aws-iam-language-server 0.0.7 → 0.0.9

package/src/data/servicereference/services/states.json

@@ -1 +1 @@
-{"name":"states","actions":{"CreateActivity":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"activity"}],"description":"Grants permission to create an activity","accessLevel":"Write","resourceTypes":[{"name":"activity","required":true}]},"CreateStateMachine":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"statemachine"}],"description":"Grants permission to create a state machine","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}],"dependentActions":["iam:PassRole","states:PublishStateMachineVersion"]},"CreateStateMachineAlias":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to create a state machine alias","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}]},"DeleteActivity":{"conditionKeys":[],"resources":[{"name":"activity"}],"description":"Grants permission to delete an activity","accessLevel":"Write","resourceTypes":[{"name":"activity","required":true}]},"DeleteStateMachine":{"conditionKeys":[],"resources":[{"name":"statemachine"}],"description":"Grants permission to delete a state machine","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}]},"DeleteStateMachineAlias":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to delete a state machine alias","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}]},"DeleteStateMachineVersion":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to delete a state machine version","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}]},"DescribeActivity":{"conditionKeys":[],"resources":[{"name":"activity"}],"description":"Grants permission to describe an activity","accessLevel":"Read","resourceTypes":[{"name":"activity","required":true}]},"DescribeExecution":{"conditionKeys":[],"resources":[{"name":"execution"},{"name":"express"}],"description":"Grants permission to describe an execution","accessLevel":"Read","resourceTypes":[{"name":"execution","required":true},{"name":"express","required":true}]},"DescribeMapRun":{"conditionKeys":[],"resources":[{"name":"maprun"}],"description":"Grants permission to describe a map run","accessLevel":"Read","resourceTypes":[{"name":"maprun","required":true}]},"DescribeStateMachine":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to describe a state machine","accessLevel":"Read","resourceTypes":[{"name":"statemachine","required":true}]},"DescribeStateMachineAlias":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to describe a state machine alias","accessLevel":"Read","resourceTypes":[{"name":"statemachine","required":true}]},"DescribeStateMachineForExecution":{"conditionKeys":[],"resources":[{"name":"execution"}],"description":"Grants permission to describe the state machine for an execution","accessLevel":"Read","resourceTypes":[{"name":"execution","required":true}]},"GetActivityTask":{"conditionKeys":[],"resources":[{"name":"activity"}],"description":"Grants permission to be used by workers to retrieve a task (with the specified activity ARN) which has been scheduled for execution by a running state machine","accessLevel":"Write","resourceTypes":[{"name":"activity","required":true}]},"GetExecutionHistory":{"conditionKeys":[],"resources":[{"name":"execution"}],"description":"Grants permission to return the history of the specified execution as a list of events","accessLevel":"Read","resourceTypes":[{"name":"execution","required":true}]},"InvokeHTTPEndpoint":{"conditionKeys":[],"resources":[],"description":"Grants permission to invoke the HTTP Task state","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"ListActivities":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the existing activities","accessLevel":"List","resourceTypes":[]},"ListExecutions":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"maprun"},{"name":"statemachine"}],"description":"Grants permission to list the executions of a state machine","accessLevel":"List","resourceTypes":[{"name":"maprun","required":true},{"name":"statemachine","required":true}]},"ListMapRuns":{"conditionKeys":[],"resources":[{"name":"execution"}],"description":"Grants permission to list the map runs of an execution","accessLevel":"List","resourceTypes":[{"name":"execution","required":true}]},"ListStateMachineAliases":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to list the aliases of a state machine","accessLevel":"List","resourceTypes":[{"name":"statemachine","required":true}]},"ListStateMachineVersions":{"conditionKeys":[],"resources":[{"name":"statemachine"}],"description":"Grants permission to list the versions of a state machine","accessLevel":"List","resourceTypes":[{"name":"statemachine","required":true}]},"ListStateMachines":{"conditionKeys":[],"resources":[],"description":"Grants permission to lists the existing state machines","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"activity"},{"name":"statemachine"}],"description":"Grants permission to list tags for an AWS Step Functions resource","accessLevel":"List","resourceTypes":[{"name":"activity","required":false},{"name":"statemachine","required":false}]},"PublishStateMachineVersion":{"conditionKeys":[],"resources":[{"name":"statemachine"}],"description":"Grants permission to publish a state machine version","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}]},"RedriveExecution":{"conditionKeys":[],"resources":[{"name":"execution"}],"description":"Grants permission to redrive an execution","accessLevel":"Write","resourceTypes":[{"name":"execution","required":true}]},"RevealSecrets":{"conditionKeys":[],"resources":[],"description":"Grants permission to reveal sensitive data from an execution","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"SendTaskFailure":{"conditionKeys":[],"resources":[],"description":"Grants permission to report that the task identified by the taskToken failed","accessLevel":"Write","resourceTypes":[]},"SendTaskHeartbeat":{"conditionKeys":[],"resources":[],"description":"Grants permission to report to the service that the task represented by the specified taskToken is still making progress","accessLevel":"Write","resourceTypes":[]},"SendTaskSuccess":{"conditionKeys":[],"resources":[],"description":"Grants permission to report that the task identified by the taskToken completed successfully","accessLevel":"Write","resourceTypes":[]},"StartExecution":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to start a state machine execution","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}]},"StartSyncExecution":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to start a Synchronous Express state machine execution","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}]},"StopExecution":{"conditionKeys":[],"resources":[{"name":"execution"}],"description":"Grants permission to stop an execution","accessLevel":"Write","resourceTypes":[{"name":"execution","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"activity"},{"name":"statemachine"}],"description":"Grants permission to tag an AWS Step Functions resource","accessLevel":"Tagging","resourceTypes":[{"name":"activity","required":false},{"name":"statemachine","required":false}]},"TestState":{"conditionKeys":[],"resources":[],"description":"Grants permission to test a state machine definition","accessLevel":"Write","resourceTypes":[],"dependentActions":["states:RevealSecrets"]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"activity"},{"name":"statemachine"}],"description":"Grants permission to remove a tag from an AWS Step Functions resource","accessLevel":"Tagging","resourceTypes":[{"name":"activity","required":false},{"name":"statemachine","required":false}]},"UpdateMapRun":{"conditionKeys":[],"resources":[{"name":"maprun"}],"description":"Grants permission to update a map run","accessLevel":"Write","resourceTypes":[{"name":"maprun","required":true}]},"UpdateStateMachine":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"statemachine"}],"description":"Grants permission to update a state machine","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}],"dependentActions":["iam:PassRole","states:PublishStateMachineVersion"]},"UpdateStateMachineAlias":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to update a state machine alias","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}]},"ValidateStateMachineDefinition":{"conditionKeys":[],"resources":[],"description":"Grants permission to validate a state machine definition","accessLevel":"Read","resourceTypes":[]}},"resources":[{"name":"activity","arnFormats":["arn:${Partition}:states:${Region}:${Account}:activity:${ActivityName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"execution","arnFormats":["arn:${Partition}:states:${Region}:${Account}:execution:${StateMachineName}:${ExecutionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"express","arnFormats":["arn:${Partition}:states:${Region}:${Account}:express:${StateMachineName}:${ExecutionId}:${ExpressId}"],"conditionKeys":[]},{"name":"labelled execution","arnFormats":["arn:${Partition}:states:${Region}:${Account}:execution:${StateMachineName}/${MapRunLabel}:${ExecutionId}"],"conditionKeys":[]},{"name":"labelled express","arnFormats":["arn:${Partition}:states:${Region}:${Account}:express:${StateMachineName}/${MapRunLabel}:${ExecutionId}:${ExpressId}"],"conditionKeys":[]},{"name":"maprun","arnFormats":["arn:${Partition}:states:${Region}:${Account}:mapRun:${StateMachineName}/${MapRunLabel}:${MapRunId}"],"conditionKeys":[]},{"name":"statemachine","arnFormats":["arn:${Partition}:states:${Region}:${Account}:stateMachine:${StateMachineName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"statemachinealias","arnFormats":["arn:${Partition}:states:${Region}:${Account}:stateMachine:${StateMachineName}:${StateMachineAliasName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"statemachineversion","arnFormats":["arn:${Partition}:states:${Region}:${Account}:stateMachine:${StateMachineName}:${StateMachineVersionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair that is allowed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair of a resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by a list of tag keys that are allowed in the request"},"states:HTTPEndpoint":{"types":["String"],"description":"Filters access by the endpoint that the HTTP Task state allows in the request"},"states:HTTPMethod":{"types":["String"],"description":"Filters access by the method that the HTTP Task state allows in the request"},"states:StateMachineQualifier":{"types":["ArrayOfString"],"description":"Filters access by the qualifier of a state machine ARN"}}}
+{"name":"states","actions":{"CreateActivity":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"activity"}],"description":"Grants permission to create an activity","accessLevel":"Write","resourceTypes":[{"name":"activity","required":true}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_CreateActivity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-CreateActivity"},"CreateStateMachine":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"statemachine"}],"description":"Grants permission to create a state machine","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}],"dependentActions":["iam:PassRole","states:PublishStateMachineVersion"],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_CreateStateMachine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-CreateStateMachine"},"CreateStateMachineAlias":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to create a state machine alias","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_CreateStateMachineAlias.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-CreateStateMachineAlias"},"DeleteActivity":{"conditionKeys":[],"resources":[{"name":"activity"}],"description":"Grants permission to delete an activity","accessLevel":"Write","resourceTypes":[{"name":"activity","required":true}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_DeleteActivity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-DeleteActivity"},"DeleteStateMachine":{"conditionKeys":[],"resources":[{"name":"statemachine"}],"description":"Grants permission to delete a state machine","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_DeleteStateMachine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-DeleteStateMachine"},"DeleteStateMachineAlias":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to delete a state machine alias","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_DeleteStateMachineAlias.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-DeleteStateMachineAlias"},"DeleteStateMachineVersion":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to delete a state machine version","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_DeleteStateMachineVersion.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-DeleteStateMachineVersion"},"DescribeActivity":{"conditionKeys":[],"resources":[{"name":"activity"}],"description":"Grants permission to describe an activity","accessLevel":"Read","resourceTypes":[{"name":"activity","required":true}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_DescribeActivity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-DescribeActivity"},"DescribeExecution":{"conditionKeys":[],"resources":[{"name":"execution"},{"name":"express"}],"description":"Grants permission to describe an execution","accessLevel":"Read","resourceTypes":[{"name":"execution","required":true},{"name":"express","required":true}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_DescribeExecution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-DescribeExecution"},"DescribeMapRun":{"conditionKeys":[],"resources":[{"name":"maprun"}],"description":"Grants permission to describe a map run","accessLevel":"Read","resourceTypes":[{"name":"maprun","required":true}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_DescribeMapRun.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-DescribeMapRun"},"DescribeStateMachine":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to describe a state machine","accessLevel":"Read","resourceTypes":[{"name":"statemachine","required":true}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_DescribeStateMachine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-DescribeStateMachine"},"DescribeStateMachineAlias":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to describe a state machine alias","accessLevel":"Read","resourceTypes":[{"name":"statemachine","required":true}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_DescribeStateMachineAlias.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-DescribeStateMachineAlias"},"DescribeStateMachineForExecution":{"conditionKeys":[],"resources":[{"name":"execution"}],"description":"Grants permission to describe the state machine for an execution","accessLevel":"Read","resourceTypes":[{"name":"execution","required":true}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_DescribeStateMachineForExecution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-DescribeStateMachineForExecution"},"GetActivityTask":{"conditionKeys":[],"resources":[{"name":"activity"}],"description":"Grants permission to be used by workers to retrieve a task (with the specified activity ARN) which has been scheduled for execution by a running state machine","accessLevel":"Write","resourceTypes":[{"name":"activity","required":true}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_GetActivityTask.