npm - aws-iam-language-server - Versions diffs - 0.0.8 → 0.0.9 - Mend

aws-iam-language-server 0.0.8 → 0.0.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (455) hide show

package/src/data/servicereference/services/network-firewall.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"name":"network-firewall","actions":{"AcceptNetworkFirewallTransitGatewayAttachment":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to accept pending Network Firewall attachments on a transit gateway","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"AssociateAvailabilityZones":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to associate availability zones to a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"AssociateFirewallPolicy":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Firewall"},{"name":"FirewallPolicy"}],"description":"Grants permission to create an association between a firewall policy and a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true},{"name":"FirewallPolicy","required":true}]},"AssociateSubnets":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to associate VPC subnets to a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"AttachRuleGroupsToProxyConfiguration":{"conditionKeys":[],"resources":[{"name":"ProxyConfiguration"},{"name":"ProxyRuleGroup"}],"description":"Grants permission to attach proxy rule groups to a proxy configuration","accessLevel":"Write","resourceTypes":[{"name":"ProxyConfiguration","required":true},{"name":"ProxyRuleGroup","required":true}]},"CreateFirewall":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Firewall"},{"name":"FirewallPolicy"}],"description":"Grants permission to create an AWS Network Firewall firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true},{"name":"FirewallPolicy","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"]},"CreateFirewallPolicy":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"FirewallPolicy"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"},{"name":"TLSInspectionConfiguration"}],"description":"Grants permission to create an AWS Network Firewall firewall policy","accessLevel":"Write","resourceTypes":[{"name":"FirewallPolicy","required":true},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false},{"name":"TLSInspectionConfiguration","required":false}]},"CreateProxy":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Proxy"},{"name":"ProxyConfiguration"}],"description":"Grants permission to create an AWS Network Firewall proxy","accessLevel":"Write","resourceTypes":[{"name":"Proxy","required":true},{"name":"ProxyConfiguration","required":true}],"dependentActions":["ec2:AttachApplianceToNatGateway"]},"CreateProxyConfiguration":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ProxyConfiguration"},{"name":"ProxyRuleGroup"}],"description":"Grants permission to create an AWS Network Firewall proxy configuration","accessLevel":"Write","resourceTypes":[{"name":"ProxyConfiguration","required":true},{"name":"ProxyRuleGroup","required":false}]},"CreateProxyRuleGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to create an AWS Network Firewall proxy rule group","accessLevel":"Write","resourceTypes":[{"name":"ProxyRuleGroup","required":true}]},"CreateProxyRules":{"conditionKeys":[],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to add proxy rules to a proxy rule group","accessLevel":"Write","resourceTypes":[{"name":"ProxyRuleGroup","required":true}]},"CreateRuleGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to create an AWS Network Firewall rule group","accessLevel":"Write","resourceTypes":[{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false}]},"CreateTLSInspectionConfiguration":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"TLSInspectionConfiguration"}],"description":"Grants permission to create an AWS Network Firewall tls inspection configuration","accessLevel":"Write","resourceTypes":[{"name":"TLSInspectionConfiguration","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"]},"CreateVpcEndpointAssociation":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Firewall"},{"name":"VpcEndpointAssociation"}],"description":"Grants permission to create an AWS Network Firewall vpc endpoint association","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true},{"name":"VpcEndpointAssociation","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"]},"DeleteFirewall":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to delete a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"DeleteFirewallPolicy":{"conditionKeys":[],"resources":[{"name":"FirewallPolicy"}],"description":"Grants permission to delete a firewall policy","accessLevel":"Write","resourceTypes":[{"name":"FirewallPolicy","required":true}]},"DeleteNetworkFirewallTransitGatewayAttachment":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to delete Network Firewall attachments on a transit gateway","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"DeleteProxy":{"conditionKeys":[],"resources":[{"name":"Proxy"}],"description":"Grants permission to delete a proxy","accessLevel":"Write","resourceTypes":[{"name":"Proxy","required":true}],"dependentActions":["ec2:DetachApplianceFromNatGateway"]},"DeleteProxyConfiguration":{"conditionKeys":[],"resources":[{"name":"ProxyConfiguration"}],"description":"Grants permission to delete a proxy configuration","accessLevel":"Write","resourceTypes":[{"name":"ProxyConfiguration","required":true}]},"DeleteProxyRuleGroup":{"conditionKeys":[],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to delete a proxy rule group","accessLevel":"Write","resourceTypes":[{"name":"ProxyRuleGroup","required":true}]},"DeleteProxyRules":{"conditionKeys":[],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to remove proxy rules from a proxy rule group","accessLevel":"Write","resourceTypes":[{"name":"ProxyRuleGroup","required":true}]},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[{"name":"Firewall"},{"name":"FirewallPolicy"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to delete a resource policy for a firewall policy or rule group or firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":false},{"name":"FirewallPolicy","required":false},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false}]},"DeleteRuleGroup":{"conditionKeys":[],"resources":[{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to delete a rule group","accessLevel":"Write","resourceTypes":[{"name":"StatefulRuleGroup","required":true},{"name":"StatelessRuleGroup","required":true}]},"DeleteTLSInspectionConfiguration":{"conditionKeys":[],"resources":[{"name":"TLSInspectionConfiguration"}],"description":"Grants permission to delete a tls inspection configuration","accessLevel":"Write","resourceTypes":[{"name":"TLSInspectionConfiguration","required":true}]},"DeleteVpcEndpointAssociation":{"conditionKeys":[],"resources":[{"name":"VpcEndpointAssociation"}],"description":"Grants permission to delete a vpc endpoint association","accessLevel":"Write","resourceTypes":[{"name":"VpcEndpointAssociation","required":true}]},"DescribeFirewall":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to