aws-iam-language-server 0.0.7 → 0.0.9

package/src/data/servicereference/services/cloudfront.json

@@ -1 +1 @@
-{"name":"cloudfront","actions":{"AllowVendedLogDeliveryForResource":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to configure vended log delivery for a distribution","accessLevel":"Permissions management","resourceTypes":[{"name":"distribution","required":false}],"permissionOnly":true},"AssociateAlias":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to associate an alias to a CloudFront distribution","accessLevel":"Write","resourceTypes":[{"name":"distribution","required":true}]},"AssociateDistributionTenantWebACL":{"conditionKeys":[],"resources":[{"name":"distribution-tenant"}],"description":"Grants permission to associate a distribution tenant with an AWS WAF web ACL","accessLevel":"Write","resourceTypes":[{"name":"distribution-tenant","required":true}]},"AssociateDistributionWebACL":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to associate a distribution with an AWS WAF web ACL","accessLevel":"Write","resourceTypes":[{"name":"distribution","required":true}]},"CopyDistribution":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to copy an existing distribution and create a new web distribution","accessLevel":"Write","resourceTypes":[{"name":"distribution","required":true}],"dependentActions":["cloudfront:CopyDistribution","cloudfront:CreateDistribution","cloudfront:GetDistribution"]},"CreateAnycastIpList":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an Anycast static IP list","accessLevel":"Write","resourceTypes":[]},"CreateCachePolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to add a new cache policy to CloudFront","accessLevel":"Write","resourceTypes":[]},"CreateCloudFrontOriginAccessIdentity":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new CloudFront origin access identity","accessLevel":"Write","resourceTypes":[]},"CreateConnectionFunction":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a connection function","accessLevel":"Write","resourceTypes":[]},"CreateConnectionGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a connection group","accessLevel":"Write","resourceTypes":[]},"CreateContinuousDeploymentPolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to add a new continuous-deployment policy to CloudFront","accessLevel":"Write","resourceTypes":[]},"CreateDistribution":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new web distribution","accessLevel":"Write","resourceTypes":[],"dependentActions":["cloudfront:CreateConnectionGroup"]},"CreateDistributionTenant":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a distribution tenant","accessLevel":"Write","resourceTypes":[]},"CreateFieldLevelEncryptionConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new field-level encryption configuration","accessLevel":"Write","resourceTypes":[]},"CreateFieldLevelEncryptionProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a field-level encryption profile","accessLevel":"Write","resourceTypes":[]},"CreateFunction":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a CloudFront function","accessLevel":"Write","resourceTypes":[]},"CreateInvalidation":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to create a new invalidation batch request","accessLevel":"Write","resourceTypes":[{"name":"distribution","required":true}]},"CreateInvalidationForDistributionTenant":{"conditionKeys":[],"resources":[{"name":"distribution-tenant"}],"description":"Grants permission to create an invalidation for a distribution tenant","accessLevel":"Write","resourceTypes":[{"name":"distribution-tenant","required":true}]},"CreateKeyGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to add a new key group to CloudFront","accessLevel":"Write","resourceTypes":[]},"CreateKeyValueStore":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a CloudFront KeyValueStore","accessLevel":"Write","resourceTypes":[]},"CreateMonitoringSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to enable additional CloudWatch metrics for the specified CloudFront distribution. The additional metrics incur an additional cost","accessLevel":"Write","resourceTypes":[]},"CreateOriginAccessControl":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new origin access control","accessLevel":"Write","resourceTypes":[]},"CreateOriginRequestPolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to add a new origin request policy to CloudFront","accessLevel":"Write","resourceTypes":[]},"CreatePublicKey":{"conditionKeys":[],"resources":[],"description":"Grants permission to add a new public key to CloudFront","accessLevel":"Write","resourceTypes":[]},"CreateRealtimeLogConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a real-time log configuration","accessLevel":"Write","resourceTypes":[]},"CreateResponseHeadersPolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to add a new response headers policy to CloudFront","accessLevel":"Write","resourceTypes":[]},"CreateSavingsPlan":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new savings plan","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CreateStreamingDistribution":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new RTMP distribution","accessLevel":"Write","resourceTypes":[]},"CreateStreamingDistributionWithTags":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new RTMP distribution with tags","accessLevel":"Write","resourceTypes":[]},"CreateTrustStore":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a trust store","accessLevel":"Write","resourceTypes":[]},"CreateVpcOrigin":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a VPC origin","accessLevel":"Write","resourceTypes":[]},"DeleteAnycastIpList":{"conditionKeys":[],"resources":[{"name":"anycast-ip-list"}],"description":"Grants permission to delete an Anycast static IP list","accessLevel":"Write","resourceTypes":[{"name":"anycast-ip-list","required":true}]},"DeleteCachePolicy":{"conditionKeys":[],"resources":[{"name":"cache-policy"}],"description":"Grants permission to delete a cache policy","accessLevel":"Write","resourceTypes":[{"name":"cache-policy","required":true}]},"DeleteCloudFrontOriginAccessIdentity":{"conditionKeys":[],"resources":[{"name":"origin-access-identity"}],"description":"Grants permission to delete a CloudFront origin access identity","accessLevel":"Write","resourceTypes":[{"name":"origin-access-identity","required":true}]},"DeleteConnectionFunction":{"conditionKeys":[],"resources":[{"name":"connection-function"}],"description":"Grants permission to delete a connection function","accessLevel":"Write","resourceTypes":[{"name":"connection-function","required":true}]},"DeleteConnectionGroup":{"conditionKeys":[],"resources":[{"name":"connection-group"}],"description":"Grants permission to delete a connection group","accessLevel":"Write","resourceTypes":[{"name":"connection-group","required":true}]},"DeleteContinuousDeploymentPolicy":{"conditionKeys":[],"resources":[{"name":"continuous-deployment-policy"}],"description":"Grants permission to delete a continuous-deployment policy","accessLevel":"Write","resourceTypes":[{"name":"continuous-deployment-policy","required":true}]},"DeleteDistribution":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to delete a web distribution","accessLevel":"Write","resourceTypes":[{"name":"distribution","required":true}]},"DeleteDistributionTenant":{"conditionKeys":[],"resources":[{"name":"distribution-tenant"}],"description":"Grants permission to delete a distribution tenant","accessLevel":"Write","resourceTypes":[{"name":"distribution-tenant","required":true}]},"DeleteFieldLevelEncryptionConfig":{"conditionKeys":[],"resources":[{"name":"field-level-encryption-config"}],"description":"Grants permission to delete a field-level encryption configuration","accessLevel":"Write","resourceTypes":[{"name":"field-level-encryption-config","required":true}]},"DeleteFieldLevelEncryptionProfile":{"conditionKeys":[],"resources":[{"name":"field-level-encryption-profile"}],"description":"Grants permission to delete a field-level encryption profile","accessLevel":"Write","resourceTypes":[{"name":"field-level-encryption-profile","required":true}]},"DeleteFunction":{"conditionKeys":[],"resources":[{"name":"function"}],"description":"Grants permission to delete a CloudFront function","accessLevel":"Write","resourceTypes":[{"name":"function","required":true}]},"DeleteKeyGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a key group","accessLevel":"Write","resourceTypes":[]},"DeleteKeyValueStore":{"conditionKeys":[],"resources":[{"name":"key-value-store"}],"description":"Grants permission to delete a CloudFront KeyValueStore","accessLevel":"Write","resourceTypes":[{"name":"key-value-store","required":true}]},"DeleteMonitoringSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to disable additional CloudWatch metrics for the specified CloudFront distribution","accessLevel":"Write","resourceTypes":[]},"DeleteOriginAccessControl":{"conditionKeys":[],"resources":[{"name":"origin-access-control"}],"description":"Grants permission to delete an origin access control","accessLevel":"Write","resourceTypes":[{"name":"origin-access-control","required":true}]},"DeleteOriginRequestPolicy":{"conditionKeys":[],"resources":[{"name":"origin-request-policy"}],"description":"Grants permission to delete an origin request policy","accessLevel":"Write","resourceTypes":[{"name":"origin-request-policy","required":true}]},"DeletePublicKey":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a public key from CloudFront","accessLevel":"Write","resourceTypes":[]},"DeleteRealtimeLogConfig":{"conditionKeys":[],"resources":[{"name":"realtime-log-config"}],"description":"Grants permission to delete a real-time log configuration","accessLevel":"Write","resourceTypes":[{"name":"realtime-log-config","required":true}]},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[{"name":"vpcorigin"}],"description":"Grants permission to delete a resource's policy document","accessLevel":"Write","resourceTypes":[{"name":"vpcorigin","required":false}]},"DeleteResponseHeadersPolicy":{"conditionKeys":[],"resources":[{"name":"response-headers-policy"}],"description":"Grants permission to delete a response headers policy","accessLevel":"Write","resourceTypes":[{"name":"response-headers-policy","required":true}]},"DeleteStreamingDistribution":{"conditionKeys":[],"resources":[{"name":"streaming-distribution"}],"description":"Grants permission to delete an RTMP distribution","accessLevel":"Write","resourceTypes":[{"name":"streaming-distribution","required":true}]},"DeleteTrustStore":{"conditionKeys":[],"resources":[{"name":"trust-store"}],"description":"Grants permission to delete a trust store","accessLevel":"Write","resourceTypes":[{"name":"trust-store","required":true}]},"DeleteVpcOrigin":{"conditionKeys":[],"resources":[{"name":"vpcorigin"}],"description":"Grants permission to delete a VPC origin","accessLevel":"Write","resourceTypes":[{"name":"vpcorigin","required":true}]},"DescribeConnectionFunction":{"conditionKeys":[],"resources":[{"name":"connection-function"}],"description":"Grants permission to get a connection function summary","accessLevel":"Read","resourceTypes":[{"name":"connection-function","required":true}]},"DescribeFunction":{"conditionKeys":[],"resources":[{"name":"function"}],"description":"Grants permission to get a CloudFront function summary","accessLevel":"Read","resourceTypes":[{"name":"function","required":true}]},"DescribeKeyValueStore":{"conditionKeys":[],"resources":[{"name":"key-value-store"}],"description":"Grants permission to get a CloudFront KeyValueStore summary","accessLevel":"Read","resourceTypes":[{"name":"key-value-store","required":true}]},"DisassociateDistributionTenantWebACL":{"conditionKeys":[],"resources":[{"name":"distribution-tenant"}],"description":"Grants permission to disassociate a distribution tenant from an AWS WAF web ACL","accessLevel":"Write","resourceTypes":[{"name":"distribution-tenant","required":true}]},"DisassociateDistributionWebACL":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to disassociate a distribution from an AWS WAF web ACL","accessLevel":"Write","resourceTypes":[{"name":"distribution","required":true}]},"GetAnycastIpList":{"conditionKeys":[],"resources":[{"name":"anycast-ip-list"}],"description":"Grants permission to get an Anycast static IP list","accessLevel":"Read","resourceTypes":[{"name":"anycast-ip-list","required":true}]},"GetCachePolicy":{"conditionKeys":[],"resources":[{"name":"cache-policy"}],"description":"Grants permission to get the cache policy","accessLevel":"Read","resourceTypes":[{"name":"cache-policy","required":true}]},"GetCachePolicyConfig":{"conditionKeys":[],"resources":[{"name":"cache-policy"}],"description":"Grants permission to get the cache policy configuration","accessLevel":"Read","resourceTypes":[{"name":"cache-policy","required":true}]},"GetCloudFrontOriginAccessIdentity":{"conditionKeys":[],"resources":[{"name":"origin-access-identity"}],"description":"Grants permission to get the information about a CloudFront origin access identity","accessLevel":"Read","resourceTypes":[{"name":"origin-access-identity","required":true}]},"GetCloudFrontOriginAccessIdentityConfig":{"conditionKeys":[],"resources":[{"name":"origin-access-identity"}],"description":"Grants permission to get the configuration information about a Cloudfront origin access identity","accessLevel":"Read","resourceTypes":[{"name":"origin-access-identity","required":true}]},"GetConnectionFunction":{"conditionKeys":[],"resources":[{"name":"connection-function"}],"description":"Grants permission to get a connection function's code","accessLevel":"Read","resourceTypes":[{"name":"connection-function","required":true}]},"GetConnectionGroup":{"conditionKeys":[],"resources":[{"name":"connection-group"}],"description":"Grants permission to get information about a connection group","accessLevel":"Read","resourceTypes":[{"name":"connection-group","required":true}]},"GetConnectionGroupByRoutingEndpoint":{"conditionKeys":[],"resources":[{"name":"connection-group"}],"description":"Grants permission to get information about a connection group by the specified routing endpoint","accessLevel":"Read","resourceTypes":[{"name":"connection-group","required":true}]},"GetContinuousDeploymentPolicy":{"conditionKeys":[],"resources":[{"name":"continuous-deployment-policy"}],"description":"Grants permission to get the continuous-deployment policy","accessLevel":"Read","resourceTypes":[{"name":"continuous-deployment-policy","required":true}]},"GetContinuousDeploymentPolicyConfig":{"conditionKeys":[],"resources":[{"name":"continuous-deployment-policy"}],"description":"Grants permission to get the continuous-deployment policy configuration","accessLevel":"Read","resourceTypes":[{"name":"continuous-deployment-policy","required":true}]},"GetDistribution":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to get the information about a web distribution","accessLevel":"Read","resourceTypes":[{"name":"distribution","required":true}]},"GetDistributionConfig":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to get the configuration information about a distribution","accessLevel":"Read","resourceTypes":[{"name":"distribution","required":true}]},"GetDistributionTenant":{"conditionKeys":[],"resources":[{"name":"distribution-tenant"}],"description":"Grants permission to get information about a distribution tenant","accessLevel":"Read","resourceTypes":[{"name":"distribution-tenant","required":true}]},"GetDistributionTenantByDomain":{"conditionKeys":[],"resources":[{"name":"distribution-tenant"}],"description":"Grants permission to get information about a distribution tenant by the associated domain","accessLevel":"Read","resourceTypes":[{"name":"distribution-tenant","required":true}]},"GetFieldLevelEncryption":{"conditionKeys":[],"resources":[{"name":"field-level-encryption-config"}],"description":"Grants permission to get the field-level encryption configuration information","accessLevel":"Read","resourceTypes":[{"name":"field-level-encryption-config","required":true}]},"GetFieldLevelEncryptionConfig":{"conditionKeys":[],"resources":[{"name":"field-level-encryption-config"}],"description":"Grants permission to get the field-level encryption configuration information","accessLevel":"Read","resourceTypes":[{"name":"field-level-encryption-config","required":true}]},"GetFieldLevelEncryptionProfile":{"conditionKeys":[],"resources":[{"name":"field-level-encryption-profile"}],"description":"Grants permission to get the field-level encryption configuration information","accessLevel":"Read","resourceTypes":[{"name":"field-level-encryption-profile","required":true}]},"GetFieldLevelEncryptionProfileConfig":{"conditionKeys":[],"resources":[{"name":"field-level-encryption-profile"}],"description":"Grants