aws-iam-language-server 0.0.8 → 0.0.10

package/src/data/servicereference/services/ec2messages.json

@@ -1 +1 @@
-{"name":"ec2messages","actions":{"AcknowledgeMessage":{"conditionKeys":[],"resources":[],"description":"Grants permission to acknowledge a message, ensuring it will not be delivered again","accessLevel":"Write","resourceTypes":[]},"DeleteMessage":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a message","accessLevel":"Write","resourceTypes":[]},"FailMessage":{"conditionKeys":[],"resources":[],"description":"Grants permission to fail a message, signifying the message could not be processed successfully, ensuring it cannot be replied to or delivered again","accessLevel":"Write","resourceTypes":[]},"GetEndpoint":{"conditionKeys":[],"resources":[],"description":"Grants permission to route traffic to the correct endpoint based on the given destination for the messages","accessLevel":"Read","resourceTypes":[]},"GetMessages":{"conditionKeys":["ec2:SourceInstanceARN","ssm:SourceInstanceARN"],"resources":[],"description":"Grants permission to deliver messages to clients/instances using long polling","accessLevel":"Read","resourceTypes":[]},"SendReply":{"conditionKeys":["ec2:SourceInstanceARN","ssm:SourceInstanceARN"],"resources":[],"description":"Grants permission to send replies from clients/instances to upstream service","accessLevel":"Write","resourceTypes":[]}},"resources":[],"conditionKeys":{"ec2:SourceInstanceARN":{"types":["ARN"],"description":"Filters access by the ARN of the instance from which the request originated"},"ssm:SourceInstanceARN":{"types":["ARN"],"description":"Filters access by verifying the Amazon Resource Name (ARN) of the AWS Systems Manager's managed instance from which the request is made. This key is not present when the request comes from the managed instance authenticated with an IAM role associated with EC2 instance profile"}}}
+{"name":"ec2messages","actions":{"AcknowledgeMessage":{"name":"AcknowledgeMessage","service":"ec2messages","conditionKeys":[],"resources":[],"description":"Grants permission to acknowledge a message, ensuring it will not be delivered again","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html#amazonmessagedeliveryservice-AcknowledgeMessage"},"DeleteMessage":{"name":"DeleteMessage","service":"ec2messages","conditionKeys":[],"resources":[],"description":"Grants permission to delete a message","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html#amazonmessagedeliveryservice-DeleteMessage"},"FailMessage":{"name":"FailMessage","service":"ec2messages","conditionKeys":[],"resources":[],"description":"Grants permission to fail a message, signifying the message could not be processed successfully, ensuring it cannot be replied to or delivered again","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html#amazonmessagedeliveryservice-FailMessage"},"GetEndpoint":{"name":"GetEndpoint","service":"ec2messages","conditionKeys":[],"resources":[],"description":"Grants permission to route traffic to the correct endpoint based on the given destination for the messages","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html#amazonmessagedeliveryservice-GetEndpoint"},"GetMessages":{"name":"GetMessages","service":"ec2messages","conditionKeys":["ec2:SourceInstanceARN","ssm:SourceInstanceARN"],"resources":[],"description":"Grants permission to deliver messages to clients/instances using long polling","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html#amazonmessagedeliveryservice-GetMessages"},"SendReply":{"name":"SendReply","service":"ec2messages","conditionKeys":["ec2:SourceInstanceARN","ssm:SourceInstanceARN"],"resources":[],"description":"Grants permission to send replies from clients/instances to upstream service","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html#amazonmessagedeliveryservice-SendReply"}},"resources":[],"conditionKeys":{"ec2:SourceInstanceARN":{"types":["ARN"],"description":"Filters access by the ARN of the instance from which the request originated"},"ssm:SourceInstanceARN":{"types":["ARN"],"description":"Filters access by verifying the Amazon Resource Name (ARN) of the AWS Systems Manager's managed instance from which the request is made. This key is not present when the request comes from the managed instance authenticated with an IAM role associated with EC2 instance profile"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html"}

package/src/data/servicereference/services/ecr-public.json

@@ -1 +1 @@
-{"name":"ecr-public","actions":{"BatchCheckLayerAvailability":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to check the availability of multiple image layers in a specified registry and repository","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"BatchDeleteImage":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to delete a list of specified images within a specified repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"CompleteLayerUpload":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to inform Amazon ECR that the image layer upload for a specified registry, repository name, and upload ID, has completed","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"CreateRepository":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"repository"}],"description":"Grants permission to create an image repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"dependentActions":["ecr-public:TagResource"]},"DeleteRepository":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to delete an existing image repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"DeleteRepositoryPolicy":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to delete the repository policy from a specified repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"DescribeImageTags":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to describe all the image tags for a given repository","accessLevel":"List","resourceTypes":[{"name":"repository","required":true}]},"DescribeImages":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to get metadata about the images in a repository, including image size, image tags, and creation date","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"DescribeRegistries":{"conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to retrieve the catalog data associated with a registry","accessLevel":"List","resourceTypes":[{"name":"registry","required":true}]},"DescribeRepositories":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to describe image repositories in a registry","accessLevel":"List","resourceTypes":[{"name":"repository","required":false}]},"GetAuthorizationToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a token that is valid for a specified registry for 12 hours","accessLevel":"Read","resourceTypes":[]},"GetRegistryCatalogData":{"conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to retrieve the catalog data associated with a registry","accessLevel":"Read","resourceTypes":[{"name":"registry","required":true}]},"GetRepositoryCatalogData":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to retrieve the catalog data associated with a repository","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"GetRepositoryPolicy":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to retrieve the repository policy for a specified repository","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"InitiateLayerUpload":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to notify Amazon ECR that you intend to upload an image layer","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to list the tags for an Amazon ECR resource","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"PutImage":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to create or update the image manifest associated with an image","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"PutRegistryCatalogData":{"conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to create and update the catalog data associated with a registry","accessLevel":"Write","resourceTypes":[{"name":"registry","required":true}]},"PutRepositoryCatalogData":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to update the catalog data associated with a repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"SetRepositoryPolicy":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to apply a repository policy on a specified repository to control access permissions","accessLevel":"Permissions management","resourceTypes":[{"name":"repository","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"repository"}],"description":"Grants permission to tag an Amazon ECR resource","accessLevel":"Tagging","resourceTypes":[{"name":"repository","required":true}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"repository"}],"description":"Grants permission to untag an Amazon ECR resource","accessLevel":"Tagging","resourceTypes":[{"name":"repository","required":true}]},"UploadLayerPart":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to upload an image layer part to Amazon ECR Public","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]}},"resources":[{"name":"registry","arnFormats":["arn:${Partition}:ecr-public::${Account}:registry/${RegistryId}"],"conditionKeys":[]},{"name":"repository","arnFormats":["arn:${Partition}:ecr-public::${Account}:repository/${RepositoryName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ecr-public:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters create requests based on the allowed set of values for each of the tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters actions based on tag-value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters create requests based on the presence of mandatory tags in the request"},"ecr-public:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters actions based on tag-value associated with the resource"}}}
+{"name":"ecr-public","actions":{"BatchCheckLayerAvailability":{"name":"BatchCheckLayerAvailability","service":"ecr-public","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to check the availability of multiple image layers in a specified registry and repository","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECRPublic/latest/APIReference/API_BatchCheckLayerAvailability.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistrypublic.html#amazonelasticcontainerregistrypublic-BatchCheckLayerAvailability"},"BatchDeleteImage":{"name":"BatchDeleteImage","service":"ecr-public","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to delete a list of specified images within a specified repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECRPublic/latest/APIReference/API_BatchDeleteImage.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistrypublic.html#amazonelasticcontainerregistrypublic-BatchDeleteImage"},"CompleteLayerUpload":{"name":"CompleteLayerUpload","service":"ecr-public","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to inform Amazon ECR that the image layer upload for a specified registry, repository name, and upload ID, has completed","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECRPublic/latest/APIReference/API_CompleteLayerUpload.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistrypublic.html#amazonelasticcontainerregistrypublic-CompleteLayerUpload"},"CreateRepository":{"name":"CreateRepository","service":"ecr-public","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"repository"}],"description":"Grants permission to create an image repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"dependentActions":["ecr-public:TagResource"],"operationUrl":"https://docs.aws.amazon.com/AmazonECRPublic/latest/APIReference/API_CreateRepository.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistrypublic.html#amazonelasticcontainerregistrypublic-CreateRepository"},"DeleteRepository":{"name":"DeleteRepository","service":"ecr-public","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to delete an existing image repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECRPublic/latest/APIReference/API_DeleteRepository.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistrypublic.html#amazonelasticcontainerregistrypublic-DeleteRepository"},"DeleteRepositoryPolicy":{"name":"DeleteRepositoryPolicy","service":"ecr-public","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to delete the repository policy from a specified repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECRPublic/latest/APIReference/API_DeleteRepositoryPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistrypublic.html#amazonelasticcontainerregistrypublic-DeleteRepositoryPolicy"},"DescribeImageTags":{"name":"DescribeImageTags","service":"ecr-public","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to describe all the image tags for a given repository","accessLevel":"List","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECRPublic/latest/APIReference/API_DescribeImageTags.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistrypublic.html#amazonelasticcontainerregistrypublic-DescribeImageTags"},"DescribeImages":{"name":"DescribeImages","service":"ecr-public","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to get metadata about the images in a repository, including image size, image tags, and creation date","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECRPublic/latest/APIReference/API_DescribeImages.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistrypublic.html#amazonelasticcontainerregistrypublic-DescribeImages"},"DescribeRegistries":{"name":"DescribeRegistries","service":"ecr-public","conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to retrieve the catalog data associated with a registry","accessLevel":"List","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECRPublic/latest/APIReference/API_DescribeRegistries.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistrypublic.html#amazonelasticcontainerregistrypublic-DescribeRegistries"},"DescribeRepositories":{"name":"DescribeRepositories","service":"ecr-public","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to describe image repositories in a registry","accessLevel":"List","resourceTypes":[{"name":"repository","required":false}],"operationUrl":"https://docs.aws.amazon.com/AmazonECRPublic/latest/APIReference/API_DescribeRepositories.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistrypublic.html#amazonelasticcontainerregistrypublic-DescribeRepositories"},"GetAuthorizationToken":{"name":"GetAuthorizationToken","service":"ecr-public","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a token that is valid for a specified registry for 12 hours","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECRPublic/latest/APIReference/API_GetAuthorizationToken.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistrypublic.html#amazonelasticcontainerregistrypublic-GetAuthorizationToken"},"GetRegistryCatalogData":{"name":"GetRegistryCatalogData","service":"ecr-public","conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to retrieve the catalog data associated with a registry","accessLevel":"Read","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECRPublic/latest/APIReference/API_GetRegistryCatalogData.