aws-iam-language-server 0.0.8 → 0.0.9

package/src/data/servicereference/services/securitylake.json

@@ -1 +1 @@
-{"name":"securitylake","actions":{"CreateAwsLogSource":{"conditionKeys":[],"resources":[{"name":"data-lake"}],"description":"Grants permission to enable any source type in any region for accounts that are either part of a trusted organization or standalone account","accessLevel":"Write","resourceTypes":[{"name":"data-lake","required":true}],"dependentActions":["glue:CreateDatabase","glue:CreateTable","glue:GetDatabase","glue:GetTable","iam:CreateServiceLinkedRole","kms:CreateGrant","kms:DescribeKey"]},"CreateCustomLogSource":{"conditionKeys":[],"resources":[{"name":"data-lake"}],"description":"Grants permission to add a custom source","accessLevel":"Write","resourceTypes":[{"name":"data-lake","required":true}],"dependentActions":["glue:CreateCrawler","glue:CreateDatabase","glue:CreateTable","glue:StartCrawlerSchedule","iam:DeleteRolePolicy","iam:GetRole","iam:PassRole","iam:PutRolePolicy","kms:CreateGrant","kms:DescribeKey","kms:GenerateDataKey","lakeformation:GrantPermissions","lakeformation:RegisterResource","s3:ListBucket","s3:PutObject"]},"CreateDataLake":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"data-lake"}],"description":"Grants permission to create a new security data lake","accessLevel":"Write","resourceTypes":[{"name":"data-lake","required":true}],"dependentActions":["events:PutRule","events:PutTargets","iam:CreateServiceLinkedRole","iam:DeleteRolePolicy","iam:GetRole","iam:ListAttachedRolePolicies","iam:PassRole","iam:PutRolePolicy","kms:CreateGrant","kms:DescribeKey","lakeformation:GetDataLakeSettings","lakeformation:PutDataLakeSettings","lambda:AddPermission","lambda:CreateEventSourceMapping","lambda:CreateFunction","organizations:DescribeOrganization","organizations:ListAccounts","organizations:ListDelegatedServicesForAccount","s3:CreateBucket","s3:GetObject","s3:GetObjectVersion","s3:ListBucket","s3:PutBucketPolicy","s3:PutBucketPublicAccessBlock","s3:PutBucketVersioning","sqs:CreateQueue","sqs:GetQueueAttributes","sqs:SetQueueAttributes"]},"CreateDataLakeExceptionSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to get instant notifications about exceptions. Subscribes to the SNS topics for exception notifications","accessLevel":"Write","resourceTypes":[]},"CreateDataLakeOrganizationConfiguration":{"conditionKeys":[],"resources":[{"name":"data-lake"}],"description":"Grants permission to automatically enable Amazon Security Lake for new member accounts in your organization","accessLevel":"Write","resourceTypes":[{"name":"data-lake","required":true}]},"CreateSubscriber":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a subscriber","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:CreateRole","iam:DeleteRolePolicy","iam:GetRole","iam:PutRolePolicy","lakeformation:GrantPermissions","lakeformation:ListPermissions","lakeformation:RegisterResource","lakeformation:RevokePermissions","ram:GetResourceShareAssociations","ram:GetResourceShares","ram:UpdateResourceShare","s3:PutObject"]},"CreateSubscriberNotification":{"conditionKeys":[],"resources":[{"name":"subscriber"}],"description":"Grants permission to create a webhook invocation to notify a client when there is new data in the data lake","accessLevel":"Write","resourceTypes":[{"name":"subscriber","required":true}],"dependentActions":["events:CreateApiDestination","events:CreateConnection","events:DescribeRule","events:ListApiDestinations","events:ListConnections","events:PutRule","events:PutTargets","iam:DeleteRolePolicy","iam:GetRole","iam:PassRole","s3:GetBucketNotification","s3:PutBucketNotification","sqs:CreateQueue","sqs:DeleteQueue","sqs:GetQueueAttributes","sqs:GetQueueUrl","sqs:SetQueueAttributes"]},"DeleteAwsLogSource":{"conditionKeys":[],"resources":[{"name":"data-lake"}],"description":"Grants permission to disable any source type in any region for accounts that are part of a trusted organization or standalone accounts","accessLevel":"Write","resourceTypes":[{"name":"data-lake","required":true}]},"DeleteCustomLogSource":{"conditionKeys":[],"resources":[{"name":"data-lake"}],"description":"Grants permission to remove a custom source","accessLevel":"Write","resourceTypes":[{"name":"data-lake","required":true}],"dependentActions":["glue:StopCrawlerSchedule"]},"DeleteDataLake":{"conditionKeys":[],"resources":[{"name":"data-lake"}],"description":"Grants permission to delete security data lake","accessLevel":"Write","resourceTypes":[{"name":"data-lake","required":true}],"dependentActions":["organizations:DescribeOrganization","organizations:ListDelegatedAdministrators","organizations:ListDelegatedServicesForAccount"]},"DeleteDataLakeExceptionSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to unsubscribe from SNS topics for exception notifications. Removes exception notifications for the SNS topic","accessLevel":"Write","resourceTypes":[]},"DeleteDataLakeOrganizationConfiguration":{"conditionKeys":[],"resources":[{"name":"data-lake"}],"description":"Grants permission to remove the automatic enablement of Amazon Security Lake access for new organization accounts","accessLevel":"Write","resourceTypes":[{"name":"data-lake","required":true}]},"DeleteSubscriber":{"conditionKeys":[],"resources":[{"name":"subscriber"}],"description":"Grants permission to delete the specified subscriber","accessLevel":"Write","resourceTypes":[{"name":"subscriber","required":true}],"dependentActions":["events:DeleteApiDestination","events:DeleteConnection","events:DeleteRule","events:DescribeRule","events:ListApiDestinations","events:ListTargetsByRule","events:RemoveTargets","iam:DeleteRole","iam:DeleteRolePolicy","iam:GetRole","iam:ListRolePolicies","lakeformation:ListPermissions","lakeformation:RevokePermissions","sqs:DeleteQueue","sqs:GetQueueUrl"]},"DeleteSubscriberNotification":{"conditionKeys":[],"resources":[{"name":"subscriber"}],"description":"Grants permission to remove a webhook invocation to notify a client when there is new data in the data lake","accessLevel":"Write","resourceTypes":[{"name":"subscriber","required":true}],"dependentActions":["events:DeleteApiDestination","events:DeleteConnection","events:DeleteRule","events:DescribeRule","events:ListApiDestinations","events:ListTargetsByRule","events:RemoveTargets","iam:DeleteRole","iam:DeleteRolePolicy","iam:GetRole","iam:ListRolePolicies","lakeformation:RevokePermissions","sqs:DeleteQueue","sqs:GetQueueUrl"]},"DeregisterDataLakeDelegatedAdministrator":{"conditionKeys":[],"resources":[],"description":"Grants permission to remove the Delegated Administrator account and disable Amazon Security Lake as a service for this organization","accessLevel":"Write","resourceTypes":[],"dependentActions":["organizations:DeregisterDelegatedAdministrator","organizations:DescribeOrganization","organizations:ListDelegatedServicesForAccount"]},"GetDataLakeExceptionSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to query the protocol and endpoint that were provided when subscribing to SNS topics for exception notifications","accessLevel":"Read","resourceTypes":[]},"GetDataLakeOrganizationConfiguration":{"conditionKeys":[],"resources":[{"name":"data-lake"}],"description":"Grants permission to get an organization's configuration setting for automatically enabling Amazon Security Lake access for new organization accounts","accessLevel":"Read","resourceTypes":[{"name":"data-lake","required":true}],"dependentActions":["organizations:DescribeOrganization"]},"GetDataLakeSources":{"conditionKeys":[],"resources":[{"name":"data-lake"}],"description":"Grants permission to get a static snapshot of the security data lake in the current region. The snapshot includes enabled accounts and log sources","accessLevel":"Read","resourceTypes":[{"name":"data-lake","required":true}]},"GetSubscriber":{"conditionKeys":[],"resources":[{"name":"subscriber"}],"description":"Grants permission to get information about subscriber that is already created","accessLevel":"Read","resourceTypes":[{"name":"subscriber","required":true}]},"ListDataLakeExceptions":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the list of all non-retryable failures","accessLevel":"List","resourceTypes":[]},"ListDataLakes":{"conditionKeys":[],"resources":[],"description":"Grants permission to list information about the security data lakes","accessLevel":"List","resourceTypes":[]},"ListLogSources":{"conditionKeys":[],"resources":[],"description":"Grants permission to view the enabled accounts. You can view the enabled sources in the enabled regions","accessLevel":"List","resourceTypes":[]},"ListSubscribers":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all subscribers","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"data-lake"},{"name":"subscriber"}],"description":"Grants permission to list all tags for the resource","accessLevel":"List","resourceTypes":[{"name":"data-lake","required":false},{"name":"subscriber","required":false}]},"RegisterDataLakeDelegatedAdministrator":{"conditionKeys":[],"resources":[],"description":"Grants permission to designate an account as the Amazon Security Lake administrator account for the organization","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:CreateServiceLinkedRole","organizations:DescribeOrganization","organizations:EnableAWSServiceAccess","organizations:ListDelegatedAdministrators","organizations:ListDelegatedServicesForAccount","organizations:RegisterDelegatedAdministrator"]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"data-lake"},{"name":"subscriber"}],"description":"Grants permission to add tags to the resource","accessLevel":"Tagging","resourceTypes":[{"name":"data-lake","required":false},{"name":"subscriber","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"data-lake"},{"name":"subscriber"}],"description":"Grants permission to remove tags from the resource","accessLevel":"Tagging","resourceTypes":[{"name":"data-lake","required":false},{"name":"subscriber","required":false}]},"UpdateDataLake":{"conditionKeys":[],"resources":[{"name":"data-lake"}],"description":"Grants permission to update a security data lake","accessLevel":"Write","resourceTypes":[{"name":"data-lake","required":true}],"dependentActions":["events:PutRule","events:PutTargets","iam:CreateServiceLinkedRole","iam:DeleteRolePolicy","iam:GetRole","iam:ListAttachedRolePolicies","iam:PutRolePolicy","kms:CreateGrant","kms:DescribeKey","lakeformation:GetDataLakeSettings","lakeformation:PutDataLakeSettings","lambda:AddPermission","lambda:CreateEventSourceMapping","lambda:CreateFunction","organizations:DescribeOrganization","organizations:ListDelegatedServicesForAccount","s3:CreateBucket","s3:GetObject","s3:GetObjectVersion","s3:ListBucket","s3:PutBucketPolicy","s3:PutBucketPublicAccessBlock","s3:PutBucketVersioning","sqs:CreateQueue","sqs:GetQueueAttributes","sqs:SetQueueAttributes"]},"UpdateDataLakeExceptionSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to update subscriptions to the SNS topics for exception notifications","accessLevel":"Write","resourceTypes":[]},"UpdateSubscriber":{"conditionKeys":[],"resources":[{"name":"subscriber"}],"description":"Grants permission to update subscriber","accessLevel":"Write","resourceTypes":[{"name":"subscriber","required":true}],"dependentActions":["events:CreateApiDestination","events:CreateConnection","events:DescribeRule","events:ListApiDestinations","events:ListConnections","events:PutRule","events:PutTargets","iam:DeleteRolePolicy","iam:GetRole","iam:PutRolePolicy"]},"UpdateSubscriberNotification":{"conditionKeys":[],"resources":[{"name":"subscriber"}],"description":"Grants permission to update a webhook invocation to notify a client when there is new data in the data lake","accessLevel":"Write","resourceTypes":[{"name":"subscriber","required":true}],"dependentActions":["events:CreateApiDestination","events:CreateConnection","events:DescribeRule","events:ListApiDestinations","events:ListConnections","events:PutRule","events:PutTargets","iam:CreateServiceLinkedRole","iam:DeleteRolePolicy","iam:GetRole","iam:PassRole","iam:PutRolePolicy","s3:CreateBucket","s3:GetBucketNotification","s3:ListBucket","s3:PutBucketNotification","s3:PutBucketPolicy","s3:PutBucketPublicAccessBlock","s3:PutBucketVersioning","s3:PutLifecycleConfiguration","sqs:CreateQueue","sqs:DeleteQueue","sqs:GetQueueAttributes","sqs:GetQueueUrl","sqs:SetQueueAttributes"]}},"resources":[{"name":"data-lake","arnFormats":["arn:${Partition}:securitylake:${Region}:${Account}:data-lake/default"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}"]},{"name":"subscriber","arnFormats":["arn:${Partition}:securitylake:${Region}:${Account}:subscriber/${SubscriberId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair of a resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by tag keys that are passed in the request"}}}
+{"name":"securitylake","actions":{"CreateAwsLogSource":{"conditionKeys":[],"resources":[{"name":"data-lake"}],"description":"Grants permission to enable any source type in any region for accounts that are either part of a trusted organization or standalone account","accessLevel":"Write","resourceTypes":[{"name":"data-lake","required":true}],"dependentActions":["glue:CreateDatabase","glue:CreateTable","glue:GetDatabase","glue:GetTable","iam:CreateServiceLinkedRole","kms:CreateGrant","kms:DescribeKey"],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_CreateAwsLogSource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-CreateAwsLogSource"},"CreateCustomLogSource":{"conditionKeys":[],"resources":[{"name":"data-lake"}],"description":"Grants permission to add a custom source","accessLevel":"Write","resourceTypes":[{"name":"data-lake","required":true}],"dependentActions":["glue:CreateCrawler","glue:CreateDatabase","glue:CreateTable","glue:StartCrawlerSchedule","iam:DeleteRolePolicy","iam:GetRole","iam:PassRole","iam:PutRolePolicy","kms:CreateGrant","kms:DescribeKey","kms:GenerateDataKey","lakeformation:GrantPermissions","lakeformation:RegisterResource","s3:ListBucket","s3:PutObject"],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_CreateCustomLogSource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-CreateCustomLogSource"},"CreateDataLake":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"data-lake"}],"description":"Grants permission to create a new security data lake","accessLevel":"Write","resourceTypes":[{"name":"data-lake","required":true}],"dependentActions":["events:PutRule","events:PutTargets","iam:CreateServiceLinkedRole","iam:DeleteRolePolicy","iam:GetRole","iam:ListAttachedRolePolicies","iam:PassRole","iam:PutRolePolicy","kms:CreateGrant","kms:DescribeKey","lakeformation:GetDataLakeSettings","lakeformation:PutDataLakeSettings","lambda:AddPermission","lambda:CreateEventSourceMapping","lambda:CreateFunction","organizations:DescribeOrganization","organizations:ListAccounts","organizations:ListDelegatedServicesForAccount","s3:CreateBucket","s3:GetObject","s3:GetObjectVersion","s3:ListBucket","s3:PutBucketPolicy","s3:PutBucketPublicAccessBlock","s3:PutBucketVersioning","sqs:CreateQueue","sqs:GetQueueAttributes","sqs:SetQueueAttributes"],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_CreateDataLake.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-CreateDataLake"},"CreateDataLakeExceptionSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to get instant notifications about exceptions. Subscribes to the SNS topics for exception notifications","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_CreateDataLakeExceptionSubscription.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-CreateDataLakeExceptionSubscription"},"CreateDataLakeOrganizationConfiguration":{"conditionKeys":[],"resources":[{"name":"data-lake"}],"description":"Grants permission to automatically enable Amazon Security Lake for new member accounts in your organization","accessLevel":"Write","resourceTypes":[{"name":"data-lake","required":true}],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_CreateDataLakeOrganizationConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-CreateDataLakeOrganizationConfiguration"},"CreateSubscriber":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a subscriber","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:CreateRole","iam:DeleteRolePolicy","iam:GetRole","iam:PutRolePolicy","lakeformation:GrantPermissions","lakeformation:ListPermissions","lakeformation:RegisterResource","lakeformation:RevokePermissions","ram:GetResourceShareAssociations","ram:GetResourceShares","ram:UpdateResourceShare","s3:PutObject"],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_CreateSubscriber.