aws-iam-language-server 0.0.8 → 0.0.9

package/src/data/servicereference/services/cloud9.json

@@ -1 +1 @@
-{"name":"cloud9","actions":{"ActivateEC2Remote":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to start the Amazon EC2 instance that your AWS Cloud9 IDE connects to","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}],"permissionOnly":true},"CreateEnvironmentEC2":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","cloud9:EnvironmentName","cloud9:InstanceType","cloud9:OwnerArn","cloud9:SubnetId","cloud9:UserArn"],"resources":[],"description":"Grants permission to create an AWS Cloud9 development environment, launches an Amazon Elastic Compute Cloud (Amazon EC2) instance, and then hosts the environment on the instance","accessLevel":"Write","resourceTypes":[],"dependentActions":["ec2:DescribeSubnets","ec2:DescribeVpcs","iam:CreateServiceLinkedRole"]},"CreateEnvironmentMembership":{"conditionKeys":["cloud9:EnvironmentId","cloud9:Permissions","cloud9:UserArn"],"resources":[{"name":"environment"}],"description":"Grants permission to add an environment member to an AWS Cloud9 development environment","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}]},"CreateEnvironmentSSH":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","cloud9:EnvironmentName","cloud9:OwnerArn"],"resources":[],"description":"Grants permission to create an AWS Cloud9 SSH development environment","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CreateEnvironmentToken":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to create an authentication token that allows a connection between the AWS Cloud9 IDE and the user's environment","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true}],"permissionOnly":true},"DeleteEnvironment":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to delete an AWS Cloud9 development environment. If the environment is hosted on an Amazon Elastic Compute Cloud (Amazon EC2) instance, also terminates the instance","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"]},"DeleteEnvironmentMembership":{"conditionKeys":["cloud9:EnvironmentId","cloud9:UserArn"],"resources":[{"name":"environment"}],"description":"Grants permission to delete an environment member from an AWS Cloud9 development environment","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}]},"DescribeEC2Remote":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to get details about the connection to the EC2 development environment, including host, user, and port","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true}],"permissionOnly":true},"DescribeEnvironmentMemberships":{"conditionKeys":["cloud9:EnvironmentId","cloud9:UserArn"],"resources":[{"name":"environment"}],"description":"Grants permission to get information about environment members for an AWS Cloud9 development environment","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true}]},"DescribeEnvironmentStatus":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to get status information for an AWS Cloud9 development environment","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true}]},"DescribeEnvironments":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to get information about AWS Cloud9 development environments","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true}]},"DescribeSSHRemote":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to get details about the connection to the SSH development environment, including host, user, and port","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true}],"permissionOnly":true},"GetEnvironmentConfig":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to get configuration information that's used to initialize the AWS Cloud9 IDE","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true}],"permissionOnly":true},"GetEnvironmentSettings":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to get the AWS Cloud9 IDE settings for a specified development environment","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true}],"permissionOnly":true},"GetMembershipSettings":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to get the AWS Cloud9 IDE settings for a specified environment member","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true}],"permissionOnly":true},"GetMigrationExperiences":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the migration experience for a cloud9 user","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetUserPublicKey":{"conditionKeys":["cloud9:UserArn"],"resources":[],"description":"Grants permission to get the user's public SSH key, which is used by AWS Cloud9 to connect to SSH development environments","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetUserSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the AWS Cloud9 IDE settings for a specified user","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"ListEnvironments":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of AWS Cloud9 development environment identifiers","accessLevel":"Read","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to list tags for a cloud9 environment","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true}]},"ModifyTemporaryCredentialsOnEnvironmentEC2":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to set AWS managed temporary credentials on the Amazon EC2 instance that's used by the AWS Cloud9 integrated development environment (IDE)","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}],"permissionOnly":true},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"environment"}],"description":"Grants permission to add tags to a cloud9 environment","accessLevel":"Tagging","resourceTypes":[{"name":"environment","required":true}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"environment"}],"description":"Grants permission to remove tags from a cloud9 environment","accessLevel":"Tagging","resourceTypes":[{"name":"environment","required":true}]},"UpdateEnvironment":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to change the settings of an existing AWS Cloud9 development environment","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}]},"UpdateEnvironmentMembership":{"conditionKeys":["cloud9:EnvironmentId","cloud9:Permissions","cloud9:UserArn"],"resources":[{"name":"environment"}],"description":"Grants permission to change the settings of an existing environment member for an AWS Cloud9 development environment","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}]},"UpdateEnvironmentSettings":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to update the AWS Cloud9 IDE settings for a specified development environment","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}],"permissionOnly":true},"UpdateMembershipSettings":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to update the AWS Cloud9 IDE settings for a specified environment member","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}],"permissionOnly":true},"UpdateSSHRemote":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to update details about the connection to the SSH development environment, including host, user, and port","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}],"permissionOnly":true},"UpdateUserSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to update IDE-specific settings of an AWS Cloud9 user","accessLevel":"Write","resourceTypes":[],"permissionOnly":true}},"resources":[{"name":"environment","arnFormats":["arn:${Partition}:cloud9:${Region}:${Account}:environment:${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"},"cloud9:EnvironmentId":{"types":["String"],"description":"Filters access by the AWS Cloud9 environment ID"},"cloud9:EnvironmentName":{"types":["String"],"description":"Filters access by the AWS Cloud9 environment name"},"cloud9:InstanceType":{"types":["String"],"description":"Filters access by the instance type of the AWS Cloud9 environment's Amazon EC2 instance"},"cloud9:OwnerArn":{"types":["ARN"],"description":"Filters access by the owner ARN specified"},"cloud9:Permissions":{"types":["String"],"description":"Filters access by the type of AWS Cloud9 permissions"},"cloud9:SubnetId":{"types":["String"],"description":"Filters access by the subnet ID that the AWS Cloud9 environment will be created in"},"cloud9:UserArn":{"types":["ARN"],"description":"Filters access by the user ARN specified"}}}
+{"name":"cloud9","actions":{"ActivateEC2Remote":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to start the Amazon EC2 instance that your AWS Cloud9 IDE connects to","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/user-guide/security-iam.html#auth-and-access-control-ref-matrix","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-ActivateEC2Remote"},"CreateEnvironmentEC2":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","cloud9:EnvironmentName","cloud9:InstanceType","cloud9:OwnerArn","cloud9:SubnetId","cloud9:UserArn"],"resources":[],"description":"Grants permission to create an AWS Cloud9 development environment, launches an Amazon Elastic Compute Cloud (Amazon EC2) instance, and then hosts the environment on the instance","accessLevel":"Write","resourceTypes":[],"dependentActions":["ec2:DescribeSubnets","ec2:DescribeVpcs","iam:CreateServiceLinkedRole"],"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/APIReference/API_CreateEnvironmentEC2.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-CreateEnvironmentEC2"},"CreateEnvironmentMembership":{"conditionKeys":["cloud9:EnvironmentId","cloud9:Permissions","cloud9:UserArn"],"resources":[{"name":"environment"}],"description":"Grants permission to add an environment member to an AWS Cloud9 development environment","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/APIReference/API_CreateEnvironmentMembership.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-CreateEnvironmentMembership"},"CreateEnvironmentSSH":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","cloud9:EnvironmentName","cloud9:OwnerArn"],"resources":[],"description":"Grants permission to create an AWS Cloud9 SSH development environment","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/user-guide/security-iam.html#auth-and-access-control-ref-matrix","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-CreateEnvironmentSSH"},"CreateEnvironmentToken":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to create an authentication token that allows a connection between the AWS Cloud9 IDE and the user's environment","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/user-guide/security-iam.html#auth-and-access-control-ref-matrix","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-CreateEnvironmentToken"},"DeleteEnvironment":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to delete an AWS Cloud9 development environment. If the environment is hosted on an Amazon Elastic Compute Cloud (Amazon EC2) instance, also terminates the instance","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"],"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/APIReference/API_DeleteEnvironment.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-DeleteEnvironment"},"DeleteEnvironmentMembership":{"conditionKeys":["cloud9:EnvironmentId","cloud9:UserArn"],"resources":[{"name":"environment"}],"description":"Grants permission to delete an environment member from an AWS Cloud9 development environment","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/APIReference/API_DeleteEnvironmentMembership.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-DeleteEnvironmentMembership"},"DescribeEC2Remote":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to get details about the connection to the EC2 development environment, including host, user, and port","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/user-guide/security-iam.html#auth-and-access-control-ref-matrix","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-DescribeEC2Remote"},"DescribeEnvironmentMemberships":{"conditionKeys":["cloud9:EnvironmentId","cloud9:UserArn"],"resources":[{"name":"environment"}],"description":"Grants permission to get information about environment members for an AWS Cloud9 development environment","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/APIReference/API_DescribeEnvironmentMemberships.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-DescribeEnvironmentMemberships"},"DescribeEnvironmentStatus":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to get status information for an AWS Cloud9 development environment","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/APIReference/API_DescribeEnvironmentStatus.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-DescribeEnvironmentStatus"},"DescribeEnvironments":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to get information about AWS Cloud9 development environments","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/APIReference/API_DescribeEnvironments.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-DescribeEnvironments"},"DescribeSSHRemote":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to get details about the connection to the SSH development environment, including host, user, and port","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/user-guide/security-iam.html#auth-and-access-control-ref-matrix","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-DescribeSSHRemote"},"GetEnvironmentConfig":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to get configuration information that's used to initialize the AWS Cloud9 IDE","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/user-guide/security-iam.html#auth-and-access-control-ref-matrix","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-GetEnvironmentConfig"},"GetEnvironmentSettings":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to get the AWS Cloud9 IDE settings for a specified development environment","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/user-guide/security-iam.html#auth-and-access-control-ref-matrix","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-GetEnvironmentSettings"},"GetMembershipSettings":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to get the AWS Cloud9 IDE settings for a specified environment member","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/user-guide/security-iam.html#auth-and-access-control-ref-matrix","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-GetMembershipSettings"},"GetMigrationExperiences":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the migration experience for a cloud9 user","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/user-guide/security-iam.html#auth-and-access-control-ref-matrix","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-GetMigrationExperiences"},"GetUserPublicKey":{"conditionKeys":["cloud9:UserArn"],"resources":[],"description":"Grants permission to get the user's public SSH key, which is used by AWS Cloud9 to connect to SSH development environments","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/user-guide/security-iam.html#auth-and-access-control-ref-matrix","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-GetUserPublicKey"},"GetUserSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the AWS Cloud9 IDE settings for a specified user","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/user-guide/security-iam.html#auth-and-access-control-ref-matrix","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-GetUserSettings"},"ListEnvironments":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of AWS Cloud9 development environment identifiers","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/APIReference/API_ListEnvironments.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-ListEnvironments"},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to list tags for a cloud9 environment","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-ListTagsForResource"},"ModifyTemporaryCredentialsOnEnvironmentEC2":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to set AWS managed temporary credentials on the Amazon EC2 instance that's used by the AWS Cloud9 integrated development environment (IDE)","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/user-guide/security-iam.html#auth-and-access-control-ref-matrix","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-ModifyTemporaryCredentialsOnEnvironmentEC2"},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"environment"}],"description":"Grants permission to add tags to a cloud9 environment","accessLevel":"Tagging","resourceTypes":[{"name":"environment","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-TagResource"},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"environment"}],"description":"Grants permission to remove tags from a cloud9 environment","accessLevel":"Tagging","resourceTypes":[{"name":"environment","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-UntagResource"},"UpdateEnvironment":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to change the settings of an existing AWS Cloud9 development environment","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/APIReference/API_UpdateEnvironment.