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-GetActivityTask"},"GetExecutionHistory":{"conditionKeys":[],"resources":[{"name":"execution"}],"description":"Grants permission to return the history of the specified execution as a list of events","accessLevel":"Read","resourceTypes":[{"name":"execution","required":true}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_GetExecutionHistory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-GetExecutionHistory"},"InvokeHTTPEndpoint":{"conditionKeys":[],"resources":[],"description":"Grants permission to invoke the HTTP Task state","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/dg/connect-third-party-apis.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-InvokeHTTPEndpoint"},"ListActivities":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the existing activities","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_ListActivities.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-ListActivities"},"ListExecutions":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"maprun"},{"name":"statemachine"}],"description":"Grants permission to list the executions of a state machine","accessLevel":"List","resourceTypes":[{"name":"maprun","required":true},{"name":"statemachine","required":true}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_ListExecutions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-ListExecutions"},"ListMapRuns":{"conditionKeys":[],"resources":[{"name":"execution"}],"description":"Grants permission to list the map runs of an execution","accessLevel":"List","resourceTypes":[{"name":"execution","required":true}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_ListMapRuns.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-ListMapRuns"},"ListStateMachineAliases":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to list the aliases of a state machine","accessLevel":"List","resourceTypes":[{"name":"statemachine","required":true}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_ListStateMachineAliases.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-ListStateMachineAliases"},"ListStateMachineVersions":{"conditionKeys":[],"resources":[{"name":"statemachine"}],"description":"Grants permission to list the versions of a state machine","accessLevel":"List","resourceTypes":[{"name":"statemachine","required":true}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_ListStateMachineVersions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-ListStateMachineVersions"},"ListStateMachines":{"conditionKeys":[],"resources":[],"description":"Grants permission to lists the existing state machines","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_ListStateMachines.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-ListStateMachines"},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"activity"},{"name":"statemachine"}],"description":"Grants permission to list tags for an AWS Step Functions resource","accessLevel":"List","resourceTypes":[{"name":"activity","required":false},{"name":"statemachine","required":false}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-ListTagsForResource"},"PublishStateMachineVersion":{"conditionKeys":[],"resources":[{"name":"statemachine"}],"description":"Grants permission to publish a state machine version","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_PublishStateMachineVersion.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-PublishStateMachineVersion"},"RedriveExecution":{"conditionKeys":[],"resources":[{"name":"execution"}],"description":"Grants permission to redrive an execution","accessLevel":"Write","resourceTypes":[{"name":"execution","required":true}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_RedriveExecution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-RedriveExecution"},"RevealSecrets":{"conditionKeys":[],"resources":[],"description":"Grants permission to reveal sensitive data from an execution","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/dg/test-state-isolation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-RevealSecrets"},"SendTaskFailure":{"conditionKeys":[],"resources":[],"description":"Grants permission to report that the task identified by the taskToken failed","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_SendTaskFailure.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-SendTaskFailure"},"SendTaskHeartbeat":{"conditionKeys":[],"resources":[],"description":"Grants permission to report to the service that the task represented by the specified taskToken is still making progress","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_SendTaskHeartbeat.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-SendTaskHeartbeat"},"SendTaskSuccess":{"conditionKeys":[],"resources":[],"description":"Grants permission to report that the task identified by the taskToken completed successfully","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_SendTaskSuccess.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-SendTaskSuccess"},"StartExecution":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to start a state machine execution","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_StartExecution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-StartExecution"},"StartSyncExecution":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to start a Synchronous Express state machine execution","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_StartSyncExecution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-StartSyncExecution"},"StopExecution":{"conditionKeys":[],"resources":[{"name":"execution"}],"description":"Grants permission to stop an execution","accessLevel":"Write","resourceTypes":[{"name":"execution","required":true}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_StopExecution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-StopExecution"},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"activity"},{"name":"statemachine"}],"description":"Grants permission to tag an AWS Step Functions resource","accessLevel":"Tagging","resourceTypes":[{"name":"activity","required":false},{"name":"statemachine","required":false}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-TagResource"},"TestState":{"conditionKeys":[],"resources":[],"description":"Grants permission to test a state machine definition","accessLevel":"Write","resourceTypes":[],"dependentActions":["states:RevealSecrets"],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_TestState.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-TestState"},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"activity"},{"name":"statemachine"}],"description":"Grants permission to remove a tag from an AWS Step Functions resource","accessLevel":"Tagging","resourceTypes":[{"name":"activity","required":false},{"name":"statemachine","required":false}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-UntagResource"},"UpdateMapRun":{"conditionKeys":[],"resources":[{"name":"maprun"}],"description":"Grants permission to update a map run","accessLevel":"Write","resourceTypes":[{"name":"maprun","required":true}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_UpdateMapRun.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-UpdateMapRun"},"UpdateStateMachine":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"statemachine"}],"description":"Grants permission to update a state machine","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}],"dependentActions":["iam:PassRole","states:PublishStateMachineVersion"],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_UpdateStateMachine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-UpdateStateMachine"},"UpdateStateMachineAlias":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to update a state machine alias","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_UpdateStateMachineAlias.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-UpdateStateMachineAlias"},"ValidateStateMachineDefinition":{"conditionKeys":[],"resources":[],"description":"Grants permission to validate a state machine definition","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/step-functions/latest/apireference/API_ValidateStateMachineDefinition.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html#awsstepfunctions-ValidateStateMachineDefinition"}},"resources":[{"name":"activity","arnFormats":["arn:${Partition}:states:${Region}:${Account}:activity:${ActivityName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"execution","arnFormats":["arn:${Partition}:states:${Region}:${Account}:execution:${StateMachineName}:${ExecutionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"express","arnFormats":["arn:${Partition}:states:${Region}:${Account}:express:${StateMachineName}:${ExecutionId}:${ExpressId}"],"conditionKeys":[]},{"name":"labelled execution","arnFormats":["arn:${Partition}:states:${Region}:${Account}:execution:${StateMachineName}/${MapRunLabel}:${ExecutionId}"],"conditionKeys":[]},{"name":"labelled express","arnFormats":["arn:${Partition}:states:${Region}:${Account}:express:${StateMachineName}/${MapRunLabel}:${ExecutionId}:${ExpressId}"],"conditionKeys":[]},{"name":"maprun","arnFormats":["arn:${Partition}:states:${Region}:${Account}:mapRun:${StateMachineName}/${MapRunLabel}:${MapRunId}"],"conditionKeys":[]},{"name":"statemachine","arnFormats":["arn:${Partition}:states:${Region}:${Account}:stateMachine:${StateMachineName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"statemachinealias","arnFormats":["arn:${Partition}:states:${Region}:${Account}:stateMachine:${StateMachineName}:${StateMachineAliasName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"statemachineversion","arnFormats":["arn:${Partition}:states:${Region}:${Account}:stateMachine:${StateMachineName}:${StateMachineVersionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair that is allowed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair of a resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by a list of tag keys that are allowed in the request"},"states:HTTPEndpoint":{"types":["String"],"description":"Filters access by the endpoint that the HTTP Task state allows in the request"},"states:HTTPMethod":{"types":["String"],"description":"Filters access by the method that the HTTP Task state allows in the request"},"states:StateMachineQualifier":{"types":["ArrayOfString"],"description":"Filters access by the qualifier of a state machine ARN"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstepfunctions.html"}

package/src/data/servicereference/services/storagegateway.json

@@ -1 +1 @@
-{"name":"storagegateway","actions":{"ActivateGateway":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to activate the gateway you previously deployed on your host","accessLevel":"Write","resourceTypes":[]},"AddCache":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to configure one or more gateway local disks as cache for a cached-volume gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"AddTagsToResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"cache-report"},{"name":"fs-association"},{"name":"gateway"},{"name":"share"},{"name":"tape"},{"name":"tapepool"},{"name":"volume"}],"description":"Grants permission to add one or more tags to the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"cache-report","required":false},{"name":"fs-association","required":false},{"name":"gateway","required":false},{"name":"share","required":false},{"name":"tape","required":false},{"name":"tapepool","required":false},{"name":"volume","required":false}]},"AddUploadBuffer":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to configure one or more gateway local disks as upload buffer for a specified gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"AddWorkingStorage":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to configure one or more gateway local disks as working storage for a gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"AssignTapePool":{"conditionKeys":[],"resources":[{"name":"tape"},{"name":"tapepool"}],"description":"Grants permission to move a tape to the target pool specified","accessLevel":"Write","resourceTypes":[{"name":"tape","required":true},{"name":"tapepool","required":true}]},"AssociateFileSystem":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"gateway"}],"description":"Grants permission to associate an Amazon FSx file system with the Amazon FSx file gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"dependentActions":["ds:DescribeDirectories","ec2:DescribeNetworkInterfaces","fsx:DescribeFileSystems","iam:CreateServiceLinkedRole","logs:CreateLogDelivery","logs:GetLogDelivery","logs:ListLogDeliveries","logs:UpdateLogDelivery"]},"AttachVolume":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"volume"}],"description":"Grants permission to connect a volume to an iSCSI connection and then attaches the volume to the specified gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"volume","required":true}]},"BypassGovernanceRetention":{"conditionKeys":[],"resources":[{"name":"tapepool"}],"description":"Grants permission to allow the governance retention lock on a pool to be bypassed","accessLevel":"Write","resourceTypes":[{"name":"tapepool","required":true}]},"CancelArchival":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"tape"}],"description":"Grants permission to cancel archiving of a virtual tape to the virtual tape shelf (VTS) after the archiving process is initiated","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"tape","required":true}]},"CancelCacheReport":{"conditionKeys":[],"resources":[{"name":"cache-report"}],"description":"Grants permission to cancel a cache report","accessLevel":"Write","resourceTypes":[{"name":"cache-report","required":true}]},"CancelRetrieval":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"tape"}],"description":"Grants permission to cancel retrieval of a virtual tape from the virtual tape shelf (VTS) to a gateway after the retrieval process is initiated","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"tape","required":true}]},"CreateCachediSCSIVolume":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"gateway"},{"name":"volume"}],"description":"Grants permission to create a cached volume on a specified cached gateway. This operation is supported only for the gateway-cached volume architecture","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"volume","required":true}]},"CreateNFSFileShare":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"gateway"}],"description":"Grants permission to create a NFS file share on an existing file gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"CreateSMBFileShare":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"gateway"}],"description":"Grants permission to create a SMB file share on an existing file gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"CreateSnapshot":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"volume"}],"description":"Grants permission to initiate a snapshot of a volume","accessLevel":"Write","resourceTypes":[{"name":"volume","required":true}]},"CreateSnapshotFromVolumeRecoveryPoint":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"volume"}],"description":"Grants permission to initiate a snapshot of a gateway from a volume recovery point","accessLevel":"Write","resourceTypes":[{"name":"volume","required":true}]},"CreateStorediSCSIVolume":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"gateway"}],"description":"Grants