retrieve the data objects that define a firewall","accessLevel":"Read","resourceTypes":[{"name":"Firewall","required":true}]},"DescribeFirewallMetadata":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to retrieve the high-level information about a firewall","accessLevel":"Read","resourceTypes":[{"name":"Firewall","required":true}]},"DescribeFirewallPolicy":{"conditionKeys":[],"resources":[{"name":"FirewallPolicy"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"},{"name":"TLSInspectionConfiguration"}],"description":"Grants permission to retrieve the data objects that define a firewall policy","accessLevel":"Read","resourceTypes":[{"name":"FirewallPolicy","required":true},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false},{"name":"TLSInspectionConfiguration","required":false}]},"DescribeFlowOperation":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to describe a flow operation performed on a firewall","accessLevel":"Read","resourceTypes":[{"name":"Firewall","required":true}]},"DescribeLoggingConfiguration":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to describe the logging configuration of a firewall","accessLevel":"Read","resourceTypes":[{"name":"Firewall","required":true}],"dependentActions":["logs:GetLogDelivery","logs:ListLogDeliveries"]},"DescribeProxy":{"conditionKeys":[],"resources":[{"name":"Proxy"}],"description":"Grants permission to retrieve the data objects that define a proxy","accessLevel":"Read","resourceTypes":[{"name":"Proxy","required":true}]},"DescribeProxyConfiguration":{"conditionKeys":[],"resources":[{"name":"ProxyConfiguration"}],"description":"Grants permission to retrieve the data objects that define a proxy configuration","accessLevel":"Read","resourceTypes":[{"name":"ProxyConfiguration","required":true}]},"DescribeProxyRule":{"conditionKeys":[],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to retrieve the data objects that define a proxy rule","accessLevel":"Read","resourceTypes":[{"name":"ProxyRuleGroup","required":true}]},"DescribeProxyRuleGroup":{"conditionKeys":[],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to retrieve the data objects that define a proxy rule group","accessLevel":"Read","resourceTypes":[{"name":"ProxyRuleGroup","required":true}]},"DescribeResourcePolicy":{"conditionKeys":[],"resources":[{"name":"Firewall"},{"name":"FirewallPolicy"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to describe a resource policy for a firewall policy or rule group or firewall","accessLevel":"Read","resourceTypes":[{"name":"Firewall","required":false},{"name":"FirewallPolicy","required":false},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false}]},"DescribeRuleGroup":{"conditionKeys":[],"resources":[{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to retrieve the data objects that define a rule group","accessLevel":"Read","resourceTypes":[{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false}]},"DescribeRuleGroupMetadata":{"conditionKeys":[],"resources":[{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to retrieve the high-level information about a rule group","accessLevel":"Read","resourceTypes":[{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false}]},"DescribeRuleGroupSummary":{"conditionKeys":[],"resources":[{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to retrieve the summary information about a rule group","accessLevel":"Read","resourceTypes":[{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false}]},"DescribeTLSInspectionConfiguration":{"conditionKeys":[],"resources":[{"name":"TLSInspectionConfiguration"}],"description":"Grants permission to retrieve the data objects that define a tls inspection configuration","accessLevel":"Read","resourceTypes":[{"name":"TLSInspectionConfiguration","required":true}]},"DescribeVpcEndpointAssociation":{"conditionKeys":[],"resources":[{"name":"VpcEndpointAssociation"}],"description":"Grants permission to retrieve the data objects that define a vpc endpoint association","accessLevel":"Read","resourceTypes":[{"name":"VpcEndpointAssociation","required":true}]},"DetachRuleGroupsFromProxyConfiguration":{"conditionKeys":[],"resources":[{"name":"ProxyConfiguration"},{"name":"ProxyRuleGroup"}],"description":"Grants permission to detach proxy rule groups from a proxy configuration","accessLevel":"Write","resourceTypes":[{"name":"ProxyConfiguration","required":true},{"name":"ProxyRuleGroup","required":true}]},"DisassociateAvailabilityZones":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to disassociate availability zones to a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"DisassociateSubnets":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to disassociate VPC subnets from a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"GetAnalysisReportResults":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to retrieve analysis report results of a firewall","accessLevel":"Read","resourceTypes":[{"name":"Firewall","required":true}]},"ListAnalysisReports":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to list firewall analysis reports","accessLevel":"List","resourceTypes":[{"name":"Firewall","required":true}]},"ListFirewallPolicies":{"conditionKeys":[],"resources":[{"name":"FirewallPolicy"}],"description":"Grants permission to retrieve the metadata for firewall policies","accessLevel":"List","resourceTypes":[{"name":"FirewallPolicy","required":true}]},"ListFirewalls":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to retrieve the metadata for firewalls","accessLevel":"List","resourceTypes":[{"name":"Firewall","required":true}]},"ListFlowOperationResults":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to list results from a flow operation performed on a firewall","accessLevel":"Read","resourceTypes":[{"name":"Firewall","required":true}]},"ListFlowOperations":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to list flow operations performed on a firewall","accessLevel":"List","resourceTypes":[{"name":"Firewall","required":true}]},"ListProxies":{"conditionKeys":[],"resources":[{"name":"Proxy"}],"description":"Grants permission to retrieve the metadata for proxies","accessLevel":"List","resourceTypes":[{"name":"Proxy","required":true}]},"ListProxyConfigurations":{"conditionKeys":[],"resources":[{"name":"ProxyConfiguration"}],"description":"Grants permission to retrieve the metadata for proxy configurations","accessLevel":"List","resourceTypes":[{"name":"ProxyConfiguration","required":true}]},"ListProxyRuleGroups":{"conditionKeys":[],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to retrieve the metadata for proxy rule groups","accessLevel":"List","resourceTypes":[{"name":"ProxyRuleGroup","required":true}]},"ListRuleGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the metadata for rule groups","accessLevel":"List","resourceTypes":[]},"ListTLSInspectionConfigurations":{"conditionKeys":[],"resources":[{"name":"TLSInspectionConfiguration"}],"description":"Grants