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-CreateSubscriber"},"CreateSubscriberNotification":{"conditionKeys":[],"resources":[{"name":"subscriber"}],"description":"Grants permission to create a webhook invocation to notify a client when there is new data in the data lake","accessLevel":"Write","resourceTypes":[{"name":"subscriber","required":true}],"dependentActions":["events:CreateApiDestination","events:CreateConnection","events:DescribeRule","events:ListApiDestinations","events:ListConnections","events:PutRule","events:PutTargets","iam:DeleteRolePolicy","iam:GetRole","iam:PassRole","s3:GetBucketNotification","s3:PutBucketNotification","sqs:CreateQueue","sqs:DeleteQueue","sqs:GetQueueAttributes","sqs:GetQueueUrl","sqs:SetQueueAttributes"],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_CreateSubscriberNotification.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-CreateSubscriberNotification"},"DeleteAwsLogSource":{"conditionKeys":[],"resources":[{"name":"data-lake"}],"description":"Grants permission to disable any source type in any region for accounts that are part of a trusted organization or standalone accounts","accessLevel":"Write","resourceTypes":[{"name":"data-lake","required":true}],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_DeleteAwsLogSource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-DeleteAwsLogSource"},"DeleteCustomLogSource":{"conditionKeys":[],"resources":[{"name":"data-lake"}],"description":"Grants permission to remove a custom source","accessLevel":"Write","resourceTypes":[{"name":"data-lake","required":true}],"dependentActions":["glue:StopCrawlerSchedule"],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_DeleteCustomLogSource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-DeleteCustomLogSource"},"DeleteDataLake":{"conditionKeys":[],"resources":[{"name":"data-lake"}],"description":"Grants permission to delete security data lake","accessLevel":"Write","resourceTypes":[{"name":"data-lake","required":true}],"dependentActions":["organizations:DescribeOrganization","organizations:ListDelegatedAdministrators","organizations:ListDelegatedServicesForAccount"],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_DeleteDataLake.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-DeleteDataLake"},"DeleteDataLakeExceptionSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to unsubscribe from SNS topics for exception notifications. Removes exception notifications for the SNS topic","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_DeleteDataLakeExceptionSubscription.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-DeleteDataLakeExceptionSubscription"},"DeleteDataLakeOrganizationConfiguration":{"conditionKeys":[],"resources":[{"name":"data-lake"}],"description":"Grants permission to remove the automatic enablement of Amazon Security Lake access for new organization accounts","accessLevel":"Write","resourceTypes":[{"name":"data-lake","required":true}],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_DeleteDataLakeOrganizationConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-DeleteDataLakeOrganizationConfiguration"},"DeleteSubscriber":{"conditionKeys":[],"resources":[{"name":"subscriber"}],"description":"Grants permission to delete the specified subscriber","accessLevel":"Write","resourceTypes":[{"name":"subscriber","required":true}],"dependentActions":["events:DeleteApiDestination","events:DeleteConnection","events:DeleteRule","events:DescribeRule","events:ListApiDestinations","events:ListTargetsByRule","events:RemoveTargets","iam:DeleteRole","iam:DeleteRolePolicy","iam:GetRole","iam:ListRolePolicies","lakeformation:ListPermissions","lakeformation:RevokePermissions","sqs:DeleteQueue","sqs:GetQueueUrl"],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_DeleteSubscriber.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-DeleteSubscriber"},"DeleteSubscriberNotification":{"conditionKeys":[],"resources":[{"name":"subscriber"}],"description":"Grants permission to remove a webhook invocation to notify a client when there is new data in the data lake","accessLevel":"Write","resourceTypes":[{"name":"subscriber","required":true}],"dependentActions":["events:DeleteApiDestination","events:DeleteConnection","events:DeleteRule","events:DescribeRule","events:ListApiDestinations","events:ListTargetsByRule","events:RemoveTargets","iam:DeleteRole","iam:DeleteRolePolicy","iam:GetRole","iam:ListRolePolicies","lakeformation:RevokePermissions","sqs:DeleteQueue","sqs:GetQueueUrl"],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_DeleteSubscriberNotification.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-DeleteSubscriberNotification"},"DeregisterDataLakeDelegatedAdministrator":{"conditionKeys":[],"resources":[],"description":"Grants permission to remove the Delegated Administrator account and disable Amazon Security Lake as a service for this organization","accessLevel":"Write","resourceTypes":[],"dependentActions":["organizations:DeregisterDelegatedAdministrator","organizations:DescribeOrganization","organizations:ListDelegatedServicesForAccount"],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_DeregisterDataLakeDelegatedAdministrator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-DeregisterDataLakeDelegatedAdministrator"},"GetDataLakeExceptionSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to query the protocol and endpoint that were provided when subscribing to SNS topics for exception notifications","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_GetDataLakeExceptionSubscription.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-GetDataLakeExceptionSubscription"},"GetDataLakeOrganizationConfiguration":{"conditionKeys":[],"resources":[{"name":"data-lake"}],"description":"Grants permission to get an organization's configuration setting for automatically enabling Amazon Security Lake access for new organization accounts","accessLevel":"Read","resourceTypes":[{"name":"data-lake","required":true}],"dependentActions":["organizations:DescribeOrganization"],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_GetDataLakeOrganizationConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-GetDataLakeOrganizationConfiguration"},"GetDataLakeSources":{"conditionKeys":[],"resources":[{"name":"data-lake"}],"description":"Grants permission to get a static snapshot of the security data lake in the current region. The snapshot includes enabled accounts and log sources","accessLevel":"Read","resourceTypes":[{"name":"data-lake","required":true}],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_GetDataLakeSources.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-GetDataLakeSources"},"GetSubscriber":{"conditionKeys":[],"resources":[{"name":"subscriber"}],"description":"Grants permission to get information about subscriber that is already created","accessLevel":"Read","resourceTypes":[{"name":"subscriber","required":true}],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_GetSubscriber.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-GetSubscriber"},"ListDataLakeExceptions":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the list of all non-retryable failures","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_ListDataLakeExceptions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-ListDataLakeExceptions"},"ListDataLakes":{"conditionKeys":[],"resources":[],"description":"Grants permission to list information about the security data lakes","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_ListDataLakes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-ListDataLakes"},"ListLogSources":{"conditionKeys":[],"resources":[],"description":"Grants permission to view the enabled accounts. You can view the enabled sources in the enabled regions","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_ListLogSources.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-ListLogSources"},"ListSubscribers":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all subscribers","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_ListSubscribers.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-ListSubscribers"},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"data-lake"},{"name":"subscriber"}],"description":"Grants permission to list all tags for the resource","accessLevel":"List","resourceTypes":[{"name":"data-lake","required":false},{"name":"subscriber","required":false}],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-ListTagsForResource"},"RegisterDataLakeDelegatedAdministrator":{"conditionKeys":[],"resources":[],"description":"Grants permission to designate an account as the Amazon Security Lake administrator account for the organization","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:CreateServiceLinkedRole","organizations:DescribeOrganization","organizations:EnableAWSServiceAccess","organizations:ListDelegatedAdministrators","organizations:ListDelegatedServicesForAccount","organizations:RegisterDelegatedAdministrator"],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_RegisterDataLakeDelegatedAdministrator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-RegisterDataLakeDelegatedAdministrator"},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"data-lake"},{"name":"subscriber"}],"description":"Grants permission to add tags to the resource","accessLevel":"Tagging","resourceTypes":[{"name":"data-lake","required":false},{"name":"subscriber","required":false}],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-TagResource"},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"data-lake"},{"name":"subscriber"}],"description":"Grants permission to remove tags from the resource","accessLevel":"Tagging","resourceTypes":[{"name":"data-lake","required":false},{"name":"subscriber","required":false}],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-UntagResource"},"UpdateDataLake":{"conditionKeys":[],"resources":[{"name":"data-lake"}],"description":"Grants permission to update a security data lake","accessLevel":"Write","resourceTypes":[{"name":"data-lake","required":true}],"dependentActions":["events:PutRule","events:PutTargets","iam:CreateServiceLinkedRole","iam:DeleteRolePolicy","iam:GetRole","iam:ListAttachedRolePolicies","iam:PutRolePolicy","kms:CreateGrant","kms:DescribeKey","lakeformation:GetDataLakeSettings","lakeformation:PutDataLakeSettings","lambda:AddPermission","lambda:CreateEventSourceMapping","lambda:CreateFunction","organizations:DescribeOrganization","organizations:ListDelegatedServicesForAccount","s3:CreateBucket","s3:GetObject","s3:GetObjectVersion","s3:ListBucket","s3:PutBucketPolicy","s3:PutBucketPublicAccessBlock","s3:PutBucketVersioning","sqs:CreateQueue","sqs:GetQueueAttributes","sqs:SetQueueAttributes"],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_UpdateDataLake.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-UpdateDataLake"},"UpdateDataLakeExceptionSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to update subscriptions to the SNS topics for exception notifications","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_UpdateDataLakeExceptionSubscription.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-UpdateDataLakeExceptionSubscription"},"UpdateSubscriber":{"conditionKeys":[],"resources":[{"name":"subscriber"}],"description":"Grants permission to update subscriber","accessLevel":"Write","resourceTypes":[{"name":"subscriber","required":true}],"dependentActions":["events:CreateApiDestination","events:CreateConnection","events:DescribeRule","events:ListApiDestinations","events:ListConnections","events:PutRule","events:PutTargets","iam:DeleteRolePolicy","iam:GetRole","iam:PutRolePolicy"],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_UpdateSubscriber.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-UpdateSubscriber"},"UpdateSubscriberNotification":{"conditionKeys":[],"resources":[{"name":"subscriber"}],"description":"Grants permission to update a webhook invocation to notify a client when there is new data in the data lake","accessLevel":"Write","resourceTypes":[{"name":"subscriber","required":true}],"dependentActions":["events:CreateApiDestination","events:CreateConnection","events:DescribeRule","events:ListApiDestinations","events:ListConnections","events:PutRule","events:PutTargets","iam:CreateServiceLinkedRole","iam:DeleteRolePolicy","iam:GetRole","iam:PassRole","iam:PutRolePolicy","s3:CreateBucket","s3:GetBucketNotification","s3:ListBucket","s3:PutBucketNotification","s3:PutBucketPolicy","s3:PutBucketPublicAccessBlock","s3:PutBucketVersioning","s3:PutLifecycleConfiguration","sqs:CreateQueue","sqs:DeleteQueue","sqs:GetQueueAttributes","sqs:GetQueueUrl","sqs:SetQueueAttributes"],"operationUrl":"https://docs.aws.amazon.com/security-lake/latest/APIReference/API_UpdateSubscriberNotification.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html#amazonsecuritylake-UpdateSubscriberNotification"}},"resources":[{"name":"data-lake","arnFormats":["arn:${Partition}:securitylake:${Region}:${Account}:data-lake/default"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}"]},{"name":"subscriber","arnFormats":["arn:${Partition}:securitylake:${Region}:${Account}:subscriber/${SubscriberId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair of a resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by tag keys that are passed in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html"}

package/src/data/servicereference/services/serverlessrepo.json

@@ -1 +1 @@
-{"name":"serverlessrepo","actions":{"CreateApplication":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an application, optionally including an AWS SAM file to create the first application version in the same call","accessLevel":"Write","resourceTypes":[]},"CreateApplicationVersion":{"conditionKeys":[],"resources":[{"name":"applications"}],"description":"Grants permission to create an application version","accessLevel":"Write","resourceTypes":[{"name":"applications","required":true}]},"CreateCloudFormationChangeSet":{"conditionKeys":["serverlessrepo:applicationType"],"resources":[{"name":"applications"}],"description":"Grants permission to create an AWS CloudFormation ChangeSet for the given application","accessLevel":"Write","resourceTypes":[{"name":"applications","required":true}]},"CreateCloudFormationTemplate":{"conditionKeys":["serverlessrepo:applicationType"],"resources":[{"name":"applications"}],"description":"Grants permission to create an AWS CloudFormation template","accessLevel":"Write","resourceTypes":[{"name":"applications","required":true}]},"DeleteApplication":{"conditionKeys":[],"resources":[{"name":"applications"}],"description":"Grants permission to delete the specified application","accessLevel":"Write","resourceTypes":[{"name":"applications","required":true}]},"GetApplication":{"conditionKeys":["serverlessrepo:applicationType"],"resources":[{"name":"applications"}],"description":"Grants permission to get the specified application","accessLevel":"Read","resourceTypes":[{"name":"applications","required":true}]},"GetApplicationPolicy":{"conditionKeys":[],"resources":[{"name":"applications"}],"description":"Grants permission to get the policy for the specified application","accessLevel":"Read","resourceTypes":[{"name":"applications","required":true}]},"GetCloudFormationTemplate":{"conditionKeys":[],"resources":[{"name":"applications"}],"description":"Grants permission to get the specified AWS CloudFormation template","accessLevel":"Read","resourceTypes":[{"name":"applications","required":true}]},"ListApplicationDependencies":{"conditionKeys":["serverlessrepo:applicationType"],"resources":[{"name":"applications"}],"description":"Grants permission to retrieve the list of applications nested in the containing application","accessLevel":"List","resourceTypes":[{"name":"applications","required":true}]},"ListApplicationVersions":{"conditionKeys":["serverlessrepo:applicationType"],"resources":[{"name":"applications"}],"description":"Grants permission to list versions for the specified application owned by the requester","accessLevel":"List","resourceTypes":[{"name":"applications","required":true}]},"ListApplications":{"conditionKeys":[],"resources":[],"description":"Grants permission to list applications owned by the requester","accessLevel":"List","resourceTypes":[]},"PutApplicationPolicy":{"conditionKeys":[],"resources":[{"name":"applications"}],"description":"Grants permission to put the policy for the specified application","accessLevel":"Write","resourceTypes":[{"name":"applications","required":true}]},"SearchApplications":{"conditionKeys":["serverlessrepo:applicationType"],"resources":[],"description":"Grants permission to get all applications authorized for this user","accessLevel":"Read","resourceTypes":[]},"UnshareApplication":{"conditionKeys":[],"resources":[{"name":"applications"}],"description":"Grants permission to unshare the specified application","accessLevel":"Write","resourceTypes":[{"name":"applications","required":true}]},"UpdateApplication":{"conditionKeys":[],"resources":[{"name":"applications"}],"description":"Grants permission to update meta-data of the application","accessLevel":"Write","resourceTypes":[{"name":"applications","required":true}]}},"resources":[{"name":"applications","arnFormats":["arn:${Partition}:serverlessrepo:${Region}:${Account}:applications/${ResourceId}"],"conditionKeys":[]}],"conditionKeys":{"serverlessrepo:applicationType":{"types":["String"],"description":"Filters access by application type"}}}