permission to create a volume on a specified gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"CreateTapePool":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a tape pool","accessLevel":"Write","resourceTypes":[]},"CreateTapeWithBarcode":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"gateway"},{"name":"tapepool"}],"description":"Grants permission to create a virtual tape by using your own barcode","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"tapepool","required":true}]},"CreateTapes":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"gateway"},{"name":"tapepool"}],"description":"Grants permission to create one or more virtual tapes. You write data to the virtual tapes and then archive the tapes","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"tapepool","required":true}]},"DeleteAutomaticTapeCreationPolicy":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to delete the automatic tape creation policy configured on a gateway-VTL","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"DeleteBandwidthRateLimit":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to delete the bandwidth rate limits of a gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"DeleteCacheReport":{"conditionKeys":[],"resources":[{"name":"cache-report"}],"description":"Grants permission to delete the metadata associated with a cache report","accessLevel":"Write","resourceTypes":[{"name":"cache-report","required":true}]},"DeleteChapCredentials":{"conditionKeys":[],"resources":[{"name":"target"}],"description":"Grants permission to delete Challenge-Handshake Authentication Protocol (CHAP) credentials for a specified iSCSI target and initiator pair","accessLevel":"Write","resourceTypes":[{"name":"target","required":true}]},"DeleteFileShare":{"conditionKeys":[],"resources":[{"name":"share"}],"description":"Grants permission to delete a file share from a file gateway","accessLevel":"Write","resourceTypes":[{"name":"share","required":true}]},"DeleteGateway":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to delete a gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"DeleteSnapshotSchedule":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to delete a snapshot of a volume","accessLevel":"Write","resourceTypes":[{"name":"volume","required":true}]},"DeleteTape":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"tape"}],"description":"Grants permission to delete the specified virtual tape","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"tape","required":true}]},"DeleteTapeArchive":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the specified virtual tape from the virtual tape shelf (VTS)","accessLevel":"Write","resourceTypes":[]},"DeleteTapePool":{"conditionKeys":[],"resources":[{"name":"tapepool"}],"description":"Grants permission to delete the specified tape pool","accessLevel":"Write","resourceTypes":[{"name":"tapepool","required":true}]},"DeleteVolume":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to delete the specified gateway volume that you previously created using the CreateCachediSCSIVolume or CreateStorediSCSIVolume API","accessLevel":"Write","resourceTypes":[{"name":"volume","required":true}]},"DescribeAvailabilityMonitorTest":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get the information about the most recent high availability monitoring test that was performed on the gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}]},"DescribeBandwidthRateLimit":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get the bandwidth rate limits of a gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}]},"DescribeBandwidthRateLimitSchedule":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get the bandwidth rate limit schedule of a gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}]},"DescribeCache":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get information about the cache of a gateway. This operation is supported only for the gateway-cached volume architecture","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}]},"DescribeCacheReport":{"conditionKeys":[],"resources":[{"name":"cache-report"}],"description":"Grants permission to get a description of a cache report","accessLevel":"Read","resourceTypes":[{"name":"cache-report","required":true}]},"DescribeCachediSCSIVolumes":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to get a description of the gateway volumes specified in the request. This operation is supported only for the gateway-cached volume architecture","accessLevel":"Read","resourceTypes":[{"name":"volume","required":true}]},"DescribeChapCredentials":{"conditionKeys":[],"resources":[{"name":"target"}],"description":"Grants permission to get an array of Challenge-Handshake Authentication Protocol (CHAP) credentials information for a specified iSCSI target, one for each target-initiator pair","accessLevel":"Read","resourceTypes":[{"name":"target","required":true}]},"DescribeFileSystemAssociations":{"conditionKeys":[],"resources":[{"name":"fs-association"}],"description":"Grants permission to get a description for one or more file system associations","accessLevel":"Read","resourceTypes":[{"name":"fs-association","required":true}]},"DescribeGatewayInformation":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get metadata about a gateway such as its name, network interfaces, configured time zone, and the state (whether the gateway is running or not)","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}]},"DescribeMaintenanceStartTime":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get your gateway's weekly maintenance start time including the day and time of the week","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}]},"DescribeNFSFileShares":{"conditionKeys":[],"resources":[{"name":"share"}],"description":"Grants permission to get a description for one or more file shares from a file gateway","accessLevel":"Read","resourceTypes":[{"name":"share","required":true}]},"DescribeSMBFileShares":{"conditionKeys":[],"resources":[{"name":"share"}],"description":"Grants permission to get a description for one or more file shares from a file gateway","accessLevel":"Read","resourceTypes":[{"name":"share","required":true}]},"DescribeSMBSettings":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get a description of a Server Message Block (SMB) file share settings from a file gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}]},"DescribeSnapshotSchedule":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to describe the snapshot schedule for the specified gateway volume","accessLevel":"Read","resourceTypes":[{"name":"volume","required":true}]},"DescribeStorediSCSIVolumes":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to get the description of the gateway volumes specified in the request","accessLevel":"Read","resourceTypes":[{"name":"volume","required":true}]},"DescribeTapeArchives":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a description of specified virtual tapes in the virtual tape shelf (VTS)","accessLevel":"Read","resourceTypes":[]},"DescribeTapeRecoveryPoints":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get a list of virtual tape recovery points that are available for the specified gateway-VTL","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}]},"DescribeTapes":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get a description of the specified Amazon Resource Name (ARN) of virtual tapes","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}]},"DescribeUploadBuffer":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get information about the upload buffer of a gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}]},"DescribeVTLDevices":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get a description of virtual tape library (VTL) devices for the specified gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}]},"DescribeWorkingStorage":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get information about the working storage of a gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}]},"DetachVolume":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to disconnect a volume from an iSCSI connection and then detaches the volume from the specified gateway","accessLevel":"Write","resourceTypes":[{"name":"volume","required":true}]},"DisableGateway":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to disable a gateway when the gateway is no longer functioning","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"DisassociateFileSystem":{"conditionKeys":[],"resources":[{"name":"fs-association"}],"description":"Grants permission to disassociate an Amazon FSx file system from an Amazon FSx file gateway","accessLevel":"Write","resourceTypes":[{"name":"fs-association","required":true}]},"EvictFilesFailingUpload":{"conditionKeys":[],"resources":[{"name":"share"}],"description":"Grants permission to clean a share's cache of file entries that are failing upload to Amazon S3","accessLevel":"Write","resourceTypes":[{"name":"share","required":true}]},"JoinDomain":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to enable you to join an Active Directory Domain","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"ListAutomaticTapeCreationPolicies":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the automatic tape creation policies configured on the specified gateway-VTL or all gateway-VTLs owned by your AWS account","accessLevel":"List","resourceTypes":[]},"ListCacheReports":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of the cache reports owned by your AWS account","accessLevel":"List","resourceTypes":[]},"ListFileShares":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of the file shares for a specific file gateway, or the list of file shares owned by your AWS account","accessLevel":"List","resourceTypes":[]},"ListFileSystemAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of the file system associations for the specified gateway","accessLevel":"List","resourceTypes":[]},"ListGateways":{"conditionKeys":[],"resources":[],"description":"Grants permission to list gateways owned by an AWS account in a region specified in the request. The returned list is ordered by gateway Amazon Resource Name (ARN)","accessLevel":"List","resourceTypes":[]},"ListLocalDisks":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get a list of the gateway's local disks","accessLevel":"List","resourceTypes":[{"name":"gateway","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"share"},{"name":"tape"},{"name":"volume"}],"description":"Grants permission to get the tags that have been added to the specified resource","accessLevel":"List","resourceTypes":[{"name":"gateway","required":false},{"name":"share","required":false},{"name":"tape","required":false},{"name":"volume","required":false}]},"ListTapePools":{"conditionKeys":[],"resources":[],"description":"Grants permission to list tape pools owned by your AWS account","accessLevel":"List","resourceTypes":[]},"ListTapes":{"conditionKeys":[],"resources":[],"description":"Grants permission to list virtual tapes in your virtual tape library (VTL) and your virtual tape shelf (VTS)","accessLevel":"List","resourceTypes":[]},"ListVolumeInitiators":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to list iSCSI initiators that are connected to a volume","accessLevel":"List","resourceTypes":[{"name":"volume","required":true}]},"ListVolumeRecoveryPoints":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to list the recovery points for a specified gateway","accessLevel":"List","resourceTypes":[{"name":"gateway","required":true}]},"ListVolumes":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the iSCSI stored volumes of a gateway","accessLevel":"List","resourceTypes":[]},"NotifyWhenUploaded":{"conditionKeys":[],"resources":[{"name":"share"}],"description":"Grants permission to send you a notification through CloudWatch Events when all files written to your NFS file share have been uploaded to Amazon S3","accessLevel":"Write","resourceTypes":[{"name":"share","required":true}]},"RefreshCache":{"conditionKeys":[],"resources":[{"name":"share"}],"description":"Grants permission to refresh the cache for the specified file share","accessLevel":"Write","resourceTypes":[{"name":"share","required":true}]},"RemoveTagsFromResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"cache-report"},{"name":"fs-association"},{"name":"gateway"},{"name":"share"},{"name":"tape"},{"name":"tapepool"},{"name":"volume"}],"description":"Grants permission to remove one or more tags from the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"cache-report","required":false},{"name":"fs-association","required":false},{"name":"gateway","required":false},{"name":"share","required":false},{"name":"tape","required":false},{"name":"tapepool","required":false},{"name":"volume","required":false}]},"ResetCache":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to reset all cache disks that have encountered a error and makes the disks available for reconfiguration as cache storage","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"RetrieveTapeArchive":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"tape"}],"description":"Grants permission to retrieve an archived virtual tape from the virtual tape shelf (VTS) to a gateway-VTL","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"tape","required":true}]},"RetrieveTapeRecoveryPoint":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"tape"}],"description":"Grants permission to retrieve the recovery point for the specified virtual tape","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"tape","required":true}]},"SetLocalConsolePassword":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to set the password for your VM local console","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"SetSMBGuestPassword":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to set the password for SMB Guest user","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"ShutdownGateway":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to shut down a gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"StartAvailabilityMonitorTest":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to start a test that verifies that the specified gateway is configured for High Availability monitoring in your host environment","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"StartCacheReport":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"share"}],"description":"Grants permission to start a cache report for an existing file share","accessLevel":"Write","resourceTypes":[{"name":"share","required":true}]},"StartGateway":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to start a gateway that you previously shut down","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"UpdateAutomaticTapeCreationPolicy":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"tapepool"}],"description":"Grants permission to update the automatic tape creation policy configured on a gateway-VTL","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"tapepool","required":true}]},"UpdateBandwidthRateLimit":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update the bandwidth rate limits of a gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"UpdateBandwidthRateLimitSchedule":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update the bandwidth rate limit schedule of a gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"UpdateChapCredentials":{"conditionKeys":[],"resources":[{"name":"target"}],"description":"Grants permission to update the Challenge-Handshake Authentication Protocol (CHAP) credentials for a specified iSCSI target","accessLevel":"Write","resourceTypes":[{"name":"target","required":true}]},"UpdateFileSystemAssociation":{"conditionKeys":[],"resources":[{"name":"fs-association"}],"description":"Grants permission to update a file system association","accessLevel":"Write","resourceTypes":[{"name":"fs-association","required":true}],"dependentActions":["logs:CreateLogDelivery","logs:DeleteLogDelivery","logs:GetLogDelivery","logs:ListLogDeliveries","logs:UpdateLogDelivery"]},"UpdateGatewayInformation":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update a gateway's metadata, which includes the gateway's name and time zone","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"UpdateGatewaySoftwareNow":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update the gateway virtual machine (VM) software","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"UpdateMaintenanceStartTime":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update a gateway's weekly maintenance start time information, including day and time of the week. The maintenance time is the time in your gateway's time zone","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"UpdateNFSFileShare":{"conditionKeys":[],"resources":[{"name":"share"}],"description":"Grants permission to update a NFS file share","accessLevel":"Write","resourceTypes":[{"name":"share","required":true}]},"UpdateSMBFileShare":{"conditionKeys":[],"resources":[{"name":"share"}],"description":"Grants permission to update a SMB file share","accessLevel":"Write","resourceTypes":[{"name":"share","required":true}]},"UpdateSMBFileShareVisibility":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update whether the shares on a gateway are visible in a net view or browse list","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"UpdateSMBLocalGroups":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update the list of Active Directory users and groups that have special permissions for SMB file shares on the gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"UpdateSMBSecurityStrategy":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update the SMB security strategy on a file gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"UpdateSnapshotSchedule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"volume"}],"description":"Grants permission to update a snapshot schedule configured for a gateway volume","accessLevel":"Write","resourceTypes":[{"name":"volume","required":true}]},"UpdateVTLDeviceType":{"conditionKeys":[],"resources":[{"name":"device"}],"description":"Grants permission to update the type of medium changer in a gateway-VTL","accessLevel":"Write","resourceTypes":[{"name":"device","required":true}]}},"resources":[{"name":"cache-report","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:share/${ShareId}/cache-report/${CacheReportId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"device","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:gateway/${GatewayId}/device/${Vtldevice}"],"conditionKeys":[]},{"name":"fs-association","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:fs-association/${FsaId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"gateway","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:gateway/${GatewayId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"share","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:share/${ShareId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"tape","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:tape/${TapeBarcode}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"tapepool","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:tapepool/${PoolId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"target","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:gateway/${GatewayId}/target/${IscsiTarget}"],"conditionKeys":[]},{"name":"volume","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:gateway/${GatewayId}/volume/${VolumeId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the allowed set of values for each of the tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag-value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of mandatory tags in the request"}}}
+{"name":"storagegateway","actions":{"ActivateGateway":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to activate the gateway you previously deployed on your host","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_ActivateGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-ActivateGateway"},"AddCache":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to configure one or more gateway local disks as cache for a cached-volume gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_AddCache.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-AddCache"},"AddTagsToResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"cache-report"},{"name":"fs-association"},{"name":"gateway"},{"name":"share"},{"name":"tape"},{"name":"tapepool"},{"name":"volume"}],"description":"Grants permission to add one or more tags to the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"cache-report","required":false},{"name":"fs-association","required":false},{"name":"gateway","required":false},{"name":"share","required":false},{"name":"tape","required":false},{"name":"tapepool","required":false},{"name":"volume","required":false}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_AddTagsToResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-AddTagsToResource"},"AddUploadBuffer":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to configure one or more gateway local disks as upload buffer for a specified gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_AddUploadBuffer.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-AddUploadBuffer"},"AddWorkingStorage":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to configure one or more gateway local disks as working storage for a gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_AddWorkingStorage.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-AddWorkingStorage"},"AssignTapePool":{"conditionKeys":[],"resources":[{"name":"tape"},{"name":"tapepool"}],"description":"Grants permission to move a tape to the target pool specified","accessLevel":"Write","resourceTypes":[{"name":"tape","required":true},{"name":"tapepool","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_AssignTapePool.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-AssignTapePool"},"AssociateFileSystem":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"gateway"}],"description":"Grants permission to associate an Amazon FSx file system with the Amazon FSx file gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"dependentActions":["ds:DescribeDirectories","ec2:DescribeNetworkInterfaces","fsx:DescribeFileSystems","iam:CreateServiceLinkedRole","logs:CreateLogDelivery","logs:GetLogDelivery","logs:ListLogDeliveries","logs:UpdateLogDelivery"],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_AssociateFileSystem.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-AssociateFileSystem"},"AttachVolume":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"volume"}],"description":"Grants permission to connect a volume to an iSCSI connection and then attaches the volume to the specified gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"volume","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_AttachVolume.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-AttachVolume"},"BypassGovernanceRetention":{"conditionKeys":[],"resources":[{"name":"tapepool"}],"description":"Grants permission to allow the governance retention lock on a pool to be bypassed","accessLevel":"Write","resourceTypes":[{"name":"tapepool","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/userguide/CreatingCustomTapePool.html#TapeRetentionLock","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-BypassGovernanceRetention"},"CancelArchival":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"tape"}],"description":"Grants permission to cancel archiving of a virtual tape to the virtual tape shelf (VTS) after the archiving process is initiated","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"tape","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_CancelArchival.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-CancelArchival"},"CancelCacheReport":{"conditionKeys":[],"resources":[{"name":"cache-report"}],"description":"Grants permission to cancel a cache report","accessLevel":"Write","resourceTypes":[{"name":"cache-report","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_CancelCacheReport.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-CancelCacheReport"},"CancelRetrieval":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"tape"}],"description":"Grants permission to cancel retrieval of a virtual tape from the virtual tape shelf (VTS) to a gateway after the retrieval process is initiated","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"tape","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_CancelRetrieval.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-CancelRetrieval"},"CreateCachediSCSIVolume":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"gateway"},{"name":"volume"}],"description":"Grants permission to create a cached volume on a specified cached gateway. This operation is supported only for the gateway-cached volume architecture","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"volume","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_CreateCachediSCSIVolume.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-CreateCachediSCSIVolume"},"CreateNFSFileShare":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"gateway"}],"description":"Grants permission to create a NFS file share on an existing file gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_CreateNFSFileShare.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-CreateNFSFileShare"},"CreateSMBFileShare":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"gateway"}],"description":"Grants permission to create a SMB file share on an existing file gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_CreateSMBFileShare.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-CreateSMBFileShare"},"CreateSnapshot":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"volume"}],"description":"Grants permission to initiate a snapshot of a volume","accessLevel":"Write","resourceTypes":[{"name":"volume","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_CreateSnapshot.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-CreateSnapshot"},"CreateSnapshotFromVolumeRecoveryPoint":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"volume"}],"description":"Grants permission to initiate a snapshot of a gateway from a volume recovery point","accessLevel":"Write","resourceTypes":[{"name":"volume","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_CreateSnapshotFromVolumeRecoveryPoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-CreateSnapshotFromVolumeRecoveryPoint"},"CreateStorediSCSIVolume":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"gateway"}],"description":"Grants permission to create a volume on a specified gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_CreateStorediSCSIVolume.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-CreateStorediSCSIVolume"},"CreateTapePool":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a tape pool","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_CreateTapePool.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-CreateTapePool"},"CreateTapeWithBarcode":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"gateway"},{"name":"tapepool"}],"description":"Grants permission to create a virtual tape by using your own barcode","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"tapepool","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_CreateTapeWithBarcode.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-CreateTapeWithBarcode"},"CreateTapes":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"gateway"},{"name":"tapepool"}],"description":"Grants permission to create one or more virtual tapes. You write data to the virtual tapes and then archive the tapes","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"tapepool","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_CreateTapes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-CreateTapes"},"DeleteAutomaticTapeCreationPolicy":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to delete the automatic tape creation policy configured on a gateway-VTL","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DeleteAutomaticTapeCreationPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DeleteAutomaticTapeCreationPolicy"},"DeleteBandwidthRateLimit":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to delete the bandwidth rate limits of a gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DeleteBandwidthRateLimit.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DeleteBandwidthRateLimit"},"DeleteCacheReport":{"conditionKeys":[],"resources":[{"name":"cache-report"}],"description":"Grants permission to delete the metadata associated with a cache report","accessLevel":"Write","resourceTypes":[{"name":"cache-report","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DeleteCacheReport.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DeleteCacheReport"},"DeleteChapCredentials":{"conditionKeys":[],"resources":[{"name":"target"}],"description":"Grants permission to delete Challenge-Handshake Authentication Protocol (CHAP) credentials for a specified iSCSI target and initiator pair","accessLevel":"Write","resourceTypes":[{"name":"target","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DeleteChapCredentials.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DeleteChapCredentials"},"DeleteFileShare":{"conditionKeys":[],"resources":[{"name":"share"}],"description":"Grants permission to delete a file share from a file gateway","accessLevel":"Write","resourceTypes":[{"name":"share","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DeleteFileShare.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DeleteFileShare"},"DeleteGateway":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to delete a gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DeleteGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DeleteGateway"},"DeleteSnapshotSchedule":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to delete a snapshot of a volume","accessLevel":"Write","resourceTypes":[{"name":"volume","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DeleteSnapshotSchedule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DeleteSnapshotSchedule"},"DeleteTape":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"tape"}],"description":"Grants permission to delete the specified virtual tape","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"tape","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DeleteTape.