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-UpdateEnvironment"},"UpdateEnvironmentMembership":{"conditionKeys":["cloud9:EnvironmentId","cloud9:Permissions","cloud9:UserArn"],"resources":[{"name":"environment"}],"description":"Grants permission to change the settings of an existing environment member for an AWS Cloud9 development environment","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/APIReference/API_UpdateEnvironmentMembership.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-UpdateEnvironmentMembership"},"UpdateEnvironmentSettings":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to update the AWS Cloud9 IDE settings for a specified development environment","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/user-guide/security-iam.html#auth-and-access-control-ref-matrix","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-UpdateEnvironmentSettings"},"UpdateMembershipSettings":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to update the AWS Cloud9 IDE settings for a specified environment member","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/user-guide/security-iam.html#auth-and-access-control-ref-matrix","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-UpdateMembershipSettings"},"UpdateSSHRemote":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to update details about the connection to the SSH development environment, including host, user, and port","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/user-guide/security-iam.html#auth-and-access-control-ref-matrix","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-UpdateSSHRemote"},"UpdateUserSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to update IDE-specific settings of an AWS Cloud9 user","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloud9/latest/user-guide/security-iam.html#auth-and-access-control-ref-matrix","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html#awscloud9-UpdateUserSettings"}},"resources":[{"name":"environment","arnFormats":["arn:${Partition}:cloud9:${Region}:${Account}:environment:${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"},"cloud9:EnvironmentId":{"types":["String"],"description":"Filters access by the AWS Cloud9 environment ID"},"cloud9:EnvironmentName":{"types":["String"],"description":"Filters access by the AWS Cloud9 environment name"},"cloud9:InstanceType":{"types":["String"],"description":"Filters access by the instance type of the AWS Cloud9 environment's Amazon EC2 instance"},"cloud9:OwnerArn":{"types":["ARN"],"description":"Filters access by the owner ARN specified"},"cloud9:Permissions":{"types":["String"],"description":"Filters access by the type of AWS Cloud9 permissions"},"cloud9:SubnetId":{"types":["String"],"description":"Filters access by the subnet ID that the AWS Cloud9 environment will be created in"},"cloud9:UserArn":{"types":["ARN"],"description":"Filters access by the user ARN specified"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html"}

package/src/data/servicereference/services/clouddirectory.json

@@ -1 +1 @@
-{"name":"clouddirectory","actions":{"AddFacetToObject":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to add a new Facet to an object","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}]},"ApplySchema":{"conditionKeys":[],"resources":[{"name":"directory"},{"name":"publishedSchema"}],"description":"Grants permission to copy input published schema into Directory with same name and version as that of published schema","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true},{"name":"publishedSchema","required":true}]},"AttachObject":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to attach an existing object to another existing object","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}]},"AttachPolicy":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to attach a policy object to any other object","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}]},"AttachToIndex":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to attach the specified object to the specified index","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}]},"AttachTypedLink":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to attach a typed link b/w a source & target object reference","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}]},"BatchRead":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to perform all the read operations in a batch. Each individual operation inside BatchRead needs to be granted permissions explicitly","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}]},"BatchWrite":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to perform all the write operations in a batch. Each individual operation inside BatchWrite needs to be granted permissions explicitly","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}]},"CreateDirectory":{"conditionKeys":[],"resources":[{"name":"publishedSchema"}],"description":"Grants permission to create a Directory by copying the published schema into the directory","accessLevel":"Write","resourceTypes":[{"name":"publishedSchema","required":true}]},"CreateFacet":{"conditionKeys":[],"resources":[{"name":"appliedSchema"},{"name":"developmentSchema"}],"description":"Grants permission to create a new Facet in a schema","accessLevel":"Write","resourceTypes":[{"name":"appliedSchema","required":true},{"name":"developmentSchema","required":true}]},"CreateIndex":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to create an index object","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}]},"CreateObject":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to create an object in a Directory","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}]},"CreateSchema":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new schema in a development state","accessLevel":"Write","resourceTypes":[]},"CreateTypedLinkFacet":{"conditionKeys":[],"resources":[{"name":"appliedSchema"},{"name":"developmentSchema"}],"description":"Grants permission to create a new Typed Link facet in a schema","accessLevel":"Write","resourceTypes":[{"name":"appliedSchema","required":true},{"name":"developmentSchema","required":true}]},"DeleteDirectory":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to delete a directory. Only disabled directories can be deleted","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}]},"DeleteFacet":{"conditionKeys":[],"resources":[{"name":"developmentSchema"}],"description":"Grants permission to delete a given Facet. All attributes and Rules associated with the facet will be deleted","accessLevel":"Write","resourceTypes":[{"name":"developmentSchema","required":true}]},"DeleteObject":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to delete an object and its associated attributes","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}]},"DeleteSchema":{"conditionKeys":[],"resources":[{"name":"developmentSchema"},{"name":"publishedSchema"}],"description":"Grants permission to delete a given schema","accessLevel":"Write","resourceTypes":[{"name":"developmentSchema","required":true},{"name":"publishedSchema","required":true}]},"DeleteTypedLinkFacet":{"conditionKeys":[],"resources":[{"name":"developmentSchema"}],"description":"Grants permission to delete a given TypedLink Facet. All attributes and Rules associated with the facet will be deleted","accessLevel":"Write","resourceTypes":[{"name":"developmentSchema","required":true}]},"DetachFromIndex":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to detach the specified object from the specified index","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}]},"DetachObject":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to detach a given object from the parent object","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}]},"DetachPolicy":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to detach a policy from an object","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}]},"DetachTypedLink":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to detach a given typed link b/w given source and target object reference","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}]},"DisableDirectory":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to disable the specified directory","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}]},"EnableDirectory":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to enable the specified directory","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}]},"GetAppliedSchemaVersion":{"conditionKeys":[],"resources":[{"name":"appliedSchema"}],"description":"Grants permission to return current applied schema version ARN, including the minor version in use","accessLevel":"Read","resourceTypes":[{"name":"appliedSchema","required":true}]},"GetDirectory":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to retrieve metadata about a directory","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}]},"GetFacet":{"conditionKeys":[],"resources":[{"name":"appliedSchema"},{"name":"developmentSchema"},{"name":"publishedSchema"}],"description":"Grants permission to get details of the Facet, such as Facet Name, Attributes, Rules, or ObjectType","accessLevel":"Read","resourceTypes":[{"name":"appliedSchema","required":true},{"name":"developmentSchema","required":true},{"name":"publishedSchema","required":true}]},"GetLinkAttributes":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to retrieve attributes that are associated with a typed link","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}]},"GetObjectAttributes":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to retrieve attributes within a facet that are associated with an object","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}]},"GetObjectInformation":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to retrieve metadata about an object","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}]},"GetSchemaAsJson":{"conditionKeys":[],"resources":[{"name":"appliedSchema"},{"name":"developmentSchema"},{"name":"publishedSchema"}],"description":"Grants permission to retrieve a JSON representation of the schema","accessLevel":"Read","resourceTypes":[{"name":"appliedSchema","required":true},{"name":"developmentSchema","required":true},{"name":"publishedSchema","required":true}]},"GetTypedLinkFacetInformation":{"conditionKeys":[],"resources":[{"name":"appliedSchema"},{"name":"developmentSchema"},{"name":"publishedSchema"}],"description":"Grants permission to return identity attributes order information associated with a given typed link facet","accessLevel":"Read","resourceTypes":[{"name":"appliedSchema","required":true},{"name":"developmentSchema","required":true},{"name":"publishedSchema","required":true}]},"ListAppliedSchemaArns":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to list schemas applied to a directory","accessLevel":"List","resourceTypes":[{"name":"directory","required":true}]},"ListAttachedIndices":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to list indices attached to an object","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}]},"ListDevelopmentSchemaArns":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the ARNs of schemas in the development state","accessLevel":"List","resourceTypes":[]},"ListDirectories":{"conditionKeys":[],"resources":[],"description":"Grants permission to list directories created within an account","accessLevel":"List","resourceTypes":[]},"ListFacetAttributes":{"conditionKeys":[],"resources":[{"name":"appliedSchema"},{"name":"developmentSchema"},{"name":"publishedSchema"}],"description":"Grants permission to retrieve attributes attached to the facet","accessLevel":"Read","resourceTypes":[{"name":"appliedSchema","required":true},{"name":"developmentSchema","required":true},{"name":"publishedSchema","required":true}]},"ListFacetNames":{"conditionKeys":[],"resources":[{"name":"appliedSchema"},{"name":"developmentSchema"},{"name":"publishedSchema"}],"description":"Grants permission to retrieve the names of facets that exist in a schema","accessLevel":"Read","resourceTypes":[{"name":"appliedSchema","required":true},{"name":"developmentSchema","required":true},{"name":"publishedSchema","required":true}]},"ListIncomingTypedLinks":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to return a paginated list of all incoming TypedLinks for a given object","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}]},"ListIndex":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to list objects attached to the specified index","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}]},"ListManagedSchemaArns":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the major version families of each managed schema. If a major version ARN is provided as SchemaArn, the minor version revisions in that family are listed instead","accessLevel":"List","resourceTypes":[]},"ListObjectAttributes":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to list all attributes associated with an object","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}]},"ListObjectChildren":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to return a paginated list of child objects associated with a given object","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}]},"ListObjectParentPaths":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to retrieve all available parent paths for any object type such as node, leaf node, policy node, and index node objects","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}]},"ListObjectParents":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to list parent objects associated with a given object in pagination fashion","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}]},"ListObjectPolicies":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to return policies attached to an object in pagination fashion","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}]},"ListOutgoingTypedLinks":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to return a paginated list of all outgoing TypedLinks for a given object","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}]},"ListPolicyAttachments":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to return all of the ObjectIdentifiers to which a given policy is attached","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}]},"ListPublishedSchemaArns":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve published schema ARNs","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to return tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}]},"ListTypedLinkFacetAttributes":{"conditionKeys":[],"resources":[{"name":"appliedSchema"},{"name":"developmentSchema"},{"name":"publishedSchema"}],"description":"Grants permission to return a paginated list of attributes associated with typed link facet","accessLevel":"Read","resourceTypes":[{"name":"appliedSchema","required":true},{"name":"developmentSchema","required":true},{"name":"publishedSchema","required":true}]},"ListTypedLinkFacetNames":{"conditionKeys":[],"resources":[{"name":"appliedSchema"},{"name":"developmentSchema"},{"name":"publishedSchema"}],"description":"Grants permission to return a paginated list of typed link facet names that exist in a schema","accessLevel":"Read","resourceTypes":[{"name":"appliedSchema","required":true},{"name":"developmentSchema","required":true},{"name":"publishedSchema","required":true}]},"LookupPolicy":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to list all policies from the root of the Directory to the object specified","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}]},"PublishSchema":{"conditionKeys":[],"resources":[{"name":"developmentSchema"}],"description":"Grants