aws-iam-language-server 0.0.8 → 0.0.9

package/src/data/servicereference/services/cloudshell.json

@@ -1 +1 @@
-{"name":"cloudshell","actions":{"ApproveCommand":{"conditionKeys":[],"resources":[{"name":"Environment"}],"description":"Grants permission to approve a command sent by another AWS service","accessLevel":"Read","resourceTypes":[{"name":"Environment","required":true}],"permissionOnly":true},"CreateEnvironment":{"conditionKeys":["cloudshell:SecurityGroupIds","cloudshell:SubnetIds","cloudshell:VpcIds"],"resources":[],"description":"Grants permissions to create a CloudShell environment","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CreateSession":{"conditionKeys":[],"resources":[{"name":"Environment"}],"description":"Grants permissions to connect to a CloudShell environment from the AWS Management Console","accessLevel":"Write","resourceTypes":[{"name":"Environment","required":true}],"permissionOnly":true},"DeleteEnvironment":{"conditionKeys":[],"resources":[{"name":"Environment"}],"description":"Grants permission to delete a CloudShell environment","accessLevel":"Write","resourceTypes":[{"name":"Environment","required":true}],"permissionOnly":true},"DescribeEnvironments":{"conditionKeys":[],"resources":[],"description":"Grants permission to return descriptions of existing user's environments","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"GetEnvironmentStatus":{"conditionKeys":[],"resources":[{"name":"Environment"}],"description":"Grants permission to read a CloudShell environment status","accessLevel":"Read","resourceTypes":[{"name":"Environment","required":true}],"permissionOnly":true},"GetFileDownloadUrls":{"conditionKeys":[],"resources":[{"name":"Environment"}],"description":"Grants permissions to download files from a CloudShell environment","accessLevel":"Write","resourceTypes":[{"name":"Environment","required":true}],"permissionOnly":true},"GetFileUploadUrls":{"conditionKeys":[],"resources":[{"name":"Environment"}],"description":"Grants permissions to upload files to a CloudShell environment","accessLevel":"Write","resourceTypes":[{"name":"Environment","required":true}],"permissionOnly":true},"PutCredentials":{"conditionKeys":[],"resources":[{"name":"Environment"}],"description":"Grants permissions to forward console credentials to the environment","accessLevel":"Write","resourceTypes":[{"name":"Environment","required":true}],"permissionOnly":true},"StartEnvironment":{"conditionKeys":[],"resources":[{"name":"Environment"}],"description":"Grants permission to start a stopped CloudShell environment","accessLevel":"Write","resourceTypes":[{"name":"Environment","required":true}],"permissionOnly":true},"StopEnvironment":{"conditionKeys":[],"resources":[{"name":"Environment"}],"description":"Grants permission to stop a running CloudShell environment","accessLevel":"Write","resourceTypes":[{"name":"Environment","required":true}],"permissionOnly":true}},"resources":[{"name":"Environment","arnFormats":["arn:${Partition}:cloudshell:${Region}:${Account}:environment/${EnvironmentId}"],"conditionKeys":[]}],"conditionKeys":{"cloudshell:SecurityGroupIds":{"types":["ArrayOfString"],"description":"Filters access by security group ids. Available during CreateEnvironment operation"},"cloudshell:SubnetIds":{"types":["ArrayOfString"],"description":"Filters access by subnet ids. Available during CreateEnvironment operation"},"cloudshell:VpcIds":{"types":["ArrayOfString"],"description":"Filters access by vpc ids. Available during CreateEnvironment operation"}}}
+{"name":"cloudshell","actions":{"ApproveCommand":{"conditionKeys":[],"resources":[{"name":"Environment"}],"description":"Grants permission to approve a command sent by another AWS service","accessLevel":"Read","resourceTypes":[{"name":"Environment","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloudshell/latest/userguide/sec-auth-with-identities.html#ApproveCommand","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudshell.html#awscloudshell-ApproveCommand"},"CreateEnvironment":{"conditionKeys":["cloudshell:SecurityGroupIds","cloudshell:SubnetIds","cloudshell:VpcIds"],"resources":[],"description":"Grants permissions to create a CloudShell environment","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloudshell/latest/userguide/sec-auth-with-identities.html#CreateEnvironment","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudshell.html#awscloudshell-CreateEnvironment"},"CreateSession":{"conditionKeys":[],"resources":[{"name":"Environment"}],"description":"Grants permissions to connect to a CloudShell environment from the AWS Management Console","accessLevel":"Write","resourceTypes":[{"name":"Environment","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloudshell/latest/userguide/sec-auth-with-identities.html#CreateSession","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudshell.html#awscloudshell-CreateSession"},"DeleteEnvironment":{"conditionKeys":[],"resources":[{"name":"Environment"}],"description":"Grants permission to delete a CloudShell environment","accessLevel":"Write","resourceTypes":[{"name":"Environment","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloudshell/latest/userguide/sec-auth-with-identities.html#DeleteEnvironment","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudshell.html#awscloudshell-DeleteEnvironment"},"DescribeEnvironments":{"conditionKeys":[],"resources":[],"description":"Grants permission to return descriptions of existing user's environments","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloudshell/latest/userguide/sec-auth-with-identities.html#DescribeEnvironments","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudshell.html#awscloudshell-DescribeEnvironments"},"GetEnvironmentStatus":{"conditionKeys":[],"resources":[{"name":"Environment"}],"description":"Grants permission to read a CloudShell environment status","accessLevel":"Read","resourceTypes":[{"name":"Environment","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloudshell/latest/userguide/sec-auth-with-identities.html#GetEnvironmentStatus","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudshell.html#awscloudshell-GetEnvironmentStatus"},"GetFileDownloadUrls":{"conditionKeys":[],"resources":[{"name":"Environment"}],"description":"Grants permissions to download files from a CloudShell environment","accessLevel":"Write","resourceTypes":[{"name":"Environment","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloudshell/latest/userguide/sec-auth-with-identities.html#GetFileDownloadUrls","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudshell.html#awscloudshell-GetFileDownloadUrls"},"GetFileUploadUrls":{"conditionKeys":[],"resources":[{"name":"Environment"}],"description":"Grants permissions to upload files to a CloudShell environment","accessLevel":"Write","resourceTypes":[{"name":"Environment","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloudshell/latest/userguide/sec-auth-with-identities.html#GetFileUploadUrls","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudshell.html#awscloudshell-GetFileUploadUrls"},"PutCredentials":{"conditionKeys":[],"resources":[{"name":"Environment"}],"description":"Grants permissions to forward console credentials to the environment","accessLevel":"Write","resourceTypes":[{"name":"Environment","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloudshell/latest/userguide/sec-auth-with-identities.html#PutCredentials","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudshell.html#awscloudshell-PutCredentials"},"StartEnvironment":{"conditionKeys":[],"resources":[{"name":"Environment"}],"description":"Grants permission to start a stopped CloudShell environment","accessLevel":"Write","resourceTypes":[{"name":"Environment","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloudshell/latest/userguide/sec-auth-with-identities.html#StartEnvironment","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudshell.html#awscloudshell-StartEnvironment"},"StopEnvironment":{"conditionKeys":[],"resources":[{"name":"Environment"}],"description":"Grants permission to stop a running CloudShell environment","accessLevel":"Write","resourceTypes":[{"name":"Environment","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/cloudshell/latest/userguide/sec-auth-with-identities.html#StopEnvironment","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudshell.html#awscloudshell-StopEnvironment"}},"resources":[{"name":"Environment","arnFormats":["arn:${Partition}:cloudshell:${Region}:${Account}:environment/${EnvironmentId}"],"conditionKeys":[]}],"conditionKeys":{"cloudshell:SecurityGroupIds":{"types":["ArrayOfString"],"description":"Filters access by security group ids. Available during CreateEnvironment operation"},"cloudshell:SubnetIds":{"types":["ArrayOfString"],"description":"Filters access by subnet ids. Available during CreateEnvironment operation"},"cloudshell:VpcIds":{"types":["ArrayOfString"],"description":"Filters access by vpc ids. Available during CreateEnvironment operation"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudshell.html"}

package/src/data/servicereference/services/cloudtrail-data.json

@@ -1 +1 @@
-{"name":"cloudtrail-data","actions":{"PutAuditEvents":{"conditionKeys":[],"resources":[{"name":"channel"}],"description":"Grants permission to ingest your application events into CloudTrail Lake","accessLevel":"Write","resourceTypes":[{"name":"channel","required":true}]}},"resources":[{"name":"channel","arnFormats":["arn:${Partition}:cloudtrail:${Region}:${Account}:channel/${ChannelId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag's key and value in a request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters actions based on the presence of tag key-value pairs in the request"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys in a request"}}}
+{"name":"cloudtrail-data","actions":{"PutAuditEvents":{"conditionKeys":[],"resources":[{"name":"channel"}],"description":"Grants permission to ingest your application events into CloudTrail Lake","accessLevel":"Write","resourceTypes":[{"name":"channel","required":true}],"operationUrl":"https://docs.aws.amazon.com/awscloudtraildata/latest/APIReference/API_PutAuditEvents.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtraildata.html#awscloudtraildata-PutAuditEvents"}},"resources":[{"name":"channel","arnFormats":["arn:${Partition}:cloudtrail:${Region}:${Account}:channel/${ChannelId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag's key and value in a request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters actions based on the presence of tag key-value pairs in the request"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys in a request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtraildata.html"}

package/src/data/servicereference/services/cloudtrail.json

@@ -1 +1 @@
-{"name":"cloudtrail","actions":{"AddTags":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"channel"},{"name":"dashboard"},{"name":"eventdatastore"},{"name":"trail"}],"description":"Grants permission to add one or more tags to a trail, event data store, channel or dashboard, up to a limit of 50","accessLevel":"Tagging","resourceTypes":[{"name":"channel","required":false},{"name":"dashboard","required":false},{"name":"eventdatastore","required":false},{"name":"trail","required":false}]},"CancelQuery":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to cancel a running query","accessLevel":"Write","resourceTypes":[{"name":"eventdatastore","required":true}]},"CreateChannel":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"channel"},{"name":"eventdatastore"}],"description":"Grants permission to create a channel","accessLevel":"Write","resourceTypes":[{"name":"channel","required":true},{"name":"eventdatastore","required":true}],"dependentActions":["cloudtrail:AddTags"]},"CreateDashboard":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"dashboard"}],"description":"Grants permission to create a dashboard","accessLevel":"Write","resourceTypes":[{"name":"dashboard","required":true}],"dependentActions":["cloudtrail:AddTags","cloudtrail:StartDashboardRefresh","cloudtrail:StartQuery"]},"CreateEventDataStore":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to create an event data store","accessLevel":"Write","resourceTypes":[{"name":"eventdatastore","required":true}],"dependentActions":["cloudtrail:AddTags","iam:CreateServiceLinkedRole","iam:GetRole","kms:Decrypt","kms:GenerateDataKey","organizations:ListAWSServiceAccessForOrganization"]},"CreateServiceLinkedChannel":{"conditionKeys":[],"resources":[{"name":"channel"}],"description":"Grants permission to create a service-linked channel that specifies the settings for delivery of log data to an AWS service","accessLevel":"Write","resourceTypes":[{"name":"channel","required":true}],"permissionOnly":true},"CreateTrail":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"trail"}],"description":"Grants permission to create a trail that specifies the settings for delivery of log data to an Amazon S3 bucket","accessLevel":"Write","resourceTypes":[{"name":"trail","required":true}],"dependentActions":["cloudtrail:AddTags","iam:CreateServiceLinkedRole","iam:GetRole","organizations:ListAWSServiceAccessForOrganization"]},"DeleteChannel":{"conditionKeys":[],"resources":[{"name":"channel"}],"description":"Grants permission to delete a channel","accessLevel":"Write","resourceTypes":[{"name":"channel","required":true}]},"DeleteDashboard":{"conditionKeys":[],"resources":[{"name":"dashboard"}],"description":"Grants permission to delete a dashboard","accessLevel":"Write","resourceTypes":[{"name":"dashboard","required":true}]},"DeleteEventDataStore":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to delete an event data store","accessLevel":"Write","resourceTypes":[{"name":"eventdatastore","required":true}]},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[{"name":"channel"},{"name":"dashboard"},{"name":"eventdatastore"}],"description":"Grants permission to delete a resource policy from the provided resource","accessLevel":"Write","resourceTypes":[{"name":"channel","required":false},{"name":"dashboard","required":false},{"name":"eventdatastore","required":false}]},"DeleteServiceLinkedChannel":{"conditionKeys":[],"resources":[{"name":"channel"}],"description":"Grants permission to delete a service-linked channel","accessLevel":"Write","resourceTypes":[{"name":"channel","required":true}],"permissionOnly":true},"DeleteTrail":{"conditionKeys":[],"resources":[{"name":"trail"}],"description":"Grants permission to delete a trail","accessLevel":"Write","resourceTypes":[{"name":"trail","required":true}]},"DeregisterOrganizationDelegatedAdmin":{"conditionKeys":[],"resources":[],"description":"Grants permission to deregister an AWS Organizations member account as a delegated administrator","accessLevel":"Write","resourceTypes":[],"dependentActions":["organizations:DeregisterDelegatedAdministrator","organizations:ListAWSServiceAccessForOrganization"]},"DescribeQuery":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to list details for the query","accessLevel":"Read","resourceTypes":[{"name":"eventdatastore","required":true}]},"DescribeTrails":{"conditionKeys":[],"resources":[],"description":"Grants permission to list settings for the trails associated with the current region for your account","accessLevel":"Read","resourceTypes":[]},"DisableFederation":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to disable federation of