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DeleteTape"},"DeleteTapeArchive":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the specified virtual tape from the virtual tape shelf (VTS)","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DeleteTapeArchive.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DeleteTapeArchive"},"DeleteTapePool":{"conditionKeys":[],"resources":[{"name":"tapepool"}],"description":"Grants permission to delete the specified tape pool","accessLevel":"Write","resourceTypes":[{"name":"tapepool","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DeleteTapePool.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DeleteTapePool"},"DeleteVolume":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to delete the specified gateway volume that you previously created using the CreateCachediSCSIVolume or CreateStorediSCSIVolume API","accessLevel":"Write","resourceTypes":[{"name":"volume","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DeleteVolume.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DeleteVolume"},"DescribeAvailabilityMonitorTest":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get the information about the most recent high availability monitoring test that was performed on the gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DescribeAvailabilityMonitorTest.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DescribeAvailabilityMonitorTest"},"DescribeBandwidthRateLimit":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get the bandwidth rate limits of a gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DescribeBandwidthRateLimit.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DescribeBandwidthRateLimit"},"DescribeBandwidthRateLimitSchedule":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get the bandwidth rate limit schedule of a gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DescribeBandwidthRateLimitSchedule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DescribeBandwidthRateLimitSchedule"},"DescribeCache":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get information about the cache of a gateway. This operation is supported only for the gateway-cached volume architecture","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DescribeCache.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DescribeCache"},"DescribeCacheReport":{"conditionKeys":[],"resources":[{"name":"cache-report"}],"description":"Grants permission to get a description of a cache report","accessLevel":"Read","resourceTypes":[{"name":"cache-report","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DescribeCacheReport.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DescribeCacheReport"},"DescribeCachediSCSIVolumes":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to get a description of the gateway volumes specified in the request. This operation is supported only for the gateway-cached volume architecture","accessLevel":"Read","resourceTypes":[{"name":"volume","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DescribeCachediSCSIVolumes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DescribeCachediSCSIVolumes"},"DescribeChapCredentials":{"conditionKeys":[],"resources":[{"name":"target"}],"description":"Grants permission to get an array of Challenge-Handshake Authentication Protocol (CHAP) credentials information for a specified iSCSI target, one for each target-initiator pair","accessLevel":"Read","resourceTypes":[{"name":"target","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DescribeChapCredentials.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DescribeChapCredentials"},"DescribeFileSystemAssociations":{"conditionKeys":[],"resources":[{"name":"fs-association"}],"description":"Grants permission to get a description for one or more file system associations","accessLevel":"Read","resourceTypes":[{"name":"fs-association","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DescribeFileSystemAssociations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DescribeFileSystemAssociations"},"DescribeGatewayInformation":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get metadata about a gateway such as its name, network interfaces, configured time zone, and the state (whether the gateway is running or not)","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DescribeGatewayInformation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DescribeGatewayInformation"},"DescribeMaintenanceStartTime":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get your gateway's weekly maintenance start time including the day and time of the week","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DescribeMaintenanceStartTime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DescribeMaintenanceStartTime"},"DescribeNFSFileShares":{"conditionKeys":[],"resources":[{"name":"share"}],"description":"Grants permission to get a description for one or more file shares from a file gateway","accessLevel":"Read","resourceTypes":[{"name":"share","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DescribeNFSFileShares.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DescribeNFSFileShares"},"DescribeSMBFileShares":{"conditionKeys":[],"resources":[{"name":"share"}],"description":"Grants permission to get a description for one or more file shares from a file gateway","accessLevel":"Read","resourceTypes":[{"name":"share","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DescribeSMBFileShares.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DescribeSMBFileShares"},"DescribeSMBSettings":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get a description of a Server Message Block (SMB) file share settings from a file gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DescribeSMBSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DescribeSMBSettings"},"DescribeSnapshotSchedule":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to describe the snapshot schedule for the specified gateway volume","accessLevel":"Read","resourceTypes":[{"name":"volume","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DescribeSnapshotSchedule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DescribeSnapshotSchedule"},"DescribeStorediSCSIVolumes":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to get the description of the gateway volumes specified in the request","accessLevel":"Read","resourceTypes":[{"name":"volume","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DescribeStorediSCSIVolumes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DescribeStorediSCSIVolumes"},"DescribeTapeArchives":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a description of specified virtual tapes in the virtual tape shelf (VTS)","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DescribeTapeArchives.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DescribeTapeArchives"},"DescribeTapeRecoveryPoints":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get a list of virtual tape recovery points that are available for the specified gateway-VTL","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DescribeTapeRecoveryPoints.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DescribeTapeRecoveryPoints"},"DescribeTapes":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get a description of the specified Amazon Resource Name (ARN) of virtual tapes","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DescribeTapes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DescribeTapes"},"DescribeUploadBuffer":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get information about the upload buffer of a gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DescribeUploadBuffer.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DescribeUploadBuffer"},"DescribeVTLDevices":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get a description of virtual tape library (VTL) devices for the specified gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DescribeVTLDevices.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DescribeVTLDevices"},"DescribeWorkingStorage":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get information about the working storage of a gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DescribeWorkingStorage.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DescribeWorkingStorage"},"DetachVolume":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to disconnect a volume from an iSCSI connection and then detaches the volume from the specified gateway","accessLevel":"Write","resourceTypes":[{"name":"volume","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DetachVolume.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DetachVolume"},"DisableGateway":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to disable a gateway when the gateway is no longer functioning","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DisableGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DisableGateway"},"DisassociateFileSystem":{"conditionKeys":[],"resources":[{"name":"fs-association"}],"description":"Grants permission to disassociate an Amazon FSx file system from an Amazon FSx file gateway","accessLevel":"Write","resourceTypes":[{"name":"fs-association","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_DisassociateFileSystem.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-DisassociateFileSystem"},"EvictFilesFailingUpload":{"conditionKeys":[],"resources":[{"name":"share"}],"description":"Grants permission to clean a share's cache of file entries that are failing upload to Amazon S3","accessLevel":"Write","resourceTypes":[{"name":"share","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_EvictFilesFailingUpload.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-EvictFilesFailingUpload"},"JoinDomain":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to enable you to join an Active Directory Domain","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_JoinDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-JoinDomain"},"ListAutomaticTapeCreationPolicies":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the automatic tape creation policies configured on the specified gateway-VTL or all gateway-VTLs owned by your AWS account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_ListAutomaticTapeCreationPolicies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-ListAutomaticTapeCreationPolicies"},"ListCacheReports":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of the cache reports owned by your AWS account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_ListCacheReports.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-ListCacheReports"},"ListFileShares":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of the file shares for a specific file gateway, or the list of file shares owned by your AWS account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_ListFileShares.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-ListFileShares"},"ListFileSystemAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of the file system associations for the specified gateway","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_ListFileSystemAssociations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-ListFileSystemAssociations"},"ListGateways":{"conditionKeys":[],"resources":[],"description":"Grants permission to list gateways owned by an AWS account in a region specified in the request. The returned list is ordered by gateway Amazon Resource Name (ARN)","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_ListGateways.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-ListGateways"},"ListLocalDisks":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get a list of the gateway's local disks","accessLevel":"List","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_ListLocalDisks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-ListLocalDisks"},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"share"},{"name":"tape"},{"name":"volume"}],"description":"Grants permission to get the tags that have been added to the specified resource","accessLevel":"List","resourceTypes":[{"name":"gateway","required":false},{"name":"share","required":false},{"name":"tape","required":false},{"name":"volume","required":false}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-ListTagsForResource"},"ListTapePools":{"conditionKeys":[],"resources":[],"description":"Grants permission to list tape pools owned by your AWS account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_ListTapePools.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-ListTapePools"},"ListTapes":{"conditionKeys":[],"resources":[],"description":"Grants permission to list virtual tapes in your virtual tape library (VTL) and your virtual tape shelf (VTS)","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_ListTapes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-ListTapes"},"ListVolumeInitiators":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to list iSCSI initiators that are connected to a volume","accessLevel":"List","resourceTypes":[{"name":"volume","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_ListVolumeInitiators.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-ListVolumeInitiators"},"ListVolumeRecoveryPoints":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to list the recovery points for a specified gateway","accessLevel":"List","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_ListVolumeRecoveryPoints.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-ListVolumeRecoveryPoints"},"ListVolumes":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the iSCSI stored volumes of a gateway","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_ListVolumes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-ListVolumes"},"NotifyWhenUploaded":{"conditionKeys":[],"resources":[{"name":"share"}],"description":"Grants permission to send you a notification through CloudWatch Events when all files written to your NFS file share have been uploaded to Amazon S3","accessLevel":"Write","resourceTypes":[{"name":"share","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_NotifyWhenUploaded.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-NotifyWhenUploaded"},"RefreshCache":{"conditionKeys":[],"resources":[{"name":"share"}],"description":"Grants permission to refresh the cache for the specified file share","accessLevel":"Write","resourceTypes":[{"name":"share","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_RefreshCache.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-RefreshCache"},"RemoveTagsFromResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"cache-report"},{"name":"fs-association"},{"name":"gateway"},{"name":"share"},{"name":"tape"},{"name":"tapepool"},{"name":"volume"}],"description":"Grants permission to remove one or more tags from the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"cache-report","required":false},{"name":"fs-association","required":false},{"name":"gateway","required":false},{"name":"share","required":false},{"name":"tape","required":false},{"name":"tapepool","required":false},{"name":"volume","required":false}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_RemoveTagsFromResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-RemoveTagsFromResource"},"ResetCache":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to reset all cache disks that have encountered a error and makes the disks available for reconfiguration as cache storage","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_ResetCache.