":"securityagent","conditionKeys":["aws:TagKeys"],"resources":[{"name":"AgentSpace"},{"name":"Application"},{"name":"Integration"},{"name":"PrivateConnection"},{"name":"SecurityRequirementPack"},{"name":"TargetDomain"}],"description":"Grants permission to remove tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"AgentSpace","required":false},{"name":"Application","required":false},{"name":"Integration","required":false},{"name":"PrivateConnection","required":false},{"name":"SecurityRequirementPack","required":false},{"name":"TargetDomain","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UntagResource"},"UpdateAgentSpace":{"name":"UpdateAgentSpace","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to update an agent space record","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdateAgentSpace.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdateAgentSpace"},"UpdateApplication":{"name":"UpdateApplication","service":"securityagent","conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to update application configuration","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["iam:PassRole","kms:DescribeKey"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdateApplication.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdateApplication"},"UpdateCodeReview":{"name":"UpdateCodeReview","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to update an existing code review with new configuration or settings","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdateCodeReview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdateCodeReview"},"UpdateFinding":{"name":"UpdateFinding","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to update an existing security finding with new details or status","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdateFinding.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdateFinding"},"UpdateIntegratedResources":{"name":"UpdateIntegratedResources","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to update integrated resources for an agent space","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdateIntegratedResources.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdateIntegratedResources"},"UpdatePentest":{"name":"UpdatePentest","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to update an existing penetration test with new configuration or settings","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdatePentest.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdatePentest"},"UpdatePrivateConnectionCertificate":{"name":"UpdatePrivateConnectionCertificate","service":"securityagent","conditionKeys":[],"resources":[{"name":"PrivateConnection"}],"description":"Grants permission to update the certificate associated with a private connection","accessLevel":"Write","resourceTypes":[{"name":"PrivateConnection","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdatePrivateConnectionCertificate.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdatePrivateConnectionCertificate"},"UpdateSecurityRequirement":{"name":"UpdateSecurityRequirement","service":"securityagent","conditionKeys":[],"resources":[{"name":"SecurityRequirementPack"}],"description":"Grants permission to update a customer managed Security Requirement","accessLevel":"Write","resourceTypes":[{"name":"SecurityRequirementPack","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdateSecurityRequirement.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdateSecurityRequirement"},"UpdateSecurityRequirementPack":{"name":"UpdateSecurityRequirementPack","service":"securityagent","conditionKeys":[],"resources":[{"name":"SecurityRequirementPack"}],"description":"Grants permission to update a security requirement pack","accessLevel":"Write","resourceTypes":[{"name":"SecurityRequirementPack","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdateSecurityRequirementPack.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdateSecurityRequirementPack"},"UpdateTargetDomain":{"name":"UpdateTargetDomain","service":"securityagent","conditionKeys":[],"resources":[{"name":"TargetDomain"}],"description":"Grants permission to update a target domain record","accessLevel":"Write","resourceTypes":[{"name":"TargetDomain","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdateTargetDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdateTargetDomain"},"UpdateThreat":{"name":"UpdateThreat","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to update a threat","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdateThreat.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdateThreat"},"UpdateThreatModel":{"name":"UpdateThreatModel","service":"securityagent","conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to update an existing threat model with new configuration","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdateThreatModel.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdateThreatModel"},"VerifyTargetDomain":{"name":"VerifyTargetDomain","service":"securityagent","conditionKeys":[],"resources":[{"name":"TargetDomain"}],"description":"Grants permission to verify ownership for a registered target domain","accessLevel":"Write","resourceTypes":[{"name":"TargetDomain","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_VerifyTargetDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-VerifyTargetDomain"}},"resources":[{"service":"securityagent","name":"AgentSpace","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:agent-space/${AgentId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"securityagent","name":"Application","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:application/${ApplicationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"securityagent","name":"Integration","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:integration/${IntegrationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"securityagent","name":"PrivateConnection","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:private-connection/${PrivateConnectionName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"securityagent","name":"SecurityRequirementPack","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:security-requirement-pack/${SecurityRequirementPackId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"securityagent","name":"TargetDomain","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:target-domain/${TargetDomainId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"name":"aws:RequestTag/${TagKey}","types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"name":"aws:ResourceTag/${TagKey}","types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"name":"aws:TagKeys","types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html"}