aws-iam-language-server 0.0.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (523) hide show
  1. package/.direnv/bin/nix-direnv-reload +19 -0
  2. package/.direnv/flake-profile-a5d5b61aa8a61b7d9d765e1daf971a9a578f1cfa.rc +2156 -0
  3. package/.github/workflows/publish.yml +37 -0
  4. package/.github/workflows/test.yml +16 -0
  5. package/.vscodeignore +17 -0
  6. package/LICENSE +21 -0
  7. package/images/iam.png +0 -0
  8. package/package.json +54 -0
  9. package/readme.md +51 -0
  10. package/src/data/condition-keys/global.json +362 -0
  11. package/src/data/servicereference/actions.json +1 -0
  12. package/src/data/servicereference/service-principals.json +1 -0
  13. package/src/data/servicereference/services/a2c.json +1 -0
  14. package/src/data/servicereference/services/a4b.json +1 -0
  15. package/src/data/servicereference/services/access-analyzer.json +1 -0
  16. package/src/data/servicereference/services/account.json +1 -0
  17. package/src/data/servicereference/services/acm-pca.json +1 -0
  18. package/src/data/servicereference/services/acm.json +1 -0
  19. package/src/data/servicereference/services/aco-automation.json +1 -0
  20. package/src/data/servicereference/services/action-recommendations.json +1 -0
  21. package/src/data/servicereference/services/activate.json +1 -0
  22. package/src/data/servicereference/services/aidevops.json +1 -0
  23. package/src/data/servicereference/services/aiops.json +1 -0
  24. package/src/data/servicereference/services/airflow-serverless.json +1 -0
  25. package/src/data/servicereference/services/airflow.json +1 -0
  26. package/src/data/servicereference/services/amplify.json +1 -0
  27. package/src/data/servicereference/services/amplifybackend.json +1 -0
  28. package/src/data/servicereference/services/amplifyuibuilder.json +1 -0
  29. package/src/data/servicereference/services/aoss.json +1 -0
  30. package/src/data/servicereference/services/apigateway.json +1 -0
  31. package/src/data/servicereference/services/app-integrations.json +1 -0
  32. package/src/data/servicereference/services/appconfig.json +1 -0
  33. package/src/data/servicereference/services/appfabric.json +1 -0
  34. package/src/data/servicereference/services/appflow.json +1 -0
  35. package/src/data/servicereference/services/application-autoscaling.json +1 -0
  36. package/src/data/servicereference/services/application-signals.json +1 -0
  37. package/src/data/servicereference/services/application-transformation.json +1 -0
  38. package/src/data/servicereference/services/applicationinsights.json +1 -0
  39. package/src/data/servicereference/services/appmesh-preview.json +1 -0
  40. package/src/data/servicereference/services/appmesh.json +1 -0
  41. package/src/data/servicereference/services/apprunner.json +1 -0
  42. package/src/data/servicereference/services/appstream.json +1 -0
  43. package/src/data/servicereference/services/appstudio.json +1 -0
  44. package/src/data/servicereference/services/appsync.json +1 -0
  45. package/src/data/servicereference/services/apptest.json +1 -0
  46. package/src/data/servicereference/services/aps.json +1 -0
  47. package/src/data/servicereference/services/arc-region-switch.json +1 -0
  48. package/src/data/servicereference/services/arc-zonal-shift.json +1 -0
  49. package/src/data/servicereference/services/arsenal.json +1 -0
  50. package/src/data/servicereference/services/artifact.json +1 -0
  51. package/src/data/servicereference/services/athena.json +1 -0
  52. package/src/data/servicereference/services/auditmanager.json +1 -0
  53. package/src/data/servicereference/services/autoscaling-plans.json +1 -0
  54. package/src/data/servicereference/services/autoscaling.json +1 -0
  55. package/src/data/servicereference/services/aws-marketplace-management.json +1 -0
  56. package/src/data/servicereference/services/aws-marketplace.json +1 -0
  57. package/src/data/servicereference/services/aws-mcp.json +1 -0
  58. package/src/data/servicereference/services/aws-portal.json +1 -0
  59. package/src/data/servicereference/services/awsconnector.json +1 -0
  60. package/src/data/servicereference/services/b2bi.json +1 -0
  61. package/src/data/servicereference/services/backup-gateway.json +1 -0
  62. package/src/data/servicereference/services/backup-search.json +1 -0
  63. package/src/data/servicereference/services/backup-storage.json +1 -0
  64. package/src/data/servicereference/services/backup.json +1 -0
  65. package/src/data/servicereference/services/batch.json +1 -0
  66. package/src/data/servicereference/services/bcm-dashboards.json +1 -0
  67. package/src/data/servicereference/services/bcm-data-exports.json +1 -0
  68. package/src/data/servicereference/services/bcm-pricing-calculator.json +1 -0
  69. package/src/data/servicereference/services/bcm-recommended-actions.json +1 -0
  70. package/src/data/servicereference/services/bedrock-agentcore.json +1 -0
  71. package/src/data/servicereference/services/bedrock-mantle.json +1 -0
  72. package/src/data/servicereference/services/bedrock.json +1 -0
  73. package/src/data/servicereference/services/billing.json +1 -0
  74. package/src/data/servicereference/services/billingconductor.json +1 -0
  75. package/src/data/servicereference/services/braket.json +1 -0
  76. package/src/data/servicereference/services/budgets.json +1 -0
  77. package/src/data/servicereference/services/bugbust.json +1 -0
  78. package/src/data/servicereference/services/cases.json +1 -0
  79. package/src/data/servicereference/services/cassandra.json +1 -0
  80. package/src/data/servicereference/services/ce.json +1 -0
  81. package/src/data/servicereference/services/chatbot.json +1 -0
  82. package/src/data/servicereference/services/chime.json +1 -0
  83. package/src/data/servicereference/services/cleanrooms-ml.json +1 -0
  84. package/src/data/servicereference/services/cleanrooms.json +1 -0
  85. package/src/data/servicereference/services/cloud9.json +1 -0
  86. package/src/data/servicereference/services/clouddirectory.json +1 -0
  87. package/src/data/servicereference/services/cloudformation.json +1 -0
  88. package/src/data/servicereference/services/cloudfront-keyvaluestore.json +1 -0
  89. package/src/data/servicereference/services/cloudfront.json +1 -0
  90. package/src/data/servicereference/services/cloudhsm.json +1 -0
  91. package/src/data/servicereference/services/cloudsearch.json +1 -0
  92. package/src/data/servicereference/services/cloudshell.json +1 -0
  93. package/src/data/servicereference/services/cloudtrail-data.json +1 -0
  94. package/src/data/servicereference/services/cloudtrail.json +1 -0
  95. package/src/data/servicereference/services/cloudwatch.json +1 -0
  96. package/src/data/servicereference/services/codeartifact.json +1 -0
  97. package/src/data/servicereference/services/codebuild.json +1 -0
  98. package/src/data/servicereference/services/codecatalyst.json +1 -0
  99. package/src/data/servicereference/services/codecommit.json +1 -0
  100. package/src/data/servicereference/services/codeconnections.json +1 -0
  101. package/src/data/servicereference/services/codedeploy-commands-secure.json +1 -0
  102. package/src/data/servicereference/services/codedeploy.json +1 -0
  103. package/src/data/servicereference/services/codeguru-profiler.json +1 -0
  104. package/src/data/servicereference/services/codeguru-reviewer.json +1 -0
  105. package/src/data/servicereference/services/codeguru-security.json +1 -0
  106. package/src/data/servicereference/services/codeguru.json +1 -0
  107. package/src/data/servicereference/services/codepipeline.json +1 -0
  108. package/src/data/servicereference/services/codestar-connections.json +1 -0
  109. package/src/data/servicereference/services/codestar-notifications.json +1 -0
  110. package/src/data/servicereference/services/codestar.json +1 -0
  111. package/src/data/servicereference/services/codewhisperer.json +1 -0
  112. package/src/data/servicereference/services/cognito-identity.json +1 -0
  113. package/src/data/servicereference/services/cognito-idp.json +1 -0
  114. package/src/data/servicereference/services/cognito-sync.json +1 -0
  115. package/src/data/servicereference/services/comprehend.json +1 -0
  116. package/src/data/servicereference/services/comprehendmedical.json +1 -0
  117. package/src/data/servicereference/services/compute-optimizer.json +1 -0
  118. package/src/data/servicereference/services/config.json +1 -0
  119. package/src/data/servicereference/services/connect-campaigns.json +1 -0
  120. package/src/data/servicereference/services/connect.json +1 -0
  121. package/src/data/servicereference/services/consoleapp.json +1 -0
  122. package/src/data/servicereference/services/consolidatedbilling.json +1 -0
  123. package/src/data/servicereference/services/controlcatalog.json +1 -0
  124. package/src/data/servicereference/services/controltower.json +1 -0
  125. package/src/data/servicereference/services/cost-optimization-hub.json +1 -0
  126. package/src/data/servicereference/services/cur.json +1 -0
  127. package/src/data/servicereference/services/customer-verification.json +1 -0
  128. package/src/data/servicereference/services/databrew.json +1 -0
  129. package/src/data/servicereference/services/dataexchange.json +1 -0
  130. package/src/data/servicereference/services/datapipeline.json +1 -0
  131. package/src/data/servicereference/services/datasync.json +1 -0
  132. package/src/data/servicereference/services/datazone.json +1 -0
  133. package/src/data/servicereference/services/dax.json +1 -0
  134. package/src/data/servicereference/services/dbqms.json +1 -0
  135. package/src/data/servicereference/services/deadline.json +1 -0
  136. package/src/data/servicereference/services/detective.json +1 -0
  137. package/src/data/servicereference/services/devicefarm.json +1 -0
  138. package/src/data/servicereference/services/devops-guru.json +1 -0
  139. package/src/data/servicereference/services/directconnect.json +1 -0
  140. package/src/data/servicereference/services/discovery.json +1 -0
  141. package/src/data/servicereference/services/dlm.json +1 -0
  142. package/src/data/servicereference/services/dms.json +1 -0
  143. package/src/data/servicereference/services/docdb-elastic.json +1 -0
  144. package/src/data/servicereference/services/drs.json +1 -0
  145. package/src/data/servicereference/services/ds-data.json +1 -0
  146. package/src/data/servicereference/services/ds.json +1 -0
  147. package/src/data/servicereference/services/dsql.json +1 -0
  148. package/src/data/servicereference/services/dynamodb.json +1 -0
  149. package/src/data/servicereference/services/ebs.json +1 -0
  150. package/src/data/servicereference/services/ec2-instance-connect.json +1 -0
  151. package/src/data/servicereference/services/ec2.json +1 -0
  152. package/src/data/servicereference/services/ec2messages.json +1 -0
  153. package/src/data/servicereference/services/ecr-public.json +1 -0
  154. package/src/data/servicereference/services/ecr.json +1 -0
  155. package/src/data/servicereference/services/ecs-mcp.json +1 -0
  156. package/src/data/servicereference/services/ecs.json +1 -0
  157. package/src/data/servicereference/services/eks-auth.json +1 -0
  158. package/src/data/servicereference/services/eks-mcp.json +1 -0
  159. package/src/data/servicereference/services/eks.json +1 -0
  160. package/src/data/servicereference/services/elasticache.json +1 -0
  161. package/src/data/servicereference/services/elasticbeanstalk.json +1 -0
  162. package/src/data/servicereference/services/elasticfilesystem.json +1 -0
  163. package/src/data/servicereference/services/elasticloadbalancing.json +1 -0
  164. package/src/data/servicereference/services/elasticmapreduce.json +1 -0
  165. package/src/data/servicereference/services/elastictranscoder.json +1 -0
  166. package/src/data/servicereference/services/elemental-activations.json +1 -0
  167. package/src/data/servicereference/services/elemental-appliances-software.json +1 -0
  168. package/src/data/servicereference/services/elemental-inference.json +1 -0
  169. package/src/data/servicereference/services/elemental-support-cases.json +1 -0
  170. package/src/data/servicereference/services/elemental-support-content.json +1 -0
  171. package/src/data/servicereference/services/emr-containers.json +1 -0
  172. package/src/data/servicereference/services/emr-serverless.json +1 -0
  173. package/src/data/servicereference/services/entityresolution.json +1 -0
  174. package/src/data/servicereference/services/es.json +1 -0
  175. package/src/data/servicereference/services/events.json +1 -0
  176. package/src/data/servicereference/services/evidently.json +1 -0
  177. package/src/data/servicereference/services/evs.json +1 -0
  178. package/src/data/servicereference/services/execute-api.json +1 -0
  179. package/src/data/servicereference/services/finspace-api.json +1 -0
  180. package/src/data/servicereference/services/finspace.json +1 -0
  181. package/src/data/servicereference/services/firehose.json +1 -0
  182. package/src/data/servicereference/services/fis.json +1 -0
  183. package/src/data/servicereference/services/fms.json +1 -0
  184. package/src/data/servicereference/services/forecast.json +1 -0
  185. package/src/data/servicereference/services/frauddetector.json +1 -0
  186. package/src/data/servicereference/services/freertos.json +1 -0
  187. package/src/data/servicereference/services/freetier.json +1 -0
  188. package/src/data/servicereference/services/fsx.json +1 -0
  189. package/src/data/servicereference/services/gamelift.json +1 -0
  190. package/src/data/servicereference/services/gameliftstreams.json +1 -0
  191. package/src/data/servicereference/services/geo-maps.json +1 -0
  192. package/src/data/servicereference/services/geo-places.json +1 -0
  193. package/src/data/servicereference/services/geo-routes.json +1 -0
  194. package/src/data/servicereference/services/geo.json +1 -0
  195. package/src/data/servicereference/services/glacier.json +1 -0
  196. package/src/data/servicereference/services/globalaccelerator.json +1 -0
  197. package/src/data/servicereference/services/glue.json +1 -0
  198. package/src/data/servicereference/services/grafana.json +1 -0
  199. package/src/data/servicereference/services/greengrass.json +1 -0
  200. package/src/data/servicereference/services/groundstation.json +1 -0
  201. package/src/data/servicereference/services/groundtruthlabeling.json +1 -0
  202. package/src/data/servicereference/services/guardduty.json +1 -0
  203. package/src/data/servicereference/services/health-agent.json +1 -0
  204. package/src/data/servicereference/services/health.json +1 -0
  205. package/src/data/servicereference/services/healthlake.json +1 -0
  206. package/src/data/servicereference/services/honeycode.json +1 -0
  207. package/src/data/servicereference/services/iam.json +1 -0
  208. package/src/data/servicereference/services/identity-sync.json +1 -0
  209. package/src/data/servicereference/services/identitystore-auth.json +1 -0
  210. package/src/data/servicereference/services/identitystore.json +1 -0
  211. package/src/data/servicereference/services/imagebuilder.json +1 -0
  212. package/src/data/servicereference/services/importexport.json +1 -0
  213. package/src/data/servicereference/services/inspector-scan.json +1 -0
  214. package/src/data/servicereference/services/inspector.json +1 -0
  215. package/src/data/servicereference/services/inspector2-telemetry.json +1 -0
  216. package/src/data/servicereference/services/inspector2.json +1 -0
  217. package/src/data/servicereference/services/interconnect.json +1 -0
  218. package/src/data/servicereference/services/internetmonitor.json +1 -0
  219. package/src/data/servicereference/services/invoicing.json +1 -0
  220. package/src/data/servicereference/services/iot-device-tester.json +1 -0
  221. package/src/data/servicereference/services/iot.json +1 -0
  222. package/src/data/servicereference/services/iotanalytics.json +1 -0
  223. package/src/data/servicereference/services/iotdeviceadvisor.json +1 -0
  224. package/src/data/servicereference/services/iotevents.json +1 -0
  225. package/src/data/servicereference/services/iotfleethub.json +1 -0
  226. package/src/data/servicereference/services/iotfleetwise.json +1 -0
  227. package/src/data/servicereference/services/iotjobsdata.json +1 -0
  228. package/src/data/servicereference/services/iotmanagedintegrations.json +1 -0
  229. package/src/data/servicereference/services/iotsitewise.json +1 -0
  230. package/src/data/servicereference/services/iottwinmaker.json +1 -0
  231. package/src/data/servicereference/services/iotwireless.json +1 -0
  232. package/src/data/servicereference/services/iq-permission.json +1 -0
  233. package/src/data/servicereference/services/iq.json +1 -0
  234. package/src/data/servicereference/services/ivs.json +1 -0
  235. package/src/data/servicereference/services/ivschat.json +1 -0
  236. package/src/data/servicereference/services/kafka-cluster.json +1 -0
  237. package/src/data/servicereference/services/kafka.json +1 -0
  238. package/src/data/servicereference/services/kafkaconnect.json +1 -0
  239. package/src/data/servicereference/services/kendra-ranking.json +1 -0
  240. package/src/data/servicereference/services/kendra.json +1 -0
  241. package/src/data/servicereference/services/kinesis.json +1 -0
  242. package/src/data/servicereference/services/kinesisanalytics.json +1 -0
  243. package/src/data/servicereference/services/kinesisvideo.json +1 -0
  244. package/src/data/servicereference/services/kms.json +1 -0
  245. package/src/data/servicereference/services/lakeformation.json +1 -0
  246. package/src/data/servicereference/services/lambda.json +1 -0
  247. package/src/data/servicereference/services/launchwizard.json +1 -0
  248. package/src/data/servicereference/services/lex.json +1 -0
  249. package/src/data/servicereference/services/license-manager-linux-subscriptions.json +1 -0
  250. package/src/data/servicereference/services/license-manager-user-subscriptions.json +1 -0
  251. package/src/data/servicereference/services/license-manager.json +1 -0
  252. package/src/data/servicereference/services/lightsail.json +1 -0
  253. package/src/data/servicereference/services/logs.json +1 -0
  254. package/src/data/servicereference/services/lookoutequipment.json +1 -0
  255. package/src/data/servicereference/services/lookoutmetrics.json +1 -0
  256. package/src/data/servicereference/services/lookoutvision.json +1 -0
  257. package/src/data/servicereference/services/m2.json +1 -0
  258. package/src/data/servicereference/services/machinelearning.json +1 -0
  259. package/src/data/servicereference/services/macie2.json +1 -0
  260. package/src/data/servicereference/services/managedblockchain-query.json +1 -0
  261. package/src/data/servicereference/services/managedblockchain.json +1 -0
  262. package/src/data/servicereference/services/mapcredits.json +1 -0
  263. package/src/data/servicereference/services/marketplacecommerceanalytics.json +1 -0
  264. package/src/data/servicereference/services/mechanicalturk.json +1 -0
  265. package/src/data/servicereference/services/mediaconnect.json +1 -0
  266. package/src/data/servicereference/services/mediaconvert.json +1 -0
  267. package/src/data/servicereference/services/mediaimport.json +1 -0
  268. package/src/data/servicereference/services/medialive.json +1 -0
  269. package/src/data/servicereference/services/mediapackage-vod.json +1 -0
  270. package/src/data/servicereference/services/mediapackage.json +1 -0
  271. package/src/data/servicereference/services/mediapackagev2.json +1 -0
  272. package/src/data/servicereference/services/mediastore.json +1 -0
  273. package/src/data/servicereference/services/mediatailor.json +1 -0
  274. package/src/data/servicereference/services/medical-imaging.json +1 -0
  275. package/src/data/servicereference/services/memorydb.json +1 -0
  276. package/src/data/servicereference/services/mgh.json +1 -0
  277. package/src/data/servicereference/services/mgn.json +1 -0
  278. package/src/data/servicereference/services/migrationhub-orchestrator.json +1 -0
  279. package/src/data/servicereference/services/migrationhub-strategy.json +1 -0
  280. package/src/data/servicereference/services/mobileanalytics.json +1 -0
  281. package/src/data/servicereference/services/mobiletargeting.json +1 -0
  282. package/src/data/servicereference/services/monitron.json +1 -0
  283. package/src/data/servicereference/services/mpa.json +1 -0
  284. package/src/data/servicereference/services/mq.json +1 -0
  285. package/src/data/servicereference/services/neptune-db.json +1 -0
  286. package/src/data/servicereference/services/neptune-graph.json +1 -0
  287. package/src/data/servicereference/services/network-firewall.json +1 -0
  288. package/src/data/servicereference/services/network-security-director.json +1 -0
  289. package/src/data/servicereference/services/networkflowmonitor.json +1 -0
  290. package/src/data/servicereference/services/networkmanager-chat.json +1 -0
  291. package/src/data/servicereference/services/networkmanager.json +1 -0
  292. package/src/data/servicereference/services/networkmonitor.json +1 -0
  293. package/src/data/servicereference/services/nimble.json +1 -0
  294. package/src/data/servicereference/services/notifications-contacts.json +1 -0
  295. package/src/data/servicereference/services/notifications.json +1 -0