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-ResetCache"},"RetrieveTapeArchive":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"tape"}],"description":"Grants permission to retrieve an archived virtual tape from the virtual tape shelf (VTS) to a gateway-VTL","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"tape","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_RetrieveTapeArchive.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-RetrieveTapeArchive"},"RetrieveTapeRecoveryPoint":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"tape"}],"description":"Grants permission to retrieve the recovery point for the specified virtual tape","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"tape","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_RetrieveTapeRecoveryPoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-RetrieveTapeRecoveryPoint"},"SetLocalConsolePassword":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to set the password for your VM local console","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_SetLocalConsolePassword.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-SetLocalConsolePassword"},"SetSMBGuestPassword":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to set the password for SMB Guest user","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_SetSMBGuestPassword.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-SetSMBGuestPassword"},"ShutdownGateway":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to shut down a gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_ShutdownGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-ShutdownGateway"},"StartAvailabilityMonitorTest":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to start a test that verifies that the specified gateway is configured for High Availability monitoring in your host environment","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_StartAvailabilityMonitorTest.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-StartAvailabilityMonitorTest"},"StartCacheReport":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"share"}],"description":"Grants permission to start a cache report for an existing file share","accessLevel":"Write","resourceTypes":[{"name":"share","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_StartCacheReport.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-StartCacheReport"},"StartGateway":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to start a gateway that you previously shut down","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_StartGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-StartGateway"},"UpdateAutomaticTapeCreationPolicy":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"tapepool"}],"description":"Grants permission to update the automatic tape creation policy configured on a gateway-VTL","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"tapepool","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_UpdateAutomaticTapeCreationPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-UpdateAutomaticTapeCreationPolicy"},"UpdateBandwidthRateLimit":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update the bandwidth rate limits of a gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_UpdateBandwidthRateLimit.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-UpdateBandwidthRateLimit"},"UpdateBandwidthRateLimitSchedule":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update the bandwidth rate limit schedule of a gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_UpdateBandwidthRateLimitSchedule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-UpdateBandwidthRateLimitSchedule"},"UpdateChapCredentials":{"conditionKeys":[],"resources":[{"name":"target"}],"description":"Grants permission to update the Challenge-Handshake Authentication Protocol (CHAP) credentials for a specified iSCSI target","accessLevel":"Write","resourceTypes":[{"name":"target","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_UpdateChapCredentials.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-UpdateChapCredentials"},"UpdateFileSystemAssociation":{"conditionKeys":[],"resources":[{"name":"fs-association"}],"description":"Grants permission to update a file system association","accessLevel":"Write","resourceTypes":[{"name":"fs-association","required":true}],"dependentActions":["logs:CreateLogDelivery","logs:DeleteLogDelivery","logs:GetLogDelivery","logs:ListLogDeliveries","logs:UpdateLogDelivery"],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_UpdateFileSystemAssociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-UpdateFileSystemAssociation"},"UpdateGatewayInformation":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update a gateway's metadata, which includes the gateway's name and time zone","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_UpdateGatewayInformation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-UpdateGatewayInformation"},"UpdateGatewaySoftwareNow":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update the gateway virtual machine (VM) software","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_UpdateGatewaySoftwareNow.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-UpdateGatewaySoftwareNow"},"UpdateMaintenanceStartTime":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update a gateway's weekly maintenance start time information, including day and time of the week. The maintenance time is the time in your gateway's time zone","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_UpdateMaintenanceStartTime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-UpdateMaintenanceStartTime"},"UpdateNFSFileShare":{"conditionKeys":[],"resources":[{"name":"share"}],"description":"Grants permission to update a NFS file share","accessLevel":"Write","resourceTypes":[{"name":"share","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_UpdateNFSFileShare.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-UpdateNFSFileShare"},"UpdateSMBFileShare":{"conditionKeys":[],"resources":[{"name":"share"}],"description":"Grants permission to update a SMB file share","accessLevel":"Write","resourceTypes":[{"name":"share","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_UpdateSMBFileShare.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-UpdateSMBFileShare"},"UpdateSMBFileShareVisibility":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update whether the shares on a gateway are visible in a net view or browse list","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_UpdateSMBFileShareVisibility.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-UpdateSMBFileShareVisibility"},"UpdateSMBLocalGroups":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update the list of Active Directory users and groups that have special permissions for SMB file shares on the gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_UpdateSMBLocalGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-UpdateSMBLocalGroups"},"UpdateSMBSecurityStrategy":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update the SMB security strategy on a file gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_UpdateSMBSecurityStrategy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-UpdateSMBSecurityStrategy"},"UpdateSnapshotSchedule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"volume"}],"description":"Grants permission to update a snapshot schedule configured for a gateway volume","accessLevel":"Write","resourceTypes":[{"name":"volume","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_UpdateSnapshotSchedule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-UpdateSnapshotSchedule"},"UpdateVTLDeviceType":{"conditionKeys":[],"resources":[{"name":"device"}],"description":"Grants permission to update the type of medium changer in a gateway-VTL","accessLevel":"Write","resourceTypes":[{"name":"device","required":true}],"operationUrl":"https://docs.aws.amazon.com/storagegateway/latest/APIReference/API_UpdateVTLDeviceType.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html#awsstoragegateway-UpdateVTLDeviceType"}},"resources":[{"name":"cache-report","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:share/${ShareId}/cache-report/${CacheReportId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"device","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:gateway/${GatewayId}/device/${Vtldevice}"],"conditionKeys":[]},{"name":"fs-association","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:fs-association/${FsaId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"gateway","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:gateway/${GatewayId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"share","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:share/${ShareId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"tape","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:tape/${TapeBarcode}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"tapepool","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:tapepool/${PoolId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"target","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:gateway/${GatewayId}/target/${IscsiTarget}"],"conditionKeys":[]},{"name":"volume","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:gateway/${GatewayId}/volume/${VolumeId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the allowed set of values for each of the tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag-value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of mandatory tags in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsstoragegateway.html"}

package/src/data/servicereference/services/sts.json

@@ -1 +1 @@
-{"name":"sts","actions":{"AssumeRole":{"conditionKeys":["accounts.google.com:aud","accounts.google.com:sub","aws:RequestTag/${TagKey}","aws:TagKeys","cognito-identity.amazonaws.com:amr","cognito-identity.amazonaws.com:aud","cognito-identity.amazonaws.com:sub","graph.facebook.com:app_id","graph.facebook.com:id","iam:ResourceTag/${TagKey}","saml:namequalifier","saml:sub","saml:sub_type","sts:ExternalId","sts:RoleSessionName","sts:SourceIdentity","sts:TransitiveTagKeys","www.amazon.com:app_id","www.amazon.com:user_id"],"resources":[{"name":"role"}],"description":"Grants permission to obtain a set of temporary security credentials that you can use to access AWS resources that you might not normally have access to","accessLevel":"Write","resourceTypes":[{"name":"role","required":true}]},"AssumeRoleWithSAML":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","saml:aud","saml:cn","saml:commonName","saml:doc","saml:eduorghomepageuri","saml:eduorgidentityauthnpolicyuri","saml:eduorglegalname","saml:eduorgsuperioruri","saml:eduorgwhitepagesuri","saml:edupersonaffiliation","saml:edupersonassurance","saml:edupersonentitlement","saml:edupersonnickname","saml:edupersonorgdn","saml:edupersonorgunitdn","saml:edupersonprimaryaffiliation","saml:edupersonprimaryorgunitdn","saml:edupersonprincipalname","saml:edupersonscopedaffiliation","saml:edupersontargetedid","saml:givenName","saml:iss","saml:mail","saml:name","saml:namequalifier","saml:organizationStatus","saml:primaryGroupSID","saml:sub","saml:sub_type","saml:surname","saml:uid","saml:x500UniqueIdentifier","sts:RoleSessionName","sts:SourceIdentity","sts:TransitiveTagKeys"],"resources":[{"name":"role"}],"description":"Grants permission to obtain a set of temporary security credentials for users who have been authenticated via a SAML authentication response","accessLevel":"Write","resourceTypes":[{"name":"role","required":true}]},"AssumeRoleWithWebIdentity":{"conditionKeys":["accounts.google.com:aud","accounts.google.com:oaud","accounts.google.com:sub","aws:RequestTag/${TagKey}","aws:TagKeys","cognito-identity.amazonaws.com:amr","cognito-identity.amazonaws.com:aud","cognito-identity.amazonaws.com:sub","graph.facebook.com:app_id","graph.facebook.com:id","sts:RoleSessionName","sts:SourceIdentity","sts:TransitiveTagKeys","www.amazon.com:app_id","www.amazon.com:user_id"],"resources":[{"name":"role"}],"description":"Grants permission to obtain a set of temporary security credentials for users who have been authenticated in a mobile or web application with a web identity provider","accessLevel":"Write","resourceTypes":[{"name":"role","required":true}]},"AssumeRoot":{"conditionKeys":["sts:TaskPolicyArn"],"resources":[{"name":"root-user"}],"description":"Grants permission to obtain a set of temporary security credentials that you can use to perform privileged tasks in member accounts in your organization","accessLevel":"Write","resourceTypes":[{"name":"root-user","required":true}]},"DecodeAuthorizationMessage":{"conditionKeys":[],"resources":[],"description":"Grants permission to decode additional information about the authorization status of a request from an encoded message returned in response to an AWS request","accessLevel":"Write","resourceTypes":[]},"GetAccessKeyInfo":{"conditionKeys":[],"resources":[],"description":"Grants permission to obtain details about the access key id passed as a parameter to the request","accessLevel":"Read","resourceTypes":[]},"GetCallerIdentity":{"conditionKeys":[],"resources":[],"description":"Grants permission to obtain details about the IAM identity whose credentials are used to call the API","accessLevel":"Read","resourceTypes":[]},"GetDelegatedAccessToken":{"conditionKeys":[],"resources":[],"description":"Returns temporary security credentials for accessing an AWS account after temporary delegation request approval. This API requires the tradeInToken provided upon request delegation approval and is intended to be used only by Amazon or AWS Partners","accessLevel":"Write","resourceTypes":[]},"GetFederationToken":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"federated-user"},{"name":"user"}],"description":"Grants permission to obtain a set of temporary security credentials (consisting of an access key ID, a secret access key, and a security token) for a federated user","accessLevel":"Read","resourceTypes":[{"name":"federated-user","required":false},{"name":"user","required":false}]},"GetServiceBearerToken":{"conditionKeys":["sts:AWSServiceName","sts:DurationSeconds"],"resources":[],"description":"Grants permission to obtain a STS bearer token for an AWS root user, IAM role, or an IAM user","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetSessionToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to obtain a set of temporary security credentials (consisting of an access key ID, a secret access key, and a security token) for an AWS account or IAM user","accessLevel":"Read","resourceTypes":[]},"GetWebIdentityToken":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","sts:DurationSeconds","sts:IdentityTokenAudience","sts:SigningAlgorithm"],"resources":[],"description":"Grants permission to obtain a short-lived, publicly verifiable JSON Web Token (JWT) that represents the calling IAM principal's identity","accessLevel":"Write","resourceTypes":[]},"SetContext":{"conditionKeys":["sts:RequestContext/${ContextKey}","sts:RequestContextProviders"],"resources":[{"name":"role"},{"name":"self-session"}],"description":"Grants permission to set context keys on a STS