event data store data by using the AWS Glue Data Catalog","accessLevel":"Write","resourceTypes":[{"name":"eventdatastore","required":true}],"dependentActions":["glue:DeleteDatabase","glue:DeleteTable","glue:PassConnection","lakeformation:DeregisterResource","lakeformation:RegisterResource"]},"EnableFederation":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to enable federation of event data store data by using the AWS Glue Data Catalog","accessLevel":"Write","resourceTypes":[{"name":"eventdatastore","required":true}],"dependentActions":["glue:CreateDatabase","glue:CreateTable","iam:GetRole","iam:PassRole","lakeformation:DeregisterResource","lakeformation:RegisterResource"]},"GenerateQuery":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to generate a query for a specified event data store using the CloudTrail Lake query generator","accessLevel":"Write","resourceTypes":[{"name":"eventdatastore","required":true}]},"GenerateQueryResultsSummary":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to generate a results summary for specified queries using the CloudTrail natural language generator","accessLevel":"Read","resourceTypes":[{"name":"eventdatastore","required":true}],"dependentActions":["cloudtrail:GetQueryResults","kms:Decrypt","kms:GenerateDataKey"],"permissionOnly":true},"GetChannel":{"conditionKeys":[],"resources":[{"name":"channel"}],"description":"Grants permission to return information about a specific channel","accessLevel":"Read","resourceTypes":[{"name":"channel","required":true}]},"GetDashboard":{"conditionKeys":[],"resources":[{"name":"dashboard"}],"description":"Grants permission to list settings for the dashboard","accessLevel":"Read","resourceTypes":[{"name":"dashboard","required":true}]},"GetEventConfiguration":{"conditionKeys":[],"resources":[{"name":"eventdatastore"},{"name":"trail"}],"description":"Grants permission to list event configurations that are configured for a trail or an event data store","accessLevel":"Read","resourceTypes":[{"name":"eventdatastore","required":false},{"name":"trail","required":false}]},"GetEventDataStore":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to list settings for the event data store","accessLevel":"Read","resourceTypes":[{"name":"eventdatastore","required":true}]},"GetEventDataStoreData":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to get data from an event data store by using the AWS Glue Data Catalog","accessLevel":"Read","resourceTypes":[{"name":"eventdatastore","required":true}],"dependentActions":["kms:Decrypt","kms:GenerateDataKey"]},"GetEventSelectors":{"conditionKeys":[],"resources":[{"name":"trail"}],"description":"Grants permission to list settings for event selectors configured for a trail","accessLevel":"Read","resourceTypes":[{"name":"trail","required":true}]},"GetImport":{"conditionKeys":[],"resources":[],"description":"Grants permission to return information about a specific import","accessLevel":"Read","resourceTypes":[]},"GetInsightSelectors":{"conditionKeys":[],"resources":[{"name":"eventdatastore"},{"name":"trail"}],"description":"Grants permission to list CloudTrail Insights selectors that are configured for a trail or event data store","accessLevel":"Read","resourceTypes":[{"name":"eventdatastore","required":false},{"name":"trail","required":false}]},"GetQueryResults":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to fetch results of a complete query","accessLevel":"Read","resourceTypes":[{"name":"eventdatastore","required":true}],"dependentActions":["kms:Decrypt","kms:GenerateDataKey"]},"GetResourcePolicy":{"conditionKeys":[],"resources":[{"name":"channel"},{"name":"dashboard"},{"name":"eventdatastore"}],"description":"Grants permission to get the resource policy attached to the provided resource","accessLevel":"Read","resourceTypes":[{"name":"channel","required":false},{"name":"dashboard","required":false},{"name":"eventdatastore","required":false}]},"GetServiceLinkedChannel":{"conditionKeys":[],"resources":[{"name":"channel"}],"description":"Grants permission to list settings for the service-linked channel","accessLevel":"Read","resourceTypes":[{"name":"channel","required":true}],"permissionOnly":true},"GetTrail":{"conditionKeys":[],"resources":[{"name":"trail"}],"description":"Grants permission to list settings for the trail","accessLevel":"Read","resourceTypes":[{"name":"trail","required":true}]},"GetTrailStatus":{"conditionKeys":[],"resources":[{"name":"trail"}],"description":"Grants permission to retrieve a JSON-formatted list of information about the specified trail","accessLevel":"Read","resourceTypes":[{"name":"trail","required":true}]},"ListChannels":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the channels in the current account, and their source names","accessLevel":"List","resourceTypes":[]},"ListDashboards":{"conditionKeys":[],"resources":[],"description":"Grants permission to list dashboards associated with the current region for your account","accessLevel":"List","resourceTypes":[]},"ListEventDataStores":{"conditionKeys":[],"resources":[],"description":"Grants permission to list event data stores associated with the current region for your account","accessLevel":"List","resourceTypes":[]},"ListImportFailures":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of failures for the specified import","accessLevel":"Read","resourceTypes":[]},"ListImports":{"conditionKeys":[],"resources":[],"description":"Grants permission to return information on all imports, or a select set of imports by ImportStatus or Destination","accessLevel":"List","resourceTypes":[]},"ListInsightsData":{"conditionKeys":[],"resources":[{"name":"trail"}],"description":"Grants permission to retrieve data captured by CloudTrail Insights","accessLevel":"List","resourceTypes":[{"name":"trail","required":true}]},"ListPublicKeys":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the public keys whose private keys were used to sign trail digest files within a specified time range","accessLevel":"Read","resourceTypes":[]},"ListQueries":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to list queries associated with an event data store","accessLevel":"List","resourceTypes":[{"name":"eventdatastore","required":true}]},"ListServiceLinkedChannels":{"conditionKeys":[],"resources":[],"description":"Grants permission to list service-linked channels associated with the current region for a specified account","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListTags":{"conditionKeys":[],"resources":[{"name":"channel"},{"name":"dashboard"},{"name":"eventdatastore"},{"name":"trail"}],"description":"Grants permission to list the tags for trails, event data stores, channels or dashboards in the current region","accessLevel":"Read","resourceTypes":[{"name":"channel","required":false},{"name":"dashboard","required":false},{"name":"eventdatastore","required":false},{"name":"trail","required":false}]},"ListTrails":{"conditionKeys":[],"resources":[],"description":"Grants permission to list trails associated with the current region for your account","accessLevel":"List","resourceTypes":[]},"LookupEvents":{"conditionKeys":[],"resources":[],"description":"Grants permission to look up and retrieve metric data for API activity events captured by CloudTrail that create, update, or delete resources in your account","accessLevel":"Read","resourceTypes":[]},"PutEventConfiguration":{"conditionKeys":[],"resources":[{"name":"eventdatastore"},{"name":"trail"}],"description":"Grants permission to create and update event configurations for a trail or an event data store","accessLevel":"Write","resourceTypes":[{"name":"eventdatastore","required":false},{"name":"trail","required":false}],"dependentActions":["iam:CreateServiceLinkedRole","iam:GetRole"]},"PutEventSelectors":{"conditionKeys":[],"resources":[{"name":"trail"}],"description":"Grants permission to create and update event selectors for a trail","accessLevel":"Write","resourceTypes":[{"name":"trail","required":true}]},"PutInsightSelectors":{"conditionKeys":[],"resources":[{"name":"eventdatastore"},{"name":"trail"}],"description":"Grants permission to create and update CloudTrail Insights selectors for a trail or event data store","accessLevel":"Write","resourceTypes":[{"name":"eventdatastore","required":false},{"name":"trail","required":false}]},"PutResourcePolicy":{"conditionKeys":[],"resources":[{"name":"channel"},{"name":"dashboard"},{"name":"eventdatastore"}],"description":"Grants permission to attach a resource policy to the provided resource","accessLevel":"Write","resourceTypes":[{"name":"channel","required":false},{"name":"dashboard","required":false},{"name":"eventdatastore","required":false}]},"RegisterOrganizationDelegatedAdmin":{"conditionKeys":[],"resources":[],"description":"Grants permission to register an AWS Organizations member account as a delegated administrator","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:CreateServiceLinkedRole","iam:GetRole","organizations:ListAWSServiceAccessForOrganization","organizations:RegisterDelegatedAdministrator"]},"RemoveTags":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"channel"},{"name":"dashboard"},{"name":"eventdatastore"},{"name":"trail"}],"description":"Grants permission to remove tags from a trail, event data store, channel or dashboard","accessLevel":"Tagging","resourceTypes":[{"name":"channel","required":false},{"name":"dashboard","required":false},{"name":"eventdatastore","required":false},{"name":"trail","required":false}]},"RestoreEventDataStore":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to restore an event data store","accessLevel":"Write","resourceTypes":[{"name":"eventdatastore","required":true}]},"SearchSampleQueries":{"conditionKeys":[],"resources":[],"description":"Grants permission to perform semantic search for CloudTrail Lake sample queries","accessLevel":"Read","resourceTypes":[]},"StartDashboardRefresh":{"conditionKeys":[],"resources":[{"name":"dashboard"}],"description":"Grants permission to start a refresh on the specified dashboard","accessLevel":"Write","resourceTypes":[{"name":"dashboard","required":true}],"dependentActions":["cloudtrail:StartQuery"]},"StartEventDataStoreIngestion":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to start ingestion on an event data store","accessLevel":"Write","resourceTypes":[{"name":"eventdatastore","required":true}]},"StartImport":{"conditionKeys":[],"resources":[],"description":"Grants permission to start an import of logged trail events from a source S3 bucket to a destination event data store","accessLevel":"Write","resourceTypes":[]},"StartLogging":{"conditionKeys":[],"resources":[{"name":"trail"}],"description":"Grants permission to start the recording of AWS API calls and log file delivery for a trail","accessLevel":"Write","resourceTypes":[{"name":"trail","required":true}]},"StartQuery":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to start a new query on a specified event data store","accessLevel":"Write","resourceTypes":[{"name":"eventdatastore","required":true}],"dependentActions":["kms:Decrypt","kms:GenerateDataKey"]},"StopEventDataStoreIngestion":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to stop ingestion on an event data store","accessLevel":"Write","resourceTypes":[{"name":"eventdatastore","required":true}]},"StopImport":{"conditionKeys":[],"resources":[],"description":"Grants permission to stop a specified import","accessLevel":"Write","resourceTypes":[]},"StopLogging":{"conditionKeys":[],"resources":[{"name":"trail"}],"description":"Grants permission to stop the recording of AWS API calls and log file delivery for a trail","accessLevel":"Write","resourceTypes":[{"name":"trail","required":true}]},"UpdateChannel":{"conditionKeys":[],"resources":[{"name":"channel"}],"description":"Grants permission to update a channel","accessLevel":"Write","resourceTypes":[{"name":"channel","required":true}]},"UpdateDashboard":{"conditionKeys":[],"resources":[{"name":"dashboard"}],"description":"Grants permission to update a dashboard","accessLevel":"Write","resourceTypes":[{"name":"dashboard","required":true}],"dependentActions":["cloudtrail:StartDashboardRefresh","cloudtrail:StartQuery"]},"UpdateEventDataStore":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to update an event data store","accessLevel":"Write","resourceTypes":[{"name":"eventdatastore","required":true}],"dependentActions":["iam:CreateServiceLinkedRole","iam:GetRole","kms:Decrypt","kms:GenerateDataKey","organizations:ListAWSServiceAccessForOrganization"]},"UpdateServiceLinkedChannel":{"conditionKeys":[],"resources":[{"name":"channel"}],"description":"Grants permission to update the service-linked channel settings for delivery of log data to an AWS service","accessLevel":"Write","resourceTypes":[{"name":"channel","required":true}],"permissionOnly":true},"UpdateTrail":{"conditionKeys":[],"resources":[{"name":"trail"}],"description":"Grants permission to update the settings that specify delivery of log files","accessLevel":"Write","resourceTypes":[{"name":"trail","required":true}],"dependentActions":["iam:CreateServiceLinkedRole","iam:GetRole","organizations:ListAWSServiceAccessForOrganization"]}},"resources":[{"name":"channel","arnFormats":["arn:${Partition}:cloudtrail:${Region}:${Account}:channel/${ChannelId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"dashboard","arnFormats":["arn:${Partition}:cloudtrail:${Region}:${Account}:dashboard/${DashboardName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"eventdatastore","arnFormats":["arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/${EventDataStoreId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"trail","arnFormats":["arn:${Partition}:cloudtrail:${Region}:${Account}:trail/${TrailName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys in a request"}}}