  296. package/src/data/servicereference/services/nova-act.json +1 -0
  297. package/src/data/servicereference/services/oam.json +1 -0
  298. package/src/data/servicereference/services/observabilityadmin.json +1 -0
  299. package/src/data/servicereference/services/odb.json +1 -0
  300. package/src/data/servicereference/services/omics.json +1 -0
  301. package/src/data/servicereference/services/one.json +1 -0
  302. package/src/data/servicereference/services/opensearch.json +1 -0
  303. package/src/data/servicereference/services/opsworks-cm.json +1 -0
  304. package/src/data/servicereference/services/opsworks.json +1 -0
  305. package/src/data/servicereference/services/organizations.json +1 -0
  306. package/src/data/servicereference/services/osis.json +1 -0
  307. package/src/data/servicereference/services/outposts.json +1 -0
  308. package/src/data/servicereference/services/panorama.json +1 -0
  309. package/src/data/servicereference/services/partnercentral-account-management.json +1 -0
  310. package/src/data/servicereference/services/partnercentral.json +1 -0
  311. package/src/data/servicereference/services/payment-cryptography.json +1 -0
  312. package/src/data/servicereference/services/payments.json +1 -0
  313. package/src/data/servicereference/services/pca-connector-ad.json +1 -0
  314. package/src/data/servicereference/services/pca-connector-scep.json +1 -0
  315. package/src/data/servicereference/services/pcs.json +1 -0
  316. package/src/data/servicereference/services/personalize.json +1 -0
  317. package/src/data/servicereference/services/pi.json +1 -0
  318. package/src/data/servicereference/services/pipes.json +1 -0
  319. package/src/data/servicereference/services/polly.json +1 -0
  320. package/src/data/servicereference/services/pricing.json +1 -0
  321. package/src/data/servicereference/services/pricingplanmanager.json +1 -0
  322. package/src/data/servicereference/services/private-networks.json +1 -0
  323. package/src/data/servicereference/services/profile.json +1 -0
  324. package/src/data/servicereference/services/proton.json +1 -0
  325. package/src/data/servicereference/services/purchase-orders.json +1 -0
  326. package/src/data/servicereference/services/q.json +1 -0
  327. package/src/data/servicereference/services/qapps.json +1 -0
  328. package/src/data/servicereference/services/qbusiness.json +1 -0
  329. package/src/data/servicereference/services/qdeveloper.json +1 -0
  330. package/src/data/servicereference/services/qldb.json +1 -0
  331. package/src/data/servicereference/services/quicksight.json +1 -0
  332. package/src/data/servicereference/services/ram.json +1 -0
  333. package/src/data/servicereference/services/rbin.json +1 -0
  334. package/src/data/servicereference/services/rds-data.json +1 -0
  335. package/src/data/servicereference/services/rds-db.json +1 -0
  336. package/src/data/servicereference/services/rds.json +1 -0
  337. package/src/data/servicereference/services/redshift-data.json +1 -0
  338. package/src/data/servicereference/services/redshift-serverless.json +1 -0
  339. package/src/data/servicereference/services/redshift.json +1 -0
  340. package/src/data/servicereference/services/refactor-spaces.json +1 -0
  341. package/src/data/servicereference/services/rekognition.json +1 -0
  342. package/src/data/servicereference/services/repostspace.json +1 -0
  343. package/src/data/servicereference/services/resiliencehub.json +1 -0
  344. package/src/data/servicereference/services/resource-explorer-2.json +1 -0
  345. package/src/data/servicereference/services/resource-explorer.json +1 -0
  346. package/src/data/servicereference/services/resource-groups.json +1 -0
  347. package/src/data/servicereference/services/rhelkb.json +1 -0
  348. package/src/data/servicereference/services/robomaker.json +1 -0
  349. package/src/data/servicereference/services/rolesanywhere.json +1 -0
  350. package/src/data/servicereference/services/route53-recovery-cluster.json +1 -0
  351. package/src/data/servicereference/services/route53-recovery-control-config.json +1 -0
  352. package/src/data/servicereference/services/route53-recovery-readiness.json +1 -0
  353. package/src/data/servicereference/services/route53.json +1 -0
  354. package/src/data/servicereference/services/route53domains.json +1 -0
  355. package/src/data/servicereference/services/route53globalresolver.json +1 -0
  356. package/src/data/servicereference/services/route53profiles.json +1 -0
  357. package/src/data/servicereference/services/route53resolver.json +1 -0
  358. package/src/data/servicereference/services/rtbfabric.json +1 -0
  359. package/src/data/servicereference/services/rum.json +1 -0
  360. package/src/data/servicereference/services/s3-object-lambda.json +1 -0
  361. package/src/data/servicereference/services/s3-outposts.json +1 -0
  362. package/src/data/servicereference/services/s3.json +1 -0
  363. package/src/data/servicereference/services/s3express.json +1 -0
  364. package/src/data/servicereference/services/s3tables.json +1 -0
  365. package/src/data/servicereference/services/s3vectors.json +1 -0
  366. package/src/data/servicereference/services/sagemaker-data-science-assistant.json +1 -0
  367. package/src/data/servicereference/services/sagemaker-geospatial.json +1 -0
  368. package/src/data/servicereference/services/sagemaker-mlflow.json +1 -0
  369. package/src/data/servicereference/services/sagemaker-unified-studio-mcp.json +1 -0
  370. package/src/data/servicereference/services/sagemaker.json +1 -0
  371. package/src/data/servicereference/services/savingsplans.json +1 -0
  372. package/src/data/servicereference/services/scheduler.json +1 -0
  373. package/src/data/servicereference/services/schemas.json +1 -0
  374. package/src/data/servicereference/services/scn.json +1 -0
  375. package/src/data/servicereference/services/sdb.json +1 -0
  376. package/src/data/servicereference/services/secretsmanager.json +1 -0
  377. package/src/data/servicereference/services/security-ir.json +1 -0
  378. package/src/data/servicereference/services/securityagent.json +1 -0
  379. package/src/data/servicereference/services/securityhub.json +1 -0
  380. package/src/data/servicereference/services/securitylake.json +1 -0
  381. package/src/data/servicereference/services/serverlessrepo.json +1 -0
  382. package/src/data/servicereference/services/servicecatalog.json +1 -0
  383. package/src/data/servicereference/services/servicediscovery.json +1 -0
  384. package/src/data/servicereference/services/serviceextract.json +1 -0
  385. package/src/data/servicereference/services/servicequotas.json +1 -0
  386. package/src/data/servicereference/services/ses.json +1 -0
  387. package/src/data/servicereference/services/shield.json +1 -0
  388. package/src/data/servicereference/services/signer.json +1 -0
  389. package/src/data/servicereference/services/signin.json +1 -0
  390. package/src/data/servicereference/services/simspaceweaver.json +1 -0
  391. package/src/data/servicereference/services/sms-voice.json +1 -0
  392. package/src/data/servicereference/services/sms.json +1 -0
  393. package/src/data/servicereference/services/snow-device-management.json +1 -0
  394. package/src/data/servicereference/services/snowball.json +1 -0
  395. package/src/data/servicereference/services/sns.json +1 -0
  396. package/src/data/servicereference/services/social-messaging.json +1 -0
  397. package/src/data/servicereference/services/sqlworkbench.json +1 -0
  398. package/src/data/servicereference/services/sqs.json +1 -0
  399. package/src/data/servicereference/services/ssm-contacts.json +1 -0
  400. package/src/data/servicereference/services/ssm-guiconnect.json +1 -0
  401. package/src/data/servicereference/services/ssm-incidents.json +1 -0
  402. package/src/data/servicereference/services/ssm-quicksetup.json +1 -0
  403. package/src/data/servicereference/services/ssm-sap.json +1 -0
  404. package/src/data/servicereference/services/ssm.json +1 -0
  405. package/src/data/servicereference/services/ssmmessages.json +1 -0
  406. package/src/data/servicereference/services/sso-directory.json +1 -0
  407. package/src/data/servicereference/services/sso-oauth.json +1 -0
  408. package/src/data/servicereference/services/sso.json +1 -0
  409. package/src/data/servicereference/services/states.json +1 -0
  410. package/src/data/servicereference/services/storagegateway.json +1 -0
  411. package/src/data/servicereference/services/sts.json +1 -0
  412. package/src/data/servicereference/services/support-console.json +1 -0
  413. package/src/data/servicereference/services/support.json +1 -0
  414. package/src/data/servicereference/services/supportapp.json +1 -0
  415. package/src/data/servicereference/services/supportplans.json +1 -0
  416. package/src/data/servicereference/services/sustainability.json +1 -0
  417. package/src/data/servicereference/services/swf.json +1 -0
  418. package/src/data/servicereference/services/synthetics.json +1 -0
  419. package/src/data/servicereference/services/tag.json +1 -0
  420. package/src/data/servicereference/services/tax.json +1 -0
  421. package/src/data/servicereference/services/textract.json +1 -0
  422. package/src/data/servicereference/services/thinclient.json +1 -0
  423. package/src/data/servicereference/services/timestream-influxdb.json +1 -0
  424. package/src/data/servicereference/services/timestream.json +1 -0
  425. package/src/data/servicereference/services/tiros.json +1 -0
  426. package/src/data/servicereference/services/tnb.json +1 -0
  427. package/src/data/servicereference/services/transcribe.json +1 -0
  428. package/src/data/servicereference/services/transfer.json +1 -0
  429. package/src/data/servicereference/services/transform-custom.json +1 -0
  430. package/src/data/servicereference/services/transform.json +1 -0
  431. package/src/data/servicereference/services/translate.json +1 -0
  432. package/src/data/servicereference/services/trustedadvisor.json +1 -0
  433. package/src/data/servicereference/services/ts.json +1 -0
  434. package/src/data/servicereference/services/user-subscriptions.json +1 -0
  435. package/src/data/servicereference/services/uxc.json +1 -0
  436. package/src/data/servicereference/services/vendor-insights.json +1 -0
  437. package/src/data/servicereference/services/verified-access.json +1 -0
  438. package/src/data/servicereference/services/verifiedpermissions.json +1 -0
  439. package/src/data/servicereference/services/voiceid.json +1 -0
  440. package/src/data/servicereference/services/vpc-lattice-svcs.json +1 -0
  441. package/src/data/servicereference/services/vpc-lattice.json +1 -0
  442. package/src/data/servicereference/services/vpce.json +1 -0
  443. package/src/data/servicereference/services/waf-regional.json +1 -0
  444. package/src/data/servicereference/services/waf.json +1 -0
  445. package/src/data/servicereference/services/wafv2.json +1 -0
  446. package/src/data/servicereference/services/wam.json +1 -0
  447. package/src/data/servicereference/services/wellarchitected.json +1 -0
  448. package/src/data/servicereference/services/wickr.json +1 -0
  449. package/src/data/servicereference/services/wisdom.json +1 -0
  450. package/src/data/servicereference/services/workdocs.json +1 -0
  451. package/src/data/servicereference/services/worklink.json +1 -0
  452. package/src/data/servicereference/services/workmail.json +1 -0
  453. package/src/data/servicereference/services/workmailmessageflow.json +1 -0
  454. package/src/data/servicereference/services/workspaces-instances.json +1 -0
  455. package/src/data/servicereference/services/workspaces-web.json +1 -0
  456. package/src/data/servicereference/services/workspaces.json +1 -0
  457. package/src/data/servicereference/services/xray.json +1 -0
  458. package/src/data/servicereference/services.json +1 -0
  459. package/src/extension.d.ts +3 -0
  460. package/src/extension.js +24 -0
  461. package/src/grammars/tree-sitter-hcl.wasm +0 -0
  462. package/src/grammars/tree-sitter-json.wasm +0 -0
  463. package/src/grammars/tree-sitter-yaml.wasm +0 -0
  464. package/src/handlers/completion/action-value.d.ts +4 -0
  465. package/src/handlers/completion/action-value.js +46 -0
  466. package/src/handlers/completion/condition-block.d.ts +4 -0
  467. package/src/handlers/completion/condition-block.js +31 -0
  468. package/src/handlers/completion/condition-key.d.ts +4 -0
  469. package/src/handlers/completion/condition-key.js +80 -0
  470. package/src/handlers/completion/condition-operator.d.ts +4 -0
  471. package/src/handlers/completion/condition-operator.js +22 -0
  472. package/src/handlers/completion/effect-value.d.ts +4 -0
  473. package/src/handlers/completion/effect-value.js +14 -0
  474. package/src/handlers/completion/index.d.ts +14 -0
  475. package/src/handlers/completion/index.js +96 -0
  476. package/src/handlers/completion/principal-block-identifier.d.ts +4 -0
  477. package/src/handlers/completion/principal-block-identifier.js +4 -0
  478. package/src/handlers/completion/principal-block-type.d.ts +4 -0
  479. package/src/handlers/completion/principal-block-type.js +24 -0
  480. package/src/handlers/completion/principal-block.d.ts +4 -0
  481. package/src/handlers/completion/principal-block.js +28 -0
  482. package/src/handlers/completion/principal-identifier-completions.d.ts +2 -0
  483. package/src/handlers/completion/principal-identifier-completions.js +131 -0
  484. package/src/handlers/completion/principal-type.d.ts +4 -0
  485. package/src/handlers/completion/principal-type.js +23 -0
  486. package/src/handlers/completion/principal-typed-value.d.ts +4 -0
  487. package/src/handlers/completion/principal-typed-value.js +4 -0
  488. package/src/handlers/completion/principal-value.d.ts +4 -0
  489. package/src/handlers/completion/principal-value.js +18 -0
  490. package/src/handlers/completion/resource-value.d.ts +4 -0
  491. package/src/handlers/completion/resource-value.js +144 -0
  492. package/src/handlers/completion/statement-block.d.ts +10 -0
  493. package/src/handlers/completion/statement-block.js +51 -0
  494. package/src/handlers/completion/statement-key.d.ts +4 -0
  495. package/src/handlers/completion/statement-key.js +41 -0
  496. package/src/lib/iam-policy/condition-operators.d.ts +317 -0
  497. package/src/lib/iam-policy/condition-operators.js +129 -0
  498. package/src/lib/iam-policy/location.d.ts +71 -0
  499. package/src/lib/iam-policy/location.js +82 -0
  500. package/src/lib/iam-policy/partitions.d.ts +116 -0
  501. package/src/lib/iam-policy/partitions.js +51 -0
  502. package/src/lib/iam-policy/principals.d.ts +21 -0
  503. package/src/lib/iam-policy/principals.js +37 -0
  504. package/src/lib/iam-policy/reference/services.d.ts +22 -0
  505. package/src/lib/iam-policy/reference/services.js +99 -0
  506. package/src/lib/iam-policy/reference/types.d.ts +71 -0
  507. package/src/lib/iam-policy/reference/types.js +1 -0
  508. package/src/lib/iam-policy/statement-keys.d.ts +8 -0
  509. package/src/lib/iam-policy/statement-keys.js +159 -0
  510. package/src/lib/iam-policy/wildcard.d.ts +2 -0
  511. package/src/lib/iam-policy/wildcard.js +14 -0
  512. package/src/lib/treesitter/base.d.ts +35 -0
  513. package/src/lib/treesitter/base.js +50 -0
  514. package/src/lib/treesitter/hcl.d.ts +9 -0
  515. package/src/lib/treesitter/hcl.js +888 -0
  516. package/src/lib/treesitter/json.d.ts +9 -0
  517. package/src/lib/treesitter/json.js +376 -0
  518. package/src/lib/treesitter/manager.d.ts +9 -0
  519. package/src/lib/treesitter/manager.js +66 -0
  520. package/src/lib/treesitter/yaml.d.ts +9 -0
  521. package/src/lib/treesitter/yaml.js +878 -0
  522. package/src/server.d.ts +2 -0
  523. package/src/server.js +26 -0
@@ -0,0 +1 @@
1
+ {"name":"databrew","actions":{"BatchDeleteRecipeVersion":{"conditionKeys":[],"resources":[{"name":"Recipe"}],"description":"Grants permission to delete one or more recipe versions","accessLevel":"Write","resourceTypes":[{"name":"Recipe","required":true}]},"CreateDataset":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a dataset","accessLevel":"Write","resourceTypes":[]},"CreateProfileJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a profile job","accessLevel":"Write","resourceTypes":[]},"CreateProject":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a project","accessLevel":"Write","resourceTypes":[]},"CreateRecipe":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a recipe","accessLevel":"Write","resourceTypes":[]},"CreateRecipeJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a recipe job","accessLevel":"Write","resourceTypes":[]},"CreateRuleset":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a ruleset","accessLevel":"Write","resourceTypes":[]},"CreateSchedule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a schedule","accessLevel":"Write","resourceTypes":[]},"DeleteDataset":{"conditionKeys":[],"resources":[{"name":"Dataset"}],"description":"Grants permission to delete a dataset","accessLevel":"Write","resourceTypes":[{"name":"Dataset","required":true}]},"DeleteJob":{"conditionKeys":[],"resources":[{"name":"Job"}],"description":"Grants permission to delete a job","accessLevel":"Write","resourceTypes":[{"name":"Job","required":true}]},"DeleteProject":{"conditionKeys":[],"resources":[{"name":"Project"}],"description":"Grants permission to delete a project","accessLevel":"Write","resourceTypes":[{"name":"Project","required":true}]},"DeleteRecipeVersion":{"conditionKeys":[],"resources":[{"name":"Recipe"}],"description":"Grants permission to delete a recipe version","accessLevel":"Write","resourceTypes":[{"name":"Recipe","required":true}]},"DeleteRuleset":{"conditionKeys":[],"resources":[{"name":"Ruleset"}],"description":"Grants permission to delete a ruleset","accessLevel":"Write","resourceTypes":[{"name":"Ruleset","required":true}]},"DeleteSchedule":{"conditionKeys":[],"resources":[{"name":"Schedule"}],"description":"Grants permission to delete a schedule","accessLevel":"Write","resourceTypes":[{"name":"Schedule","required":true}]},"DescribeDataset":{"conditionKeys":[],"resources":[{"name":"Dataset"}],"description":"Grants permission to view details about a dataset","accessLevel":"Read","resourceTypes":[{"name":"Dataset","required":true}]},"DescribeJob":{"conditionKeys":[],"resources":[{"name":"Job"}],"description":"Grants permission to view details about a job","accessLevel":"Read","resourceTypes":[{"name":"Job","required":true}]},"DescribeJobRun":{"conditionKeys":[],"resources":[{"name":"Job"}],"description":"Grants permission to view details about job run for a given job","accessLevel":"Read","resourceTypes":[{"name":"Job","required":true}]},"DescribeProject":{"conditionKeys":[],"resources":[{"name":"Project"}],"description":"Grants permission to view details about a project","accessLevel":"Read","resourceTypes":[{"name":"Project","required":true}]},"DescribeRecipe":{"conditionKeys":[],"resources":[{"name":"Recipe"}],"description":"Grants permission to view details about a recipe","accessLevel":"Read","resourceTypes":[{"name":"Recipe","required":true}]},"DescribeRuleset":{"conditionKeys":[],"resources":[{"name":"Ruleset"}],"description":"Grants permission to view details about a ruleset","accessLevel":"Read","resourceTypes":[{"name":"Ruleset","required":true}]},"DescribeSchedule":{"conditionKeys":[],"resources":[{"name":"Schedule"}],"description":"Grants permission to view details about a schedule","accessLevel":"Read","resourceTypes":[{"name":"Schedule","required":true}]},"ListDatasets":{"conditionKeys":[],"resources":[],"description":"Grants permission to list datasets in your account","accessLevel":"Read","resourceTypes":[]},"ListJobRuns":{"conditionKeys":[],"resources":[{"name":"Job"}],"description":"Grants permission to list job runs for a given job","accessLevel":"Read","resourceTypes":[{"name":"Job","required":true}]},"ListJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to list jobs in your account","accessLevel":"Read","resourceTypes":[]},"ListProjects":{"conditionKeys":[],"resources":[],"description":"Grants permission to list projects in your account","accessLevel":"Read","resourceTypes":[]},"ListRecipeVersions":{"conditionKeys":[],"resources":[{"name":"Recipe"}],"description":"Grants permission to list versions in your recipe","accessLevel":"Read","resourceTypes":[{"name":"Recipe","required":true}]},"ListRecipes":{"conditionKeys":[],"resources":[],"description":"Grants permission to list recipes in your account","accessLevel":"Read","resourceTypes":[]},"ListRulesets":{"conditionKeys":[],"resources":[],"description":"Grants permission to list rulesets in your account","accessLevel":"Read","resourceTypes":[]},"ListSchedules":{"conditionKeys":[],"resources":[],"description":"Grants permission to list schedules in your account","accessLevel":"Read","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"Dataset"},{"name":"Job"},{"name":"Project"},{"name":"Recipe"},{"name":"Ruleset"},{"name":"Schedule"}],"description":"Grants permission to retrieve tags associated with a resource","accessLevel":"Read","resourceTypes":[{"name":"Dataset","required":false},{"name":"Job","required":false},{"name":"Project","required":false},{"name":"Recipe","required":false},{"name":"Ruleset","required":false},{"name":"Schedule","required":false}]},"PublishRecipe":{"conditionKeys":[],"resources":[{"name":"Recipe"}],"description":"Grants