session","accessLevel":"Write","resourceTypes":[{"name":"role","required":false},{"name":"self-session","required":false}],"permissionOnly":true},"SetSourceIdentity":{"conditionKeys":["sts:SourceIdentity"],"resources":[{"name":"role"},{"name":"user"}],"description":"Grants permission to set a source identity on a STS session","accessLevel":"Write","resourceTypes":[{"name":"role","required":false},{"name":"user","required":false}],"permissionOnly":true},"TagGetWebIdentityToken":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to add tags to the JSON Web Token (JWT) generated by the GetWebIdentityToken API","accessLevel":"Tagging","resourceTypes":[],"permissionOnly":true},"TagSession":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","saml:aud","sts:TransitiveTagKeys"],"resources":[{"name":"role"},{"name":"user"}],"description":"Grants permission to add tags to a STS session","accessLevel":"Tagging","resourceTypes":[{"name":"role","required":false},{"name":"user","required":false}],"permissionOnly":true}},"resources":[{"name":"context-provider","arnFormats":["arn:${Partition}:iam::aws:contextProvider/${ContextProviderName}"],"conditionKeys":[]},{"name":"federated-user","arnFormats":["arn:${Partition}:sts::${Account}:federated-user/${FederatedUserName}"],"conditionKeys":[]},{"name":"role","arnFormats":["arn:${Partition}:iam::${Account}:role/${RoleNameWithPath}"],"conditionKeys":["aws:ResourceTag/${TagKey}","iam:ResourceTag/${TagKey}"]},{"name":"root-user","arnFormats":["arn:${Partition}:iam::${Account}:root"],"conditionKeys":[]},{"name":"self-session","arnFormats":["arn:${Partition}:sts::${Account}:self"],"conditionKeys":[]},{"name":"user","arnFormats":["arn:${Partition}:iam::${Account}:user/${UserNameWithPath}"],"conditionKeys":[]}],"conditionKeys":{"accounts.google.com:aud":{"types":["String"],"description":"Filters access by the Google application ID"},"accounts.google.com:oaud":{"types":["String"],"description":"Filters access by the Google audience"},"accounts.google.com:sub":{"types":["String"],"description":"Filters access by the subject of the claim (the Google user ID)"},"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"cognito-identity.amazonaws.com:amr":{"types":["String"],"description":"Filters access by the login information for Amazon Cognito"},"cognito-identity.amazonaws.com:aud":{"types":["String"],"description":"Filters access by the Amazon Cognito identity pool ID"},"cognito-identity.amazonaws.com:sub":{"types":["String"],"description":"Filters access by the subject of the claim (the Amazon Cognito user ID)"},"graph.facebook.com:app_id":{"types":["String"],"description":"Filters access by the Facebook application ID"},"graph.facebook.com:id":{"types":["String"],"description":"Filters access by the Facebook user ID"},"iam:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are attached to the role that is being assumed"},"saml:aud":{"types":["String"],"description":"Filters access by the endpoint URL to which SAML assertions are presented"},"saml:cn":{"types":["ArrayOfString"],"description":"Filters access by the eduOrg attribute"},"saml:commonName":{"types":["String"],"description":"Filters access by the commonName attribute"},"saml:doc":{"types":["String"],"description":"Filters access by on the principal that was used to assume the role"},"saml:eduorghomepageuri":{"types":["ArrayOfString"],"description":"Filters access by the eduOrg attribute"},"saml:eduorgidentityauthnpolicyuri":{"types":["ArrayOfString"],"description":"Filters access by the eduOrg attribute"},"saml:eduorglegalname":{"types":["ArrayOfString"],"description":"Filters access by the eduOrg attribute"},"saml:eduorgsuperioruri":{"types":["ArrayOfString"],"description":"Filters access by the eduOrg attribute"},"saml:eduorgwhitepagesuri":{"types":["ArrayOfString"],"description":"Filters access by the eduOrg attribute"},"saml:edupersonaffiliation":{"types":["ArrayOfString"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonassurance":{"types":["ArrayOfString"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonentitlement":{"types":["ArrayOfString"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonnickname":{"types":["ArrayOfString"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonorgdn":{"types":["String"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonorgunitdn":{"types":["ArrayOfString"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonprimaryaffiliation":{"types":["String"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonprimaryorgunitdn":{"types":["String"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonprincipalname":{"types":["String"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonscopedaffiliation":{"types":["ArrayOfString"],"description":"Filters access by the eduPerson attribute"},"saml:edupersontargetedid":{"types":["ArrayOfString"],"description":"Filters access by the eduPerson attribute"},"saml:givenName":{"types":["String"],"description":"Filters access by the givenName attribute"},"saml:iss":{"types":["String"],"description":"Filters access by on the issuer, which is represented by a URN"},"saml:mail":{"types":["String"],"description":"Filters access by the mail attribute"},"saml:name":{"types":["String"],"description":"Filters access by the name attribute"},"saml:namequalifier":{"types":["String"],"description":"Filters access by the hash value of the issuer, account ID, and friendly name"},"saml:organizationStatus":{"types":["String"],"description":"Filters access by the organizationStatus attribute"},"saml:primaryGroupSID":{"types":["String"],"description":"Filters access by the primaryGroupSID attribute"},"saml:sub":{"types":["String"],"description":"Filters access by the subject of the claim (the SAML user ID)"},"saml:sub_type":{"types":["String"],"description":"Filters access by the value persistent, transient, or the full Format URI"},"saml:surname":{"types":["String"],"description":"Filters access by the surname attribute"},"saml:uid":{"types":["String"],"description":"Filters access by the uid attribute"},"saml:x500UniqueIdentifier":{"types":["String"],"description":"Filters access by the uid attribute"},"sts:AWSServiceName":{"types":["String"],"description":"Filters access by the service that is obtaining a bearer token"},"sts:DurationSeconds":{"types":["Numeric"],"description":"Filters access by the duration in seconds when getting a bearer token or a JSON Web Token (JWT) from the GetWebIdentityToken API"},"sts:ExternalId":{"types":["String"],"description":"Filters access by the unique identifier required when you assume a role in another account"},"sts:IdentityTokenAudience":{"types":["ArrayOfString"],"description":"Filters access by the audience that is passed in the request"},"sts:RequestContext/${ContextKey}":{"types":["String"],"description":"Filters access by the session context key-value pairs embedded in the signed context assertion retrieved from a trusted context provider"},"sts:RequestContextProviders":{"types":["ArrayOfARN"],"description":"Filters access by the context provider ARNs"},"sts:RoleSessionName":{"types":["String"],"description":"Filters access by the role session name required when you assume a role"},"sts:SigningAlgorithm":{"types":["String"],"description":"Filters access by the signing algorithm that is passed in the request"},"sts:SourceIdentity":{"types":["String"],"description":"Filters access by the source identity that is passed in the request"},"sts:TaskPolicyArn":{"types":["String"],"description":"Filters access by TaskPolicyARN"},"sts:TransitiveTagKeys":{"types":["ArrayOfString"],"description":"Filters access by the transitive tag keys that are passed in the request"},"www.amazon.com:app_id":{"types":["String"],"description":"Filters access by the Login with Amazon application ID"},"www.amazon.com:user_id":{"types":["String"],"description":"Filters access by the Login with Amazon user ID"}}}
+{"name":"sts","actions":{"AssumeRole":{"conditionKeys":["accounts.google.com:aud","accounts.google.com:sub","aws:RequestTag/${TagKey}","aws:TagKeys","cognito-identity.amazonaws.com:amr","cognito-identity.amazonaws.com:aud","cognito-identity.amazonaws.com:sub","graph.facebook.com:app_id","graph.facebook.com:id","iam:ResourceTag/${TagKey}","saml:namequalifier","saml:sub","saml:sub_type","sts:ExternalId","sts:RoleSessionName","sts:SourceIdentity","sts:TransitiveTagKeys","www.amazon.com:app_id","www.amazon.com:user_id"],"resources":[{"name":"role"}],"description":"Grants permission to obtain a set of temporary security credentials that you can use to access AWS resources that you might not normally have access to","accessLevel":"Write","resourceTypes":[{"name":"role","required":true}],"operationUrl":"https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecuritytokenservice.html#awssecuritytokenservice-AssumeRole"},"AssumeRoleWithSAML":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","saml:aud","saml:cn","saml:commonName","saml:doc","saml:eduorghomepageuri","saml:eduorgidentityauthnpolicyuri","saml:eduorglegalname","saml:eduorgsuperioruri","saml:eduorgwhitepagesuri","saml:edupersonaffiliation","saml:edupersonassurance","saml:edupersonentitlement","saml:edupersonnickname","saml:edupersonorgdn","saml:edupersonorgunitdn","saml:edupersonprimaryaffiliation","saml:edupersonprimaryorgunitdn","saml:edupersonprincipalname","saml:edupersonscopedaffiliation","saml:edupersontargetedid","saml:givenName","saml:iss","saml:mail","saml:name","saml:namequalifier","saml:organizationStatus","saml:primaryGroupSID","saml:sub","saml:sub_type","saml:surname","saml:uid","saml:x500UniqueIdentifier","sts:RoleSessionName","sts:SourceIdentity","sts:TransitiveTagKeys"],"resources":[{"name":"role"}],"description":"Grants permission to obtain a set of temporary security credentials for users who have been authenticated via a SAML authentication response","accessLevel":"Write","resourceTypes":[{"name":"role","required":true}],"operationUrl":"https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoleWithSAML.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecuritytokenservice.html#awssecuritytokenservice-AssumeRoleWithSAML"},"AssumeRoleWithWebIdentity":{"conditionKeys":["accounts.google.com:aud","accounts.google.com:oaud","accounts.google.com:sub","aws:RequestTag/${TagKey}","aws:TagKeys","cognito-identity.amazonaws.com:amr","cognito-identity.amazonaws.com:aud","cognito-identity.amazonaws.com:sub","graph.facebook.com:app_id","graph.facebook.com:id","sts:RoleSessionName","sts:SourceIdentity","sts:TransitiveTagKeys","www.amazon.com:app_id","www.amazon.com:user_id"],"resources":[{"name":"role"}],"description":"Grants permission to obtain a set of temporary security credentials for users who have been authenticated in a mobile or web application with a web identity provider","accessLevel":"Write","resourceTypes":[{"name":"role","required":true}],"operationUrl":"https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoleWithWebIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecuritytokenservice.html#awssecuritytokenservice-AssumeRoleWithWebIdentity"},"AssumeRoot":{"conditionKeys":["sts:TaskPolicyArn"],"resources":[{"name":"root-user"}],"description":"Grants permission to obtain a set of temporary security credentials that you can use to perform privileged tasks in member accounts in your organization","accessLevel":"Write","resourceTypes":[{"name":"root-user","required":true}],"operationUrl":"https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoot.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecuritytokenservice.html#awssecuritytokenservice-AssumeRoot"},"DecodeAuthorizationMessage":{"conditionKeys":[],"resources":[],"description":"Grants permission to decode additional information about the authorization status of a request from an encoded message returned in response to an AWS request","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/STS/latest/APIReference/API_DecodeAuthorizationMessage.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecuritytokenservice.html#awssecuritytokenservice-DecodeAuthorizationMessage"},"GetAccessKeyInfo":{"conditionKeys":[],"resources":[],"description":"Grants permission to obtain details about the access key id passed as a parameter to the request","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/STS/latest/APIReference/API_GetAccessKeyInfo.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecuritytokenservice.html#awssecuritytokenservice-GetAccessKeyInfo"},"GetCallerIdentity":{"conditionKeys":[],"resources":[],"description":"Grants permission to obtain details about the IAM identity whose credentials are used to call the API","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/STS/latest/APIReference/API_GetCallerIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecuritytokenservice.html#awssecuritytokenservice-GetCallerIdentity"},"GetDelegatedAccessToken":{"conditionKeys":[],"resources":[],"description":"Returns temporary security credentials for accessing an AWS account after temporary delegation request approval. This API requires the tradeInToken provided upon request delegation approval and is intended to be used only by Amazon or AWS Partners","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/STS/latest/APIReference/API_GetDelegatedAccessToken.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecuritytokenservice.html#awssecuritytokenservice-GetDelegatedAccessToken"},"GetFederationToken":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"federated-user"},{"name":"user"}],"description":"Grants permission to obtain a set of temporary security credentials (consisting of an access key ID, a secret access key, and a security token) for a federated user","accessLevel":"Read","resourceTypes":[{"name":"federated-user","required":false},{"name":"user","required":false}],"operationUrl":"https://docs.aws.amazon.com/STS/latest/APIReference/API_GetFederationToken.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecuritytokenservice.html#awssecuritytokenservice-GetFederationToken"},"GetServiceBearerToken":{"conditionKeys":["sts:AWSServiceName","sts:DurationSeconds"],"resources":[],"description":"Grants permission to obtain a STS bearer token for an AWS root user, IAM role, or an IAM user","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_bearer.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecuritytokenservice.html#awssecuritytokenservice-GetServiceBearerToken"},"GetSessionToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to obtain a set of temporary security credentials (consisting of an access key ID, a secret access key, and a security token) for an AWS account or IAM user","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/STS/latest/APIReference/API_GetSessionToken.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecuritytokenservice.html#awssecuritytokenservice-GetSessionToken"},"GetWebIdentityToken":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","sts:DurationSeconds","sts:IdentityTokenAudience","sts:SigningAlgorithm"],"resources":[],"description":"Grants permission to obtain a short-lived, publicly verifiable JSON Web Token (JWT) that represents the calling IAM principal's identity","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/STS/latest/APIReference/API_GetWebIdentityToken.