permission to publish a development schema with a version","accessLevel":"Write","resourceTypes":[{"name":"developmentSchema","required":true}]},"PutSchemaFromJson":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a schema using JSON upload. Only available for development schemas","accessLevel":"Write","resourceTypes":[]},"RemoveFacetFromObject":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to remove the specified facet from the specified object","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}]},"TagResource":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to add tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"directory","required":true}]},"UntagResource":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to remove tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"directory","required":true}]},"UpdateFacet":{"conditionKeys":[],"resources":[{"name":"appliedSchema"},{"name":"developmentSchema"}],"description":"Grants permission to add/update/delete existing Attributes, Rules, or ObjectType of a Facet","accessLevel":"Write","resourceTypes":[{"name":"appliedSchema","required":true},{"name":"developmentSchema","required":true}]},"UpdateLinkAttributes":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to update a given typed link's attributes. Attributes to be updated must not contribute to the typed link's identity, as defined by its IdentityAttributeOrder","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}]},"UpdateObjectAttributes":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to update a given object's attributes","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}]},"UpdateSchema":{"conditionKeys":[],"resources":[{"name":"developmentSchema"}],"description":"Grants permission to update the schema name with a new name","accessLevel":"Write","resourceTypes":[{"name":"developmentSchema","required":true}]},"UpdateTypedLinkFacet":{"conditionKeys":[],"resources":[{"name":"developmentSchema"}],"description":"Grants permission to add/update/delete existing Attributes, Rules, identity attribute order of a TypedLink Facet","accessLevel":"Write","resourceTypes":[{"name":"developmentSchema","required":true}]},"UpgradeAppliedSchema":{"conditionKeys":[],"resources":[{"name":"directory"},{"name":"publishedSchema"}],"description":"Grants permission to upgrade a single directory in-place using the PublishedSchemaArn with schema updates found in MinorVersion. Backwards-compatible minor version upgrades are instantaneously available for readers on all objects in the directory","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true},{"name":"publishedSchema","required":true}]},"UpgradePublishedSchema":{"conditionKeys":[],"resources":[{"name":"developmentSchema"},{"name":"publishedSchema"}],"description":"Grants permission to upgrade a published schema under a new minor version revision using the current contents of DevelopmentSchemaArn","accessLevel":"Write","resourceTypes":[{"name":"developmentSchema","required":true},{"name":"publishedSchema","required":true}]}},"resources":[{"name":"appliedSchema","arnFormats":["arn:${Partition}:clouddirectory:${Region}:${Account}:directory/${DirectoryId}/schema/${SchemaName}/${Version}"],"conditionKeys":[]},{"name":"developmentSchema","arnFormats":["arn:${Partition}:clouddirectory:${Region}:${Account}:schema/development/${SchemaName}"],"conditionKeys":[]},{"name":"directory","arnFormats":["arn:${Partition}:clouddirectory:${Region}:${Account}:directory/${DirectoryId}"],"conditionKeys":[]},{"name":"publishedSchema","arnFormats":["arn:${Partition}:clouddirectory:${Region}:${Account}:schema/published/${SchemaName}/${Version}"],"conditionKeys":[]}],"conditionKeys":{}}
+{"name":"clouddirectory","actions":{"AddFacetToObject":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to add a new Facet to an object","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_AddFacetToObject.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-AddFacetToObject"},"ApplySchema":{"conditionKeys":[],"resources":[{"name":"directory"},{"name":"publishedSchema"}],"description":"Grants permission to copy input published schema into Directory with same name and version as that of published schema","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true},{"name":"publishedSchema","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_ApplySchema.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-ApplySchema"},"AttachObject":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to attach an existing object to another existing object","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_AttachObject.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-AttachObject"},"AttachPolicy":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to attach a policy object to any other object","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_AttachPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-AttachPolicy"},"AttachToIndex":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to attach the specified object to the specified index","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_AttachToIndex.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-AttachToIndex"},"AttachTypedLink":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to attach a typed link b/w a source & target object reference","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_AttachTypedLink.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-AttachTypedLink"},"BatchRead":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to perform all the read operations in a batch. Each individual operation inside BatchRead needs to be granted permissions explicitly","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_BatchRead.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-BatchRead"},"BatchWrite":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to perform all the write operations in a batch. Each individual operation inside BatchWrite needs to be granted permissions explicitly","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_BatchWrite.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-BatchWrite"},"CreateDirectory":{"conditionKeys":[],"resources":[{"name":"publishedSchema"}],"description":"Grants permission to create a Directory by copying the published schema into the directory","accessLevel":"Write","resourceTypes":[{"name":"publishedSchema","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_CreateDirectory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-CreateDirectory"},"CreateFacet":{"conditionKeys":[],"resources":[{"name":"appliedSchema"},{"name":"developmentSchema"}],"description":"Grants permission to create a new Facet in a schema","accessLevel":"Write","resourceTypes":[{"name":"appliedSchema","required":true},{"name":"developmentSchema","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_CreateFacet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-CreateFacet"},"CreateIndex":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to create an index object","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_CreateIndex.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-CreateIndex"},"CreateObject":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to create an object in a Directory","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_CreateObject.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-CreateObject"},"CreateSchema":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new schema in a development state","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_CreateSchema.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-CreateSchema"},"CreateTypedLinkFacet":{"conditionKeys":[],"resources":[{"name":"appliedSchema"},{"name":"developmentSchema"}],"description":"Grants permission to create a new Typed Link facet in a schema","accessLevel":"Write","resourceTypes":[{"name":"appliedSchema","required":true},{"name":"developmentSchema","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_CreateTypedLinkFacet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-CreateTypedLinkFacet"},"DeleteDirectory":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to delete a directory. Only disabled directories can be deleted","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_DeleteDirectory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-DeleteDirectory"},"DeleteFacet":{"conditionKeys":[],"resources":[{"name":"developmentSchema"}],"description":"Grants permission to delete a given Facet. All attributes and Rules associated with the facet will be deleted","accessLevel":"Write","resourceTypes":[{"name":"developmentSchema","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_DeleteFacet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-DeleteFacet"},"DeleteObject":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to delete an object and its associated attributes","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_DeleteObject.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-DeleteObject"},"DeleteSchema":{"conditionKeys":[],"resources":[{"name":"developmentSchema"},{"name":"publishedSchema"}],"description":"Grants permission to delete a given schema","accessLevel":"Write","resourceTypes":[{"name":"developmentSchema","required":true},{"name":"publishedSchema","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_DeleteSchema.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-DeleteSchema"},"DeleteTypedLinkFacet":{"conditionKeys":[],"resources":[{"name":"developmentSchema"}],"description":"Grants permission to delete a given TypedLink Facet. All attributes and Rules associated with the facet will be deleted","accessLevel":"Write","resourceTypes":[{"name":"developmentSchema","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_DeleteTypedLinkFacet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-DeleteTypedLinkFacet"},"DetachFromIndex":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to detach the specified object from the specified index","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_DetachFromIndex.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-DetachFromIndex"},"DetachObject":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to detach a given object from the parent object","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_DetachObject.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-DetachObject"},"DetachPolicy":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to detach a policy from an object","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_DetachPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-DetachPolicy"},"DetachTypedLink":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to detach a given typed link b/w given source and target object reference","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_DetachTypedLink.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-DetachTypedLink"},"DisableDirectory":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to disable the specified directory","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_DisableDirectory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-DisableDirectory"},"EnableDirectory":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to enable the specified directory","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_EnableDirectory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-EnableDirectory"},"GetAppliedSchemaVersion":{"conditionKeys":[],"resources":[{"name":"appliedSchema"}],"description":"Grants permission to return current applied schema version ARN, including the minor version in use","accessLevel":"Read","resourceTypes":[{"name":"appliedSchema","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_GetAppliedSchemaVersion.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-GetAppliedSchemaVersion"},"GetDirectory":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to retrieve metadata about a directory","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_GetDirectory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-GetDirectory"},"GetFacet":{"conditionKeys":[],"resources":[{"name":"appliedSchema"},{"name":"developmentSchema"},{"name":"publishedSchema"}],"description":"Grants permission to get details of the Facet, such as Facet Name, Attributes, Rules, or ObjectType","accessLevel":"Read","resourceTypes":[{"name":"appliedSchema","required":true},{"name":"developmentSchema","required":true},{"name":"publishedSchema","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_GetFacet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-GetFacet"},"GetLinkAttributes":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to retrieve attributes that are associated with a typed link","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_GetLinkAttributes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-GetLinkAttributes"},"GetObjectAttributes":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to retrieve attributes within a facet that are associated with an object","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_GetObjectAttributes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-GetObjectAttributes"},"GetObjectInformation":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to retrieve metadata about an object","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_GetObjectInformation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-GetObjectInformation"},"GetSchemaAsJson":{"conditionKeys":[],"resources":[{"name":"appliedSchema"},{"name":"developmentSchema"},{"name":"publishedSchema"}],"description":"Grants permission to retrieve a JSON representation of the schema","accessLevel":"Read","resourceTypes":[{"name":"appliedSchema","required":true},{"name":"developmentSchema","required":true},{"name":"publishedSchema","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_GetSchemaAsJson.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-GetSchemaAsJson"},"GetTypedLinkFacetInformation":{"conditionKeys":[],"resources":[{"name":"appliedSchema"},{"name":"developmentSchema"},{"name":"publishedSchema"}],"description":"Grants permission to return identity attributes order information associated with a given typed link facet","accessLevel":"Read","resourceTypes":[{"name":"appliedSchema","required":true},{"name":"developmentSchema","required":true},{"name":"publishedSchema","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_GetTypedLinkFacetInformation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-GetTypedLinkFacetInformation"},"ListAppliedSchemaArns":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to list schemas applied to a directory","accessLevel":"List","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_ListAppliedSchemaArns.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-ListAppliedSchemaArns"},"ListAttachedIndices":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to list indices attached to an object","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_ListAttachedIndices.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-ListAttachedIndices"},"ListDevelopmentSchemaArns":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the ARNs of schemas in the development state","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_ListDevelopmentSchemaArns.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-ListDevelopmentSchemaArns"},"ListDirectories":{"conditionKeys":[],"resources":[],"description":"Grants permission to list directories created within an account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_ListDirectories.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-ListDirectories"},"ListFacetAttributes":{"conditionKeys":[],"resources":[{"name":"appliedSchema"},{"name":"developmentSchema"},{"name":"publishedSchema"}],"description":"Grants permission to retrieve attributes attached to the facet","accessLevel":"Read","resourceTypes":[{"name":"appliedSchema","required":true},{"name":"developmentSchema","required":true},{"name":"publishedSchema","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_ListFacetAttributes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-ListFacetAttributes"},"ListFacetNames":{"conditionKeys":[],"resources":[{"name":"appliedSchema"},{"name":"developmentSchema"},{"name":"publishedSchema"}],"description":"Grants permission to retrieve the names of facets that exist in a schema","accessLevel":"Read","resourceTypes":[{"name":"appliedSchema","required":true},{"name":"developmentSchema","required":true},{"name":"publishedSchema","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_ListFacetNames.