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistrypublic.html#amazonelasticcontainerregistrypublic-GetRegistryCatalogData"},"GetRepositoryCatalogData":{"name":"GetRepositoryCatalogData","service":"ecr-public","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to retrieve the catalog data associated with a repository","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECRPublic/latest/APIReference/API_GetRepositoryCatalogData.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistrypublic.html#amazonelasticcontainerregistrypublic-GetRepositoryCatalogData"},"GetRepositoryPolicy":{"name":"GetRepositoryPolicy","service":"ecr-public","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to retrieve the repository policy for a specified repository","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECRPublic/latest/APIReference/API_GetRepositoryPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistrypublic.html#amazonelasticcontainerregistrypublic-GetRepositoryPolicy"},"InitiateLayerUpload":{"name":"InitiateLayerUpload","service":"ecr-public","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to notify Amazon ECR that you intend to upload an image layer","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECRPublic/latest/APIReference/API_InitiateLayerUpload.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistrypublic.html#amazonelasticcontainerregistrypublic-InitiateLayerUpload"},"ListTagsForResource":{"name":"ListTagsForResource","service":"ecr-public","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to list the tags for an Amazon ECR resource","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECRPublic/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistrypublic.html#amazonelasticcontainerregistrypublic-ListTagsForResource"},"PutImage":{"name":"PutImage","service":"ecr-public","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to create or update the image manifest associated with an image","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECRPublic/latest/APIReference/API_PutImage.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistrypublic.html#amazonelasticcontainerregistrypublic-PutImage"},"PutRegistryCatalogData":{"name":"PutRegistryCatalogData","service":"ecr-public","conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to create and update the catalog data associated with a registry","accessLevel":"Write","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECRPublic/latest/APIReference/API_PutRegistryCatalogData.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistrypublic.html#amazonelasticcontainerregistrypublic-PutRegistryCatalogData"},"PutRepositoryCatalogData":{"name":"PutRepositoryCatalogData","service":"ecr-public","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to update the catalog data associated with a repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECRPublic/latest/APIReference/API_PutRepositoryCatalogData.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistrypublic.html#amazonelasticcontainerregistrypublic-PutRepositoryCatalogData"},"SetRepositoryPolicy":{"name":"SetRepositoryPolicy","service":"ecr-public","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to apply a repository policy on a specified repository to control access permissions","accessLevel":"Permissions management","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECRPublic/latest/APIReference/API_SetRepositoryPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistrypublic.html#amazonelasticcontainerregistrypublic-SetRepositoryPolicy"},"TagResource":{"name":"TagResource","service":"ecr-public","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"repository"}],"description":"Grants permission to tag an Amazon ECR resource","accessLevel":"Tagging","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECRPublic/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistrypublic.html#amazonelasticcontainerregistrypublic-TagResource"},"UntagResource":{"name":"UntagResource","service":"ecr-public","conditionKeys":["aws:TagKeys"],"resources":[{"name":"repository"}],"description":"Grants permission to untag an Amazon ECR resource","accessLevel":"Tagging","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECRPublic/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistrypublic.html#amazonelasticcontainerregistrypublic-UntagResource"},"UploadLayerPart":{"name":"UploadLayerPart","service":"ecr-public","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to upload an image layer part to Amazon ECR Public","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECRPublic/latest/APIReference/API_UploadLayerPart.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistrypublic.html#amazonelasticcontainerregistrypublic-UploadLayerPart"}},"resources":[{"name":"registry","arnFormats":["arn:${Partition}:ecr-public::${Account}:registry/${RegistryId}"],"conditionKeys":[]},{"name":"repository","arnFormats":["arn:${Partition}:ecr-public::${Account}:repository/${RepositoryName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ecr-public:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters create requests based on the allowed set of values for each of the tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters actions based on tag-value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters create requests based on the presence of mandatory tags in the request"},"ecr-public:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters actions based on tag-value associated with the resource"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistrypublic.html"}

package/src/data/servicereference/services/ecr.json

@@ -1 +1 @@
-{"name":"ecr","actions":{"BatchCheckLayerAvailability":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to check the availability of multiple image layers in a specified registry and repository","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"BatchDeleteImage":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to delete a list of specified images within a specified repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"BatchGetImage":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to get detailed information for specified images within a specified repository","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"BatchGetRepositoryScanningConfiguration":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to retrieve repository scanning configuration for a list of repositories","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"BatchImportUpstreamImage":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to retrieve the image from the upstream registry and import it to your private registry","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"permissionOnly":true},"CompleteLayerUpload":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to inform Amazon ECR that the image layer upload for a specified registry, repository name, and upload ID, has completed","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"CreatePullThroughCacheRule":{"conditionKeys":[],"resources":[],"description":"Grants permission to create new pull-through cache rule","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:CreateServiceLinkedRole"]},"CreateRepository":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"repository"}],"description":"Grants permission to create an image repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"dependentActions":["ecr:TagResource"]},"CreateRepositoryCreationTemplate":{"conditionKeys":[],"resources":[],"description":"Grants permission to create the repository creation template","accessLevel":"Write","resourceTypes":[],"dependentActions":["ecr:CreateRepository","ecr:PutLifecyclePolicy","ecr:SetRepositoryPolicy","iam:CreateServiceLinkedRole","iam:PassRole"]},"DeleteLifecyclePolicy":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to delete the specified lifecycle policy","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"DeletePullThroughCacheRule":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the pull-through cache rule","accessLevel":"Write","resourceTypes":[]},"DeleteRegistryPolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the registry policy","accessLevel":"Permissions management","resourceTypes":[]},"DeleteRepository":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to delete an existing image repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"DeleteRepositoryCreationTemplate":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the repository creation template","accessLevel":"Write","resourceTypes":[]},"DeleteRepositoryPolicy":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to delete the repository policy from a specified repository","accessLevel":"Permissions management","resourceTypes":[{"name":"repository","required":true}]},"DeleteSigningConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the signing configuration for the registry","accessLevel":"Write","resourceTypes":[]},"DeregisterPullTimeUpdateExclusion":{"conditionKeys":[],"resources":[],"description":"Grants permission to deregister a pull time update exclusion","accessLevel":"Write","resourceTypes":[]},"DescribeImageReplicationStatus":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to retrieve replication status about an image in a registry, including failure reason if replication fails","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"DescribeImageScanFindings":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to describe the image scan findings for the specified image","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"DescribeImageSigningStatus":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to retrieve signing status about an image in a specified registry","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"DescribeImages":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to get metadata about the images in a repository, including image size, image tags, and creation date","accessLevel":"List","resourceTypes":[{"name":"repository","required":true}]},"DescribePullThroughCacheRules":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the pull-through cache rules","accessLevel":"List","resourceTypes":[]},"DescribeRegistry":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the registry settings","accessLevel":"Read","resourceTypes":[]},"DescribeRepositories":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to describe image repositories in a registry","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"DescribeRepositoryCreationTemplates":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the repository creation template","accessLevel":"Read","resourceTypes":[]},"GetAccountSetting":{"conditionKeys":["ecr:AccountSetting"],"resources":[],"description":"Grants permission to retrieve account settings","accessLevel":"Read","resourceTypes":[]},"GetAuthorizationToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a token that is valid for a specified registry for 12 hours","accessLevel":"Read","resourceTypes":[]},"GetDownloadUrlForLayer":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to retrieve the download URL corresponding to an image layer","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"GetImageCopyStatus":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to retrieve the status about an image copy","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"permissionOnly":true},"GetLifecyclePolicy":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to retrieve the specified lifecycle policy","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"GetLifecyclePolicyPreview":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to retrieve the results of the specified lifecycle policy preview request","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"GetRegistryPolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the registry policy","accessLevel":"Read","resourceTypes":[]},"GetRegistryScanningConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve registry scanning configuration","accessLevel":"Read","resourceTypes":[]},"GetRepositoryPolicy":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to retrieve the repository policy for a specified repository","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"GetSigningConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the signing configuration for the registry","accessLevel":"Read","resourceTypes":[]},"InitiateLayerUpload":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to notify Amazon ECR that you intend to upload an image layer","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"ListImages":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to list all the image IDs for a given repository","accessLevel":"List","resourceTypes":[{"name":"repository","required":true}]},"ListPullTimeUpdateExclusions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list pull time update exclusions for the registry","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"repository"}],"description":"Grants permission to list the tags for an Amazon ECR resource","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"PutAccountSetting":{"conditionKeys":["ecr:AccountSetting"],"resources":[],"description":"Grants permission to update account settings","accessLevel":"Write","resourceTypes":[]},"PutImage":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to create or update the image manifest associated with an image","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"PutImageScanningConfiguration":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to update the image scanning configuration for a repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"PutImageTagMutability":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to update the image tag mutability settings for a repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"PutLifecyclePolicy":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to create or update a lifecycle policy","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"PutRegistryPolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the registry policy","accessLevel":"Permissions management","resourceTypes":[]},"PutRegistryScanningConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update registry scanning configuration","accessLevel":"Write","resourceTypes":[]},"PutReplicationConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the replication configuration for the registry","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:CreateServiceLinkedRole"]},"PutSigningConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the signing configuration for the registry","accessLevel":"Write","resourceTypes":[]},"RegisterPullTimeUpdateExclusion":{"conditionKeys":[],"resources":[],"description":"Grants permission to register a pull time update exclusion","accessLevel":"Write","resourceTypes":[]},"ReplicateImage":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to replicate images to the destination