+{"name":"serverlessrepo","actions":{"CreateApplication":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an application, optionally including an AWS SAM file to create the first application version in the same call","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/serverlessrepo/latest/devguide/applications.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsserverlessapplicationrepository.html#awsserverlessapplicationrepository-CreateApplication"},"CreateApplicationVersion":{"conditionKeys":[],"resources":[{"name":"applications"}],"description":"Grants permission to create an application version","accessLevel":"Write","resourceTypes":[{"name":"applications","required":true}],"operationUrl":"https://docs.aws.amazon.com/serverlessrepo/latest/devguide/applications-applicationid-versions-semanticversion.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsserverlessapplicationrepository.html#awsserverlessapplicationrepository-CreateApplicationVersion"},"CreateCloudFormationChangeSet":{"conditionKeys":["serverlessrepo:applicationType"],"resources":[{"name":"applications"}],"description":"Grants permission to create an AWS CloudFormation ChangeSet for the given application","accessLevel":"Write","resourceTypes":[{"name":"applications","required":true}],"operationUrl":"https://docs.aws.amazon.com/serverlessrepo/latest/devguide/applications-applicationid-changesets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsserverlessapplicationrepository.html#awsserverlessapplicationrepository-CreateCloudFormationChangeSet"},"CreateCloudFormationTemplate":{"conditionKeys":["serverlessrepo:applicationType"],"resources":[{"name":"applications"}],"description":"Grants permission to create an AWS CloudFormation template","accessLevel":"Write","resourceTypes":[{"name":"applications","required":true}],"operationUrl":"https://docs.aws.amazon.com/serverlessrepo/latest/devguide/applications-applicationid-templates.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsserverlessapplicationrepository.html#awsserverlessapplicationrepository-CreateCloudFormationTemplate"},"DeleteApplication":{"conditionKeys":[],"resources":[{"name":"applications"}],"description":"Grants permission to delete the specified application","accessLevel":"Write","resourceTypes":[{"name":"applications","required":true}],"operationUrl":"https://docs.aws.amazon.com/serverlessrepo/latest/devguide/applications-applicationid.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsserverlessapplicationrepository.html#awsserverlessapplicationrepository-DeleteApplication"},"GetApplication":{"conditionKeys":["serverlessrepo:applicationType"],"resources":[{"name":"applications"}],"description":"Grants permission to get the specified application","accessLevel":"Read","resourceTypes":[{"name":"applications","required":true}],"operationUrl":"https://docs.aws.amazon.com/serverlessrepo/latest/devguide/applications-applicationid.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsserverlessapplicationrepository.html#awsserverlessapplicationrepository-GetApplication"},"GetApplicationPolicy":{"conditionKeys":[],"resources":[{"name":"applications"}],"description":"Grants permission to get the policy for the specified application","accessLevel":"Read","resourceTypes":[{"name":"applications","required":true}],"operationUrl":"https://docs.aws.amazon.com/serverlessrepo/latest/devguide/applications-applicationid-policy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsserverlessapplicationrepository.html#awsserverlessapplicationrepository-GetApplicationPolicy"},"GetCloudFormationTemplate":{"conditionKeys":[],"resources":[{"name":"applications"}],"description":"Grants permission to get the specified AWS CloudFormation template","accessLevel":"Read","resourceTypes":[{"name":"applications","required":true}],"operationUrl":"https://docs.aws.amazon.com/serverlessrepo/latest/devguide/applications-applicationid-templates-templateid.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsserverlessapplicationrepository.html#awsserverlessapplicationrepository-GetCloudFormationTemplate"},"ListApplicationDependencies":{"conditionKeys":["serverlessrepo:applicationType"],"resources":[{"name":"applications"}],"description":"Grants permission to retrieve the list of applications nested in the containing application","accessLevel":"List","resourceTypes":[{"name":"applications","required":true}],"operationUrl":"https://docs.aws.amazon.com/serverlessrepo/latest/devguide/applications-applicationid-dependencies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsserverlessapplicationrepository.html#awsserverlessapplicationrepository-ListApplicationDependencies"},"ListApplicationVersions":{"conditionKeys":["serverlessrepo:applicationType"],"resources":[{"name":"applications"}],"description":"Grants permission to list versions for the specified application owned by the requester","accessLevel":"List","resourceTypes":[{"name":"applications","required":true}],"operationUrl":"https://docs.aws.amazon.com/serverlessrepo/latest/devguide/applications-applicationid-versions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsserverlessapplicationrepository.html#awsserverlessapplicationrepository-ListApplicationVersions"},"ListApplications":{"conditionKeys":[],"resources":[],"description":"Grants permission to list applications owned by the requester","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/serverlessrepo/latest/devguide/applications.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsserverlessapplicationrepository.html#awsserverlessapplicationrepository-ListApplications"},"PutApplicationPolicy":{"conditionKeys":[],"resources":[{"name":"applications"}],"description":"Grants permission to put the policy for the specified application","accessLevel":"Write","resourceTypes":[{"name":"applications","required":true}],"operationUrl":"https://docs.aws.amazon.com/serverlessrepo/latest/devguide/applications-applicationid-policy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsserverlessapplicationrepository.html#awsserverlessapplicationrepository-PutApplicationPolicy"},"SearchApplications":{"conditionKeys":["serverlessrepo:applicationType"],"resources":[],"description":"Grants permission to get all applications authorized for this user","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/serverlessrepo/latest/devguide/applications-applicationid.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsserverlessapplicationrepository.html#awsserverlessapplicationrepository-SearchApplications"},"UnshareApplication":{"conditionKeys":[],"resources":[{"name":"applications"}],"description":"Grants permission to unshare the specified application","accessLevel":"Write","resourceTypes":[{"name":"applications","required":true}],"operationUrl":"https://docs.aws.amazon.com/serverlessrepo/latest/devguide/applications-applicationid.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsserverlessapplicationrepository.html#awsserverlessapplicationrepository-UnshareApplication"},"UpdateApplication":{"conditionKeys":[],"resources":[{"name":"applications"}],"description":"Grants permission to update meta-data of the application","accessLevel":"Write","resourceTypes":[{"name":"applications","required":true}],"operationUrl":"https://docs.aws.amazon.com/serverlessrepo/latest/devguide/applications-applicationid.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsserverlessapplicationrepository.html#awsserverlessapplicationrepository-UpdateApplication"}},"resources":[{"name":"applications","arnFormats":["arn:${Partition}:serverlessrepo:${Region}:${Account}:applications/${ResourceId}"],"conditionKeys":[]}],"conditionKeys":{"serverlessrepo:applicationType":{"types":["String"],"description":"Filters access by application type"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsserverlessapplicationrepository.html"}

package/src/data/servicereference/services/servicecatalog.json

@@ -1 +1 @@
-{"name":"servicecatalog","actions":{"AcceptPortfolioShare":{"conditionKeys":[],"resources":[{"name":"Portfolio"}],"description":"Grants permission to accept a portfolio that has been shared with you","accessLevel":"Write","resourceTypes":[{"name":"Portfolio","required":true}]},"AssociateAttributeGroup":{"conditionKeys":[],"resources":[{"name":"Application"},{"name":"AttributeGroup"}],"description":"Grants permission to associate an attribute group with an application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true},{"name":"AttributeGroup","required":true}]},"AssociateBudgetWithResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to associate a budget with a resource","accessLevel":"Write","resourceTypes":[]},"AssociatePrincipalWithPortfolio":{"conditionKeys":[],"resources":[{"name":"Portfolio"}],"description":"Grants permission to associate an IAM principal with a portfolio, giving the specified principal access to any products associated with the specified portfolio","accessLevel":"Write","resourceTypes":[{"name":"Portfolio","required":true}]},"AssociateProductWithPortfolio":{"conditionKeys":[],"resources":[],"description":"Grants permission to associate a product with a portfolio","accessLevel":"Write","resourceTypes":[]},"AssociateResource":{"conditionKeys":["servicecatalog:Resource","servicecatalog:ResourceType"],"resources":[{"name":"Application"}],"description":"Grants permission to associate a resource with an application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["cloudformation:DescribeStacks","resource-groups:CreateGroup","resource-groups:GetGroup","resource-groups:Tag"]},"AssociateServiceActionWithProvisioningArtifact":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to associate an action with a provisioning artifact","accessLevel":"Write","resourceTypes":[{"name":"Product","required":true}]},"AssociateTagOptionWithResource":{"conditionKeys":[],"resources":[{"name":"Portfolio"},{"name":"Product"}],"description":"Grants permission to associate the specified TagOption with the specified portfolio or product","accessLevel":"Write","resourceTypes":[{"name":"Portfolio","required":false},{"name":"Product","required":false}]},"BatchAssociateServiceActionWithProvisioningArtifact":{"conditionKeys":[],"resources":[],"description":"Grants permission to associate multiple self-service actions with provisioning artifacts","accessLevel":"Write","resourceTypes":[]},"BatchDisassociateServiceActionFromProvisioningArtifact":{"conditionKeys":[],"resources":[],"description":"Grants permission to disassociate a batch of self-service actions from the specified provisioning artifact","accessLevel":"Write","resourceTypes":[]},"CopyProduct":{"conditionKeys":[],"resources":[],"description":"Grants permission to copy the specified source product to the specified target product or a new product","accessLevel":"Write","resourceTypes":[]},"CreateApplication":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Application"}],"description":"Grants permission to create an application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"]},"CreateAttributeGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"AttributeGroup"}],"description":"Grants permission to create an attribute group","accessLevel":"Write","resourceTypes":[{"name":"AttributeGroup","required":true}]},"CreateConstraint":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to create a constraint on an associated product and portfolio","accessLevel":"Write","resourceTypes":[{"name":"Product","required":true}]},"CreatePortfolio":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Portfolio"}],"description":"Grants permission to create a portfolio","accessLevel":"Write","resourceTypes":[{"name":"Portfolio","required":true}]},"CreatePortfolioShare":{"conditionKeys":[],"resources":[{"name":"Portfolio"}],"description":"Grants permission to share a portfolio you own with another AWS account","accessLevel":"Permissions management","resourceTypes":[{"name":"Portfolio","required":true}]},"CreateProduct":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Product"}],"description":"Grants permission to create a product and that product's first provisioning artifact","accessLevel":"Write","resourceTypes":[{"name":"Product","required":true}]},"CreateProvisionedProductPlan":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to add a new provisioned product plan","accessLevel":"Write","resourceTypes":[]},"CreateProvisioningArtifact":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to add a new provisioning artifact to an existing product","accessLevel":"Write","resourceTypes":[{"name":"Product","required":true}]},"CreateServiceAction":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a self-service action","accessLevel":"Write","resourceTypes":[]},"CreateTagOption":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a TagOption","accessLevel":"Write","resourceTypes":[]},"DeleteApplication":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to delete an application if all associations have been removed from the application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}]},"DeleteAttributeGroup":{"conditionKeys":[],"resources":[{"name":"AttributeGroup"}],"description":"Grants permission to delete an attribute group if all associations have been removed from the attribute group","accessLevel":"Write","resourceTypes":[{"name":"AttributeGroup","required":true}]},"DeleteConstraint":{"conditionKeys":[],"resources":[],"description":"Grants permission to remove and delete an existing constraint from an associated product and portfolio","accessLevel":"Write","resourceTypes":[]},"DeletePortfolio":{"conditionKeys":[],"resources":[{"name":"Portfolio"}],"description":"Grants permission to delete a portfolio if all associations and shares have been removed from the portfolio","accessLevel":"Write","resourceTypes":[{"name":"Portfolio","required":true}]},"DeletePortfolioShare":{"conditionKeys":[],"resources":[{"name":"Portfolio"}],"description":"Grants permission to unshare a portfolio you own from an AWS account you previously shared the portfolio with","accessLevel":"Permissions management","resourceTypes":[{"name":"Portfolio","required":true}]},"DeleteProduct":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to delete a product if all associations have been removed from the product","accessLevel":"Write","resourceTypes":[{"name":"Product","required":true}]},"DeleteProvisionedProductPlan":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to delete a provisioned product plan","accessLevel":"Write","resourceTypes":[]},"DeleteProvisioningArtifact":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to delete a provisioning artifact from a product","accessLevel":"Write","resourceTypes":[{"name":"Product","required":true}]},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[{"name":"Application"},{"name":"AttributeGroup"}],"description":"Grants permission to delete a resource-based policy for the specified resource","accessLevel":"Write","resourceTypes":[{"name":"Application","required":false},{"name":"AttributeGroup","required":false}],"permissionOnly":true},"DeleteServiceAction":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a self-service action","accessLevel":"Write","resourceTypes":[]},"DeleteTagOption":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the specified TagOption","accessLevel":"Write","resourceTypes":[]},"DescribeConstraint":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe a constraint","accessLevel":"Read","resourceTypes":[]},"DescribeCopyProductStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the status of the specified copy product operation","accessLevel":"Read","resourceTypes":[]},"DescribePortfolio":{"conditionKeys":[],"resources":[{"name":"Portfolio"}],"description":"Grants permission to describe a portfolio","accessLevel":"Read","resourceTypes":[{"name":"Portfolio","required":true}]},"DescribePortfolioShareStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the status of the specified portfolio share operation","accessLevel":"Read","resourceTypes":[]},"DescribePortfolioShares":{"conditionKeys":[],"resources":[{"name":"Portfolio"}],"description":"Grants