permission to get the field-level encryption profile configuration information","accessLevel":"Read","resourceTypes":[{"name":"field-level-encryption-profile","required":true}]},"GetFunction":{"conditionKeys":[],"resources":[{"name":"function"}],"description":"Grants permission to get a CloudFront function's code","accessLevel":"Read","resourceTypes":[{"name":"function","required":true}]},"GetInvalidation":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to get the information about an invalidation","accessLevel":"Read","resourceTypes":[{"name":"distribution","required":true}]},"GetInvalidationForDistributionTenant":{"conditionKeys":[],"resources":[{"name":"distribution-tenant"}],"description":"Grants permission to get information about an invalidation for a distribution tenant","accessLevel":"Read","resourceTypes":[{"name":"distribution-tenant","required":true}]},"GetKeyGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a key group","accessLevel":"Read","resourceTypes":[]},"GetKeyGroupConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a key group configuration","accessLevel":"Read","resourceTypes":[]},"GetManagedCertificateDetails":{"conditionKeys":[],"resources":[{"name":"distribution-tenant"}],"description":"Grants permission to get details about a CloudFront managed certificate","accessLevel":"Read","resourceTypes":[{"name":"distribution-tenant","required":true}]},"GetMonitoringSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about whether additional CloudWatch metrics are enabled for the specified CloudFront distribution","accessLevel":"Read","resourceTypes":[]},"GetOriginAccessControl":{"conditionKeys":[],"resources":[{"name":"origin-access-control"}],"description":"Grants permission to get the origin access control","accessLevel":"Read","resourceTypes":[{"name":"origin-access-control","required":true}]},"GetOriginAccessControlConfig":{"conditionKeys":[],"resources":[{"name":"origin-access-control"}],"description":"Grants permission to get the origin access control configuration","accessLevel":"Read","resourceTypes":[{"name":"origin-access-control","required":true}]},"GetOriginRequestPolicy":{"conditionKeys":[],"resources":[{"name":"origin-request-policy"}],"description":"Grants permission to get the origin request policy","accessLevel":"Read","resourceTypes":[{"name":"origin-request-policy","required":true}]},"GetOriginRequestPolicyConfig":{"conditionKeys":[],"resources":[{"name":"origin-request-policy"}],"description":"Grants permission to get the origin request policy configuration","accessLevel":"Read","resourceTypes":[{"name":"origin-request-policy","required":true}]},"GetPublicKey":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the public key information","accessLevel":"Read","resourceTypes":[]},"GetPublicKeyConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the public key configuration information","accessLevel":"Read","resourceTypes":[]},"GetRealtimeLogConfig":{"conditionKeys":[],"resources":[{"name":"realtime-log-config"}],"description":"Grants permission to get a real-time log configuration","accessLevel":"Read","resourceTypes":[{"name":"realtime-log-config","required":true}]},"GetResourcePolicy":{"conditionKeys":[],"resources":[{"name":"vpcorigin"}],"description":"Grants permission to get the information about a resource's policy document","accessLevel":"Read","resourceTypes":[{"name":"vpcorigin","required":false}]},"GetResponseHeadersPolicy":{"conditionKeys":[],"resources":[{"name":"response-headers-policy"}],"description":"Grants permission to get the response headers policy","accessLevel":"Read","resourceTypes":[{"name":"response-headers-policy","required":true}]},"GetResponseHeadersPolicyConfig":{"conditionKeys":[],"resources":[{"name":"response-headers-policy"}],"description":"Grants permission to get the response headers policy configuration","accessLevel":"Read","resourceTypes":[{"name":"response-headers-policy","required":true}]},"GetSavingsPlan":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a savings plan","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetStreamingDistribution":{"conditionKeys":[],"resources":[{"name":"streaming-distribution"}],"description":"Grants permission to get the information about an RTMP distribution","accessLevel":"Read","resourceTypes":[{"name":"streaming-distribution","required":true}]},"GetStreamingDistributionConfig":{"conditionKeys":[],"resources":[{"name":"streaming-distribution"}],"description":"Grants permission to get the configuration information about a streaming distribution","accessLevel":"Read","resourceTypes":[{"name":"streaming-distribution","required":true}]},"GetTrustStore":{"conditionKeys":[],"resources":[{"name":"trust-store"}],"description":"Grants permission to get information about a trust store","accessLevel":"Read","resourceTypes":[{"name":"trust-store","required":true}]},"GetVpcOrigin":{"conditionKeys":[],"resources":[{"name":"vpcorigin"}],"description":"Grants permission to get the information about a VPC origin","accessLevel":"Read","resourceTypes":[{"name":"vpcorigin","required":true}]},"ListAnycastIpLists":{"conditionKeys":[],"resources":[],"description":"Grants permission to list your Anycast static IP lists","accessLevel":"List","resourceTypes":[]},"ListCachePolicies":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all cache policies that have been created in CloudFront for this account","accessLevel":"List","resourceTypes":[]},"ListCloudFrontOriginAccessIdentities":{"conditionKeys":[],"resources":[],"description":"Grants permission to list your CloudFront origin access identities","accessLevel":"List","resourceTypes":[]},"ListConflictingAliases":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to list all aliases that conflict with the given alias in CloudFront","accessLevel":"List","resourceTypes":[{"name":"distribution","required":true}]},"ListConnectionFunctions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the connection functions in your AWS account","accessLevel":"List","resourceTypes":[]},"ListConnectionGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the connection groups in your AWS account","accessLevel":"List","resourceTypes":[]},"ListContinuousDeploymentPolicies":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all continuous-deployment policies in the account","accessLevel":"List","resourceTypes":[]},"ListDistributionTenants":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the distribution tenants in your AWS account","accessLevel":"List","resourceTypes":[]},"ListDistributionTenantsByCustomization":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the distribution tenants by the customization that you specify","accessLevel":"List","resourceTypes":[]},"ListDistributions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the distributions associated with your AWS account","accessLevel":"List","resourceTypes":[]},"ListDistributionsByAnycastIpListId":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the distributions in your account that are associated with the specified AnycastIpListId","accessLevel":"List","resourceTypes":[]},"ListDistributionsByCachePolicyId":{"conditionKeys":[],"resources":[],"description":"Grants permission to list distribution IDs for distributions that have a cache behavior that's associated with the specified cache policy","accessLevel":"List","resourceTypes":[]},"ListDistributionsByConnectionFunction":{"conditionKeys":[],"resources":[{"name":"connection-function"}],"description":"Grants permission to list summaries for distributions associated with the specified connection function","accessLevel":"List","resourceTypes":[{"name":"connection-function","required":true}]},"ListDistributionsByConnectionMode":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the distributions by the specified connection mode","accessLevel":"List","resourceTypes":[]},"ListDistributionsByKeyGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to list distribution IDs for distributions that have a cache behavior that's associated with the specified key group","accessLevel":"List","resourceTypes":[]},"ListDistributionsByLambdaFunction":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the distributions associated a Lambda function","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListDistributionsByOriginRequestPolicyId":{"conditionKeys":[],"resources":[],"description":"Grants permission to list distribution IDs for distributions that have a cache behavior that's associated with the specified origin request policy","accessLevel":"List","resourceTypes":[]},"ListDistributionsByRealtimeLogConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of distributions that have a cache behavior that's associated with the specified real-time log configuration","accessLevel":"List","resourceTypes":[]},"ListDistributionsByResponseHeadersPolicyId":{"conditionKeys":[],"resources":[],"description":"Grants permission to list distribution IDs for distributions that have a cache behavior that's associated with the specified response headers policy","accessLevel":"List","resourceTypes":[]},"ListDistributionsByTrustStore":{"conditionKeys":[],"resources":[{"name":"trust-store"}],"description":"Grants permission to list summaries for distributions associated with the specified trust store","accessLevel":"List","resourceTypes":[{"name":"trust-store","required":true}]},"ListDistributionsByVpcOriginId":{"conditionKeys":[],"resources":[],"description":"Grants permission to list IDs for distributions associated with the specified VPC origin","accessLevel":"List","resourceTypes":[]},"ListDistributionsByWebACLId":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the distributions associated with your AWS account with given AWS WAF web ACL","accessLevel":"List","resourceTypes":[]},"ListDomainConflicts":{"conditionKeys":[],"resources":[{"name":"distribution"},{"name":"distribution-tenant"}],"description":"Grants permission to list domain conflicts for a specified domain","accessLevel":"List","resourceTypes":[{"name":"distribution","required":false},{"name":"distribution-tenant","required":false}]},"ListFieldLevelEncryptionConfigs":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all field-level encryption configurations that have been created in CloudFront for this account","accessLevel":"List","resourceTypes":[]},"ListFieldLevelEncryptionProfiles":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all field-level encryption profiles that have been created in CloudFront for this account","accessLevel":"List","resourceTypes":[]},"ListFunctions":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of CloudFront functions","accessLevel":"List","resourceTypes":[]},"ListInvalidations":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to list your invalidation batches","accessLevel":"List","resourceTypes":[{"name":"distribution","required":true}]},"ListInvalidationsForDistributionTenant":{"conditionKeys":[],"resources":[{"name":"distribution-tenant"}],"description":"Grants permission to list the invalidations for a distribution tenant","accessLevel":"List","resourceTypes":[{"name":"distribution-tenant","required":true}]},"ListKeyGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all key groups that have been created in CloudFront for this account","accessLevel":"List","resourceTypes":[]},"ListKeyValueStores":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of CloudFront KeyValueStores","accessLevel":"List","resourceTypes":[]},"ListOriginAccessControls":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all origin access controls in the account","accessLevel":"List","resourceTypes":[]},"ListOriginRequestPolicies":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all origin request policies that have been created in CloudFront for this account","accessLevel":"List","resourceTypes":[]},"ListPublicKeys":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all public keys that have been added to CloudFront for this account","accessLevel":"List","resourceTypes":[]},"ListRateCards":{"conditionKeys":[],"resources":[],"description":"Grants permission to list CloudFront rate cards for the account","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListRealtimeLogConfigs":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of real-time log configurations","accessLevel":"List","resourceTypes":[]},"ListResponseHeadersPolicies":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all response headers policies that have been created in CloudFront for this account","accessLevel":"List","resourceTypes":[]},"ListSavingsPlans":{"conditionKeys":[],"resources":[],"description":"Grants permission to list savings plans in the account","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListStreamingDistributions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list your RTMP distributions","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"anycast-ip-list"},{"name":"connection-function"},{"name":"connection-group"},{"name":"distribution"},{"name":"distribution-tenant"},{"name":"trust-store"},{"name":"vpcorigin"}],"description":"Grants permission to list tags for a CloudFront resource","accessLevel":"Read","resourceTypes":[{"name":"anycast-ip-list","required":false},{"name":"connection-function","required":false},{"name":"connection-group","required":false},{"name":"distribution","required":false},{"name":"distribution-tenant","required":false},{"name":"trust-store","required":false},{"name":"vpcorigin","required":false}]},"ListTrustStores":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the trust stores in your AWS account","accessLevel":"List","resourceTypes":[]},"ListUsages":{"conditionKeys":[],"resources":[],"description":"Grants permission to list CloudFront usage","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListVpcOrigins":{"conditionKeys":[],"resources":[],"description":"Grants permission to list VPC origins","accessLevel":"List","resourceTypes":[]},"PublishConnectionFunction":{"conditionKeys":[],"resources":[{"name":"connection-function"}],"description":"Grants permission to publish a connection function","accessLevel":"Write","resourceTypes":[{"name":"connection-function","required":true}]},"PublishFunction":{"conditionKeys":[],"resources":[{"name":"function"}],"description":"Grants permission to publish a CloudFront function","accessLevel":"Write","resourceTypes":[{"name":"function","required":true}]},"PutResourcePolicy":{"conditionKeys":[],"resources":[{"name":"vpcorigin"}],"description":"Grants permission to update or create a resource's policy document","accessLevel":"Write","resourceTypes":[{"name":"vpcorigin","required":false}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"anycast-ip-list"},{"name":"connection-function"},{"name":"connection-group"},{"name":"distribution"},{"name":"distribution-tenant"},{"name":"streaming-distribution"},{"name":"trust-store"},{"name":"vpcorigin"}],"description":"Grants permission to add tags to a CloudFront resource","accessLevel":"Tagging","resourceTypes":[{"name":"anycast-ip-list","required":false},{"name":"connection-function","required":false},{"name":"connection-group","required":false},{"name":"distribution","required":false},{"name":"distribution-tenant","required":false},{"name":"streaming-distribution","required":false},{"name":"trust-store","required":false},{"name":"vpcorigin","required":false}]},"TestConnectionFunction":{"conditionKeys":[],"resources":[{"name":"connection-function"}],"description":"Grants permission to test a connection function","accessLevel":"Write","resourceTypes":[{"name":"connection-function","required":true}]},"TestFunction":{"conditionKeys":[],"resources":[{"name":"function"}],"description":"Grants permission to test a CloudFront function","accessLevel":"Write","resourceTypes":[{"name":"function","required":true}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"anycast-ip-list"},{"name":"connection-function"},{"name":"connection-group"},{"name":"distribution"},{"name":"distribution-tenant"},{"name":"streaming-distribution"},{"name":"trust-store"},{"name":"vpcorigin"}],"description":"Grants permission to remove tags from a CloudFront resource","accessLevel":"Tagging","resourceTypes":[{"name":"anycast-ip-list","required":false},{"name":"connection-function","required":false},{"name":"connection-group","required":false},{"name":"distribution","required":false},{"name":"distribution-tenant","required":false},{"name":"streaming-distribution","required":false},{"name":"trust-store","required":false},{"name":"vpcorigin","required":false}]},"UpdateAnycastIpList":{"conditionKeys":[],"resources":[{"name":"anycast-ip-list"}],"description":"Grants