aws-iam-language-server 0.0.7 → 0.0.9

package/src/data/servicereference/services/cognito-identity.json

@@ -1 +1 @@
-{"name":"cognito-identity","actions":{"CreateIdentityPool":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new identity pool","accessLevel":"Write","resourceTypes":[]},"DeleteIdentities":{"conditionKeys":["cognito-identity:IdentityPoolArn"],"resources":[],"description":"Grants permission to delete identities from an identity pool. You can specify a list of 1-60 identities that you want to delete","accessLevel":"Write","resourceTypes":[]},"DeleteIdentityPool":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to delete a user pool. Once a pool is deleted, users will not be able to authenticate with the pool","accessLevel":"Write","resourceTypes":[{"name":"identitypool","required":true}]},"DescribeIdentity":{"conditionKeys":["cognito-identity:IdentityPoolArn"],"resources":[],"description":"Grants permission to return metadata related to the given identity, including when the identity was created and any associated linked logins","accessLevel":"Read","resourceTypes":[]},"DescribeIdentityPool":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get details about a particular identity pool, including the pool name, ID description, creation date, and current number of users","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}]},"GetCredentialsForIdentity":{"conditionKeys":["cognito-identity-auth:AccountId","cognito-identity-auth:IdentityPoolArn","cognito-identity-unauth:AccountId","cognito-identity-unauth:IdentityPoolArn"],"resources":[],"description":"Grants permission to return credentials for the provided identity ID","accessLevel":"Read","resourceTypes":[]},"GetId":{"conditionKeys":["cognito-identity-auth:AccountId","cognito-identity-auth:IdentityPoolArn","cognito-identity-unauth:AccountId","cognito-identity-unauth:IdentityPoolArn"],"resources":[],"description":"Grants permission to generate (or retrieve) a Cognito ID. Supplying multiple logins will create an implicit linked account","accessLevel":"Write","resourceTypes":[]},"GetIdentityPoolAnalytics":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get analytics data about the total current identity count for all identity pool identity provider (IdPs)","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}]},"GetIdentityPoolDailyAnalytics":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get analytics data about the number of new identities and total identities for all identity pool identity providers (IdPs)","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}]},"GetIdentityPoolRoles":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get the roles for an identity pool","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}]},"GetIdentityProviderDailyAnalytics":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get analytics data about the number of new identities and total identities for one identity pool identity provider (IdPs)","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}]},"GetOpenIdToken":{"conditionKeys":["cognito-identity-auth:AccountId","cognito-identity-auth:IdentityPoolArn","cognito-identity-unauth:AccountId","cognito-identity-unauth:IdentityPoolArn"],"resources":[],"description":"Grants permission to get an OpenID token, using a known Cognito ID","accessLevel":"Read","resourceTypes":[]},"GetOpenIdTokenForDeveloperIdentity":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to register (or retrieve) a Cognito IdentityId and an OpenID Connect token for a user authenticated by your backend authentication process","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}]},"GetPrincipalTagAttributeMap":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get the principal tags for an identity pool and provider","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}]},"ListIdentities":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to list the identities in an identity pool","accessLevel":"List","resourceTypes":[{"name":"identitypool","required":true}]},"ListIdentityPools":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all of the Cognito identity pools registered for your account","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to list the tags that are assigned to an Amazon Cognito identity pool","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":false}]},"LookupDeveloperIdentity":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to retrieve the IdentityId associated with a DeveloperUserIdentifier or the list of DeveloperUserIdentifiers associated with an IdentityId for an existing identity","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}]},"MergeDeveloperIdentities":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to merge two users having different IdentityIds, existing in the same identity pool, and identified by the same developer provider","accessLevel":"Write","resourceTypes":[{"name":"identitypool","required":true}]},"SetIdentityPoolRoles":{"conditionKeys":[],"resources":[],"description":"Grants permission to set the roles for an identity pool. These roles are used when making calls to GetCredentialsForIdentity action","accessLevel":"Write","resourceTypes":[]},"SetPrincipalTagAttributeMap":{"conditionKeys":[],"resources":[],"description":"Grants permission to set the principal tags for an identity pool and provider. These tags are used when making calls to GetOpenIdToken action","accessLevel":"Write","resourceTypes":[]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"identitypool"}],"description":"Grants permission to assign a set of tags to an Amazon Cognito identity pool","accessLevel":"Tagging","resourceTypes":[{"name":"identitypool","required":true}]},"UnlinkDeveloperIdentity":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to unlink a DeveloperUserIdentifier from an existing identity","accessLevel":"Write","resourceTypes":[{"name":"identitypool","required":true}]},"UnlinkIdentity":{"conditionKeys":["cognito-identity-auth:AccountId","cognito-identity-auth:IdentityPoolArn"],"resources":[],"description":"Grants permission to unlink a federated identity from an existing account","accessLevel":"Write","resourceTypes":[]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"identitypool"}],"description":"Grants permission to remove the specified tags from an Amazon Cognito identity pool","accessLevel":"Tagging","resourceTypes":[{"name":"identitypool","required":true}]},"UpdateIdentityPool":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to update an identity pool","accessLevel":"Write","resourceTypes":[{"name":"identitypool","required":true}]}},"resources":[{"name":"identitypool","arnFormats":["arn:${Partition}:cognito-identity:${Region}:${Account}:identitypool/${IdentityPoolId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by a key that is present in the request"},"cognito-identity-auth:AccountId":{"types":["String"],"description":"Filters access by the owning AWS account ID for identity pool authenticated users. Applies to unauthenticated (public) API operations"},"cognito-identity-auth:IdentityPoolArn":{"types":["ARN"],"description":"Filters access by the identity pool ID for a given authenticated-user identity ID. Applies to unauthenticated (public) API operations"},"cognito-identity-unauth:AccountId":{"types":["String"],"description":"Filters access by the owning AWS account ID of an identity pool for identity pool guest users. Applies to unauthenticated (public) API operations"},"cognito-identity-unauth:IdentityPoolArn":{"types":["ARN"],"description":"Filters access by the identity pool ID for a given guest-user identity ID. Applies to unauthenticated (public) API operations"},"cognito-identity:IdentityPoolArn":{"types":["ARN"],"description":"Filters access by the identity pool ID for a given identity ID for DeleteIdentities and DescribeIdentity"}}}
+{"name":"cognito-identity","actions":{"CreateIdentityPool":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new identity pool","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_CreateIdentityPool.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html#amazoncognitoidentity-CreateIdentityPool"},"DeleteIdentities":{"conditionKeys":["cognito-identity:IdentityPoolArn"],"resources":[],"description":"Grants permission to delete identities from an identity pool. You can specify a list of 1-60 identities that you want to delete","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_DeleteIdentities.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html#amazoncognitoidentity-DeleteIdentities"},"DeleteIdentityPool":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to delete a user pool. Once a pool is deleted, users will not be able to authenticate with the pool","accessLevel":"Write","resourceTypes":[{"name":"identitypool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_DeleteIdentityPool.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html#amazoncognitoidentity-DeleteIdentityPool"},"DescribeIdentity":{"conditionKeys":["cognito-identity:IdentityPoolArn"],"resources":[],"description":"Grants permission to return metadata related to the given identity, including when the identity was created and any associated linked logins","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_DescribeIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html#amazoncognitoidentity-DescribeIdentity"},"DescribeIdentityPool":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get details about a particular identity pool, including the pool name, ID description, creation date, and current number of users","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_DescribeIdentityPool.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html#amazoncognitoidentity-DescribeIdentityPool"},"GetCredentialsForIdentity":{"conditionKeys":["cognito-identity-auth:AccountId","cognito-identity-auth:IdentityPoolArn","cognito-identity-unauth:AccountId","cognito-identity-unauth:IdentityPoolArn"],"resources":[],"description":"Grants permission to return credentials for the provided identity ID","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_GetCredentialsForIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html#amazoncognitoidentity-GetCredentialsForIdentity"},"GetId":{"conditionKeys":["cognito-identity-auth:AccountId","cognito-identity-auth:IdentityPoolArn","cognito-identity-unauth:AccountId","cognito-identity-unauth:IdentityPoolArn"],"resources":[],"description":"Grants permission to generate (or retrieve) a Cognito ID. Supplying multiple logins will create an implicit linked account","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_GetId.