permission to publish a major verison of a recipe","accessLevel":"Write","resourceTypes":[{"name":"Recipe","required":true}]},"SendProjectSessionAction":{"conditionKeys":[],"resources":[{"name":"Project"}],"description":"Grants permission to submit an action to the interactive session for a project","accessLevel":"Write","resourceTypes":[{"name":"Project","required":true}]},"StartJobRun":{"conditionKeys":[],"resources":[{"name":"Job"}],"description":"Grants permission to start running a job","accessLevel":"Write","resourceTypes":[{"name":"Job","required":true}]},"StartProjectSession":{"conditionKeys":[],"resources":[{"name":"Project"}],"description":"Grants permission to start an interactive session for a project","accessLevel":"Write","resourceTypes":[{"name":"Project","required":true}]},"StopJobRun":{"conditionKeys":[],"resources":[{"name":"Job"}],"description":"Grants permission to stop a job run for a job","accessLevel":"Write","resourceTypes":[{"name":"Job","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Dataset"},{"name":"Job"},{"name":"Project"},{"name":"Recipe"},{"name":"Ruleset"},{"name":"Schedule"}],"description":"Grants permission to add tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"Dataset","required":false},{"name":"Job","required":false},{"name":"Project","required":false},{"name":"Recipe","required":false},{"name":"Ruleset","required":false},{"name":"Schedule","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"Dataset"},{"name":"Job"},{"name":"Project"},{"name":"Recipe"},{"name":"Ruleset"},{"name":"Schedule"}],"description":"Grants permission to remove tags associated with a resource","accessLevel":"Tagging","resourceTypes":[{"name":"Dataset","required":false},{"name":"Job","required":false},{"name":"Project","required":false},{"name":"Recipe","required":false},{"name":"Ruleset","required":false},{"name":"Schedule","required":false}]},"UpdateDataset":{"conditionKeys":[],"resources":[{"name":"Dataset"}],"description":"Grants permission to modify a dataset","accessLevel":"Write","resourceTypes":[{"name":"Dataset","required":true}]},"UpdateProfileJob":{"conditionKeys":[],"resources":[{"name":"Job"}],"description":"Grants permission to modify a profile job","accessLevel":"Write","resourceTypes":[{"name":"Job","required":true}]},"UpdateProject":{"conditionKeys":[],"resources":[{"name":"Project"}],"description":"Grants permission to modify a project","accessLevel":"Write","resourceTypes":[{"name":"Project","required":true}]},"UpdateRecipe":{"conditionKeys":[],"resources":[{"name":"Recipe"}],"description":"Grants permission to modify a recipe","accessLevel":"Write","resourceTypes":[{"name":"Recipe","required":true}]},"UpdateRecipeJob":{"conditionKeys":[],"resources":[{"name":"Job"}],"description":"Grants permission to modify a recipe job","accessLevel":"Write","resourceTypes":[{"name":"Job","required":true}]},"UpdateRuleset":{"conditionKeys":[],"resources":[{"name":"Ruleset"}],"description":"Grants permission to modify a ruleset","accessLevel":"Write","resourceTypes":[{"name":"Ruleset","required":true}]},"UpdateSchedule":{"conditionKeys":[],"resources":[{"name":"Schedule"}],"description":"Grants permission to modify a schedule","accessLevel":"Write","resourceTypes":[{"name":"Schedule","required":true}]}},"resources":[{"name":"Dataset","arnFormats":["arn:${Partition}:databrew:${Region}:${Account}:dataset/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Job","arnFormats":["arn:${Partition}:databrew:${Region}:${Account}:job/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Project","arnFormats":["arn:${Partition}:databrew:${Region}:${Account}:project/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Recipe","arnFormats":["arn:${Partition}:databrew:${Region}:${Account}:recipe/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Ruleset","arnFormats":["arn:${Partition}:databrew:${Region}:${Account}:ruleset/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Schedule","arnFormats":["arn:${Partition}:databrew:${Region}:${Account}:schedule/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"dataexchange","actions":{"AcceptDataGrant":{"conditionKeys":[],"resources":[{"name":"data-grants"}],"description":"Grants permission to accept a data grant","accessLevel":"Write","resourceTypes":[{"name":"data-grants","required":true}]},"CancelJob":{"conditionKeys":[],"resources":[{"name":"jobs"}],"description":"Grants permission to cancel a job","accessLevel":"Write","resourceTypes":[{"name":"jobs","required":true}]},"CreateAsset":{"conditionKeys":[],"resources":[{"name":"revisions"}],"description":"Grants permission to create an asset (for example, in a Job)","accessLevel":"Write","resourceTypes":[{"name":"revisions","required":true}],"permissionOnly":true},"CreateDataGrant":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"data-grants"}],"description":"Grants permission to create a data grant","accessLevel":"Write","resourceTypes":[{"name":"data-grants","required":true}],"dependentActions":["dataexchange:PublishToDataGrant"]},"CreateDataSet":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"data-sets"}],"description":"Grants permission to create a data set","accessLevel":"Write","resourceTypes":[{"name":"data-sets","required":true}]},"CreateEventAction":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"event-actions"}],"description":"Grants permission to create an event action","accessLevel":"Write","resourceTypes":[{"name":"event-actions","required":true}]},"CreateJob":{"conditionKeys":["dataexchange:JobType"],"resources":[{"name":"jobs"}],"description":"Grants permission to create a job to import or export assets","accessLevel":"Write","resourceTypes":[{"name":"jobs","required":true}]},"CreateRevision":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"data-sets"}],"description":"Grants permission to create a revision","accessLevel":"Write","resourceTypes":[{"name":"data-sets","required":true}]},"DeleteAsset":{"conditionKeys":[],"resources":[{"name":"assets"}],"description":"Grants permission to delete an asset","accessLevel":"Write","resourceTypes":[{"name":"assets","required":true}]},"DeleteDataGrant":{"conditionKeys":[],"resources":[{"name":"data-grants"}],"description":"Grants permission to delete a data grant","accessLevel":"Write","resourceTypes":[{"name":"data-grants","required":true}]},"DeleteDataSet":{"conditionKeys":[],"resources":[{"name":"data-sets"},{"name":"entitled-data-sets"}],"description":"Grants permission to delete a data set","accessLevel":"Write","resourceTypes":[{"name":"data-sets","required":true},{"name":"entitled-data-sets","required":true}]},"DeleteEventAction":{"conditionKeys":[],"resources":[{"name":"event-actions"}],"description":"Grants permission to delete an event action","accessLevel":"Write","resourceTypes":[{"name":"event-actions","required":true}]},"DeleteRevision":{"conditionKeys":[],"resources":[{"name":"revisions"}],"description":"Grants permission to delete a revision","accessLevel":"Write","resourceTypes":[{"name":"revisions","required":true}]},"GetAsset":{"conditionKeys":[],"resources":[{"name":"assets"},{"name":"entitled-assets"}],"description":"Grants permission to get information about an asset and to export it (for example, in a Job)","accessLevel":"Read","resourceTypes":[{"name":"assets","required":true},{"name":"entitled-assets","required":true}]},"GetDataGrant":{"conditionKeys":[],"resources":[{"name":"data-grants"}],"description":"Grants permission to get a data grant","accessLevel":"Read","resourceTypes":[{"name":"data-grants","required":true}]},"GetDataSet":{"conditionKeys":[],"resources":[{"name":"data-sets"},{"name":"entitled-data-sets"}],"description":"Grants permission to get information about a data set","accessLevel":"Read","resourceTypes":[{"name":"data-sets","required":true},{"name":"entitled-data-sets","required":true}]},"GetEventAction":{"conditionKeys":[],"resources":[{"name":"event-actions"}],"description":"Grants permission to get an event action","accessLevel":"Read","resourceTypes":[{"name":"event-actions","required":true}]},"GetJob":{"conditionKeys":[],"resources":[{"name":"jobs"}],"description":"Grants permission to get information about a job","accessLevel":"Read","resourceTypes":[{"name":"jobs","required":true}]},"GetReceivedDataGrant":{"conditionKeys":[],"resources":[{"name":"data-grants"}],"description":"Grants permission to get a received data grant","accessLevel":"Read","resourceTypes":[{"name":"data-grants","required":true}]},"GetRevision":{"conditionKeys":[],"resources":[{"name":"entitled-revisions"},{"name":"revisions"}],"description":"Grants permission to get information about a revision","accessLevel":"Read","resourceTypes":[{"name":"entitled-revisions","required":true},{"name":"revisions","required":true}]},"ListDataGrants":{"conditionKeys":[],"resources":[],"description":"Grants permission to list data grants for the account","accessLevel":"List","resourceTypes":[]},"ListDataSetRevisions":{"conditionKeys":[],"resources":[{"name":"data-sets"},{"name":"entitled-data-sets"}],"description":"Grants permission to list the revisions of a data set","accessLevel":"List","resourceTypes":[{"name":"data-sets","required":true},{"name":"entitled-data-sets","required":true}]},"ListDataSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to list data sets for the account","accessLevel":"List","resourceTypes":[]},"ListEventActions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list event actions for the account","accessLevel":"List","resourceTypes":[]},"ListJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to list jobs for the account","accessLevel":"List","resourceTypes":[]},"ListReceivedDataGrants":{"conditionKeys":[],"resources":[],"description":"Grants permission to list received data grants for the account","accessLevel":"List","resourceTypes":[]},"ListRevisionAssets":{"conditionKeys":[],"resources":[{"name":"entitled-revisions"},{"name":"revisions"}],"description":"Grants permission to get list the assets of a revision","accessLevel":"List","resourceTypes":[{"name":"entitled-revisions","required":true},{"name":"revisions","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"data-grants"},{"name":"data-sets"},{"name":"event-actions"},{"name":"revisions"}],"description":"Grants permission to list the tags that you associated with the specified resource","accessLevel":"List","resourceTypes":[{"name":"data-grants","required":false},{"name":"data-sets","required":false},{"name":"event-actions","required":false},{"name":"revisions","required":false}]},"PublishDataSet":{"conditionKeys":[],"resources":[{"name":"data-sets"}],"description":"Grants permission to publish a data set to a product","accessLevel":"Write","resourceTypes":[{"name":"data-sets","required":true}],"permissionOnly":true},"PublishToDataGrant":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"data-sets"}],"description":"Grants permission to publish a data set to a data grant","accessLevel":"Write","resourceTypes":[{"name":"data-sets","required":true}],"permissionOnly":true},"RevokeRevision":{"conditionKeys":[],"resources":[{"name":"revisions"}],"description":"Grants permission to revoke subscriber access to a revision","accessLevel":"Write","resourceTypes":[{"name":"revisions","required":true}]},"SendApiAsset":{"conditionKeys":[],"resources":[{"name":"assets"},{"name":"entitled-assets"}],"description":"Grants permission to send a request to an API asset","accessLevel":"Write","resourceTypes":[{"name":"assets","required":true},{"name":"entitled-assets","required":true}]},"SendDataSetNotification":{"conditionKeys":[],"resources":[{"name":"data-sets"}],"description":"Grants permission to send a notification to subscribers of a data set","accessLevel":"Write","resourceTypes":[{"name":"data-sets","required":true}]},"StartJob":{"conditionKeys":[],"resources":[{"name":"jobs"}],"description":"Grants permission to start a job","accessLevel":"Write","resourceTypes":[{"name":"jobs","required":true}],"dependentActions":["dataexchange:CreateAsset","dataexchange:DeleteDataSet","dataexchange:GetAsset","dataexchange:GetDataSet","dataexchange:GetRevision","dataexchange:PublishDataSet","redshift:AuthorizeDataShare"]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"data-grants"},{"name":"data-sets"},{"name":"event-actions"},{"name":"revisions"}],"description":"Grants permission to add one or more tags to a specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"data-grants","required":false},{"name":"data-sets","required":false},{"name":"event-actions","required":false},{"name":"revisions","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"data-grants"},{"name":"data-sets"},{"name":"event-actions"},{"name":"revisions"}],"description":"Grants permission to remove one or more tags from a specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"data-grants","required":false},{"name":"data-sets","required":false},{"name":"event-actions","required":false},{"name":"revisions","required":false}]},"UpdateAsset":{"conditionKeys":[],"resources":[{"name":"assets"}],"description":"Grants permission to get update information about an asset","accessLevel":"Write","resourceTypes":[{"name":"assets","required":true}]},"UpdateDataSet":{"conditionKeys":[],"resources":[{"name":"data-sets"}],"description":"Grants permission to update information about a data set","accessLevel":"Write","resourceTypes":[{"name":"data-sets","required":true}]},"UpdateEventAction":{"conditionKeys":[],"resources":[{"name":"event-actions"}],"description":"Grants permission to update information for an event action","accessLevel":"Write","resourceTypes":[{"name":"event-actions","required":true}]},"UpdateRevision":{"conditionKeys":[],"resources":[{"name":"revisions"}],"description":"Grants permission to update information about a revision","accessLevel":"Write","resourceTypes":[{"name":"revisions","required":true}],"dependentActions":["dataexchange:PublishDataSet","dataexchange:PublishToDataGrant"]}},"resources":[{"name":"assets","arnFormats":["arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/${DataSetId}/revisions/${RevisionId}/assets/${AssetId}"],"conditionKeys":[]},{"name":"data-grants","arnFormats":["arn:${Partition}:dataexchange:${Region}:${Account}:data-grants/${DataGrantId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"data-sets","arnFormats":["arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/${DataSetId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"entitled-assets","arnFormats":["arn:${Partition}:dataexchange:${Region}::data-sets/${DataSetId}/revisions/${RevisionId}/assets/${AssetId}"],"conditionKeys":[]},{"name":"entitled-data-sets","arnFormats":["arn:${Partition}:dataexchange:${Region}::data-sets/${DataSetId}"],"conditionKeys":[]},{"name":"entitled-revisions","arnFormats":["arn:${Partition}:dataexchange:${Region}::data-sets/${DataSetId}/revisions/${RevisionId}"],"conditionKeys":[]},{"name":"event-actions","arnFormats":["arn:${Partition}:dataexchange:${Region}:${Account}:event-actions/${EventActionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"jobs","arnFormats":["arn:${Partition}:dataexchange:${Region}:${Account}:jobs/${JobId}"],"conditionKeys":["dataexchange:JobType"]},{"name":"revisions","arnFormats":["arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/${DataSetId}/revisions/${RevisionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the allowed set of values for each of the mandatory tags in the create request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of mandatory tags in the create request"},"dataexchange:JobType":{"types":["String"],"description":"Filters access by the specified job type"}}}
@@ -0,0 +1 @@
1
+ {"name":"datapipeline","actions":{"ActivatePipeline":{"conditionKeys":["datapipeline:PipelineCreator","datapipeline:Tag/${TagKey}","datapipeline:workerGroup"],"resources":[{"name":"pipeline"}],"description":"Grants permission to validate the specified pipeline and starts processing pipeline tasks. If the pipeline does not pass validation, activation fails","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]},"AddTags":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","datapipeline:PipelineCreator","datapipeline:Tag/${TagKey}"],"resources":[{"name":"pipeline"}],"description":"Grants permission to add or modify tags for the specified pipeline","accessLevel":"Tagging","resourceTypes":[{"name":"pipeline","required":true}]},"CreatePipeline":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","datapipeline:Tag/${TagKey}"],"resources":[],"description":"Grants permission to create a new, empty pipeline","accessLevel":"Write","resourceTypes":[],"dependentActions":["datapipeline:AddTags"]},"DeactivatePipeline":{"conditionKeys":["datapipeline:PipelineCreator","datapipeline:Tag/${TagKey}","datapipeline:workerGroup"],"resources":[{"name":"pipeline"}],"description":"Grants permission to Deactivate the specified running pipeline","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]},"DeletePipeline":{"conditionKeys":["datapipeline:PipelineCreator","datapipeline:Tag/${TagKey}"],"resources":[{"name":"pipeline"}],"description":"Grants permission to delete a pipeline, its pipeline definition, and its run history","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]},"DescribeObjects":{"conditionKeys":["datapipeline:PipelineCreator","datapipeline:Tag/${TagKey}"],"resources":[{"name":"pipeline"}],"description":"Grants permission to get the object definitions for a set of objects associated with the pipeline","accessLevel":"Read","resourceTypes":[{"name":"pipeline","required":true}]},"DescribePipelines":{"conditionKeys":["datapipeline:PipelineCreator","datapipeline:Tag/${TagKey}"],"resources":[{"name":"pipeline"}],"description":"Grants permission to retrieves metadata about one or more pipelines","accessLevel":"Read","resourceTypes":[{"name":"pipeline","required":true}]},"EvaluateExpression":{"conditionKeys":["datapipeline:PipelineCreator","datapipeline:Tag/${TagKey}"],"resources":[{"name":"pipeline"}],"description":"Grants permission to task runners to call EvaluateExpression, to evaluate a string in the context of the specified object","accessLevel":"Read","resourceTypes":[{"name":"pipeline","required":true}]},"GetAccountLimits":{"conditionKeys":[],"resources":[],"description":"Grants permission to call GetAccountLimits","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"GetPipelineDefinition":{"conditionKeys":["datapipeline:PipelineCreator","datapipeline:Tag/${TagKey}","datapipeline:workerGroup"],"resources":[{"name":"pipeline"}],"description":"Grants permission to gets the definition of the specified pipeline","accessLevel":"Read","resourceTypes":[{"name":"pipeline","required":true}]},"ListPipelines":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the pipeline identifiers for all active pipelines that you have permission to access","accessLevel":"List","resourceTypes":[]},"PollForTask":{"conditionKeys":["datapipeline:workerGroup"],"resources":[],"description":"Grants permission to task runners to call PollForTask, to receive a task to perform from AWS Data Pipeline","accessLevel":"Write","resourceTypes":[]},"PutAccountLimits":{"conditionKeys":[],"resources":[],"description":"Grants permission to call PutAccountLimits","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"PutPipelineDefinition":{"conditionKeys":["datapipeline:PipelineCreator","datapipeline:Tag/${TagKey}","datapipeline:workerGroup"],"resources":[{"name":"pipeline"}],"description":"Grants permission to add tasks, schedules, and preconditions to the specified pipeline","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]},"QueryObjects":{"conditionKeys":["datapipeline:PipelineCreator","datapipeline:Tag/${TagKey}"],"resources":[{"name":"pipeline"}],"description":"Grants permission to query the specified pipeline for the names of objects that match the specified set of conditions","accessLevel":"Read","resourceTypes":[{"name":"pipeline","required":true}]},"RemoveTags":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","datapipeline:PipelineCreator","datapipeline:Tag/${TagKey}"],"resources":[{"name":"pipeline"}],"description":"Grants permission to remove existing tags from the specified pipeline","accessLevel":"Tagging","resourceTypes":[{"name":"pipeline","required":true}]},"ReportTaskProgress":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Grants permission to task runners to call ReportTaskProgress, when they are assigned a task to acknowledge that it has the task","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]},"ReportTaskRunnerHeartbeat":{"conditionKeys":[],"resources":[],"description":"Grants permission to task runners to call ReportTaskRunnerHeartbeat every 15 minutes to indicate that they are operational","accessLevel":"Write","resourceTypes":[]},"SetStatus":{"conditionKeys":["datapipeline:PipelineCreator","datapipeline:Tag/${TagKey}"],"resources":[{"name":"pipeline"}],"description":"Grants permission to requests that the status of the specified physical or logical pipeline objects be updated in the specified pipeline","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]},"SetTaskStatus":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Grants permission to task runners to call SetTaskStatus to notify AWS Data Pipeline that a task is completed and provide information about the final status","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]},"ValidatePipelineDefinition":{"conditionKeys":["datapipeline:PipelineCreator","datapipeline:Tag/${TagKey}","datapipeline:workerGroup"],"resources":[{"name":"pipeline"}],"description":"Grants permission to validate the specified pipeline definition to ensure that it is well formed and can be run without error","accessLevel":"Read","resourceTypes":[{"name":"pipeline","required":true}]}},"resources":[{"name":"pipeline","arnFormats":["arn:${Partition}:datapipeline:${Region}:${Account}:pipeline/${PipelineId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"},"datapipeline:PipelineCreator":{"types":["ArrayOfString"],"description":"Filters access by the IAM user that created the pipeline"},"datapipeline:Tag/${TagKey}":{"types":["String"],"description":"Filters access by customer-specified key/value pair that can be attached to a resource"},"datapipeline:workerGroup":{"types":["ArrayOfString"],"description":"Filters access by the name of a worker group for which a Task Runner retrieves work"}}}