permission to update an Anycast static IP list","accessLevel":"Write","resourceTypes":[{"name":"anycast-ip-list","required":true}]},"UpdateCachePolicy":{"conditionKeys":[],"resources":[{"name":"cache-policy"}],"description":"Grants permission to update a cache policy","accessLevel":"Write","resourceTypes":[{"name":"cache-policy","required":true}]},"UpdateCloudFrontOriginAccessIdentity":{"conditionKeys":[],"resources":[{"name":"origin-access-identity"}],"description":"Grants permission to set the configuration for a CloudFront origin access identity","accessLevel":"Write","resourceTypes":[{"name":"origin-access-identity","required":true}]},"UpdateConnectionFunction":{"conditionKeys":[],"resources":[{"name":"connection-function"}],"description":"Grants permission to update a connection function","accessLevel":"Write","resourceTypes":[{"name":"connection-function","required":true}]},"UpdateConnectionGroup":{"conditionKeys":[],"resources":[{"name":"connection-group"}],"description":"Grants permission to update a connection group","accessLevel":"Write","resourceTypes":[{"name":"connection-group","required":true}]},"UpdateContinuousDeploymentPolicy":{"conditionKeys":[],"resources":[{"name":"continuous-deployment-policy"}],"description":"Grants permission to update a continuous-deployment policy","accessLevel":"Write","resourceTypes":[{"name":"continuous-deployment-policy","required":true}]},"UpdateDistribution":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to update the configuration for a web distribution","accessLevel":"Write","resourceTypes":[{"name":"distribution","required":true}]},"UpdateDistributionTenant":{"conditionKeys":[],"resources":[{"name":"distribution-tenant"}],"description":"Grants permission to update a distribution tenant","accessLevel":"Write","resourceTypes":[{"name":"distribution-tenant","required":true}]},"UpdateDistributionWithStagingConfig":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to copy the configuration from a staging web distribution to its corresponding primary web distribution","accessLevel":"Write","resourceTypes":[{"name":"distribution","required":true}]},"UpdateDomainAssociation":{"conditionKeys":[],"resources":[{"name":"distribution"},{"name":"distribution-tenant"}],"description":"Grants permission to update a domain association","accessLevel":"Write","resourceTypes":[{"name":"distribution","required":false},{"name":"distribution-tenant","required":false}]},"UpdateFieldLevelEncryptionConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a field-level encryption configuration","accessLevel":"Write","resourceTypes":[]},"UpdateFieldLevelEncryptionProfile":{"conditionKeys":[],"resources":[{"name":"field-level-encryption-profile"}],"description":"Grants permission to update a field-level encryption profile","accessLevel":"Write","resourceTypes":[{"name":"field-level-encryption-profile","required":true}]},"UpdateFunction":{"conditionKeys":[],"resources":[{"name":"function"}],"description":"Grants permission to update a CloudFront function","accessLevel":"Write","resourceTypes":[{"name":"function","required":true}]},"UpdateKeyGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a key group","accessLevel":"Write","resourceTypes":[]},"UpdateKeyValueStore":{"conditionKeys":[],"resources":[{"name":"key-value-store"}],"description":"Grants permission to update a CloudFront KeyValueStore","accessLevel":"Write","resourceTypes":[{"name":"key-value-store","required":true}]},"UpdateOriginAccessControl":{"conditionKeys":[],"resources":[{"name":"origin-access-control"}],"description":"Grants permission to update an origin access control","accessLevel":"Write","resourceTypes":[{"name":"origin-access-control","required":true}]},"UpdateOriginRequestPolicy":{"conditionKeys":[],"resources":[{"name":"origin-request-policy"}],"description":"Grants permission to update an origin request policy","accessLevel":"Write","resourceTypes":[{"name":"origin-request-policy","required":true}]},"UpdatePublicKey":{"conditionKeys":[],"resources":[],"description":"Grants permission to update public key information","accessLevel":"Write","resourceTypes":[]},"UpdateRealtimeLogConfig":{"conditionKeys":[],"resources":[{"name":"realtime-log-config"}],"description":"Grants permission to update a real-time log configuration","accessLevel":"Write","resourceTypes":[{"name":"realtime-log-config","required":true}]},"UpdateResponseHeadersPolicy":{"conditionKeys":[],"resources":[{"name":"response-headers-policy"}],"description":"Grants permission to update a response headers policy","accessLevel":"Write","resourceTypes":[{"name":"response-headers-policy","required":true}]},"UpdateSavingsPlan":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a savings plan","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"UpdateStreamingDistribution":{"conditionKeys":[],"resources":[{"name":"streaming-distribution"}],"description":"Grants permission to update the configuration for an RTMP distribution","accessLevel":"Write","resourceTypes":[{"name":"streaming-distribution","required":true}]},"UpdateTrustStore":{"conditionKeys":[],"resources":[{"name":"trust-store"}],"description":"Grants permission to update a trust store","accessLevel":"Write","resourceTypes":[{"name":"trust-store","required":true}]},"UpdateVpcOrigin":{"conditionKeys":[],"resources":[{"name":"vpcorigin"}],"description":"Grants permission to update a VPC origin","accessLevel":"Write","resourceTypes":[{"name":"vpcorigin","required":true}]},"VerifyDnsConfiguration":{"conditionKeys":[],"resources":[{"name":"distribution-tenant"}],"description":"Grants permission to verify the DNS configuration for a specified domain","accessLevel":"Read","resourceTypes":[{"name":"distribution-tenant","required":false}]}},"resources":[{"name":"anycast-ip-list","arnFormats":["arn:${Partition}:cloudfront::${Account}:anycast-ip-list/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"cache-policy","arnFormats":["arn:${Partition}:cloudfront::${Account}:cache-policy/${Id}"],"conditionKeys":[]},{"name":"connection-function","arnFormats":["arn:${Partition}:cloudfront::${Account}:connection-function/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"connection-group","arnFormats":["arn:${Partition}:cloudfront::${Account}:connection-group/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"continuous-deployment-policy","arnFormats":["arn:${Partition}:cloudfront::${Account}:continuous-deployment-policy/${Id}"],"conditionKeys":[]},{"name":"distribution","arnFormats":["arn:${Partition}:cloudfront::${Account}:distribution/${DistributionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"distribution-tenant","arnFormats":["arn:${Partition}:cloudfront::${Account}:distribution-tenant/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"field-level-encryption-config","arnFormats":["arn:${Partition}:cloudfront::${Account}:field-level-encryption-config/${Id}"],"conditionKeys":[]},{"name":"field-level-encryption-profile","arnFormats":["arn:${Partition}:cloudfront::${Account}:field-level-encryption-profile/${Id}"],"conditionKeys":[]},{"name":"function","arnFormats":["arn:${Partition}:cloudfront::${Account}:function/${Name}"],"conditionKeys":[]},{"name":"key-value-store","arnFormats":["arn:${Partition}:cloudfront::${Account}:key-value-store/${Name}"],"conditionKeys":[]},{"name":"origin-access-control","arnFormats":["arn:${Partition}:cloudfront::${Account}:origin-access-control/${Id}"],"conditionKeys":[]},{"name":"origin-access-identity","arnFormats":["arn:${Partition}:cloudfront::${Account}:origin-access-identity/${Id}"],"conditionKeys":[]},{"name":"origin-request-policy","arnFormats":["arn:${Partition}:cloudfront::${Account}:origin-request-policy/${Id}"],"conditionKeys":[]},{"name":"realtime-log-config","arnFormats":["arn:${Partition}:cloudfront::${Account}:realtime-log-config/${Name}"],"conditionKeys":[]},{"name":"response-headers-policy","arnFormats":["arn:${Partition}:cloudfront::${Account}:response-headers-policy/${Id}"],"conditionKeys":[]},{"name":"streaming-distribution","arnFormats":["arn:${Partition}:cloudfront::${Account}:streaming-distribution/${DistributionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"trust-store","arnFormats":["arn:${Partition}:cloudfront::${Account}:trust-store/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"vpcorigin","arnFormats":["arn:${Partition}:cloudfront::${Account}:vpcorigin/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"}}}
+{"name":"cloudfront","actions":{"AllowVendedLogDeliveryForResource":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to configure vended log delivery for a distribution","accessLevel":"Permissions management","resourceTypes":[{"name":"distribution","required":false}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/AWS-logs-and-resource-policy.html#AWS-logs-infrastructure-V2-service-specific","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-AllowVendedLogDeliveryForResource"},"AssociateAlias":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to associate an alias to a CloudFront distribution","accessLevel":"Write","resourceTypes":[{"name":"distribution","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_AssociateAlias.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-AssociateAlias"},"AssociateDistributionTenantWebACL":{"conditionKeys":[],"resources":[{"name":"distribution-tenant"}],"description":"Grants permission to associate a distribution tenant with an AWS WAF web ACL","accessLevel":"Write","resourceTypes":[{"name":"distribution-tenant","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_AssociateDistributionTenantWebACL.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-AssociateDistributionTenantWebACL"},"AssociateDistributionWebACL":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to associate a distribution with an AWS WAF web ACL","accessLevel":"Write","resourceTypes":[{"name":"distribution","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_AssociateDistributionWebACL.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-AssociateDistributionWebACL"},"CopyDistribution":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to copy an existing distribution and create a new web distribution","accessLevel":"Write","resourceTypes":[{"name":"distribution","required":true}],"dependentActions":["cloudfront:CopyDistribution","cloudfront:CreateDistribution","cloudfront:GetDistribution"],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CopyDistribution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CopyDistribution"},"CreateAnycastIpList":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an Anycast static IP list","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateAnycastIpList.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CreateAnycastIpList"},"CreateCachePolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to add a new cache policy to CloudFront","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateCachePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CreateCachePolicy"},"CreateCloudFrontOriginAccessIdentity":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new CloudFront origin access identity","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateCloudFrontOriginAccessIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CreateCloudFrontOriginAccessIdentity"},"CreateConnectionFunction":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a connection function","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateConnectionFunction.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CreateConnectionFunction"},"CreateConnectionGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a connection group","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateConnectionGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CreateConnectionGroup"},"CreateContinuousDeploymentPolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to add a new continuous-deployment policy to CloudFront","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateContinuousDeploymentPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CreateContinuousDeploymentPolicy"},"CreateDistribution":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new web distribution","accessLevel":"Write","resourceTypes":[],"dependentActions":["cloudfront:CreateConnectionGroup"],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateDistribution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CreateDistribution"},"CreateDistributionTenant":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a distribution tenant","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateDistributionTenant.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CreateDistributionTenant"},"CreateFieldLevelEncryptionConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new field-level encryption configuration","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateFieldLevelEncryptionConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CreateFieldLevelEncryptionConfig"},"CreateFieldLevelEncryptionProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a field-level encryption profile","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateFieldLevelEncryptionProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CreateFieldLevelEncryptionProfile"},"CreateFunction":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a CloudFront function","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateFunction.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CreateFunction"},"CreateInvalidation":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to create a new invalidation batch request","accessLevel":"Write","resourceTypes":[{"name":"distribution","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateInvalidation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CreateInvalidation"},"CreateInvalidationForDistributionTenant":{"conditionKeys":[],"resources":[{"name":"distribution-tenant"}],"description":"Grants permission to create an invalidation for a distribution tenant","accessLevel":"Write","resourceTypes":[{"name":"distribution-tenant","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateInvalidationForDistributionTenant.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CreateInvalidationForDistributionTenant"},"CreateKeyGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to add a new key group to CloudFront","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateKeyGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CreateKeyGroup"},"CreateKeyValueStore":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a CloudFront KeyValueStore","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateKeyValueStore.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CreateKeyValueStore"},"CreateMonitoringSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to enable additional CloudWatch metrics for the specified CloudFront distribution. The additional metrics incur an additional cost","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateMonitoringSubscription.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CreateMonitoringSubscription"},"CreateOriginAccessControl":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new origin access control","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateOriginAccessControl.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CreateOriginAccessControl"},"CreateOriginRequestPolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to add a new origin request policy to CloudFront","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateOriginRequestPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CreateOriginRequestPolicy"},"CreatePublicKey":{"conditionKeys":[],"resources":[],"description":"Grants permission to add a new public key to CloudFront","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreatePublicKey.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CreatePublicKey"},"CreateRealtimeLogConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a real-time log configuration","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateRealtimeLogConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CreateRealtimeLogConfig"},"CreateResponseHeadersPolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to add a new response headers policy to CloudFront","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateResponseHeadersPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CreateResponseHeadersPolicy"},"CreateSavingsPlan":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new savings plan","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cf-api-permissions-ref.