permission to view a summary of each of the portfolio shares that were created for the specified portfolio","accessLevel":"List","resourceTypes":[{"name":"Portfolio","required":true}]},"DescribeProduct":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to describe a product as an end-user","accessLevel":"Read","resourceTypes":[{"name":"Product","required":true}]},"DescribeProductAsAdmin":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to describe a product as an admin","accessLevel":"Read","resourceTypes":[{"name":"Product","required":true}]},"DescribeProductView":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe a product as an end-user","accessLevel":"Read","resourceTypes":[]},"DescribeProvisionedProduct":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to describe a provisioned product","accessLevel":"Read","resourceTypes":[]},"DescribeProvisionedProductPlan":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to describe a provisioned product plan","accessLevel":"Read","resourceTypes":[]},"DescribeProvisioningArtifact":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to describe a provisioning artifact","accessLevel":"Read","resourceTypes":[{"name":"Product","required":true}]},"DescribeProvisioningParameters":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to describe the parameters that you need to specify to successfully provision a specified provisioning artifact","accessLevel":"Read","resourceTypes":[{"name":"Product","required":true}]},"DescribeRecord":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to describe a record and lists any outputs","accessLevel":"Read","resourceTypes":[]},"DescribeServiceAction":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe a self-service action","accessLevel":"Read","resourceTypes":[]},"DescribeServiceActionExecutionParameters":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to get the default parameters if you executed the specified Service Action on the specified Provisioned Product","accessLevel":"Read","resourceTypes":[]},"DescribeTagOption":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about the specified TagOption","accessLevel":"Read","resourceTypes":[]},"DisableAWSOrganizationsAccess":{"conditionKeys":[],"resources":[],"description":"Grants permission to disable portfolio sharing through AWS Organizations feature","accessLevel":"Write","resourceTypes":[]},"DisassociateAttributeGroup":{"conditionKeys":[],"resources":[{"name":"Application"},{"name":"AttributeGroup"}],"description":"Grants permission to disassociate an attribute group from an application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true},{"name":"AttributeGroup","required":true}]},"DisassociateBudgetFromResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to disassociate a budget from a resource","accessLevel":"Write","resourceTypes":[]},"DisassociatePrincipalFromPortfolio":{"conditionKeys":[],"resources":[{"name":"Portfolio"}],"description":"Grants permission to disassociate an IAM principal from a portfolio","accessLevel":"Write","resourceTypes":[{"name":"Portfolio","required":true}]},"DisassociateProductFromPortfolio":{"conditionKeys":[],"resources":[],"description":"Grants permission to disassociate a product from a portfolio","accessLevel":"Write","resourceTypes":[]},"DisassociateResource":{"conditionKeys":["servicecatalog:Resource","servicecatalog:ResourceType"],"resources":[{"name":"Application"}],"description":"Grants permission to disassociate a resource from an application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["resource-groups:DeleteGroup"]},"DisassociateServiceActionFromProvisioningArtifact":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to disassociate the specified self-service action association from the specified provisioning artifact","accessLevel":"Write","resourceTypes":[{"name":"Product","required":true}]},"DisassociateTagOptionFromResource":{"conditionKeys":[],"resources":[{"name":"Portfolio"},{"name":"Product"}],"description":"Grants permission to disassociate the specified TagOption from the specified resource","accessLevel":"Write","resourceTypes":[{"name":"Portfolio","required":false},{"name":"Product","required":false}]},"EnableAWSOrganizationsAccess":{"conditionKeys":[],"resources":[],"description":"Grants permission to enable portfolio sharing feature through AWS Organizations","accessLevel":"Write","resourceTypes":[]},"ExecuteProvisionedProductPlan":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to execute a provisioned product plan","accessLevel":"Write","resourceTypes":[]},"ExecuteProvisionedProductServiceAction":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to executes a provisioned product plan","accessLevel":"Write","resourceTypes":[]},"GetAWSOrganizationsAccessStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the access status of AWS Organization portfolio share feature","accessLevel":"Read","resourceTypes":[]},"GetApplication":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to get an application","accessLevel":"Read","resourceTypes":[{"name":"Application","required":true}]},"GetAssociatedResource":{"conditionKeys":["servicecatalog:Resource","servicecatalog:ResourceType"],"resources":[{"name":"Application"}],"description":"Grants permission to get information about a resource associated to an application","accessLevel":"Read","resourceTypes":[{"name":"Application","required":true}]},"GetAttributeGroup":{"conditionKeys":[],"resources":[{"name":"AttributeGroup"}],"description":"Grants permission to get an attribute group","accessLevel":"Read","resourceTypes":[{"name":"AttributeGroup","required":true}]},"GetConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to read AppRegistry configurations","accessLevel":"Read","resourceTypes":[]},"GetProvisionedProductOutputs":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the provisioned product output with either provisioned product id or name","accessLevel":"Read","resourceTypes":[]},"GetResourcePolicy":{"conditionKeys":[],"resources":[{"name":"Application"},{"name":"AttributeGroup"}],"description":"Grants permission to get a resource-based policy for the specified resource","accessLevel":"Read","resourceTypes":[{"name":"Application","required":false},{"name":"AttributeGroup","required":false}],"permissionOnly":true},"ImportAsProvisionedProduct":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to import a resource into a provisioned product","accessLevel":"Write","resourceTypes":[{"name":"Product","required":true}]},"ListAcceptedPortfolioShares":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the portfolios that have been shared with you and you have accepted","accessLevel":"List","resourceTypes":[]},"ListApplications":{"conditionKeys":[],"resources":[],"description":"Grants permission to list your applications","accessLevel":"List","resourceTypes":[]},"ListAssociatedAttributeGroups":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to list the attribute groups associated with an application","accessLevel":"List","resourceTypes":[{"name":"Application","required":true}]},"ListAssociatedResources":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to list the resources associated with an application","accessLevel":"List","resourceTypes":[{"name":"Application","required":true}]},"ListAttributeGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to list your attribute groups","accessLevel":"List","resourceTypes":[]},"ListAttributeGroupsForApplication":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to list the associated attribute groups for a given application","accessLevel":"List","resourceTypes":[{"name":"Application","required":true}]},"ListBudgetsForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the budgets associated to a resource","accessLevel":"List","resourceTypes":[]},"ListConstraintsForPortfolio":{"conditionKeys":[],"resources":[],"description":"Grants permission to list constraints associated with a given portfolio","accessLevel":"List","resourceTypes":[]},"ListLaunchPaths":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to list the different ways to launch a given product as an end-user","accessLevel":"List","resourceTypes":[{"name":"Product","required":true}]},"ListOrganizationPortfolioAccess":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the organization nodes that have access to the specified portfolio","accessLevel":"List","resourceTypes":[]},"ListPortfolioAccess":{"conditionKeys":[],"resources":[{"name":"Portfolio"}],"description":"Grants permission to list the AWS accounts you have shared a given portfolio with","accessLevel":"List","resourceTypes":[{"name":"Portfolio","required":true}]},"ListPortfolios":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the portfolios in your account","accessLevel":"List","resourceTypes":[]},"ListPortfoliosForProduct":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to list the portfolios associated with a given product","accessLevel":"List","resourceTypes":[{"name":"Product","required":true}]},"ListPrincipalsForPortfolio":{"conditionKeys":[],"resources":[{"name":"Portfolio"}],"description":"Grants permission to list the IAM principals associated with a given portfolio","accessLevel":"List","resourceTypes":[{"name":"Portfolio","required":true}]},"ListProvisionedProductPlans":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to list the provisioned product plans","accessLevel":"List","resourceTypes":[]},"ListProvisioningArtifacts":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to list the provisioning artifacts associated with a given product","accessLevel":"List","resourceTypes":[{"name":"Product","required":true}]},"ListProvisioningArtifactsForServiceAction":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all provisioning artifacts for the specified self-service action","accessLevel":"List","resourceTypes":[]},"ListRecordHistory":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to list all the records in your account or all the records related to a given provisioned product","accessLevel":"List","resourceTypes":[]},"ListResourcesForTagOption":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the resources associated with the specified TagOption","accessLevel":"List","resourceTypes":[]},"ListServiceActions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all self-service actions","accessLevel":"List","resourceTypes":[]},"ListServiceActionsForProvisioningArtifact":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[{"name":"Product"}],"description":"Grants permission to list all the service actions associated with the specified provisioning artifact in your account","accessLevel":"List","resourceTypes":[{"name":"Product","required":true}]},"ListStackInstancesForProvisionedProduct":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to list account, region and status of each stack instances that are associated with a CFN_STACKSET type provisioned product","accessLevel":"List","resourceTypes":[]},"ListTagOptions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the specified TagOptions or all TagOptions","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"Application"},{"name":"AttributeGroup"}],"description":"Grants permission to list the tags for a service catalog appregistry resource","accessLevel":"Read","resourceTypes":[{"name":"Application","required":false},{"name":"AttributeGroup","required":false}]},"NotifyProvisionProductEngineWorkflowResult":{"conditionKeys":[],"resources":[],"description":"Grants permission to notify the result of the provisioning engine execution","accessLevel":"Write","resourceTypes":[]},"NotifyTerminateProvisionedProductEngineWorkflowResult":{"conditionKeys":[],"resources":[],"description":"Grants permission to notify the result of the terminate engine execution","accessLevel":"Write","resourceTypes":[]},"NotifyUpdateProvisionedProductEngineWorkflowResult":{"conditionKeys":[],"resources":[],"description":"Grants permission to notify the result of the update engine execution","accessLevel":"Write","resourceTypes":[]},"ProvisionProduct":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to provision a product with a specified provisioning artifact and launch parameters","accessLevel":"Write","resourceTypes":[{"name":"Product","required":true}]},"PutConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to assign AppRegistry configurations","accessLevel":"Write","resourceTypes":[]},"PutResourcePolicy":{"conditionKeys":[],"resources":[{"name":"Application"},{"name":"AttributeGroup"}],"description":"Grants permission to add a resource-based policy for the specified resource","accessLevel":"Write","resourceTypes":[{"name":"Application","required":false},{"name":"AttributeGroup","required":false}],"permissionOnly":true},"RejectPortfolioShare":{"conditionKeys":[],"resources":[{"name":"Portfolio"}],"description":"Grants permission to reject a portfolio that has been shared with you that you previously accepted","accessLevel":"Write","resourceTypes":[{"name":"Portfolio","required":true}]},"ScanProvisionedProducts":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to list all the provisioned products in your account","accessLevel":"List","resourceTypes":[]},"SearchProducts":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the products available to you as an end-user","accessLevel":"List","resourceTypes":[]},"SearchProductsAsAdmin":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the products in your account or all the products associated with a given portfolio","accessLevel":"List","resourceTypes":[]},"SearchProvisionedProducts":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to list all the provisioned products in your account","accessLevel":"List","resourceTypes":[]},"SyncResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to sync a resource with its current state in AppRegistry","accessLevel":"Write","resourceTypes":[],"dependentActions":["cloudformation:UpdateStack"]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Application"},{"name":"AttributeGroup"}],"description":"Grants permission to tag a service catalog appregistry resource","accessLevel":"Tagging","resourceTypes":[{"name":"Application","required":false},{"name":"AttributeGroup","required":false}]},"TerminateProvisionedProduct":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to terminate an existing provisioned product","accessLevel":"Write","resourceTypes":[]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"Application"},{"name":"AttributeGroup"}],"description":"Grants permission to remove a tag from a service catalog appregistry resource","accessLevel":"Tagging","resourceTypes":[{"name":"Application","required":false},{"name":"AttributeGroup","required":false}]},"UpdateApplication":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to update the attributes of an existing application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"]},"UpdateAttributeGroup":{"conditionKeys":[],"resources":[{"name":"AttributeGroup"}],"description":"Grants permission to update the attributes of an existing attribute group","accessLevel":"Write","resourceTypes":[{"name":"AttributeGroup","required":true}]},"UpdateConstraint":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the metadata fields of an existing constraint","accessLevel":"Write","resourceTypes":[]},"UpdatePortfolio":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Portfolio"}],"description":"Grants permission to update the metadata fields and/or tags of an existing portfolio","accessLevel":"Write","resourceTypes":[{"name":"Portfolio","required":true}]},"UpdatePortfolioShare":{"conditionKeys":[],"resources":[{"name":"Portfolio"}],"description":"Grants permission to enable or disable resource sharing for an existing portfolio share","accessLevel":"Permissions management","resourceTypes":[{"name":"Portfolio","required":true}]},"UpdateProduct":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Product"}],"description":"Grants permission to update the metadata fields and/or tags of an existing product","accessLevel":"Write","resourceTypes":[{"name":"Product","required":true}]},"UpdateProvisionedProduct":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to update an existing provisioned product","accessLevel":"Write","resourceTypes":[]},"UpdateProvisionedProductProperties":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the properties of an existing provisioned product","accessLevel":"Write","resourceTypes":[]},"UpdateProvisioningArtifact":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to update the metadata fields of an existing provisioning artifact","accessLevel":"Write","resourceTypes":[{"name":"Product","required":true}]},"UpdateServiceAction":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a self-service action","accessLevel":"Write","resourceTypes":[]},"UpdateTagOption":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the specified TagOption","accessLevel":"Write","resourceTypes":[]}},"resources":[{"name":"Application","arnFormats":["arn:${Partition}:servicecatalog:${Region}:${Account}:/applications/${ApplicationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"AttributeGroup","arnFormats":["arn:${Partition}:servicecatalog:${Region}:${Account}:/attribute-groups/${AttributeGroupId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Portfolio","arnFormats":["arn:${Partition}:catalog:${Region}:${Account}:portfolio/${PortfolioId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Product","arnFormats":["arn:${Partition}:catalog:${Region}:${Account}:product/${ProductId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"},"servicecatalog:Resource":{"types":["String"],"description":"Filters access by controlling what value can be specified as the Resource parameter in an AppRegistry associate resource API"},"servicecatalog:ResourceType":{"types":["String"],"description":"Filters access by controlling what value can be specified as the ResourceType parameter in an AppRegistry associate resource API"},"servicecatalog:accountLevel":{"types":["String"],"description":"Filters access by user to see and perform actions on resources created by anyone in the account"},"servicecatalog:roleLevel":{"types":["String"],"description":"Filters access by user to see and perform actions on resources created either by them or by anyone federating into the same role as them"},"servicecatalog:userLevel":{"types":["String"],"description":"Filters access by user to see and perform actions on only resources that they created"}}}