registry","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"permissionOnly":true},"SetRepositoryPolicy":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to apply a repository policy on a specified repository to control access permissions","accessLevel":"Permissions management","resourceTypes":[{"name":"repository","required":true}]},"StartImageScan":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to start an image scan","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"StartLifecyclePolicyPreview":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to start a preview of the specified lifecycle policy","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"repository"}],"description":"Grants permission to tag an Amazon ECR resource","accessLevel":"Tagging","resourceTypes":[{"name":"repository","required":true}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"repository"}],"description":"Grants permission to untag an Amazon ECR resource","accessLevel":"Tagging","resourceTypes":[{"name":"repository","required":true}]},"UpdateImageStorageClass":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to get update the storage class of a specified image within a specified repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"UpdatePullThroughCacheRule":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the pull-through cache rule","accessLevel":"Write","resourceTypes":[]},"UpdateRepositoryCreationTemplate":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the repository creation template","accessLevel":"Write","resourceTypes":[],"dependentActions":["ecr:CreateRepository","ecr:PutLifecyclePolicy","ecr:SetRepositoryPolicy","iam:CreateServiceLinkedRole","iam:PassRole"]},"UploadLayerPart":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to upload an image layer part to Amazon ECR","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"ValidatePullThroughCacheRule":{"conditionKeys":[],"resources":[],"description":"Grants permission to validate the pull-through cache rule","accessLevel":"Read","resourceTypes":[]}},"resources":[{"name":"repository","arnFormats":["arn:${Partition}:ecr:${Region}:${Account}:repository/${RepositoryName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ecr:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the allowed set of values for each of the tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag-value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of mandatory tags in the request"},"ecr:AccountSetting":{"types":["String"],"description":"Filters access by the ECR account setting name"},"ecr:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag-value associated with the resource"}}}
+{"name":"ecr","actions":{"BatchCheckLayerAvailability":{"name":"BatchCheckLayerAvailability","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to check the availability of multiple image layers in a specified registry and repository","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_BatchCheckLayerAvailability.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-BatchCheckLayerAvailability"},"BatchDeleteImage":{"name":"BatchDeleteImage","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to delete a list of specified images within a specified repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_BatchDeleteImage.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-BatchDeleteImage"},"BatchGetImage":{"name":"BatchGetImage","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to get detailed information for specified images within a specified repository","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_BatchGetImage.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-BatchGetImage"},"BatchGetRepositoryScanningConfiguration":{"name":"BatchGetRepositoryScanningConfiguration","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to retrieve repository scanning configuration for a list of repositories","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_BatchGetRepositoryScanningConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-BatchGetRepositoryScanningConfiguration"},"BatchImportUpstreamImage":{"name":"BatchImportUpstreamImage","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to retrieve the image from the upstream registry and import it to your private registry","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/userguide/pull-through-cache.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-BatchImportUpstreamImage"},"CompleteLayerUpload":{"name":"CompleteLayerUpload","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to inform Amazon ECR that the image layer upload for a specified registry, repository name, and upload ID, has completed","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_CompleteLayerUpload.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-CompleteLayerUpload"},"CreatePullThroughCacheRule":{"name":"CreatePullThroughCacheRule","service":"ecr","conditionKeys":[],"resources":[],"description":"Grants permission to create new pull-through cache rule","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:CreateServiceLinkedRole"],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_CreatePullThroughCacheRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-CreatePullThroughCacheRule"},"CreateRepository":{"name":"CreateRepository","service":"ecr","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"repository"}],"description":"Grants permission to create an image repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"dependentActions":["ecr:TagResource"],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_CreateRepository.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-CreateRepository"},"CreateRepositoryCreationTemplate":{"name":"CreateRepositoryCreationTemplate","service":"ecr","conditionKeys":[],"resources":[],"description":"Grants permission to create the repository creation template","accessLevel":"Write","resourceTypes":[],"dependentActions":["ecr:CreateRepository","ecr:PutLifecyclePolicy","ecr:SetRepositoryPolicy","iam:CreateServiceLinkedRole","iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_CreateRepositoryCreationTemplate.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-CreateRepositoryCreationTemplate"},"DeleteLifecyclePolicy":{"name":"DeleteLifecyclePolicy","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to delete the specified lifecycle policy","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_DeleteLifecyclePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-DeleteLifecyclePolicy"},"DeletePullThroughCacheRule":{"name":"DeletePullThroughCacheRule","service":"ecr","conditionKeys":[],"resources":[],"description":"Grants permission to delete the pull-through cache rule","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_DeletePullThroughCacheRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-DeletePullThroughCacheRule"},"DeleteRegistryPolicy":{"name":"DeleteRegistryPolicy","service":"ecr","conditionKeys":[],"resources":[],"description":"Grants permission to delete the registry policy","accessLevel":"Permissions management","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_DeleteRegistryPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-DeleteRegistryPolicy"},"DeleteRepository":{"name":"DeleteRepository","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to delete an existing image repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_DeleteRepository.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-DeleteRepository"},"DeleteRepositoryCreationTemplate":{"name":"DeleteRepositoryCreationTemplate","service":"ecr","conditionKeys":[],"resources":[],"description":"Grants permission to delete the repository creation template","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_DeleteRepositoryCreationTemplate.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-DeleteRepositoryCreationTemplate"},"DeleteRepositoryPolicy":{"name":"DeleteRepositoryPolicy","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to delete the repository policy from a specified repository","accessLevel":"Permissions management","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_DeleteRepositoryPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-DeleteRepositoryPolicy"},"DeleteSigningConfiguration":{"name":"DeleteSigningConfiguration","service":"ecr","conditionKeys":[],"resources":[],"description":"Grants permission to delete the signing configuration for the registry","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_DeleteSigningConfiguration","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-DeleteSigningConfiguration"},"DeregisterPullTimeUpdateExclusion":{"name":"DeregisterPullTimeUpdateExclusion","service":"ecr","conditionKeys":[],"resources":[],"description":"Grants permission to deregister a pull time update exclusion","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_DeregisterPullTimeUpdateExclusion","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-DeregisterPullTimeUpdateExclusion"},"DescribeImageReplicationStatus":{"name":"DescribeImageReplicationStatus","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to retrieve replication status about an image in a registry, including failure reason if replication fails","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_DescribeImageReplicationStatus.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-DescribeImageReplicationStatus"},"DescribeImageScanFindings":{"name":"DescribeImageScanFindings","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to describe the image scan findings for the specified image","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_DescribeImageScanFindings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-DescribeImageScanFindings"},"DescribeImageSigningStatus":{"name":"DescribeImageSigningStatus","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to retrieve signing status about an image in a specified registry","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_DescribeImageSigningStatus","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-DescribeImageSigningStatus"},"DescribeImages":{"name":"DescribeImages","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to get metadata about the images in a repository, including image size, image tags, and creation date","accessLevel":"List","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_DescribeImages.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-DescribeImages"},"DescribePullThroughCacheRules":{"name":"DescribePullThroughCacheRules","service":"ecr","conditionKeys":[],"resources":[],"description":"Grants permission to describe the pull-through cache rules","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_DescribePullThroughCacheRules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-DescribePullThroughCacheRules"},"DescribeRegistry":{"name":"DescribeRegistry","service":"ecr","conditionKeys":[],"resources":[],"description":"Grants permission to describe the registry settings","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_DescribeRegistry.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-DescribeRegistry"},"DescribeRepositories":{"name":"DescribeRepositories","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to describe image repositories in a registry","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_DescribeRepositories.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-DescribeRepositories"},"DescribeRepositoryCreationTemplates":{"name":"DescribeRepositoryCreationTemplates","service":"ecr","conditionKeys":[],"resources":[],"description":"Grants permission to describe the repository creation template","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_DescribeRepositoryCreationTemplates.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-DescribeRepositoryCreationTemplates"},"GetAccountSetting":{"name":"GetAccountSetting","service":"ecr","conditionKeys":["ecr:AccountSetting"],"resources":[],"description":"Grants permission to retrieve account settings","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_GetAccountSetting.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-GetAccountSetting"},"GetAuthorizationToken":{"name":"GetAuthorizationToken","service":"ecr","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a token that is valid for a specified registry for 12 hours","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_GetAuthorizationToken.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-GetAuthorizationToken"},"GetDownloadUrlForLayer":{"name":"GetDownloadUrlForLayer","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to retrieve the download URL corresponding to an image layer","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_GetDownloadUrlForLayer.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-GetDownloadUrlForLayer"},"GetImageCopyStatus":{"name":"GetImageCopyStatus","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to retrieve the status about an image copy","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/userguide/pull-through-cache.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-GetImageCopyStatus"},"GetLifecyclePolicy":{"name":"GetLifecyclePolicy","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to retrieve the specified lifecycle policy","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_GetLifecyclePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-GetLifecyclePolicy"},"GetLifecyclePolicyPreview":{"name":"GetLifecyclePolicyPreview","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to retrieve the results of the specified lifecycle policy preview request","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_GetLifecyclePolicyPreview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-GetLifecyclePolicyPreview"},"GetRegistryPolicy":{"name":"GetRegistryPolicy","service":"ecr","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the registry policy","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_GetRegistryPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-GetRegistryPolicy"},"GetRegistryScanningConfiguration":{"name":"GetRegistryScanningConfiguration","service":"ecr","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve registry scanning configuration","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_GetRegistryScanningConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-GetRegistryScanningConfiguration"},"GetRepositoryPolicy":{"name":"GetRepositoryPolicy","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to retrieve the repository policy for a specified repository","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_GetRepositoryPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-GetRepositoryPolicy"},"GetSigningConfiguration":{"name":"GetSigningConfiguration","service":"ecr","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the signing configuration for the registry","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_GetSigningConfiguration","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-GetSigningConfiguration"},"InitiateLayerUpload":{"name":"InitiateLayerUpload","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to notify Amazon ECR that you intend to upload an image layer","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_InitiateLayerUpload.