@@ -0,0 +1 @@
1
+ {"name":"datasync","actions":{"AddStorageSystem":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"agent"}],"description":"Grants permission to create a storage system","accessLevel":"Write","resourceTypes":[{"name":"agent","required":true}]},"CancelTaskExecution":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"taskexecution"}],"description":"Grants permission to cancel execution of a sync task","accessLevel":"Write","resourceTypes":[{"name":"taskexecution","required":true}]},"CreateAgent":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to activate an agent that you have deployed on your host","accessLevel":"Write","resourceTypes":[]},"CreateLocationAzureBlob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an endpoint for a Microsoft Azure Blob Storage container","accessLevel":"Write","resourceTypes":[]},"CreateLocationEfs":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an endpoint for an Amazon EFS file system","accessLevel":"Write","resourceTypes":[]},"CreateLocationFsxLustre":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an endpoint for an Amazon Fsx Lustre","accessLevel":"Write","resourceTypes":[]},"CreateLocationFsxOntap":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an endpoint for Amazon FSx for ONTAP","accessLevel":"Write","resourceTypes":[]},"CreateLocationFsxOpenZfs":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an endpoint for Amazon FSx for OpenZFS","accessLevel":"Write","resourceTypes":[]},"CreateLocationFsxWindows":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an endpoint for an Amazon FSx Windows File Server file system","accessLevel":"Write","resourceTypes":[]},"CreateLocationHdfs":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an endpoint for an Amazon Hdfs","accessLevel":"Write","resourceTypes":[]},"CreateLocationNfs":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an endpoint for a NFS file system","accessLevel":"Write","resourceTypes":[]},"CreateLocationObjectStorage":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an endpoint for a self-managed object storage bucket","accessLevel":"Write","resourceTypes":[]},"CreateLocationS3":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an endpoint for an Amazon S3 bucket","accessLevel":"Write","resourceTypes":[]},"CreateLocationSmb":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an endpoint for an SMB file system","accessLevel":"Write","resourceTypes":[]},"CreateTask":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"agent"},{"name":"location"}],"description":"Grants permission to create a sync task","accessLevel":"Write","resourceTypes":[{"name":"location","required":true},{"name":"agent","required":false}]},"DeleteAgent":{"conditionKeys":[],"resources":[{"name":"agent"}],"description":"Grants permission to delete an agent","accessLevel":"Write","resourceTypes":[{"name":"agent","required":true}]},"DeleteLocation":{"conditionKeys":[],"resources":[{"name":"location"}],"description":"Grants permission to delete a location used by AWS DataSync","accessLevel":"Write","resourceTypes":[{"name":"location","required":true}]},"DeleteTask":{"conditionKeys":[],"resources":[{"name":"task"}],"description":"Grants permission to delete a sync task","accessLevel":"Write","resourceTypes":[{"name":"task","required":true}]},"DescribeAgent":{"conditionKeys":[],"resources":[{"name":"agent"}],"description":"Grants permission to view metadata such as name, network interfaces, and the status (that is, whether the agent is running or not) about a sync agent","accessLevel":"Read","resourceTypes":[{"name":"agent","required":true}]},"DescribeDiscoveryJob":{"conditionKeys":[],"resources":[{"name":"discoveryjob"}],"description":"Grants permission to describe metadata about a discovery job","accessLevel":"Read","resourceTypes":[{"name":"discoveryjob","required":true}]},"DescribeLocationAzureBlob":{"conditionKeys":[],"resources":[{"name":"location"}],"description":"Grants permission to view metadata, such as the path information about an Azure Blob Storage sync location","accessLevel":"Read","resourceTypes":[{"name":"location","required":true}]},"DescribeLocationEfs":{"conditionKeys":[],"resources":[{"name":"location"}],"description":"Grants permission to view metadata, such as the path information about an Amazon EFS sync location","accessLevel":"Read","resourceTypes":[{"name":"location","required":true}]},"DescribeLocationFsxLustre":{"conditionKeys":[],"resources":[{"name":"location"}],"description":"Grants permission to view metadata, such as the path information about an Amazon FSx Lustre sync location","accessLevel":"Read","resourceTypes":[{"name":"location","required":true}]},"DescribeLocationFsxOntap":{"conditionKeys":[],"resources":[{"name":"location"}],"description":"Grants permission to view metadata, such as the path information about an Amazon FSx for ONTAP sync location","accessLevel":"Read","resourceTypes":[{"name":"location","required":true}]},"DescribeLocationFsxOpenZfs":{"conditionKeys":[],"resources":[{"name":"location"}],"description":"Grants permission to view metadata, such as the path information about an Amazon FSx OpenZFS sync location","accessLevel":"Read","resourceTypes":[{"name":"location","required":true}]},"DescribeLocationFsxWindows":{"conditionKeys":[],"resources":[{"name":"location"}],"description":"Grants permission to view metadata, such as the path information about an Amazon FSx Windows sync location","accessLevel":"Read","resourceTypes":[{"name":"location","required":true}]},"DescribeLocationHdfs":{"conditionKeys":[],"resources":[{"name":"location"}],"description":"Grants permission to view metadata, such as the path information about an Amazon HDFS sync location","accessLevel":"Read","resourceTypes":[{"name":"location","required":true}]},"DescribeLocationNfs":{"conditionKeys":[],"resources":[{"name":"location"}],"description":"Grants permission to view metadata, such as the path information, about a NFS sync location","accessLevel":"Read","resourceTypes":[{"name":"location","required":true}]},"DescribeLocationObjectStorage":{"conditionKeys":[],"resources":[{"name":"location"}],"description":"Grants permission to view metadata about a self-managed object storage server location","accessLevel":"Read","resourceTypes":[{"name":"location","required":true}]},"DescribeLocationS3":{"conditionKeys":[],"resources":[{"name":"location"}],"description":"Grants permission to view metadata, such as bucket name, about an Amazon S3 bucket sync location","accessLevel":"Read","resourceTypes":[{"name":"location","required":true}]},"DescribeLocationSmb":{"conditionKeys":[],"resources":[{"name":"location"}],"description":"Grants permission to view metadata, such as the path information, about an SMB sync location","accessLevel":"Read","resourceTypes":[{"name":"location","required":true}]},"DescribeStorageSystem":{"conditionKeys":[],"resources":[{"name":"storagesystem"}],"description":"Grants permission to view metadata about a storage system","accessLevel":"Read","resourceTypes":[{"name":"storagesystem","required":true}]},"DescribeStorageSystemResourceMetrics":{"conditionKeys":[],"resources":[{"name":"discoveryjob"}],"description":"Grants permission to describe resource metrics collected by a discovery job","accessLevel":"List","resourceTypes":[{"name":"discoveryjob","required":true}]},"DescribeStorageSystemResources":{"conditionKeys":[],"resources":[{"name":"discoveryjob"}],"description":"Grants permission to describe resources identified by a discovery job","accessLevel":"List","resourceTypes":[{"name":"discoveryjob","required":true}]},"DescribeTask":{"conditionKeys":[],"resources":[{"name":"task"}],"description":"Grants permission to view metadata about a sync task","accessLevel":"Read","resourceTypes":[{"name":"task","required":true}]},"DescribeTaskExecution":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"taskexecution"}],"description":"Grants permission to view metadata about a sync task that is being executed","accessLevel":"Read","resourceTypes":[{"name":"taskexecution","required":true}]},"GenerateRecommendations":{"conditionKeys":[],"resources":[{"name":"discoveryjob"}],"description":"Grants permission to generate recommendations for a resource identified by a discovery job","accessLevel":"Write","resourceTypes":[{"name":"discoveryjob","required":true}]},"ListAgents":{"conditionKeys":[],"resources":[],"description":"Grants permission to list agents owned by an AWS account in a region specified in the request","accessLevel":"List","resourceTypes":[]},"ListDiscoveryJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to list discovery jobs","accessLevel":"List","resourceTypes":[]},"ListLocations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list source and destination sync locations","accessLevel":"List","resourceTypes":[]},"ListStorageSystems":{"conditionKeys":[],"resources":[],"description":"Grants permission to list storage systems","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"agent"},{"name":"discoveryjob"},{"name":"location"},{"name":"storagesystem"},{"name":"task"},{"name":"taskexecution"}],"description":"Grants permission to list tags that have been added to the specified resource","accessLevel":"Read","resourceTypes":[{"name":"agent","required":false},{"name":"discoveryjob","required":false},{"name":"location","required":false},{"name":"storagesystem","required":false},{"name":"task","required":false},{"name":"taskexecution","required":false}]},"ListTaskExecutions":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[],"description":"Grants permission to list executed sync tasks","accessLevel":"List","resourceTypes":[]},"ListTasks":{"conditionKeys":[],"resources":[],"description":"Grants permission to list of all the sync tasks","accessLevel":"List","resourceTypes":[]},"RemoveStorageSystem":{"conditionKeys":[],"resources":[{"name":"storagesystem"}],"description":"Grants permission to delete a storage system","accessLevel":"Write","resourceTypes":[{"name":"storagesystem","required":true}]},"StartDiscoveryJob":{"conditionKeys":[],"resources":[{"name":"storagesystem"}],"description":"Grants permission to start a discovery job for a storage system","accessLevel":"Write","resourceTypes":[{"name":"storagesystem","required":true}]},"StartTaskExecution":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"task"}],"description":"Grants permission to start a specific invocation of a sync task","accessLevel":"Write","resourceTypes":[{"name":"task","required":true}]},"StopDiscoveryJob":{"conditionKeys":[],"resources":[{"name":"discoveryjob"}],"description":"Grants permission to stop a discovery job","accessLevel":"Write","resourceTypes":[{"name":"discoveryjob","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"agent"},{"name":"discoveryjob"},{"name":"location"},{"name":"storagesystem"},{"name":"task"},{"name":"taskexecution"}],"description":"Grants permission to apply a key-value pair to an AWS resource","accessLevel":"Tagging","resourceTypes":[{"name":"agent","required":false},{"name":"discoveryjob","required":false},{"name":"location","required":false},{"name":"storagesystem","required":false},{"name":"task","required":false},{"name":"taskexecution","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"agent"},{"name":"discoveryjob"},{"name":"location"},{"name":"storagesystem"},{"name":"task"},{"name":"taskexecution"}],"description":"Grants permission to remove one or more tags from the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"agent","required":false},{"name":"discoveryjob","required":false},{"name":"location","required":false},{"name":"storagesystem","required":false},{"name":"task","required":false},{"name":"taskexecution","required":false}]},"UpdateAgent":{"conditionKeys":[],"resources":[{"name":"agent"}],"description":"Grants permission to update the name of an agent","accessLevel":"Write","resourceTypes":[{"name":"agent","required":true}]},"UpdateDiscoveryJob":{"conditionKeys":[],"resources":[{"name":"discoveryjob"}],"description":"Grants permission to update a discovery job","accessLevel":"Write","resourceTypes":[{"name":"discoveryjob","required":true}]},"UpdateLocationAzureBlob":{"conditionKeys":[],"resources":[{"name":"location"}],"description":"Grants permission to update an Azure Blob Storage sync location","accessLevel":"Write","resourceTypes":[{"name":"location","required":true}]},"UpdateLocationEfs":{"conditionKeys":[],"resources":[{"name":"location"}],"description":"Grants permission to update an EFS sync Location","accessLevel":"Write","resourceTypes":[{"name":"location","required":true}]},"UpdateLocationFsxLustre":{"conditionKeys":[],"resources":[{"name":"location"}],"description":"Grants permission to update an FSx Lustre sync Location","accessLevel":"Write","resourceTypes":[{"name":"location","required":true}]},"UpdateLocationFsxOntap":{"conditionKeys":[],"resources":[{"name":"location"}],"description":"Grants permission to update an FSx ONTAP sync Location","accessLevel":"Write","resourceTypes":[{"name":"location","required":true}]},"UpdateLocationFsxOpenZfs":{"conditionKeys":[],"resources":[{"name":"location"}],"description":"Grants permission to update an FSx OpenZFS sync Location","accessLevel":"Write","resourceTypes":[{"name":"location","required":true}]},"UpdateLocationFsxWindows":{"conditionKeys":[],"resources":[{"name":"location"}],"description":"Grants permission to update an FSx Windows sync Location","accessLevel":"Write","resourceTypes":[{"name":"location","required":true}]},"UpdateLocationHdfs":{"conditionKeys":[],"resources":[{"name":"location"}],"description":"Grants permission to update an HDFS sync Location","accessLevel":"Write","resourceTypes":[{"name":"location","required":true}]},"UpdateLocationNfs":{"conditionKeys":[],"resources":[{"name":"location"}],"description":"Grants permission to update an NFS sync Location","accessLevel":"Write","resourceTypes":[{"name":"location","required":true}]},"UpdateLocationObjectStorage":{"conditionKeys":[],"resources":[{"name":"location"}],"description":"Grants permission to update a self-managed object storage server location","accessLevel":"Write","resourceTypes":[{"name":"location","required":true}]},"UpdateLocationS3":{"conditionKeys":[],"resources":[{"name":"location"}],"description":"Grants permission to update an S3 sync Location","accessLevel":"Write","resourceTypes":[{"name":"location","required":true}]},"UpdateLocationSmb":{"conditionKeys":[],"resources":[{"name":"location"}],"description":"Grants permission to update a SMB sync location","accessLevel":"Write","resourceTypes":[{"name":"location","required":true}]},"UpdateStorageSystem":{"conditionKeys":[],"resources":[{"name":"storagesystem"}],"description":"Grants permission to update a storage system","accessLevel":"Write","resourceTypes":[{"name":"storagesystem","required":true}]},"UpdateTask":{"conditionKeys":[],"resources":[{"name":"task"}],"description":"Grants permission to update metadata associated with a sync task","accessLevel":"Write","resourceTypes":[{"name":"task","required":true}]},"UpdateTaskExecution":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"taskexecution"}],"description":"Grants permission to update execution of a sync task","accessLevel":"Write","resourceTypes":[{"name":"taskexecution","required":true}]}},"resources":[{"name":"agent","arnFormats":["arn:${Partition}:datasync:${Region}:${AccountId}:agent/${AgentId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"discoveryjob","arnFormats":["arn:${Partition}:datasync:${Region}:${AccountId}:system/${StorageSystemId}/job/${DiscoveryJobId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"location","arnFormats":["arn:${Partition}:datasync:${Region}:${AccountId}:location/${LocationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"storagesystem","arnFormats":["arn:${Partition}:datasync:${Region}:${AccountId}:system/${StorageSystemId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"task","arnFormats":["arn:${Partition}:datasync:${Region}:${AccountId}:task/${TaskId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"taskexecution","arnFormats":["arn:${Partition}:datasync:${Region}:${AccountId}:task/${TaskId}/execution/${ExecutionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"datazone","actions":{"AcceptPredictions":{"conditionKeys":[],"resources":[],"description":"Grants permission to accept prediction","accessLevel":"Write","resourceTypes":[]},"AcceptSubscriptionRequest":{"conditionKeys":[],"resources":[],"description":"Grants permission to approve a subscription request for a Data Asset","accessLevel":"Write","resourceTypes":[]},"AddEntityOwner":{"conditionKeys":[],"resources":[],"description":"Grants permission to add an owner to an entity like domain unit","accessLevel":"Write","resourceTypes":[]},"AddPolicyGrant":{"conditionKeys":[],"resources":[],"description":"Grants permission to add a policy grant","accessLevel":"Permissions management","resourceTypes":[]},"AssociateEnvironmentRole":{"conditionKeys":[],"resources":[],"description":"Grants permission to associate a role in a default service blueprint environment","accessLevel":"Write","resourceTypes":[]},"AssociateGovernedTerms":{"conditionKeys":[],"resources":[],"description":"Grants permission to associate governed terms to an asset","accessLevel":"Write","resourceTypes":[]},"BatchDeleteLinkedTypes":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to remove linked type items from an Amazon DataZone Domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"permissionOnly":true},"BatchGetAttributesMetadata":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve attributes metadata","accessLevel":"Read","resourceTypes":[]},"BatchGetCell":{"conditionKeys":[],"resources":[],"description":"Grants permission to batch get cells","accessLevel":"Read","resourceTypes":[]},"BatchGetCellRun":{"conditionKeys":[],"resources":[],"description":"Grants permission to batch get cell runs","accessLevel":"Read","resourceTypes":[]},"BatchPutAttributesMetadata":{"conditionKeys":[],"resources":[],"description":"Grants permission to create and update attributes metadata","accessLevel":"Write","resourceTypes":[]},"BatchPutLinkedTypes":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to put linked type items to an Amazon DataZone Domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"permissionOnly":true},"CancelMetadataGenerationRun":{"conditionKeys":[],"resources":[],"description":"Grants permission to cancel metadata generation run","accessLevel":"Write","resourceTypes":[]},"CancelSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to revoke or unsubscribe an approved subscription to Data Asset","accessLevel":"Write","resourceTypes":[]},"CreateAccountPool":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an account pool","accessLevel":"Write","resourceTypes":[]},"CreateAsset":{"conditionKeys":[],"resources":[],"description":"Grants permission to create asset","accessLevel":"Write","resourceTypes":[]},"CreateAssetFilter":{"conditionKeys":[],"resources":[],"description":"Grants permission to create asset filter","accessLevel":"Write","resourceTypes":[]},"CreateAssetRevision":{"conditionKeys":[],"resources":[],"description":"Grants permission to create new revision of an asset","accessLevel":"Write","resourceTypes":[]},"CreateAssetType":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an asset type","accessLevel":"Write","resourceTypes":[]},"CreateCell":{"conditionKeys":[],"resources":[],"description":"Grants permission to create cells","accessLevel":"Write","resourceTypes":[]},"CreateCellRun":{"conditionKeys":[],"resources":[],"description":"Grants permission to create cell runs","accessLevel":"Write","resourceTypes":[]},"CreateConnection":{"conditionKeys":[],"resources":[],"description":"Grants permission to create connections","accessLevel":"Write","resourceTypes":[]},"CreateDataProduct":{"conditionKeys":[],"resources":[],"description":"Grants permission to create data product","accessLevel":"Write","resourceTypes":[]},"CreateDataProductRevision":{"conditionKeys":[],"resources":[],"description":"Grants permission to create data product revision","accessLevel":"Write","resourceTypes":[]},"CreateDataSource":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new