permission to retrieve the metadata for tls inspection configurations","accessLevel":"List","resourceTypes":[{"name":"TLSInspectionConfiguration","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"Firewall"},{"name":"FirewallPolicy"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"},{"name":"TLSInspectionConfiguration"},{"name":"VpcEndpointAssociation"}],"description":"Grants permission to retrieve the tags for a resource","accessLevel":"List","resourceTypes":[{"name":"Firewall","required":true},{"name":"FirewallPolicy","required":true},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false},{"name":"TLSInspectionConfiguration","required":false},{"name":"VpcEndpointAssociation","required":false}]},"ListVpcEndpointAssociations":{"conditionKeys":[],"resources":[{"name":"VpcEndpointAssociation"}],"description":"Grants permission to retrieve the metadata for vpc endpoint associations","accessLevel":"List","resourceTypes":[{"name":"VpcEndpointAssociation","required":true}]},"PutResourcePolicy":{"conditionKeys":[],"resources":[{"name":"Firewall"},{"name":"FirewallPolicy"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to put a resource policy for a firewall policy or rule group or firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":false},{"name":"FirewallPolicy","required":false},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false}]},"RejectNetworkFirewallTransitGatewayAttachment":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to reject pending Network Firewall attachments on a transit gateway","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"StartAnalysisReport":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to start an analysis report on a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"StartFlowCapture":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to start capture operation on a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"StartFlowFlush":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to start flush operation on a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Firewall"},{"name":"FirewallPolicy"},{"name":"Proxy"},{"name":"ProxyConfiguration"},{"name":"ProxyRuleGroup"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"},{"name":"TLSInspectionConfiguration"},{"name":"VpcEndpointAssociation"}],"description":"Grants permission to attach tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"Firewall","required":false},{"name":"FirewallPolicy","required":false},{"name":"Proxy","required":false},{"name":"ProxyConfiguration","required":false},{"name":"ProxyRuleGroup","required":false},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false},{"name":"TLSInspectionConfiguration","required":false},{"name":"VpcEndpointAssociation","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"Firewall"},{"name":"FirewallPolicy"},{"name":"Proxy"},{"name":"ProxyConfiguration"},{"name":"ProxyRuleGroup"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"},{"name":"TLSInspectionConfiguration"},{"name":"VpcEndpointAssociation"}],"description":"Grants permission to remove tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"Firewall","required":false},{"name":"FirewallPolicy","required":false},{"name":"Proxy","required":false},{"name":"ProxyConfiguration","required":false},{"name":"ProxyRuleGroup","required":false},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false},{"name":"TLSInspectionConfiguration","required":false},{"name":"VpcEndpointAssociation","required":false}]},"UpdateAvailabilityZoneChangeProtection":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to add or remove availability zone change protection for a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"UpdateFirewallAnalysisSettings":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to modify firewall analysis settings of a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"UpdateFirewallDeleteProtection":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to add or remove delete protection for a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"UpdateFirewallDescription":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to modify the description for a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"UpdateFirewallEncryptionConfiguration":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to modify the encryption configuration of a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"UpdateFirewallPolicy":{"conditionKeys":[],"resources":[{"name":"FirewallPolicy"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"},{"name":"TLSInspectionConfiguration"}],"description":"Grants permission to modify a firewall policy","accessLevel":"Write","resourceTypes":[{"name":"FirewallPolicy","required":true},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false},{"name":"TLSInspectionConfiguration","required":false}]},"UpdateFirewallPolicyChangeProtection":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to add or remove firewall policy change protection for a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"UpdateLoggingConfiguration":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to modify the logging configuration of a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"UpdateProxy":{"conditionKeys":[],"resources":[{"name":"Proxy"}],"description":"Grants permission to modify a proxy","accessLevel":"Write","resourceTypes":[{"name":"Proxy","required":true}]},"UpdateProxyConfiguration":{"conditionKeys":[],"resources":[{"name":"ProxyConfiguration"}],"description":"Grants permission to modify a proxy configuration","accessLevel":"Write","resourceTypes":[{"name":"ProxyConfiguration","required":true}]},"UpdateProxyRule":{"conditionKeys":[],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to update an existing proxy rule on a proxy rule group","accessLevel":"Write","resourceTypes":[{"name":"ProxyRuleGroup","required":true}]},"UpdateProxyRuleGroupPriorities":{"conditionKeys":[],"resources":[{"name":"ProxyConfiguration"}],"description":"Grants permission to modify rule group priorities on a proxy configuration","accessLevel":"Write","resourceTypes":[{"name":"ProxyConfiguration","required":true}]},"UpdateProxyRulePriorities":{"conditionKeys":[],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to update proxy rule priorities within a proxy rule group","accessLevel":"Write","resourceTypes":[{"name":"ProxyRuleGroup","required":true}]},"UpdateRuleGroup":{"conditionKeys":[],"resources":[{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to modify a rule group","accessLevel":"Write","resourceTypes":[{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false}]},"UpdateSubnetChangeProtection":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to add or remove subnet change protection for a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"UpdateTLSInspectionConfiguration":{"conditionKeys":[],"resources":[{"name":"TLSInspectionConfiguration"}],"description":"Grants permission to modify a tls inspection