+{"name":"cloudtrail","actions":{"AddTags":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"channel"},{"name":"dashboard"},{"name":"eventdatastore"},{"name":"trail"}],"description":"Grants permission to add one or more tags to a trail, event data store, channel or dashboard, up to a limit of 50","accessLevel":"Tagging","resourceTypes":[{"name":"channel","required":false},{"name":"dashboard","required":false},{"name":"eventdatastore","required":false},{"name":"trail","required":false}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_AddTags.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-AddTags"},"CancelQuery":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to cancel a running query","accessLevel":"Write","resourceTypes":[{"name":"eventdatastore","required":true}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_CancelQuery.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-CancelQuery"},"CreateChannel":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"channel"},{"name":"eventdatastore"}],"description":"Grants permission to create a channel","accessLevel":"Write","resourceTypes":[{"name":"channel","required":true},{"name":"eventdatastore","required":true}],"dependentActions":["cloudtrail:AddTags"],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_CreateChannel.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-CreateChannel"},"CreateDashboard":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"dashboard"}],"description":"Grants permission to create a dashboard","accessLevel":"Write","resourceTypes":[{"name":"dashboard","required":true}],"dependentActions":["cloudtrail:AddTags","cloudtrail:StartDashboardRefresh","cloudtrail:StartQuery"],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_CreateDashboard.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-CreateDashboard"},"CreateEventDataStore":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to create an event data store","accessLevel":"Write","resourceTypes":[{"name":"eventdatastore","required":true}],"dependentActions":["cloudtrail:AddTags","iam:CreateServiceLinkedRole","iam:GetRole","kms:Decrypt","kms:GenerateDataKey","organizations:ListAWSServiceAccessForOrganization"],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_CreateEventDataStore.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-CreateEventDataStore"},"CreateServiceLinkedChannel":{"conditionKeys":[],"resources":[{"name":"channel"}],"description":"Grants permission to create a service-linked channel that specifies the settings for delivery of log data to an AWS service","accessLevel":"Write","resourceTypes":[{"name":"channel","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/userguide/viewing-service-linked-channels.html#slc-service-events","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-CreateServiceLinkedChannel"},"CreateTrail":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"trail"}],"description":"Grants permission to create a trail that specifies the settings for delivery of log data to an Amazon S3 bucket","accessLevel":"Write","resourceTypes":[{"name":"trail","required":true}],"dependentActions":["cloudtrail:AddTags","iam:CreateServiceLinkedRole","iam:GetRole","organizations:ListAWSServiceAccessForOrganization"],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_CreateTrail.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-CreateTrail"},"DeleteChannel":{"conditionKeys":[],"resources":[{"name":"channel"}],"description":"Grants permission to delete a channel","accessLevel":"Write","resourceTypes":[{"name":"channel","required":true}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_DeleteChannel.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-DeleteChannel"},"DeleteDashboard":{"conditionKeys":[],"resources":[{"name":"dashboard"}],"description":"Grants permission to delete a dashboard","accessLevel":"Write","resourceTypes":[{"name":"dashboard","required":true}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_DeleteDashboard.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-DeleteDashboard"},"DeleteEventDataStore":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to delete an event data store","accessLevel":"Write","resourceTypes":[{"name":"eventdatastore","required":true}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_DeleteEventDataStore.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-DeleteEventDataStore"},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[{"name":"channel"},{"name":"dashboard"},{"name":"eventdatastore"}],"description":"Grants permission to delete a resource policy from the provided resource","accessLevel":"Write","resourceTypes":[{"name":"channel","required":false},{"name":"dashboard","required":false},{"name":"eventdatastore","required":false}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_DeleteResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-DeleteResourcePolicy"},"DeleteServiceLinkedChannel":{"conditionKeys":[],"resources":[{"name":"channel"}],"description":"Grants permission to delete a service-linked channel","accessLevel":"Write","resourceTypes":[{"name":"channel","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/userguide/viewing-service-linked-channels.html#slc-service-events","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-DeleteServiceLinkedChannel"},"DeleteTrail":{"conditionKeys":[],"resources":[{"name":"trail"}],"description":"Grants permission to delete a trail","accessLevel":"Write","resourceTypes":[{"name":"trail","required":true}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_DeleteTrail.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-DeleteTrail"},"DeregisterOrganizationDelegatedAdmin":{"conditionKeys":[],"resources":[],"description":"Grants permission to deregister an AWS Organizations member account as a delegated administrator","accessLevel":"Write","resourceTypes":[],"dependentActions":["organizations:DeregisterDelegatedAdministrator","organizations:ListAWSServiceAccessForOrganization"],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_DeregisterOrganizationDelegatedAdmin.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-DeregisterOrganizationDelegatedAdmin"},"DescribeQuery":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to list details for the query","accessLevel":"Read","resourceTypes":[{"name":"eventdatastore","required":true}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_DescribeQuery.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-DescribeQuery"},"DescribeTrails":{"conditionKeys":[],"resources":[],"description":"Grants permission to list settings for the trails associated with the current region for your account","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_DescribeTrails.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-DescribeTrails"},"DisableFederation":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to disable federation of event data store data by using the AWS Glue Data Catalog","accessLevel":"Write","resourceTypes":[{"name":"eventdatastore","required":true}],"dependentActions":["glue:DeleteDatabase","glue:DeleteTable","glue:PassConnection","lakeformation:DeregisterResource","lakeformation:RegisterResource"],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_DisableFederation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-DisableFederation"},"EnableFederation":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to enable federation of event data store data by using the AWS Glue Data Catalog","accessLevel":"Write","resourceTypes":[{"name":"eventdatastore","required":true}],"dependentActions":["glue:CreateDatabase","glue:CreateTable","iam:GetRole","iam:PassRole","lakeformation:DeregisterResource","lakeformation:RegisterResource"],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_EnableFederation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-EnableFederation"},"GenerateQuery":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to generate a query for a specified event data store using the CloudTrail Lake query generator","accessLevel":"Write","resourceTypes":[{"name":"eventdatastore","required":true}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/userguide/lake-query-generator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-GenerateQuery"},"GenerateQueryResultsSummary":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to generate a results summary for specified queries using the CloudTrail natural language generator","accessLevel":"Read","resourceTypes":[{"name":"eventdatastore","required":true}],"dependentActions":["cloudtrail:GetQueryResults","kms:Decrypt","kms:GenerateDataKey"],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/userguide/query-results-summary.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-GenerateQueryResultsSummary"},"GetChannel":{"conditionKeys":[],"resources":[{"name":"channel"}],"description":"Grants permission to return information about a specific channel","accessLevel":"Read","resourceTypes":[{"name":"channel","required":true}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_GetChannel.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-GetChannel"},"GetDashboard":{"conditionKeys":[],"resources":[{"name":"dashboard"}],"description":"Grants permission to list settings for the dashboard","accessLevel":"Read","resourceTypes":[{"name":"dashboard","required":true}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_GetDashboard.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-GetDashboard"},"GetEventConfiguration":{"conditionKeys":[],"resources":[{"name":"eventdatastore"},{"name":"trail"}],"description":"Grants permission to list event configurations that are configured for a trail or an event data store","accessLevel":"Read","resourceTypes":[{"name":"eventdatastore","required":false},{"name":"trail","required":false}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_GetEventConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-GetEventConfiguration"},"GetEventDataStore":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to list settings for the event data store","accessLevel":"Read","resourceTypes":[{"name":"eventdatastore","required":true}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_GetEventDataStore.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-GetEventDataStore"},"GetEventDataStoreData":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to get data from an event data store by using the AWS Glue Data Catalog","accessLevel":"Read","resourceTypes":[{"name":"eventdatastore","required":true}],"dependentActions":["kms:Decrypt","kms:GenerateDataKey"],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/userguide/query-federation.html#query-federation-permissions","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-GetEventDataStoreData"},"GetEventSelectors":{"conditionKeys":[],"resources":[{"name":"trail"}],"description":"Grants permission to list settings for event selectors configured for a trail","accessLevel":"Read","resourceTypes":[{"name":"trail","required":true}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_GetEventSelectors.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-GetEventSelectors"},"GetImport":{"conditionKeys":[],"resources":[],"description":"Grants permission to return information about a specific import","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_GetImport.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-GetImport"},"GetInsightSelectors":{"conditionKeys":[],"resources":[{"name":"eventdatastore"},{"name":"trail"}],"description":"Grants permission to list CloudTrail Insights selectors that are configured for a trail or event data store","accessLevel":"Read","resourceTypes":[{"name":"eventdatastore","required":false},{"name":"trail","required":false}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_GetInsightSelectors.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-GetInsightSelectors"},"GetQueryResults":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to fetch results of a complete query","accessLevel":"Read","resourceTypes":[{"name":"eventdatastore","required":true}],"dependentActions":["kms:Decrypt","kms:GenerateDataKey"],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_GetQueryResults.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-GetQueryResults"},"GetResourcePolicy":{"conditionKeys":[],"resources":[{"name":"channel"},{"name":"dashboard"},{"name":"eventdatastore"}],"description":"Grants permission to get the resource policy attached to the provided resource","accessLevel":"Read","resourceTypes":[{"name":"channel","required":false},{"name":"dashboard","required":false},{"name":"eventdatastore","required":false}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_GetResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-GetResourcePolicy"},"GetServiceLinkedChannel":{"conditionKeys":[],"resources":[{"name":"channel"}],"description":"Grants permission to list settings for the service-linked channel","accessLevel":"Read","resourceTypes":[{"name":"channel","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/userguide/viewing-service-linked-channels.html#slc-service-events","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-GetServiceLinkedChannel"},"GetTrail":{"conditionKeys":[],"resources":[{"name":"trail"}],"description":"Grants permission to list settings for the trail","accessLevel":"Read","resourceTypes":[{"name":"trail","required":true}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_GetTrail.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-GetTrail"},"GetTrailStatus":{"conditionKeys":[],"resources":[{"name":"trail"}],"description":"Grants permission to retrieve a JSON-formatted list of information about the specified trail","accessLevel":"Read","resourceTypes":[{"name":"trail","required":true}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_GetTrailStatus.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-GetTrailStatus"},"ListChannels":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the channels in the current account, and their source names","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_ListChannels.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-ListChannels"},"ListDashboards":{"conditionKeys":[],"resources":[],"description":"Grants permission to list dashboards associated with the current region for your account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_ListDashboards.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-ListDashboards"},"ListEventDataStores":{"conditionKeys":[],"resources":[],"description":"Grants permission to list event data stores associated with the current region for your account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_ListEventDataStores.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-ListEventDataStores"},"ListImportFailures":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of failures for the specified import","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_ListImportFailures.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-ListImportFailures"},"ListImports":{"conditionKeys":[],"resources":[],"description":"Grants permission to return information on all imports, or a select set of imports by ImportStatus or Destination","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_ListImports.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-ListImports"},"ListInsightsData":{"conditionKeys":[],"resources":[{"name":"trail"}],"description":"Grants permission to retrieve data captured by CloudTrail Insights","accessLevel":"List","resourceTypes":[{"name":"trail","required":true}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_ListInsightsData.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-ListInsightsData"},"ListPublicKeys":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the public keys whose private keys were used to sign trail digest files within a specified time range","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_ListPublicKeys.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-ListPublicKeys"},"ListQueries":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to list queries associated with an event data store","accessLevel":"List","resourceTypes":[{"name":"eventdatastore","required":true}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_ListQueries.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-ListQueries"},"ListServiceLinkedChannels":{"conditionKeys":[],"resources":[],"description":"Grants permission to list service-linked channels associated with the current region for a specified account","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/userguide/viewing-service-linked-channels.html#slc-service-events","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-ListServiceLinkedChannels"},"ListTags":{"conditionKeys":[],"resources":[{"name":"channel"},{"name":"dashboard"},{"name":"eventdatastore"},{"name":"trail"}],"description":"Grants permission to list the tags for trails, event data stores, channels or dashboards in the current region","accessLevel":"Read","resourceTypes":[{"name":"channel","required":false},{"name":"dashboard","required":false},{"name":"eventdatastore","required":false},{"name":"trail","required":false}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_ListTags.