DataSource","accessLevel":"Write","resourceTypes":[]},"CreateDomain":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to provision a domain which is a top level entity that contains other Amazon DataZone resources","accessLevel":"Write","resourceTypes":[]},"CreateDomainUnit":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a domain unit","accessLevel":"Write","resourceTypes":[]},"CreateEnvironment":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a collection of configurated resources used to publish and subscribe to data","accessLevel":"Write","resourceTypes":[]},"CreateEnvironmentAction":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an environment action in a default service blueprint environment","accessLevel":"Write","resourceTypes":[]},"CreateEnvironmentBlueprint":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a custom Environment Blueprint that allow user to add Environments to their Project","accessLevel":"Write","resourceTypes":[]},"CreateEnvironmentProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a template from a Blueprint that can be used to create a Environment","accessLevel":"Write","resourceTypes":[]},"CreateFormType":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a form type or a new revision of it","accessLevel":"Write","resourceTypes":[]},"CreateGlossary":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a business glossary","accessLevel":"Write","resourceTypes":[]},"CreateGlossaryTerm":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a glossary term","accessLevel":"Write","resourceTypes":[]},"CreateGroupProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a DataZone group profile for an IAM Identity Center group","accessLevel":"Write","resourceTypes":[]},"CreateListingChangeSet":{"conditionKeys":[],"resources":[],"description":"Grants permission to create listing change set","accessLevel":"Write","resourceTypes":[]},"CreateNotebook":{"conditionKeys":[],"resources":[],"description":"Grants permission to create notebooks","accessLevel":"Write","resourceTypes":[]},"CreateProject":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a Project to enable your team to publish and subscribe to data","accessLevel":"Write","resourceTypes":[]},"CreateProjectMembership":{"conditionKeys":[],"resources":[],"description":"Grants permission to add a user to a Project","accessLevel":"Write","resourceTypes":[]},"CreateProjectProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a project profile","accessLevel":"Write","resourceTypes":[]},"CreateRule":{"conditionKeys":[],"resources":[],"description":"Grants permission to create rule","accessLevel":"Write","resourceTypes":[]},"CreateSubscriptionGrant":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a grant for an approved subscription on a subscription target","accessLevel":"Write","resourceTypes":[]},"CreateSubscriptionRequest":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a subscription request for a Data Asset","accessLevel":"Write","resourceTypes":[]},"CreateSubscriptionTarget":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a subscription target for a Environment in the project","accessLevel":"Write","resourceTypes":[]},"CreateUserProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a user profile for an existing user in the customers IAM Identity Center","accessLevel":"Write","resourceTypes":[]},"DeleteAccountPool":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete an account pool","accessLevel":"Write","resourceTypes":[]},"DeleteAsset":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete an asset","accessLevel":"Write","resourceTypes":[]},"DeleteAssetFilter":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete asset filter","accessLevel":"Write","resourceTypes":[]},"DeleteAssetType":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete an asset type","accessLevel":"Write","resourceTypes":[]},"DeleteCell":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete cells","accessLevel":"Write","resourceTypes":[]},"DeleteCellRun":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete cell runs","accessLevel":"Write","resourceTypes":[]},"DeleteConnection":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete connections","accessLevel":"Write","resourceTypes":[]},"DeleteDataExportConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete DataZone catalog data export configuration","accessLevel":"Write","resourceTypes":[]},"DeleteDataProduct":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete data product","accessLevel":"Write","resourceTypes":[]},"DeleteDataSource":{"conditionKeys":[],"resources":[],"description":"Grants permission to update existing DataSource","accessLevel":"Write","resourceTypes":[]},"DeleteDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to delete a provisioned domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DeleteDomainSharingPolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a resource policy for a DataZone Domain","accessLevel":"Permissions management","resourceTypes":[],"permissionOnly":true},"DeleteDomainUnit":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete an existing domain unit","accessLevel":"Write","resourceTypes":[]},"DeleteEnvironment":{"conditionKeys":[],"resources":[],"description":"Grants permission to Delete Environment","accessLevel":"Write","resourceTypes":[]},"DeleteEnvironmentAction":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete an environment action in a default service blueprint environment","accessLevel":"Write","resourceTypes":[]},"DeleteEnvironmentBlueprint":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete Environment Blueprint","accessLevel":"Write","resourceTypes":[]},"DeleteEnvironmentBlueprintConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete environment blueprint configuration","accessLevel":"Write","resourceTypes":[]},"DeleteEnvironmentProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete Environment Profile","accessLevel":"Write","resourceTypes":[]},"DeleteFormType":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a form type","accessLevel":"Write","resourceTypes":[]},"DeleteGlossary":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a business glossary","accessLevel":"Write","resourceTypes":[]},"DeleteGlossaryTerm":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a glossary term","accessLevel":"Write","resourceTypes":[]},"DeleteListing":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete listing","accessLevel":"Write","resourceTypes":[]},"DeleteNotebook":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete notebooks","accessLevel":"Write","resourceTypes":[]},"DeleteProject":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a Project that enables your team to publish and subscribe to data","accessLevel":"Write","resourceTypes":[]},"DeleteProjectMembership":{"conditionKeys":[],"resources":[],"description":"Grants permission to remove a user from a project","accessLevel":"Write","resourceTypes":[]},"DeleteProjectProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a project profile","accessLevel":"Write","resourceTypes":[]},"DeleteRule":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete rule","accessLevel":"Write","resourceTypes":[]},"DeleteSubscriptionGrant":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a subscription grant from a subscription target","accessLevel":"Write","resourceTypes":[]},"DeleteSubscriptionRequest":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a pending subscription request for a Data Asset","accessLevel":"Write","resourceTypes":[]},"DeleteSubscriptionTarget":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a subscription target from a Environment in the project","accessLevel":"Write","resourceTypes":[]},"DeleteTimeSeriesDataPoints":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete existing TimeSeriesDataPoints","accessLevel":"Write","resourceTypes":[]},"DisassociateEnvironmentRole":{"conditionKeys":[],"resources":[],"description":"Grants permission to disassociate a role in a default service blueprint environment","accessLevel":"Write","resourceTypes":[]},"DisassociateGovernedTerms":{"conditionKeys":[],"resources":[],"description":"Grants permission to disassociate governed terms to an asset","accessLevel":"Write","resourceTypes":[]},"GenerateCode":{"conditionKeys":[],"resources":[],"description":"Grants permission to generate code","accessLevel":"Write","resourceTypes":[]},"GetAccountPool":{"conditionKeys":[],"resources":[],"description":"Grants permission to get account pool details","accessLevel":"Read","resourceTypes":[]},"GetAsset":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an asset","accessLevel":"Read","resourceTypes":[]},"GetAssetFilter":{"conditionKeys":[],"resources":[],"description":"Grants permission to get asset filter","accessLevel":"Read","resourceTypes":[]},"GetAssetType":{"conditionKeys":[],"resources":[],"description":"Grants permission to get an asset type","accessLevel":"Read","resourceTypes":[]},"GetCell":{"conditionKeys":[],"resources":[],"description":"Grants permission to get cells","accessLevel":"Read","resourceTypes":[]},"GetCellRun":{"conditionKeys":[],"resources":[],"description":"Grants permission to get cell runs","accessLevel":"Read","resourceTypes":[]},"GetCellRunResult":{"conditionKeys":[],"resources":[],"description":"Grants permission to get cell run result","accessLevel":"Read","resourceTypes":[]},"GetConnection":{"conditionKeys":[],"resources":[],"description":"Grants permission to get connections","accessLevel":"Read","resourceTypes":[]},"GetConversation":{"conditionKeys":[],"resources":[],"description":"Grants permission to get conversations","accessLevel":"Read","resourceTypes":[]},"GetDataExportConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve DataZone catalog data export configuration","accessLevel":"Read","resourceTypes":[]},"GetDataProduct":{"conditionKeys":[],"resources":[],"description":"Grants permission to get data product","accessLevel":"Read","resourceTypes":[]},"GetDataSource":{"conditionKeys":[],"resources":[],"description":"Grants permission to Get a existing DataSource in Amazon DataZone using its identifier","accessLevel":"Read","resourceTypes":[]},"GetDataSourceRun":{"conditionKeys":[],"resources":[],"description":"Grants permission to get DataSource run job in Amazon DataZone using it's identifier","accessLevel":"Read","resourceTypes":[]},"GetDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to retrieve information about a domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"GetDomainExecutionRoleCredentials":{"conditionKeys":[],"resources":[],"description":"Grants permission to use features that require access to domain execution role credentials","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetDomainSharingPolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a resource policy for a DataZone Domain","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetDomainUnit":{"conditionKeys":[],"resources":[],"description":"Grants permission to get an existing domain unit","accessLevel":"Read","resourceTypes":[]},"GetEnvironment":{"conditionKeys":[],"resources":[],"description":"Grants permission to get Environment details","accessLevel":"Read","resourceTypes":[]},"GetEnvironmentAction":{"conditionKeys":[],"resources":[],"description":"Grants permission to get an environment action in a default service blueprint environment","accessLevel":"Read","resourceTypes":[]},"GetEnvironmentActionLink":{"conditionKeys":[],"resources":[],"description":"Grants permission to get environment action link","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetEnvironmentBlueprint":{"conditionKeys":[],"resources":[],"description":"Grants permission to get Environment Blueprint details","accessLevel":"Read","resourceTypes":[]},"GetEnvironmentBlueprintConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to get environment blueprint configuration","accessLevel":"Read","resourceTypes":[]},"GetEnvironmentCredentials":{"conditionKeys":[],"resources":[],"description":"Grants permission to get short term credentials that assume the Environment user role","accessLevel":"Read","resourceTypes":[]},"GetEnvironmentProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to get Environment Profile details","accessLevel":"Read","resourceTypes":[]},"GetFormType":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a form type","accessLevel":"Read","resourceTypes":[]},"GetGlossary":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a business glossary","accessLevel":"Read","resourceTypes":[]},"GetGlossaryTerm":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a glossary term","accessLevel":"Read","resourceTypes":[]},"GetGroupProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an existing DataZone group profile","accessLevel":"Read","resourceTypes":[]},"GetIamPortalLoginUrl":{"conditionKeys":[],"resources":[],"description":"Grants permission to an IAM principal to log into the DataZone Portal","accessLevel":"Permissions management","resourceTypes":[]},"GetJobRun":{"conditionKeys":[],"resources":[],"description":"Grants permission to get job runs","accessLevel":"Read","resourceTypes":[]},"GetLineageEvent":{"conditionKeys":[],"resources":[],"description":"Grants permission to get lineage events","accessLevel":"Read","resourceTypes":[]},"GetLineageNode":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the lineage node","accessLevel":"Read","resourceTypes":[]},"GetListing":{"conditionKeys":[],"resources":[],"description":"Grants permission to get listing","accessLevel":"Read","resourceTypes":[]},"GetMetadataGenerationRun":{"conditionKeys":[],"resources":[],"description":"Grants permission to get metadata generation run","accessLevel":"Read","resourceTypes":[]},"GetNotebook":{"conditionKeys":[],"resources":[],"description":"Grants permission to get notebooks","accessLevel":"Read","resourceTypes":[]},"GetNotebookCompute":{"conditionKeys":[],"resources":[],"description":"Grants permission to get notebook compute","accessLevel":"Read","resourceTypes":[]},"GetNotebookExport":{"conditionKeys":[],"resources":[],"description":"Grants permission to get notebook exports","accessLevel":"Read","resourceTypes":[]},"GetProject":{"conditionKeys":[],"resources":[],"description":"Grants permission to get Project details","accessLevel":"Read","resourceTypes":[]},"GetProjectProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to get project profile details","accessLevel":"Read","resourceTypes":[]},"GetRule":{"conditionKeys":[],"resources":[],"description":"Grants permission to get rule","accessLevel":"Read","resourceTypes":[]},"GetSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a subscription","accessLevel":"Read","resourceTypes":[]},"GetSubscriptionEligibility":{"conditionKeys":[],"resources":[],"description":"Grants permission to get subscription eligibilty","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetSubscriptionGrant":{"conditionKeys":[],"resources":[],"description":"Grants permission to retireve a subscription grant","accessLevel":"Read","resourceTypes":[]},"GetSubscriptionRequestDetails":{"conditionKeys":[],"resources":[],"description":"Grants permission to reject a subscription request for a Data Asset","accessLevel":"Read","resourceTypes":[]},"GetSubscriptionTarget":{"conditionKeys":[],"resources":[],"description":"Grants permission to retireve details of subscription target","accessLevel":"Read","resourceTypes":[]},"GetTimeSeriesDataPoint":{"conditionKeys":[],"resources":[],"description":"Grants permission to get an existing TimeSeriesDataPoints in Amazon DataZone using its identifier","accessLevel":"Read","resourceTypes":[]},"GetUpdateEligibility":{"conditionKeys":[],"resources":[],"description":"Grants permission to get update eligibility status for project constructs","accessLevel":"Read","resourceTypes":[]},"GetUserProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a user profile for an existing user in the DataZone Domain","accessLevel":"Read","resourceTypes":[]},"ListAccountEnvironments":{"conditionKeys":[],"resources":[],"description":"Grants permission to list Environments across all domains in an AWS Account","accessLevel":"List","resourceTypes":[]},"ListAccountPools":{"conditionKeys":[],"resources":[],"description":"Grants permission to list account pools","accessLevel":"List","resourceTypes":[]},"ListAccountsInAccountPool":{"conditionKeys":[],"resources":[],"description":"Grants permission to list accounts in an account pool","accessLevel":"List","resourceTypes":[]},"ListAssetFilters":{"conditionKeys":[],"resources":[],"description":"Grants permission to list asset filters","accessLevel":"List","resourceTypes":[]},"ListAssetRevisions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list revisions of an asset","accessLevel":"List","resourceTypes":[]},"ListCellRuns":{"conditionKeys":[],"resources":[],"description":"Grants permission to list cell runs","accessLevel":"List","resourceTypes":[]},"ListConnections":{"conditionKeys":[],"resources":[],"description":"Grants permission to list connections","accessLevel":"List","resourceTypes":[]},"ListConversations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list conversations","accessLevel":"List","resourceTypes":[]},"ListDataProductRevisions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list data product revisions","accessLevel":"List","resourceTypes":[]},"ListDataSourceRunActivities":{"conditionKeys":[],"resources":[],"description":"Grants permission to list DataSource runs job's activities on Asset","accessLevel":"List","resourceTypes":[]},"ListDataSourceRuns":{"conditionKeys":[],"resources":[],"description":"Grants permission to list DataSource runs job","accessLevel":"List","resourceTypes":[]},"ListDataSources":{"conditionKeys":[],"resources":[],"description":"Grants permission to list existing DataSources","accessLevel":"List","resourceTypes":[]},"ListDomainUnitsForParent":{"conditionKeys":[],"resources":[],"description":"Grants permission to list child domain units for a given parent domain unit","accessLevel":"List","resourceTypes":[]},"ListDomains":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve all domains","accessLevel":"List","resourceTypes":[]},"ListEntityOwners":{"conditionKeys":[],"resources":[],"description":"Grants permission to list owners of an entity like domain unit","accessLevel":"List","resourceTypes":[]},"ListEnvironmentActions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list environment actions in a default service blueprint environment","accessLevel":"List","resourceTypes":[]},"ListEnvironmentBlueprintConfigurationSummaries":{"conditionKeys":[],"resources":[],"description":"Grants permission to list environment blueprint configuration summaries","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListEnvironmentBlueprintConfigurations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list environment blueprint configurations","accessLevel":"List","resourceTypes":[]},"ListEnvironmentBlueprints":{"conditionKeys":[],"resources":[],"description":"Grants permission to list Domain for Environment Blueprints","accessLevel":"List","resourceTypes":[]},"ListEnvironmentProfiles":{"conditionKeys":[],"resources":[],"description":"Grants permission to list Domain for Environment Profiles","accessLevel":"List","resourceTypes":[]},"ListEnvironments":{"conditionKeys":[],"resources":[],"description":"Grants permission to show Environments in the Domain","accessLevel":"List","resourceTypes":[]},"ListGroupsForUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the DataZone group profiles that the DataZone user profile is a member of","accessLevel":"List","resourceTypes":[]},"ListJobRuns":{"conditionKeys":[],"resources":[],"description":"Grants permission to list job runs","accessLevel":"List","resourceTypes":[]},"ListLineageEvents":{"conditionKeys":[],"resources":[],"description":"Grants permission to list lineage events","accessLevel":"List","resourceTypes":[]},"ListLineageNodeHistory":{"conditionKeys":[],"resources":[],"description":"Grants permission to list historical versions of lineage node","accessLevel":"List","resourceTypes":[]},"ListLinkedTypes":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to list linked type items linked to an Amazon DataZone Domain","accessLevel":"List","resourceTypes":[{"name":"domain","required":true}],"permissionOnly":true},"ListMetadataGenerationRuns":{"conditionKeys":[],"resources":[],"description":"Grants permission to list metadata generation runs","accessLevel":"List","resourceTypes":[]},"ListNotebooks":{"conditionKeys":[],"resources":[],"description":"Grants permission to list notebooks","accessLevel":"List","resourceTypes":[]},"ListNotifications":{"conditionKeys":[],"resources":[],"description":"Grants permission to list notifications and events for a datazone user","accessLevel":"List","resourceTypes":[]},"ListPolicyGrants":{"conditionKeys":[],"resources":[],"description":"Grants permission to list policy grants","accessLevel":"List","resourceTypes":[]},"ListProjectMemberships":{"conditionKeys":[],"resources":[],"description":"Grants permission to list Project Members","accessLevel":"List","resourceTypes":[]},"ListProjectProfiles":{"conditionKeys":[],"resources":[],"description":"Grants