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html#amazoncognitoidentity-GetId"},"GetIdentityPoolAnalytics":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get analytics data about the total current identity count for all identity pool identity provider (IdPs)","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_GetIdentityPoolAnalytics.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html#amazoncognitoidentity-GetIdentityPoolAnalytics"},"GetIdentityPoolDailyAnalytics":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get analytics data about the number of new identities and total identities for all identity pool identity providers (IdPs)","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_GetIdentityPoolDailyAnalytics.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html#amazoncognitoidentity-GetIdentityPoolDailyAnalytics"},"GetIdentityPoolRoles":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get the roles for an identity pool","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_GetIdentityPoolRoles.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html#amazoncognitoidentity-GetIdentityPoolRoles"},"GetIdentityProviderDailyAnalytics":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get analytics data about the number of new identities and total identities for one identity pool identity provider (IdPs)","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_GetIdentityProviderDailyAnalytics.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html#amazoncognitoidentity-GetIdentityProviderDailyAnalytics"},"GetOpenIdToken":{"conditionKeys":["cognito-identity-auth:AccountId","cognito-identity-auth:IdentityPoolArn","cognito-identity-unauth:AccountId","cognito-identity-unauth:IdentityPoolArn"],"resources":[],"description":"Grants permission to get an OpenID token, using a known Cognito ID","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_GetOpenIdToken.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html#amazoncognitoidentity-GetOpenIdToken"},"GetOpenIdTokenForDeveloperIdentity":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to register (or retrieve) a Cognito IdentityId and an OpenID Connect token for a user authenticated by your backend authentication process","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_GetOpenIdTokenForDeveloperIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html#amazoncognitoidentity-GetOpenIdTokenForDeveloperIdentity"},"GetPrincipalTagAttributeMap":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get the principal tags for an identity pool and provider","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_GetPrincipalTagAttributeMap.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html#amazoncognitoidentity-GetPrincipalTagAttributeMap"},"ListIdentities":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to list the identities in an identity pool","accessLevel":"List","resourceTypes":[{"name":"identitypool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_ListIdentities.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html#amazoncognitoidentity-ListIdentities"},"ListIdentityPools":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all of the Cognito identity pools registered for your account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_ListIdentityPools.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html#amazoncognitoidentity-ListIdentityPools"},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to list the tags that are assigned to an Amazon Cognito identity pool","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":false}],"operationUrl":"https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html#amazoncognitoidentity-ListTagsForResource"},"LookupDeveloperIdentity":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to retrieve the IdentityId associated with a DeveloperUserIdentifier or the list of DeveloperUserIdentifiers associated with an IdentityId for an existing identity","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_LookupDeveloperIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html#amazoncognitoidentity-LookupDeveloperIdentity"},"MergeDeveloperIdentities":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to merge two users having different IdentityIds, existing in the same identity pool, and identified by the same developer provider","accessLevel":"Write","resourceTypes":[{"name":"identitypool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_MergeDeveloperIdentities.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html#amazoncognitoidentity-MergeDeveloperIdentities"},"SetIdentityPoolRoles":{"conditionKeys":[],"resources":[],"description":"Grants permission to set the roles for an identity pool. These roles are used when making calls to GetCredentialsForIdentity action","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_SetIdentityPoolRoles.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html#amazoncognitoidentity-SetIdentityPoolRoles"},"SetPrincipalTagAttributeMap":{"conditionKeys":[],"resources":[],"description":"Grants permission to set the principal tags for an identity pool and provider. These tags are used when making calls to GetOpenIdToken action","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_SetPrincipalTagAttributeMap.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html#amazoncognitoidentity-SetPrincipalTagAttributeMap"},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"identitypool"}],"description":"Grants permission to assign a set of tags to an Amazon Cognito identity pool","accessLevel":"Tagging","resourceTypes":[{"name":"identitypool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html#amazoncognitoidentity-TagResource"},"UnlinkDeveloperIdentity":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to unlink a DeveloperUserIdentifier from an existing identity","accessLevel":"Write","resourceTypes":[{"name":"identitypool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_UnlinkDeveloperIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html#amazoncognitoidentity-UnlinkDeveloperIdentity"},"UnlinkIdentity":{"conditionKeys":["cognito-identity-auth:AccountId","cognito-identity-auth:IdentityPoolArn"],"resources":[],"description":"Grants permission to unlink a federated identity from an existing account","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_UnlinkIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html#amazoncognitoidentity-UnlinkIdentity"},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"identitypool"}],"description":"Grants permission to remove the specified tags from an Amazon Cognito identity pool","accessLevel":"Tagging","resourceTypes":[{"name":"identitypool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html#amazoncognitoidentity-UntagResource"},"UpdateIdentityPool":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to update an identity pool","accessLevel":"Write","resourceTypes":[{"name":"identitypool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_UpdateIdentityPool.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html#amazoncognitoidentity-UpdateIdentityPool"}},"resources":[{"name":"identitypool","arnFormats":["arn:${Partition}:cognito-identity:${Region}:${Account}:identitypool/${IdentityPoolId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by a key that is present in the request"},"cognito-identity-auth:AccountId":{"types":["String"],"description":"Filters access by the owning AWS account ID for identity pool authenticated users. Applies to unauthenticated (public) API operations"},"cognito-identity-auth:IdentityPoolArn":{"types":["ARN"],"description":"Filters access by the identity pool ID for a given authenticated-user identity ID. Applies to unauthenticated (public) API operations"},"cognito-identity-unauth:AccountId":{"types":["String"],"description":"Filters access by the owning AWS account ID of an identity pool for identity pool guest users. Applies to unauthenticated (public) API operations"},"cognito-identity-unauth:IdentityPoolArn":{"types":["ARN"],"description":"Filters access by the identity pool ID for a given guest-user identity ID. Applies to unauthenticated (public) API operations"},"cognito-identity:IdentityPoolArn":{"types":["ARN"],"description":"Filters access by the identity pool ID for a given identity ID for DeleteIdentities and DescribeIdentity"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitoidentity.html"}

package/src/data/servicereference/services/cognito-idp.json

@@ -1 +1 @@
-{"name":"cognito-idp","actions":{"AddCustomAttributes":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to add user attributes to the user pool schema","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AddUserPoolClientSecret":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to add a new secret to a confidential client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminAddUserToGroup":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to add any user to any group","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminConfirmSignUp":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to confirm any user's registration without a confirmation code","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminCreateUser":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to create new users and send welcome messages via email or SMS","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminDeleteUser":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete any user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminDeleteUserAttributes":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete attributes from any user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminDisableProviderForUser":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to unlink any user pool user from a third-party identity provider (IdP) user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminDisableUser":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to deactivate any user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminEnableUser":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to activate any user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminForgetDevice":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to deregister any user's devices","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminGetDevice":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to get information about any user's devices","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"AdminGetUser":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to look up any user by user name","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"AdminInitiateAuth":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to authenticate any