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-InitiateLayerUpload"},"ListImages":{"name":"ListImages","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to list all the image IDs for a given repository","accessLevel":"List","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_ListImages.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-ListImages"},"ListPullTimeUpdateExclusions":{"name":"ListPullTimeUpdateExclusions","service":"ecr","conditionKeys":[],"resources":[],"description":"Grants permission to list pull time update exclusions for the registry","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_ListPullTimeUpdateExclusions","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-ListPullTimeUpdateExclusions"},"ListTagsForResource":{"name":"ListTagsForResource","service":"ecr","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"repository"}],"description":"Grants permission to list the tags for an Amazon ECR resource","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-ListTagsForResource"},"PutAccountSetting":{"name":"PutAccountSetting","service":"ecr","conditionKeys":["ecr:AccountSetting"],"resources":[],"description":"Grants permission to update account settings","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_PutAccountSetting.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-PutAccountSetting"},"PutImage":{"name":"PutImage","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to create or update the image manifest associated with an image","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_PutImage.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-PutImage"},"PutImageScanningConfiguration":{"name":"PutImageScanningConfiguration","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to update the image scanning configuration for a repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_PutImageScanningConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-PutImageScanningConfiguration"},"PutImageTagMutability":{"name":"PutImageTagMutability","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to update the image tag mutability settings for a repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_PutImageTagMutability.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-PutImageTagMutability"},"PutLifecyclePolicy":{"name":"PutLifecyclePolicy","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to create or update a lifecycle policy","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_PutLifecyclePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-PutLifecyclePolicy"},"PutRegistryPolicy":{"name":"PutRegistryPolicy","service":"ecr","conditionKeys":[],"resources":[],"description":"Grants permission to update the registry policy","accessLevel":"Permissions management","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_PutRegistryPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-PutRegistryPolicy"},"PutRegistryScanningConfiguration":{"name":"PutRegistryScanningConfiguration","service":"ecr","conditionKeys":[],"resources":[],"description":"Grants permission to update registry scanning configuration","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_PutRegistryScanningConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-PutRegistryScanningConfiguration"},"PutReplicationConfiguration":{"name":"PutReplicationConfiguration","service":"ecr","conditionKeys":[],"resources":[],"description":"Grants permission to update the replication configuration for the registry","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:CreateServiceLinkedRole"],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_PutReplicationConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-PutReplicationConfiguration"},"PutSigningConfiguration":{"name":"PutSigningConfiguration","service":"ecr","conditionKeys":[],"resources":[],"description":"Grants permission to update the signing configuration for the registry","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_PutSigningConfiguration","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-PutSigningConfiguration"},"RegisterPullTimeUpdateExclusion":{"name":"RegisterPullTimeUpdateExclusion","service":"ecr","conditionKeys":[],"resources":[],"description":"Grants permission to register a pull time update exclusion","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_RegisterPullTimeUpdateExclusion","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-RegisterPullTimeUpdateExclusion"},"ReplicateImage":{"name":"ReplicateImage","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to replicate images to the destination registry","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/userguide/registry-permissions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-ReplicateImage"},"SetRepositoryPolicy":{"name":"SetRepositoryPolicy","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to apply a repository policy on a specified repository to control access permissions","accessLevel":"Permissions management","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_SetRepositoryPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-SetRepositoryPolicy"},"StartImageScan":{"name":"StartImageScan","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to start an image scan","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_StartImageScan.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-StartImageScan"},"StartLifecyclePolicyPreview":{"name":"StartLifecyclePolicyPreview","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to start a preview of the specified lifecycle policy","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_StartLifecyclePolicyPreview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-StartLifecyclePolicyPreview"},"TagResource":{"name":"TagResource","service":"ecr","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"repository"}],"description":"Grants permission to tag an Amazon ECR resource","accessLevel":"Tagging","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-TagResource"},"UntagResource":{"name":"UntagResource","service":"ecr","conditionKeys":["aws:TagKeys"],"resources":[{"name":"repository"}],"description":"Grants permission to untag an Amazon ECR resource","accessLevel":"Tagging","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-UntagResource"},"UpdateImageStorageClass":{"name":"UpdateImageStorageClass","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to get update the storage class of a specified image within a specified repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_UpdateImageStorageClass","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-UpdateImageStorageClass"},"UpdatePullThroughCacheRule":{"name":"UpdatePullThroughCacheRule","service":"ecr","conditionKeys":[],"resources":[],"description":"Grants permission to update the pull-through cache rule","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_UpdatePullThroughCacheRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-UpdatePullThroughCacheRule"},"UpdateRepositoryCreationTemplate":{"name":"UpdateRepositoryCreationTemplate","service":"ecr","conditionKeys":[],"resources":[],"description":"Grants permission to update the repository creation template","accessLevel":"Write","resourceTypes":[],"dependentActions":["ecr:CreateRepository","ecr:PutLifecyclePolicy","ecr:SetRepositoryPolicy","iam:CreateServiceLinkedRole","iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_UpdateRepositoryCreationTemplate.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-UpdateRepositoryCreationTemplate"},"UploadLayerPart":{"name":"UploadLayerPart","service":"ecr","conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to upload an image layer part to Amazon ECR","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_UploadLayerPart.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-UploadLayerPart"},"ValidatePullThroughCacheRule":{"name":"ValidatePullThroughCacheRule","service":"ecr","conditionKeys":[],"resources":[],"description":"Grants permission to validate the pull-through cache rule","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_ValidatePullThroughCacheRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html#amazonelasticcontainerregistry-ValidatePullThroughCacheRule"}},"resources":[{"name":"repository","arnFormats":["arn:${Partition}:ecr:${Region}:${Account}:repository/${RepositoryName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ecr:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the allowed set of values for each of the tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag-value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of mandatory tags in the request"},"ecr:AccountSetting":{"types":["String"],"description":"Filters access by the ECR account setting name"},"ecr:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag-value associated with the resource"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html"}

package/src/data/servicereference/services/ecs-mcp.json

@@ -1 +1 @@
-{"name":"ecs-mcp","actions":{"InvokeReadOnlyTools":{"conditionKeys":[],"resources":[],"description":"Grants permission to call read-only tools in MCP service","accessLevel":"Read","resourceTypes":[]},"UseMcp":{"conditionKeys":[],"resources":[],"description":"Grants permission to use MCP service","accessLevel":"Read","resourceTypes":[]}},"resources":[],"conditionKeys":{}}
+{"name":"ecs-mcp","actions":{"InvokeReadOnlyTools":{"name":"InvokeReadOnlyTools","service":"ecs-mcp","conditionKeys":[],"resources":[],"description":"Grants permission to call read-only tools in MCP service","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-mcp-getting-started.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonecsmcpservice.html#amazonecsmcpservice-InvokeReadOnlyTools"},"UseMcp":{"name":"UseMcp","service":"ecs-mcp","conditionKeys":[],"resources":[],"description":"Grants permission to use MCP service","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-mcp-getting-started.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonecsmcpservice.html#amazonecsmcpservice-UseMcp"}},"resources":[],"conditionKeys":{},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonecsmcpservice.html"}

package/src/data/servicereference/services/ecs.json

@@ -1 +1 @@
-{"name":"ecs","actions":{"CreateCapacityProvider":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","ecs:instance-metadata-tags-propagation","ecs:propagate-tags"],"resources":[{"name":"capacity-provider"}],"description":"Grants permission to create a new capacity provider. Capacity providers are associated with an Amazon ECS cluster and are used in capacity provider strategies to facilitate cluster auto scaling","accessLevel":"Write","resourceTypes":[{"name":"capacity-provider","required":true}]},"CreateCluster":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","ecs:capacity-provider","ecs:fargate-ephemeral-storage-kms-key"],"resources":[{"name":"cluster"}],"description":"Grants permission to create a new Amazon ECS cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"CreateExpressGatewayService":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","ecs:enable-ecs-managed-tags","ecs:propagate-tags","ecs:subnet","ecs:task-cpu","ecs:task-definition","ecs:task-memory"],"resources":[{"name":"service"}],"description":"Grants permission to create a new Amazon ECS Express Gateway service with cluster and task definition","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}],"dependentActions":["ecs:RegisterTaskDefinition","iam:PassRole"]},"CreateService":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","ecs:auto-assign-public-ip","ecs:capacity-provider","ecs:enable-ebs-volumes","ecs:enable-ecs-managed-tags","ecs:enable-execute-command","ecs:enable-service-connect","ecs:enable-vpc-lattice","ecs:namespace","ecs:propagate-tags","ecs:subnet","ecs:task-cpu","ecs:task-definition","ecs:task-memory"],"resources":[{"name":"service"}],"description":"Grants permission to run and maintain a desired number of tasks from a specified task definition via service creation","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}]},"CreateTaskSet":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","ecs:capacity-provider","ecs:cluster","ecs:service","ecs:task-definition"],"resources":[{"name":"task-set"}],"description":"Grants permission to create a new Amazon ECS task set","accessLevel":"Write","resourceTypes":[{"name":"task-set","required":true}]},"DeleteAccountSetting":{"conditionKeys":["ecs:account-setting"],"resources":[],"description":"Grants permission to modify the ARN and resource ID format of a resource for a specified IAM user, IAM role, or the root user for an account. You can specify whether the new ARN and resource ID format are disabled for new resources that are created","accessLevel":"Write","resourceTypes":[]},"DeleteAttributes":{"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster"],"resources":[{"name":"container-instance"}],"description":"Grants permission to delete one or more custom attributes from an Amazon ECS resource","accessLevel":"Write","resourceTypes":[{"name":"container-instance","required":true}]},"DeleteCapacityProvider":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"capacity-provider"}],"description":"Grants permission to delete the specified capacity provider","accessLevel":"Write","resourceTypes":[{"name":"capacity-provider","required":true}]},"DeleteCluster":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to delete the specified cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"DeleteExpressGatewayService":{"conditionKeys":[],"resources":[{"name":"service"}],"description":"Grants permission to delete a specified Express Gateway service","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}]},"DeleteService":{"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster"],"resources":[{"name":"service"}],"description":"Grants permission to delete a specified service within a cluster","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}]},"DeleteTaskDefinitions":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"task-definition"}],"description":"Grants permission to delete the specified task definitions by family and revision","accessLevel":"Write","resourceTypes":[{"name":"task-definition","required":true}]},"DeleteTaskSet":{"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster","ecs:service"],"resources":[{"name":"task-set"}],"description":"Grants permission to delete the specified task set","accessLevel":"Write","resourceTypes":[{"name":"task-set","required":true}]},"DeregisterContainerInstance":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to deregister an Amazon ECS container instance from the specified cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"DeregisterTaskDefinition":{"conditionKeys":[],"resources":[],"description":"Grants permission to deregister the specified task definition by family and