permission to list project profiles","accessLevel":"List","resourceTypes":[]},"ListProjects":{"conditionKeys":[],"resources":[],"description":"Grants permission to list Projects","accessLevel":"List","resourceTypes":[]},"ListRules":{"conditionKeys":[],"resources":[],"description":"Grants permission to list rules","accessLevel":"List","resourceTypes":[]},"ListSubscriptionGrants":{"conditionKeys":[],"resources":[],"description":"Grants permission to List subscription grants for a subscribed principal","accessLevel":"List","resourceTypes":[]},"ListSubscriptionRequests":{"conditionKeys":[],"resources":[],"description":"Grants permission to list subscription requests","accessLevel":"List","resourceTypes":[]},"ListSubscriptionTargets":{"conditionKeys":[],"resources":[],"description":"Grants permission to list subscription targets","accessLevel":"List","resourceTypes":[]},"ListSubscriptions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list subscriptions","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to retrieve all tags associated with a resource","accessLevel":"Read","resourceTypes":[{"name":"domain","required":false}]},"ListTimeSeriesDataPoints":{"conditionKeys":[],"resources":[],"description":"Grants permission to list existing TimeSeriesDataPoints","accessLevel":"List","resourceTypes":[]},"ListWarehouseMetadata":{"conditionKeys":[],"resources":[],"description":"Grants permission to list available Manager Secrets","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"PostLineageEvent":{"conditionKeys":[],"resources":[],"description":"Grants permission to post lineage events","accessLevel":"Write","resourceTypes":[]},"PostTimeSeriesDataPoints":{"conditionKeys":[],"resources":[],"description":"Grants permission to post a new TimeSeriesDataPoints","accessLevel":"Write","resourceTypes":[]},"ProvisionDomain":{"conditionKeys":[],"resources":[],"description":"Grants permission to provision domain with default project setup","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"PutCellRunResult":{"conditionKeys":[],"resources":[],"description":"Grants permission to put cell run results","accessLevel":"Write","resourceTypes":[]},"PutDataExportConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to create and update DataZone catalog data export configuration","accessLevel":"Write","resourceTypes":[]},"PutDomainSharingPolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to add a resource policy for a DataZone Domain","accessLevel":"Permissions management","resourceTypes":[],"permissionOnly":true},"PutEnvironmentBlueprintConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to put environment blueprint configuration","accessLevel":"Write","resourceTypes":[]},"QueryGraph":{"conditionKeys":[],"resources":[],"description":"Grants permission to query graph","accessLevel":"List","resourceTypes":[]},"RefreshToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to refresh token","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"RejectPredictions":{"conditionKeys":[],"resources":[],"description":"Grants permission to reject prediction","accessLevel":"Write","resourceTypes":[]},"RejectSubscriptionRequest":{"conditionKeys":[],"resources":[],"description":"Grants permission to reject a subscription request for a Data Asset","accessLevel":"Write","resourceTypes":[]},"RemoveEntityOwner":{"conditionKeys":[],"resources":[],"description":"Grants permission to remove an existing owner of an entity like domain unit","accessLevel":"Write","resourceTypes":[]},"RemovePolicyGrant":{"conditionKeys":[],"resources":[],"description":"Grants permission to remove a policy grant","accessLevel":"Permissions management","resourceTypes":[]},"RevokeSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to revoke a subscription","accessLevel":"Permissions management","resourceTypes":[]},"Search":{"conditionKeys":[],"resources":[],"description":"Grants permission to search datazone entities","accessLevel":"List","resourceTypes":[]},"SearchGroupProfiles":{"conditionKeys":[],"resources":[],"description":"Grants permission to search DataZone group profiles and IAM Identity Center groups","accessLevel":"List","resourceTypes":[]},"SearchListings":{"conditionKeys":[],"resources":[],"description":"Grants permission to search listings","accessLevel":"List","resourceTypes":[]},"SearchRules":{"conditionKeys":[],"resources":[],"description":"Grants permission to search rules","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"SearchTypes":{"conditionKeys":[],"resources":[],"description":"Grants permission to search types such asset types and form types in a domain","accessLevel":"List","resourceTypes":[]},"SearchUserProfiles":{"conditionKeys":[],"resources":[],"description":"Grants permission to search DataZone user profiles, IAM Identity Center users, and DataZone IAM principal profiles","accessLevel":"List","resourceTypes":[]},"SendMessage":{"conditionKeys":[],"resources":[],"description":"Grants permission to send messages","accessLevel":"Write","resourceTypes":[]},"SsoLogin":{"conditionKeys":[],"resources":[],"description":"Grants permission to login using SSO","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"SsoLogout":{"conditionKeys":[],"resources":[],"description":"Grants permission to logout as SSO user","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"StartAccountBootstrapAction":{"conditionKeys":[],"resources":[],"description":"Grants permission to start account bootstrap action for a domain","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"StartConversation":{"conditionKeys":[],"resources":[],"description":"Grants permission to start conversations","accessLevel":"Write","resourceTypes":[]},"StartDataSourceRun":{"conditionKeys":[],"resources":[],"description":"Grants permission to start a DataSource run job","accessLevel":"Write","resourceTypes":[]},"StartMetadataGenerationRun":{"conditionKeys":[],"resources":[],"description":"Grants permission to start metadata generation run","accessLevel":"Write","resourceTypes":[]},"StartNotebookCompute":{"conditionKeys":[],"resources":[],"description":"Grants permission to start notebook compute","accessLevel":"Write","resourceTypes":[]},"StartNotebookExport":{"conditionKeys":[],"resources":[],"description":"Grants permission to export notebooks","accessLevel":"Write","resourceTypes":[]},"StartNotebookImport":{"conditionKeys":[],"resources":[],"description":"Grants permission to import notebooks","accessLevel":"Write","resourceTypes":[]},"StopMetadataGenerationRun":{"conditionKeys":[],"resources":[],"description":"Grants permission to stop metadata generation run","accessLevel":"Write","resourceTypes":[]},"StopNotebookCompute":{"conditionKeys":[],"resources":[],"description":"Grants permission to stop notebook compute","accessLevel":"Write","resourceTypes":[]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"domain"}],"description":"Grants permission to add or update tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"domain","required":true}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"domain"}],"description":"Grants permission to remove tags associated with a resource","accessLevel":"Tagging","resourceTypes":[{"name":"domain","required":true}]},"UpdateAccountPool":{"conditionKeys":[],"resources":[],"description":"Grants permission to update an account pool","accessLevel":"Write","resourceTypes":[]},"UpdateAssetFilter":{"conditionKeys":[],"resources":[],"description":"Grants permission to update asset filter","accessLevel":"Write","resourceTypes":[]},"UpdateCell":{"conditionKeys":[],"resources":[],"description":"Grants permission to update cells","accessLevel":"Write","resourceTypes":[]},"UpdateCellRun":{"conditionKeys":[],"resources":[],"description":"Grants permission to update cell runs","accessLevel":"Write","resourceTypes":[]},"UpdateConnection":{"conditionKeys":[],"resources":[],"description":"Grants permission to update connections","accessLevel":"Write","resourceTypes":[]},"UpdateDataSource":{"conditionKeys":[],"resources":[],"description":"Grants permission to update existing DataSource","accessLevel":"Write","resourceTypes":[]},"UpdateDataSourceRunActivities":{"conditionKeys":[],"resources":[],"description":"Grants permission to update data source run activities","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"UpdateDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to update information for a domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"UpdateDomainUnit":{"conditionKeys":[],"resources":[],"description":"Grants permission to update an existing domain unit","accessLevel":"Write","resourceTypes":[]},"UpdateEnvironment":{"conditionKeys":[],"resources":[],"description":"Grants permission to update Environment settings","accessLevel":"Write","resourceTypes":[]},"UpdateEnvironmentAction":{"conditionKeys":[],"resources":[],"description":"Grants permission to update an environment action in a default service blueprint environment","accessLevel":"Write","resourceTypes":[]},"UpdateEnvironmentBlueprint":{"conditionKeys":[],"resources":[],"description":"Grants permission to update Environment Blueprint settings","accessLevel":"Write","resourceTypes":[]},"UpdateEnvironmentConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update environment configuration","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"UpdateEnvironmentDeploymentStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to update status of the Environment deployment","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"UpdateEnvironmentProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to update EnvironmentProfile configuration","accessLevel":"Write","resourceTypes":[]},"UpdateGlossary":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a business glossary","accessLevel":"Write","resourceTypes":[]},"UpdateGlossaryTerm":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a glossary term","accessLevel":"Write","resourceTypes":[]},"UpdateGroupProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a DataZone group profile","accessLevel":"Write","resourceTypes":[]},"UpdateNotebook":{"conditionKeys":[],"resources":[],"description":"Grants permission to update notebooks","accessLevel":"Write","resourceTypes":[]},"UpdateProject":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a Project that enables your team to publish and subscribe to data","accessLevel":"Write","resourceTypes":[]},"UpdateProjectProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a project profile","accessLevel":"Write","resourceTypes":[]},"UpdateRule":{"conditionKeys":[],"resources":[],"description":"Grants permission to update rule","accessLevel":"Write","resourceTypes":[]},"UpdateSubscriptionGrantStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a subscription grant status for custom grants","accessLevel":"Write","resourceTypes":[]},"UpdateSubscriptionRequest":{"conditionKeys":[],"resources":[],"description":"Grants permission to update business reason for subscription request for a Data Asset","accessLevel":"Write","resourceTypes":[]},"UpdateSubscriptionTarget":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a subscription target","accessLevel":"Write","resourceTypes":[]},"UpdateUserProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a DataZone user profile","accessLevel":"Write","resourceTypes":[]},"ValidatePassRole":{"conditionKeys":[],"resources":[],"description":"Grants permission to validate pass role","accessLevel":"Write","resourceTypes":[],"permissionOnly":true}},"resources":[{"name":"domain","arnFormats":["arn:${Partition}:datazone:${Region}:${Account}:domain/${DomainId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"datazone:domainId":{"types":["String"],"description":"Filters access by the domain ID passed in the request"},"datazone:projectId":{"types":["String"],"description":"Filters access by the project ID passed in the request"},"datazone:userId":{"types":["String"],"description":"Filters access by the user ID passed in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"dax","actions":{"BatchGetItem":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to return the attributes of one or more items from one or more tables","accessLevel":"Read","resourceTypes":[{"name":"application","required":true}]},"BatchWriteItem":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to put or delete multiple items in one or more tables","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"ConditionCheckItem":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to the ConditionCheckItem operation that checks the existence of a set of attributes for the item with the given primary key","accessLevel":"Read","resourceTypes":[{"name":"application","required":true}]},"CreateCluster":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to create a DAX cluster","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}],"dependentActions":["dax:CreateParameterGroup","dax:CreateSubnetGroup","ec2:CreateNetworkInterface","ec2:DeleteNetworkInterface","ec2:DescribeNetworkInterfaces","ec2:DescribeSecurityGroups","ec2:DescribeSubnets","ec2:DescribeVpcs","iam:GetRole","iam:PassRole"]},"CreateParameterGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a parameter group","accessLevel":"Write","resourceTypes":[]},"CreateSubnetGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a subnet group","accessLevel":"Write","resourceTypes":[]},"DecreaseReplicationFactor":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to remove one or more nodes from a DAX cluster","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"DeleteCluster":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to delete a previously provisioned DAX cluster","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"DeleteItem":{"conditionKeys":["dax:EnclosingOperation"],"resources":[{"name":"application"}],"description":"Grants permission to delete a single item in a table by primary key","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"DeleteParameterGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the specified parameter group","accessLevel":"Write","resourceTypes":[]},"DeleteSubnetGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a subnet group","accessLevel":"Write","resourceTypes":[]},"DescribeClusters":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to return information about all provisioned DAX clusters","accessLevel":"List","resourceTypes":[{"name":"application","required":false}]},"DescribeDefaultParameters":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the default system parameter information for DAX","accessLevel":"List","resourceTypes":[]},"DescribeEvents":{"conditionKeys":[],"resources":[],"description":"Grants permission to return events related to DAX clusters and parameter groups","accessLevel":"List","resourceTypes":[]},"DescribeParameterGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of parameter group descriptions","accessLevel":"List","resourceTypes":[]},"DescribeParameters":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the detailed parameter list for a particular parameter group","accessLevel":"Read","resourceTypes":[]},"DescribeSubnetGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of subnet group descriptions","accessLevel":"List","resourceTypes":[]},"GetItem":{"conditionKeys":["dax:EnclosingOperation"],"resources":[{"name":"application"}],"description":"Grants permission to the GetItem operation that returns a set of attributes for the item with the given primary key","accessLevel":"Read","resourceTypes":[{"name":"application","required":true}]},"IncreaseReplicationFactor":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to add one or more nodes to a DAX cluster","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"ListTags":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to return a list all of the tags for a DAX cluster","accessLevel":"Read","resourceTypes":[{"name":"application","required":true}]},"PutItem":{"conditionKeys":["dax:EnclosingOperation"],"resources":[{"name":"application"}],"description":"Grants permission to create a new item, or replace an old item with a new item","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"Query":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to use the primary key of a table or a secondary index to directly access items from that table or index","accessLevel":"Read","resourceTypes":[{"name":"application","required":true}]},"RebootNode":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to reboot a single node of a DAX cluster","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"Scan":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to return one or more items and item attributes by accessing every item in a table or a secondary index","accessLevel":"Read","resourceTypes":[{"name":"application","required":true}]},"TagResource":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to associate a set of tags with a DAX resource","accessLevel":"Tagging","resourceTypes":[{"name":"application","required":true}]},"UntagResource":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to remove the association of tags from a DAX resource","accessLevel":"Tagging","resourceTypes":[{"name":"application","required":true}]},"UpdateCluster":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to modify the settings for a DAX cluster","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"UpdateItem":{"conditionKeys":["dax:EnclosingOperation"],"resources":[{"name":"application"}],"description":"Grants permission to edit an existing item's attributes, or adds a new item to the table if it does not already exist","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"UpdateParameterGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to modify the parameters of a parameter group","accessLevel":"Write","resourceTypes":[]},"UpdateSubnetGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to modify an existing subnet group","accessLevel":"Write","resourceTypes":[]}},"resources":[{"name":"application","arnFormats":["arn:${Partition}:dax:${Region}:${Account}:cache/${ClusterName}"],"conditionKeys":[]}],"conditionKeys":{"dax:EnclosingOperation":{"types":["String"],"description":"Used to block Transactions APIs calls and allow the non-Transaction APIs calls and vice-versa"}}}
@@ -0,0 +1 @@
1
+ {"name":"dbqms","actions":{"CreateFavoriteQuery":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new favorite query","accessLevel":"Write","resourceTypes":[]},"CreateQueryHistory":{"conditionKeys":[],"resources":[],"description":"Grants permission to add a query to the history","accessLevel":"Write","resourceTypes":[]},"CreateTab":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new query tab","accessLevel":"Write","resourceTypes":[]},"DeleteFavoriteQueries":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete saved queries","accessLevel":"Write","resourceTypes":[]},"DeleteQueryHistory":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a historical query","accessLevel":"Write","resourceTypes":[]},"DeleteTab":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete query tab","accessLevel":"Write","resourceTypes":[]},"DescribeFavoriteQueries":{"conditionKeys":[],"resources":[],"description":"Grants permission to list saved queries and associated metadata","accessLevel":"List","resourceTypes":[]},"DescribeQueryHistory":{"conditionKeys":[],"resources":[],"description":"Grants permission to list history of queries that were run","accessLevel":"List","resourceTypes":[]},"DescribeTabs":{"conditionKeys":[],"resources":[],"description":"Grants permission to list query tabs and associated metadata","accessLevel":"List","resourceTypes":[]},"GetQueryString":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve favorite or history query string by id","accessLevel":"Read","resourceTypes":[]},"UpdateFavoriteQuery":{"conditionKeys":[],"resources":[],"description":"Grants permission to update saved query and description","accessLevel":"Write","resourceTypes":[]},"UpdateQueryHistory":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the query history","accessLevel":"Write","resourceTypes":[]},"UpdateTab":{"conditionKeys":[],"resources":[],"description":"Grants permission to update query tab","accessLevel":"Write","resourceTypes":[]}},"resources":[],"conditionKeys":{}}
@@ -0,0 +1 @@
1