configuration","accessLevel":"Write","resourceTypes":[{"name":"TLSInspectionConfiguration","required":true}]}},"resources":[{"name":"Firewall","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:firewall/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"FirewallPolicy","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:firewall-policy/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Proxy","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:proxy/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"ProxyConfiguration","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:proxy-configuration/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"ProxyRuleGroup","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:proxy-rule-group/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"StatefulRuleGroup","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:stateful-rulegroup/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"StatelessRuleGroup","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:stateless-rulegroup/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"TLSInspectionConfiguration","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:tls-configuration/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"VpcEndpointAssociation","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:vpc-endpoint-association/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by on the allowed set of values for each of the tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of mandatory tags in the request"}}}
1	+ {"name":"network-firewall","actions":{"AcceptNetworkFirewallTransitGatewayAttachment":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to accept pending Network Firewall attachments on a transit gateway","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_AcceptNetworkFirewallTransitGatewayAttachment.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-AcceptNetworkFirewallTransitGatewayAttachment"},"AssociateAvailabilityZones":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to associate availability zones to a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_AssociateAvailabilityZones.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-AssociateAvailabilityZones"},"AssociateFirewallPolicy":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Firewall"},{"name":"FirewallPolicy"}],"description":"Grants permission to create an association between a firewall policy and a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true},{"name":"FirewallPolicy","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_AssociateFirewallPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-AssociateFirewallPolicy"},"AssociateSubnets":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to associate VPC subnets to a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_AssociateSubnets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-AssociateSubnets"},"AttachRuleGroupsToProxyConfiguration":{"conditionKeys":[],"resources":[{"name":"ProxyConfiguration"},{"name":"ProxyRuleGroup"}],"description":"Grants permission to attach proxy rule groups to a proxy configuration","accessLevel":"Write","resourceTypes":[{"name":"ProxyConfiguration","required":true},{"name":"ProxyRuleGroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_AttachRuleGroupsToProxyConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-AttachRuleGroupsToProxyConfiguration"},"CreateFirewall":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Firewall"},{"name":"FirewallPolicy"}],"description":"Grants permission to create an AWS Network Firewall firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true},{"name":"FirewallPolicy","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_CreateFirewall.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-CreateFirewall"},"CreateFirewallPolicy":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"FirewallPolicy"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"},{"name":"TLSInspectionConfiguration"}],"description":"Grants permission to create an AWS Network Firewall firewall policy","accessLevel":"Write","resourceTypes":[{"name":"FirewallPolicy","required":true},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false},{"name":"TLSInspectionConfiguration","required":false}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_CreateFirewallPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-CreateFirewallPolicy"},"CreateProxy":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Proxy"},{"name":"ProxyConfiguration"}],"description":"Grants permission to create an AWS Network Firewall proxy","accessLevel":"Write","resourceTypes":[{"name":"Proxy","required":true},{"name":"ProxyConfiguration","required":true}],"dependentActions":["ec2:AttachApplianceToNatGateway"],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_CreateProxy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-CreateProxy"},"CreateProxyConfiguration":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ProxyConfiguration"},{"name":"ProxyRuleGroup"}],"description":"Grants permission to create an AWS Network Firewall proxy configuration","accessLevel":"Write","resourceTypes":[{"name":"ProxyConfiguration","required":true},{"name":"ProxyRuleGroup","required":false}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_CreateProxyConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-CreateProxyConfiguration"},"CreateProxyRuleGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to create an AWS Network Firewall proxy rule group","accessLevel":"Write","resourceTypes":[{"name":"ProxyRuleGroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_CreateProxyRuleGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-CreateProxyRuleGroup"},"CreateProxyRules":{"conditionKeys":[],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to add proxy rules to a proxy rule group","accessLevel":"Write","resourceTypes":[{"name":"ProxyRuleGroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_CreateProxyRules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-CreateProxyRules"},"CreateRuleGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to create an AWS Network Firewall rule group","accessLevel":"Write","resourceTypes":[{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_CreateRuleGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-CreateRuleGroup"},"CreateTLSInspectionConfiguration":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"TLSInspectionConfiguration"}],"description":"Grants permission to create an AWS Network Firewall tls inspection configuration","accessLevel":"Write","resourceTypes":[{"name":"TLSInspectionConfiguration","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_CreateTLSInspectionConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-CreateTLSInspectionConfiguration"},"CreateVpcEndpointAssociation":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Firewall"},{"name":"VpcEndpointAssociation"}],"description":"Grants permission to create an AWS Network Firewall vpc endpoint association","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true},{"name":"VpcEndpointAssociation","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_CreateVpcEndpointAssociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-CreateVpcEndpointAssociation"},"DeleteFirewall":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to delete a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DeleteFirewall.