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-ListTags"},"ListTrails":{"conditionKeys":[],"resources":[],"description":"Grants permission to list trails associated with the current region for your account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_ListTrails.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-ListTrails"},"LookupEvents":{"conditionKeys":[],"resources":[],"description":"Grants permission to look up and retrieve metric data for API activity events captured by CloudTrail that create, update, or delete resources in your account","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_LookupEvents.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-LookupEvents"},"PutEventConfiguration":{"conditionKeys":[],"resources":[{"name":"eventdatastore"},{"name":"trail"}],"description":"Grants permission to create and update event configurations for a trail or an event data store","accessLevel":"Write","resourceTypes":[{"name":"eventdatastore","required":false},{"name":"trail","required":false}],"dependentActions":["iam:CreateServiceLinkedRole","iam:GetRole"],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_PutEventConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-PutEventConfiguration"},"PutEventSelectors":{"conditionKeys":[],"resources":[{"name":"trail"}],"description":"Grants permission to create and update event selectors for a trail","accessLevel":"Write","resourceTypes":[{"name":"trail","required":true}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_PutEventSelectors.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-PutEventSelectors"},"PutInsightSelectors":{"conditionKeys":[],"resources":[{"name":"eventdatastore"},{"name":"trail"}],"description":"Grants permission to create and update CloudTrail Insights selectors for a trail or event data store","accessLevel":"Write","resourceTypes":[{"name":"eventdatastore","required":false},{"name":"trail","required":false}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_PutInsightSelectors.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-PutInsightSelectors"},"PutResourcePolicy":{"conditionKeys":[],"resources":[{"name":"channel"},{"name":"dashboard"},{"name":"eventdatastore"}],"description":"Grants permission to attach a resource policy to the provided resource","accessLevel":"Write","resourceTypes":[{"name":"channel","required":false},{"name":"dashboard","required":false},{"name":"eventdatastore","required":false}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_PutResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-PutResourcePolicy"},"RegisterOrganizationDelegatedAdmin":{"conditionKeys":[],"resources":[],"description":"Grants permission to register an AWS Organizations member account as a delegated administrator","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:CreateServiceLinkedRole","iam:GetRole","organizations:ListAWSServiceAccessForOrganization","organizations:RegisterDelegatedAdministrator"],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_RegisterOrganizationDelegatedAdmin.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-RegisterOrganizationDelegatedAdmin"},"RemoveTags":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"channel"},{"name":"dashboard"},{"name":"eventdatastore"},{"name":"trail"}],"description":"Grants permission to remove tags from a trail, event data store, channel or dashboard","accessLevel":"Tagging","resourceTypes":[{"name":"channel","required":false},{"name":"dashboard","required":false},{"name":"eventdatastore","required":false},{"name":"trail","required":false}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_RemoveTags.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-RemoveTags"},"RestoreEventDataStore":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to restore an event data store","accessLevel":"Write","resourceTypes":[{"name":"eventdatastore","required":true}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_RestoreEventDataStore.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-RestoreEventDataStore"},"SearchSampleQueries":{"conditionKeys":[],"resources":[],"description":"Grants permission to perform semantic search for CloudTrail Lake sample queries","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/userguide/lake-console-queries.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-SearchSampleQueries"},"StartDashboardRefresh":{"conditionKeys":[],"resources":[{"name":"dashboard"}],"description":"Grants permission to start a refresh on the specified dashboard","accessLevel":"Write","resourceTypes":[{"name":"dashboard","required":true}],"dependentActions":["cloudtrail:StartQuery"],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_StartDashboardRefresh.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-StartDashboardRefresh"},"StartEventDataStoreIngestion":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to start ingestion on an event data store","accessLevel":"Write","resourceTypes":[{"name":"eventdatastore","required":true}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_StartEventDataStoreIngestion.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-StartEventDataStoreIngestion"},"StartImport":{"conditionKeys":[],"resources":[],"description":"Grants permission to start an import of logged trail events from a source S3 bucket to a destination event data store","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_StartImport.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-StartImport"},"StartLogging":{"conditionKeys":[],"resources":[{"name":"trail"}],"description":"Grants permission to start the recording of AWS API calls and log file delivery for a trail","accessLevel":"Write","resourceTypes":[{"name":"trail","required":true}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_StartLogging.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-StartLogging"},"StartQuery":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to start a new query on a specified event data store","accessLevel":"Write","resourceTypes":[{"name":"eventdatastore","required":true}],"dependentActions":["kms:Decrypt","kms:GenerateDataKey"],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_StartQuery.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-StartQuery"},"StopEventDataStoreIngestion":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to stop ingestion on an event data store","accessLevel":"Write","resourceTypes":[{"name":"eventdatastore","required":true}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_StopEventDataStoreIngestion.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-StopEventDataStoreIngestion"},"StopImport":{"conditionKeys":[],"resources":[],"description":"Grants permission to stop a specified import","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_StopImport.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-StopImport"},"StopLogging":{"conditionKeys":[],"resources":[{"name":"trail"}],"description":"Grants permission to stop the recording of AWS API calls and log file delivery for a trail","accessLevel":"Write","resourceTypes":[{"name":"trail","required":true}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_StopLogging.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-StopLogging"},"UpdateChannel":{"conditionKeys":[],"resources":[{"name":"channel"}],"description":"Grants permission to update a channel","accessLevel":"Write","resourceTypes":[{"name":"channel","required":true}],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_UpdateChannel.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-UpdateChannel"},"UpdateDashboard":{"conditionKeys":[],"resources":[{"name":"dashboard"}],"description":"Grants permission to update a dashboard","accessLevel":"Write","resourceTypes":[{"name":"dashboard","required":true}],"dependentActions":["cloudtrail:StartDashboardRefresh","cloudtrail:StartQuery"],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_UpdateDashboard.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-UpdateDashboard"},"UpdateEventDataStore":{"conditionKeys":[],"resources":[{"name":"eventdatastore"}],"description":"Grants permission to update an event data store","accessLevel":"Write","resourceTypes":[{"name":"eventdatastore","required":true}],"dependentActions":["iam:CreateServiceLinkedRole","iam:GetRole","kms:Decrypt","kms:GenerateDataKey","organizations:ListAWSServiceAccessForOrganization"],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_UpdateEventDataStore.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-UpdateEventDataStore"},"UpdateServiceLinkedChannel":{"conditionKeys":[],"resources":[{"name":"channel"}],"description":"Grants permission to update the service-linked channel settings for delivery of log data to an AWS service","accessLevel":"Write","resourceTypes":[{"name":"channel","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/userguide/viewing-service-linked-channels.html#slc-service-events","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-UpdateServiceLinkedChannel"},"UpdateTrail":{"conditionKeys":[],"resources":[{"name":"trail"}],"description":"Grants permission to update the settings that specify delivery of log files","accessLevel":"Write","resourceTypes":[{"name":"trail","required":true}],"dependentActions":["iam:CreateServiceLinkedRole","iam:GetRole","organizations:ListAWSServiceAccessForOrganization"],"operationUrl":"https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_UpdateTrail.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html#awscloudtrail-UpdateTrail"}},"resources":[{"name":"channel","arnFormats":["arn:${Partition}:cloudtrail:${Region}:${Account}:channel/${ChannelId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"dashboard","arnFormats":["arn:${Partition}:cloudtrail:${Region}:${Account}:dashboard/${DashboardName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"eventdatastore","arnFormats":["arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/${EventDataStoreId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"trail","arnFormats":["arn:${Partition}:cloudtrail:${Region}:${Account}:trail/${TrailName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys in a request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudtrail.html"}

package/src/data/servicereference/services/cloudwatch.json

@@ -1 +1 @@
-{"name":"cloudwatch","actions":{"BatchGetServiceLevelIndicatorReport":{"conditionKeys":[],"resources":[],"description":"Grants permission to batch get service level indicator report","accessLevel":"Read","resourceTypes":[]},"BatchGetServiceLevelObjectiveBudgetReport":{"conditionKeys":[],"resources":[{"name":"slo"}],"description":"Grants permission to batch retrieve a service level objective budget report","accessLevel":"Read","resourceTypes":[{"name":"slo","required":true}]},"CreateServiceLevelObjective":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a service level objective","accessLevel":"Write","resourceTypes":[]},"DeleteAlarmMuteRule":{"conditionKeys":[],"resources":[{"name":"alarm-mute-rule"}],"description":"Grants permission to delete an alarm mute rule","accessLevel":"Write","resourceTypes":[{"name":"alarm-mute-rule","required":true}]},"DeleteAlarms":{"conditionKeys":[],"resources":[{"name":"alarm"}],"description":"Grants permission to delete a collection of alarms","accessLevel":"Write","resourceTypes":[{"name":"alarm","required":true}]},"DeleteAnomalyDetector":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the specified anomaly detection model from your account","accessLevel":"Write","resourceTypes":[]},"DeleteDashboards":{"conditionKeys":[],"resources":[{"name":"dashboard"}],"description":"Grants permission to delete all CloudWatch dashboards that you specify","accessLevel":"Write","resourceTypes":[{"name":"dashboard","required":true}]},"DeleteInsightRules":{"conditionKeys":[],"resources":[{"name":"insight-rule"}],"description":"Grants permission to delete a collection of insight rules","accessLevel":"Write","resourceTypes":[{"name":"insight-rule","required":true}]},"DeleteMetricStream":{"conditionKeys":[],"resources":[{"name":"metric-stream"}],"description":"Grants permission to delete the CloudWatch metric stream that you specify","accessLevel":"Write","resourceTypes":[{"name":"metric-stream","required":true}]},"DeleteServiceLevelObjective":{"conditionKeys":[],"resources":[{"name":"slo"}],"description":"Grants permission to delete a service level objective","accessLevel":"Write","resourceTypes":[{"name":"slo","required":true}]},"DescribeAlarmHistory":{"conditionKeys":[],"resources":[{"name":"alarm"}],"description":"Grants permission to retrieve the history for the specified alarm","accessLevel":"Read","resourceTypes":[{"name":"alarm","required":true}]},"DescribeAlarms":{"conditionKeys":[],"resources":[{"name":"alarm"}],"description":"Grants permission to describe all alarms, currently owned by the user's account","accessLevel":"Read","resourceTypes":[{"name":"alarm","required":true}]},"DescribeAlarmsForMetric":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe all alarms configured on the specified metric, currently owned by the user's account","accessLevel":"Read","resourceTypes":[]},"DescribeAnomalyDetectors":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the anomaly detection models that you have created in your account","accessLevel":"Read","resourceTypes":[]},"DescribeInsightRules":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe all insight rules, currently owned by the user's account","accessLevel":"Read","resourceTypes":[]},"DisableAlarmActions":{"conditionKeys":[],"resources":[{"name":"alarm"}],"description":"Grants permission to disable actions for a collection of alarms","accessLevel":"Write","resourceTypes":[{"name":"alarm","required":true}]},"DisableInsightRules":{"conditionKeys":[],"resources":[{"name":"insight-rule"}],"description":"Grants permission to disable a collection of insight rules","accessLevel":"Write","resourceTypes":[{"name":"insight-rule","required":true}]},"EnableAlarmActions":{"conditionKeys":[],"resources":[{"name":"alarm"}],"description":"Grants permission to enable actions for a collection of alarms","accessLevel":"Write","resourceTypes":[{"name":"alarm","required":true}]},"EnableInsightRules":{"conditionKeys":[],"resources":[{"name":"insight-rule"}],"description":"Grants permission to enable a collection of insight rules","accessLevel":"Write","resourceTypes":[{"name":"insight-rule","required":true}]},"EnableTopologyDiscovery":{"conditionKeys":[],"resources":[],"description":"Grants permission to enable a CloudWatch topology discovery","accessLevel":"Write","resourceTypes":[]},"GenerateQuery":{"conditionKeys":[],"resources":[],"description":"Grants permission to generate a Metrics Insights or Logs Insights query string from a natural language prompt","accessLevel":"Read","resourceTypes":[]},"GenerateQueryResultsSummary":{"conditionKeys":[],"resources":[],"description":"Grants permission to generate a summary of CloudWatch LogInsights query results in natural language using generative AI","accessLevel":"Read","resourceTypes":[]},"GetAlarmMuteRule":{"conditionKeys":[],"resources":[{"name":"alarm-mute-rule"}],"description":"Grants permission to get an alarm mute