+ {"name":"deadline","actions":{"AssociateMemberToFarm":{"conditionKeys":["deadline:AssociatedMembershipLevel","deadline:MembershipLevel"],"resources":[{"name":"farm"}],"description":"Grants permission to associate a member to a farm","accessLevel":"Permissions management","resourceTypes":[{"name":"farm","required":true}],"dependentActions":["identitystore:DescribeGroup","identitystore:DescribeUser","identitystore:ListGroupMembershipsForMember"]},"AssociateMemberToFleet":{"conditionKeys":["deadline:AssociatedMembershipLevel","deadline:MembershipLevel"],"resources":[{"name":"fleet"}],"description":"Grants permission to associate a member to a fleet","accessLevel":"Permissions management","resourceTypes":[{"name":"fleet","required":true}],"dependentActions":["identitystore:DescribeGroup","identitystore:DescribeUser","identitystore:ListGroupMembershipsForMember"]},"AssociateMemberToJob":{"conditionKeys":["deadline:AssociatedMembershipLevel","deadline:MembershipLevel"],"resources":[{"name":"job"}],"description":"Grants permission to associate a member to a job","accessLevel":"Permissions management","resourceTypes":[{"name":"job","required":true}],"dependentActions":["identitystore:DescribeGroup","identitystore:DescribeUser","identitystore:ListGroupMembershipsForMember"]},"AssociateMemberToQueue":{"conditionKeys":["deadline:AssociatedMembershipLevel","deadline:MembershipLevel"],"resources":[{"name":"queue"}],"description":"Grants permission to associate a member to a queue","accessLevel":"Permissions management","resourceTypes":[{"name":"queue","required":true}],"dependentActions":["identitystore:DescribeGroup","identitystore:DescribeUser","identitystore:ListGroupMembershipsForMember"]},"AssumeFleetRoleForRead":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to assume a fleet role for read-only access","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"AssumeFleetRoleForWorker":{"conditionKeys":[],"resources":[{"name":"worker"}],"description":"Grants permission to assume a fleet role for a worker","accessLevel":"Write","resourceTypes":[{"name":"worker","required":true}]},"AssumeQueueRoleForRead":{"conditionKeys":[],"resources":[{"name":"queue"}],"description":"Grants permission to assume a queue role for read-only access","accessLevel":"Write","resourceTypes":[{"name":"queue","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"AssumeQueueRoleForUser":{"conditionKeys":[],"resources":[{"name":"queue"}],"description":"Grants permission to assume a queue role for a user","accessLevel":"Write","resourceTypes":[{"name":"queue","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"AssumeQueueRoleForWorker":{"conditionKeys":[],"resources":[{"name":"queue"},{"name":"worker"}],"description":"Grants permission to assume a queue role for a worker","accessLevel":"Write","resourceTypes":[{"name":"queue","required":true},{"name":"worker","required":true}]},"BatchGetJobEntity":{"conditionKeys":[],"resources":[{"name":"worker"}],"description":"Grants permission to get a job entity for a worker","accessLevel":"Read","resourceTypes":[{"name":"worker","required":true}]},"CopyJobTemplate":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to copy a job template to an Amazon S3 bucket","accessLevel":"Write","resourceTypes":[{"name":"job","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember","s3:PutObject"]},"CreateBudget":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"budget"}],"description":"Grants permission to create a budget","accessLevel":"Write","resourceTypes":[{"name":"budget","required":true}],"dependentActions":["deadline:TagResource","identitystore:ListGroupMembershipsForMember"]},"CreateFarm":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"farm"}],"description":"Grants permission to create a farm","accessLevel":"Write","resourceTypes":[{"name":"farm","required":true}],"dependentActions":["deadline:TagResource"]},"CreateFleet":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"fleet"}],"description":"Grants permission to create a fleet","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true}],"dependentActions":["deadline:TagResource","ec2:CreateVpcEndpoint","iam:PassRole","identitystore:ListGroupMembershipsForMember","logs:CreateLogGroup","vpc-lattice:GetResourceConfiguration","vpc-lattice:GetResourceGateway"]},"CreateJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"job"}],"description":"Grants permission to create a job","accessLevel":"Write","resourceTypes":[{"name":"job","required":true}],"dependentActions":["deadline:GetJobTemplate","identitystore:ListGroupMembershipsForMember"]},"CreateLicenseEndpoint":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"license-endpoint"}],"description":"Grants permission to create a license endpoint for licensed software or products","accessLevel":"Write","resourceTypes":[{"name":"license-endpoint","required":true}],"dependentActions":["deadline:TagResource","ec2:CreateTags","ec2:CreateVpcEndpoint","ec2:DescribeVpcEndpoints"]},"CreateLimit":{"conditionKeys":[],"resources":[{"name":"farm"}],"description":"Grants permission to create a limit for a farm","accessLevel":"Write","resourceTypes":[{"name":"farm","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"CreateMonitor":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"monitor"}],"description":"Grants permission to create a monitor","accessLevel":"Write","resourceTypes":[{"name":"monitor","required":true}],"dependentActions":["deadline:TagResource","iam:PassRole","sso:CreateApplication","sso:DeleteApplication","sso:PutApplicationAssignmentConfiguration","sso:PutApplicationAuthenticationMethod","sso:PutApplicationGrant"]},"CreateQueue":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"queue"}],"description":"Grants permission to create a queue","accessLevel":"Write","resourceTypes":[{"name":"queue","required":true}],"dependentActions":["deadline:TagResource","iam:PassRole","identitystore:ListGroupMembershipsForMember","logs:CreateLogGroup","s3:ListBucket"]},"CreateQueueEnvironment":{"conditionKeys":[],"resources":[{"name":"queue"}],"description":"Grants permission to create a queue environment","accessLevel":"Write","resourceTypes":[{"name":"queue","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"CreateQueueFleetAssociation":{"conditionKeys":[],"resources":[{"name":"fleet"},{"name":"queue"}],"description":"Grants permission to create a queue-fleet association","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true},{"name":"queue","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"CreateQueueLimitAssociation":{"conditionKeys":[],"resources":[{"name":"farm"},{"name":"queue"}],"description":"Grants permission to create a queue-limit association","accessLevel":"Write","resourceTypes":[{"name":"farm","required":true},{"name":"queue","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"CreateStorageProfile":{"conditionKeys":[],"resources":[{"name":"farm"}],"description":"Grants permission to create a storage profile for a farm","accessLevel":"Write","resourceTypes":[{"name":"farm","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"CreateWorker":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"worker"}],"description":"Grants permission to create a worker","accessLevel":"Write","resourceTypes":[{"name":"worker","required":true}],"dependentActions":["deadline:ListTagsForResource","deadline:TagResource"]},"DeleteBudget":{"conditionKeys":[],"resources":[{"name":"budget"}],"description":"Grants permission to delete a budget","accessLevel":"Write","resourceTypes":[{"name":"budget","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"DeleteFarm":{"conditionKeys":[],"resources":[{"name":"farm"}],"description":"Grants permission to delete a farm","accessLevel":"Write","resourceTypes":[{"name":"farm","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"DeleteFleet":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to delete a fleet","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"DeleteLicenseEndpoint":{"conditionKeys":[],"resources":[{"name":"license-endpoint"}],"description":"Grants permission to delete a license endpoint","accessLevel":"Write","resourceTypes":[{"name":"license-endpoint","required":true}],"dependentActions":["ec2:DeleteVpcEndpoints","ec2:DescribeVpcEndpoints"]},"DeleteLimit":{"conditionKeys":[],"resources":[{"name":"farm"}],"description":"Grants permission to delete a limit","accessLevel":"Write","resourceTypes":[{"name":"farm","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"DeleteMeteredProduct":{"conditionKeys":[],"resources":[{"name":"license-endpoint"}],"description":"Grants permission to delete a metered product","accessLevel":"Write","resourceTypes":[{"name":"license-endpoint","required":true}]},"DeleteMonitor":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to delete a monitor","accessLevel":"Write","resourceTypes":[{"name":"monitor","required":true}],"dependentActions":["sso:DeleteApplication"]},"DeleteQueue":{"conditionKeys":[],"resources":[{"name":"queue"}],"description":"Grants permission to delete a queue","accessLevel":"Write","resourceTypes":[{"name":"queue","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"DeleteQueueEnvironment":{"conditionKeys":[],"resources":[{"name":"queue"}],"description":"Grants permission to delete a queue environment","accessLevel":"Write","resourceTypes":[{"name":"queue","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"DeleteQueueFleetAssociation":{"conditionKeys":[],"resources":[{"name":"fleet"},{"name":"queue"}],"description":"Grants permission to delete a queue-fleet association","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true},{"name":"queue","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"DeleteQueueLimitAssociation":{"conditionKeys":[],"resources":[{"name":"farm"},{"name":"queue"}],"description":"Grants permission to delete a queue-limit association","accessLevel":"Write","resourceTypes":[{"name":"farm","required":true},{"name":"queue","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"DeleteStorageProfile":{"conditionKeys":[],"resources":[{"name":"farm"}],"description":"Grants permission to delete a storage profile","accessLevel":"Write","resourceTypes":[{"name":"farm","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"DeleteWorker":{"conditionKeys":[],"resources":[{"name":"worker"}],"description":"Grants permission to delete a worker","accessLevel":"Write","resourceTypes":[{"name":"worker","required":true}]},"DisassociateMemberFromFarm":{"conditionKeys":["deadline:AssociatedMembershipLevel"],"resources":[{"name":"farm"}],"description":"Grants permission to disassociate a member from a farm","accessLevel":"Permissions management","resourceTypes":[{"name":"farm","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"DisassociateMemberFromFleet":{"conditionKeys":["deadline:AssociatedMembershipLevel"],"resources":[{"name":"fleet"}],"description":"Grants permission to disassociate a member from a fleet","accessLevel":"Permissions management","resourceTypes":[{"name":"fleet","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"DisassociateMemberFromJob":{"conditionKeys":["deadline:AssociatedMembershipLevel"],"resources":[{"name":"job"}],"description":"Grants permission to disassociate a member from a job","accessLevel":"Permissions management","resourceTypes":[{"name":"job","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"DisassociateMemberFromQueue":{"conditionKeys":["deadline:AssociatedMembershipLevel"],"resources":[{"name":"queue"}],"description":"Grants permission to disassociate a member from a queue","accessLevel":"Permissions management","resourceTypes":[{"name":"queue","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"GetApplicationVersion":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to get the latest version of an application","accessLevel":"Read","resourceTypes":[{"name":"monitor","required":true}],"permissionOnly":true},"GetBudget":{"conditionKeys":[],"resources":[{"name":"budget"}],"description":"Grants permission to get a budget","accessLevel":"Read","resourceTypes":[{"name":"budget","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"GetFarm":{"conditionKeys":[],"resources":[{"name":"farm"}],"description":"Grants permission to get a farm","accessLevel":"Read","resourceTypes":[{"name":"farm","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"GetFleet":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to get a fleet","accessLevel":"Read","resourceTypes":[{"name":"fleet","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"GetJob":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to get a job","accessLevel":"Read","resourceTypes":[{"name":"job","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"GetJobTemplate":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to read job template","accessLevel":"Read","resourceTypes":[{"name":"job","required":true}],"permissionOnly":true},"GetLicenseEndpoint":{"conditionKeys":[],"resources":[{"name":"license-endpoint"}],"description":"Grants permission to get a license endpoint","accessLevel":"Read","resourceTypes":[{"name":"license-endpoint","required":true}]},"GetLimit":{"conditionKeys":[],"resources":[{"name":"farm"}],"description":"Grants permission to get a limit","accessLevel":"Read","resourceTypes":[{"name":"farm","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"GetMonitor":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to get a monitor","accessLevel":"Read","resourceTypes":[{"name":"monitor","required":true}]},"GetQueue":{"conditionKeys":[],"resources":[{"name":"queue"}],"description":"Grants permission to get a queue","accessLevel":"Read","resourceTypes":[{"name":"queue","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"GetQueueEnvironment":{"conditionKeys":[],"resources":[{"name":"queue"}],"description":"Grants permission to get a queue environment","accessLevel":"Read","resourceTypes":[{"name":"queue","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"GetQueueFleetAssociation":{"conditionKeys":[],"resources":[{"name":"fleet"},{"name":"queue"}],"description":"Grants permission to get a queue-fleet association","accessLevel":"Read","resourceTypes":[{"name":"fleet","required":true},{"name":"queue","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"GetQueueLimitAssociation":{"conditionKeys":[],"resources":[{"name":"farm"},{"name":"queue"}],"description":"Grants permission to get a queue-limit association","accessLevel":"Read","resourceTypes":[{"name":"farm","required":true},{"name":"queue","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"GetSession":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to get a session for a job","accessLevel":"Read","resourceTypes":[{"name":"job","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"GetSessionAction":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to get a session action for a job","accessLevel":"Read","resourceTypes":[{"name":"job","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"GetSessionsStatisticsAggregation":{"conditionKeys":[],"resources":[{"name":"farm"},{"name":"fleet"},{"name":"queue"}],"description":"Grants permission to get all collected statistics for sessions","accessLevel":"Read","resourceTypes":[{"name":"farm","required":true},{"name":"fleet","required":false},{"name":"queue","required":false}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"GetStep":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to get a step in a job","accessLevel":"Read","resourceTypes":[{"name":"job","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"GetStorageProfile":{"conditionKeys":[],"resources":[{"name":"farm"}],"description":"Grants permission to get a storage profile","accessLevel":"Read","resourceTypes":[{"name":"farm","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"GetStorageProfileForQueue":{"conditionKeys":[],"resources":[{"name":"queue"}],"description":"Grants permission to get a storage profile for a queue","accessLevel":"Read","resourceTypes":[{"name":"queue","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"GetTask":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to get a job task","accessLevel":"Read","resourceTypes":[{"name":"job","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"GetWorker":{"conditionKeys":[],"resources":[{"name":"worker"}],"description":"Grants permission to get a worker","accessLevel":"Read","resourceTypes":[{"name":"worker","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"ListAvailableMeteredProducts":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all available metered products within a license endpoint","accessLevel":"List","resourceTypes":[]},"ListBudgets":{"conditionKeys":[],"resources":[{"name":"budget"}],"description":"Grants permission to list all budgets for a farm","accessLevel":"List","resourceTypes":[{"name":"budget","required":false}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"ListFarmMembers":{"conditionKeys":[],"resources":[{"name":"farm"}],"description":"Grants permission to list all members of a farm","accessLevel":"List","resourceTypes":[{"name":"farm","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"ListFarms":{"conditionKeys":["deadline:PrincipalId","deadline:RequesterPrincipalId"],"resources":[{"name":"farm"}],"description":"Grants permission to list all farms","accessLevel":"List","resourceTypes":[{"name":"farm","required":true}],"dependentActions":["identitystore:DescribeGroup","identitystore:DescribeUser","identitystore:ListGroupMembershipsForMember"]},"ListFleetMembers":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to list all members of a fleet","accessLevel":"List","resourceTypes":[{"name":"fleet","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"ListFleets":{"conditionKeys":["deadline:PrincipalId","deadline:RequesterPrincipalId"],"resources":[{"name":"fleet"}],"description":"Grants permission to list all fleets","accessLevel":"List","resourceTypes":[{"name":"fleet","required":true}],"dependentActions":["identitystore:DescribeGroup","identitystore:DescribeUser","identitystore:ListGroupMembershipsForMember"]},"ListJobMembers":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to list all members of a job","accessLevel":"List","resourceTypes":[{"name":"job","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"ListJobParameterDefinitions":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to get a job's parameter definitions in the job template","accessLevel":"List","resourceTypes":[{"name":"job","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"ListJobs":{"conditionKeys":["deadline:PrincipalId","deadline:RequesterPrincipalId"],"resources":[{"name":"job"}],"description":"Grants permission to list all jobs in a queue","accessLevel":"List","resourceTypes":[{"name":"job","required":true}],"dependentActions":["identitystore:DescribeGroup","identitystore:DescribeUser","identitystore:ListGroupMembershipsForMember"]},"ListLicenseEndpoints":{"conditionKeys":[],"resources":[{"name":"license-endpoint"}],"description":"Grants permission to list all license endpoints","accessLevel":"List","resourceTypes":[{"name":"license-endpoint","required":true}]},"ListLimits":{"conditionKeys":[],"resources":[{"name":"farm"}],"description":"Grants permission to list all limits in a farm","accessLevel":"List","resourceTypes":[{"name":"farm","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"ListMeteredProducts":{"conditionKeys":[],"resources":[{"name":"license-endpoint"}],"description":"Grants permission to list all metered products in a license endpoint","accessLevel":"List","resourceTypes":[{"name":"license-endpoint","required":true}]},"ListMonitors":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to list all monitors","accessLevel":"List","resourceTypes":[{"name":"monitor","required":true}]},"ListQueueEnvironments":{"conditionKeys":[],"resources":[{"name":"queue"}],"description":"Grants permission to list all queue environments to which a queue is associated","accessLevel":"List","resourceTypes":[{"name":"queue","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"ListQueueFleetAssociations":{"conditionKeys":[],"resources":[{"name":"farm"},{"name":"fleet"},{"name":"queue"}],"description":"Grants permission to list all queue-fleet associations","accessLevel":"List","resourceTypes":[{"name":"farm","required":true},{"name":"fleet","required":false},{"name":"queue","required":false}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"ListQueueLimitAssociations":{"conditionKeys":[],"resources":[{"name":"farm"},{"name":"queue"}],"description":"Grants permission to list all queue-limit associations","accessLevel":"List","resourceTypes":[{"name":"farm","required":true},{"name":"queue","required":false}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"ListQueueMembers":{"conditionKeys":[],"resources":[{"name":"queue"}],"description":"Grants permission to list all members in a queue","accessLevel":"List","resourceTypes":[{"name":"queue","required":false}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"ListQueues":{"conditionKeys":["deadline:PrincipalId","deadline:RequesterPrincipalId"],"resources":[{"name":"queue"}],"description":"Grants permission to list all queues on a farm","accessLevel":"List","resourceTypes":[{"name":"queue","required":true}],"dependentActions":["identitystore:DescribeGroup","identitystore:DescribeUser","identitystore:ListGroupMembershipsForMember"]},"ListSessionActions":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to list all session actions for a job","accessLevel":"List","resourceTypes":[{"name":"job","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"ListSessions":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to list all sessions for a job","accessLevel":"List","resourceTypes":[{"name":"job","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"ListSessionsForWorker":{"conditionKeys":[],"resources":[{"name":"worker"}],"description":"Grants permission to list all sessions for a worker","accessLevel":"List","resourceTypes":[{"name":"worker","required":false}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"ListStepConsumers":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to list the step consumers for a job