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecuritytokenservice.html#awssecuritytokenservice-GetWebIdentityToken"},"SetContext":{"conditionKeys":["sts:RequestContext/${ContextKey}","sts:RequestContextProviders"],"resources":[{"name":"role"},{"name":"self-session"}],"description":"Grants permission to set context keys on a STS session","accessLevel":"Write","resourceTypes":[{"name":"role","required":false},{"name":"self-session","required":false}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-sts","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecuritytokenservice.html#awssecuritytokenservice-SetContext"},"SetSourceIdentity":{"conditionKeys":["sts:SourceIdentity"],"resources":[{"name":"role"},{"name":"user"}],"description":"Grants permission to set a source identity on a STS session","accessLevel":"Write","resourceTypes":[{"name":"role","required":false},{"name":"user","required":false}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_control-access_monitor.html#id_credentials_temp_control-access_monitor-perms","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecuritytokenservice.html#awssecuritytokenservice-SetSourceIdentity"},"TagGetWebIdentityToken":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to add tags to the JSON Web Token (JWT) generated by the GetWebIdentityToken API","accessLevel":"Tagging","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/IAM/latest/UserGuide/id_web_identity_token_tags.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecuritytokenservice.html#awssecuritytokenservice-TagGetWebIdentityToken"},"TagSession":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","saml:aud","sts:TransitiveTagKeys"],"resources":[{"name":"role"},{"name":"user"}],"description":"Grants permission to add tags to a STS session","accessLevel":"Tagging","resourceTypes":[{"name":"role","required":false},{"name":"user","required":false}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecuritytokenservice.html#awssecuritytokenservice-TagSession"}},"resources":[{"name":"context-provider","arnFormats":["arn:${Partition}:iam::aws:contextProvider/${ContextProviderName}"],"conditionKeys":[]},{"name":"federated-user","arnFormats":["arn:${Partition}:sts::${Account}:federated-user/${FederatedUserName}"],"conditionKeys":[]},{"name":"role","arnFormats":["arn:${Partition}:iam::${Account}:role/${RoleNameWithPath}"],"conditionKeys":["aws:ResourceTag/${TagKey}","iam:ResourceTag/${TagKey}"]},{"name":"root-user","arnFormats":["arn:${Partition}:iam::${Account}:root"],"conditionKeys":[]},{"name":"self-session","arnFormats":["arn:${Partition}:sts::${Account}:self"],"conditionKeys":[]},{"name":"user","arnFormats":["arn:${Partition}:iam::${Account}:user/${UserNameWithPath}"],"conditionKeys":[]}],"conditionKeys":{"accounts.google.com:aud":{"types":["String"],"description":"Filters access by the Google application ID"},"accounts.google.com:oaud":{"types":["String"],"description":"Filters access by the Google audience"},"accounts.google.com:sub":{"types":["String"],"description":"Filters access by the subject of the claim (the Google user ID)"},"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"cognito-identity.amazonaws.com:amr":{"types":["String"],"description":"Filters access by the login information for Amazon Cognito"},"cognito-identity.amazonaws.com:aud":{"types":["String"],"description":"Filters access by the Amazon Cognito identity pool ID"},"cognito-identity.amazonaws.com:sub":{"types":["String"],"description":"Filters access by the subject of the claim (the Amazon Cognito user ID)"},"graph.facebook.com:app_id":{"types":["String"],"description":"Filters access by the Facebook application ID"},"graph.facebook.com:id":{"types":["String"],"description":"Filters access by the Facebook user ID"},"iam:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are attached to the role that is being assumed"},"saml:aud":{"types":["String"],"description":"Filters access by the endpoint URL to which SAML assertions are presented"},"saml:cn":{"types":["ArrayOfString"],"description":"Filters access by the eduOrg attribute"},"saml:commonName":{"types":["String"],"description":"Filters access by the commonName attribute"},"saml:doc":{"types":["String"],"description":"Filters access by on the principal that was used to assume the role"},"saml:eduorghomepageuri":{"types":["ArrayOfString"],"description":"Filters access by the eduOrg attribute"},"saml:eduorgidentityauthnpolicyuri":{"types":["ArrayOfString"],"description":"Filters access by the eduOrg attribute"},"saml:eduorglegalname":{"types":["ArrayOfString"],"description":"Filters access by the eduOrg attribute"},"saml:eduorgsuperioruri":{"types":["ArrayOfString"],"description":"Filters access by the eduOrg attribute"},"saml:eduorgwhitepagesuri":{"types":["ArrayOfString"],"description":"Filters access by the eduOrg attribute"},"saml:edupersonaffiliation":{"types":["ArrayOfString"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonassurance":{"types":["ArrayOfString"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonentitlement":{"types":["ArrayOfString"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonnickname":{"types":["ArrayOfString"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonorgdn":{"types":["String"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonorgunitdn":{"types":["ArrayOfString"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonprimaryaffiliation":{"types":["String"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonprimaryorgunitdn":{"types":["String"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonprincipalname":{"types":["String"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonscopedaffiliation":{"types":["ArrayOfString"],"description":"Filters access by the eduPerson attribute"},"saml:edupersontargetedid":{"types":["ArrayOfString"],"description":"Filters access by the eduPerson attribute"},"saml:givenName":{"types":["String"],"description":"Filters access by the givenName attribute"},"saml:iss":{"types":["String"],"description":"Filters access by on the issuer, which is represented by a URN"},"saml:mail":{"types":["String"],"description":"Filters access by the mail attribute"},"saml:name":{"types":["String"],"description":"Filters access by the name attribute"},"saml:namequalifier":{"types":["String"],"description":"Filters access by the hash value of the issuer, account ID, and friendly name"},"saml:organizationStatus":{"types":["String"],"description":"Filters access by the organizationStatus attribute"},"saml:primaryGroupSID":{"types":["String"],"description":"Filters access by the primaryGroupSID attribute"},"saml:sub":{"types":["String"],"description":"Filters access by the subject of the claim (the SAML user ID)"},"saml:sub_type":{"types":["String"],"description":"Filters access by the value persistent, transient, or the full Format URI"},"saml:surname":{"types":["String"],"description":"Filters access by the surname attribute"},"saml:uid":{"types":["String"],"description":"Filters access by the uid attribute"},"saml:x500UniqueIdentifier":{"types":["String"],"description":"Filters access by the uid attribute"},"sts:AWSServiceName":{"types":["String"],"description":"Filters access by the service that is obtaining a bearer token"},"sts:DurationSeconds":{"types":["Numeric"],"description":"Filters access by the duration in seconds when getting a bearer token or a JSON Web Token (JWT) from the GetWebIdentityToken API"},"sts:ExternalId":{"types":["String"],"description":"Filters access by the unique identifier required when you assume a role in another account"},"sts:IdentityTokenAudience":{"types":["ArrayOfString"],"description":"Filters access by the audience that is passed in the request"},"sts:RequestContext/${ContextKey}":{"types":["String"],"description":"Filters access by the session context key-value pairs embedded in the signed context assertion retrieved from a trusted context provider"},"sts:RequestContextProviders":{"types":["ArrayOfARN"],"description":"Filters access by the context provider ARNs"},"sts:RoleSessionName":{"types":["String"],"description":"Filters access by the role session name required when you assume a role"},"sts:SigningAlgorithm":{"types":["String"],"description":"Filters access by the signing algorithm that is passed in the request"},"sts:SourceIdentity":{"types":["String"],"description":"Filters access by the source identity that is passed in the request"},"sts:TaskPolicyArn":{"types":["String"],"description":"Filters access by TaskPolicyARN"},"sts:TransitiveTagKeys":{"types":["ArrayOfString"],"description":"Filters access by the transitive tag keys that are passed in the request"},"www.amazon.com:app_id":{"types":["String"],"description":"Filters access by the Login with Amazon application ID"},"www.amazon.com:user_id":{"types":["String"],"description":"Filters access by the Login with Amazon user ID"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecuritytokenservice.html"}

package/src/data/servicereference/services/support-console.json

@@ -1 +1 @@
-{"name":"support-console","actions":{"CheckSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to check whether the account has access to given product","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"CreateCaseDraft":{"conditionKeys":[],"resources":[],"description":"Grants permission to create or update case draft for the given case type","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CreateContact":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an authenticated contact for the given contact type","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"DeleteCaseDraft":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a case draft for the given case type","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"DescribeDynamicHelp":{"conditionKeys":[],"resources":[],"description":"Grants permission to get dynamic help resources for given service and category","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetAccountGovCloudEnabled":{"conditionKeys":[],"resources":[],"description":"Grants permission to determines whether the calling account is GovCloud enabled","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetAccountState":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the state of the calling account","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetBanner":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the support banner information","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetCaseDraft":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a case draft for given case type","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetIssueClassificationPredictions":{"conditionKeys":[],"resources":[],"description":"Grants permission to get classification predictions of an issue","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetIssueTextSummary":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a generated text summary of an issue","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetQuestionnaire":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a feedback questionnaire","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"SaveFeedback":{"conditionKeys":[],"resources":[],"description":"Grants permission to save questionnaire feedback","accessLevel":"Write","resourceTypes":[],"permissionOnly":true}},"resources":[],"conditionKeys":{}}
+{"name":"support-console","actions":{"CheckSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to check whether the account has access to given product","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"${AuthZDocPage}","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupportconsole.html#awssupportconsole-CheckSubscription"},"CreateCaseDraft":{"conditionKeys":[],"resources":[],"description":"Grants permission to create or update case draft for the given case type","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"${AuthZDocPage}","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupportconsole.html#awssupportconsole-CreateCaseDraft"},"CreateContact":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an authenticated contact for the given contact type","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"${AuthZDocPage}","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupportconsole.html#awssupportconsole-CreateContact"},"DeleteCaseDraft":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a case draft for the given case type","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"${AuthZDocPage}","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupportconsole.html#awssupportconsole-DeleteCaseDraft"},"DescribeDynamicHelp":{"conditionKeys":[],"resources":[],"description":"Grants permission to get dynamic help resources for given service and category","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"${AuthZDocPage}","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupportconsole.html#awssupportconsole-DescribeDynamicHelp"},"GetAccountGovCloudEnabled":{"conditionKeys":[],"resources":[],"description":"Grants permission to determines whether the calling account is GovCloud enabled","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"${AuthZDocPage}","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupportconsole.html#awssupportconsole-GetAccountGovCloudEnabled"},"GetAccountState":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the state of the calling account","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"${AuthZDocPage}","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupportconsole.html#awssupportconsole-GetAccountState"},"GetBanner":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the support banner information","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"${AuthZDocPage}","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupportconsole.html#awssupportconsole-GetBanner"},"GetCaseDraft":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a case draft for given case type","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"${AuthZDocPage}","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupportconsole.html#awssupportconsole-GetCaseDraft"},"GetIssueClassificationPredictions":{"conditionKeys":[],"resources":[],"description":"Grants permission to get classification predictions of an issue","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"${AuthZDocPage}","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupportconsole.html#awssupportconsole-GetIssueClassificationPredictions"},"GetIssueTextSummary":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a generated text summary of an issue","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"${AuthZDocPage}","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupportconsole.html#awssupportconsole-GetIssueTextSummary"},"GetQuestionnaire":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a feedback questionnaire","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"${AuthZDocPage}","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupportconsole.html#awssupportconsole-GetQuestionnaire"},"SaveFeedback":{"conditionKeys":[],"resources":[],"description":"Grants permission to save questionnaire feedback","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"${AuthZDocPage}","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupportconsole.html#awssupportconsole-SaveFeedback"}},"resources":[],"conditionKeys":{},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupportconsole.html"}