rule","accessLevel":"Read","resourceTypes":[{"name":"alarm-mute-rule","required":true}]},"GetDashboard":{"conditionKeys":[],"resources":[{"name":"dashboard"}],"description":"Grants permission to display the details of the CloudWatch dashboard you specify","accessLevel":"Read","resourceTypes":[{"name":"dashboard","required":true}]},"GetInsightRuleReport":{"conditionKeys":[],"resources":[{"name":"insight-rule"}],"description":"Grants permission to return the top-N report of unique contributors over a time range for a given insight rule","accessLevel":"Read","resourceTypes":[{"name":"insight-rule","required":true}]},"GetMetricData":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve batch amounts of CloudWatch metric data and perform metric math on retrieved data","accessLevel":"Read","resourceTypes":[]},"GetMetricStatistics":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve statistics for the specified metric","accessLevel":"Read","resourceTypes":[]},"GetMetricStream":{"conditionKeys":[],"resources":[{"name":"metric-stream"}],"description":"Grants permission to return the details of a CloudWatch metric stream","accessLevel":"Read","resourceTypes":[{"name":"metric-stream","required":true}]},"GetMetricWidgetImage":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve snapshots of metric widgets","accessLevel":"Read","resourceTypes":[]},"GetService":{"conditionKeys":[],"resources":[{"name":"service"}],"description":"Grants permission to retrieve information about a service","accessLevel":"Read","resourceTypes":[{"name":"service","required":true}]},"GetServiceData":{"conditionKeys":[],"resources":[{"name":"service"}],"description":"Grants permission to retrieve service data","accessLevel":"Read","resourceTypes":[{"name":"service","required":true}],"permissionOnly":true},"GetServiceLevelObjective":{"conditionKeys":[],"resources":[{"name":"slo"}],"description":"Grants permission to retrieve information about service level objective","accessLevel":"Read","resourceTypes":[{"name":"slo","required":true}]},"GetTopologyDiscoveryStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a CloudWatch topology discovery status","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetTopologyMap":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a CloudWatch topology map","accessLevel":"Read","resourceTypes":[]},"Link":{"conditionKeys":[],"resources":[],"description":"Grants permission to share CloudWatch resources with a monitoring account","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"ListAlarmMuteRules":{"conditionKeys":[],"resources":[{"name":"alarm-mute-rule"}],"description":"Grants permission to retrieve a list of alarm mute rules owned by the user's account","accessLevel":"List","resourceTypes":[{"name":"alarm-mute-rule","required":true}]},"ListDashboards":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of all CloudWatch dashboards in your account","accessLevel":"List","resourceTypes":[]},"ListEntitiesForMetric":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve all the entities that are emitting a given metric","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListManagedInsightRules":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","cloudwatch:requestManagedResourceARNs"],"resources":[],"description":"Grants permission to list available managed Insight Rules for a given Resource ARN","accessLevel":"Read","resourceTypes":[]},"ListMetricStreams":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of all CloudWatch metric streams in your account","accessLevel":"List","resourceTypes":[]},"ListMetrics":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of valid metrics stored for the AWS account owner","accessLevel":"List","resourceTypes":[]},"ListServiceLevelObjectives":{"conditionKeys":[],"resources":[],"description":"Grants permission to list service level objectives","accessLevel":"List","resourceTypes":[]},"ListServices":{"conditionKeys":[],"resources":[],"description":"Grants permission to list services","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"alarm"},{"name":"alarm-mute-rule"},{"name":"insight-rule"},{"name":"slo"}],"description":"Grants permission to list tags for an Amazon CloudWatch resource","accessLevel":"List","resourceTypes":[{"name":"alarm","required":false},{"name":"alarm-mute-rule","required":false},{"name":"insight-rule","required":false},{"name":"slo","required":false}]},"PutAlarmMuteRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"alarm"},{"name":"alarm-mute-rule"}],"description":"Grants permission to create or update an alarm mute rule","accessLevel":"Write","resourceTypes":[{"name":"alarm-mute-rule","required":true},{"name":"alarm","required":false}]},"PutAnomalyDetector":{"conditionKeys":[],"resources":[],"description":"Grants permission to create or update an anomaly detection model for a CloudWatch metric","accessLevel":"Write","resourceTypes":[]},"PutCompositeAlarm":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","cloudwatch:AlarmActions"],"resources":[{"name":"alarm"}],"description":"Grants permission to create or update a composite alarm","accessLevel":"Write","resourceTypes":[{"name":"alarm","required":true}]},"PutDashboard":{"conditionKeys":[],"resources":[{"name":"dashboard"}],"description":"Grants permission to create a CloudWatch dashboard, or update an existing dashboard if it already exists","accessLevel":"Write","resourceTypes":[{"name":"dashboard","required":true}]},"PutInsightRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","cloudwatch:requestInsightRuleLogGroups"],"resources":[{"name":"insight-rule"}],"description":"Grants permission to create a new insight rule or replace an existing insight rule","accessLevel":"Write","resourceTypes":[{"name":"insight-rule","required":true}]},"PutManagedInsightRules":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","cloudwatch:requestManagedResourceARNs"],"resources":[],"description":"Grants permission to create managed Insight Rules","accessLevel":"Write","resourceTypes":[]},"PutMetricAlarm":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","cloudwatch:AlarmActions"],"resources":[{"name":"alarm"}],"description":"Grants permission to create or update an alarm and associates it with the specified Amazon CloudWatch metric","accessLevel":"Write","resourceTypes":[{"name":"alarm","required":true}]},"PutMetricData":{"conditionKeys":["cloudwatch:namespace"],"resources":[],"description":"Grants permission to publish metric data points to Amazon CloudWatch","accessLevel":"Write","resourceTypes":[]},"PutMetricStream":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"metric-stream"}],"description":"Grants permission to create a CloudWatch metric stream, or update an existing metric stream if it already exists","accessLevel":"Write","resourceTypes":[{"name":"metric-stream","required":true}]},"SetAlarmState":{"conditionKeys":[],"resources":[{"name":"alarm"}],"description":"Grants permission to temporarily set the state of an alarm for testing purposes","accessLevel":"Write","resourceTypes":[{"name":"alarm","required":true}]},"StartMetricStreams":{"conditionKeys":[],"resources":[{"name":"metric-stream"}],"description":"Grants permission to start all CloudWatch metric streams that you specify","accessLevel":"Write","resourceTypes":[{"name":"metric-stream","required":true}]},"StopMetricStreams":{"conditionKeys":[],"resources":[{"name":"metric-stream"}],"description":"Grants permission to stop all CloudWatch metric streams that you specify","accessLevel":"Write","resourceTypes":[{"name":"metric-stream","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"alarm"},{"name":"alarm-mute-rule"},{"name":"insight-rule"},{"name":"slo"}],"description":"Grants permission to add tags to an Amazon CloudWatch resource","accessLevel":"Tagging","resourceTypes":[{"name":"alarm","required":false},{"name":"alarm-mute-rule","required":false},{"name":"insight-rule","required":false},{"name":"slo","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"alarm"},{"name":"alarm-mute-rule"},{"name":"insight-rule"},{"name":"slo"}],"description":"Grants permission to remove a tag from an Amazon CloudWatch resource","accessLevel":"Tagging","resourceTypes":[{"name":"alarm","required":false},{"name":"alarm-mute-rule","required":false},{"name":"insight-rule","required":false},{"name":"slo","required":false}]},"UpdateServiceLevelObjective":{"conditionKeys":[],"resources":[{"name":"slo"}],"description":"Grants permission to update a service level objective","accessLevel":"Write","resourceTypes":[{"name":"slo","required":true}]}},"resources":[{"name":"alarm","arnFormats":["arn:${Partition}:cloudwatch:${Region}:${Account}:alarm:${AlarmName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"alarm-mute-rule","arnFormats":["arn:${Partition}:cloudwatch:${Region}:${Account}:alarm-mute-rule:${AlarmMuteRuleName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"dashboard","arnFormats":["arn:${Partition}:cloudwatch::${Account}:dashboard/${DashboardName}"],"conditionKeys":[]},{"name":"insight-rule","arnFormats":["arn:${Partition}:cloudwatch:${Region}:${Account}:insight-rule/${InsightRuleName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"metric-stream","arnFormats":["arn:${Partition}:cloudwatch:${Region}:${Account}:metric-stream/${MetricStreamName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"service","arnFormats":["arn:${Partition}:cloudwatch:${Region}:${Account}:service/${ServiceName}-${UniqueAttributesHex}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"slo","arnFormats":["arn:${Partition}:cloudwatch:${Region}:${Account}:slo/${SloName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters actions based on the allowed set of values for each of the tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters actions based on tag-value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters actions based on the presence of mandatory tags in the request"},"cloudwatch:AlarmActions":{"types":["ArrayOfString"],"description":"Filters actions based on defined alarm actions"},"cloudwatch:namespace":{"types":["String"],"description":"Filters actions based on the presence of optional namespace values"},"cloudwatch:requestInsightRuleLogGroups":{"types":["ArrayOfString"],"description":"Filters actions based on the Log Groups specified in an Insight Rule"},"cloudwatch:requestManagedResourceARNs":{"types":["ArrayOfARN"],"description":"Filters access by the Resource ARNs specified in a managed Insight Rule"}}}
+{"name":"cloudwatch","actions":{"BatchGetServiceLevelIndicatorReport":{"conditionKeys":[],"resources":[],"description":"Grants permission to batch get service level indicator report","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Application-Monitoring-Sections.html#ApplicationSignals-PreviewSDK","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-BatchGetServiceLevelIndicatorReport"},"BatchGetServiceLevelObjectiveBudgetReport":{"conditionKeys":[],"resources":[{"name":"slo"}],"description":"Grants permission to batch retrieve a service level objective budget report","accessLevel":"Read","resourceTypes":[{"name":"slo","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Application-Monitoring-Sections.html#ApplicationSignals-PreviewSDK","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-BatchGetServiceLevelObjectiveBudgetReport"},"CreateServiceLevelObjective":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a service level objective","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Application-Monitoring-Sections.html#ApplicationSignals-PreviewSDK","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-CreateServiceLevelObjective"},"DeleteAlarmMuteRule":{"conditionKeys":[],"resources":[{"name":"alarm-mute-rule"}],"description":"Grants permission to delete an alarm mute rule","accessLevel":"Write","resourceTypes":[{"name":"alarm-mute-rule","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DeleteAlarmMuteRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-DeleteAlarmMuteRule"},"DeleteAlarms":{"conditionKeys":[],"resources":[{"name":"alarm"}],"description":"Grants permission to delete a collection of alarms","accessLevel":"Write","resourceTypes":[{"name":"alarm","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DeleteAlarms.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-DeleteAlarms"},"DeleteAnomalyDetector":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the specified anomaly detection model from your account","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DeleteAnomalyDetector.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-DeleteAnomalyDetector"},"DeleteDashboards":{"conditionKeys":[],"resources":[{"name":"dashboard"}],"description":"Grants permission to delete all CloudWatch dashboards that you specify","accessLevel":"Write","resourceTypes":[{"name":"dashboard","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DeleteDashboards.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-DeleteDashboards"},"DeleteInsightRules":{"conditionKeys":[],"resources":[{"name":"insight-rule"}],"description":"Grants permission to delete a collection of insight rules","accessLevel":"Write","resourceTypes":[{"name":"insight-rule","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DeleteInsightRules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-DeleteInsightRules"},"DeleteMetricStream":{"conditionKeys":[],"resources":[{"name":"metric-stream"}],"description":"Grants permission to delete the CloudWatch metric stream that you specify","accessLevel":"Write","resourceTypes":[{"name":"metric-stream","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DeleteMetricStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-DeleteMetricStream"},"DeleteServiceLevelObjective":{"conditionKeys":[],"resources":[{"name":"slo"}],"description":"Grants permission to delete a service level objective","accessLevel":"Write","resourceTypes":[{"name":"slo","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Application-Monitoring-Sections.html#ApplicationSignals-PreviewSDK","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-DeleteServiceLevelObjective"},"DescribeAlarmHistory":{"conditionKeys":[],"resources":[{"name":"alarm"}],"description":"Grants permission to retrieve the history for the specified alarm","accessLevel":"Read","resourceTypes":[{"name":"alarm","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DescribeAlarmHistory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-DescribeAlarmHistory"},"DescribeAlarms":{"conditionKeys":[],"resources":[{"name":"alarm"}],"description":"Grants permission to describe all alarms, currently owned by the user's account","accessLevel":"Read","resourceTypes":[{"name":"alarm","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DescribeAlarms.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-DescribeAlarms"},"DescribeAlarmsForMetric":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe all alarms configured on the specified metric, currently owned by the user's account","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DescribeAlarmsForMetric.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-DescribeAlarmsForMetric"},"DescribeAnomalyDetectors":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the anomaly detection models that you have created in your account","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DescribeAnomalyDetectors.