revision","accessLevel":"Write","resourceTypes":[]},"DescribeCapacityProviders":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"capacity-provider"}],"description":"Grants permission to describe one or more Amazon ECS capacity providers","accessLevel":"Read","resourceTypes":[{"name":"capacity-provider","required":true}]},"DescribeClusters":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to describes one or more of your clusters","accessLevel":"Read","resourceTypes":[{"name":"cluster","required":true}]},"DescribeContainerInstances":{"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster"],"resources":[{"name":"container-instance"}],"description":"Grants permission to describes Amazon ECS container instances","accessLevel":"Read","resourceTypes":[{"name":"container-instance","required":true}]},"DescribeExpressGatewayService":{"conditionKeys":[],"resources":[{"name":"service"}],"description":"Grants permission to describe the specified Express Gateway service","accessLevel":"Read","resourceTypes":[{"name":"service","required":true}]},"DescribeServiceDeployments":{"conditionKeys":[],"resources":[{"name":"service"},{"name":"service-deployment"}],"description":"Grants permission to describe one or more of your service deployments","accessLevel":"Read","resourceTypes":[{"name":"service","required":true},{"name":"service-deployment","required":true}]},"DescribeServiceRevisions":{"conditionKeys":[],"resources":[{"name":"service"},{"name":"service-revision"}],"description":"Grants permission to describe one or more of your service revisions","accessLevel":"Read","resourceTypes":[{"name":"service","required":true},{"name":"service-revision","required":true}]},"DescribeServices":{"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster"],"resources":[{"name":"service"}],"description":"Grants permission to describe the specified services running in your cluster","accessLevel":"Read","resourceTypes":[{"name":"service","required":true}]},"DescribeTaskDefinition":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe a task definition. You can specify a family and revision to find information about a specific task definition, or you can simply specify the family to find the latest ACTIVE revision in that family","accessLevel":"Read","resourceTypes":[]},"DescribeTaskSets":{"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster","ecs:service"],"resources":[{"name":"task-set"}],"description":"Grants permission to describe Amazon ECS task sets","accessLevel":"Read","resourceTypes":[{"name":"task-set","required":true}]},"DescribeTasks":{"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster"],"resources":[{"name":"task"}],"description":"Grants permission to describe a specified task or tasks","accessLevel":"Read","resourceTypes":[{"name":"task","required":true}]},"DiscoverPollEndpoint":{"conditionKeys":[],"resources":[],"description":"Grants permission to get an endpoint for the Amazon ECS agent to poll for updates","accessLevel":"Write","resourceTypes":[]},"ExecuteCommand":{"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster","ecs:container-name","ecs:task"],"resources":[{"name":"cluster"},{"name":"task"}],"description":"Grants permission to run a command remotely on an Amazon ECS container","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true},{"name":"task","required":true}]},"GetTaskProtection":{"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster"],"resources":[{"name":"task"}],"description":"Grants permission to retrieve the protection status of tasks in an Amazon ECS service","accessLevel":"Read","resourceTypes":[{"name":"task","required":true}]},"ListAccountSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the account settings for an Amazon ECS resource for a specified principal","accessLevel":"Read","resourceTypes":[]},"ListAttributes":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to lists the attributes for Amazon ECS resources within a specified target type and cluster","accessLevel":"List","resourceTypes":[{"name":"cluster","required":true}]},"ListClusters":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of existing clusters","accessLevel":"List","resourceTypes":[]},"ListContainerInstances":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to get a list of container instances in a specified cluster","accessLevel":"List","resourceTypes":[{"name":"cluster","required":true}]},"ListServiceDeployments":{"conditionKeys":[],"resources":[{"name":"service"}],"description":"Grants permission to get a list of service deployments for a specified service","accessLevel":"List","resourceTypes":[{"name":"service","required":true}]},"ListServices":{"conditionKeys":["ecs:cluster"],"resources":[],"description":"Grants permission to get a list of services that are running in a specified cluster","accessLevel":"List","resourceTypes":[]},"ListServicesByNamespace":{"conditionKeys":["ecs:namespace"],"resources":[],"description":"Grants permission to get a list of services that are running in a specified AWS Cloud Map Namespace","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"capacity-provider"},{"name":"cluster"},{"name":"container-instance"},{"name":"service"},{"name":"task"},{"name":"task-definition"},{"name":"task-set"}],"description":"Grants permission to get a list of tags for the specified resource","accessLevel":"Read","resourceTypes":[{"name":"capacity-provider","required":false},{"name":"cluster","required":false},{"name":"container-instance","required":false},{"name":"service","required":false},{"name":"task","required":false},{"name":"task-definition","required":false},{"name":"task-set","required":false}]},"ListTaskDefinitionFamilies":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of task definition families that are registered to your account (which may include task definition families that no longer have any ACTIVE task definitions)","accessLevel":"List","resourceTypes":[]},"ListTaskDefinitions":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of task definitions that are registered to your account","accessLevel":"List","resourceTypes":[]},"ListTasks":{"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster"],"resources":[{"name":"container-instance"}],"description":"Grants permission to get a list of tasks for a specified cluster","accessLevel":"List","resourceTypes":[{"name":"container-instance","required":true}]},"Poll":{"conditionKeys":["ecs:cluster"],"resources":[{"name":"container-instance"}],"description":"Grants permission to an agent to connect with the Amazon ECS service to report status and get commands","accessLevel":"Write","resourceTypes":[{"name":"container-instance","required":true}],"permissionOnly":true},"PutAccountSetting":{"conditionKeys":["ecs:account-setting"],"resources":[],"description":"Grants permission to modify the ARN and resource ID format of a resource for a specified IAM user, IAM role, or the root user for an account. You can specify whether the new ARN and resource ID format are enabled for new resources that are created. Enabling this setting is required to use new Amazon ECS features such as resource tagging","accessLevel":"Write","resourceTypes":[]},"PutAccountSettingDefault":{"conditionKeys":["ecs:account-setting"],"resources":[],"description":"Grants permission to modify the ARN and resource ID format of a resource type for all IAM users on an account for which no individual account setting has been set. Enabling this setting is required to use new Amazon ECS features such as resource tagging","accessLevel":"Write","resourceTypes":[]},"PutAttributes":{"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster"],"resources":[{"name":"container-instance"}],"description":"Grants permission to create or update an attribute on an Amazon ECS resource","accessLevel":"Write","resourceTypes":[{"name":"container-instance","required":true}]},"PutClusterCapacityProviders":{"conditionKeys":["ecs:capacity-provider"],"resources":[{"name":"cluster"}],"description":"Grants permission to modify the available capacity providers and the default capacity provider strategy for a cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"PutSystemLogEvents":{"conditionKeys":[],"resources":[{"name":"cluster"},{"name":"container-instance"}],"description":"Grants permission to collect system logs from the container instances","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true},{"name":"container-instance","required":true}]},"RegisterContainerInstance":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"cluster"}],"description":"Grants permission to register an EC2 instance into the specified cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"RegisterTaskDefinition":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","ecs:compute-compatibility","ecs:privileged","ecs:task-cpu","ecs:task-memory"],"resources":[{"name":"task-definition"}],"description":"Grants permission to register a new task definition from the supplied family and containerDefinitions","accessLevel":"Write","resourceTypes":[{"name":"task-definition","required":true}]},"RunTask":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","ecs:capacity-provider","ecs:cluster","ecs:enable-ebs-volumes","ecs:enable-execute-command"],"resources":[{"name":"task-definition"}],"description":"Grants permission to start a task using random placement and the default Amazon ECS scheduler","accessLevel":"Write","resourceTypes":[{"name":"task-definition","required":true}],"dependentActions":["iam:PassRole"]},"StartTask":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","ecs:cluster","ecs:container-instances","ecs:enable-ebs-volumes","ecs:enable-execute-command"],"resources":[{"name":"task-definition"}],"description":"Grants permission to start a new task from the specified task definition on the specified container instance or instances","accessLevel":"Write","resourceTypes":[{"name":"task-definition","required":true}],"dependentActions":["iam:PassRole"]},"StartTelemetrySession":{"conditionKeys":["ecs:cluster"],"resources":[{"name":"container-instance"}],"description":"Grants permission to start a telemetry session","accessLevel":"Write","resourceTypes":[{"name":"container-instance","required":true}]},"StopServiceDeployment":{"conditionKeys":[],"resources":[{"name":"service"},{"name":"service-deployment"}],"description":"Grants permission to stop an ongoing service deployment","accessLevel":"Write","resourceTypes":[{"name":"service","required":true},{"name":"service-deployment","required":true}]},"StopTask":{"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster"],"resources":[{"name":"task"}],"description":"Grants permission to stop a running task","accessLevel":"Write","resourceTypes":[{"name":"task","required":true}]},"SubmitAttachmentStateChanges":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to send an acknowledgement that attachments changed states","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"SubmitContainerStateChange":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to send an acknowledgement that a container changed states","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"SubmitTaskStateChange":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to send an acknowledgement that a task changed states","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","ecs:CreateAction"],"resources":[{"name":"capacity-provider"},{"name":"cluster"},{"name":"container-instance"},{"name":"service"},{"name":"task"},{"name":"task-definition"},{"name":"task-set"}],"description":"Grants permission to tag the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"capacity-provider","required":false},{"name":"cluster","required":false},{"name":"container-instance","required":false},{"name":"service","required":false},{"name":"task","required":false},{"name":"task-definition","required":false},{"name":"task-set","required":false}]},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"capacity-provider"},{"name":"cluster"},{"name":"container-instance"},{"name":"service"},{"name":"task"},{"name":"task-definition"},{"name":"task-set"}],"description":"Grants permission to untag the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"capacity-provider","required":false},{"name":"cluster","required":false},{"name":"container-instance","required":false},{"name":"service","required":false},{"name":"task","required":false},{"name":"task-definition","required":false},{"name":"task-set","required":false}]},"UpdateCapacityProvider":{"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:instance-metadata-tags-propagation","ecs:propagate-tags"],"resources":[{"name":"capacity-provider"}],"description":"Grants permission to update the specified capacity provider","accessLevel":"Write","resourceTypes":[{"name":"capacity-provider","required":true}]},"UpdateCluster":{"conditionKeys":["ecs:fargate-ephemeral-storage-kms-key"],"resources":[{"name":"cluster"}],"description":"Grants permission to modify the configuration or settings to use for a cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"UpdateClusterSettings":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to modify the settings to use for a cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"UpdateContainerAgent":{"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster"],"resources":[{"name":"container-instance"}],"description":"Grants permission to update the Amazon ECS container agent on a specified container instance","accessLevel":"Write","resourceTypes":[{"name":"container-instance","required":true}]},"UpdateContainerInstancesState":{"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster"],"resources":[{"name":"container-instance"}],"description":"Grants permission to the user to modify the status of an Amazon ECS container instance","accessLevel":"Write","resourceTypes":[{"name":"container-instance","required":true}]},"UpdateExpressGatewayService":{"conditionKeys":["ecs:enable-ecs-managed-tags","ecs:propagate-tags","ecs:subnet","ecs:task-cpu","ecs:task-memory"],"resources":[{"name":"service"}],"description":"Grants permission to modify the parameters of an Express Gateway service","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}]},"UpdateService":{"conditionKeys":["ecs:auto-assign-public-ip","ecs:capacity-provider","ecs:enable-ebs-volumes","ecs:enable-ecs-managed-tags","ecs:enable-execute-command","ecs:enable-service-connect","ecs:enable-vpc-lattice","ecs:namespace","ecs:propagate-tags","ecs:subnet","ecs:task-cpu","ecs:task-definition","ecs:task-memory"],"resources":[{"name":"service"}],"description":"Grants permission to modify the parameters of a service","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}]},"UpdateServicePrimaryTaskSet":{"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster"],"resources":[{"name":"service"}],"description":"Grants permission to modify the primary task set used in a service","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}]},"UpdateTaskProtection":{"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster"],"resources":[{"name":"task"}],"description":"Grants permission to modify the protection status of a