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DeleteFirewall"},"DeleteFirewallPolicy":{"conditionKeys":[],"resources":[{"name":"FirewallPolicy"}],"description":"Grants permission to delete a firewall policy","accessLevel":"Write","resourceTypes":[{"name":"FirewallPolicy","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DeleteFirewallPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DeleteFirewallPolicy"},"DeleteNetworkFirewallTransitGatewayAttachment":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to delete Network Firewall attachments on a transit gateway","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DeleteNetworkFirewallTransitGatewayAttachment.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DeleteNetworkFirewallTransitGatewayAttachment"},"DeleteProxy":{"conditionKeys":[],"resources":[{"name":"Proxy"}],"description":"Grants permission to delete a proxy","accessLevel":"Write","resourceTypes":[{"name":"Proxy","required":true}],"dependentActions":["ec2:DetachApplianceFromNatGateway"],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DeleteProxy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DeleteProxy"},"DeleteProxyConfiguration":{"conditionKeys":[],"resources":[{"name":"ProxyConfiguration"}],"description":"Grants permission to delete a proxy configuration","accessLevel":"Write","resourceTypes":[{"name":"ProxyConfiguration","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DeleteProxyConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DeleteProxyConfiguration"},"DeleteProxyRuleGroup":{"conditionKeys":[],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to delete a proxy rule group","accessLevel":"Write","resourceTypes":[{"name":"ProxyRuleGroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DeleteProxyRuleGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DeleteProxyRuleGroup"},"DeleteProxyRules":{"conditionKeys":[],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to remove proxy rules from a proxy rule group","accessLevel":"Write","resourceTypes":[{"name":"ProxyRuleGroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DeleteProxyRules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DeleteProxyRules"},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[{"name":"Firewall"},{"name":"FirewallPolicy"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to delete a resource policy for a firewall policy or rule group or firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":false},{"name":"FirewallPolicy","required":false},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DeleteResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DeleteResourcePolicy"},"DeleteRuleGroup":{"conditionKeys":[],"resources":[{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to delete a rule group","accessLevel":"Write","resourceTypes":[{"name":"StatefulRuleGroup","required":true},{"name":"StatelessRuleGroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DeleteRuleGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DeleteRuleGroup"},"DeleteTLSInspectionConfiguration":{"conditionKeys":[],"resources":[{"name":"TLSInspectionConfiguration"}],"description":"Grants permission to delete a tls inspection configuration","accessLevel":"Write","resourceTypes":[{"name":"TLSInspectionConfiguration","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DeleteTLSInspectionConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DeleteTLSInspectionConfiguration"},"DeleteVpcEndpointAssociation":{"conditionKeys":[],"resources":[{"name":"VpcEndpointAssociation"}],"description":"Grants permission to delete a vpc endpoint association","accessLevel":"Write","resourceTypes":[{"name":"VpcEndpointAssociation","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DeleteVpcEndpointAssociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DeleteVpcEndpointAssociation"},"DescribeFirewall":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to retrieve the data objects that define a firewall","accessLevel":"Read","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DescribeFirewall.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DescribeFirewall"},"DescribeFirewallMetadata":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to retrieve the high-level information about a firewall","accessLevel":"Read","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DescribeFirewallMetadata.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DescribeFirewallMetadata"},"DescribeFirewallPolicy":{"conditionKeys":[],"resources":[{"name":"FirewallPolicy"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"},{"name":"TLSInspectionConfiguration"}],"description":"Grants permission to retrieve the data objects that define a firewall policy","accessLevel":"Read","resourceTypes":[{"name":"FirewallPolicy","required":true},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false},{"name":"TLSInspectionConfiguration","required":false}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DescribeFirewallPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DescribeFirewallPolicy"},"DescribeFlowOperation":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to describe a flow operation performed on a firewall","accessLevel":"Read","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DescribeFlowOperation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DescribeFlowOperation"},"DescribeLoggingConfiguration":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to describe the logging configuration of a firewall","accessLevel":"Read","resourceTypes":[{"name":"Firewall","required":true}],"dependentActions":["logs:GetLogDelivery","logs:ListLogDeliveries"],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DescribeLoggingConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DescribeLoggingConfiguration"},"DescribeProxy":{"conditionKeys":[],"resources":[{"name":"Proxy"}],"description":"Grants permission to retrieve the data objects that define a proxy","accessLevel":"Read","resourceTypes":[{"name":"Proxy","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DescribeProxy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DescribeProxy"},"DescribeProxyConfiguration":{"conditionKeys":[],"resources":[{"name":"ProxyConfiguration"}],"description":"Grants permission to retrieve the data objects that define a proxy configuration","accessLevel":"Read","resourceTypes":[{"name":"ProxyConfiguration","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DescribeProxyConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DescribeProxyConfiguration"},"DescribeProxyRule":{"conditionKeys":[],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to retrieve the data objects that define a proxy