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CreateSavingsPlan"},"CreateStreamingDistribution":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new RTMP distribution","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateStreamingDistribution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CreateStreamingDistribution"},"CreateStreamingDistributionWithTags":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new RTMP distribution with tags","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateStreamingDistributionWithTags.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CreateStreamingDistributionWithTags"},"CreateTrustStore":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a trust store","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateTrustStore.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CreateTrustStore"},"CreateVpcOrigin":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a VPC origin","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateVpcOrigin.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-CreateVpcOrigin"},"DeleteAnycastIpList":{"conditionKeys":[],"resources":[{"name":"anycast-ip-list"}],"description":"Grants permission to delete an Anycast static IP list","accessLevel":"Write","resourceTypes":[{"name":"anycast-ip-list","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteAnycastIpList.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DeleteAnycastIpList"},"DeleteCachePolicy":{"conditionKeys":[],"resources":[{"name":"cache-policy"}],"description":"Grants permission to delete a cache policy","accessLevel":"Write","resourceTypes":[{"name":"cache-policy","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteCachePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DeleteCachePolicy"},"DeleteCloudFrontOriginAccessIdentity":{"conditionKeys":[],"resources":[{"name":"origin-access-identity"}],"description":"Grants permission to delete a CloudFront origin access identity","accessLevel":"Write","resourceTypes":[{"name":"origin-access-identity","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteCloudFrontOriginAccessIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DeleteCloudFrontOriginAccessIdentity"},"DeleteConnectionFunction":{"conditionKeys":[],"resources":[{"name":"connection-function"}],"description":"Grants permission to delete a connection function","accessLevel":"Write","resourceTypes":[{"name":"connection-function","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteConnectionFunction.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DeleteConnectionFunction"},"DeleteConnectionGroup":{"conditionKeys":[],"resources":[{"name":"connection-group"}],"description":"Grants permission to delete a connection group","accessLevel":"Write","resourceTypes":[{"name":"connection-group","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteConnectionGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DeleteConnectionGroup"},"DeleteContinuousDeploymentPolicy":{"conditionKeys":[],"resources":[{"name":"continuous-deployment-policy"}],"description":"Grants permission to delete a continuous-deployment policy","accessLevel":"Write","resourceTypes":[{"name":"continuous-deployment-policy","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteContinuousDeploymentPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DeleteContinuousDeploymentPolicy"},"DeleteDistribution":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to delete a web distribution","accessLevel":"Write","resourceTypes":[{"name":"distribution","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteDistribution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DeleteDistribution"},"DeleteDistributionTenant":{"conditionKeys":[],"resources":[{"name":"distribution-tenant"}],"description":"Grants permission to delete a distribution tenant","accessLevel":"Write","resourceTypes":[{"name":"distribution-tenant","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteDistributionTenant.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DeleteDistributionTenant"},"DeleteFieldLevelEncryptionConfig":{"conditionKeys":[],"resources":[{"name":"field-level-encryption-config"}],"description":"Grants permission to delete a field-level encryption configuration","accessLevel":"Write","resourceTypes":[{"name":"field-level-encryption-config","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteFieldLevelEncryptionConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DeleteFieldLevelEncryptionConfig"},"DeleteFieldLevelEncryptionProfile":{"conditionKeys":[],"resources":[{"name":"field-level-encryption-profile"}],"description":"Grants permission to delete a field-level encryption profile","accessLevel":"Write","resourceTypes":[{"name":"field-level-encryption-profile","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteFieldLevelEncryptionProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DeleteFieldLevelEncryptionProfile"},"DeleteFunction":{"conditionKeys":[],"resources":[{"name":"function"}],"description":"Grants permission to delete a CloudFront function","accessLevel":"Write","resourceTypes":[{"name":"function","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteFunction.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DeleteFunction"},"DeleteKeyGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a key group","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteKeyGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DeleteKeyGroup"},"DeleteKeyValueStore":{"conditionKeys":[],"resources":[{"name":"key-value-store"}],"description":"Grants permission to delete a CloudFront KeyValueStore","accessLevel":"Write","resourceTypes":[{"name":"key-value-store","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteKeyValueStore.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DeleteKeyValueStore"},"DeleteMonitoringSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to disable additional CloudWatch metrics for the specified CloudFront distribution","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteMonitoringSubscription.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DeleteMonitoringSubscription"},"DeleteOriginAccessControl":{"conditionKeys":[],"resources":[{"name":"origin-access-control"}],"description":"Grants permission to delete an origin access control","accessLevel":"Write","resourceTypes":[{"name":"origin-access-control","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteOriginAccessControl.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DeleteOriginAccessControl"},"DeleteOriginRequestPolicy":{"conditionKeys":[],"resources":[{"name":"origin-request-policy"}],"description":"Grants permission to delete an origin request policy","accessLevel":"Write","resourceTypes":[{"name":"origin-request-policy","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteOriginRequestPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DeleteOriginRequestPolicy"},"DeletePublicKey":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a public key from CloudFront","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeletePublicKey.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DeletePublicKey"},"DeleteRealtimeLogConfig":{"conditionKeys":[],"resources":[{"name":"realtime-log-config"}],"description":"Grants permission to delete a real-time log configuration","accessLevel":"Write","resourceTypes":[{"name":"realtime-log-config","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteRealtimeLogConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DeleteRealtimeLogConfig"},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[{"name":"vpcorigin"}],"description":"Grants permission to delete a resource's policy document","accessLevel":"Write","resourceTypes":[{"name":"vpcorigin","required":false}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DeleteResourcePolicy"},"DeleteResponseHeadersPolicy":{"conditionKeys":[],"resources":[{"name":"response-headers-policy"}],"description":"Grants permission to delete a response headers policy","accessLevel":"Write","resourceTypes":[{"name":"response-headers-policy","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteResponseHeadersPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DeleteResponseHeadersPolicy"},"DeleteStreamingDistribution":{"conditionKeys":[],"resources":[{"name":"streaming-distribution"}],"description":"Grants permission to delete an RTMP distribution","accessLevel":"Write","resourceTypes":[{"name":"streaming-distribution","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteStreamingDistribution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DeleteStreamingDistribution"},"DeleteTrustStore":{"conditionKeys":[],"resources":[{"name":"trust-store"}],"description":"Grants permission to delete a trust store","accessLevel":"Write","resourceTypes":[{"name":"trust-store","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteTrustStore.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DeleteTrustStore"},"DeleteVpcOrigin":{"conditionKeys":[],"resources":[{"name":"vpcorigin"}],"description":"Grants permission to delete a VPC origin","accessLevel":"Write","resourceTypes":[{"name":"vpcorigin","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteVpcOrigin.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DeleteVpcOrigin"},"DescribeConnectionFunction":{"conditionKeys":[],"resources":[{"name":"connection-function"}],"description":"Grants permission to get a connection function summary","accessLevel":"Read","resourceTypes":[{"name":"connection-function","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DescribeConnectionFunction.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DescribeConnectionFunction"},"DescribeFunction":{"conditionKeys":[],"resources":[{"name":"function"}],"description":"Grants permission to get a CloudFront function summary","accessLevel":"Read","resourceTypes":[{"name":"function","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DescribeFunction.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DescribeFunction"},"DescribeKeyValueStore":{"conditionKeys":[],"resources":[{"name":"key-value-store"}],"description":"Grants permission to get a CloudFront KeyValueStore summary","accessLevel":"Read","resourceTypes":[{"name":"key-value-store","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DescribeKeyValueStore.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DescribeKeyValueStore"},"DisassociateDistributionTenantWebACL":{"conditionKeys":[],"resources":[{"name":"distribution-tenant"}],"description":"Grants permission to disassociate a distribution tenant from an AWS WAF web ACL","accessLevel":"Write","resourceTypes":[{"name":"distribution-tenant","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DisassociateDistributionTenantWebACL.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DisassociateDistributionTenantWebACL"},"DisassociateDistributionWebACL":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to disassociate a distribution from an AWS WAF web ACL","accessLevel":"Write","resourceTypes":[{"name":"distribution","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DisassociateDistributionWebACL.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-DisassociateDistributionWebACL"},"GetAnycastIpList":{"conditionKeys":[],"resources":[{"name":"anycast-ip-list"}],"description":"Grants permission to get an Anycast static IP list","accessLevel":"Read","resourceTypes":[{"name":"anycast-ip-list","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetAnycastIpList.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetAnycastIpList"},"GetCachePolicy":{"conditionKeys":[],"resources":[{"name":"cache-policy"}],"description":"Grants permission to get the cache policy","accessLevel":"Read","resourceTypes":[{"name":"cache-policy","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetCachePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetCachePolicy"},"GetCachePolicyConfig":{"conditionKeys":[],"resources":[{"name":"cache-policy"}],"description":"Grants permission to get the cache policy configuration","accessLevel":"Read","resourceTypes":[{"name":"cache-policy","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetCachePolicyConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetCachePolicyConfig"},"GetCloudFrontOriginAccessIdentity":{"conditionKeys":[],"resources":[{"name":"origin-access-identity"}],"description":"Grants permission to get the information about a CloudFront origin access identity","accessLevel":"Read","resourceTypes":[{"name":"origin-access-identity","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetCloudFrontOriginAccessIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetCloudFrontOriginAccessIdentity"},"GetCloudFrontOriginAccessIdentityConfig":{"conditionKeys":[],"resources":[{"name":"origin-access-identity"}],"description":"Grants permission to get the configuration information about a Cloudfront origin access identity","accessLevel":"Read","resourceTypes":[{"name":"origin-access-identity","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetCloudFrontOriginAccessIdentityConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetCloudFrontOriginAccessIdentityConfig"},"GetConnectionFunction":{"conditionKeys":[],"resources":[{"name":"connection-function"}],"description":"Grants permission to get a connection function's code","accessLevel":"Read","resourceTypes":[{"name":"connection-function","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetConnectionFunction.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetConnectionFunction"},"GetConnectionGroup":{"conditionKeys":[],"resources":[{"name":"connection-group"}],"description":"Grants permission to get information about a connection group","accessLevel":"Read","resourceTypes":[{"name":"connection-group","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetConnectionGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetConnectionGroup"},"GetConnectionGroupByRoutingEndpoint":{"conditionKeys":[],"resources":[{"name":"connection-group"}],"description":"Grants permission to get information about a connection group by the specified routing endpoint","accessLevel":"Read","resourceTypes":[{"name":"connection-group","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetConnectionGroupByRoutingEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetConnectionGroupByRoutingEndpoint"},"GetContinuousDeploymentPolicy":{"conditionKeys":[],"resources":[{"name":"continuous-deployment-policy"}],"description":"Grants permission to get the continuous-deployment policy","accessLevel":"Read","resourceTypes":[{"name":"continuous-deployment-policy","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetContinuousDeploymentPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetContinuousDeploymentPolicy"},"GetContinuousDeploymentPolicyConfig":{"conditionKeys":[],"resources":[{"name":"continuous-deployment-policy"}],"description":"Grants permission to get the continuous-deployment policy configuration","accessLevel":"Read","resourceTypes":[{"name":"continuous-deployment-policy","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetContinuousDeploymentPolicyConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetContinuousDeploymentPolicyConfig"},"GetDistribution":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to get the information about a web distribution","accessLevel":"Read","resourceTypes":[{"name":"distribution","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetDistribution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetDistribution"},"GetDistributionConfig":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to get the configuration information about a distribution","accessLevel":"Read","resourceTypes":[{"name":"distribution","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetDistributionConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetDistributionConfig"},"GetDistributionTenant":{"conditionKeys":[],"resources":[{"name":"distribution-tenant"}],"description":"Grants permission to get information about a distribution tenant","accessLevel":"Read","resourceTypes":[{"name":"distribution-tenant","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetDistributionTenant.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetDistributionTenant"},"GetDistributionTenantByDomain":{"conditionKeys":[],"resources":[{"name":"distribution-tenant"}],"description":"Grants permission to get information about a distribution tenant by the associated domain","accessLevel":"Read","resourceTypes":[{"name":"distribution-tenant","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetDistributionTenantByDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetDistributionTenantByDomain"},"GetFieldLevelEncryption":{"conditionKeys":[],"resources":[{"name":"field-level-encryption-config"}],"description":"Grants permission to get the field-level encryption configuration information","accessLevel":"Read","resourceTypes":[{"name":"field-level-encryption-config","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetFieldLevelEncryption.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetFieldLevelEncryption"},"GetFieldLevelEncryptionConfig":{"conditionKeys":[],"resources":[{"name":"field-level-encryption-config"}],"description":"Grants permission to get the field-level encryption configuration information","accessLevel":"Read","resourceTypes":[{"name":"field-level-encryption-config","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetFieldLevelEncryptionConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetFieldLevelEncryptionConfig"},"GetFieldLevelEncryptionProfile":{"conditionKeys":[],"resources":[{"name":"field-level-encryption-profile"}],"description":"Grants permission to get the field-level encryption configuration information","accessLevel":"Read","resourceTypes":[{"name":"field-level-encryption-profile","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetFieldLevelEncryptionProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetFieldLevelEncryptionProfile"},"GetFieldLevelEncryptionProfileConfig":{"conditionKeys":[],"resources":[{"name":"field-level-encryption-profile"}],"description":"Grants permission to get the field-level encryption profile configuration information","accessLevel":"Read","resourceTypes":[{"name":"field-level-encryption-profile","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetFieldLevelEncryptionProfileConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetFieldLevelEncryptionProfileConfig"},"GetFunction":{"conditionKeys":[],"resources":[{"name":"function"}],"description":"Grants permission to get a CloudFront function's code","accessLevel":"Read","resourceTypes":[{"name":"function","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetFunction.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetFunction"},"GetInvalidation":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to get the information about an invalidation","accessLevel":"Read","resourceTypes":[{"name":"distribution","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetInvalidation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetInvalidation"},"GetInvalidationForDistributionTenant":{"conditionKeys":[],"resources":[{"name":"distribution-tenant"}],"description":"Grants permission to get information about an invalidation for a distribution tenant","accessLevel":"Read","resourceTypes":[{"name":"distribution-tenant","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetInvalidationForDistributionTenant.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetInvalidationForDistributionTenant"},"GetKeyGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a key group","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetKeyGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetKeyGroup"},"GetKeyGroupConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a key group configuration","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetKeyGroupConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetKeyGroupConfig"},"GetManagedCertificateDetails":{"conditionKeys":[],"resources":[{"name":"distribution-tenant"}],"description":"Grants permission to get details about a CloudFront managed certificate","accessLevel":"Read","resourceTypes":[{"name":"distribution-tenant","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetManagedCertificateDetails.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetManagedCertificateDetails"},"GetMonitoringSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about whether additional CloudWatch metrics are enabled for the specified CloudFront distribution","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetMonitoringSubscription.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetMonitoringSubscription"},"GetOriginAccessControl":{"conditionKeys":[],"resources":[{"name":"origin-access-control"}],"description":"Grants permission to get the origin access control","accessLevel":"Read","resourceTypes":[{"name":"origin-access-control","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetOriginAccessControl.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetOriginAccessControl"},"GetOriginAccessControlConfig":{"conditionKeys":[],"resources":[{"name":"origin-access-control"}],"description":"Grants permission to get the origin access control configuration","accessLevel":"Read","resourceTypes":[{"name":"origin-access-control","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetOriginAccessControlConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetOriginAccessControlConfig"},"GetOriginRequestPolicy":{"conditionKeys":[],"resources":[{"name":"origin-request-policy"}],"description":"Grants permission to get the origin request policy","accessLevel":"Read","resourceTypes":[{"name":"origin-request-policy","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetOriginRequestPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetOriginRequestPolicy"},"GetOriginRequestPolicyConfig":{"conditionKeys":[],"resources":[{"name":"origin-request-policy"}],"description":"Grants permission to get the origin request policy configuration","accessLevel":"Read","resourceTypes":[{"name":"origin-request-policy","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetOriginRequestPolicyConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetOriginRequestPolicyConfig"},"GetPublicKey":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the public key information","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetPublicKey.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetPublicKey"},"GetPublicKeyConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the public key configuration information","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetPublicKeyConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetPublicKeyConfig"},"GetRealtimeLogConfig":{"conditionKeys":[],"resources":[{"name":"realtime-log-config"}],"description":"Grants permission to get a real-time log configuration","accessLevel":"Read","resourceTypes":[{"name":"realtime-log-config","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetRealtimeLogConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetRealtimeLogConfig"},"GetResourcePolicy":{"conditionKeys":[],"resources":[{"name":"vpcorigin"}],"description":"Grants permission to get the information about a resource's policy document","accessLevel":"Read","resourceTypes":[{"name":"vpcorigin","required":false}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetResourcePolicy"},"GetResponseHeadersPolicy":{"conditionKeys":[],"resources":[{"name":"response-headers-policy"}],"description":"Grants permission to get the response headers policy","accessLevel":"Read","resourceTypes":[{"name":"response-headers-policy","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetResponseHeadersPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetResponseHeadersPolicy"},"GetResponseHeadersPolicyConfig":{"conditionKeys":[],"resources":[{"name":"response-headers-policy"}],"description":"Grants permission to get the response headers policy configuration","accessLevel":"Read","resourceTypes":[{"name":"response-headers-policy","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetResponseHeadersPolicyConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetResponseHeadersPolicyConfig"},"GetSavingsPlan":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a savings plan","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cf-api-permissions-ref.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetSavingsPlan"},"GetStreamingDistribution":{"conditionKeys":[],"resources":[{"name":"streaming-distribution"}],"description":"Grants permission to get the information about an RTMP distribution","accessLevel":"Read","resourceTypes":[{"name":"streaming-distribution","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetStreamingDistribution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetStreamingDistribution"},"GetStreamingDistributionConfig":{"conditionKeys":[],"resources":[{"name":"streaming-distribution"}],"description":"Grants permission to get the configuration information about a streaming distribution","accessLevel":"Read","resourceTypes":[{"name":"streaming-distribution","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetStreamingDistributionConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetStreamingDistributionConfig"},"GetTrustStore":{"conditionKeys":[],"resources":[{"name":"trust-store"}],"description":"Grants permission to get information about a trust store","accessLevel":"Read","resourceTypes":[{"name":"trust-store","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetTrustStore.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetTrustStore"},"GetVpcOrigin":{"conditionKeys":[],"resources":[{"name":"vpcorigin"}],"description":"Grants permission to get the information about a VPC origin","accessLevel":"Read","resourceTypes":[{"name":"vpcorigin","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetVpcOrigin.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-GetVpcOrigin"},"ListAnycastIpLists":{"conditionKeys":[],"resources":[],"description":"Grants permission to list your Anycast static IP lists","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListAnycastIpLists.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListAnycastIpLists"},"ListCachePolicies":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all cache policies that have been created in CloudFront for this account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListCachePolicies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListCachePolicies"},"ListCloudFrontOriginAccessIdentities":{"conditionKeys":[],"resources":[],"description":"Grants permission to list your CloudFront origin access identities","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListCloudFrontOriginAccessIdentities.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListCloudFrontOriginAccessIdentities"},"ListConflictingAliases":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to list all aliases that conflict with the given alias in CloudFront","accessLevel":"List","resourceTypes":[{"name":"distribution","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListConflictingAliases.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListConflictingAliases"},"ListConnectionFunctions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the connection functions in your AWS account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListConnectionFunctions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListConnectionFunctions"},"ListConnectionGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the connection groups in your AWS account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListConnectionGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListConnectionGroups"},"ListContinuousDeploymentPolicies":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all continuous-deployment policies in the account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListContinuousDeploymentPolicies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListContinuousDeploymentPolicies"},"ListDistributionTenants":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the distribution tenants in your AWS account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionTenants.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListDistributionTenants"},"ListDistributionTenantsByCustomization":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the distribution tenants by the customization that you specify","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionTenantsByCustomization.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListDistributionTenantsByCustomization"},"ListDistributions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the distributions associated with your AWS account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListDistributions"},"ListDistributionsByAnycastIpListId":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the distributions in your account that are associated with the specified AnycastIpListId","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByAnycastIpListId.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListDistributionsByAnycastIpListId"},"ListDistributionsByCachePolicyId":{"conditionKeys":[],"resources":[],"description":"Grants permission to list distribution IDs for distributions that have a cache behavior that's associated with the specified cache policy","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByCachePolicyId.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListDistributionsByCachePolicyId"},"ListDistributionsByConnectionFunction":{"conditionKeys":[],"resources":[{"name":"connection-function"}],"description":"Grants permission to list summaries for distributions associated with the specified connection function","accessLevel":"List","resourceTypes":[{"name":"connection-function","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByConnectionFunction.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListDistributionsByConnectionFunction"},"ListDistributionsByConnectionMode":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the distributions by the specified connection mode","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByConnectionMode.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListDistributionsByConnectionMode"},"ListDistributionsByKeyGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to list distribution IDs for distributions that have a cache behavior that's associated with the specified key group","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByKeyGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListDistributionsByKeyGroup"},"ListDistributionsByLambdaFunction":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the distributions associated a Lambda function","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cf-api-permissions-ref.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListDistributionsByLambdaFunction"},"ListDistributionsByOriginRequestPolicyId":{"conditionKeys":[],"resources":[],"description":"Grants permission to list distribution IDs for distributions that have a cache behavior that's associated with the specified origin request policy","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByOriginRequestPolicyId.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListDistributionsByOriginRequestPolicyId"},"ListDistributionsByRealtimeLogConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of distributions that have a cache behavior that's associated with the specified real-time log configuration","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByRealtimeLogConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListDistributionsByRealtimeLogConfig"},"ListDistributionsByResponseHeadersPolicyId":{"conditionKeys":[],"resources":[],"description":"Grants permission to list distribution IDs for distributions that have a cache behavior that's associated with the specified response headers policy","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByResponseHeadersPolicyId.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListDistributionsByResponseHeadersPolicyId"},"ListDistributionsByTrustStore":{"conditionKeys":[],"resources":[{"name":"trust-store"}],"description":"Grants permission to list summaries for distributions associated with the specified trust store","accessLevel":"List","resourceTypes":[{"name":"trust-store","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByTrustStore.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListDistributionsByTrustStore"},"ListDistributionsByVpcOriginId":{"conditionKeys":[],"resources":[],"description":"Grants permission to list IDs for distributions associated with the specified VPC origin","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByVpcOriginId.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListDistributionsByVpcOriginId"},"ListDistributionsByWebACLId":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the distributions associated with your AWS account with given AWS WAF web ACL","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByWebACLId.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListDistributionsByWebACLId"},"ListDomainConflicts":{"conditionKeys":[],"resources":[{"name":"distribution"},{"name":"distribution-tenant"}],"description":"Grants permission to list domain conflicts for a specified domain","accessLevel":"List","resourceTypes":[{"name":"distribution","required":false},{"name":"distribution-tenant","required":false}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDomainConflicts.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListDomainConflicts"},"ListFieldLevelEncryptionConfigs":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all field-level encryption configurations that have been created in CloudFront for this account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListFieldLevelEncryptionConfigs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListFieldLevelEncryptionConfigs"},"ListFieldLevelEncryptionProfiles":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all field-level encryption profiles that have been created in CloudFront for this account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListFieldLevelEncryptionProfiles.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListFieldLevelEncryptionProfiles"},"ListFunctions":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of CloudFront functions","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListFunctions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListFunctions"},"ListInvalidations":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to list your invalidation batches","accessLevel":"List","resourceTypes":[{"name":"distribution","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListInvalidations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListInvalidations"},"ListInvalidationsForDistributionTenant":{"conditionKeys":[],"resources":[{"name":"distribution-tenant"}],"description":"Grants permission to list the invalidations for a distribution tenant","accessLevel":"List","resourceTypes":[{"name":"distribution-tenant","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListInvalidationsForDistributionTenant.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListInvalidationsForDistributionTenant"},"ListKeyGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all key groups that have been created in CloudFront for this account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListKeyGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListKeyGroups"},"ListKeyValueStores":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of CloudFront KeyValueStores","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListKeyValueStores.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListKeyValueStores"},"ListOriginAccessControls":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all origin access controls in the account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListOriginAccessControls.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListOriginAccessControls"},"ListOriginRequestPolicies":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all origin request policies that have been created in CloudFront for this account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListOriginRequestPolicies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListOriginRequestPolicies"},"ListPublicKeys":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all public keys that have been added to CloudFront for this account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListPublicKeys.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListPublicKeys"},"ListRateCards":{"conditionKeys":[],"resources":[],"description":"Grants permission to list CloudFront rate cards for the account","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cf-api-permissions-ref.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListRateCards"},"ListRealtimeLogConfigs":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of real-time log configurations","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListRealtimeLogConfigs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListRealtimeLogConfigs"},"ListResponseHeadersPolicies":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all response headers policies that have been created in CloudFront for this account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListResponseHeadersPolicies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListResponseHeadersPolicies"},"ListSavingsPlans":{"conditionKeys":[],"resources":[],"description":"Grants permission to list savings plans in the account","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cf-api-permissions-ref.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListSavingsPlans"},"ListStreamingDistributions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list your RTMP distributions","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListStreamingDistributions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListStreamingDistributions"},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"anycast-ip-list"},{"name":"connection-function"},{"name":"connection-group"},{"name":"distribution"},{"name":"distribution-tenant"},{"name":"trust-store"},{"name":"vpcorigin"}],"description":"Grants permission to list tags for a CloudFront resource","accessLevel":"Read","resourceTypes":[{"name":"anycast-ip-list","required":false},{"name":"connection-function","required":false},{"name":"connection-group","required":false},{"name":"distribution","required":false},{"name":"distribution-tenant","required":false},{"name":"trust-store","required":false},{"name":"vpcorigin","required":false}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListTagsForResource"},"ListTrustStores":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the trust stores in your AWS account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListTrustStores.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListTrustStores"},"ListUsages":{"conditionKeys":[],"resources":[],"description":"Grants permission to list CloudFront usage","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cf-api-permissions-ref.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListUsages"},"ListVpcOrigins":{"conditionKeys":[],"resources":[],"description":"Grants permission to list VPC origins","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListVpcOrigins.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-ListVpcOrigins"},"PublishConnectionFunction":{"conditionKeys":[],"resources":[{"name":"connection-function"}],"description":"Grants permission to publish a connection function","accessLevel":"Write","resourceTypes":[{"name":"connection-function","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_PublishConnectionFunction.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-PublishConnectionFunction"},"PublishFunction":{"conditionKeys":[],"resources":[{"name":"function"}],"description":"Grants permission to publish a CloudFront function","accessLevel":"Write","resourceTypes":[{"name":"function","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_PublishFunction.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-PublishFunction"},"PutResourcePolicy":{"conditionKeys":[],"resources":[{"name":"vpcorigin"}],"description":"Grants permission to update or create a resource's policy document","accessLevel":"Write","resourceTypes":[{"name":"vpcorigin","required":false}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_PutResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-PutResourcePolicy"},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"anycast-ip-list"},{"name":"connection-function"},{"name":"connection-group"},{"name":"distribution"},{"name":"distribution-tenant"},{"name":"streaming-distribution"},{"name":"trust-store"},{"name":"vpcorigin"}],"description":"Grants permission to add tags to a CloudFront resource","accessLevel":"Tagging","resourceTypes":[{"name":"anycast-ip-list","required":false},{"name":"connection-function","required":false},{"name":"connection-group","required":false},{"name":"distribution","required":false},{"name":"distribution-tenant","required":false},{"name":"streaming-distribution","required":false},{"name":"trust-store","required":false},{"name":"vpcorigin","required":false}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-TagResource"},"TestConnectionFunction":{"conditionKeys":[],"resources":[{"name":"connection-function"}],"description":"Grants permission to test a connection function","accessLevel":"Write","resourceTypes":[{"name":"connection-function","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_TestConnectionFunction.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-TestConnectionFunction"},"TestFunction":{"conditionKeys":[],"resources":[{"name":"function"}],"description":"Grants permission to test a CloudFront function","accessLevel":"Write","resourceTypes":[{"name":"function","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_TestFunction.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-TestFunction"},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"anycast-ip-list"},{"name":"connection-function"},{"name":"connection-group"},{"name":"distribution"},{"name":"distribution-tenant"},{"name":"streaming-distribution"},{"name":"trust-store"},{"name":"vpcorigin"}],"description":"Grants permission to remove tags from a CloudFront resource","accessLevel":"Tagging","resourceTypes":[{"name":"anycast-ip-list","required":false},{"name":"connection-function","required":false},{"name":"connection-group","required":false},{"name":"distribution","required":false},{"name":"distribution-tenant","required":false},{"name":"streaming-distribution","required":false},{"name":"trust-store","required":false},{"name":"vpcorigin","required":false}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-UntagResource"},"UpdateAnycastIpList":{"conditionKeys":[],"resources":[{"name":"anycast-ip-list"}],"description":"Grants permission to update an Anycast static IP list","accessLevel":"Write","resourceTypes":[{"name":"anycast-ip-list","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateAnycastIpList.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-UpdateAnycastIpList"},"UpdateCachePolicy":{"conditionKeys":[],"resources":[{"name":"cache-policy"}],"description":"Grants permission to update a cache policy","accessLevel":"Write","resourceTypes":[{"name":"cache-policy","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateCachePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-UpdateCachePolicy"},"UpdateCloudFrontOriginAccessIdentity":{"conditionKeys":[],"resources":[{"name":"origin-access-identity"}],"description":"Grants permission to set the configuration for a CloudFront origin access identity","accessLevel":"Write","resourceTypes":[{"name":"origin-access-identity","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateCloudFrontOriginAccessIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-UpdateCloudFrontOriginAccessIdentity"},"UpdateConnectionFunction":{"conditionKeys":[],"resources":[{"name":"connection-function"}],"description":"Grants permission to update a connection function","accessLevel":"Write","resourceTypes":[{"name":"connection-function","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateConnectionFunction.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-UpdateConnectionFunction"},"UpdateConnectionGroup":{"conditionKeys":[],"resources":[{"name":"connection-group"}],"description":"Grants permission to update a connection group","accessLevel":"Write","resourceTypes":[{"name":"connection-group","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateConnectionGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-UpdateConnectionGroup"},"UpdateContinuousDeploymentPolicy":{"conditionKeys":[],"resources":[{"name":"continuous-deployment-policy"}],"description":"Grants permission to update a continuous-deployment policy","accessLevel":"Write","resourceTypes":[{"name":"continuous-deployment-policy","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateContinuousDeploymentPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-UpdateContinuousDeploymentPolicy"},"UpdateDistribution":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to update the configuration for a web distribution","accessLevel":"Write","resourceTypes":[{"name":"distribution","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateDistribution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-UpdateDistribution"},"UpdateDistributionTenant":{"conditionKeys":[],"resources":[{"name":"distribution-tenant"}],"description":"Grants permission to update a distribution tenant","accessLevel":"Write","resourceTypes":[{"name":"distribution-tenant","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateDistributionTenant.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-UpdateDistributionTenant"},"UpdateDistributionWithStagingConfig":{"conditionKeys":[],"resources":[{"name":"distribution"}],"description":"Grants permission to copy the configuration from a staging web distribution to its corresponding primary web distribution","accessLevel":"Write","resourceTypes":[{"name":"distribution","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateDistributionWithStagingConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-UpdateDistributionWithStagingConfig"},"UpdateDomainAssociation":{"conditionKeys":[],"resources":[{"name":"distribution"},{"name":"distribution-tenant"}],"description":"Grants permission to update a domain association","accessLevel":"Write","resourceTypes":[{"name":"distribution","required":false},{"name":"distribution-tenant","required":false}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateDomainAssociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-UpdateDomainAssociation"},"UpdateFieldLevelEncryptionConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a field-level encryption configuration","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateFieldLevelEncryptionConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-UpdateFieldLevelEncryptionConfig"},"UpdateFieldLevelEncryptionProfile":{"conditionKeys":[],"resources":[{"name":"field-level-encryption-profile"}],"description":"Grants permission to update a field-level encryption profile","accessLevel":"Write","resourceTypes":[{"name":"field-level-encryption-profile","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateFieldLevelEncryptionProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-UpdateFieldLevelEncryptionProfile"},"UpdateFunction":{"conditionKeys":[],"resources":[{"name":"function"}],"description":"Grants permission to update a CloudFront function","accessLevel":"Write","resourceTypes":[{"name":"function","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateFunction.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-UpdateFunction"},"UpdateKeyGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a key group","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateKeyGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-UpdateKeyGroup"},"UpdateKeyValueStore":{"conditionKeys":[],"resources":[{"name":"key-value-store"}],"description":"Grants permission to update a CloudFront KeyValueStore","accessLevel":"Write","resourceTypes":[{"name":"key-value-store","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateKeyValueStore.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-UpdateKeyValueStore"},"UpdateOriginAccessControl":{"conditionKeys":[],"resources":[{"name":"origin-access-control"}],"description":"Grants permission to update an origin access control","accessLevel":"Write","resourceTypes":[{"name":"origin-access-control","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateOriginAccessControl.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-UpdateOriginAccessControl"},"UpdateOriginRequestPolicy":{"conditionKeys":[],"resources":[{"name":"origin-request-policy"}],"description":"Grants permission to update an origin request policy","accessLevel":"Write","resourceTypes":[{"name":"origin-request-policy","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateOriginRequestPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-UpdateOriginRequestPolicy"},"UpdatePublicKey":{"conditionKeys":[],"resources":[],"description":"Grants permission to update public key information","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdatePublicKey.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-UpdatePublicKey"},"UpdateRealtimeLogConfig":{"conditionKeys":[],"resources":[{"name":"realtime-log-config"}],"description":"Grants permission to update a real-time log configuration","accessLevel":"Write","resourceTypes":[{"name":"realtime-log-config","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateRealtimeLogConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-UpdateRealtimeLogConfig"},"UpdateResponseHeadersPolicy":{"conditionKeys":[],"resources":[{"name":"response-headers-policy"}],"description":"Grants permission to update a response headers policy","accessLevel":"Write","resourceTypes":[{"name":"response-headers-policy","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateResponseHeadersPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-UpdateResponseHeadersPolicy"},"UpdateSavingsPlan":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a savings plan","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cf-api-permissions-ref.