task","accessLevel":"Write","resourceTypes":[{"name":"task","required":true}]},"UpdateTaskSet":{"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster","ecs:service"],"resources":[{"name":"task-set"}],"description":"Grants permission to update the specified task set","accessLevel":"Write","resourceTypes":[{"name":"task-set","required":true}]}},"resources":[{"name":"capacity-provider","arnFormats":["arn:${Partition}:ecs:${Region}:${Account}:capacity-provider/${CapacityProviderName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:ResourceTag/${TagKey}"]},{"name":"cluster","arnFormats":["arn:${Partition}:ecs:${Region}:${Account}:cluster/${ClusterName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:ResourceTag/${TagKey}"]},{"name":"container-instance","arnFormats":["arn:${Partition}:ecs:${Region}:${Account}:container-instance/${ClusterName}/${ContainerInstanceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:ResourceTag/${TagKey}"]},{"name":"service","arnFormats":["arn:${Partition}:ecs:${Region}:${Account}:service/${ClusterName}/${ServiceName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:ResourceTag/${TagKey}"]},{"name":"service-deployment","arnFormats":["arn:${Partition}:ecs:${Region}:${Account}:service-deployment/${ClusterName}/${ServiceName}/${ServiceDeploymentId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster","ecs:service"]},{"name":"service-revision","arnFormats":["arn:${Partition}:ecs:${Region}:${Account}:service-revision/${ClusterName}/${ServiceName}/${ServiceRevisionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster","ecs:service"]},{"name":"task","arnFormats":["arn:${Partition}:ecs:${Region}:${Account}:task/${ClusterName}/${TaskId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:ResourceTag/${TagKey}"]},{"name":"task-definition","arnFormats":["arn:${Partition}:ecs:${Region}:${Account}:task-definition/${TaskDefinitionFamilyName}:${TaskDefinitionRevisionNumber}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:ResourceTag/${TagKey}"]},{"name":"task-set","arnFormats":["arn:${Partition}:ecs:${Region}:${Account}:task-set/${ClusterName}/${ServiceName}/${TaskSetId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"ecs:CreateAction":{"types":["String"],"description":"Filters access by the name of a resource-creating API action"},"ecs:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs attached to the resource"},"ecs:account-setting":{"types":["String"],"description":"Filters access by the Amazon ECS account setting name"},"ecs:auto-assign-public-ip":{"types":["Bool"],"description":"Filters access by the public IP assignment configuration of your Amazon ECS task or Amazon ECS service that uses awsvpc network mode"},"ecs:capacity-provider":{"types":["ArrayOfARN"],"description":"Filters access by the ARN of an Amazon ECS capacity provider"},"ecs:cluster":{"types":["ARN"],"description":"Filters access by the ARN of an Amazon ECS cluster"},"ecs:compute-compatibility":{"types":["ArrayOfString"],"description":"Filters access by the required compatibilities field provided in the request"},"ecs:container-instances":{"types":["ARN"],"description":"Filters access by the ARN of an Amazon ECS container instance"},"ecs:container-name":{"types":["String"],"description":"Filters access by the name of an Amazon ECS container which is defined in the ECS task definition"},"ecs:enable-ebs-volumes":{"types":["String"],"description":"Filters access by the Amazon ECS managed Amazon EBS volume capability of your ECS task or service"},"ecs:enable-ecs-managed-tags":{"types":["Bool"],"description":"Filters access by the enableECSManagedTags configuration of your Amazon ECS task or Amazon ECS service"},"ecs:enable-execute-command":{"types":["String"],"description":"Filters access by the execute-command capability of your Amazon ECS task or Amazon ECS service"},"ecs:enable-service-connect":{"types":["String"],"description":"Filters access by the enable field value in the Service Connect configuration"},"ecs:enable-vpc-lattice":{"types":["String"],"description":"Filters access by the VPC lattice capability of your Amazon ECS service"},"ecs:fargate-ephemeral-storage-kms-key":{"types":["String"],"description":"Filters access by the AWS KMS key id provided in the request"},"ecs:instance-metadata-tags-propagation":{"types":["Bool"],"description":"Filters access by the instance metadata tags propagation setting of your Amazon ECS capacity provider"},"ecs:namespace":{"types":["ARN"],"description":"Filters access by the ARN of AWS Cloud Map namespace which is defined in the Service Connect Configuration"},"ecs:privileged":{"types":["String"],"description":"Filters access by the privileged field provided in the request"},"ecs:propagate-tags":{"types":["String"],"description":"Filters access by the tag propagation configuration of your Amazon ECS task or Amazon ECS service"},"ecs:service":{"types":["ARN"],"description":"Filters access by the ARN of an Amazon ECS service"},"ecs:subnet":{"types":["ArrayOfString"],"description":"Filters access by the subnet configuration of your Amazon ECS task or Amazon ECS service that uses awsvpc network mode"},"ecs:task":{"types":["ARN"],"description":"Filters access by the ARN of an Amazon ECS task"},"ecs:task-cpu":{"types":["Numeric"],"description":"Filters access by the task cpu, as an integer with 1024 = 1 vCPU, provided in the request"},"ecs:task-definition":{"types":["ARN"],"description":"Filters access by the ARN of an Amazon ECS task definition"},"ecs:task-memory":{"types":["Numeric"],"description":"Filters access by the task memory, as an integer representing MiB, provided in the request"}}}
+{"name":"ecs","actions":{"CreateCapacityProvider":{"name":"CreateCapacityProvider","service":"ecs","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","ecs:instance-metadata-tags-propagation","ecs:propagate-tags"],"resources":[{"name":"capacity-provider"}],"description":"Grants permission to create a new capacity provider. Capacity providers are associated with an Amazon ECS cluster and are used in capacity provider strategies to facilitate cluster auto scaling","accessLevel":"Write","resourceTypes":[{"name":"capacity-provider","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_CreateCapacityProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-CreateCapacityProvider"},"CreateCluster":{"name":"CreateCluster","service":"ecs","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","ecs:capacity-provider","ecs:fargate-ephemeral-storage-kms-key"],"resources":[{"name":"cluster"}],"description":"Grants permission to create a new Amazon ECS cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_CreateCluster.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-CreateCluster"},"CreateExpressGatewayService":{"name":"CreateExpressGatewayService","service":"ecs","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","ecs:enable-ecs-managed-tags","ecs:propagate-tags","ecs:subnet","ecs:task-cpu","ecs:task-definition","ecs:task-memory"],"resources":[{"name":"service"}],"description":"Grants permission to create a new Amazon ECS Express Gateway service with cluster and task definition","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}],"dependentActions":["ecs:RegisterTaskDefinition","iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_CreateExpressGatewayService.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-CreateExpressGatewayService"},"CreateService":{"name":"CreateService","service":"ecs","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","ecs:auto-assign-public-ip","ecs:capacity-provider","ecs:enable-ebs-volumes","ecs:enable-ecs-managed-tags","ecs:enable-execute-command","ecs:enable-service-connect","ecs:enable-vpc-lattice","ecs:namespace","ecs:propagate-tags","ecs:subnet","ecs:task-cpu","ecs:task-definition","ecs:task-memory"],"resources":[{"name":"service"}],"description":"Grants permission to run and maintain a desired number of tasks from a specified task definition via service creation","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_CreateService.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-CreateService"},"CreateTaskSet":{"name":"CreateTaskSet","service":"ecs","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","ecs:capacity-provider","ecs:cluster","ecs:service","ecs:task-definition"],"resources":[{"name":"task-set"}],"description":"Grants permission to create a new Amazon ECS task set","accessLevel":"Write","resourceTypes":[{"name":"task-set","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_CreateTaskSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-CreateTaskSet"},"DeleteAccountSetting":{"name":"DeleteAccountSetting","service":"ecs","conditionKeys":["ecs:account-setting"],"resources":[],"description":"Grants permission to modify the ARN and resource ID format of a resource for a specified IAM user, IAM role, or the root user for an account. You can specify whether the new ARN and resource ID format are disabled for new resources that are created","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DeleteAccountSetting.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-DeleteAccountSetting"},"DeleteAttributes":{"name":"DeleteAttributes","service":"ecs","conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster"],"resources":[{"name":"container-instance"}],"description":"Grants permission to delete one or more custom attributes from an Amazon ECS resource","accessLevel":"Write","resourceTypes":[{"name":"container-instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DeleteAttributes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-DeleteAttributes"},"DeleteCapacityProvider":{"name":"DeleteCapacityProvider","service":"ecs","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"capacity-provider"}],"description":"Grants permission to delete the specified capacity provider","accessLevel":"Write","resourceTypes":[{"name":"capacity-provider","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DeleteCapacityProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-DeleteCapacityProvider"},"DeleteCluster":{"name":"DeleteCluster","service":"ecs","conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to delete the specified cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DeleteCluster.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-DeleteCluster"},"DeleteExpressGatewayService":{"name":"DeleteExpressGatewayService","service":"ecs","conditionKeys":[],"resources":[{"name":"service"}],"description":"Grants permission to delete a specified Express Gateway service","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DeleteExpressGatewayService.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-DeleteExpressGatewayService"},"DeleteService":{"name":"DeleteService","service":"ecs","conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster"],"resources":[{"name":"service"}],"description":"Grants permission to delete a specified service within a cluster","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DeleteService.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-DeleteService"},"DeleteTaskDefinitions":{"name":"DeleteTaskDefinitions","service":"ecs","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"task-definition"}],"description":"Grants permission to delete the specified task definitions by family and revision","accessLevel":"Write","resourceTypes":[{"name":"task-definition","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DeleteTaskDefinitions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-DeleteTaskDefinitions"},"DeleteTaskSet":{"name":"DeleteTaskSet","service":"ecs","conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster","ecs:service"],"resources":[{"name":"task-set"}],"description":"Grants permission to delete the specified task set","accessLevel":"Write","resourceTypes":[{"name":"task-set","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DeleteTaskSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-DeleteTaskSet"},"DeregisterContainerInstance":{"name":"DeregisterContainerInstance","service":"ecs","conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to deregister an Amazon ECS container instance from the specified cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DeregisterContainerInstance.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-DeregisterContainerInstance"},"DeregisterTaskDefinition":{"name":"DeregisterTaskDefinition","service":"ecs","conditionKeys":[],"resources":[],"description":"Grants permission to deregister the specified task definition by family and revision","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DeregisterTaskDefinition.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-DeregisterTaskDefinition"},"DescribeCapacityProviders":{"name":"DescribeCapacityProviders","service":"ecs","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"capacity-provider"}],"description":"Grants permission to describe one or more Amazon ECS capacity providers","accessLevel":"Read","resourceTypes":[{"name":"capacity-provider","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DescribeCapacityProviders.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-DescribeCapacityProviders"},"DescribeClusters":{"name":"DescribeClusters","service":"ecs","conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to describes one or more of your clusters","accessLevel":"Read","resourceTypes":[{"name":"cluster","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DescribeClusters.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-DescribeClusters"},"DescribeContainerInstances":{"name":"DescribeContainerInstances","service":"ecs","conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster"],"resources":[{"name":"container-instance"}],"description":"Grants permission to describes Amazon ECS container instances","accessLevel":"Read","resourceTypes":[{"name":"container-instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DescribeContainerInstances.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-DescribeContainerInstances"},"DescribeExpressGatewayService":{"name":"DescribeExpressGatewayService","service":"ecs","conditionKeys":[],"resources":[{"name":"service"}],"description":"Grants permission to describe the specified Express Gateway service","accessLevel":"Read","resourceTypes":[{"name":"service","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DescribeExpressGatewayService.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-DescribeExpressGatewayService"},"DescribeServiceDeployments":{"name":"DescribeServiceDeployments","service":"ecs","conditionKeys":[],"resources":[{"name":"service"},{"name":"service-deployment"}],"description":"Grants permission to describe one or more of your service deployments","accessLevel":"Read","resourceTypes":[{"name":"service","required":true},{"name":"service-deployment","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DescribeServiceDeployments.