rule","accessLevel":"Read","resourceTypes":[{"name":"ProxyRuleGroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DescribeProxyRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DescribeProxyRule"},"DescribeProxyRuleGroup":{"conditionKeys":[],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to retrieve the data objects that define a proxy rule group","accessLevel":"Read","resourceTypes":[{"name":"ProxyRuleGroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DescribeProxyRuleGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DescribeProxyRuleGroup"},"DescribeResourcePolicy":{"conditionKeys":[],"resources":[{"name":"Firewall"},{"name":"FirewallPolicy"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to describe a resource policy for a firewall policy or rule group or firewall","accessLevel":"Read","resourceTypes":[{"name":"Firewall","required":false},{"name":"FirewallPolicy","required":false},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DescribeResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DescribeResourcePolicy"},"DescribeRuleGroup":{"conditionKeys":[],"resources":[{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to retrieve the data objects that define a rule group","accessLevel":"Read","resourceTypes":[{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DescribeRuleGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DescribeRuleGroup"},"DescribeRuleGroupMetadata":{"conditionKeys":[],"resources":[{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to retrieve the high-level information about a rule group","accessLevel":"Read","resourceTypes":[{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DescribeRuleGroupMetadata.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DescribeRuleGroupMetadata"},"DescribeRuleGroupSummary":{"conditionKeys":[],"resources":[{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to retrieve the summary information about a rule group","accessLevel":"Read","resourceTypes":[{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DescribeRuleGroupSummary.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DescribeRuleGroupSummary"},"DescribeTLSInspectionConfiguration":{"conditionKeys":[],"resources":[{"name":"TLSInspectionConfiguration"}],"description":"Grants permission to retrieve the data objects that define a tls inspection configuration","accessLevel":"Read","resourceTypes":[{"name":"TLSInspectionConfiguration","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DescribeTLSInspectionConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DescribeTLSInspectionConfiguration"},"DescribeVpcEndpointAssociation":{"conditionKeys":[],"resources":[{"name":"VpcEndpointAssociation"}],"description":"Grants permission to retrieve the data objects that define a vpc endpoint association","accessLevel":"Read","resourceTypes":[{"name":"VpcEndpointAssociation","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DescribeVpcEndpointAssociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DescribeVpcEndpointAssociation"},"DetachRuleGroupsFromProxyConfiguration":{"conditionKeys":[],"resources":[{"name":"ProxyConfiguration"},{"name":"ProxyRuleGroup"}],"description":"Grants permission to detach proxy rule groups from a proxy configuration","accessLevel":"Write","resourceTypes":[{"name":"ProxyConfiguration","required":true},{"name":"ProxyRuleGroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DetachRuleGroupsFromProxyConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DetachRuleGroupsFromProxyConfiguration"},"DisassociateAvailabilityZones":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to disassociate availability zones to a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DisassociateAvailabilityZones.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DisassociateAvailabilityZones"},"DisassociateSubnets":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to disassociate VPC subnets from a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DisassociateSubnets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-DisassociateSubnets"},"GetAnalysisReportResults":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to retrieve analysis report results of a firewall","accessLevel":"Read","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_GetAnalysisReportResults.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-GetAnalysisReportResults"},"ListAnalysisReports":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to list firewall analysis reports","accessLevel":"List","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_ListAnalysisReports.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-ListAnalysisReports"},"ListFirewallPolicies":{"conditionKeys":[],"resources":[{"name":"FirewallPolicy"}],"description":"Grants permission to retrieve the metadata for firewall policies","accessLevel":"List","resourceTypes":[{"name":"FirewallPolicy","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_ListFirewallPolicies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-ListFirewallPolicies"},"ListFirewalls":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to retrieve the metadata for firewalls","accessLevel":"List","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_ListFirewalls.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-ListFirewalls"},"ListFlowOperationResults":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to list results from a flow operation performed on a firewall","accessLevel":"Read","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_ListFlowOperationResults.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-ListFlowOperationResults"},"ListFlowOperations":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to list flow operations performed on a firewall","accessLevel":"List","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_ListFlowOperations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-ListFlowOperations"},"ListProxies":{"conditionKeys":[],"resources":[{"name":"Proxy"}],"description":"Grants permission to retrieve the metadata for proxies","accessLevel":"List","resourceTypes":[{"name":"Proxy","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_ListProxies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-ListProxies"},"ListProxyConfigurations":{"conditionKeys":[],"resources":[{"name":"ProxyConfiguration"}],"description":"Grants permission to retrieve the metadata for proxy configurations","accessLevel":"List","resourceTypes":[{"name":"ProxyConfiguration","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_ListProxyConfigurations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-ListProxyConfigurations"},"ListProxyRuleGroups":{"conditionKeys":[],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to retrieve the metadata for proxy rule groups","accessLevel":"List","resourceTypes":[{"name":"ProxyRuleGroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_ListProxyRuleGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-ListProxyRuleGroups"},"ListRuleGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the