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-DescribeAnomalyDetectors"},"DescribeInsightRules":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe all insight rules, currently owned by the user's account","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DescribeInsightRules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-DescribeInsightRules"},"DisableAlarmActions":{"conditionKeys":[],"resources":[{"name":"alarm"}],"description":"Grants permission to disable actions for a collection of alarms","accessLevel":"Write","resourceTypes":[{"name":"alarm","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DisableAlarmActions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-DisableAlarmActions"},"DisableInsightRules":{"conditionKeys":[],"resources":[{"name":"insight-rule"}],"description":"Grants permission to disable a collection of insight rules","accessLevel":"Write","resourceTypes":[{"name":"insight-rule","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DisableInsightRules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-DisableInsightRules"},"EnableAlarmActions":{"conditionKeys":[],"resources":[{"name":"alarm"}],"description":"Grants permission to enable actions for a collection of alarms","accessLevel":"Write","resourceTypes":[{"name":"alarm","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_EnableAlarmActions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-EnableAlarmActions"},"EnableInsightRules":{"conditionKeys":[],"resources":[{"name":"insight-rule"}],"description":"Grants permission to enable a collection of insight rules","accessLevel":"Write","resourceTypes":[{"name":"insight-rule","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_EnableInsightRules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-EnableInsightRules"},"EnableTopologyDiscovery":{"conditionKeys":[],"resources":[],"description":"Grants permission to enable a CloudWatch topology discovery","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Application-Monitoring-Sections.html#ApplicationSignals-PreviewSDK","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-EnableTopologyDiscovery"},"GenerateQuery":{"conditionKeys":[],"resources":[],"description":"Grants permission to generate a Metrics Insights or Logs Insights query string from a natural language prompt","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cloudwatch-metrics-insights-query-assist.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-GenerateQuery"},"GenerateQueryResultsSummary":{"conditionKeys":[],"resources":[],"description":"Grants permission to generate a summary of CloudWatch LogInsights query results in natural language using generative AI","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatchLogs-Insights-Query-Results-Summary.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-GenerateQueryResultsSummary"},"GetAlarmMuteRule":{"conditionKeys":[],"resources":[{"name":"alarm-mute-rule"}],"description":"Grants permission to get an alarm mute rule","accessLevel":"Read","resourceTypes":[{"name":"alarm-mute-rule","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_GetAlarmMuteRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-GetAlarmMuteRule"},"GetDashboard":{"conditionKeys":[],"resources":[{"name":"dashboard"}],"description":"Grants permission to display the details of the CloudWatch dashboard you specify","accessLevel":"Read","resourceTypes":[{"name":"dashboard","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_GetDashboard.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-GetDashboard"},"GetInsightRuleReport":{"conditionKeys":[],"resources":[{"name":"insight-rule"}],"description":"Grants permission to return the top-N report of unique contributors over a time range for a given insight rule","accessLevel":"Read","resourceTypes":[{"name":"insight-rule","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_GetInsightRuleReport.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-GetInsightRuleReport"},"GetMetricData":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve batch amounts of CloudWatch metric data and perform metric math on retrieved data","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_GetMetricData.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-GetMetricData"},"GetMetricStatistics":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve statistics for the specified metric","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_GetMetricStatistics.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-GetMetricStatistics"},"GetMetricStream":{"conditionKeys":[],"resources":[{"name":"metric-stream"}],"description":"Grants permission to return the details of a CloudWatch metric stream","accessLevel":"Read","resourceTypes":[{"name":"metric-stream","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_GetMetricStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-GetMetricStream"},"GetMetricWidgetImage":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve snapshots of metric widgets","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_GetMetricWidgetImage.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-GetMetricWidgetImage"},"GetService":{"conditionKeys":[],"resources":[{"name":"service"}],"description":"Grants permission to retrieve information about a service","accessLevel":"Read","resourceTypes":[{"name":"service","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Application-Monitoring-Sections.html#ApplicationSignals-PreviewSDK","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-GetService"},"GetServiceData":{"conditionKeys":[],"resources":[{"name":"service"}],"description":"Grants permission to retrieve service data","accessLevel":"Read","resourceTypes":[{"name":"service","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/permissions-reference-cw.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-GetServiceData"},"GetServiceLevelObjective":{"conditionKeys":[],"resources":[{"name":"slo"}],"description":"Grants permission to retrieve information about service level objective","accessLevel":"Read","resourceTypes":[{"name":"slo","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Application-Monitoring-Sections.html#ApplicationSignals-PreviewSDK","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-GetServiceLevelObjective"},"GetTopologyDiscoveryStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a CloudWatch topology discovery status","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/permissions-reference-cw.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-GetTopologyDiscoveryStatus"},"GetTopologyMap":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a CloudWatch topology map","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Application-Monitoring-Sections.html#ApplicationSignals-PreviewSDK","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-GetTopologyMap"},"Link":{"conditionKeys":[],"resources":[],"description":"Grants permission to share CloudWatch resources with a monitoring account","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Unified-Cross-Account-Setup.html#CloudWatch-Unified-Cross-Account-Setup-permissions","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-Link"},"ListAlarmMuteRules":{"conditionKeys":[],"resources":[{"name":"alarm-mute-rule"}],"description":"Grants permission to retrieve a list of alarm mute rules owned by the user's account","accessLevel":"List","resourceTypes":[{"name":"alarm-mute-rule","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_ListAlarmMuteRules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-ListAlarmMuteRules"},"ListDashboards":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of all CloudWatch dashboards in your account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_ListDashboards.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-ListDashboards"},"ListEntitiesForMetric":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve all the entities that are emitting a given metric","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/permissions-reference-cw.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-ListEntitiesForMetric"},"ListManagedInsightRules":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","cloudwatch:requestManagedResourceARNs"],"resources":[],"description":"Grants permission to list available managed Insight Rules for a given Resource ARN","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_ListManagedInsightRules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-ListManagedInsightRules"},"ListMetricStreams":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of all CloudWatch metric streams in your account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_ListMetricStreams.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-ListMetricStreams"},"ListMetrics":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of valid metrics stored for the AWS account owner","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_ListMetrics.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-ListMetrics"},"ListServiceLevelObjectives":{"conditionKeys":[],"resources":[],"description":"Grants permission to list service level objectives","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Application-Monitoring-Sections.html#ApplicationSignals-PreviewSDK","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-ListServiceLevelObjectives"},"ListServices":{"conditionKeys":[],"resources":[],"description":"Grants permission to list services","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Application-Monitoring-Sections.html#ApplicationSignals-PreviewSDK","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-ListServices"},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"alarm"},{"name":"alarm-mute-rule"},{"name":"insight-rule"},{"name":"slo"}],"description":"Grants permission to list tags for an Amazon CloudWatch resource","accessLevel":"List","resourceTypes":[{"name":"alarm","required":false},{"name":"alarm-mute-rule","required":false},{"name":"insight-rule","required":false},{"name":"slo","required":false}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-ListTagsForResource"},"PutAlarmMuteRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"alarm"},{"name":"alarm-mute-rule"}],"description":"Grants permission to create or update an alarm mute rule","accessLevel":"Write","resourceTypes":[{"name":"alarm-mute-rule","required":true},{"name":"alarm","required":false}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_PutAlarmMuteRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-PutAlarmMuteRule"},"PutAnomalyDetector":{"conditionKeys":[],"resources":[],"description":"Grants permission to create or update an anomaly detection model for a CloudWatch metric","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_PutAnomalyDetector.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-PutAnomalyDetector"},"PutCompositeAlarm":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","cloudwatch:AlarmActions"],"resources":[{"name":"alarm"}],"description":"Grants permission to create or update a composite alarm","accessLevel":"Write","resourceTypes":[{"name":"alarm","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_PutCompositeAlarm.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-PutCompositeAlarm"},"PutDashboard":{"conditionKeys":[],"resources":[{"name":"dashboard"}],"description":"Grants permission to create a CloudWatch dashboard, or update an existing dashboard if it already exists","accessLevel":"Write","resourceTypes":[{"name":"dashboard","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_PutDashboard.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-PutDashboard"},"PutInsightRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","cloudwatch:requestInsightRuleLogGroups"],"resources":[{"name":"insight-rule"}],"description":"Grants permission to create a new insight rule or replace an existing insight rule","accessLevel":"Write","resourceTypes":[{"name":"insight-rule","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_PutInsightRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-PutInsightRule"},"PutManagedInsightRules":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","cloudwatch:requestManagedResourceARNs"],"resources":[],"description":"Grants permission to create managed Insight Rules","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_PutManagedInsightRules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-PutManagedInsightRules"},"PutMetricAlarm":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","cloudwatch:AlarmActions"],"resources":[{"name":"alarm"}],"description":"Grants permission to create or update an alarm and associates it with the specified Amazon CloudWatch metric","accessLevel":"Write","resourceTypes":[{"name":"alarm","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_PutMetricAlarm.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-PutMetricAlarm"},"PutMetricData":{"conditionKeys":["cloudwatch:namespace"],"resources":[],"description":"Grants permission to publish metric data points to Amazon CloudWatch","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_PutMetricData.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-PutMetricData"},"PutMetricStream":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"metric-stream"}],"description":"Grants permission to create a CloudWatch metric stream, or update an existing metric stream if it already exists","accessLevel":"Write","resourceTypes":[{"name":"metric-stream","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_PutMetricStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-PutMetricStream"},"SetAlarmState":{"conditionKeys":[],"resources":[{"name":"alarm"}],"description":"Grants permission to temporarily set the state of an alarm for testing purposes","accessLevel":"Write","resourceTypes":[{"name":"alarm","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_SetAlarmState.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-SetAlarmState"},"StartMetricStreams":{"conditionKeys":[],"resources":[{"name":"metric-stream"}],"description":"Grants permission to start all CloudWatch metric streams that you specify","accessLevel":"Write","resourceTypes":[{"name":"metric-stream","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_StartMetricStreams.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-StartMetricStreams"},"StopMetricStreams":{"conditionKeys":[],"resources":[{"name":"metric-stream"}],"description":"Grants permission to stop all CloudWatch metric streams that you specify","accessLevel":"Write","resourceTypes":[{"name":"metric-stream","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_StopMetricStreams.