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-DescribeServiceDeployments"},"DescribeServiceRevisions":{"name":"DescribeServiceRevisions","service":"ecs","conditionKeys":[],"resources":[{"name":"service"},{"name":"service-revision"}],"description":"Grants permission to describe one or more of your service revisions","accessLevel":"Read","resourceTypes":[{"name":"service","required":true},{"name":"service-revision","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DescribeServiceRevisions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-DescribeServiceRevisions"},"DescribeServices":{"name":"DescribeServices","service":"ecs","conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster"],"resources":[{"name":"service"}],"description":"Grants permission to describe the specified services running in your cluster","accessLevel":"Read","resourceTypes":[{"name":"service","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DescribeServices.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-DescribeServices"},"DescribeTaskDefinition":{"name":"DescribeTaskDefinition","service":"ecs","conditionKeys":[],"resources":[],"description":"Grants permission to describe a task definition. You can specify a family and revision to find information about a specific task definition, or you can simply specify the family to find the latest ACTIVE revision in that family","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DescribeTaskDefinition.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-DescribeTaskDefinition"},"DescribeTaskSets":{"name":"DescribeTaskSets","service":"ecs","conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster","ecs:service"],"resources":[{"name":"task-set"}],"description":"Grants permission to describe Amazon ECS task sets","accessLevel":"Read","resourceTypes":[{"name":"task-set","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DescribeTaskSets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-DescribeTaskSets"},"DescribeTasks":{"name":"DescribeTasks","service":"ecs","conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster"],"resources":[{"name":"task"}],"description":"Grants permission to describe a specified task or tasks","accessLevel":"Read","resourceTypes":[{"name":"task","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DescribeTasks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-DescribeTasks"},"DiscoverPollEndpoint":{"name":"DiscoverPollEndpoint","service":"ecs","conditionKeys":[],"resources":[],"description":"Grants permission to get an endpoint for the Amazon ECS agent to poll for updates","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DiscoverPollEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-DiscoverPollEndpoint"},"ExecuteCommand":{"name":"ExecuteCommand","service":"ecs","conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster","ecs:container-name","ecs:task"],"resources":[{"name":"cluster"},{"name":"task"}],"description":"Grants permission to run a command remotely on an Amazon ECS container","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true},{"name":"task","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_ExecuteCommand.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-ExecuteCommand"},"GetTaskProtection":{"name":"GetTaskProtection","service":"ecs","conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster"],"resources":[{"name":"task"}],"description":"Grants permission to retrieve the protection status of tasks in an Amazon ECS service","accessLevel":"Read","resourceTypes":[{"name":"task","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_GetTaskProtection.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-GetTaskProtection"},"ListAccountSettings":{"name":"ListAccountSettings","service":"ecs","conditionKeys":[],"resources":[],"description":"Grants permission to list the account settings for an Amazon ECS resource for a specified principal","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_ListAccountSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-ListAccountSettings"},"ListAttributes":{"name":"ListAttributes","service":"ecs","conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to lists the attributes for Amazon ECS resources within a specified target type and cluster","accessLevel":"List","resourceTypes":[{"name":"cluster","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_ListAttributes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-ListAttributes"},"ListClusters":{"name":"ListClusters","service":"ecs","conditionKeys":[],"resources":[],"description":"Grants permission to get a list of existing clusters","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_ListClusters.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-ListClusters"},"ListContainerInstances":{"name":"ListContainerInstances","service":"ecs","conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to get a list of container instances in a specified cluster","accessLevel":"List","resourceTypes":[{"name":"cluster","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_ListContainerInstances.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-ListContainerInstances"},"ListServiceDeployments":{"name":"ListServiceDeployments","service":"ecs","conditionKeys":[],"resources":[{"name":"service"}],"description":"Grants permission to get a list of service deployments for a specified service","accessLevel":"List","resourceTypes":[{"name":"service","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_ListServiceDeployments.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-ListServiceDeployments"},"ListServices":{"name":"ListServices","service":"ecs","conditionKeys":["ecs:cluster"],"resources":[],"description":"Grants permission to get a list of services that are running in a specified cluster","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_ListServices.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-ListServices"},"ListServicesByNamespace":{"name":"ListServicesByNamespace","service":"ecs","conditionKeys":["ecs:namespace"],"resources":[],"description":"Grants permission to get a list of services that are running in a specified AWS Cloud Map Namespace","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_ListServicesByNamespace.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-ListServicesByNamespace"},"ListTagsForResource":{"name":"ListTagsForResource","service":"ecs","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"capacity-provider"},{"name":"cluster"},{"name":"container-instance"},{"name":"service"},{"name":"task"},{"name":"task-definition"},{"name":"task-set"}],"description":"Grants permission to get a list of tags for the specified resource","accessLevel":"Read","resourceTypes":[{"name":"capacity-provider","required":false},{"name":"cluster","required":false},{"name":"container-instance","required":false},{"name":"service","required":false},{"name":"task","required":false},{"name":"task-definition","required":false},{"name":"task-set","required":false}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-ListTagsForResource"},"ListTaskDefinitionFamilies":{"name":"ListTaskDefinitionFamilies","service":"ecs","conditionKeys":[],"resources":[],"description":"Grants permission to get a list of task definition families that are registered to your account (which may include task definition families that no longer have any ACTIVE task definitions)","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_ListTaskDefinitionFamilies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-ListTaskDefinitionFamilies"},"ListTaskDefinitions":{"name":"ListTaskDefinitions","service":"ecs","conditionKeys":[],"resources":[],"description":"Grants permission to get a list of task definitions that are registered to your account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_ListTaskDefinitions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-ListTaskDefinitions"},"ListTasks":{"name":"ListTasks","service":"ecs","conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster"],"resources":[{"name":"container-instance"}],"description":"Grants permission to get a list of tasks for a specified cluster","accessLevel":"List","resourceTypes":[{"name":"container-instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_ListTasks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-ListTasks"},"Poll":{"name":"Poll","service":"ecs","conditionKeys":["ecs:cluster"],"resources":[{"name":"container-instance"}],"description":"Grants permission to an agent to connect with the Amazon ECS service to report status and get commands","accessLevel":"Write","resourceTypes":[{"name":"container-instance","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/developerguide/instance_IAM_role.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-Poll"},"PutAccountSetting":{"name":"PutAccountSetting","service":"ecs","conditionKeys":["ecs:account-setting"],"resources":[],"description":"Grants permission to modify the ARN and resource ID format of a resource for a specified IAM user, IAM role, or the root user for an account. You can specify whether the new ARN and resource ID format are enabled for new resources that are created. Enabling this setting is required to use new Amazon ECS features such as resource tagging","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_PutAccountSetting.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-PutAccountSetting"},"PutAccountSettingDefault":{"name":"PutAccountSettingDefault","service":"ecs","conditionKeys":["ecs:account-setting"],"resources":[],"description":"Grants permission to modify the ARN and resource ID format of a resource type for all IAM users on an account for which no individual account setting has been set. Enabling this setting is required to use new Amazon ECS features such as resource tagging","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_PutAccountSettingDefault.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-PutAccountSettingDefault"},"PutAttributes":{"name":"PutAttributes","service":"ecs","conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster"],"resources":[{"name":"container-instance"}],"description":"Grants permission to create or update an attribute on an Amazon ECS resource","accessLevel":"Write","resourceTypes":[{"name":"container-instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_PutAttributes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-PutAttributes"},"PutClusterCapacityProviders":{"name":"PutClusterCapacityProviders","service":"ecs","conditionKeys":["ecs:capacity-provider"],"resources":[{"name":"cluster"}],"description":"Grants permission to modify the available capacity providers and the default capacity provider strategy for a cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_PutClusterCapacityProviders.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-PutClusterCapacityProviders"},"PutSystemLogEvents":{"name":"PutSystemLogEvents","service":"ecs","conditionKeys":[],"resources":[{"name":"cluster"},{"name":"container-instance"}],"description":"Grants permission to collect system logs from the container instances","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true},{"name":"container-instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/developerguide/logging-using-cloudtrail.html#cloudtrail-data-events","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-PutSystemLogEvents"},"RegisterContainerInstance":{"name":"RegisterContainerInstance","service":"ecs","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"cluster"}],"description":"Grants permission to register an EC2 instance into the specified cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_RegisterContainerInstance.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-RegisterContainerInstance"},"RegisterTaskDefinition":{"name":"RegisterTaskDefinition","service":"ecs","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","ecs:compute-compatibility","ecs:privileged","ecs:task-cpu","ecs:task-memory"],"resources":[{"name":"task-definition"}],"description":"Grants permission to register a new task definition from the supplied family and containerDefinitions","accessLevel":"Write","resourceTypes":[{"name":"task-definition","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_RegisterTaskDefinition.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-RegisterTaskDefinition"},"RunTask":{"name":"RunTask","service":"ecs","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","ecs:capacity-provider","ecs:cluster","ecs:enable-ebs-volumes","ecs:enable-execute-command"],"resources":[{"name":"task-definition"}],"description":"Grants permission to start a task using random placement and the default Amazon ECS scheduler","accessLevel":"Write","resourceTypes":[{"name":"task-definition","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_RunTask.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-RunTask"},"StartTask":{"name":"StartTask","service":"ecs","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","ecs:cluster","ecs:container-instances","ecs:enable-ebs-volumes","ecs:enable-execute-command"],"resources":[{"name":"task-definition"}],"description":"Grants permission to start a new task from the specified task definition on the specified container instance or instances","accessLevel":"Write","resourceTypes":[{"name":"task-definition","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_StartTask.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-StartTask"},"StartTelemetrySession":{"name":"StartTelemetrySession","service":"ecs","conditionKeys":["ecs:cluster"],"resources":[{"name":"container-instance"}],"description":"Grants permission to start a telemetry session","accessLevel":"Write","resourceTypes":[{"name":"container-instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/developerguide/cloudwatch-metrics.html#enable_cloudwatch","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-StartTelemetrySession"},"StopServiceDeployment":{"name":"StopServiceDeployment","service":"ecs","conditionKeys":[],"resources":[{"name":"service"},{"name":"service-deployment"}],"description":"Grants permission to stop an ongoing service deployment","accessLevel":"Write","resourceTypes":[{"name":"service","required":true},{"name":"service-deployment","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_StopServiceDeployment.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-StopServiceDeployment"},"StopTask":{"name":"StopTask","service":"ecs","conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster"],"resources":[{"name":"task"}],"description":"Grants permission to stop a running task","accessLevel":"Write","resourceTypes":[{"name":"task","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_StopTask.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-StopTask"},"SubmitAttachmentStateChanges":{"name":"SubmitAttachmentStateChanges","service":"ecs","conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to send an acknowledgement that attachments changed states","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_SubmitAttachmentStateChanges.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-SubmitAttachmentStateChanges"},"SubmitContainerStateChange":{"name":"SubmitContainerStateChange","service":"ecs","conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to send an acknowledgement that a container changed states","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_SubmitContainerStateChange.