+{"name":"servicecatalog","actions":{"AcceptPortfolioShare":{"conditionKeys":[],"resources":[{"name":"Portfolio"}],"description":"Grants permission to accept a portfolio that has been shared with you","accessLevel":"Write","resourceTypes":[{"name":"Portfolio","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_AcceptPortfolioShare.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-AcceptPortfolioShare"},"AssociateAttributeGroup":{"conditionKeys":[],"resources":[{"name":"Application"},{"name":"AttributeGroup"}],"description":"Grants permission to associate an attribute group with an application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true},{"name":"AttributeGroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_AssociateAttributeGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-AssociateAttributeGroup"},"AssociateBudgetWithResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to associate a budget with a resource","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_AssociateBudgetWithResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-AssociateBudgetWithResource"},"AssociatePrincipalWithPortfolio":{"conditionKeys":[],"resources":[{"name":"Portfolio"}],"description":"Grants permission to associate an IAM principal with a portfolio, giving the specified principal access to any products associated with the specified portfolio","accessLevel":"Write","resourceTypes":[{"name":"Portfolio","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_AssociatePrincipalWithPortfolio.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-AssociatePrincipalWithPortfolio"},"AssociateProductWithPortfolio":{"conditionKeys":[],"resources":[],"description":"Grants permission to associate a product with a portfolio","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_AssociateProductWithPortfolio.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-AssociateProductWithPortfolio"},"AssociateResource":{"conditionKeys":["servicecatalog:Resource","servicecatalog:ResourceType"],"resources":[{"name":"Application"}],"description":"Grants permission to associate a resource with an application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["cloudformation:DescribeStacks","resource-groups:CreateGroup","resource-groups:GetGroup","resource-groups:Tag"],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_AssociateResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-AssociateResource"},"AssociateServiceActionWithProvisioningArtifact":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to associate an action with a provisioning artifact","accessLevel":"Write","resourceTypes":[{"name":"Product","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_AssociateServiceActionWithProvisioningArtifact.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-AssociateServiceActionWithProvisioningArtifact"},"AssociateTagOptionWithResource":{"conditionKeys":[],"resources":[{"name":"Portfolio"},{"name":"Product"}],"description":"Grants permission to associate the specified TagOption with the specified portfolio or product","accessLevel":"Write","resourceTypes":[{"name":"Portfolio","required":false},{"name":"Product","required":false}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_AssociateTagOptionWithResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-AssociateTagOptionWithResource"},"BatchAssociateServiceActionWithProvisioningArtifact":{"conditionKeys":[],"resources":[],"description":"Grants permission to associate multiple self-service actions with provisioning artifacts","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_BatchAssociateServiceActionWithProvisioningArtifact.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-BatchAssociateServiceActionWithProvisioningArtifact"},"BatchDisassociateServiceActionFromProvisioningArtifact":{"conditionKeys":[],"resources":[],"description":"Grants permission to disassociate a batch of self-service actions from the specified provisioning artifact","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_BatchDisassociateServiceActionFromProvisioningArtifact.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-BatchDisassociateServiceActionFromProvisioningArtifact"},"CopyProduct":{"conditionKeys":[],"resources":[],"description":"Grants permission to copy the specified source product to the specified target product or a new product","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_CopyProduct.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-CopyProduct"},"CreateApplication":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Application"}],"description":"Grants permission to create an application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_CreateApplication.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-CreateApplication"},"CreateAttributeGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"AttributeGroup"}],"description":"Grants permission to create an attribute group","accessLevel":"Write","resourceTypes":[{"name":"AttributeGroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_CreateAttributeGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-CreateAttributeGroup"},"CreateConstraint":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to create a constraint on an associated product and portfolio","accessLevel":"Write","resourceTypes":[{"name":"Product","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_CreateConstraint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-CreateConstraint"},"CreatePortfolio":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Portfolio"}],"description":"Grants permission to create a portfolio","accessLevel":"Write","resourceTypes":[{"name":"Portfolio","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_CreatePortfolio.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-CreatePortfolio"},"CreatePortfolioShare":{"conditionKeys":[],"resources":[{"name":"Portfolio"}],"description":"Grants permission to share a portfolio you own with another AWS account","accessLevel":"Permissions management","resourceTypes":[{"name":"Portfolio","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_CreatePortfolioShare.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-CreatePortfolioShare"},"CreateProduct":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Product"}],"description":"Grants permission to create a product and that product's first provisioning artifact","accessLevel":"Write","resourceTypes":[{"name":"Product","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_CreateProduct.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-CreateProduct"},"CreateProvisionedProductPlan":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to add a new provisioned product plan","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_CreateProvisionedProductPlan.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-CreateProvisionedProductPlan"},"CreateProvisioningArtifact":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to add a new provisioning artifact to an existing product","accessLevel":"Write","resourceTypes":[{"name":"Product","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_CreateProvisioningArtifact.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-CreateProvisioningArtifact"},"CreateServiceAction":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a self-service action","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_CreateServiceAction.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-CreateServiceAction"},"CreateTagOption":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a TagOption","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_CreateTagOption.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-CreateTagOption"},"DeleteApplication":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to delete an application if all associations have been removed from the application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_DeleteApplication.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DeleteApplication"},"DeleteAttributeGroup":{"conditionKeys":[],"resources":[{"name":"AttributeGroup"}],"description":"Grants permission to delete an attribute group if all associations have been removed from the attribute group","accessLevel":"Write","resourceTypes":[{"name":"AttributeGroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_DeleteAttributeGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DeleteAttributeGroup"},"DeleteConstraint":{"conditionKeys":[],"resources":[],"description":"Grants permission to remove and delete an existing constraint from an associated product and portfolio","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DeleteConstraint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DeleteConstraint"},"DeletePortfolio":{"conditionKeys":[],"resources":[{"name":"Portfolio"}],"description":"Grants permission to delete a portfolio if all associations and shares have been removed from the portfolio","accessLevel":"Write","resourceTypes":[{"name":"Portfolio","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DeletePortfolio.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DeletePortfolio"},"DeletePortfolioShare":{"conditionKeys":[],"resources":[{"name":"Portfolio"}],"description":"Grants permission to unshare a portfolio you own from an AWS account you previously shared the portfolio with","accessLevel":"Permissions management","resourceTypes":[{"name":"Portfolio","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DeletePortfolioShare.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DeletePortfolioShare"},"DeleteProduct":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to delete a product if all associations have been removed from the product","accessLevel":"Write","resourceTypes":[{"name":"Product","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DeleteProduct.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DeleteProduct"},"DeleteProvisionedProductPlan":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to delete a provisioned product plan","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DeleteProvisionedProductPlan.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DeleteProvisionedProductPlan"},"DeleteProvisioningArtifact":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to delete a provisioning artifact from a product","accessLevel":"Write","resourceTypes":[{"name":"Product","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DeleteProvisioningArtifact.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DeleteProvisioningArtifact"},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[{"name":"Application"},{"name":"AttributeGroup"}],"description":"Grants permission to delete a resource-based policy for the specified resource","accessLevel":"Write","resourceTypes":[{"name":"Application","required":false},{"name":"AttributeGroup","required":false}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/arguide/sharing-definitions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DeleteResourcePolicy"},"DeleteServiceAction":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a self-service action","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DeleteServiceAction.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DeleteServiceAction"},"DeleteTagOption":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the specified TagOption","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DeleteTagOption.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DeleteTagOption"},"DescribeConstraint":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe a constraint","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DescribeConstraint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DescribeConstraint"},"DescribeCopyProductStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the status of the specified copy product operation","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DescribeCopyProductStatus.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DescribeCopyProductStatus"},"DescribePortfolio":{"conditionKeys":[],"resources":[{"name":"Portfolio"}],"description":"Grants permission to describe a portfolio","accessLevel":"Read","resourceTypes":[{"name":"Portfolio","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DescribePortfolio.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DescribePortfolio"},"DescribePortfolioShareStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the status of the specified portfolio share operation","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DescribePortfolioShareStatus.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DescribePortfolioShareStatus"},"DescribePortfolioShares":{"conditionKeys":[],"resources":[{"name":"Portfolio"}],"description":"Grants permission to view a summary of each of the portfolio shares that were created for the specified portfolio","accessLevel":"List","resourceTypes":[{"name":"Portfolio","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DescribePortfolioShares.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DescribePortfolioShares"},"DescribeProduct":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to describe a product as an end-user","accessLevel":"Read","resourceTypes":[{"name":"Product","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DescribeProduct.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DescribeProduct"},"DescribeProductAsAdmin":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to describe a product as an admin","accessLevel":"Read","resourceTypes":[{"name":"Product","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DescribeProductAsAdmin.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DescribeProductAsAdmin"},"DescribeProductView":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe a product as an end-user","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DescribeProductView.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DescribeProductView"},"DescribeProvisionedProduct":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to describe a provisioned product","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DescribeProvisionedProduct.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DescribeProvisionedProduct"},"DescribeProvisionedProductPlan":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to describe a provisioned product plan","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DescribeProvisionedProductPlan.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DescribeProvisionedProductPlan"},"DescribeProvisioningArtifact":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to describe a provisioning artifact","accessLevel":"Read","resourceTypes":[{"name":"Product","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DescribeProvisioningArtifact.