user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminLinkProviderForUser":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to link any user pool user to a third-party IdP user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminListDevices":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list any user's remembered devices","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}]},"AdminListGroupsForUser":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list the groups that any user belongs to","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}]},"AdminListUserAuthEvents":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to lists sign-in events for any user","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"AdminRemoveUserFromGroup":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to remove any user from any group","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminResetUserPassword":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to reset any user's password","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminRespondToAuthChallenge":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to respond to an authentication challenge during the authentication of any user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminSetUserMFAPreference":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to set any user's preferred MFA method","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminSetUserPassword":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to set any user's password","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminSetUserSettings":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to set user settings for any user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminUpdateAuthEventFeedback":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update advanced security feedback for any user's authentication event","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminUpdateDeviceStatus":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update the status of any user's remembered devices","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminUpdateUserAttributes":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to updates any user's standard or custom attributes","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminUserGlobalSignOut":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to sign out any user from all sessions","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AssociateSoftwareToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a unique generated shared secret key code for the user","accessLevel":"Write","resourceTypes":[]},"AssociateWebACL":{"conditionKeys":[],"resources":[{"name":"userpool"},{"name":"webacl"}],"description":"Grants permission to associate the user pool with an AWS WAF web ACL","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true},{"name":"webacl","required":true}],"permissionOnly":true},"ChangePassword":{"conditionKeys":[],"resources":[],"description":"Grants permission to change the password for a specified user in a user pool","accessLevel":"Write","resourceTypes":[]},"ConfirmDevice":{"conditionKeys":[],"resources":[],"description":"Grants permission to confirm tracking of the device. This API call is the call that begins device tracking","accessLevel":"Write","resourceTypes":[]},"ConfirmForgotPassword":{"conditionKeys":[],"resources":[],"description":"Grants permission to allow a user to enter a confirmation code to reset a forgotten password","accessLevel":"Write","resourceTypes":[]},"ConfirmSignUp":{"conditionKeys":[],"resources":[],"description":"Grants permission to confirm registration of a user and handles the existing alias from a previous user","accessLevel":"Write","resourceTypes":[]},"CreateGroup":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to create new user pool groups","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"CreateIdentityProvider":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to add identity providers to user pools","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"CreateManagedLoginBranding":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to create a branding settings for managed login and associate it with an app client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"CreateResourceServer":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to create and configure scopes for OAuth 2.0 resource servers","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"CreateTerms":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to create terms and associate it with an app client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"CreateUserImportJob":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to create user CSV import jobs","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"CreateUserPool":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create and set password policy for user pools","accessLevel":"Write","resourceTypes":[]},"CreateUserPoolClient":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to create user pool app clients","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"CreateUserPoolDomain":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to add user pool domains","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"DeleteGroup":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete any empty user pool group","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"DeleteIdentityProvider":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete any identity provider from user pools","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"DeleteManagedLoginBranding":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete the managed login branding style for any app client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"DeleteResourceServer":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete any OAuth 2.0 resource server from user pools","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"DeleteTerms":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete terms for an app client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"DeleteUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to allow a user to delete one's self","accessLevel":"Write","resourceTypes":[]},"DeleteUserAttributes":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the attributes for a user","accessLevel":"Write","resourceTypes":[]},"DeleteUserPool":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete user pools","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"DeleteUserPoolClient":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete any user pool app client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"DeleteUserPoolClientSecret":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete a secret from a list of secrets associated with a client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"DeleteUserPoolDomain":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete any user pool domain","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"DescribeIdentityProvider":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to describe any user pool identity provider","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"DescribeManagedLoginBranding":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to get the detailed information about the branding style of managed login","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"DescribeManagedLoginBrandingByClient":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to get the detailed information about the branding style of managed login associated with an appclient","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"DescribeResourceServer":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to describe any OAuth 2.0 resource server","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"DescribeRiskConfiguration":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to describe the risk configuration settings of user pools and app clients","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"DescribeTerms":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to get the detailed information about terms for an app client","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"DescribeUserImportJob":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to describe any user import job","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"DescribeUserPool":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to describe user pools","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"DescribeUserPoolClient":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to describe any user pool app client","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"DescribeUserPoolDomain":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe any user pool domain","accessLevel":"Read","resourceTypes":[]},"DisassociateWebACL":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to disassociate the user pool with an AWS WAF web ACL","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"permissionOnly":true},"ForgetDevice":{"conditionKeys":[],"resources":[],"description":"Grants permission to forget the specified device","accessLevel":"Write","resourceTypes":[]},"ForgotPassword":{"conditionKeys":[],"resources":[],"description":"Grants permission to send a message to the end user with a confirmation code that is required to change the user's password","accessLevel":"Write","resourceTypes":[]},"GetCSVHeader":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to generate headers for a user import .csv file","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"GetDevice":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the device","accessLevel":"Read","resourceTypes":[]},"GetGroup":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to describe a user pool group","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"GetIdentityProviderByIdentifier":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to correlate a user pool IdP identifier to the IdP Name","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"GetLogDeliveryConfiguration":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to get the detailed activity logging configuration for a user pool","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"GetSigningCertificate":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to look up signing certificates for user pools","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"GetTokensFromRefreshToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to update user tokens with refresh tokens","accessLevel":"Write","resourceTypes":[]},"GetUICustomization":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to get UI