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-ListFacetNames"},"ListIncomingTypedLinks":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to return a paginated list of all incoming TypedLinks for a given object","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_ListIncomingTypedLinks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-ListIncomingTypedLinks"},"ListIndex":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to list objects attached to the specified index","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_ListIndex.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-ListIndex"},"ListManagedSchemaArns":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the major version families of each managed schema. If a major version ARN is provided as SchemaArn, the minor version revisions in that family are listed instead","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_ListManagedSchemaArns.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-ListManagedSchemaArns"},"ListObjectAttributes":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to list all attributes associated with an object","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_ListObjectAttributes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-ListObjectAttributes"},"ListObjectChildren":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to return a paginated list of child objects associated with a given object","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_ListObjectChildren.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-ListObjectChildren"},"ListObjectParentPaths":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to retrieve all available parent paths for any object type such as node, leaf node, policy node, and index node objects","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_ListObjectParentPaths.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-ListObjectParentPaths"},"ListObjectParents":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to list parent objects associated with a given object in pagination fashion","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_ListObjectParents.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-ListObjectParents"},"ListObjectPolicies":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to return policies attached to an object in pagination fashion","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_ListObjectPolicies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-ListObjectPolicies"},"ListOutgoingTypedLinks":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to return a paginated list of all outgoing TypedLinks for a given object","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_ListOutgoingTypedLinks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-ListOutgoingTypedLinks"},"ListPolicyAttachments":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to return all of the ObjectIdentifiers to which a given policy is attached","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_ListPolicyAttachments.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-ListPolicyAttachments"},"ListPublishedSchemaArns":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve published schema ARNs","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_ListPublishedSchemaArns.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-ListPublishedSchemaArns"},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to return tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-ListTagsForResource"},"ListTypedLinkFacetAttributes":{"conditionKeys":[],"resources":[{"name":"appliedSchema"},{"name":"developmentSchema"},{"name":"publishedSchema"}],"description":"Grants permission to return a paginated list of attributes associated with typed link facet","accessLevel":"Read","resourceTypes":[{"name":"appliedSchema","required":true},{"name":"developmentSchema","required":true},{"name":"publishedSchema","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_ListTypedLinkFacetAttributes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-ListTypedLinkFacetAttributes"},"ListTypedLinkFacetNames":{"conditionKeys":[],"resources":[{"name":"appliedSchema"},{"name":"developmentSchema"},{"name":"publishedSchema"}],"description":"Grants permission to return a paginated list of typed link facet names that exist in a schema","accessLevel":"Read","resourceTypes":[{"name":"appliedSchema","required":true},{"name":"developmentSchema","required":true},{"name":"publishedSchema","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_ListTypedLinkFacetNames.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-ListTypedLinkFacetNames"},"LookupPolicy":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to list all policies from the root of the Directory to the object specified","accessLevel":"Read","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_LookupPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-LookupPolicy"},"PublishSchema":{"conditionKeys":[],"resources":[{"name":"developmentSchema"}],"description":"Grants permission to publish a development schema with a version","accessLevel":"Write","resourceTypes":[{"name":"developmentSchema","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_PublishSchema.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-PublishSchema"},"PutSchemaFromJson":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a schema using JSON upload. Only available for development schemas","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_PutSchemaFromJson.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-PutSchemaFromJson"},"RemoveFacetFromObject":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to remove the specified facet from the specified object","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_RemoveFacetFromObject.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-RemoveFacetFromObject"},"TagResource":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to add tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-TagResource"},"UntagResource":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to remove tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-UntagResource"},"UpdateFacet":{"conditionKeys":[],"resources":[{"name":"appliedSchema"},{"name":"developmentSchema"}],"description":"Grants permission to add/update/delete existing Attributes, Rules, or ObjectType of a Facet","accessLevel":"Write","resourceTypes":[{"name":"appliedSchema","required":true},{"name":"developmentSchema","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_UpdateFacet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-UpdateFacet"},"UpdateLinkAttributes":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to update a given typed link's attributes. Attributes to be updated must not contribute to the typed link's identity, as defined by its IdentityAttributeOrder","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_UpdateLinkAttributes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-UpdateLinkAttributes"},"UpdateObjectAttributes":{"conditionKeys":[],"resources":[{"name":"directory"}],"description":"Grants permission to update a given object's attributes","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_UpdateObjectAttributes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-UpdateObjectAttributes"},"UpdateSchema":{"conditionKeys":[],"resources":[{"name":"developmentSchema"}],"description":"Grants permission to update the schema name with a new name","accessLevel":"Write","resourceTypes":[{"name":"developmentSchema","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_UpdateSchema.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-UpdateSchema"},"UpdateTypedLinkFacet":{"conditionKeys":[],"resources":[{"name":"developmentSchema"}],"description":"Grants permission to add/update/delete existing Attributes, Rules, identity attribute order of a TypedLink Facet","accessLevel":"Write","resourceTypes":[{"name":"developmentSchema","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_UpdateTypedLinkFacet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-UpdateTypedLinkFacet"},"UpgradeAppliedSchema":{"conditionKeys":[],"resources":[{"name":"directory"},{"name":"publishedSchema"}],"description":"Grants permission to upgrade a single directory in-place using the PublishedSchemaArn with schema updates found in MinorVersion. Backwards-compatible minor version upgrades are instantaneously available for readers on all objects in the directory","accessLevel":"Write","resourceTypes":[{"name":"directory","required":true},{"name":"publishedSchema","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_UpgradeAppliedSchema.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-UpgradeAppliedSchema"},"UpgradePublishedSchema":{"conditionKeys":[],"resources":[{"name":"developmentSchema"},{"name":"publishedSchema"}],"description":"Grants permission to upgrade a published schema under a new minor version revision using the current contents of DevelopmentSchemaArn","accessLevel":"Write","resourceTypes":[{"name":"developmentSchema","required":true},{"name":"publishedSchema","required":true}],"operationUrl":"https://docs.aws.amazon.com/directoryservice/latest/APIReference/API_UpgradePublishedSchema.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html#amazonclouddirectory-UpgradePublishedSchema"}},"resources":[{"name":"appliedSchema","arnFormats":["arn:${Partition}:clouddirectory:${Region}:${Account}:directory/${DirectoryId}/schema/${SchemaName}/${Version}"],"conditionKeys":[]},{"name":"developmentSchema","arnFormats":["arn:${Partition}:clouddirectory:${Region}:${Account}:schema/development/${SchemaName}"],"conditionKeys":[]},{"name":"directory","arnFormats":["arn:${Partition}:clouddirectory:${Region}:${Account}:directory/${DirectoryId}"],"conditionKeys":[]},{"name":"publishedSchema","arnFormats":["arn:${Partition}:clouddirectory:${Region}:${Account}:schema/published/${SchemaName}/${Version}"],"conditionKeys":[]}],"conditionKeys":{},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonclouddirectory.html"}

package/src/data/servicereference/services/cloudformation.json

@@ -1 +1 @@
-{"name":"cloudformation","actions":{"ActivateOrganizationsAccess":{"conditionKeys":[],"resources":[],"description":"Grants permission to activate trusted access between StackSets and Organizations. With trusted access between StackSets and Organizations activated, the management account has permissions to create and manage StackSets for your organization","accessLevel":"Write","resourceTypes":[]},"ActivateType":{"conditionKeys":[],"resources":[],"description":"Grants permission to activate a public third-party extension, making it available for use in stack templates","accessLevel":"Write","resourceTypes":[]},"BatchDescribeTypeConfigurations":{"conditionKeys":[],"resources":[],"description":"Grants permission to return configuration data for the specified CloudFormation extensions","accessLevel":"Read","resourceTypes":[]},"CancelResourceRequest":{"conditionKeys":[],"resources":[],"description":"Grants permission to cancel resource requests in your account","accessLevel":"Write","resourceTypes":[]},"CancelUpdateStack":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to cancel an update on the specified stack","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"ContinueUpdateRollback":{"conditionKeys":["cloudformation:RoleArn"],"resources":[{"name":"stack"}],"description":"Grants permission to continue rolling back a stack that is in the UPDATE_ROLLBACK_FAILED state to the UPDATE_ROLLBACK_COMPLETE state","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"CreateChangeSet":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","cloudformation:ChangeSetName","cloudformation:ImportResourceTypes","cloudformation:ResourceTypes","cloudformation:RoleArn","cloudformation:StackPolicyUrl","cloudformation:TemplateUrl"],"resources":[{"name":"stack"}],"description":"Grants permission to create a list of changes for a stack","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"CreateGeneratedTemplate":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a template from existing resources that are not already managed with CloudFormation","accessLevel":"Write","resourceTypes":[]},"CreateResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to create resources in your account","accessLevel":"Write","resourceTypes":[]},"CreateStack":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","cloudformation:ResourceTypes","cloudformation:RoleArn","cloudformation:StackPolicyUrl","cloudformation:TemplateUrl"],"resources":[{"name":"stack"}],"description":"Grants permission to create a stack as specified in the template","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"CreateStackInstances":{"conditionKeys":["aws:TagKeys","cloudformation:TargetRegion"],"resources":[{"name":"stackset"},{"name":"stackset-target"},{"name":"type"}],"description":"Grants permission to create stack instances for the specified accounts, within the specified regions","accessLevel":"Write","resourceTypes":[{"name":"stackset","required":true},{"name":"stackset-target","required":false},{"name":"type","required":false}]},"CreateStackRefactor":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to create a stack refactor","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"CreateStackSet":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","cloudformation:RoleArn","cloudformation:TemplateUrl"],"resources":[],"description":"Grants permission to create a stackset as specified in the template","accessLevel":"Write","resourceTypes":[]},"CreateUploadBucket":{"conditionKeys":[],"resources":[],"description":"Grants permission to upload templates to Amazon S3 buckets. Used only by the AWS CloudFormation console and is not documented in the API reference","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"DeactivateOrganizationsAccess":{"conditionKeys":[],"resources":[],"description":"Grants permission to deactivate trusted access between StackSets and Organizations. If trusted access is deactivated, the management account does not have permissions to create and manage service-managed StackSets for your organization","accessLevel":"Write","resourceTypes":[]},"DeactivateType":{"conditionKeys":[],"resources":[],"description":"Grants permission to deactivate a public extension that was previously activated in this account and region","accessLevel":"Write","resourceTypes":[]},"DeleteChangeSet":{"conditionKeys":["cloudformation:ChangeSetName"],"resources":[{"name":"stack"}],"description":"Grants permission to delete the specified change set. Deleting change sets ensures that no one executes the wrong change set","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"DeleteGeneratedTemplate":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a generated template","accessLevel":"Write","resourceTypes":[]},"DeleteResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete resources in your account","accessLevel":"Write","resourceTypes":[]},"DeleteStack":{"conditionKeys":["cloudformation:RoleArn"],"resources":[{"name":"stack"}],"description":"Grants permission to delete a specified stack","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"DeleteStackInstances":{"conditionKeys":["cloudformation:TargetRegion"],"resources":[{"name":"stackset"},{"name":"stackset-target"},{"name":"type"}],"description":"Grants permission to delete stack instances for the specified accounts, in the specified regions","accessLevel":"Write","resourceTypes":[{"name":"stackset","required":true},{"name":"stackset-target","required":false},{"name":"type","required":false}]},"DeleteStackSet":{"conditionKeys":[],"resources":[{"name":"stackset"}],"description":"Grants permission to delete a specified stackset","accessLevel":"Write","resourceTypes":[{"name":"stackset","required":true}]},"DeregisterType":{"conditionKeys":[],"resources":[],"description":"Grants permission to deregister an existing CloudFormation type or type version","accessLevel":"Write","resourceTypes":[]},"DescribeAccountLimits":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve your account's AWS CloudFormation limits","accessLevel":"Read","resourceTypes":[]},"DescribeChangeSet":{"conditionKeys":["cloudformation:ChangeSetName"],"resources":[{"name":"stack"}],"description":"Grants permission to return the description for the specified change set","accessLevel":"Read","resourceTypes":[{"name":"stack","required":true}]},"DescribeChangeSetHooks":{"conditionKeys":["cloudformation:ChangeSetName"],"resources":[{"name":"stack"}],"description":"Grants permission to return the Hook invocation information for the specified change set","accessLevel":"Read","resourceTypes":[{"name":"stack","required":true}]},"DescribeEvents":{"conditionKeys":[],"resources":[{"name":"changeset"},{"name":"stack"}],"description":"Grants permission to return all related events for a specified operation","accessLevel":"Read","resourceTypes":[{"name":"changeset","required":false},{"name":"stack","required":false}]},"DescribeGeneratedTemplate":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe a generated template. The output includes details about the progress of the creation of a generated template","accessLevel":"Read","resourceTypes":[]},"DescribeOrganizationsAccess":{"conditionKeys":[],"resources":[],"description":"Grants permission to return information about the account's OrganizationAccess status","accessLevel":"Read","resourceTypes":[]},"DescribePublisher":{"conditionKeys":[],"resources":[],"description":"Grants permission to return information about a CloudFormation extension publisher","accessLevel":"Read","resourceTypes":[]},"DescribeResourceScan":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe details of a resource scan","accessLevel":"Read","resourceTypes":[]},"DescribeStackDriftDetectionStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to return information about a stack drift detection operation","accessLevel":"Read","resourceTypes":[]},"DescribeStackEvents":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return all stack related events for a specified stack","accessLevel":"Read","resourceTypes":[{"name":"stack","required":true}]},"DescribeStackInstance":{"conditionKeys":[],"resources":[{"name":"stackset"}],"description":"Grants permission to return the stack instance that's associated with the specified stack set, AWS account, and region","accessLevel":"Read","resourceTypes":[{"name":"stackset","required":true}]},"DescribeStackRefactor":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return the description for the specified stack refactor","accessLevel":"Read","resourceTypes":[{"name":"stack","required":true}]},"DescribeStackResource":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return a description of the specified resource in the specified stack","accessLevel":"Read","resourceTypes":[{"name":"stack","required":true}]},"DescribeStackResourceDrifts":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return drift information for the resources that have been checked for drift in the specified stack","accessLevel":"Read","resourceTypes":[{"name":"stack","required":true}]},"DescribeStackResources":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return AWS resource descriptions for running and deleted stacks","accessLevel":"Read","resourceTypes":[{"name":"stack","required":true}]},"DescribeStackSet":{"conditionKeys":[],"resources":[{"name":"stackset"}],"description":"Grants permission to return the description of the specified stack set","accessLevel":"Read","resourceTypes":[{"name":"stackset","required":true}]},"DescribeStackSetOperation":{"conditionKeys":[],"resources":[{"name":"stackset"}],"description":"Grants permission to return the description of the specified stack set operation","accessLevel":"Read","resourceTypes":[{"name":"stackset","required":true}]},"DescribeStacks":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return the description for the specified stack, and to all stacks when used in combination with the ListStacks action","accessLevel":"List","resourceTypes":[{"name":"stack","required":false}],"dependentActions":["cloudformation:ListStacks"]},"DescribeType":{"conditionKeys":[],"resources":[],"description":"Grants permission to return information about the CloudFormation type requested","accessLevel":"Read","resourceTypes":[]},"DescribeTypeRegistration":{"conditionKeys":[],"resources":[],"description":"Grants permission to return information about the registration process for a CloudFormation type","accessLevel":"Read","resourceTypes":[]},"DetectStackDrift":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to detects whether a stack's actual configuration differs, or has drifted, from it's expected configuration, as defined in the stack template and any values specified as template parameters","accessLevel":"Read","resourceTypes":[{"name":"stack","required":true}]},"DetectStackResourceDrift":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return information about whether a resource's actual configuration differs, or has drifted, from it's expected configuration, as defined in the stack template and any values specified as template parameters","accessLevel":"Read","resourceTypes":[{"name":"stack","required":true}]},"DetectStackSetDrift":{"conditionKeys":[],"resources":[{"name":"stackset"}],"description":"Grants permission to enable users to detect drift on a stack set and the stack instances that belong to that stack set","accessLevel":"Read","resourceTypes":[{"name":"stackset","required":true}]},"EstimateTemplateCost":{"conditionKeys":["cloudformation:TemplateUrl"],"resources":[],"description":"Grants permission to return the estimated monthly cost of a template","accessLevel":"Read","resourceTypes":[]},"ExecuteChangeSet":{"conditionKeys":["cloudformation:ChangeSetName"],"resources":[{"name":"stack"}],"description":"Grants permission to update a stack using the input information that was provided when the specified change set was created","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"ExecuteStackRefactor":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to execute a stack refactor using the input information that was provided when the specified stack refactor was created","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"GetGeneratedTemplate":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a generated template","accessLevel":"Read","resourceTypes":[]},"GetHookResult":{"conditionKeys":["cloudformation:TypeArn"],"resources":[],"description":"Grants permission to return detailed information about a specific hook invocation result","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"GetResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to get resources in your account","accessLevel":"Read","resourceTypes":[]},"GetResourceRequestStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to get resource requests in your account","accessLevel":"Read","resourceTypes":[]},"GetStackPolicy":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return the stack policy for a specified stack","accessLevel":"Read","resourceTypes":[{"name":"stack","required":true}]},"GetTemplate":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return the template body for a specified stack","accessLevel":"Read","resourceTypes":[{"name":"stack","required":true}]},"GetTemplateSummary":{"conditionKeys":["cloudformation:TemplateUrl"],"resources":[{"name":"stack"},{"name":"stackset"}],"description":"Grants permission to return information about a new or existing template","accessLevel":"Read","resourceTypes":[{"name":"stack","required":false},{"name":"stackset","required":false}]},"ImportStacksToStackSet":{"conditionKeys":[],"resources":[{"name":"stackset"}],"description":"Grants permission to enable users to import existing stacks to a new or existing stackset","accessLevel":"Write","resourceTypes":[{"name":"stackset","required":true}]},"ListAllHookResults":{"conditionKeys":["cloudformation:TypeArn"],"resources":[],"description":"Grants permission to return Hook invocations result information for a specified Hook, a combination of Hook and status, or all Hooks","accessLevel":"List","resourceTypes":[]},"ListChangeSets":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return the ID and status of each active change set for a stack. For example, AWS CloudFormation lists change sets that are in the CREATE_IN_PROGRESS or CREATE_PENDING state","accessLevel":"List","resourceTypes":[{"name":"stack","required":true}]},"ListExports":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all exported output values in the account and region in which you call this action","accessLevel":"List","resourceTypes":[]},"ListGeneratedTemplates":{"conditionKeys":[],"resources":[],"description":"Grants permission to list your generated templates in this Region","accessLevel":"List","resourceTypes":[]},"ListHookResults":{"conditionKeys":["cloudformation:ChangeSetName"],"resources":[{"name":"stack"}],"description":"Grants permission to return Hook invocations result information for the specified target","accessLevel":"List","resourceTypes":[{"name":"stack","required":false}]},"ListImports":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all stacks that are importing an exported output value","accessLevel":"List","resourceTypes":[]},"ListResourceRequests":{"conditionKeys":[],"resources":[],"description":"Grants permission to list resource requests in your account","accessLevel":"Read","resourceTypes":[]},"ListResourceScanRelatedResources":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the related resources for a list of resources from a resource scan. The response indicates whether each returned resource is already managed by CloudFormation","accessLevel":"List","resourceTypes":[]},"ListResourceScanResources":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the resources from a resource scan. The results can be filtered by resource identifier, resource type prefix, tag key, and tag value","accessLevel":"List","resourceTypes":[]},"ListResourceScans":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the resource scans from newest to oldest. By default it will return up to 10 resource scans","accessLevel":"List","resourceTypes":[]},"ListResources":{"conditionKeys":[],"resources":[],"description":"Grants permission to list resources in your account","accessLevel":"Read","resourceTypes":[]},"ListStackInstanceResourceDrifts":{"conditionKeys":[],"resources":[{"name":"stackset"}],"description":"Grants permission to return drift information for the resources that have been checked for drift in the specified stack instance","accessLevel":"List","resourceTypes":[{"name":"stackset","required":true}]},"ListStackInstances":{"conditionKeys":[],"resources":[{"name":"stackset"}],"description":"Grants permission to return summary information about stack instances that are associated with the specified stack set","accessLevel":"List","resourceTypes":[{"name":"stackset","required":true}]},"ListStackRefactorActions":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return the list of actions of the specified stack refactor","accessLevel":"List","resourceTypes":[{"name":"stack","required":true}]},"ListStackRefactors":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return the ID and status of each active stack refactor","accessLevel":"List","resourceTypes":[{"name":"stack","required":true}]},"ListStackResources":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return descriptions of all resources of the specified stack","accessLevel":"List","resourceTypes":[{"name":"stack","required":true}]},"ListStackSetAutoDeploymentTargets":{"conditionKeys":[],"resources":[{"name":"stackset"}],"description":"Grants permission to return summary information about StackSet Auto Deployment Targets","accessLevel":"List","resourceTypes":[{"name":"stackset","required":true}]},"ListStackSetOperationResults":{"conditionKeys":[],"resources":[{"name":"stackset"}],"description":"Grants permission to return summary information about the results of a stack set operation","accessLevel":"List","resourceTypes":[{"name":"stackset","required":true}]},"ListStackSetOperations":{"conditionKeys":[],"resources":[{"name":"stackset"}],"description":"Grants permission to return summary information about operations performed on a stack set","accessLevel":"List","resourceTypes":[{"name":"stackset","required":true}]},"ListStackSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to return summary information about stack sets that are associated with the user","accessLevel":"List","resourceTypes":[]},"ListStacks":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the summary information for stacks whose status matches the specified StackStatusFilter. In combination with the DescribeStacks action, grants permission to list descriptions for stacks","accessLevel":"List","resourceTypes":[]},"ListTypeRegistrations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list CloudFormation type registration attempts","accessLevel":"List","resourceTypes":[]},"ListTypeVersions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list versions of a particular CloudFormation type","accessLevel":"List","resourceTypes":[]},"ListTypes":{"conditionKeys":[],"resources":[],"description":"Grants permission to list available CloudFormation types","accessLevel":"List","resourceTypes":[]},"PublishType":{"conditionKeys":[],"resources":[],"description":"Grants permission to publish the specified extension to the CloudFormation registry as a public extension in this region","accessLevel":"Write","resourceTypes":[]},"RecordHandlerProgress":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to record the handler progress","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"RegisterPublisher":{"conditionKeys":[],"resources":[],"description":"Grants permission to register account as a publisher of public extensions in the CloudFormation registry","accessLevel":"Write","resourceTypes":[]},"RegisterType":{"conditionKeys":[],"resources":[],"description":"Grants permission to register a new CloudFormation type","accessLevel":"Write","resourceTypes":[]},"RollbackStack":{"conditionKeys":["cloudformation:RoleArn"],"resources":[{"name":"stack"}],"description":"Grants permission to rollback the stack to the last stable state","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"SetStackPolicy":{"conditionKeys":["cloudformation:StackPolicyUrl"],"resources":[{"name":"stack"}],"description":"Grants permission to set a stack policy for a specified stack","accessLevel":"Permissions management","resourceTypes":[{"name":"stack","required":true}]},"SetTypeConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to set the configuration data for a registered CloudFormation extension, in the given account and region","accessLevel":"Write","resourceTypes":[]},"SetTypeDefaultVersion":{"conditionKeys":[],"resources":[],"description":"Grants permission to set which version of a CloudFormation type applies to CloudFormation operations","accessLevel":"Write","resourceTypes":[]},"SignalResource":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to send a signal to the specified resource with a success or failure status","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"StartResourceScan":{"conditionKeys":[],"resources":[],"description":"Grants permission to start a scan of the resources in this account in this Region","accessLevel":"Write","resourceTypes":[]},"StopStackSetOperation":{"conditionKeys":[],"resources":[{"name":"stackset"}],"description":"Grants permission to stop an in-progress operation on a stack set and its associated stack instances","accessLevel":"Write","resourceTypes":[{"name":"stackset","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","cloudformation:CreateAction"],"resources":[{"name":"changeset"},{"name":"stack"},{"name":"stackset"}],"description":"Grants permission to tag cloudformation resources","accessLevel":"Tagging","resourceTypes":[{"name":"changeset","required":false},{"name":"stack","required":false},{"name":"stackset","required":false}]},"TestType":{"conditionKeys":[],"resources":[],"description":"Grants permission to test a registered extension to make sure it meets all necessary requirements for being published in the CloudFormation registry","accessLevel":"Write","resourceTypes":[]},"UntagResource":{"conditionKeys":["aws:TagKeys","cloudformation:CreateAction"],"resources":[{"name":"changeset"},{"name":"stack"},{"name":"stackset"}],"description":"Grants