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DescribeProvisioningArtifact"},"DescribeProvisioningParameters":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to describe the parameters that you need to specify to successfully provision a specified provisioning artifact","accessLevel":"Read","resourceTypes":[{"name":"Product","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DescribeProvisioningParameters.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DescribeProvisioningParameters"},"DescribeRecord":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to describe a record and lists any outputs","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DescribeRecord.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DescribeRecord"},"DescribeServiceAction":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe a self-service action","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DescribeServiceAction.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DescribeServiceAction"},"DescribeServiceActionExecutionParameters":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to get the default parameters if you executed the specified Service Action on the specified Provisioned Product","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DescribeServiceActionExecutionParameters.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DescribeServiceActionExecutionParameters"},"DescribeTagOption":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about the specified TagOption","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DescribeTagOption.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DescribeTagOption"},"DisableAWSOrganizationsAccess":{"conditionKeys":[],"resources":[],"description":"Grants permission to disable portfolio sharing through AWS Organizations feature","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DisableAWSOrganizationsAccess.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DisableAWSOrganizationsAccess"},"DisassociateAttributeGroup":{"conditionKeys":[],"resources":[{"name":"Application"},{"name":"AttributeGroup"}],"description":"Grants permission to disassociate an attribute group from an application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true},{"name":"AttributeGroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_DisassociateAttributeGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DisassociateAttributeGroup"},"DisassociateBudgetFromResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to disassociate a budget from a resource","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DisassociateBudgetFromResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DisassociateBudgetFromResource"},"DisassociatePrincipalFromPortfolio":{"conditionKeys":[],"resources":[{"name":"Portfolio"}],"description":"Grants permission to disassociate an IAM principal from a portfolio","accessLevel":"Write","resourceTypes":[{"name":"Portfolio","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DisassociatePrincipalFromPortfolio.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DisassociatePrincipalFromPortfolio"},"DisassociateProductFromPortfolio":{"conditionKeys":[],"resources":[],"description":"Grants permission to disassociate a product from a portfolio","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DisassociateProductFromPortfolio.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DisassociateProductFromPortfolio"},"DisassociateResource":{"conditionKeys":["servicecatalog:Resource","servicecatalog:ResourceType"],"resources":[{"name":"Application"}],"description":"Grants permission to disassociate a resource from an application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["resource-groups:DeleteGroup"],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_DisassociateResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DisassociateResource"},"DisassociateServiceActionFromProvisioningArtifact":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to disassociate the specified self-service action association from the specified provisioning artifact","accessLevel":"Write","resourceTypes":[{"name":"Product","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DisassociateServiceActionFromProvisioningArtifact.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DisassociateServiceActionFromProvisioningArtifact"},"DisassociateTagOptionFromResource":{"conditionKeys":[],"resources":[{"name":"Portfolio"},{"name":"Product"}],"description":"Grants permission to disassociate the specified TagOption from the specified resource","accessLevel":"Write","resourceTypes":[{"name":"Portfolio","required":false},{"name":"Product","required":false}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_DisassociateTagOptionFromResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-DisassociateTagOptionFromResource"},"EnableAWSOrganizationsAccess":{"conditionKeys":[],"resources":[],"description":"Grants permission to enable portfolio sharing feature through AWS Organizations","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_EnableAWSOrganizationsAccess.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-EnableAWSOrganizationsAccess"},"ExecuteProvisionedProductPlan":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to execute a provisioned product plan","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ExecuteProvisionedProductPlan.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ExecuteProvisionedProductPlan"},"ExecuteProvisionedProductServiceAction":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to executes a provisioned product plan","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ExecuteProvisionedProductServiceAction.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ExecuteProvisionedProductServiceAction"},"GetAWSOrganizationsAccessStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the access status of AWS Organization portfolio share feature","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_GetAWSOrganizationsAccessStatus.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-GetAWSOrganizationsAccessStatus"},"GetApplication":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to get an application","accessLevel":"Read","resourceTypes":[{"name":"Application","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_GetApplication.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-GetApplication"},"GetAssociatedResource":{"conditionKeys":["servicecatalog:Resource","servicecatalog:ResourceType"],"resources":[{"name":"Application"}],"description":"Grants permission to get information about a resource associated to an application","accessLevel":"Read","resourceTypes":[{"name":"Application","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_GetAssociatedResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-GetAssociatedResource"},"GetAttributeGroup":{"conditionKeys":[],"resources":[{"name":"AttributeGroup"}],"description":"Grants permission to get an attribute group","accessLevel":"Read","resourceTypes":[{"name":"AttributeGroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_GetAttributeGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-GetAttributeGroup"},"GetConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to read AppRegistry configurations","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_GetConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-GetConfiguration"},"GetProvisionedProductOutputs":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the provisioned product output with either provisioned product id or name","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_GetProvisionedProductOutputs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-GetProvisionedProductOutputs"},"GetResourcePolicy":{"conditionKeys":[],"resources":[{"name":"Application"},{"name":"AttributeGroup"}],"description":"Grants permission to get a resource-based policy for the specified resource","accessLevel":"Read","resourceTypes":[{"name":"Application","required":false},{"name":"AttributeGroup","required":false}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/arguide/sharing-definitions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-GetResourcePolicy"},"ImportAsProvisionedProduct":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to import a resource into a provisioned product","accessLevel":"Write","resourceTypes":[{"name":"Product","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ImportAsProvisionedProduct.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ImportAsProvisionedProduct"},"ListAcceptedPortfolioShares":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the portfolios that have been shared with you and you have accepted","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ListAcceptedPortfolioShares.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ListAcceptedPortfolioShares"},"ListApplications":{"conditionKeys":[],"resources":[],"description":"Grants permission to list your applications","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_ListApplications.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ListApplications"},"ListAssociatedAttributeGroups":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to list the attribute groups associated with an application","accessLevel":"List","resourceTypes":[{"name":"Application","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_ListAssociatedAttributeGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ListAssociatedAttributeGroups"},"ListAssociatedResources":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to list the resources associated with an application","accessLevel":"List","resourceTypes":[{"name":"Application","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_ListAssociatedResources.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ListAssociatedResources"},"ListAttributeGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to list your attribute groups","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_ListAttributeGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ListAttributeGroups"},"ListAttributeGroupsForApplication":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to list the associated attribute groups for a given application","accessLevel":"List","resourceTypes":[{"name":"Application","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_ListAttributeGroupsForApplication.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ListAttributeGroupsForApplication"},"ListBudgetsForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the budgets associated to a resource","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ListBudgetsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ListBudgetsForResource"},"ListConstraintsForPortfolio":{"conditionKeys":[],"resources":[],"description":"Grants permission to list constraints associated with a given portfolio","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ListConstraintsForPortfolio.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ListConstraintsForPortfolio"},"ListLaunchPaths":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to list the different ways to launch a given product as an end-user","accessLevel":"List","resourceTypes":[{"name":"Product","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ListLaunchPaths.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ListLaunchPaths"},"ListOrganizationPortfolioAccess":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the organization nodes that have access to the specified portfolio","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ListOrganizationPortfolioAccess.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ListOrganizationPortfolioAccess"},"ListPortfolioAccess":{"conditionKeys":[],"resources":[{"name":"Portfolio"}],"description":"Grants permission to list the AWS accounts you have shared a given portfolio with","accessLevel":"List","resourceTypes":[{"name":"Portfolio","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ListPortfolioAccess.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ListPortfolioAccess"},"ListPortfolios":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the portfolios in your account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ListPortfolios.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ListPortfolios"},"ListPortfoliosForProduct":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to list the portfolios associated with a given product","accessLevel":"List","resourceTypes":[{"name":"Product","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ListPortfoliosForProduct.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ListPortfoliosForProduct"},"ListPrincipalsForPortfolio":{"conditionKeys":[],"resources":[{"name":"Portfolio"}],"description":"Grants permission to list the IAM principals associated with a given portfolio","accessLevel":"List","resourceTypes":[{"name":"Portfolio","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ListPrincipalsForPortfolio.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ListPrincipalsForPortfolio"},"ListProvisionedProductPlans":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to list the provisioned product plans","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ListProvisionedProductPlans.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ListProvisionedProductPlans"},"ListProvisioningArtifacts":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to list the provisioning artifacts associated with a given product","accessLevel":"List","resourceTypes":[{"name":"Product","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ListProvisioningArtifacts.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ListProvisioningArtifacts"},"ListProvisioningArtifactsForServiceAction":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all provisioning artifacts for the specified self-service action","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ListProvisioningArtifactsForServiceAction.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ListProvisioningArtifactsForServiceAction"},"ListRecordHistory":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to list all the records in your account or all the records related to a given provisioned product","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ListRecordHistory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ListRecordHistory"},"ListResourcesForTagOption":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the resources associated with the specified TagOption","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ListResourcesForTagOption.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ListResourcesForTagOption"},"ListServiceActions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all self-service actions","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ListServiceActions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ListServiceActions"},"ListServiceActionsForProvisioningArtifact":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[{"name":"Product"}],"description":"Grants permission to list all the service actions associated with the specified provisioning artifact in your account","accessLevel":"List","resourceTypes":[{"name":"Product","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ListServiceActionsForProvisioningArtifact.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ListServiceActionsForProvisioningArtifact"},"ListStackInstancesForProvisionedProduct":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to list account, region and status of each stack instances that are associated with a CFN_STACKSET type provisioned product","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ListStackInstancesForProvisionedProduct.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ListStackInstancesForProvisionedProduct"},"ListTagOptions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the specified TagOptions or all TagOptions","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ListTagOptions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ListTagOptions"},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"Application"},{"name":"AttributeGroup"}],"description":"Grants permission to list the tags for a service catalog appregistry resource","accessLevel":"Read","resourceTypes":[{"name":"Application","required":false},{"name":"AttributeGroup","required":false}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ListTagsForResource"},"NotifyProvisionProductEngineWorkflowResult":{"conditionKeys":[],"resources":[],"description":"Grants permission to notify the result of the provisioning engine execution","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_NotifyProvisionProductEngineWorkflowResult.