customization information for the hosted UI of any app client","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"GetUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the user attributes and metadata for a user","accessLevel":"Read","resourceTypes":[]},"GetUserAttributeVerificationCode":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the user attribute verification code for the specified attribute name","accessLevel":"Read","resourceTypes":[]},"GetUserPoolMfaConfig":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to look up the MFA configuration of user pools","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"GetWebACLForResource":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to get the AWS WAF web ACL that is associated with an Amazon Cognito user pool","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}],"permissionOnly":true},"GlobalSignOut":{"conditionKeys":[],"resources":[],"description":"Grants permission to sign out users from all devices","accessLevel":"Write","resourceTypes":[]},"InitiateAuth":{"conditionKeys":[],"resources":[],"description":"Grants permission to initiate the authentication flow","accessLevel":"Write","resourceTypes":[]},"ListDevices":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the devices","accessLevel":"List","resourceTypes":[]},"ListGroups":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list all groups in user pools","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}]},"ListIdentityProviders":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list all identity providers in user pools","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}]},"ListResourceServers":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list all resource servers in user pools","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}]},"ListResourcesForWebACL":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to list the user pools that are associated with an AWS WAF web ACL","accessLevel":"List","resourceTypes":[{"name":"webacl","required":true}],"permissionOnly":true},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list the tags that are assigned to an Amazon Cognito user pool","accessLevel":"List","resourceTypes":[{"name":"userpool","required":false}]},"ListTerms":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list all terms for a user pool","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}]},"ListUserImportJobs":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list all user import jobs","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}]},"ListUserPoolClientSecrets":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list all secrets associated with a client","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}]},"ListUserPoolClients":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list all app clients in user pools","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}]},"ListUserPools":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all user pools","accessLevel":"List","resourceTypes":[]},"ListUsers":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list all user pool users","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}]},"ListUsersInGroup":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list the users in any group","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}]},"ResendConfirmationCode":{"conditionKeys":[],"resources":[],"description":"Grants permission to resend the confirmation (for confirmation of registration) to a specific user in the user pool","accessLevel":"Write","resourceTypes":[]},"RespondToAuthChallenge":{"conditionKeys":[],"resources":[],"description":"Grants permission to respond to the authentication challenge","accessLevel":"Write","resourceTypes":[]},"RevokeToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to revoke all of the access tokens generated by the specified refresh token","accessLevel":"Write","resourceTypes":[]},"SetLogDeliveryConfiguration":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to set up or modify the detailed activity logging configuration of a user pool","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"SetRiskConfiguration":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to set risk configuration for user pools and app clients","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"SetUICustomization":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to customize the hosted UI for any app client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"SetUserMFAPreference":{"conditionKeys":[],"resources":[],"description":"Grants permission to set MFA preference for the user in the userpool","accessLevel":"Write","resourceTypes":[]},"SetUserPoolMfaConfig":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to set user pool MFA configuration","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"SetUserSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to set the user settings like multi-factor authentication (MFA)","accessLevel":"Write","resourceTypes":[]},"SignUp":{"conditionKeys":[],"resources":[],"description":"Grants permission to register the user in the specified user pool and creates a user name, password, and user attributes","accessLevel":"Write","resourceTypes":[]},"StartUserImportJob":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to start any user import job","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"StopUserImportJob":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to stop any user import job","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"userpool"}],"description":"Grants permission to tag a user pool","accessLevel":"Tagging","resourceTypes":[{"name":"userpool","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"userpool"}],"description":"Grants permission to untag a user pool","accessLevel":"Tagging","resourceTypes":[{"name":"userpool","required":false}]},"UpdateAuthEventFeedback":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update the feedback for the user authentication event","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"UpdateDeviceStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the device status","accessLevel":"Write","resourceTypes":[]},"UpdateGroup":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update the configuration of any group","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"UpdateIdentityProvider":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update the configuration of any user pool IdP","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"UpdateManagedLoginBranding":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update the branding settings of a managed login","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"UpdateResourceServer":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update the configuration of any OAuth 2.0 resource server","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"UpdateTerms":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update terms for an app client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"UpdateUserAttributes":{"conditionKeys":[],"resources":[],"description":"Grants permission to allow a user to update a specific attribute (one at a time)","accessLevel":"Write","resourceTypes":[]},"UpdateUserPool":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"userpool"}],"description":"Grants permission to updates the configuration of user pools","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"UpdateUserPoolClient":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update any user pool client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"UpdateUserPoolDomain":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to replace the certificate for any custom domain","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"VerifySoftwareToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to register a user's entered TOTP code and mark the user's software token MFA status as verified if successful","accessLevel":"Write","resourceTypes":[]},"VerifyUserAttribute":{"conditionKeys":[],"resources":[],"description":"Grants permission to verify a user attribute using a one time verification code","accessLevel":"Write","resourceTypes":[]}},"resources":[{"name":"userpool","arnFormats":["arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/${UserPoolId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"webacl","arnFormats":["arn:${Partition}:wafv2:${Region}:${Account}:${Scope}/webacl/${Name}/${Id}"],"conditionKeys":[]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by a key that is present in the request"}}}
+{"name":"cognito-idp","actions":{"AddCustomAttributes":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to add user attributes to the user pool schema","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AddCustomAttributes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AddCustomAttributes"},"AddUserPoolClientSecret":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to add a new secret to a confidential client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AddUserPoolClientSecret.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AddUserPoolClientSecret"},"AdminAddUserToGroup":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to add any user to any group","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminAddUserToGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AdminAddUserToGroup"},"AdminConfirmSignUp":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to confirm any user's registration without a confirmation code","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminConfirmSignUp.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AdminConfirmSignUp"},"AdminCreateUser":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to create new users and send welcome messages via email or SMS","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminCreateUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AdminCreateUser"},"AdminDeleteUser":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete any user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminDeleteUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AdminDeleteUser"},"AdminDeleteUserAttributes":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete attributes from any user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminDeleteUserAttributes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AdminDeleteUserAttributes"},"AdminDisableProviderForUser":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to unlink any user pool user from a third-party identity provider (IdP) user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminDisableProviderForUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AdminDisableProviderForUser"},"AdminDisableUser":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to deactivate any user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminDisableUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AdminDisableUser"},"AdminEnableUser":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to activate any user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminEnableUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AdminEnableUser"},"AdminForgetDevice":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to deregister any user's devices","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminForgetDevice.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AdminForgetDevice"},"AdminGetDevice":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to get information about any user's devices","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminGetDevice.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AdminGetDevice"},"AdminGetUser":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to look up any user by user name","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminGetUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AdminGetUser"},"AdminInitiateAuth":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to authenticate any user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminInitiateAuth.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AdminInitiateAuth"},"AdminLinkProviderForUser":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to link any user pool user to a third-party IdP user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminLinkProviderForUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AdminLinkProviderForUser"},"AdminListDevices":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list any user's remembered devices","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminListDevices.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AdminListDevices"},"AdminListGroupsForUser":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list the groups that any user belongs to","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminListGroupsForUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AdminListGroupsForUser"},"AdminListUserAuthEvents":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to lists sign-in events for any user","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminListUserAuthEvents.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AdminListUserAuthEvents"},"AdminRemoveUserFromGroup":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to remove any user from any group","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminRemoveUserFromGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AdminRemoveUserFromGroup"},"AdminResetUserPassword":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to reset any user's password","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminResetUserPassword.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AdminResetUserPassword"},"AdminRespondToAuthChallenge":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to respond to an authentication challenge during the authentication of any user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminRespondToAuthChallenge.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AdminRespondToAuthChallenge"},"AdminSetUserMFAPreference":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to set any user's preferred MFA method","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminSetUserMFAPreference.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AdminSetUserMFAPreference"},"AdminSetUserPassword":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to set any user's password","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminSetUserPassword.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AdminSetUserPassword"},"AdminSetUserSettings":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to set user settings for any user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminSetUserSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AdminSetUserSettings"},"AdminUpdateAuthEventFeedback":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update advanced security feedback for any user's authentication event","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminUpdateAuthEventFeedback.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AdminUpdateAuthEventFeedback"},"AdminUpdateDeviceStatus":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update the status of any user's remembered devices","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminUpdateDeviceStatus.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AdminUpdateDeviceStatus"},"AdminUpdateUserAttributes":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to updates any user's standard or custom attributes","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminUpdateUserAttributes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AdminUpdateUserAttributes"},"AdminUserGlobalSignOut":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to sign out any user from all sessions","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminUserGlobalSignOut.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AdminUserGlobalSignOut"},"AssociateSoftwareToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a unique generated shared secret key code for the user","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AssociateSoftwareToken.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AssociateSoftwareToken"},"AssociateWebACL":{"conditionKeys":[],"resources":[{"name":"userpool"},{"name":"webacl"}],"description":"Grants permission to associate the user pool with an AWS WAF web ACL","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true},{"name":"webacl","required":true}],"permissionOnly":true,"operationUrl":"${UserGuideDocPage}user-pool-waf.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-AssociateWebACL"},"ChangePassword":{"conditionKeys":[],"resources":[],"description":"Grants permission to change the password for a specified user in a user pool","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ChangePassword.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-ChangePassword"},"ConfirmDevice":{"conditionKeys":[],"resources":[],"description":"Grants permission to confirm tracking of the device. This API call is the call that begins device tracking","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ConfirmDevice.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-ConfirmDevice"},"ConfirmForgotPassword":{"conditionKeys":[],"resources":[],"description":"Grants permission to allow a user to enter a confirmation code to reset a forgotten password","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ConfirmForgotPassword.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-ConfirmForgotPassword"},"ConfirmSignUp":{"conditionKeys":[],"resources":[],"description":"Grants permission to confirm registration of a user and handles the existing alias from a previous user","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ConfirmSignUp.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-ConfirmSignUp"},"CreateGroup":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to create new user pool groups","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-CreateGroup"},"CreateIdentityProvider":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to add identity providers to user pools","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateIdentityProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-CreateIdentityProvider"},"CreateManagedLoginBranding":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to create a branding settings for managed login and associate it with an app client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateManagedLoginBranding.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-CreateManagedLoginBranding"},"CreateResourceServer":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to create and configure scopes for OAuth 2.0 resource servers","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateResourceServer.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-CreateResourceServer"},"CreateTerms":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to create terms and associate it with an app client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateTerms.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-CreateTerms"},"CreateUserImportJob":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to create user CSV import jobs","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserImportJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-CreateUserImportJob"},"CreateUserPool":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create and set password policy for user pools","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-CreateUserPool"},"CreateUserPoolClient":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to create user pool app clients","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPoolClient.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-CreateUserPoolClient"},"CreateUserPoolDomain":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to add user pool domains","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPoolDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-CreateUserPoolDomain"},"DeleteGroup":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete any empty user pool group","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DeleteGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-DeleteGroup"},"DeleteIdentityProvider":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete any identity provider from user pools","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DeleteIdentityProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-DeleteIdentityProvider"},"DeleteManagedLoginBranding":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete the managed login branding style for any app client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DeleteManagedLoginBranding.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-DeleteManagedLoginBranding"},"DeleteResourceServer":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete any OAuth 2.0 resource server from user pools","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DeleteResourceServer.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-DeleteResourceServer"},"DeleteTerms":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete terms for an app client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DeleteTerms.