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-UpdateSavingsPlan"},"UpdateStreamingDistribution":{"conditionKeys":[],"resources":[{"name":"streaming-distribution"}],"description":"Grants permission to update the configuration for an RTMP distribution","accessLevel":"Write","resourceTypes":[{"name":"streaming-distribution","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateStreamingDistribution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-UpdateStreamingDistribution"},"UpdateTrustStore":{"conditionKeys":[],"resources":[{"name":"trust-store"}],"description":"Grants permission to update a trust store","accessLevel":"Write","resourceTypes":[{"name":"trust-store","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateTrustStore.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-UpdateTrustStore"},"UpdateVpcOrigin":{"conditionKeys":[],"resources":[{"name":"vpcorigin"}],"description":"Grants permission to update a VPC origin","accessLevel":"Write","resourceTypes":[{"name":"vpcorigin","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateVpcOrigin.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-UpdateVpcOrigin"},"VerifyDnsConfiguration":{"conditionKeys":[],"resources":[{"name":"distribution-tenant"}],"description":"Grants permission to verify the DNS configuration for a specified domain","accessLevel":"Read","resourceTypes":[{"name":"distribution-tenant","required":false}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_VerifyDnsConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html#amazoncloudfront-VerifyDnsConfiguration"}},"resources":[{"name":"anycast-ip-list","arnFormats":["arn:${Partition}:cloudfront::${Account}:anycast-ip-list/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"cache-policy","arnFormats":["arn:${Partition}:cloudfront::${Account}:cache-policy/${Id}"],"conditionKeys":[]},{"name":"connection-function","arnFormats":["arn:${Partition}:cloudfront::${Account}:connection-function/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"connection-group","arnFormats":["arn:${Partition}:cloudfront::${Account}:connection-group/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"continuous-deployment-policy","arnFormats":["arn:${Partition}:cloudfront::${Account}:continuous-deployment-policy/${Id}"],"conditionKeys":[]},{"name":"distribution","arnFormats":["arn:${Partition}:cloudfront::${Account}:distribution/${DistributionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"distribution-tenant","arnFormats":["arn:${Partition}:cloudfront::${Account}:distribution-tenant/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"field-level-encryption-config","arnFormats":["arn:${Partition}:cloudfront::${Account}:field-level-encryption-config/${Id}"],"conditionKeys":[]},{"name":"field-level-encryption-profile","arnFormats":["arn:${Partition}:cloudfront::${Account}:field-level-encryption-profile/${Id}"],"conditionKeys":[]},{"name":"function","arnFormats":["arn:${Partition}:cloudfront::${Account}:function/${Name}"],"conditionKeys":[]},{"name":"key-value-store","arnFormats":["arn:${Partition}:cloudfront::${Account}:key-value-store/${Name}"],"conditionKeys":[]},{"name":"origin-access-control","arnFormats":["arn:${Partition}:cloudfront::${Account}:origin-access-control/${Id}"],"conditionKeys":[]},{"name":"origin-access-identity","arnFormats":["arn:${Partition}:cloudfront::${Account}:origin-access-identity/${Id}"],"conditionKeys":[]},{"name":"origin-request-policy","arnFormats":["arn:${Partition}:cloudfront::${Account}:origin-request-policy/${Id}"],"conditionKeys":[]},{"name":"realtime-log-config","arnFormats":["arn:${Partition}:cloudfront::${Account}:realtime-log-config/${Name}"],"conditionKeys":[]},{"name":"response-headers-policy","arnFormats":["arn:${Partition}:cloudfront::${Account}:response-headers-policy/${Id}"],"conditionKeys":[]},{"name":"streaming-distribution","arnFormats":["arn:${Partition}:cloudfront::${Account}:streaming-distribution/${DistributionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"trust-store","arnFormats":["arn:${Partition}:cloudfront::${Account}:trust-store/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"vpcorigin","arnFormats":["arn:${Partition}:cloudfront::${Account}:vpcorigin/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html"}

package/src/data/servicereference/services/cloudhsm.json

@@ -1 +1 @@
-{"name":"cloudhsm","actions":{"CopyBackupToRegion":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"backup"}],"description":"Grants permission to create a copy of a backup in the specified region","accessLevel":"Write","resourceTypes":[{"name":"backup","required":true}],"dependentActions":["cloudhsm:CopyBackupToRegion","cloudhsm:TagResource","cloudhsm:UntagResource"]},"CreateCluster":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"backup"}],"description":"Grants permission to create a new AWS CloudHSM cluster","accessLevel":"Write","resourceTypes":[{"name":"backup","required":false}],"dependentActions":["cloudhsm:TagResource","ec2:AuthorizeSecurityGroupEgress","ec2:AuthorizeSecurityGroupIngress","ec2:CreateSecurityGroup","ec2:DescribeSecurityGroups","ec2:DescribeSubnets","ec2:RevokeSecurityGroupEgress","iam:CreateServiceLinkedRole"]},"CreateHsm":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to create a new hardware security module (HSM) in the specified AWS CloudHSM cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}],"dependentActions":["ec2:AuthorizeSecurityGroupEgress","ec2:AuthorizeSecurityGroupIngress","ec2:CreateNetworkInterface","ec2:CreateSecurityGroup","ec2:DeleteNetworkInterface","ec2:DescribeNetworkInterfaces","ec2:DescribeSecurityGroups","ec2:DescribeSubnets","ec2:RevokeSecurityGroupEgress"]},"DeleteBackup":{"conditionKeys":[],"resources":[{"name":"backup"}],"description":"Grants permission to delete the specified CloudHSM backup","accessLevel":"Write","resourceTypes":[{"name":"backup","required":true}]},"DeleteCluster":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to delete the specified AWS CloudHSM cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}],"dependentActions":["ec2:DeleteNetworkInterface","ec2:DeleteSecurityGroup"]},"DeleteHsm":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the specified HSM","accessLevel":"Write","resourceTypes":[],"dependentActions":["ec2:DeleteNetworkInterface"]},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[{"name":"backup"}],"description":"Grants permission to delete the policy attached to CloudHSM resources","accessLevel":"Write","resourceTypes":[{"name":"backup","required":true}]},"DescribeBackups":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about backups of AWS CloudHSM clusters","accessLevel":"Read","resourceTypes":[]},"DescribeClusters":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about AWS CloudHSM clusters","accessLevel":"Read","resourceTypes":[]},"GetResourcePolicy":{"conditionKeys":[],"resources":[{"name":"backup"}],"description":"Grants permission to get information about the policy attached to a AWS CloudHSM resource","accessLevel":"Read","resourceTypes":[{"name":"backup","required":true}]},"InitializeCluster":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to claim an AWS CloudHSM cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"ListTags":{"conditionKeys":[],"resources":[{"name":"backup"},{"name":"cluster"}],"description":"Grants permission to get a list of tags for the specified AWS CloudHSM cluster","accessLevel":"Read","resourceTypes":[{"name":"backup","required":false},{"name":"cluster","required":false}]},"ModifyBackupAttributes":{"conditionKeys":[],"resources":[{"name":"backup"}],"description":"Grants permission to modify attributes for an AWS CloudHSM backup","accessLevel":"Write","resourceTypes":[{"name":"backup","required":true}]},"ModifyCluster":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to modify AWS CloudHSM cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}],"dependentActions":["ec2:DescribeSubnets"]},"PutResourcePolicy":{"conditionKeys":[],"resources":[{"name":"backup"}],"description":"Grants permission to attach a policy to an AWS CloudHSM resource","accessLevel":"Write","resourceTypes":[{"name":"backup","required":true}]},"RestoreBackup":{"conditionKeys":[],"resources":[{"name":"backup"}],"description":"Grants permission to restore the specified CloudHSM backup","accessLevel":"Write","resourceTypes":[{"name":"backup","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"backup"},{"name":"cluster"}],"description":"Grants permission to add or overwrite one or more tags for the specified AWS CloudHSM cluster","accessLevel":"Tagging","resourceTypes":[{"name":"backup","required":false},{"name":"cluster","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"backup"},{"name":"cluster"}],"description":"Grants permission to remove the specified tag or tags from the specified AWS CloudHSM cluster","accessLevel":"Tagging","resourceTypes":[{"name":"backup","required":false},{"name":"cluster","required":false}]}},"resources":[{"name":"backup","arnFormats":["arn:${Partition}:cloudhsm:${Region}:${Account}:backup/${CloudHsmBackupInstanceName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"cluster","arnFormats":["arn:${Partition}:cloudhsm:${Region}:${Account}:cluster/${CloudHsmClusterInstanceName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"}}}
+{"name":"cloudhsm","actions":{"CopyBackupToRegion":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"backup"}],"description":"Grants permission to create a copy of a backup in the specified region","accessLevel":"Write","resourceTypes":[{"name":"backup","required":true}],"dependentActions":["cloudhsm:CopyBackupToRegion","cloudhsm:TagResource","cloudhsm:UntagResource"],"operationUrl":"https://docs.aws.amazon.com/cloudhsm/latest/APIReference/API_CopyBackupToRegion.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudhsm.html#awscloudhsm-CopyBackupToRegion"},"CreateCluster":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"backup"}],"description":"Grants permission to create a new AWS CloudHSM cluster","accessLevel":"Write","resourceTypes":[{"name":"backup","required":false}],"dependentActions":["cloudhsm:TagResource","ec2:AuthorizeSecurityGroupEgress","ec2:AuthorizeSecurityGroupIngress","ec2:CreateSecurityGroup","ec2:DescribeSecurityGroups","ec2:DescribeSubnets","ec2:RevokeSecurityGroupEgress","iam:CreateServiceLinkedRole"],"operationUrl":"https://docs.aws.amazon.com/cloudhsm/latest/APIReference/API_CreateCluster.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudhsm.html#awscloudhsm-CreateCluster"},"CreateHsm":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to create a new hardware security module (HSM) in the specified AWS CloudHSM cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}],"dependentActions":["ec2:AuthorizeSecurityGroupEgress","ec2:AuthorizeSecurityGroupIngress","ec2:CreateNetworkInterface","ec2:CreateSecurityGroup","ec2:DeleteNetworkInterface","ec2:DescribeNetworkInterfaces","ec2:DescribeSecurityGroups","ec2:DescribeSubnets","ec2:RevokeSecurityGroupEgress"],"operationUrl":"https://docs.aws.amazon.com/cloudhsm/latest/APIReference/API_CreateHsm.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudhsm.html#awscloudhsm-CreateHsm"},"DeleteBackup":{"conditionKeys":[],"resources":[{"name":"backup"}],"description":"Grants permission to delete the specified CloudHSM backup","accessLevel":"Write","resourceTypes":[{"name":"backup","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudhsm/latest/APIReference/API_DeleteBackup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudhsm.html#awscloudhsm-DeleteBackup"},"DeleteCluster":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to delete the specified AWS CloudHSM cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}],"dependentActions":["ec2:DeleteNetworkInterface","ec2:DeleteSecurityGroup"],"operationUrl":"https://docs.aws.amazon.com/cloudhsm/latest/APIReference/API_DeleteCluster.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudhsm.html#awscloudhsm-DeleteCluster"},"DeleteHsm":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the specified HSM","accessLevel":"Write","resourceTypes":[],"dependentActions":["ec2:DeleteNetworkInterface"],"operationUrl":"https://docs.aws.amazon.com/cloudhsm/latest/APIReference/API_DeleteHsm.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudhsm.html#awscloudhsm-DeleteHsm"},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[{"name":"backup"}],"description":"Grants permission to delete the policy attached to CloudHSM resources","accessLevel":"Write","resourceTypes":[{"name":"backup","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudhsm/latest/APIReference/API_DeleteResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudhsm.html#awscloudhsm-DeleteResourcePolicy"},"DescribeBackups":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about backups of AWS CloudHSM clusters","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudhsm/latest/APIReference/API_DescribeBackups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudhsm.html#awscloudhsm-DescribeBackups"},"DescribeClusters":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about AWS CloudHSM clusters","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudhsm/latest/APIReference/API_DescribeClusters.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudhsm.html#awscloudhsm-DescribeClusters"},"GetResourcePolicy":{"conditionKeys":[],"resources":[{"name":"backup"}],"description":"Grants permission to get information about the policy attached to a AWS CloudHSM resource","accessLevel":"Read","resourceTypes":[{"name":"backup","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudhsm/latest/APIReference/API_GetResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudhsm.html#awscloudhsm-GetResourcePolicy"},"InitializeCluster":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to claim an AWS CloudHSM cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudhsm/latest/APIReference/API_InitializeCluster.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudhsm.html#awscloudhsm-InitializeCluster"},"ListTags":{"conditionKeys":[],"resources":[{"name":"backup"},{"name":"cluster"}],"description":"Grants permission to get a list of tags for the specified AWS CloudHSM cluster","accessLevel":"Read","resourceTypes":[{"name":"backup","required":false},{"name":"cluster","required":false}],"operationUrl":"https://docs.aws.amazon.com/cloudhsm/latest/APIReference/API_ListTags.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudhsm.html#awscloudhsm-ListTags"},"ModifyBackupAttributes":{"conditionKeys":[],"resources":[{"name":"backup"}],"description":"Grants permission to modify attributes for an AWS CloudHSM backup","accessLevel":"Write","resourceTypes":[{"name":"backup","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudhsm/latest/APIReference/API_ModifyBackupAttributes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudhsm.html#awscloudhsm-ModifyBackupAttributes"},"ModifyCluster":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to modify AWS CloudHSM cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}],"dependentActions":["ec2:DescribeSubnets"],"operationUrl":"https://docs.aws.amazon.com/cloudhsm/latest/APIReference/API_ModifyCluster.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudhsm.html#awscloudhsm-ModifyCluster"},"PutResourcePolicy":{"conditionKeys":[],"resources":[{"name":"backup"}],"description":"Grants permission to attach a policy to an AWS CloudHSM resource","accessLevel":"Write","resourceTypes":[{"name":"backup","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudhsm/latest/APIReference/API_PutResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudhsm.html#awscloudhsm-PutResourcePolicy"},"RestoreBackup":{"conditionKeys":[],"resources":[{"name":"backup"}],"description":"Grants permission to restore the specified CloudHSM backup","accessLevel":"Write","resourceTypes":[{"name":"backup","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudhsm/latest/APIReference/API_RestoreBackup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudhsm.html#awscloudhsm-RestoreBackup"},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"backup"},{"name":"cluster"}],"description":"Grants permission to add or overwrite one or more tags for the specified AWS CloudHSM cluster","accessLevel":"Tagging","resourceTypes":[{"name":"backup","required":false},{"name":"cluster","required":false}],"operationUrl":"https://docs.aws.amazon.com/cloudhsm/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudhsm.html#awscloudhsm-TagResource"},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"backup"},{"name":"cluster"}],"description":"Grants permission to remove the specified tag or tags from the specified AWS CloudHSM cluster","accessLevel":"Tagging","resourceTypes":[{"name":"backup","required":false},{"name":"cluster","required":false}],"operationUrl":"https://docs.aws.amazon.com/cloudhsm/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudhsm.html#awscloudhsm-UntagResource"}},"resources":[{"name":"backup","arnFormats":["arn:${Partition}:cloudhsm:${Region}:${Account}:backup/${CloudHsmBackupInstanceName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"cluster","arnFormats":["arn:${Partition}:cloudhsm:${Region}:${Account}:cluster/${CloudHsmClusterInstanceName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudhsm.html"}