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-NotifyProvisionProductEngineWorkflowResult"},"NotifyTerminateProvisionedProductEngineWorkflowResult":{"conditionKeys":[],"resources":[],"description":"Grants permission to notify the result of the terminate engine execution","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_NotifyTerminateProvisionedProductEngineWorkflowResult.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-NotifyTerminateProvisionedProductEngineWorkflowResult"},"NotifyUpdateProvisionedProductEngineWorkflowResult":{"conditionKeys":[],"resources":[],"description":"Grants permission to notify the result of the update engine execution","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_NotifyUpdateProvisionedProductEngineWorkflowResult.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-NotifyUpdateProvisionedProductEngineWorkflowResult"},"ProvisionProduct":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to provision a product with a specified provisioning artifact and launch parameters","accessLevel":"Write","resourceTypes":[{"name":"Product","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ProvisionProduct.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ProvisionProduct"},"PutConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to assign AppRegistry configurations","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_PutConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-PutConfiguration"},"PutResourcePolicy":{"conditionKeys":[],"resources":[{"name":"Application"},{"name":"AttributeGroup"}],"description":"Grants permission to add a resource-based policy for the specified resource","accessLevel":"Write","resourceTypes":[{"name":"Application","required":false},{"name":"AttributeGroup","required":false}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/arguide/sharing-definitions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-PutResourcePolicy"},"RejectPortfolioShare":{"conditionKeys":[],"resources":[{"name":"Portfolio"}],"description":"Grants permission to reject a portfolio that has been shared with you that you previously accepted","accessLevel":"Write","resourceTypes":[{"name":"Portfolio","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_RejectPortfolioShare.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-RejectPortfolioShare"},"ScanProvisionedProducts":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to list all the provisioned products in your account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ScanProvisionedProducts.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-ScanProvisionedProducts"},"SearchProducts":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the products available to you as an end-user","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_SearchProducts.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-SearchProducts"},"SearchProductsAsAdmin":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the products in your account or all the products associated with a given portfolio","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_SearchProductsAsAdmin.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-SearchProductsAsAdmin"},"SearchProvisionedProducts":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to list all the provisioned products in your account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_SearchProvisionedProducts.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-SearchProvisionedProducts"},"SyncResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to sync a resource with its current state in AppRegistry","accessLevel":"Write","resourceTypes":[],"dependentActions":["cloudformation:UpdateStack"],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_SyncResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-SyncResource"},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Application"},{"name":"AttributeGroup"}],"description":"Grants permission to tag a service catalog appregistry resource","accessLevel":"Tagging","resourceTypes":[{"name":"Application","required":false},{"name":"AttributeGroup","required":false}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-TagResource"},"TerminateProvisionedProduct":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to terminate an existing provisioned product","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_TerminateProvisionedProduct.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-TerminateProvisionedProduct"},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"Application"},{"name":"AttributeGroup"}],"description":"Grants permission to remove a tag from a service catalog appregistry resource","accessLevel":"Tagging","resourceTypes":[{"name":"Application","required":false},{"name":"AttributeGroup","required":false}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-UntagResource"},"UpdateApplication":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to update the attributes of an existing application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_UpdateApplication.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-UpdateApplication"},"UpdateAttributeGroup":{"conditionKeys":[],"resources":[{"name":"AttributeGroup"}],"description":"Grants permission to update the attributes of an existing attribute group","accessLevel":"Write","resourceTypes":[{"name":"AttributeGroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_UpdateAttributeGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-UpdateAttributeGroup"},"UpdateConstraint":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the metadata fields of an existing constraint","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_UpdateConstraint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-UpdateConstraint"},"UpdatePortfolio":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Portfolio"}],"description":"Grants permission to update the metadata fields and/or tags of an existing portfolio","accessLevel":"Write","resourceTypes":[{"name":"Portfolio","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_UpdatePortfolio.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-UpdatePortfolio"},"UpdatePortfolioShare":{"conditionKeys":[],"resources":[{"name":"Portfolio"}],"description":"Grants permission to enable or disable resource sharing for an existing portfolio share","accessLevel":"Permissions management","resourceTypes":[{"name":"Portfolio","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_UpdatePortfolioShare.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-UpdatePortfolioShare"},"UpdateProduct":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Product"}],"description":"Grants permission to update the metadata fields and/or tags of an existing product","accessLevel":"Write","resourceTypes":[{"name":"Product","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_UpdateProduct.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-UpdateProduct"},"UpdateProvisionedProduct":{"conditionKeys":["servicecatalog:accountLevel","servicecatalog:roleLevel","servicecatalog:userLevel"],"resources":[],"description":"Grants permission to update an existing provisioned product","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_UpdateProvisionedProduct.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-UpdateProvisionedProduct"},"UpdateProvisionedProductProperties":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the properties of an existing provisioned product","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_UpdateProvisionedProductProperties.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-UpdateProvisionedProductProperties"},"UpdateProvisioningArtifact":{"conditionKeys":[],"resources":[{"name":"Product"}],"description":"Grants permission to update the metadata fields of an existing provisioning artifact","accessLevel":"Write","resourceTypes":[{"name":"Product","required":true}],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_UpdateProvisioningArtifact.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-UpdateProvisioningArtifact"},"UpdateServiceAction":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a self-service action","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_UpdateServiceAction.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-UpdateServiceAction"},"UpdateTagOption":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the specified TagOption","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/servicecatalog/latest/dg/API_UpdateTagOption.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html#awsservicecatalog-UpdateTagOption"}},"resources":[{"name":"Application","arnFormats":["arn:${Partition}:servicecatalog:${Region}:${Account}:/applications/${ApplicationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"AttributeGroup","arnFormats":["arn:${Partition}:servicecatalog:${Region}:${Account}:/attribute-groups/${AttributeGroupId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Portfolio","arnFormats":["arn:${Partition}:catalog:${Region}:${Account}:portfolio/${PortfolioId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Product","arnFormats":["arn:${Partition}:catalog:${Region}:${Account}:product/${ProductId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"},"servicecatalog:Resource":{"types":["String"],"description":"Filters access by controlling what value can be specified as the Resource parameter in an AppRegistry associate resource API"},"servicecatalog:ResourceType":{"types":["String"],"description":"Filters access by controlling what value can be specified as the ResourceType parameter in an AppRegistry associate resource API"},"servicecatalog:accountLevel":{"types":["String"],"description":"Filters access by user to see and perform actions on resources created by anyone in the account"},"servicecatalog:roleLevel":{"types":["String"],"description":"Filters access by user to see and perform actions on resources created either by them or by anyone federating into the same role as them"},"servicecatalog:userLevel":{"types":["String"],"description":"Filters access by user to see and perform actions on only resources that they created"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsservicecatalog.html"}

package/src/data/servicereference/services/servicediscovery.json

@@ -1 +1 @@
-{"name":"servicediscovery","actions":{"CreateHttpNamespace":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an HTTP namespace","accessLevel":"Write","resourceTypes":[]},"CreatePrivateDnsNamespace":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a private namespace based on DNS, which will be visible only inside a specified Amazon VPC","accessLevel":"Write","resourceTypes":[]},"CreatePublicDnsNamespace":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a public namespace based on DNS, which will be visible on the internet","accessLevel":"Write","resourceTypes":[]},"CreateService":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","servicediscovery:NamespaceArn"],"resources":[{"name":"namespace"},{"name":"service"}],"description":"Grants permission to create a service","accessLevel":"Write","resourceTypes":[{"name":"namespace","required":true},{"name":"service","required":true}]},"DeleteNamespace":{"conditionKeys":[],"resources":[{"name":"namespace"}],"description":"Grants permission to delete a specified namespace","accessLevel":"Write","resourceTypes":[{"name":"namespace","required":true}]},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[{"name":"namespace"}],"description":"Grants permission to delete the RAM access control policy for a namespace","accessLevel":"Write","resourceTypes":[{"name":"namespace","required":true}],"permissionOnly":true},"DeleteService":{"conditionKeys":["servicediscovery:ServiceCreatedByAccount"],"resources":[{"name":"service"}],"description":"Grants permission to delete a specified service","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}]},"DeleteServiceAttributes":{"conditionKeys":["servicediscovery:ServiceCreatedByAccount"],"resources":[{"name":"service"}],"description":"Grants permission to delete specified attributes from a service","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}]},"DeregisterInstance":{"conditionKeys":["servicediscovery:ServiceArn","servicediscovery:ServiceCreatedByAccount"],"resources":[{"name":"service"}],"description":"Grants permission to delete the records and the health check, if any, that Amazon Route 53 created for the specified instance","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}]},"DiscoverInstances":{"conditionKeys":["servicediscovery:NamespaceName","servicediscovery:ServiceName"],"resources":[{"name":"namespace"},{"name":"service"}],"description":"Grants permission to discover registered instances for a specified namespace and service","accessLevel":"Read","resourceTypes":[{"name":"namespace","required":true},{"name":"service","required":true}]},"DiscoverInstancesRevision":{"conditionKeys":["servicediscovery:NamespaceName","servicediscovery:ServiceName"],"resources":[{"name":"namespace"},{"name":"service"}],"description":"Grants permission to discover the revision of the instances for a specified namespace and service","accessLevel":"Read","resourceTypes":[{"name":"namespace","required":true},{"name":"service","required":true}]},"GetInstance":{"conditionKeys":["servicediscovery:ServiceArn"],"resources":[{"name":"service"}],"description":"Grants permission to get information about a specified instance","accessLevel":"Read","resourceTypes":[{"name":"service","required":true}]},"GetInstancesHealthStatus":{"conditionKeys":["servicediscovery:ServiceArn"],"resources":[{"name":"service"}],"description":"Grants permission to get the current health status (Healthy, Unhealthy, or Unknown) of one or more instances","accessLevel":"Read","resourceTypes":[{"name":"service","required":true}]},"GetNamespace":{"conditionKeys":[],"resources":[{"name":"namespace"}],"description":"Grants permission to get information about a namespace","accessLevel":"Read","resourceTypes":[{"name":"namespace","required":true}]},"GetOperation":{"conditionKeys":[],"resources":[{"name":"namespace"},{"name":"service"}],"description":"Grants permission to get information about a specific operation","accessLevel":"Read","resourceTypes":[{"name":"namespace","required":true},{"name":"service","required":false}]},"GetResourcePolicy":{"conditionKeys":[],"resources":[{"name":"namespace"}],"description":"Grants permission to read the RAM access control policy for a namespace","accessLevel":"Read","resourceTypes":[{"name":"namespace","required":true}],"permissionOnly":true},"GetService":{"conditionKeys":[],"resources":[{"name":"service"}],"description":"Grants permission to get the settings for a specified service","accessLevel":"Read","resourceTypes":[{"name":"service","required":true}]},"GetServiceAttributes":{"conditionKeys":[],"resources":[{"name":"service"}],"description":"Grants permission to get the attributes for a specified service","accessLevel":"Read","resourceTypes":[{"name":"service","required":true}]},"ListInstances":{"conditionKeys":["servicediscovery:ServiceArn"],"resources":[{"name":"service"}],"description":"Grants permission to get summary information about the instances that were registered with a specified service","accessLevel":"Read","resourceTypes":[{"name":"service","required":true}]},"ListNamespaces":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about the namespaces","accessLevel":"Read","resourceTypes":[]},"ListOperations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list operations that match the criteria that you specify","accessLevel":"List","resourceTypes":[]},"ListServices":{"conditionKeys":[],"resources":[],"description":"Grants permission to get settings for all the services that match specified filters","accessLevel":"Read","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to lists tags for the specified resource","accessLevel":"Read","resourceTypes":[]},"PutResourcePolicy":{"conditionKeys":[],"resources":[{"name":"namespace"}],"description":"Grants permission to define the RAM access control policy for a namespace","accessLevel":"Write","resourceTypes":[{"name":"namespace","required":true}],"permissionOnly":true},"RegisterInstance":{"conditionKeys":["servicediscovery:ServiceArn","servicediscovery:ServiceCreatedByAccount"],"resources":[{"name":"service"}],"description":"Grants permission to register an instance based on the settings in a specified service","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to add one or more tags to the specified resource","accessLevel":"Tagging","resourceTypes":[]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[],"description":"Grants permission to remove one or more tags from the specified resource","accessLevel":"Tagging","resourceTypes":[]},"UpdateHttpNamespace":{"conditionKeys":[],"resources":[{"name":"namespace"}],"description":"Grants