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-DeleteTerms"},"DeleteUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to allow a user to delete one's self","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DeleteUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-DeleteUser"},"DeleteUserAttributes":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the attributes for a user","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DeleteUserAttributes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-DeleteUserAttributes"},"DeleteUserPool":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete user pools","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DeleteUserPool.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-DeleteUserPool"},"DeleteUserPoolClient":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete any user pool app client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DeleteUserPoolClient.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-DeleteUserPoolClient"},"DeleteUserPoolClientSecret":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete a secret from a list of secrets associated with a client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DeleteUserPoolClientSecret.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-DeleteUserPoolClientSecret"},"DeleteUserPoolDomain":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete any user pool domain","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DeleteUserPoolDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-DeleteUserPoolDomain"},"DescribeIdentityProvider":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to describe any user pool identity provider","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeIdentityProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-DescribeIdentityProvider"},"DescribeManagedLoginBranding":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to get the detailed information about the branding style of managed login","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeManagedLoginBranding.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-DescribeManagedLoginBranding"},"DescribeManagedLoginBrandingByClient":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to get the detailed information about the branding style of managed login associated with an appclient","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeManagedLoginBrandingByClient.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-DescribeManagedLoginBrandingByClient"},"DescribeResourceServer":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to describe any OAuth 2.0 resource server","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeResourceServer.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-DescribeResourceServer"},"DescribeRiskConfiguration":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to describe the risk configuration settings of user pools and app clients","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeRiskConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-DescribeRiskConfiguration"},"DescribeTerms":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to get the detailed information about terms for an app client","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeTerms.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-DescribeTerms"},"DescribeUserImportJob":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to describe any user import job","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserImportJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-DescribeUserImportJob"},"DescribeUserPool":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to describe user pools","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-DescribeUserPool"},"DescribeUserPoolClient":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to describe any user pool app client","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPoolClient.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-DescribeUserPoolClient"},"DescribeUserPoolDomain":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe any user pool domain","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPoolDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-DescribeUserPoolDomain"},"DisassociateWebACL":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to disassociate the user pool with an AWS WAF web ACL","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"permissionOnly":true,"operationUrl":"${UserGuideDocPage}user-pool-waf.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-DisassociateWebACL"},"ForgetDevice":{"conditionKeys":[],"resources":[],"description":"Grants permission to forget the specified device","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ForgetDevice.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-ForgetDevice"},"ForgotPassword":{"conditionKeys":[],"resources":[],"description":"Grants permission to send a message to the end user with a confirmation code that is required to change the user's password","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ForgotPassword.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-ForgotPassword"},"GetCSVHeader":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to generate headers for a user import .csv file","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetCSVHeader.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-GetCSVHeader"},"GetDevice":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the device","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetDevice.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-GetDevice"},"GetGroup":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to describe a user pool group","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-GetGroup"},"GetIdentityProviderByIdentifier":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to correlate a user pool IdP identifier to the IdP Name","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetIdentityProviderByIdentifier.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-GetIdentityProviderByIdentifier"},"GetLogDeliveryConfiguration":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to get the detailed activity logging configuration for a user pool","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetLogDeliveryConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-GetLogDeliveryConfiguration"},"GetSigningCertificate":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to look up signing certificates for user pools","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetSigningCertificate.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-GetSigningCertificate"},"GetTokensFromRefreshToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to update user tokens with refresh tokens","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetTokensFromRefreshToken.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-GetTokensFromRefreshToken"},"GetUICustomization":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to get UI customization information for the hosted UI of any app client","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetUICustomization.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-GetUICustomization"},"GetUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the user attributes and metadata for a user","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-GetUser"},"GetUserAttributeVerificationCode":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the user attribute verification code for the specified attribute name","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetUserAttributeVerificationCode.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-GetUserAttributeVerificationCode"},"GetUserPoolMfaConfig":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to look up the MFA configuration of user pools","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetUserPoolMfaConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-GetUserPoolMfaConfig"},"GetWebACLForResource":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to get the AWS WAF web ACL that is associated with an Amazon Cognito user pool","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}],"permissionOnly":true,"operationUrl":"${UserGuideDocPage}user-pool-waf.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-GetWebACLForResource"},"GlobalSignOut":{"conditionKeys":[],"resources":[],"description":"Grants permission to sign out users from all devices","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GlobalSignOut.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-GlobalSignOut"},"InitiateAuth":{"conditionKeys":[],"resources":[],"description":"Grants permission to initiate the authentication flow","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_InitiateAuth.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-InitiateAuth"},"ListDevices":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the devices","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListDevices.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-ListDevices"},"ListGroups":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list all groups in user pools","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-ListGroups"},"ListIdentityProviders":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list all identity providers in user pools","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListIdentityProviders.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-ListIdentityProviders"},"ListResourceServers":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list all resource servers in user pools","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListResourceServers.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-ListResourceServers"},"ListResourcesForWebACL":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to list the user pools that are associated with an AWS WAF web ACL","accessLevel":"List","resourceTypes":[{"name":"webacl","required":true}],"permissionOnly":true,"operationUrl":"${UserGuideDocPage}user-pool-waf.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-ListResourcesForWebACL"},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list the tags that are assigned to an Amazon Cognito user pool","accessLevel":"List","resourceTypes":[{"name":"userpool","required":false}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-ListTagsForResource"},"ListTerms":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list all terms for a user pool","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListTerms.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-ListTerms"},"ListUserImportJobs":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list all user import jobs","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListUserImportJobs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-ListUserImportJobs"},"ListUserPoolClientSecrets":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list all secrets associated with a client","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListUserPoolClientSecrets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-ListUserPoolClientSecrets"},"ListUserPoolClients":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list all app clients in user pools","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListUserPoolClients.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-ListUserPoolClients"},"ListUserPools":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all user pools","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListUserPools.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-ListUserPools"},"ListUsers":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list all user pool users","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListUsers.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-ListUsers"},"ListUsersInGroup":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list the users in any group","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListUsersInGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-ListUsersInGroup"},"ResendConfirmationCode":{"conditionKeys":[],"resources":[],"description":"Grants permission to resend the confirmation (for confirmation of registration) to a specific user in the user pool","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ResendConfirmationCode.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-ResendConfirmationCode"},"RespondToAuthChallenge":{"conditionKeys":[],"resources":[],"description":"Grants permission to respond to the authentication challenge","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_RespondToAuthChallenge.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-RespondToAuthChallenge"},"RevokeToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to revoke all of the access tokens generated by the specified refresh token","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_RevokeToken.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-RevokeToken"},"SetLogDeliveryConfiguration":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to set up or modify the detailed activity logging configuration of a user pool","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SetLogDeliveryConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-SetLogDeliveryConfiguration"},"SetRiskConfiguration":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to set risk configuration for user pools and app clients","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SetRiskConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-SetRiskConfiguration"},"SetUICustomization":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to customize the hosted UI for any app client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SetUICustomization.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-SetUICustomization"},"SetUserMFAPreference":{"conditionKeys":[],"resources":[],"description":"Grants permission to set MFA preference for the user in the userpool","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SetUserMFAPreference.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-SetUserMFAPreference"},"SetUserPoolMfaConfig":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to set user pool MFA configuration","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SetUserPoolMfaConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-SetUserPoolMfaConfig"},"SetUserSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to set the user settings like multi-factor authentication (MFA)","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SetUserSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-SetUserSettings"},"SignUp":{"conditionKeys":[],"resources":[],"description":"Grants permission to register the user in the specified user pool and creates a user name, password, and user attributes","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SignUp.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-SignUp"},"StartUserImportJob":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to start any user import job","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_StartUserImportJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-StartUserImportJob"},"StopUserImportJob":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to stop any user import job","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_StopUserImportJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-StopUserImportJob"},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"userpool"}],"description":"Grants permission to tag a user pool","accessLevel":"Tagging","resourceTypes":[{"name":"userpool","required":false}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-TagResource"},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"userpool"}],"description":"Grants permission to untag a user pool","accessLevel":"Tagging","resourceTypes":[{"name":"userpool","required":false}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-UntagResource"},"UpdateAuthEventFeedback":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update the feedback for the user authentication event","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateAuthEventFeedback.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-UpdateAuthEventFeedback"},"UpdateDeviceStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the device status","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateDeviceStatus.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-UpdateDeviceStatus"},"UpdateGroup":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update the configuration of any group","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-UpdateGroup"},"UpdateIdentityProvider":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update the configuration of any user pool IdP","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateIdentityProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-UpdateIdentityProvider"},"UpdateManagedLoginBranding":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update the branding settings of a managed login","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateManagedLoginBranding.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-UpdateManagedLoginBranding"},"UpdateResourceServer":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update the configuration of any OAuth 2.0 resource server","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateResourceServer.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-UpdateResourceServer"},"UpdateTerms":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update terms for an app client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateTerms.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-UpdateTerms"},"UpdateUserAttributes":{"conditionKeys":[],"resources":[],"description":"Grants permission to allow a user to update a specific attribute (one at a time)","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserAttributes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-UpdateUserAttributes"},"UpdateUserPool":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"userpool"}],"description":"Grants permission to updates the configuration of user pools","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPool.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-UpdateUserPool"},"UpdateUserPoolClient":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update any user pool client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPoolClient.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-UpdateUserPoolClient"},"UpdateUserPoolDomain":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to replace the certificate for any custom domain","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPoolDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-UpdateUserPoolDomain"},"VerifySoftwareToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to register a user's entered TOTP code and mark the user's software token MFA status as verified if successful","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerifySoftwareToken.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-VerifySoftwareToken"},"VerifyUserAttribute":{"conditionKeys":[],"resources":[],"description":"Grants permission to verify a user attribute using a one time verification code","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerifyUserAttribute.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html#amazoncognitouserpools-VerifyUserAttribute"}},"resources":[{"name":"userpool","arnFormats":["arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/${UserPoolId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"webacl","arnFormats":["arn:${Partition}:wafv2:${Region}:${Account}:${Scope}/webacl/${Name}/${Id}"],"conditionKeys":[]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by a key that is present in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html"}

package/src/data/servicereference/services/cognito-sync.json

@@ -1 +1 @@