package/src/data/servicereference/services/cloudsearch.json

@@ -1 +1 @@
-{"name":"cloudsearch","actions":{"AddTags":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Attaches resource tags to an Amazon CloudSearch domain","accessLevel":"Tagging","resourceTypes":[{"name":"domain","required":true}]},"BuildSuggesters":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Indexes the search suggestions","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"CreateDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Creates a new search domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DefineAnalysisScheme":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Configures an analysis scheme that can be applied to a text or text-array field to define language-specific text processing options","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DefineExpression":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Configures an Expression for the search domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DefineIndexField":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Configures an IndexField for the search domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DefineSuggester":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Configures a suggester for a domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DeleteAnalysisScheme":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Deletes an analysis scheme","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DeleteDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Permanently deletes a search domain and all of its data","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DeleteExpression":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Removes an Expression from the search domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DeleteIndexField":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Removes an IndexField from the search domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DeleteSuggester":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Deletes a suggester","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DescribeAnalysisSchemes":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Gets the analysis schemes configured for a domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"DescribeAvailabilityOptions":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Gets the availability options configured for a domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"DescribeDomainEndpointOptions":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Gets the domain endpoint options configured for a domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"DescribeDomains":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Gets information about the search domains owned by this account","accessLevel":"List","resourceTypes":[{"name":"domain","required":true}]},"DescribeExpressions":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Gets the expressions configured for the search domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"DescribeIndexFields":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Gets information about the index fields configured for the search domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"DescribeScalingParameters":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Gets the scaling parameters configured for a domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"DescribeServiceAccessPolicies":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Gets information about the access policies that control access to the domain's document and search endpoints","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"DescribeSuggesters":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Gets the suggesters configured for a domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"IndexDocuments":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Tells the search domain to start indexing its documents using the latest indexing options","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"ListDomainNames":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Lists all search domains owned by an account","accessLevel":"List","resourceTypes":[{"name":"domain","required":true}]},"ListTags":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Displays all of the resource tags for an Amazon CloudSearch domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"RemoveTags":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Removes the specified resource tags from an Amazon ES domain","accessLevel":"Tagging","resourceTypes":[{"name":"domain","required":true}]},"UpdateAvailabilityOptions":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Configures the availability options for a domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"UpdateDomainEndpointOptions":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Configures the domain endpoint options for a domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"UpdateScalingParameters":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Configures scaling parameters for a domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"UpdateServiceAccessPolicies":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Configures the access rules that control access to the domain's document and search endpoints","accessLevel":"Permissions management","resourceTypes":[{"name":"domain","required":true}]},"document":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Allows access to the document service operations","accessLevel":"Write","resourceTypes":[{"name":"domain","required":false}],"permissionOnly":true},"search":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Allows access to the search operations","accessLevel":"Read","resourceTypes":[{"name":"domain","required":false}],"permissionOnly":true},"suggest":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Allows access to the suggest operations","accessLevel":"Read","resourceTypes":[{"name":"domain","required":false}],"permissionOnly":true}},"resources":[{"name":"domain","arnFormats":["arn:${Partition}:cloudsearch:${Region}:${Account}:domain/${DomainName}"],"conditionKeys":[]}],"conditionKeys":{}}
+{"name":"cloudsearch","actions":{"AddTags":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Attaches resource tags to an Amazon CloudSearch domain","accessLevel":"Tagging","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_AddTags.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-AddTags"},"BuildSuggesters":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Indexes the search suggestions","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_BuildSuggesters.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-BuildSuggesters"},"CreateDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Creates a new search domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_CreateDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-CreateDomain"},"DefineAnalysisScheme":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Configures an analysis scheme that can be applied to a text or text-array field to define language-specific text processing options","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_DefineAnalysisScheme.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-DefineAnalysisScheme"},"DefineExpression":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Configures an Expression for the search domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_DefineExpression.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-DefineExpression"},"DefineIndexField":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Configures an IndexField for the search domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_DefineIndexField.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-DefineIndexField"},"DefineSuggester":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Configures a suggester for a domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_DefineSuggester.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-DefineSuggester"},"DeleteAnalysisScheme":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Deletes an analysis scheme","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_DeleteAnalysisScheme.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-DeleteAnalysisScheme"},"DeleteDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Permanently deletes a search domain and all of its data","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_DeleteDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-DeleteDomain"},"DeleteExpression":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Removes an Expression from the search domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_DeleteExpression.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-DeleteExpression"},"DeleteIndexField":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Removes an IndexField from the search domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_DeleteIndexField.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-DeleteIndexField"},"DeleteSuggester":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Deletes a suggester","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_DeleteSuggester.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-DeleteSuggester"},"DescribeAnalysisSchemes":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Gets the analysis schemes configured for a domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_DescribeAnalysisSchemes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-DescribeAnalysisSchemes"},"DescribeAvailabilityOptions":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Gets the availability options configured for a domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_DescribeAvailabilityOptions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-DescribeAvailabilityOptions"},"DescribeDomainEndpointOptions":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Gets the domain endpoint options configured for a domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_DescribeDomainEndpointOptions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-DescribeDomainEndpointOptions"},"DescribeDomains":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Gets information about the search domains owned by this account","accessLevel":"List","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_DescribeDomains.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-DescribeDomains"},"DescribeExpressions":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Gets the expressions configured for the search domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_DescribeExpressions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-DescribeExpressions"},"DescribeIndexFields":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Gets information about the index fields configured for the search domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_DescribeIndexFields.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-DescribeIndexFields"},"DescribeScalingParameters":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Gets the scaling parameters configured for a domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_DescribeScalingParameters.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-DescribeScalingParameters"},"DescribeServiceAccessPolicies":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Gets information about the access policies that control access to the domain's document and search endpoints","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_DescribeServiceAccessPolicies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-DescribeServiceAccessPolicies"},"DescribeSuggesters":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Gets the suggesters configured for a domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_DescribeSuggesters.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-DescribeSuggesters"},"IndexDocuments":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Tells the search domain to start indexing its documents using the latest indexing options","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_IndexDocuments.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-IndexDocuments"},"ListDomainNames":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Lists all search domains owned by an account","accessLevel":"List","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_ListDomainNames.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-ListDomainNames"},"ListTags":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Displays all of the resource tags for an Amazon CloudSearch domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_ListTags.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-ListTags"},"RemoveTags":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Removes the specified resource tags from an Amazon ES domain","accessLevel":"Tagging","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_RemoveTags.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-RemoveTags"},"UpdateAvailabilityOptions":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Configures the availability options for a domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_UpdateAvailabilityOptions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-UpdateAvailabilityOptions"},"UpdateDomainEndpointOptions":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Configures the domain endpoint options for a domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_UpdateDomainEndpointOptions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-UpdateDomainEndpointOptions"},"UpdateScalingParameters":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Configures scaling parameters for a domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_UpdateScalingParameters.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-UpdateScalingParameters"},"UpdateServiceAccessPolicies":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Configures the access rules that control access to the domain's document and search endpoints","accessLevel":"Permissions management","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/API_UpdateServiceAccessPolicies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-UpdateServiceAccessPolicies"},"document":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Allows access to the document service operations","accessLevel":"Write","resourceTypes":[{"name":"domain","required":false}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/configuring-access.html#cloudsearch-actions","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-document"},"search":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Allows access to the search operations","accessLevel":"Read","resourceTypes":[{"name":"domain","required":false}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/configuring-access.html#cloudsearch-actions","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-search"},"suggest":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Allows access to the suggest operations","accessLevel":"Read","resourceTypes":[{"name":"domain","required":false}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloudsearch/latest/developerguide/configuring-access.html#cloudsearch-actions","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html#amazoncloudsearch-suggest"}},"resources":[{"name":"domain","arnFormats":["arn:${Partition}:cloudsearch:${Region}:${Account}:domain/${DomainName}"],"conditionKeys":[]}],"conditionKeys":{},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudsearch.html"}