step","accessLevel":"List","resourceTypes":[{"name":"job","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"ListStepDependencies":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to list dependencies for a job step","accessLevel":"List","resourceTypes":[{"name":"job","required":false}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"ListSteps":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to list all steps for a job","accessLevel":"List","resourceTypes":[{"name":"job","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"ListStorageProfiles":{"conditionKeys":[],"resources":[{"name":"farm"}],"description":"Grants permission to list all storage profiles in a farm","accessLevel":"List","resourceTypes":[{"name":"farm","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"ListStorageProfilesForQueue":{"conditionKeys":[],"resources":[{"name":"queue"}],"description":"Grants permission to list all storage profiles in a queue","accessLevel":"List","resourceTypes":[{"name":"queue","required":false}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"ListTagsForResource":{"conditionKeys":["deadline:CalledAction"],"resources":[{"name":"budget"},{"name":"farm"},{"name":"fleet"},{"name":"job"},{"name":"license-endpoint"},{"name":"monitor"},{"name":"queue"},{"name":"worker"}],"description":"Grants permission to list all tags on specified Deadline Cloud resources","accessLevel":"Read","resourceTypes":[{"name":"budget","required":false},{"name":"farm","required":false},{"name":"fleet","required":false},{"name":"job","required":false},{"name":"license-endpoint","required":false},{"name":"monitor","required":false},{"name":"queue","required":false},{"name":"worker","required":false}]},"ListTasks":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to list all tasks for a job","accessLevel":"List","resourceTypes":[{"name":"job","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"ListWorkers":{"conditionKeys":[],"resources":[{"name":"worker"}],"description":"Grants permission to list all workers in a fleet","accessLevel":"List","resourceTypes":[{"name":"worker","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"PutMeteredProduct":{"conditionKeys":[],"resources":[{"name":"license-endpoint"}],"description":"Grants permission to add a metered product to a license endpoint","accessLevel":"Write","resourceTypes":[{"name":"license-endpoint","required":true}]},"SearchJobs":{"conditionKeys":[],"resources":[{"name":"queue"}],"description":"Grants permission to search for jobs in multiple queues","accessLevel":"Read","resourceTypes":[{"name":"queue","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"SearchSteps":{"conditionKeys":[],"resources":[{"name":"job"},{"name":"queue"}],"description":"Grants permission to search the steps within a single job or to search the steps for multiple queues","accessLevel":"Read","resourceTypes":[{"name":"job","required":false},{"name":"queue","required":false}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"SearchTasks":{"conditionKeys":[],"resources":[{"name":"job"},{"name":"queue"}],"description":"Grants permission to search the tasks within a single job or to search the tasks for multiple queues","accessLevel":"Read","resourceTypes":[{"name":"job","required":false},{"name":"queue","required":false}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"SearchWorkers":{"conditionKeys":[],"resources":[],"description":"Grants permission to search for workers in multiple fleets","accessLevel":"Read","resourceTypes":[],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"StartSessionsStatisticsAggregation":{"conditionKeys":[],"resources":[{"name":"fleet"},{"name":"queue"}],"description":"Grants permission to get all collected statistics for sessions","accessLevel":"Read","resourceTypes":[{"name":"fleet","required":false},{"name":"queue","required":false}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","deadline:CalledAction"],"resources":[{"name":"budget"},{"name":"farm"},{"name":"fleet"},{"name":"job"},{"name":"license-endpoint"},{"name":"monitor"},{"name":"queue"},{"name":"worker"}],"description":"Grants permission to add or overwrite one or more tags for the specified Deadline Cloud resource","accessLevel":"Tagging","resourceTypes":[{"name":"budget","required":false},{"name":"farm","required":false},{"name":"fleet","required":false},{"name":"job","required":false},{"name":"license-endpoint","required":false},{"name":"monitor","required":false},{"name":"queue","required":false},{"name":"worker","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"budget"},{"name":"farm"},{"name":"fleet"},{"name":"job"},{"name":"license-endpoint"},{"name":"monitor"},{"name":"queue"},{"name":"worker"}],"description":"Grants permission to disassociate one or more tags from the specified Deadline Cloud resource","accessLevel":"Tagging","resourceTypes":[{"name":"budget","required":false},{"name":"farm","required":false},{"name":"fleet","required":false},{"name":"job","required":false},{"name":"license-endpoint","required":false},{"name":"monitor","required":false},{"name":"queue","required":false},{"name":"worker","required":false}]},"UpdateBudget":{"conditionKeys":[],"resources":[{"name":"budget"}],"description":"Grants permission to update a budget","accessLevel":"Write","resourceTypes":[{"name":"budget","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"UpdateFarm":{"conditionKeys":[],"resources":[{"name":"farm"}],"description":"Grants permission to update a farm","accessLevel":"Write","resourceTypes":[{"name":"farm","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"UpdateFleet":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to update a fleet","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true}],"dependentActions":["ec2:CreateVpcEndpoint","iam:PassRole","identitystore:ListGroupMembershipsForMember","vpc-lattice:GetResourceConfiguration","vpc-lattice:GetResourceGateway"]},"UpdateJob":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to update a job","accessLevel":"Write","resourceTypes":[{"name":"job","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"UpdateLimit":{"conditionKeys":[],"resources":[{"name":"farm"}],"description":"Grants permission to update a limit for a farm","accessLevel":"Write","resourceTypes":[{"name":"farm","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"UpdateMonitor":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to update a monitor","accessLevel":"Write","resourceTypes":[{"name":"monitor","required":true}],"dependentActions":["iam:PassRole","sso:PutApplicationGrant","sso:UpdateApplication"]},"UpdateQueue":{"conditionKeys":[],"resources":[{"name":"queue"}],"description":"Grants permission to update a queue","accessLevel":"Write","resourceTypes":[{"name":"queue","required":true}],"dependentActions":["iam:PassRole","identitystore:ListGroupMembershipsForMember"]},"UpdateQueueEnvironment":{"conditionKeys":[],"resources":[{"name":"queue"}],"description":"Grants permission to update a queue environment","accessLevel":"Write","resourceTypes":[{"name":"queue","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"UpdateQueueFleetAssociation":{"conditionKeys":[],"resources":[{"name":"fleet"},{"name":"queue"}],"description":"Grants permission to update a queue-fleet association","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true},{"name":"queue","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"UpdateQueueLimitAssociation":{"conditionKeys":[],"resources":[{"name":"farm"},{"name":"queue"}],"description":"Grants permission to update a queue-limit association","accessLevel":"Write","resourceTypes":[{"name":"farm","required":true},{"name":"queue","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"UpdateSession":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to update a session for a job","accessLevel":"Write","resourceTypes":[{"name":"job","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"UpdateStep":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to update a step for a job","accessLevel":"Write","resourceTypes":[{"name":"job","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"UpdateStorageProfile":{"conditionKeys":[],"resources":[{"name":"farm"}],"description":"Grants permission to update a storage profile for a farm","accessLevel":"Write","resourceTypes":[{"name":"farm","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"UpdateTask":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to update a task","accessLevel":"Write","resourceTypes":[{"name":"job","required":true}],"dependentActions":["identitystore:ListGroupMembershipsForMember"]},"UpdateWorker":{"conditionKeys":[],"resources":[{"name":"worker"}],"description":"Grants permission to update a worker","accessLevel":"Write","resourceTypes":[{"name":"worker","required":true}],"dependentActions":["logs:CreateLogStream"]},"UpdateWorkerSchedule":{"conditionKeys":[],"resources":[{"name":"worker"}],"description":"Grants permission to update the schedule for a worker","accessLevel":"Write","resourceTypes":[{"name":"worker","required":true}],"dependentActions":["logs:CreateLogStream"]}},"resources":[{"name":"budget","arnFormats":["arn:${Partition}:deadline:${Region}:${Account}:farm/${FarmId}/budget/${BudgetId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","deadline:FarmMembershipLevels"]},{"name":"farm","arnFormats":["arn:${Partition}:deadline:${Region}:${Account}:farm/${FarmId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","deadline:FarmMembershipLevels"]},{"name":"fleet","arnFormats":["arn:${Partition}:deadline:${Region}:${Account}:farm/${FarmId}/fleet/${FleetId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","deadline:FarmMembershipLevels","deadline:FleetMembershipLevels"]},{"name":"job","arnFormats":["arn:${Partition}:deadline:${Region}:${Account}:farm/${FarmId}/queue/${QueueId}/job/${JobId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","deadline:FarmMembershipLevels","deadline:JobMembershipLevels","deadline:QueueMembershipLevels"]},{"name":"license-endpoint","arnFormats":["arn:${Partition}:deadline:${Region}:${Account}:license-endpoint/${LicenseEndpointId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"monitor","arnFormats":["arn:${Partition}:deadline:${Region}:${Account}:monitor/${MonitorId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"queue","arnFormats":["arn:${Partition}:deadline:${Region}:${Account}:farm/${FarmId}/queue/${QueueId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","deadline:FarmMembershipLevels","deadline:QueueMembershipLevels"]},{"name":"worker","arnFormats":["arn:${Partition}:deadline:${Region}:${Account}:farm/${FarmId}/fleet/${FleetId}/worker/${WorkerId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","deadline:FarmMembershipLevels","deadline:FleetMembershipLevels"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"deadline:AssociatedMembershipLevel":{"types":["String"],"description":"Filters access by the associated membership level of the principal provided in the request"},"deadline:CalledAction":{"types":["String"],"description":"Filters access by the allowed action in the request"},"deadline:FarmMembershipLevels":{"types":["ArrayOfString"],"description":"Filters access by membership levels on the farm"},"deadline:FleetMembershipLevels":{"types":["ArrayOfString"],"description":"Filters access by membership levels on the fleet"},"deadline:JobMembershipLevels":{"types":["ArrayOfString"],"description":"Filters access by membership levels on the job"},"deadline:MembershipLevel":{"types":["String"],"description":"Filters access by the membership level passed in the request"},"deadline:PrincipalId":{"types":["String"],"description":"Filters access by the principle ID provided in the request"},"deadline:QueueMembershipLevels":{"types":["ArrayOfString"],"description":"Filters access by membership levels on the queue"},"deadline:RequesterPrincipalId":{"types":["String"],"description":"Filters access by the user calling the Deadline Cloud API"}}}
@@ -0,0 +1 @@
1
+ {"name":"detective","actions":{"AcceptInvitation":{"conditionKeys":[],"resources":[{"name":"Graph"}],"description":"Grants permission to accept an invitation to become a member of a behavior graph","accessLevel":"Write","resourceTypes":[{"name":"Graph","required":true}]},"BatchGetGraphMemberDatasources":{"conditionKeys":[],"resources":[{"name":"Graph"}],"description":"Grants permission to retrieve the datasource package history for the specified member accounts in a behavior graph managed by this account","accessLevel":"Read","resourceTypes":[{"name":"Graph","required":true}]},"BatchGetMembershipDatasources":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the datasource package history of the caller account for the specified graphs","accessLevel":"Read","resourceTypes":[]},"CreateGraph":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a behavior graph and begin to aggregate security information","accessLevel":"Write","resourceTypes":[],"dependentActions":["detective:TagResource"]},"CreateMembers":{"conditionKeys":[],"resources":[{"name":"Graph"}],"description":"Grants permission to request the membership of one or more accounts in a behavior graph managed by this account","accessLevel":"Write","resourceTypes":[{"name":"Graph","required":true}]},"DeleteGraph":{"conditionKeys":[],"resources":[{"name":"Graph"}],"description":"Grants permission to delete a behavior graph and stop aggregating security information","accessLevel":"Write","resourceTypes":[{"name":"Graph","required":true}]},"DeleteMembers":{"conditionKeys":[],"resources":[{"name":"Graph"}],"description":"Grants permission to remove member accounts from a behavior graph managed by this account","accessLevel":"Write","resourceTypes":[{"name":"Graph","required":true}]},"DescribeOrganizationConfiguration":{"conditionKeys":[],"resources":[{"name":"Graph"}],"description":"Grants permission to view the current configuration related to the Amazon Detective integration with AWS Organizations","accessLevel":"Read","resourceTypes":[{"name":"Graph","required":true}],"dependentActions":["organizations:DescribeOrganization"]},"DisableOrganizationAdminAccount":{"conditionKeys":[],"resources":[],"description":"Grants permission to remove the Amazon Detective delegated administrator account for an organization","accessLevel":"Write","resourceTypes":[],"dependentActions":["organizations:DescribeOrganization"]},"DisassociateMembership":{"conditionKeys":[],"resources":[{"name":"Graph"}],"description":"Grants permission to remove the association of this account with a behavior graph","accessLevel":"Write","resourceTypes":[{"name":"Graph","required":true}]},"EnableOrganizationAdminAccount":{"conditionKeys":[],"resources":[],"description":"Grants permission to designate the Amazon Detective delegated administrator account for an organization","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:CreateServiceLinkedRole","organizations:DescribeOrganization","organizations:EnableAWSServiceAccess","organizations:RegisterDelegatedAdministrator"]},"GetFreeTrialEligibility":{"conditionKeys":[],"resources":[{"name":"Graph"}],"description":"Grants permission to retrieve a behavior graph's eligibility for a free trial period","accessLevel":"Read","resourceTypes":[{"name":"Graph","required":true}],"permissionOnly":true},"GetGraphIngestState":{"conditionKeys":[],"resources":[{"name":"Graph"}],"description":"Grants permission to retrieve the data ingestion state of a behavior graph","accessLevel":"Read","resourceTypes":[{"name":"Graph","required":true}],"permissionOnly":true},"GetInvestigation":{"conditionKeys":[],"resources":[{"name":"Graph"}],"description":"Grants permission to get an investigation's status and metadata","accessLevel":"Read","resourceTypes":[{"name":"Graph","required":true}]},"GetMembers":{"conditionKeys":[],"resources":[{"name":"Graph"}],"description":"Grants permission to retrieve details on specified members of a behavior graph","accessLevel":"Read","resourceTypes":[{"name":"Graph","required":true}]},"GetPricingInformation":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about Amazon Detective's pricing","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetUsageInformation":{"conditionKeys":[],"resources":[{"name":"Graph"}],"description":"Grants permission to list usage information of a behavior graph","accessLevel":"Read","resourceTypes":[{"name":"Graph","required":true}],"permissionOnly":true},"InvokeAssistant":{"conditionKeys":[],"resources":[{"name":"Graph"}],"description":"Grants permission to invoke Detective's Assistant","accessLevel":"Read","resourceTypes":[{"name":"Graph","required":true}],"permissionOnly":true},"ListDatasourcePackages":{"conditionKeys":[],"resources":[{"name":"Graph"}],"description":"Grants permission to list a graph's datasource package ingest states and timestamps for the most recent state changes in a behavior graph managed by this account","accessLevel":"List","resourceTypes":[{"name":"Graph","required":true}]},"ListGraphs":{"conditionKeys":[],"resources":[],"description":"Grants permission to list behavior graphs managed by this account","accessLevel":"List","resourceTypes":[]},"ListHighDegreeEntities":{"conditionKeys":[],"resources":[{"name":"Graph"}],"description":"Grants permission to retrieve high volume entities whose relationships cannot be stored by Detective","accessLevel":"List","resourceTypes":[{"name":"Graph","required":true}],"permissionOnly":true},"ListIndicators":{"conditionKeys":[],"resources":[{"name":"Graph"}],"description":"Grants permission to list the indicators of an investigation","accessLevel":"List","resourceTypes":[{"name":"Graph","required":true}]},"ListInvestigations":{"conditionKeys":[],"resources":[{"name":"Graph"}],"description":"Grants permission to list the investigations of a behavior graph","accessLevel":"List","resourceTypes":[{"name":"Graph","required":true}]},"ListInvitations":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve details on the behavior graphs to which this account has been invited to join","accessLevel":"List","resourceTypes":[]},"ListMembers":{"conditionKeys":[],"resources":[{"name":"Graph"}],"description":"Grants permission to retrieve details on all members of a behavior graph","accessLevel":"List","resourceTypes":[{"name":"Graph","required":true}]},"ListOrganizationAdminAccount":{"conditionKeys":[],"resources":[],"description":"Grants permission to view the current Amazon Detective delegated administrator account for an organization","accessLevel":"List","resourceTypes":[],"dependentActions":["organizations:DescribeOrganization"]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Graph"}],"description":"Grants permission to list the tag values that are assigned to a behavior graph","accessLevel":"List","resourceTypes":[{"name":"Graph","required":true}]},"RejectInvitation":{"conditionKeys":[],"resources":[{"name":"Graph"}],"description":"Grants permission to reject an invitation to become a member of a behavior graph","accessLevel":"Write","resourceTypes":[{"name":"Graph","required":true}]},"SearchGraph":{"conditionKeys":[],"resources":[{"name":"Graph"}],"description":"Grants permission to search the data stored in a behavior graph","accessLevel":"Read","resourceTypes":[{"name":"Graph","required":true}],"permissionOnly":true},"StartInvestigation":{"conditionKeys":[],"resources":[{"name":"Graph"}],"description":"Grants permission to start investigations","accessLevel":"Write","resourceTypes":[{"name":"Graph","required":true}]},"StartMonitoringMember":{"conditionKeys":[],"resources":[{"name":"Graph"}],"description":"Grants permission to start data ingest for a member account that has a status of ACCEPTED_BUT_DISABLED","accessLevel":"Write","resourceTypes":[{"name":"Graph","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Graph"}],"description":"Grants permission to assign tag values to a behavior graph","accessLevel":"Tagging","resourceTypes":[{"name":"Graph","required":true}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"Graph"}],"description":"Grants permission to remove tag values from a behavior graph","accessLevel":"Tagging","resourceTypes":[{"name":"Graph","required":true}]},"UpdateDatasourcePackages":{"conditionKeys":[],"resources":[{"name":"Graph"}],"description":"Grants permission to enable or disable datasource package(s) in a behavior graph managed by this account","accessLevel":"Write","resourceTypes":[{"name":"Graph","required":true}]},"UpdateInvestigationState":{"conditionKeys":[],"resources":[{"name":"Graph"}],"description":"Grants permission to update an investigation's state and metadata","accessLevel":"Write","resourceTypes":[{"name":"Graph","required":true}]},"UpdateOrganizationConfiguration":{"conditionKeys":[],"resources":[{"name":"Graph"}],"description":"Grants permission to update the current configuration related to the Amazon Detective integration with AWS Organizations","accessLevel":"Write","resourceTypes":[{"name":"Graph","required":true}],"dependentActions":["organizations:DescribeOrganization"]}},"resources":[{"name":"Graph","arnFormats":["arn:${Partition}:detective:${Region}:${Account}:graph:${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by specifying the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by specifying the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by specifying the tag keys that are passed in the request"}}}