metadata for rule groups","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_ListRuleGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-ListRuleGroups"},"ListTLSInspectionConfigurations":{"conditionKeys":[],"resources":[{"name":"TLSInspectionConfiguration"}],"description":"Grants permission to retrieve the metadata for tls inspection configurations","accessLevel":"List","resourceTypes":[{"name":"TLSInspectionConfiguration","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_ListTLSInspectionConfigurations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-ListTLSInspectionConfigurations"},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"Firewall"},{"name":"FirewallPolicy"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"},{"name":"TLSInspectionConfiguration"},{"name":"VpcEndpointAssociation"}],"description":"Grants permission to retrieve the tags for a resource","accessLevel":"List","resourceTypes":[{"name":"Firewall","required":true},{"name":"FirewallPolicy","required":true},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false},{"name":"TLSInspectionConfiguration","required":false},{"name":"VpcEndpointAssociation","required":false}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-ListTagsForResource"},"ListVpcEndpointAssociations":{"conditionKeys":[],"resources":[{"name":"VpcEndpointAssociation"}],"description":"Grants permission to retrieve the metadata for vpc endpoint associations","accessLevel":"List","resourceTypes":[{"name":"VpcEndpointAssociation","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_ListVpcEndpointAssociations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-ListVpcEndpointAssociations"},"PutResourcePolicy":{"conditionKeys":[],"resources":[{"name":"Firewall"},{"name":"FirewallPolicy"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to put a resource policy for a firewall policy or rule group or firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":false},{"name":"FirewallPolicy","required":false},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_PutResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-PutResourcePolicy"},"RejectNetworkFirewallTransitGatewayAttachment":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to reject pending Network Firewall attachments on a transit gateway","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_RejectNetworkFirewallTransitGatewayAttachment.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-RejectNetworkFirewallTransitGatewayAttachment"},"StartAnalysisReport":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to start an analysis report on a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_GetAnalysisReportResults.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-StartAnalysisReport"},"StartFlowCapture":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to start capture operation on a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_StartFlowCapture.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-StartFlowCapture"},"StartFlowFlush":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to start flush operation on a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_StartFlowFlush.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-StartFlowFlush"},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Firewall"},{"name":"FirewallPolicy"},{"name":"Proxy"},{"name":"ProxyConfiguration"},{"name":"ProxyRuleGroup"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"},{"name":"TLSInspectionConfiguration"},{"name":"VpcEndpointAssociation"}],"description":"Grants permission to attach tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"Firewall","required":false},{"name":"FirewallPolicy","required":false},{"name":"Proxy","required":false},{"name":"ProxyConfiguration","required":false},{"name":"ProxyRuleGroup","required":false},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false},{"name":"TLSInspectionConfiguration","required":false},{"name":"VpcEndpointAssociation","required":false}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-TagResource"},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"Firewall"},{"name":"FirewallPolicy"},{"name":"Proxy"},{"name":"ProxyConfiguration"},{"name":"ProxyRuleGroup"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"},{"name":"TLSInspectionConfiguration"},{"name":"VpcEndpointAssociation"}],"description":"Grants permission to remove tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"Firewall","required":false},{"name":"FirewallPolicy","required":false},{"name":"Proxy","required":false},{"name":"ProxyConfiguration","required":false},{"name":"ProxyRuleGroup","required":false},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false},{"name":"TLSInspectionConfiguration","required":false},{"name":"VpcEndpointAssociation","required":false}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-UntagResource"},"UpdateAvailabilityZoneChangeProtection":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to add or remove availability zone change protection for a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_UpdateAvailabilityZoneChangeProtection.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-UpdateAvailabilityZoneChangeProtection"},"UpdateFirewallAnalysisSettings":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to modify firewall analysis settings of a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_UpdateFirewallAnalysisSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-UpdateFirewallAnalysisSettings"},"UpdateFirewallDeleteProtection":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to add or remove delete protection for a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_UpdateFirewallDeleteProtection.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-UpdateFirewallDeleteProtection"},"UpdateFirewallDescription":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to modify the description for a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_UpdateFirewallDescription.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-UpdateFirewallDescription"},"UpdateFirewallEncryptionConfiguration":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to modify the encryption configuration of a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_UpdateFirewallEncryptionConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-UpdateFirewallEncryptionConfiguration"},"UpdateFirewallPolicy":{"conditionKeys":[],"resources":[{"name":"FirewallPolicy"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"},{"name":"TLSInspectionConfiguration"}],"description":"Grants permission to modify a firewall policy","accessLevel":"Write","resourceTypes":[{"name":"FirewallPolicy","required":true},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false},{"name":"TLSInspectionConfiguration","required":false}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_UpdateFirewallPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-UpdateFirewallPolicy"},"UpdateFirewallPolicyChangeProtection":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to add or remove firewall policy change protection for a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_UpdateFirewallPolicyChangeProtection.