permission to update the settings for a HTTP namespace","accessLevel":"Write","resourceTypes":[{"name":"namespace","required":true}]},"UpdateInstanceCustomHealthStatus":{"conditionKeys":["servicediscovery:ServiceArn","servicediscovery:ServiceCreatedByAccount"],"resources":[{"name":"service"}],"description":"Grants permission to update the current health status for an instance that has a custom health check","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}]},"UpdatePrivateDnsNamespace":{"conditionKeys":[],"resources":[{"name":"namespace"}],"description":"Grants permission to update the settings for a private DNS namespace","accessLevel":"Write","resourceTypes":[{"name":"namespace","required":true}]},"UpdatePublicDnsNamespace":{"conditionKeys":[],"resources":[{"name":"namespace"}],"description":"Grants permission to update the settings for a public DNS namespace","accessLevel":"Write","resourceTypes":[{"name":"namespace","required":true}]},"UpdateService":{"conditionKeys":["servicediscovery:ServiceCreatedByAccount"],"resources":[{"name":"service"}],"description":"Grants permission to update the settings in a specified service","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}]},"UpdateServiceAttributes":{"conditionKeys":["servicediscovery:ServiceCreatedByAccount"],"resources":[{"name":"service"}],"description":"Grants permission to update the attributes in a specified service","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}]}},"resources":[{"name":"namespace","arnFormats":["arn:${Partition}:servicediscovery:${Region}:${Account}:namespace/${NamespaceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"service","arnFormats":["arn:${Partition}:servicediscovery:${Region}:${Account}:service/${ServiceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters actions based on the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters actions based on the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters actions based on the tag keys that are passed in the request"},"servicediscovery:NamespaceArn":{"types":["ARN"],"description":"Filters access by specifying the Amazon Resource Name (ARN) for the related namespace"},"servicediscovery:NamespaceName":{"types":["String"],"description":"Filters access by specifying the name of the related namespace"},"servicediscovery:ServiceArn":{"types":["ARN"],"description":"Filters access by specifying the Amazon Resource Name (ARN) for the related service"},"servicediscovery:ServiceCreatedByAccount":{"types":["String"],"description":"Filters access by specifying the account id of the related service creator"},"servicediscovery:ServiceName":{"types":["String"],"description":"Filters access by specifying the name of the related service"}}}
+{"name":"servicediscovery","actions":{"CreateHttpNamespace":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an HTTP namespace","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_CreateHttpNamespace.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-CreateHttpNamespace"},"CreatePrivateDnsNamespace":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a private namespace based on DNS, which will be visible only inside a specified Amazon VPC","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_CreatePrivateDnsNamespace.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-CreatePrivateDnsNamespace"},"CreatePublicDnsNamespace":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a public namespace based on DNS, which will be visible on the internet","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_CreatePublicDnsNamespace.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-CreatePublicDnsNamespace"},"CreateService":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","servicediscovery:NamespaceArn"],"resources":[{"name":"namespace"},{"name":"service"}],"description":"Grants permission to create a service","accessLevel":"Write","resourceTypes":[{"name":"namespace","required":true},{"name":"service","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_CreateService.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-CreateService"},"DeleteNamespace":{"conditionKeys":[],"resources":[{"name":"namespace"}],"description":"Grants permission to delete a specified namespace","accessLevel":"Write","resourceTypes":[{"name":"namespace","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_DeleteNamespace.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-DeleteNamespace"},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[{"name":"namespace"}],"description":"Grants permission to delete the RAM access control policy for a namespace","accessLevel":"Write","resourceTypes":[{"name":"namespace","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/dg/sharing-namespaces.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-DeleteResourcePolicy"},"DeleteService":{"conditionKeys":["servicediscovery:ServiceCreatedByAccount"],"resources":[{"name":"service"}],"description":"Grants permission to delete a specified service","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_DeleteService.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-DeleteService"},"DeleteServiceAttributes":{"conditionKeys":["servicediscovery:ServiceCreatedByAccount"],"resources":[{"name":"service"}],"description":"Grants permission to delete specified attributes from a service","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_DeleteServiceAttributes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-DeleteServiceAttributes"},"DeregisterInstance":{"conditionKeys":["servicediscovery:ServiceArn","servicediscovery:ServiceCreatedByAccount"],"resources":[{"name":"service"}],"description":"Grants permission to delete the records and the health check, if any, that Amazon Route 53 created for the specified instance","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_DeregisterInstance.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-DeregisterInstance"},"DiscoverInstances":{"conditionKeys":["servicediscovery:NamespaceName","servicediscovery:ServiceName"],"resources":[{"name":"namespace"},{"name":"service"}],"description":"Grants permission to discover registered instances for a specified namespace and service","accessLevel":"Read","resourceTypes":[{"name":"namespace","required":true},{"name":"service","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_DiscoverInstances.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-DiscoverInstances"},"DiscoverInstancesRevision":{"conditionKeys":["servicediscovery:NamespaceName","servicediscovery:ServiceName"],"resources":[{"name":"namespace"},{"name":"service"}],"description":"Grants permission to discover the revision of the instances for a specified namespace and service","accessLevel":"Read","resourceTypes":[{"name":"namespace","required":true},{"name":"service","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_DiscoverInstancesRevision.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-DiscoverInstancesRevision"},"GetInstance":{"conditionKeys":["servicediscovery:ServiceArn"],"resources":[{"name":"service"}],"description":"Grants permission to get information about a specified instance","accessLevel":"Read","resourceTypes":[{"name":"service","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_GetInstance.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-GetInstance"},"GetInstancesHealthStatus":{"conditionKeys":["servicediscovery:ServiceArn"],"resources":[{"name":"service"}],"description":"Grants permission to get the current health status (Healthy, Unhealthy, or Unknown) of one or more instances","accessLevel":"Read","resourceTypes":[{"name":"service","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_GetInstancesHealthStatus.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-GetInstancesHealthStatus"},"GetNamespace":{"conditionKeys":[],"resources":[{"name":"namespace"}],"description":"Grants permission to get information about a namespace","accessLevel":"Read","resourceTypes":[{"name":"namespace","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_GetNamespace.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-GetNamespace"},"GetOperation":{"conditionKeys":[],"resources":[{"name":"namespace"},{"name":"service"}],"description":"Grants permission to get information about a specific operation","accessLevel":"Read","resourceTypes":[{"name":"namespace","required":true},{"name":"service","required":false}],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_GetOperation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-GetOperation"},"GetResourcePolicy":{"conditionKeys":[],"resources":[{"name":"namespace"}],"description":"Grants permission to read the RAM access control policy for a namespace","accessLevel":"Read","resourceTypes":[{"name":"namespace","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/dg/sharing-namespaces.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-GetResourcePolicy"},"GetService":{"conditionKeys":[],"resources":[{"name":"service"}],"description":"Grants permission to get the settings for a specified service","accessLevel":"Read","resourceTypes":[{"name":"service","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_GetService.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-GetService"},"GetServiceAttributes":{"conditionKeys":[],"resources":[{"name":"service"}],"description":"Grants permission to get the attributes for a specified service","accessLevel":"Read","resourceTypes":[{"name":"service","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_GetServiceAttributes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-GetServiceAttributes"},"ListInstances":{"conditionKeys":["servicediscovery:ServiceArn"],"resources":[{"name":"service"}],"description":"Grants permission to get summary information about the instances that were registered with a specified service","accessLevel":"Read","resourceTypes":[{"name":"service","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_ListInstances.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-ListInstances"},"ListNamespaces":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about the namespaces","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_ListNamespaces.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-ListNamespaces"},"ListOperations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list operations that match the criteria that you specify","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_ListOperations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-ListOperations"},"ListServices":{"conditionKeys":[],"resources":[],"description":"Grants permission to get settings for all the services that match specified filters","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_ListServices.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-ListServices"},"ListTagsForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to lists tags for the specified resource","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-ListTagsForResource"},"PutResourcePolicy":{"conditionKeys":[],"resources":[{"name":"namespace"}],"description":"Grants permission to define the RAM access control policy for a namespace","accessLevel":"Write","resourceTypes":[{"name":"namespace","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/dg/sharing-namespaces.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-PutResourcePolicy"},"RegisterInstance":{"conditionKeys":["servicediscovery:ServiceArn","servicediscovery:ServiceCreatedByAccount"],"resources":[{"name":"service"}],"description":"Grants permission to register an instance based on the settings in a specified service","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_RegisterInstance.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-RegisterInstance"},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to add one or more tags to the specified resource","accessLevel":"Tagging","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-TagResource"},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[],"description":"Grants permission to remove one or more tags from the specified resource","accessLevel":"Tagging","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-UntagResource"},"UpdateHttpNamespace":{"conditionKeys":[],"resources":[{"name":"namespace"}],"description":"Grants permission to update the settings for a HTTP namespace","accessLevel":"Write","resourceTypes":[{"name":"namespace","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_UpdateHttpNamespace.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-UpdateHttpNamespace"},"UpdateInstanceCustomHealthStatus":{"conditionKeys":["servicediscovery:ServiceArn","servicediscovery:ServiceCreatedByAccount"],"resources":[{"name":"service"}],"description":"Grants permission to update the current health status for an instance that has a custom health check","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_UpdateInstanceCustomHealthStatus.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-UpdateInstanceCustomHealthStatus"},"UpdatePrivateDnsNamespace":{"conditionKeys":[],"resources":[{"name":"namespace"}],"description":"Grants permission to update the settings for a private DNS namespace","accessLevel":"Write","resourceTypes":[{"name":"namespace","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_UpdatePrivateDnsNamespace.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-UpdatePrivateDnsNamespace"},"UpdatePublicDnsNamespace":{"conditionKeys":[],"resources":[{"name":"namespace"}],"description":"Grants permission to update the settings for a public DNS namespace","accessLevel":"Write","resourceTypes":[{"name":"namespace","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_UpdatePublicDnsNamespace.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-UpdatePublicDnsNamespace"},"UpdateService":{"conditionKeys":["servicediscovery:ServiceCreatedByAccount"],"resources":[{"name":"service"}],"description":"Grants permission to update the settings in a specified service","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_UpdateService.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-UpdateService"},"UpdateServiceAttributes":{"conditionKeys":["servicediscovery:ServiceCreatedByAccount"],"resources":[{"name":"service"}],"description":"Grants permission to update the attributes in a specified service","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud-map/latest/api/API_UpdateServiceAttributes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html#awscloudmap-UpdateServiceAttributes"}},"resources":[{"name":"namespace","arnFormats":["arn:${Partition}:servicediscovery:${Region}:${Account}:namespace/${NamespaceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"service","arnFormats":["arn:${Partition}:servicediscovery:${Region}:${Account}:service/${ServiceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters actions based on the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters actions based on the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters actions based on the tag keys that are passed in the request"},"servicediscovery:NamespaceArn":{"types":["ARN"],"description":"Filters access by specifying the Amazon Resource Name (ARN) for the related namespace"},"servicediscovery:NamespaceName":{"types":["String"],"description":"Filters access by specifying the name of the related namespace"},"servicediscovery:ServiceArn":{"types":["ARN"],"description":"Filters access by specifying the Amazon Resource Name (ARN) for the related service"},"servicediscovery:ServiceCreatedByAccount":{"types":["String"],"description":"Filters access by specifying the account id of the related service creator"},"servicediscovery:ServiceName":{"types":["String"],"description":"Filters access by specifying the name of the related service"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudmap.html"}

package/src/data/servicereference/services/serviceextract.json

@@ -1 +1 @@
-{"name":"serviceextract","actions":{"GetConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to get required configuration for the AWS Microservice Extractor for .NET desktop client","accessLevel":"Read","resourceTypes":[],"permissionOnly":true}},"resources":[],"conditionKeys":{}}
+{"name":"serviceextract","actions":{"GetConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to get required configuration for the AWS Microservice Extractor for .NET desktop client","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/microservice-extractor/latest/userguide/what-is-microservice-extractor.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsmicroserviceextractorfor.net.html#awsmicroserviceextractorfor.net-GetConfig"}},"resources":[],"conditionKeys":{},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsmicroserviceextractorfor.net.html"}