-{"name":"cognito-sync","actions":{"BulkPublish":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to initiate a bulk publish of all existing datasets for an Identity Pool to the configured stream","accessLevel":"Write","resourceTypes":[{"name":"identitypool","required":true}]},"DeleteDataset":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to delete a specific dataset","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}]},"DescribeDataset":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to get metadata about a dataset by identity and dataset name","accessLevel":"Read","resourceTypes":[{"name":"dataset","required":true}]},"DescribeIdentityPoolUsage":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get usage details (for example, data storage) about a particular identity pool","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}]},"DescribeIdentityUsage":{"conditionKeys":[],"resources":[{"name":"identity"}],"description":"Grants permission to get usage information for an identity, including number of datasets and data usage","accessLevel":"Read","resourceTypes":[{"name":"identity","required":true}]},"GetBulkPublishDetails":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get the status of the last BulkPublish operation for an identity pool","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}]},"GetCognitoEvents":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get the events and the corresponding Lambda functions associated with an identity pool","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}]},"GetIdentityPoolConfiguration":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get the configuration settings of an identity pool","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}]},"ListDatasets":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to list datasets for an identity","accessLevel":"List","resourceTypes":[{"name":"dataset","required":true}]},"ListIdentityPoolUsage":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get a list of identity pools registered with Cognito","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}]},"ListRecords":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to get paginated records, optionally changed after a particular sync count for a dataset and identity","accessLevel":"Read","resourceTypes":[{"name":"dataset","required":true}]},"QueryRecords":{"conditionKeys":[],"resources":[],"description":"Grants permission to query records","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"RegisterDevice":{"conditionKeys":[],"resources":[{"name":"identity"}],"description":"Grants permission to register a device to receive push sync notifications","accessLevel":"Write","resourceTypes":[{"name":"identity","required":true}]},"SetCognitoEvents":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to set the AWS Lambda function for a given event type for an identity pool","accessLevel":"Write","resourceTypes":[{"name":"identitypool","required":true}]},"SetDatasetConfiguration":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to configure datasets","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}],"permissionOnly":true},"SetIdentityPoolConfiguration":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to set the necessary configuration for push sync","accessLevel":"Write","resourceTypes":[{"name":"identitypool","required":true}]},"SubscribeToDataset":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to subscribe to receive notifications when a dataset is modified by another device","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}]},"UnsubscribeFromDataset":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to unsubscribe from receiving notifications when a dataset is modified by another device","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}]},"UpdateRecords":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to post updates to records and add and delete records for a dataset and user","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}]}},"resources":[{"name":"dataset","arnFormats":["arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/${IdentityPoolId}/identity/${IdentityId}/dataset/${DatasetName}"],"conditionKeys":[]},{"name":"identity","arnFormats":["arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/${IdentityPoolId}/identity/${IdentityId}"],"conditionKeys":[]},{"name":"identitypool","arnFormats":["arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/${IdentityPoolId}"],"conditionKeys":[]}],"conditionKeys":{}}
+{"name":"cognito-sync","actions":{"BulkPublish":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to initiate a bulk publish of all existing datasets for an Identity Pool to the configured stream","accessLevel":"Write","resourceTypes":[{"name":"identitypool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitosync/latest/APIReference/API_BulkPublish.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitosync.html#amazoncognitosync-BulkPublish"},"DeleteDataset":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to delete a specific dataset","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitosync/latest/APIReference/API_DeleteDataset.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitosync.html#amazoncognitosync-DeleteDataset"},"DescribeDataset":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to get metadata about a dataset by identity and dataset name","accessLevel":"Read","resourceTypes":[{"name":"dataset","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitosync/latest/APIReference/API_DescribeDataset.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitosync.html#amazoncognitosync-DescribeDataset"},"DescribeIdentityPoolUsage":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get usage details (for example, data storage) about a particular identity pool","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitosync/latest/APIReference/API_DescribeIdentityPoolUsage.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitosync.html#amazoncognitosync-DescribeIdentityPoolUsage"},"DescribeIdentityUsage":{"conditionKeys":[],"resources":[{"name":"identity"}],"description":"Grants permission to get usage information for an identity, including number of datasets and data usage","accessLevel":"Read","resourceTypes":[{"name":"identity","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitosync/latest/APIReference/API_DescribeIdentityUsage.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitosync.html#amazoncognitosync-DescribeIdentityUsage"},"GetBulkPublishDetails":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get the status of the last BulkPublish operation for an identity pool","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitosync/latest/APIReference/API_GetBulkPublishDetails.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitosync.html#amazoncognitosync-GetBulkPublishDetails"},"GetCognitoEvents":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get the events and the corresponding Lambda functions associated with an identity pool","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitosync/latest/APIReference/API_GetCognitoEvents.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitosync.html#amazoncognitosync-GetCognitoEvents"},"GetIdentityPoolConfiguration":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get the configuration settings of an identity pool","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitosync/latest/APIReference/API_GetIdentityPoolConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitosync.html#amazoncognitosync-GetIdentityPoolConfiguration"},"ListDatasets":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to list datasets for an identity","accessLevel":"List","resourceTypes":[{"name":"dataset","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitosync/latest/APIReference/API_ListDatasets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitosync.html#amazoncognitosync-ListDatasets"},"ListIdentityPoolUsage":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get a list of identity pools registered with Cognito","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitosync/latest/APIReference/API_ListIdentityPoolUsage.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitosync.html#amazoncognitosync-ListIdentityPoolUsage"},"ListRecords":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to get paginated records, optionally changed after a particular sync count for a dataset and identity","accessLevel":"Read","resourceTypes":[{"name":"dataset","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitosync/latest/APIReference/API_ListRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitosync.html#amazoncognitosync-ListRecords"},"QueryRecords":{"conditionKeys":[],"resources":[],"description":"Grants permission to query records","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitosync.html#amazoncognitosync-QueryRecords"},"RegisterDevice":{"conditionKeys":[],"resources":[{"name":"identity"}],"description":"Grants permission to register a device to receive push sync notifications","accessLevel":"Write","resourceTypes":[{"name":"identity","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitosync/latest/APIReference/API_RegisterDevice.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitosync.html#amazoncognitosync-RegisterDevice"},"SetCognitoEvents":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to set the AWS Lambda function for a given event type for an identity pool","accessLevel":"Write","resourceTypes":[{"name":"identitypool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitosync/latest/APIReference/API_SetCognitoEvents.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitosync.html#amazoncognitosync-SetCognitoEvents"},"SetDatasetConfiguration":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to configure datasets","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}],"permissionOnly":true,"iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitosync.html#amazoncognitosync-SetDatasetConfiguration"},"SetIdentityPoolConfiguration":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to set the necessary configuration for push sync","accessLevel":"Write","resourceTypes":[{"name":"identitypool","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitosync/latest/APIReference/API_SetIdentityPoolConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitosync.html#amazoncognitosync-SetIdentityPoolConfiguration"},"SubscribeToDataset":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to subscribe to receive notifications when a dataset is modified by another device","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitosync/latest/APIReference/API_SubscribeToDataset.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitosync.html#amazoncognitosync-SubscribeToDataset"},"UnsubscribeFromDataset":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to unsubscribe from receiving notifications when a dataset is modified by another device","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitosync/latest/APIReference/API_UnsubscribeFromDataset.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitosync.html#amazoncognitosync-UnsubscribeFromDataset"},"UpdateRecords":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to post updates to records and add and delete records for a dataset and user","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}],"operationUrl":"https://docs.aws.amazon.com/cognitosync/latest/APIReference/API_UpdateRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitosync.html#amazoncognitosync-UpdateRecords"}},"resources":[{"name":"dataset","arnFormats":["arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/${IdentityPoolId}/identity/${IdentityId}/dataset/${DatasetName}"],"conditionKeys":[]},{"name":"identity","arnFormats":["arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/${IdentityPoolId}/identity/${IdentityId}"],"conditionKeys":[]},{"name":"identitypool","arnFormats":["arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/${IdentityPoolId}"],"conditionKeys":[]}],"conditionKeys":{},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitosync.html"}