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-StopMetricStreams"},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"alarm"},{"name":"alarm-mute-rule"},{"name":"insight-rule"},{"name":"slo"}],"description":"Grants permission to add tags to an Amazon CloudWatch resource","accessLevel":"Tagging","resourceTypes":[{"name":"alarm","required":false},{"name":"alarm-mute-rule","required":false},{"name":"insight-rule","required":false},{"name":"slo","required":false}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-TagResource"},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"alarm"},{"name":"alarm-mute-rule"},{"name":"insight-rule"},{"name":"slo"}],"description":"Grants permission to remove a tag from an Amazon CloudWatch resource","accessLevel":"Tagging","resourceTypes":[{"name":"alarm","required":false},{"name":"alarm-mute-rule","required":false},{"name":"insight-rule","required":false},{"name":"slo","required":false}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-UntagResource"},"UpdateServiceLevelObjective":{"conditionKeys":[],"resources":[{"name":"slo"}],"description":"Grants permission to update a service level objective","accessLevel":"Write","resourceTypes":[{"name":"slo","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Application-Monitoring-Sections.html#ApplicationSignals-PreviewSDK","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html#amazoncloudwatch-UpdateServiceLevelObjective"}},"resources":[{"name":"alarm","arnFormats":["arn:${Partition}:cloudwatch:${Region}:${Account}:alarm:${AlarmName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"alarm-mute-rule","arnFormats":["arn:${Partition}:cloudwatch:${Region}:${Account}:alarm-mute-rule:${AlarmMuteRuleName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"dashboard","arnFormats":["arn:${Partition}:cloudwatch::${Account}:dashboard/${DashboardName}"],"conditionKeys":[]},{"name":"insight-rule","arnFormats":["arn:${Partition}:cloudwatch:${Region}:${Account}:insight-rule/${InsightRuleName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"metric-stream","arnFormats":["arn:${Partition}:cloudwatch:${Region}:${Account}:metric-stream/${MetricStreamName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"service","arnFormats":["arn:${Partition}:cloudwatch:${Region}:${Account}:service/${ServiceName}-${UniqueAttributesHex}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"slo","arnFormats":["arn:${Partition}:cloudwatch:${Region}:${Account}:slo/${SloName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters actions based on the allowed set of values for each of the tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters actions based on tag-value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters actions based on the presence of mandatory tags in the request"},"cloudwatch:AlarmActions":{"types":["ArrayOfString"],"description":"Filters actions based on defined alarm actions"},"cloudwatch:namespace":{"types":["String"],"description":"Filters actions based on the presence of optional namespace values"},"cloudwatch:requestInsightRuleLogGroups":{"types":["ArrayOfString"],"description":"Filters actions based on the Log Groups specified in an Insight Rule"},"cloudwatch:requestManagedResourceARNs":{"types":["ArrayOfARN"],"description":"Filters access by the Resource ARNs specified in a managed Insight Rule"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html"}

package/src/data/servicereference/services/codeartifact.json

@@ -1 +1 @@
-{"name":"codeartifact","actions":{"AssociateExternalConnection":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to add an external connection to a repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"AssociateWithDownstreamRepository":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to associate an existing repository as an upstream repository to another repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"CopyPackageVersions":{"conditionKeys":[],"resources":[{"name":"package"},{"name":"repository"}],"description":"Grants permission to copy package versions from one repository to another repository in the same domain","accessLevel":"Write","resourceTypes":[{"name":"package","required":true},{"name":"repository","required":true}]},"CreateDomain":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new domain","accessLevel":"Write","resourceTypes":[]},"CreatePackageGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a package group","accessLevel":"Write","resourceTypes":[]},"CreateRepository":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new repository","accessLevel":"Write","resourceTypes":[]},"DeleteDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to delete a domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DeleteDomainPermissionsPolicy":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to delete the resource policy set on a domain","accessLevel":"Permissions management","resourceTypes":[{"name":"domain","required":true}]},"DeletePackage":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to delete a package","accessLevel":"Write","resourceTypes":[{"name":"package","required":true}]},"DeletePackageGroup":{"conditionKeys":[],"resources":[{"name":"package-group"}],"description":"Grants permission to delete a package group","accessLevel":"Write","resourceTypes":[{"name":"package-group","required":true}]},"DeletePackageVersions":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to delete package versions","accessLevel":"Write","resourceTypes":[{"name":"package","required":true}]},"DeleteRepository":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to delete a repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"DeleteRepositoryPermissionsPolicy":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to delete the resource policy set on a repository","accessLevel":"Permissions management","resourceTypes":[{"name":"repository","required":true}]},"DescribeDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to return information about a domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"DescribePackage":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to retrieve information about a package","accessLevel":"Read","resourceTypes":[{"name":"package","required":true}]},"DescribePackageGroup":{"conditionKeys":[],"resources":[{"name":"package-group"}],"description":"Grants permission to return detailed information about a package group","accessLevel":"Read","resourceTypes":[{"name":"package-group","required":true}]},"DescribePackageVersion":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to return information about a package version","accessLevel":"Read","resourceTypes":[{"name":"package","required":true}]},"DescribeRepository":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to return detailed information about a repository","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"DisassociateExternalConnection":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to disassociate an external connection from a repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"DisposePackageVersions":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to set the status of package versions to Disposed and delete their assets","accessLevel":"Write","resourceTypes":[{"name":"package","required":true}]},"GetAssociatedPackageGroup":{"conditionKeys":[],"resources":[{"name":"package-group"}],"description":"Grants permission to return a package's associated package group","accessLevel":"Read","resourceTypes":[{"name":"package-group","required":true}]},"GetAuthorizationToken":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to generate a temporary authentication token for accessing repositories in a domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"GetDomainPermissionsPolicy":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to return a domain's resource policy","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"GetPackageVersionAsset":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to return an asset (or file) that is part of a package version","accessLevel":"Read","resourceTypes":[{"name":"package","required":true}]},"GetPackageVersionReadme":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to return a package version's readme file","accessLevel":"Read","resourceTypes":[{"name":"package","required":true}]},"GetRepositoryEndpoint":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to return an endpoint for a repository","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"GetRepositoryPermissionsPolicy":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to return a repository's resource policy","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"ListAllowedRepositoriesForGroup":{"conditionKeys":[],"resources":[{"name":"package-group"}],"description":"Grants permission to list the allowed repositories for a package group","accessLevel":"List","resourceTypes":[{"name":"package-group","required":true}]},"ListAssociatedPackages":{"conditionKeys":[],"resources":[{"name":"package-group"}],"description":"Grants permission to list the packages associated to a package group","accessLevel":"List","resourceTypes":[{"name":"package-group","required":true}]},"ListDomains":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the domains in the current user's AWS account","accessLevel":"List","resourceTypes":[]},"ListPackageGroups":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to list the package groups in a domain","accessLevel":"List","resourceTypes":[{"name":"domain","required":true}]},"ListPackageVersionAssets":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to list a package version's assets","accessLevel":"List","resourceTypes":[{"name":"package","required":true}]},"ListPackageVersionDependencies":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to list the direct dependencies of a package version","accessLevel":"List","resourceTypes":[{"name":"package","required":true}]},"ListPackageVersions":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to list a package's versions","accessLevel":"List","resourceTypes":[{"name":"package","required":true}]},"ListPackages":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to list the packages in a repository","accessLevel":"List","resourceTypes":[{"name":"repository","required":true}]},"ListRepositories":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the repositories administered by the calling account","accessLevel":"List","resourceTypes":[]},"ListRepositoriesInDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to list the repositories in a domain","accessLevel":"List","resourceTypes":[{"name":"domain","required":true}]},"ListSubPackageGroups":{"conditionKeys":[],"resources":[{"name":"package-group"}],"description":"Grants permission to list the sub package groups for a parent package group","accessLevel":"List","resourceTypes":[{"name":"package-group","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"domain"},{"name":"package-group"},{"name":"repository"}],"description":"Grants permission to list tags for a CodeArtifact resource","accessLevel":"List","resourceTypes":[{"name":"domain","required":false},{"name":"package-group","required":false},{"name":"repository","required":false}]},"PublishPackageVersion":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to publish assets and metadata to a repository endpoint","accessLevel":"Write","resourceTypes":[{"name":"package","required":true}]},"PutDomainPermissionsPolicy":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to attach a resource policy to a domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"PutPackageMetadata":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to add, modify or remove package metadata using a repository endpoint","accessLevel":"Write","resourceTypes":[{"name":"package","required":true}]},"PutPackageOriginConfiguration":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to set origin configuration for a package","accessLevel":"Write","resourceTypes":[{"name":"package","required":true}]},"PutRepositoryPermissionsPolicy":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to attach a resource policy to a repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"ReadFromRepository":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to return package assets and metadata from a repository endpoint","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"domain"},{"name":"package-group"},{"name":"repository"}],"description":"Grants permission to tag a CodeArtifact resource","accessLevel":"Tagging","resourceTypes":[{"name":"domain","required":false},{"name":"package-group","required":false},{"name":"repository","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"domain"},{"name":"package-group"},{"name":"repository"}],"description":"Grants permission to remove a tag from a CodeArtifact resource","accessLevel":"Tagging","resourceTypes":[{"name":"domain","required":false},{"name":"package-group","required":false},{"name":"repository","required":false}]},"UpdatePackageGroup":{"conditionKeys":[],"resources":[{"name":"package-group"}],"description":"Grants permission to modify the properties of a package group","accessLevel":"Write","resourceTypes":[{"name":"package-group","required":true}]},"UpdatePackageGroupOriginConfiguration":{"conditionKeys":[],"resources":[{"name":"package-group"}],"description":"Grants permission to modify the package origin configuration of a package group","accessLevel":"Write","resourceTypes":[{"name":"package-group","required":true}]},"UpdatePackageVersionsStatus":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to modify the status of one or more versions of a package","accessLevel":"Write","resourceTypes":[{"name":"package","required":true}]},"UpdateRepository":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to modify the properties of a repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]}},"resources":[{"name":"domain","arnFormats":["arn:${Partition}:codeartifact:${Region}:${Account}:domain/${DomainName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"package","arnFormats":["arn:${Partition}:codeartifact:${Region}:${Account}:package/${DomainName}/${RepositoryName}/${PackageFormat}/${PackageNamespace}/${PackageName}"],"conditionKeys":[]},{"name":"package-group","arnFormats":["arn:${Partition}:codeartifact:${Region}:${Account}:package-group/${DomainName}${EncodedPackageGroupPattern}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"repository","arnFormats":["arn:${Partition}:codeartifact:${Region}:${Account}:repository/${DomainName}/${RepositoryName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"}}}