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-SubmitContainerStateChange"},"SubmitTaskStateChange":{"name":"SubmitTaskStateChange","service":"ecs","conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to send an acknowledgement that a task changed states","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_SubmitTaskStateChange.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-SubmitTaskStateChange"},"TagResource":{"name":"TagResource","service":"ecs","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","ecs:CreateAction"],"resources":[{"name":"capacity-provider"},{"name":"cluster"},{"name":"container-instance"},{"name":"service"},{"name":"task"},{"name":"task-definition"},{"name":"task-set"}],"description":"Grants permission to tag the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"capacity-provider","required":false},{"name":"cluster","required":false},{"name":"container-instance","required":false},{"name":"service","required":false},{"name":"task","required":false},{"name":"task-definition","required":false},{"name":"task-set","required":false}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-TagResource"},"UntagResource":{"name":"UntagResource","service":"ecs","conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"capacity-provider"},{"name":"cluster"},{"name":"container-instance"},{"name":"service"},{"name":"task"},{"name":"task-definition"},{"name":"task-set"}],"description":"Grants permission to untag the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"capacity-provider","required":false},{"name":"cluster","required":false},{"name":"container-instance","required":false},{"name":"service","required":false},{"name":"task","required":false},{"name":"task-definition","required":false},{"name":"task-set","required":false}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-UntagResource"},"UpdateCapacityProvider":{"name":"UpdateCapacityProvider","service":"ecs","conditionKeys":["aws:ResourceTag/${TagKey}","ecs:instance-metadata-tags-propagation","ecs:propagate-tags"],"resources":[{"name":"capacity-provider"}],"description":"Grants permission to update the specified capacity provider","accessLevel":"Write","resourceTypes":[{"name":"capacity-provider","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_UpdateCapacityProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-UpdateCapacityProvider"},"UpdateCluster":{"name":"UpdateCluster","service":"ecs","conditionKeys":["ecs:fargate-ephemeral-storage-kms-key"],"resources":[{"name":"cluster"}],"description":"Grants permission to modify the configuration or settings to use for a cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_UpdateCluster.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-UpdateCluster"},"UpdateClusterSettings":{"name":"UpdateClusterSettings","service":"ecs","conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to modify the settings to use for a cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_UpdateClusterSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-UpdateClusterSettings"},"UpdateContainerAgent":{"name":"UpdateContainerAgent","service":"ecs","conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster"],"resources":[{"name":"container-instance"}],"description":"Grants permission to update the Amazon ECS container agent on a specified container instance","accessLevel":"Write","resourceTypes":[{"name":"container-instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_UpdateContainerAgent.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-UpdateContainerAgent"},"UpdateContainerInstancesState":{"name":"UpdateContainerInstancesState","service":"ecs","conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster"],"resources":[{"name":"container-instance"}],"description":"Grants permission to the user to modify the status of an Amazon ECS container instance","accessLevel":"Write","resourceTypes":[{"name":"container-instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_UpdateContainerInstancesState.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-UpdateContainerInstancesState"},"UpdateExpressGatewayService":{"name":"UpdateExpressGatewayService","service":"ecs","conditionKeys":["ecs:enable-ecs-managed-tags","ecs:propagate-tags","ecs:subnet","ecs:task-cpu","ecs:task-memory"],"resources":[{"name":"service"}],"description":"Grants permission to modify the parameters of an Express Gateway service","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_UpdateExpressGatewayService.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-UpdateExpressGatewayService"},"UpdateService":{"name":"UpdateService","service":"ecs","conditionKeys":["ecs:auto-assign-public-ip","ecs:capacity-provider","ecs:enable-ebs-volumes","ecs:enable-ecs-managed-tags","ecs:enable-execute-command","ecs:enable-service-connect","ecs:enable-vpc-lattice","ecs:namespace","ecs:propagate-tags","ecs:subnet","ecs:task-cpu","ecs:task-definition","ecs:task-memory"],"resources":[{"name":"service"}],"description":"Grants permission to modify the parameters of a service","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_UpdateService.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-UpdateService"},"UpdateServicePrimaryTaskSet":{"name":"UpdateServicePrimaryTaskSet","service":"ecs","conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster"],"resources":[{"name":"service"}],"description":"Grants permission to modify the primary task set used in a service","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_UpdateServicePrimaryTaskSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-UpdateServicePrimaryTaskSet"},"UpdateTaskProtection":{"name":"UpdateTaskProtection","service":"ecs","conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster"],"resources":[{"name":"task"}],"description":"Grants permission to modify the protection status of a task","accessLevel":"Write","resourceTypes":[{"name":"task","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_UpdateTaskProtection.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-UpdateTaskProtection"},"UpdateTaskSet":{"name":"UpdateTaskSet","service":"ecs","conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster","ecs:service"],"resources":[{"name":"task-set"}],"description":"Grants permission to update the specified task set","accessLevel":"Write","resourceTypes":[{"name":"task-set","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_UpdateTaskSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html#amazonelasticcontainerservice-UpdateTaskSet"}},"resources":[{"name":"capacity-provider","arnFormats":["arn:${Partition}:ecs:${Region}:${Account}:capacity-provider/${CapacityProviderName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:ResourceTag/${TagKey}"]},{"name":"cluster","arnFormats":["arn:${Partition}:ecs:${Region}:${Account}:cluster/${ClusterName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:ResourceTag/${TagKey}"]},{"name":"container-instance","arnFormats":["arn:${Partition}:ecs:${Region}:${Account}:container-instance/${ClusterName}/${ContainerInstanceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:ResourceTag/${TagKey}"]},{"name":"service","arnFormats":["arn:${Partition}:ecs:${Region}:${Account}:service/${ClusterName}/${ServiceName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:ResourceTag/${TagKey}"]},{"name":"service-deployment","arnFormats":["arn:${Partition}:ecs:${Region}:${Account}:service-deployment/${ClusterName}/${ServiceName}/${ServiceDeploymentId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster","ecs:service"]},{"name":"service-revision","arnFormats":["arn:${Partition}:ecs:${Region}:${Account}:service-revision/${ClusterName}/${ServiceName}/${ServiceRevisionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:cluster","ecs:service"]},{"name":"task","arnFormats":["arn:${Partition}:ecs:${Region}:${Account}:task/${ClusterName}/${TaskId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:ResourceTag/${TagKey}"]},{"name":"task-definition","arnFormats":["arn:${Partition}:ecs:${Region}:${Account}:task-definition/${TaskDefinitionFamilyName}:${TaskDefinitionRevisionNumber}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:ResourceTag/${TagKey}"]},{"name":"task-set","arnFormats":["arn:${Partition}:ecs:${Region}:${Account}:task-set/${ClusterName}/${ServiceName}/${TaskSetId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ecs:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"ecs:CreateAction":{"types":["String"],"description":"Filters access by the name of a resource-creating API action"},"ecs:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs attached to the resource"},"ecs:account-setting":{"types":["String"],"description":"Filters access by the Amazon ECS account setting name"},"ecs:auto-assign-public-ip":{"types":["Bool"],"description":"Filters access by the public IP assignment configuration of your Amazon ECS task or Amazon ECS service that uses awsvpc network mode"},"ecs:capacity-provider":{"types":["ArrayOfARN"],"description":"Filters access by the ARN of an Amazon ECS capacity provider"},"ecs:cluster":{"types":["ARN"],"description":"Filters access by the ARN of an Amazon ECS cluster"},"ecs:compute-compatibility":{"types":["ArrayOfString"],"description":"Filters access by the required compatibilities field provided in the request"},"ecs:container-instances":{"types":["ARN"],"description":"Filters access by the ARN of an Amazon ECS container instance"},"ecs:container-name":{"types":["String"],"description":"Filters access by the name of an Amazon ECS container which is defined in the ECS task definition"},"ecs:enable-ebs-volumes":{"types":["String"],"description":"Filters access by the Amazon ECS managed Amazon EBS volume capability of your ECS task or service"},"ecs:enable-ecs-managed-tags":{"types":["Bool"],"description":"Filters access by the enableECSManagedTags configuration of your Amazon ECS task or Amazon ECS service"},"ecs:enable-execute-command":{"types":["String"],"description":"Filters access by the execute-command capability of your Amazon ECS task or Amazon ECS service"},"ecs:enable-service-connect":{"types":["String"],"description":"Filters access by the enable field value in the Service Connect configuration"},"ecs:enable-vpc-lattice":{"types":["String"],"description":"Filters access by the VPC lattice capability of your Amazon ECS service"},"ecs:fargate-ephemeral-storage-kms-key":{"types":["String"],"description":"Filters access by the AWS KMS key id provided in the request"},"ecs:instance-metadata-tags-propagation":{"types":["Bool"],"description":"Filters access by the instance metadata tags propagation setting of your Amazon ECS capacity provider"},"ecs:namespace":{"types":["ARN"],"description":"Filters access by the ARN of AWS Cloud Map namespace which is defined in the Service Connect Configuration"},"ecs:privileged":{"types":["String"],"description":"Filters access by the privileged field provided in the request"},"ecs:propagate-tags":{"types":["String"],"description":"Filters access by the tag propagation configuration of your Amazon ECS task or Amazon ECS service"},"ecs:service":{"types":["ARN"],"description":"Filters access by the ARN of an Amazon ECS service"},"ecs:subnet":{"types":["ArrayOfString"],"description":"Filters access by the subnet configuration of your Amazon ECS task or Amazon ECS service that uses awsvpc network mode"},"ecs:task":{"types":["ARN"],"description":"Filters access by the ARN of an Amazon ECS task"},"ecs:task-cpu":{"types":["Numeric"],"description":"Filters access by the task cpu, as an integer with 1024 = 1 vCPU, provided in the request"},"ecs:task-definition":{"types":["ARN"],"description":"Filters access by the ARN of an Amazon ECS task definition"},"ecs:task-memory":{"types":["Numeric"],"description":"Filters access by the task memory, as an integer representing MiB, provided in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html"}

package/src/data/servicereference/services/eks-auth.json

@@ -1 +1 @@
-{"name":"eks-auth","actions":{"AssumeRoleForPodIdentity":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to exchange a Kubernetes service account token for temporary AWS credentials","accessLevel":"Read","resourceTypes":[{"name":"cluster","required":true}]}},"resources":[{"name":"cluster","arnFormats":["arn:${Partition}:eks:${Region}:${Account}:cluster/${ClusterName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair"}}}
+{"name":"eks-auth","actions":{"AssumeRoleForPodIdentity":{"name":"AssumeRoleForPodIdentity","service":"eks-auth","conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to exchange a Kubernetes service account token for temporary AWS credentials","accessLevel":"Read","resourceTypes":[{"name":"cluster","required":true}],"operationUrl":"https://docs.aws.amazon.com/eks/latest/APIReference/API_auth_AssumeRoleForPodIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneksauth.html#amazoneksauth-AssumeRoleForPodIdentity"}},"resources":[{"name":"cluster","arnFormats":["arn:${Partition}:eks:${Region}:${Account}:cluster/${ClusterName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneksauth.html"}

package/src/data/servicereference/services/eks-mcp.json

@@ -1 +1 @@
-{"name":"eks-mcp","actions":{"CallPrivilegedTool":{"conditionKeys":[],"resources":[],"description":"Grants permission to call privileged tools in MCP service","accessLevel":"Write","resourceTypes":[]},"CallReadOnlyTool":{"conditionKeys":[],"resources":[],"description":"Grants permission to call read-only tools in MCP service","accessLevel":"Read","resourceTypes":[]},"InvokeMcp":{"conditionKeys":[],"resources":[],"description":"Grants permission to use MCP service","accessLevel":"Read","resourceTypes":[]}},"resources":[],"conditionKeys":{}}
+{"name":"eks-mcp","actions":{"CallPrivilegedTool":{"name":"CallPrivilegedTool","service":"eks-mcp","conditionKeys":[],"resources":[],"description":"Grants permission to call privileged tools in MCP service","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/eks/latest/userguide/eks-mcp-tool-configurations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneksmcpserver.html#amazoneksmcpserver-CallPrivilegedTool"},"CallReadOnlyTool":{"name":"CallReadOnlyTool","service":"eks-mcp","conditionKeys":[],"resources":[],"description":"Grants permission to call read-only tools in MCP service","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/eks/latest/userguide/eks-mcp-tool-configurations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneksmcpserver.html#amazoneksmcpserver-CallReadOnlyTool"},"InvokeMcp":{"name":"InvokeMcp","service":"eks-mcp","conditionKeys":[],"resources":[],"description":"Grants permission to use MCP service","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/eks/latest/userguide/eks-mcp-tool-configurations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneksmcpserver.html#amazoneksmcpserver-InvokeMcp"}},"resources":[],"conditionKeys":{},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneksmcpserver.html"}