permission to untag cloudformation resources","accessLevel":"Tagging","resourceTypes":[{"name":"changeset","required":false},{"name":"stack","required":false},{"name":"stackset","required":false}]},"UpdateGeneratedTemplate":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a generated template. This can be used to change the name, add and remove resources, refresh resources, and change the DeletionPolicy and UpdateReplacePolicy settings","accessLevel":"Write","resourceTypes":[]},"UpdateResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to update resources in your account","accessLevel":"Write","resourceTypes":[]},"UpdateStack":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","cloudformation:ResourceTypes","cloudformation:RoleArn","cloudformation:StackPolicyUrl","cloudformation:TemplateUrl"],"resources":[{"name":"stack"}],"description":"Grants permission to update a stack as specified in the template","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"UpdateStackInstances":{"conditionKeys":["cloudformation:TargetRegion"],"resources":[{"name":"stackset"},{"name":"stackset-target"},{"name":"type"}],"description":"Grants permission to update the parameter values for stack instances for the specified accounts, within the specified regions","accessLevel":"Write","resourceTypes":[{"name":"stackset","required":true},{"name":"stackset-target","required":false},{"name":"type","required":false}]},"UpdateStackSet":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","cloudformation:RoleArn","cloudformation:TargetRegion","cloudformation:TemplateUrl"],"resources":[{"name":"stackset"},{"name":"stackset-target"},{"name":"type"}],"description":"Grants permission to update a stackset as specified in the template","accessLevel":"Write","resourceTypes":[{"name":"stackset","required":true},{"name":"stackset-target","required":false},{"name":"type","required":false}]},"UpdateTerminationProtection":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to update termination protection for the specified stack","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"ValidateTemplate":{"conditionKeys":["cloudformation:TemplateUrl"],"resources":[],"description":"Grants permission to validate a specified template","accessLevel":"Read","resourceTypes":[]}},"resources":[{"name":"changeset","arnFormats":["arn:${Partition}:cloudformation:${Region}:${Account}:changeSet/${ChangeSetName}/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"generatedtemplate","arnFormats":["arn:${Partition}:cloudformation:${Region}:${Account}:generatedTemplate/${Id}"],"conditionKeys":[]},{"name":"resourcescan","arnFormats":["arn:${Partition}:cloudformation:${Region}:${Account}:resourceScan/${Id}"],"conditionKeys":[]},{"name":"stack","arnFormats":["arn:${Partition}:cloudformation:${Region}:${Account}:stack/${StackName}/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"stackset","arnFormats":["arn:${Partition}:cloudformation:${Region}:${Account}:stackset/${StackSetName}:${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"stackset-target","arnFormats":["arn:${Partition}:cloudformation:${Region}:${Account}:stackset-target/${StackSetTarget}"],"conditionKeys":[]},{"name":"type","arnFormats":["arn:${Partition}:cloudformation:${Region}:${Account}:type/resource/${Type}"],"conditionKeys":[]},{"name":"typeHook","arnFormats":["arn:${Partition}:cloudformation:${Region}:${Account}:type/hook/${Type}"],"conditionKeys":[]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"cloudformation:ChangeSetName":{"types":["String"],"description":"Filters access by an AWS CloudFormation change set name. Use to control which change sets IAM users can execute or delete"},"cloudformation:CreateAction":{"types":["String"],"description":"Filters access by the name of a resource-mutating API action. Use to control which APIs IAM users can use to add or remove tags on a stack or stack set"},"cloudformation:ImportResourceTypes":{"types":["String"],"description":"Filters access by the template resource types, such as AWS::EC2::Instance. Use to control which resource types IAM users can work with when they want to import a resource into a stack"},"cloudformation:ResourceTypes":{"types":["ArrayOfString"],"description":"Filters access by the template resource types, such as AWS::EC2::Instance. Use to control which resource types IAM users can work with when they create or update a stack"},"cloudformation:RoleArn":{"types":["ARN"],"description":"Filters access by the ARN of an IAM service role. Use to control which service role IAM users can use to work with stacks or change sets"},"cloudformation:StackPolicyUrl":{"types":["String"],"description":"Filters access by an Amazon S3 stack policy URL. Use to control which stack policies IAM users can associate with a stack during a create or update stack action"},"cloudformation:TargetRegion":{"types":["ArrayOfString"],"description":"Filters access by stack set target region. Use to control which regions IAM users can use when they create or update stack sets"},"cloudformation:TemplateUrl":{"types":["String"],"description":"Filters access by an Amazon S3 template URL. Use to control which templates IAM users can use when they create or update stacks"},"cloudformation:TypeArn":{"types":["ARN"],"description":"Filters access by the ARN of a CloudFormation extension"}}}
+{"name":"cloudformation","actions":{"ActivateOrganizationsAccess":{"conditionKeys":[],"resources":[],"description":"Grants permission to activate trusted access between StackSets and Organizations. With trusted access between StackSets and Organizations activated, the management account has permissions to create and manage StackSets for your organization","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ActivateOrganizationsAccess.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ActivateOrganizationsAccess"},"ActivateType":{"conditionKeys":[],"resources":[],"description":"Grants permission to activate a public third-party extension, making it available for use in stack templates","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ActivateType.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ActivateType"},"BatchDescribeTypeConfigurations":{"conditionKeys":[],"resources":[],"description":"Grants permission to return configuration data for the specified CloudFormation extensions","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_BatchDescribeTypeConfigurations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-BatchDescribeTypeConfigurations"},"CancelResourceRequest":{"conditionKeys":[],"resources":[],"description":"Grants permission to cancel resource requests in your account","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudcontrolapi/latest/APIReference/API_CancelResourceRequest.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudcontrolapi.html#awscloudcontrolapi-CancelResourceRequest"},"CancelUpdateStack":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to cancel an update on the specified stack","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_CancelUpdateStack.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-CancelUpdateStack"},"ContinueUpdateRollback":{"conditionKeys":["cloudformation:RoleArn"],"resources":[{"name":"stack"}],"description":"Grants permission to continue rolling back a stack that is in the UPDATE_ROLLBACK_FAILED state to the UPDATE_ROLLBACK_COMPLETE state","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ContinueUpdateRollback.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ContinueUpdateRollback"},"CreateChangeSet":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","cloudformation:ChangeSetName","cloudformation:ImportResourceTypes","cloudformation:ResourceTypes","cloudformation:RoleArn","cloudformation:StackPolicyUrl","cloudformation:TemplateUrl"],"resources":[{"name":"stack"}],"description":"Grants permission to create a list of changes for a stack","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_CreateChangeSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-CreateChangeSet"},"CreateGeneratedTemplate":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a template from existing resources that are not already managed with CloudFormation","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_CreateGeneratedTemplate.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-CreateGeneratedTemplate"},"CreateResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to create resources in your account","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudcontrolapi/latest/APIReference/API_CreateResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudcontrolapi.html#awscloudcontrolapi-CreateResource"},"CreateStack":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","cloudformation:ResourceTypes","cloudformation:RoleArn","cloudformation:StackPolicyUrl","cloudformation:TemplateUrl"],"resources":[{"name":"stack"}],"description":"Grants permission to create a stack as specified in the template","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_CreateStack.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-CreateStack"},"CreateStackInstances":{"conditionKeys":["aws:TagKeys","cloudformation:TargetRegion"],"resources":[{"name":"stackset"},{"name":"stackset-target"},{"name":"type"}],"description":"Grants permission to create stack instances for the specified accounts, within the specified regions","accessLevel":"Write","resourceTypes":[{"name":"stackset","required":true},{"name":"stackset-target","required":false},{"name":"type","required":false}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_CreateStackInstances.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-CreateStackInstances"},"CreateStackRefactor":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to create a stack refactor","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_CreateStackRefactor.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-CreateStackRefactor"},"CreateStackSet":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","cloudformation:RoleArn","cloudformation:TemplateUrl"],"resources":[],"description":"Grants permission to create a stackset as specified in the template","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_CreateStackSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-CreateStackSet"},"CreateUploadBucket":{"conditionKeys":[],"resources":[],"description":"Grants permission to upload templates to Amazon S3 buckets. Used only by the AWS CloudFormation console and is not documented in the API reference","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-CreateUploadBucket"},"DeactivateOrganizationsAccess":{"conditionKeys":[],"resources":[],"description":"Grants permission to deactivate trusted access between StackSets and Organizations. If trusted access is deactivated, the management account does not have permissions to create and manage service-managed StackSets for your organization","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DeactivateOrganizationsAccess.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DeactivateOrganizationsAccess"},"DeactivateType":{"conditionKeys":[],"resources":[],"description":"Grants permission to deactivate a public extension that was previously activated in this account and region","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DeactivateType.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DeactivateType"},"DeleteChangeSet":{"conditionKeys":["cloudformation:ChangeSetName"],"resources":[{"name":"stack"}],"description":"Grants permission to delete the specified change set. Deleting change sets ensures that no one executes the wrong change set","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DeleteChangeSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DeleteChangeSet"},"DeleteGeneratedTemplate":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a generated template","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DeleteGeneratedTemplate.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DeleteGeneratedTemplate"},"DeleteResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete resources in your account","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudcontrolapi/latest/APIReference/API_DeleteResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudcontrolapi.html#awscloudcontrolapi-DeleteResource"},"DeleteStack":{"conditionKeys":["cloudformation:RoleArn"],"resources":[{"name":"stack"}],"description":"Grants permission to delete a specified stack","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DeleteStack.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DeleteStack"},"DeleteStackInstances":{"conditionKeys":["cloudformation:TargetRegion"],"resources":[{"name":"stackset"},{"name":"stackset-target"},{"name":"type"}],"description":"Grants permission to delete stack instances for the specified accounts, in the specified regions","accessLevel":"Write","resourceTypes":[{"name":"stackset","required":true},{"name":"stackset-target","required":false},{"name":"type","required":false}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DeleteStackInstances.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DeleteStackInstances"},"DeleteStackSet":{"conditionKeys":[],"resources":[{"name":"stackset"}],"description":"Grants permission to delete a specified stackset","accessLevel":"Write","resourceTypes":[{"name":"stackset","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DeleteStackSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DeleteStackSet"},"DeregisterType":{"conditionKeys":[],"resources":[],"description":"Grants permission to deregister an existing CloudFormation type or type version","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DeregisterType.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DeregisterType"},"DescribeAccountLimits":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve your account's AWS CloudFormation limits","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeAccountLimits.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DescribeAccountLimits"},"DescribeChangeSet":{"conditionKeys":["cloudformation:ChangeSetName"],"resources":[{"name":"stack"}],"description":"Grants permission to return the description for the specified change set","accessLevel":"Read","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeChangeSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DescribeChangeSet"},"DescribeChangeSetHooks":{"conditionKeys":["cloudformation:ChangeSetName"],"resources":[{"name":"stack"}],"description":"Grants permission to return the Hook invocation information for the specified change set","accessLevel":"Read","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeChangeSetHooks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DescribeChangeSetHooks"},"DescribeEvents":{"conditionKeys":[],"resources":[{"name":"changeset"},{"name":"stack"}],"description":"Grants permission to return all related events for a specified operation","accessLevel":"Read","resourceTypes":[{"name":"changeset","required":false},{"name":"stack","required":false}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeEvents.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DescribeEvents"},"DescribeGeneratedTemplate":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe a generated template. The output includes details about the progress of the creation of a generated template","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeGeneratedTemplate.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DescribeGeneratedTemplate"},"DescribeOrganizationsAccess":{"conditionKeys":[],"resources":[],"description":"Grants permission to return information about the account's OrganizationAccess status","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeOrganizationsAccess.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DescribeOrganizationsAccess"},"DescribePublisher":{"conditionKeys":[],"resources":[],"description":"Grants permission to return information about a CloudFormation extension publisher","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribePublisher.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DescribePublisher"},"DescribeResourceScan":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe details of a resource scan","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeResourceScan.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DescribeResourceScan"},"DescribeStackDriftDetectionStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to return information about a stack drift detection operation","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeStackDriftDetectionStatus.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DescribeStackDriftDetectionStatus"},"DescribeStackEvents":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return all stack related events for a specified stack","accessLevel":"Read","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeStackEvents.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DescribeStackEvents"},"DescribeStackInstance":{"conditionKeys":[],"resources":[{"name":"stackset"}],"description":"Grants permission to return the stack instance that's associated with the specified stack set, AWS account, and region","accessLevel":"Read","resourceTypes":[{"name":"stackset","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeStackInstance.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DescribeStackInstance"},"DescribeStackRefactor":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return the description for the specified stack refactor","accessLevel":"Read","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeStackRefactor.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DescribeStackRefactor"},"DescribeStackResource":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return a description of the specified resource in the specified stack","accessLevel":"Read","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeStackResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DescribeStackResource"},"DescribeStackResourceDrifts":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return drift information for the resources that have been checked for drift in the specified stack","accessLevel":"Read","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeStackResourceDrifts.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DescribeStackResourceDrifts"},"DescribeStackResources":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return AWS resource descriptions for running and deleted stacks","accessLevel":"Read","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeStackResources.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DescribeStackResources"},"DescribeStackSet":{"conditionKeys":[],"resources":[{"name":"stackset"}],"description":"Grants permission to return the description of the specified stack set","accessLevel":"Read","resourceTypes":[{"name":"stackset","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeStackSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DescribeStackSet"},"DescribeStackSetOperation":{"conditionKeys":[],"resources":[{"name":"stackset"}],"description":"Grants permission to return the description of the specified stack set operation","accessLevel":"Read","resourceTypes":[{"name":"stackset","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeStackSetOperation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DescribeStackSetOperation"},"DescribeStacks":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return the description for the specified stack, and to all stacks when used in combination with the ListStacks action","accessLevel":"List","resourceTypes":[{"name":"stack","required":false}],"dependentActions":["cloudformation:ListStacks"],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeStacks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DescribeStacks"},"DescribeType":{"conditionKeys":[],"resources":[],"description":"Grants permission to return information about the CloudFormation type requested","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeType.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DescribeType"},"DescribeTypeRegistration":{"conditionKeys":[],"resources":[],"description":"Grants permission to return information about the registration process for a CloudFormation type","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeTypeRegistration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DescribeTypeRegistration"},"DetectStackDrift":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to detects whether a stack's actual configuration differs, or has drifted, from it's expected configuration, as defined in the stack template and any values specified as template parameters","accessLevel":"Read","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DetectStackDrift.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DetectStackDrift"},"DetectStackResourceDrift":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return information about whether a resource's actual configuration differs, or has drifted, from it's expected configuration, as defined in the stack template and any values specified as template parameters","accessLevel":"Read","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DetectStackResourceDrift.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DetectStackResourceDrift"},"DetectStackSetDrift":{"conditionKeys":[],"resources":[{"name":"stackset"}],"description":"Grants permission to enable users to detect drift on a stack set and the stack instances that belong to that stack set","accessLevel":"Read","resourceTypes":[{"name":"stackset","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DetectStackSetDrift.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-DetectStackSetDrift"},"EstimateTemplateCost":{"conditionKeys":["cloudformation:TemplateUrl"],"resources":[],"description":"Grants permission to return the estimated monthly cost of a template","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_EstimateTemplateCost.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-EstimateTemplateCost"},"ExecuteChangeSet":{"conditionKeys":["cloudformation:ChangeSetName"],"resources":[{"name":"stack"}],"description":"Grants permission to update a stack using the input information that was provided when the specified change set was created","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ExecuteChangeSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ExecuteChangeSet"},"ExecuteStackRefactor":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to execute a stack refactor using the input information that was provided when the specified stack refactor was created","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ExecuteStackRefactor.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ExecuteStackRefactor"},"GetGeneratedTemplate":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a generated template","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_GetGeneratedTemplate.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-GetGeneratedTemplate"},"GetHookResult":{"conditionKeys":["cloudformation:TypeArn"],"resources":[],"description":"Grants permission to return detailed information about a specific hook invocation result","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_GetHookResult.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-GetHookResult"},"GetResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to get resources in your account","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudcontrolapi/latest/APIReference/API_GetResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudcontrolapi.html#awscloudcontrolapi-GetResource"},"GetResourceRequestStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to get resource requests in your account","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudcontrolapi/latest/APIReference/API_GetResourceRequestStatus.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudcontrolapi.html#awscloudcontrolapi-GetResourceRequestStatus"},"GetStackPolicy":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return the stack policy for a specified stack","accessLevel":"Read","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_GetStackPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-GetStackPolicy"},"GetTemplate":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return the template body for a specified stack","accessLevel":"Read","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_GetTemplate.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-GetTemplate"},"GetTemplateSummary":{"conditionKeys":["cloudformation:TemplateUrl"],"resources":[{"name":"stack"},{"name":"stackset"}],"description":"Grants permission to return information about a new or existing template","accessLevel":"Read","resourceTypes":[{"name":"stack","required":false},{"name":"stackset","required":false}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_GetTemplateSummary.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-GetTemplateSummary"},"ImportStacksToStackSet":{"conditionKeys":[],"resources":[{"name":"stackset"}],"description":"Grants permission to enable users to import existing stacks to a new or existing stackset","accessLevel":"Write","resourceTypes":[{"name":"stackset","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ImportStacksToStackSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ImportStacksToStackSet"},"ListAllHookResults":{"conditionKeys":["cloudformation:TypeArn"],"resources":[],"description":"Grants permission to return Hook invocations result information for a specified Hook, a combination of Hook and status, or all Hooks","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ListHookResults.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ListAllHookResults"},"ListChangeSets":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return the ID and status of each active change set for a stack. For example, AWS CloudFormation lists change sets that are in the CREATE_IN_PROGRESS or CREATE_PENDING state","accessLevel":"List","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ListChangeSets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ListChangeSets"},"ListExports":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all exported output values in the account and region in which you call this action","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ListExports.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ListExports"},"ListGeneratedTemplates":{"conditionKeys":[],"resources":[],"description":"Grants permission to list your generated templates in this Region","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ListGeneratedTemplates.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ListGeneratedTemplates"},"ListHookResults":{"conditionKeys":["cloudformation:ChangeSetName"],"resources":[{"name":"stack"}],"description":"Grants permission to return Hook invocations result information for the specified target","accessLevel":"List","resourceTypes":[{"name":"stack","required":false}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ListHookResults.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ListHookResults"},"ListImports":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all stacks that are importing an exported output value","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ListImports.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ListImports"},"ListResourceRequests":{"conditionKeys":[],"resources":[],"description":"Grants permission to list resource requests in your account","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudcontrolapi/latest/APIReference/API_ListResourceRequests.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudcontrolapi.html#awscloudcontrolapi-ListResourceRequests"},"ListResourceScanRelatedResources":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the related resources for a list of resources from a resource scan. The response indicates whether each returned resource is already managed by CloudFormation","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ListResourceScanRelatedResources.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ListResourceScanRelatedResources"},"ListResourceScanResources":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the resources from a resource scan. The results can be filtered by resource identifier, resource type prefix, tag key, and tag value","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ListResourceScanResources.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ListResourceScanResources"},"ListResourceScans":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the resource scans from newest to oldest. By default it will return up to 10 resource scans","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ListResourceScans.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ListResourceScans"},"ListResources":{"conditionKeys":[],"resources":[],"description":"Grants permission to list resources in your account","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudcontrolapi/latest/APIReference/API_ListResources.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudcontrolapi.html#awscloudcontrolapi-ListResources"},"ListStackInstanceResourceDrifts":{"conditionKeys":[],"resources":[{"name":"stackset"}],"description":"Grants permission to return drift information for the resources that have been checked for drift in the specified stack instance","accessLevel":"List","resourceTypes":[{"name":"stackset","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ListStackInstanceResourceDrifts.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ListStackInstanceResourceDrifts"},"ListStackInstances":{"conditionKeys":[],"resources":[{"name":"stackset"}],"description":"Grants permission to return summary information about stack instances that are associated with the specified stack set","accessLevel":"List","resourceTypes":[{"name":"stackset","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ListStackSets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ListStackInstances"},"ListStackRefactorActions":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return the list of actions of the specified stack refactor","accessLevel":"List","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ListStackRefactorActions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ListStackRefactorActions"},"ListStackRefactors":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return the ID and status of each active stack refactor","accessLevel":"List","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ListStackRefactors.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ListStackRefactors"},"ListStackResources":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return descriptions of all resources of the specified stack","accessLevel":"List","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ListStackResources.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ListStackResources"},"ListStackSetAutoDeploymentTargets":{"conditionKeys":[],"resources":[{"name":"stackset"}],"description":"Grants permission to return summary information about StackSet Auto Deployment Targets","accessLevel":"List","resourceTypes":[{"name":"stackset","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ListStackSetAutoDeploymentTargets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ListStackSetAutoDeploymentTargets"},"ListStackSetOperationResults":{"conditionKeys":[],"resources":[{"name":"stackset"}],"description":"Grants permission to return summary information about the results of a stack set operation","accessLevel":"List","resourceTypes":[{"name":"stackset","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ListStackSetOperationResults.