+{"name":"codeartifact","actions":{"AssociateExternalConnection":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to add an external connection to a repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_AssociateExternalConnection.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-AssociateExternalConnection"},"AssociateWithDownstreamRepository":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to associate an existing repository as an upstream repository to another repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/ug/repos-upstream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-AssociateWithDownstreamRepository"},"CopyPackageVersions":{"conditionKeys":[],"resources":[{"name":"package"},{"name":"repository"}],"description":"Grants permission to copy package versions from one repository to another repository in the same domain","accessLevel":"Write","resourceTypes":[{"name":"package","required":true},{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_CopyPackageVersions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-CopyPackageVersions"},"CreateDomain":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new domain","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_CreateDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-CreateDomain"},"CreatePackageGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a package group","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_CreatePackageGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-CreatePackageGroup"},"CreateRepository":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new repository","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_CreateRepository.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-CreateRepository"},"DeleteDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to delete a domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_DeleteDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-DeleteDomain"},"DeleteDomainPermissionsPolicy":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to delete the resource policy set on a domain","accessLevel":"Permissions management","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_DeleteDomainPermissionsPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-DeleteDomainPermissionsPolicy"},"DeletePackage":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to delete a package","accessLevel":"Write","resourceTypes":[{"name":"package","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_DeletePackage.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-DeletePackage"},"DeletePackageGroup":{"conditionKeys":[],"resources":[{"name":"package-group"}],"description":"Grants permission to delete a package group","accessLevel":"Write","resourceTypes":[{"name":"package-group","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_DeletePackageGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-DeletePackageGroup"},"DeletePackageVersions":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to delete package versions","accessLevel":"Write","resourceTypes":[{"name":"package","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_DeletePackageVersions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-DeletePackageVersions"},"DeleteRepository":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to delete a repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_DeleteRepository.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-DeleteRepository"},"DeleteRepositoryPermissionsPolicy":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to delete the resource policy set on a repository","accessLevel":"Permissions management","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_DeleteRepositoryPermissionsPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-DeleteRepositoryPermissionsPolicy"},"DescribeDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to return information about a domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_DescribeDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-DescribeDomain"},"DescribePackage":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to retrieve information about a package","accessLevel":"Read","resourceTypes":[{"name":"package","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_DescribePackage.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-DescribePackage"},"DescribePackageGroup":{"conditionKeys":[],"resources":[{"name":"package-group"}],"description":"Grants permission to return detailed information about a package group","accessLevel":"Read","resourceTypes":[{"name":"package-group","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_DescribePackageGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-DescribePackageGroup"},"DescribePackageVersion":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to return information about a package version","accessLevel":"Read","resourceTypes":[{"name":"package","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_DescribePackageVersion.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-DescribePackageVersion"},"DescribeRepository":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to return detailed information about a repository","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_DescribeRepository.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-DescribeRepository"},"DisassociateExternalConnection":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to disassociate an external connection from a repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_DisassociateExternalConnection.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-DisassociateExternalConnection"},"DisposePackageVersions":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to set the status of package versions to Disposed and delete their assets","accessLevel":"Write","resourceTypes":[{"name":"package","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_DisposePackageVersions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-DisposePackageVersions"},"GetAssociatedPackageGroup":{"conditionKeys":[],"resources":[{"name":"package-group"}],"description":"Grants permission to return a package's associated package group","accessLevel":"Read","resourceTypes":[{"name":"package-group","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_GetAssociatedPackageGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-GetAssociatedPackageGroup"},"GetAuthorizationToken":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to generate a temporary authentication token for accessing repositories in a domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_GetAuthorizationToken.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-GetAuthorizationToken"},"GetDomainPermissionsPolicy":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to return a domain's resource policy","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_GetDomainPermissionsPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-GetDomainPermissionsPolicy"},"GetPackageVersionAsset":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to return an asset (or file) that is part of a package version","accessLevel":"Read","resourceTypes":[{"name":"package","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_GetPackageVersionAsset.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-GetPackageVersionAsset"},"GetPackageVersionReadme":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to return a package version's readme file","accessLevel":"Read","resourceTypes":[{"name":"package","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_GetPackageVersionReadme.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-GetPackageVersionReadme"},"GetRepositoryEndpoint":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to return an endpoint for a repository","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_GetRepositoryEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-GetRepositoryEndpoint"},"GetRepositoryPermissionsPolicy":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to return a repository's resource policy","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_GetRepositoryPermissionsPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-GetRepositoryPermissionsPolicy"},"ListAllowedRepositoriesForGroup":{"conditionKeys":[],"resources":[{"name":"package-group"}],"description":"Grants permission to list the allowed repositories for a package group","accessLevel":"List","resourceTypes":[{"name":"package-group","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_ListRepositoriesInDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-ListAllowedRepositoriesForGroup"},"ListAssociatedPackages":{"conditionKeys":[],"resources":[{"name":"package-group"}],"description":"Grants permission to list the packages associated to a package group","accessLevel":"List","resourceTypes":[{"name":"package-group","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_ListAssociatedPackages.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-ListAssociatedPackages"},"ListDomains":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the domains in the current user's AWS account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_ListDomains.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-ListDomains"},"ListPackageGroups":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to list the package groups in a domain","accessLevel":"List","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_ListPackageGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-ListPackageGroups"},"ListPackageVersionAssets":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to list a package version's assets","accessLevel":"List","resourceTypes":[{"name":"package","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_ListPackageVersionAssets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-ListPackageVersionAssets"},"ListPackageVersionDependencies":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to list the direct dependencies of a package version","accessLevel":"List","resourceTypes":[{"name":"package","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_ListPackageVersionDependencies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-ListPackageVersionDependencies"},"ListPackageVersions":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to list a package's versions","accessLevel":"List","resourceTypes":[{"name":"package","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_ListPackageVersions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-ListPackageVersions"},"ListPackages":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to list the packages in a repository","accessLevel":"List","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_ListPackages.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-ListPackages"},"ListRepositories":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the repositories administered by the calling account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_ListRepositories.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-ListRepositories"},"ListRepositoriesInDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to list the repositories in a domain","accessLevel":"List","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_ListRepositoriesInDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-ListRepositoriesInDomain"},"ListSubPackageGroups":{"conditionKeys":[],"resources":[{"name":"package-group"}],"description":"Grants permission to list the sub package groups for a parent package group","accessLevel":"List","resourceTypes":[{"name":"package-group","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_ListSubPackageGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-ListSubPackageGroups"},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"domain"},{"name":"package-group"},{"name":"repository"}],"description":"Grants permission to list tags for a CodeArtifact resource","accessLevel":"List","resourceTypes":[{"name":"domain","required":false},{"name":"package-group","required":false},{"name":"repository","required":false}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-ListTagsForResource"},"PublishPackageVersion":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to publish assets and metadata to a repository endpoint","accessLevel":"Write","resourceTypes":[{"name":"package","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/ug/repo-policies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-PublishPackageVersion"},"PutDomainPermissionsPolicy":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to attach a resource policy to a domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_PutDomainPermissionsPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-PutDomainPermissionsPolicy"},"PutPackageMetadata":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to add, modify or remove package metadata using a repository endpoint","accessLevel":"Write","resourceTypes":[{"name":"package","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/ug/repo-policies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-PutPackageMetadata"},"PutPackageOriginConfiguration":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to set origin configuration for a package","accessLevel":"Write","resourceTypes":[{"name":"package","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_PutPackageOriginConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-PutPackageOriginConfiguration"},"PutRepositoryPermissionsPolicy":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to attach a resource policy to a repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_PutRepositoryPermissionsPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-PutRepositoryPermissionsPolicy"},"ReadFromRepository":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to return package assets and metadata from a repository endpoint","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/ug/repo-policies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-ReadFromRepository"},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"domain"},{"name":"package-group"},{"name":"repository"}],"description":"Grants permission to tag a CodeArtifact resource","accessLevel":"Tagging","resourceTypes":[{"name":"domain","required":false},{"name":"package-group","required":false},{"name":"repository","required":false}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-TagResource"},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"domain"},{"name":"package-group"},{"name":"repository"}],"description":"Grants permission to remove a tag from a CodeArtifact resource","accessLevel":"Tagging","resourceTypes":[{"name":"domain","required":false},{"name":"package-group","required":false},{"name":"repository","required":false}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-UntagResource"},"UpdatePackageGroup":{"conditionKeys":[],"resources":[{"name":"package-group"}],"description":"Grants permission to modify the properties of a package group","accessLevel":"Write","resourceTypes":[{"name":"package-group","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_UpdatePackageGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-UpdatePackageGroup"},"UpdatePackageGroupOriginConfiguration":{"conditionKeys":[],"resources":[{"name":"package-group"}],"description":"Grants permission to modify the package origin configuration of a package group","accessLevel":"Write","resourceTypes":[{"name":"package-group","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_UpdatePackageGroupOriginConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-UpdatePackageGroupOriginConfiguration"},"UpdatePackageVersionsStatus":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to modify the status of one or more versions of a package","accessLevel":"Write","resourceTypes":[{"name":"package","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_UpdatePackageVersionsStatus.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-UpdatePackageVersionsStatus"},"UpdateRepository":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to modify the properties of a repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"operationUrl":"https://docs.aws.amazon.com/codeartifact/latest/APIReference/API_UpdateRepository.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html#awscodeartifact-UpdateRepository"}},"resources":[{"name":"domain","arnFormats":["arn:${Partition}:codeartifact:${Region}:${Account}:domain/${DomainName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"package","arnFormats":["arn:${Partition}:codeartifact:${Region}:${Account}:package/${DomainName}/${RepositoryName}/${PackageFormat}/${PackageNamespace}/${PackageName}"],"conditionKeys":[]},{"name":"package-group","arnFormats":["arn:${Partition}:codeartifact:${Region}:${Account}:package-group/${DomainName}${EncodedPackageGroupPattern}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"repository","arnFormats":["arn:${Partition}:codeartifact:${Region}:${Account}:repository/${DomainName}/${RepositoryName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodeartifact.html"}