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ListStackSetOperationResults"},"ListStackSetOperations":{"conditionKeys":[],"resources":[{"name":"stackset"}],"description":"Grants permission to return summary information about operations performed on a stack set","accessLevel":"List","resourceTypes":[{"name":"stackset","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ListStackSetOperations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ListStackSetOperations"},"ListStackSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to return summary information about stack sets that are associated with the user","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ListStackSets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ListStackSets"},"ListStacks":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the summary information for stacks whose status matches the specified StackStatusFilter. In combination with the DescribeStacks action, grants permission to list descriptions for stacks","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ListStacks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ListStacks"},"ListTypeRegistrations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list CloudFormation type registration attempts","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ListTypeRegistrations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ListTypeRegistrations"},"ListTypeVersions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list versions of a particular CloudFormation type","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ListTypeVersions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ListTypeVersions"},"ListTypes":{"conditionKeys":[],"resources":[],"description":"Grants permission to list available CloudFormation types","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ListTypes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ListTypes"},"PublishType":{"conditionKeys":[],"resources":[],"description":"Grants permission to publish the specified extension to the CloudFormation registry as a public extension in this region","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_PublishType.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-PublishType"},"RecordHandlerProgress":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to record the handler progress","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_RecordHandlerProgress.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-RecordHandlerProgress"},"RegisterPublisher":{"conditionKeys":[],"resources":[],"description":"Grants permission to register account as a publisher of public extensions in the CloudFormation registry","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_RegisterPublisher.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-RegisterPublisher"},"RegisterType":{"conditionKeys":[],"resources":[],"description":"Grants permission to register a new CloudFormation type","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_RegisterType.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-RegisterType"},"RollbackStack":{"conditionKeys":["cloudformation:RoleArn"],"resources":[{"name":"stack"}],"description":"Grants permission to rollback the stack to the last stable state","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_RollbackStack.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-RollbackStack"},"SetStackPolicy":{"conditionKeys":["cloudformation:StackPolicyUrl"],"resources":[{"name":"stack"}],"description":"Grants permission to set a stack policy for a specified stack","accessLevel":"Permissions management","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_SetStackPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-SetStackPolicy"},"SetTypeConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to set the configuration data for a registered CloudFormation extension, in the given account and region","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_SetTypeConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-SetTypeConfiguration"},"SetTypeDefaultVersion":{"conditionKeys":[],"resources":[],"description":"Grants permission to set which version of a CloudFormation type applies to CloudFormation operations","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_SetTypeDefaultVersion.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-SetTypeDefaultVersion"},"SignalResource":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to send a signal to the specified resource with a success or failure status","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_SignalResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-SignalResource"},"StartResourceScan":{"conditionKeys":[],"resources":[],"description":"Grants permission to start a scan of the resources in this account in this Region","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_StartResourceScan.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-StartResourceScan"},"StopStackSetOperation":{"conditionKeys":[],"resources":[{"name":"stackset"}],"description":"Grants permission to stop an in-progress operation on a stack set and its associated stack instances","accessLevel":"Write","resourceTypes":[{"name":"stackset","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_StopStackSetOperation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-StopStackSetOperation"},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","cloudformation:CreateAction"],"resources":[{"name":"changeset"},{"name":"stack"},{"name":"stackset"}],"description":"Grants permission to tag cloudformation resources","accessLevel":"Tagging","resourceTypes":[{"name":"changeset","required":false},{"name":"stack","required":false},{"name":"stackset","required":false}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-TagResource"},"TestType":{"conditionKeys":[],"resources":[],"description":"Grants permission to test a registered extension to make sure it meets all necessary requirements for being published in the CloudFormation registry","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_TestType.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-TestType"},"UntagResource":{"conditionKeys":["aws:TagKeys","cloudformation:CreateAction"],"resources":[{"name":"changeset"},{"name":"stack"},{"name":"stackset"}],"description":"Grants permission to untag cloudformation resources","accessLevel":"Tagging","resourceTypes":[{"name":"changeset","required":false},{"name":"stack","required":false},{"name":"stackset","required":false}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-UntagResource"},"UpdateGeneratedTemplate":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a generated template. This can be used to change the name, add and remove resources, refresh resources, and change the DeletionPolicy and UpdateReplacePolicy settings","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_UpdateGeneratedTemplate.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-UpdateGeneratedTemplate"},"UpdateResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to update resources in your account","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/cloudcontrolapi/latest/APIReference/API_UpdateResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudcontrolapi.html#awscloudcontrolapi-UpdateResource"},"UpdateStack":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","cloudformation:ResourceTypes","cloudformation:RoleArn","cloudformation:StackPolicyUrl","cloudformation:TemplateUrl"],"resources":[{"name":"stack"}],"description":"Grants permission to update a stack as specified in the template","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_UpdateStack.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-UpdateStack"},"UpdateStackInstances":{"conditionKeys":["cloudformation:TargetRegion"],"resources":[{"name":"stackset"},{"name":"stackset-target"},{"name":"type"}],"description":"Grants permission to update the parameter values for stack instances for the specified accounts, within the specified regions","accessLevel":"Write","resourceTypes":[{"name":"stackset","required":true},{"name":"stackset-target","required":false},{"name":"type","required":false}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_UpdateStackInstances.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-UpdateStackInstances"},"UpdateStackSet":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","cloudformation:RoleArn","cloudformation:TargetRegion","cloudformation:TemplateUrl"],"resources":[{"name":"stackset"},{"name":"stackset-target"},{"name":"type"}],"description":"Grants permission to update a stackset as specified in the template","accessLevel":"Write","resourceTypes":[{"name":"stackset","required":true},{"name":"stackset-target","required":false},{"name":"type","required":false}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_UpdateStackSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-UpdateStackSet"},"UpdateTerminationProtection":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to update termination protection for the specified stack","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_UpdateTerminationProtection.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-UpdateTerminationProtection"},"ValidateTemplate":{"conditionKeys":["cloudformation:TemplateUrl"],"resources":[],"description":"Grants permission to validate a specified template","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ValidateTemplate.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html#awscloudformation-ValidateTemplate"}},"resources":[{"name":"changeset","arnFormats":["arn:${Partition}:cloudformation:${Region}:${Account}:changeSet/${ChangeSetName}/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"generatedtemplate","arnFormats":["arn:${Partition}:cloudformation:${Region}:${Account}:generatedTemplate/${Id}"],"conditionKeys":[]},{"name":"resourcescan","arnFormats":["arn:${Partition}:cloudformation:${Region}:${Account}:resourceScan/${Id}"],"conditionKeys":[]},{"name":"stack","arnFormats":["arn:${Partition}:cloudformation:${Region}:${Account}:stack/${StackName}/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"stackset","arnFormats":["arn:${Partition}:cloudformation:${Region}:${Account}:stackset/${StackSetName}:${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"stackset-target","arnFormats":["arn:${Partition}:cloudformation:${Region}:${Account}:stackset-target/${StackSetTarget}"],"conditionKeys":[]},{"name":"type","arnFormats":["arn:${Partition}:cloudformation:${Region}:${Account}:type/resource/${Type}"],"conditionKeys":[]},{"name":"typeHook","arnFormats":["arn:${Partition}:cloudformation:${Region}:${Account}:type/hook/${Type}"],"conditionKeys":[]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"cloudformation:ChangeSetName":{"types":["String"],"description":"Filters access by an AWS CloudFormation change set name. Use to control which change sets IAM users can execute or delete"},"cloudformation:CreateAction":{"types":["String"],"description":"Filters access by the name of a resource-mutating API action. Use to control which APIs IAM users can use to add or remove tags on a stack or stack set"},"cloudformation:ImportResourceTypes":{"types":["String"],"description":"Filters access by the template resource types, such as AWS::EC2::Instance. Use to control which resource types IAM users can work with when they want to import a resource into a stack"},"cloudformation:ResourceTypes":{"types":["ArrayOfString"],"description":"Filters access by the template resource types, such as AWS::EC2::Instance. Use to control which resource types IAM users can work with when they create or update a stack"},"cloudformation:RoleArn":{"types":["ARN"],"description":"Filters access by the ARN of an IAM service role. Use to control which service role IAM users can use to work with stacks or change sets"},"cloudformation:StackPolicyUrl":{"types":["String"],"description":"Filters access by an Amazon S3 stack policy URL. Use to control which stack policies IAM users can associate with a stack during a create or update stack action"},"cloudformation:TargetRegion":{"types":["ArrayOfString"],"description":"Filters access by stack set target region. Use to control which regions IAM users can use when they create or update stack sets"},"cloudformation:TemplateUrl":{"types":["String"],"description":"Filters access by an Amazon S3 template URL. Use to control which templates IAM users can use when they create or update stacks"},"cloudformation:TypeArn":{"types":["ARN"],"description":"Filters access by the ARN of a CloudFormation extension"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudformation.html"}

package/src/data/servicereference/services/cloudfront-keyvaluestore.json

@@ -1 +1 @@
-{"name":"cloudfront-keyvaluestore","actions":{"DeleteKey":{"conditionKeys":[],"resources":[{"name":"key-value-store"}],"description":"Grants permission to delete the key value pair specified by the key","accessLevel":"Write","resourceTypes":[{"name":"key-value-store","required":true}]},"DescribeKeyValueStore":{"conditionKeys":[],"resources":[{"name":"key-value-store"}],"description":"Grants permission to return metadata information about Key Value Store","accessLevel":"Read","resourceTypes":[{"name":"key-value-store","required":true}]},"GetKey":{"conditionKeys":[],"resources":[{"name":"key-value-store"}],"description":"Grants permission to return a key value pair","accessLevel":"Read","resourceTypes":[{"name":"key-value-store","required":true}]},"ListKeys":{"conditionKeys":[],"resources":[{"name":"key-value-store"}],"description":"Grants permission to returns a list of key value pairs","accessLevel":"List","resourceTypes":[{"name":"key-value-store","required":true}]},"PutKey":{"conditionKeys":[],"resources":[{"name":"key-value-store"}],"description":"Grants permission to create a new key value pair or replace the value of an existing key","accessLevel":"Write","resourceTypes":[{"name":"key-value-store","required":true}]},"UpdateKeys":{"conditionKeys":[],"resources":[{"name":"key-value-store"}],"description":"Grants permission to put or delete multiple key value pairs in a single, all-or-nothing operation","accessLevel":"Write","resourceTypes":[{"name":"key-value-store","required":true}]}},"resources":[{"name":"key-value-store","arnFormats":["arn:${Partition}:cloudfront::${Account}:key-value-store/${ResourceId}"],"conditionKeys":[]}],"conditionKeys":{}}
+{"name":"cloudfront-keyvaluestore","actions":{"DeleteKey":{"conditionKeys":[],"resources":[{"name":"key-value-store"}],"description":"Grants permission to delete the key value pair specified by the key","accessLevel":"Write","resourceTypes":[{"name":"key-value-store","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_kvs_DeleteKey.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfrontkeyvaluestore.html#amazoncloudfrontkeyvaluestore-DeleteKey"},"DescribeKeyValueStore":{"conditionKeys":[],"resources":[{"name":"key-value-store"}],"description":"Grants permission to return metadata information about Key Value Store","accessLevel":"Read","resourceTypes":[{"name":"key-value-store","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_kvs_DescribeKeyValueStore.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfrontkeyvaluestore.html#amazoncloudfrontkeyvaluestore-DescribeKeyValueStore"},"GetKey":{"conditionKeys":[],"resources":[{"name":"key-value-store"}],"description":"Grants permission to return a key value pair","accessLevel":"Read","resourceTypes":[{"name":"key-value-store","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_kvs_GetKey.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfrontkeyvaluestore.html#amazoncloudfrontkeyvaluestore-GetKey"},"ListKeys":{"conditionKeys":[],"resources":[{"name":"key-value-store"}],"description":"Grants permission to returns a list of key value pairs","accessLevel":"List","resourceTypes":[{"name":"key-value-store","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_kvs_ListKeys.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfrontkeyvaluestore.html#amazoncloudfrontkeyvaluestore-ListKeys"},"PutKey":{"conditionKeys":[],"resources":[{"name":"key-value-store"}],"description":"Grants permission to create a new key value pair or replace the value of an existing key","accessLevel":"Write","resourceTypes":[{"name":"key-value-store","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_kvs_PutKey.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfrontkeyvaluestore.html#amazoncloudfrontkeyvaluestore-PutKey"},"UpdateKeys":{"conditionKeys":[],"resources":[{"name":"key-value-store"}],"description":"Grants permission to put or delete multiple key value pairs in a single, all-or-nothing operation","accessLevel":"Write","resourceTypes":[{"name":"key-value-store","required":true}],"operationUrl":"https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_kvs_UpdateKeys.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfrontkeyvaluestore.html#amazoncloudfrontkeyvaluestore-UpdateKeys"}},"resources":[{"name":"key-value-store","arnFormats":["arn:${Partition}:cloudfront::${Account}:key-value-store/${ResourceId}"],"conditionKeys":[]}],"conditionKeys":{},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfrontkeyvaluestore.html"}