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-UpdateFirewallPolicyChangeProtection"},"UpdateLoggingConfiguration":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to modify the logging configuration of a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_UpdateLoggingConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-UpdateLoggingConfiguration"},"UpdateProxy":{"conditionKeys":[],"resources":[{"name":"Proxy"}],"description":"Grants permission to modify a proxy","accessLevel":"Write","resourceTypes":[{"name":"Proxy","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_UpdateProxy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-UpdateProxy"},"UpdateProxyConfiguration":{"conditionKeys":[],"resources":[{"name":"ProxyConfiguration"}],"description":"Grants permission to modify a proxy configuration","accessLevel":"Write","resourceTypes":[{"name":"ProxyConfiguration","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_UpdateProxyConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-UpdateProxyConfiguration"},"UpdateProxyRule":{"conditionKeys":[],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to update an existing proxy rule on a proxy rule group","accessLevel":"Write","resourceTypes":[{"name":"ProxyRuleGroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_UpdateProxyRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-UpdateProxyRule"},"UpdateProxyRuleGroupPriorities":{"conditionKeys":[],"resources":[{"name":"ProxyConfiguration"}],"description":"Grants permission to modify rule group priorities on a proxy configuration","accessLevel":"Write","resourceTypes":[{"name":"ProxyConfiguration","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_UpdateProxyRuleGroupPriorities.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-UpdateProxyRuleGroupPriorities"},"UpdateProxyRulePriorities":{"conditionKeys":[],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to update proxy rule priorities within a proxy rule group","accessLevel":"Write","resourceTypes":[{"name":"ProxyRuleGroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_UpdateProxyRulePriorities.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-UpdateProxyRulePriorities"},"UpdateRuleGroup":{"conditionKeys":[],"resources":[{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to modify a rule group","accessLevel":"Write","resourceTypes":[{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_UpdateRuleGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-UpdateRuleGroup"},"UpdateSubnetChangeProtection":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to add or remove subnet change protection for a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_UpdateSubnetChangeProtection.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-UpdateSubnetChangeProtection"},"UpdateTLSInspectionConfiguration":{"conditionKeys":[],"resources":[{"name":"TLSInspectionConfiguration"}],"description":"Grants permission to modify a tls inspection configuration","accessLevel":"Write","resourceTypes":[{"name":"TLSInspectionConfiguration","required":true}],"operationUrl":"https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_UpdateTLSInspectionConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html#awsnetworkfirewall-UpdateTLSInspectionConfiguration"}},"resources":[{"name":"Firewall","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:firewall/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"FirewallPolicy","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:firewall-policy/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Proxy","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:proxy/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"ProxyConfiguration","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:proxy-configuration/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"ProxyRuleGroup","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:proxy-rule-group/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"StatefulRuleGroup","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:stateful-rulegroup/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"StatelessRuleGroup","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:stateless-rulegroup/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"TLSInspectionConfiguration","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:tls-configuration/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"VpcEndpointAssociation","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:vpc-endpoint-association/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by on the allowed set of values for each of the tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of mandatory tags in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkfirewall.html"}

package/src/data/servicereference/services/network-security-director.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"name":"network-security-director","actions":{"GetFinding":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a finding","accessLevel":"Read","resourceTypes":[]},"GetResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a resource","accessLevel":"Read","resourceTypes":[]},"ListAccountSummaries":{"conditionKeys":[],"resources":[],"description":"Grants permission to list account summaries for an account","accessLevel":"List","resourceTypes":[]},"ListFindings":{"conditionKeys":[],"resources":[],"description":"Grants permission to list findings","accessLevel":"List","resourceTypes":[]},"ListInsights":{"conditionKeys":[],"resources":[],"description":"Grants permission to list insights about the latest network security scan","accessLevel":"List","resourceTypes":[]},"ListRemediations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list remediations for a finding","accessLevel":"List","resourceTypes":[]},"ListResources":{"conditionKeys":[],"resources":[],"description":"Grants permission to list resources","accessLevel":"List","resourceTypes":[]},"UpdateFinding":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the status of a finding","accessLevel":"Write","resourceTypes":[]}},"resources":[],"conditionKeys":{}}
1	+ {"name":"network-security-director","actions":{"GetFinding":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a finding","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/network-security-director/latest/APIReference/API_GetFinding.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsshieldnetworksecuritydirector.html#awsshieldnetworksecuritydirector-GetFinding"},"GetResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a resource","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/network-security-director/latest/APIReference/API_GetResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsshieldnetworksecuritydirector.html#awsshieldnetworksecuritydirector-GetResource"},"ListAccountSummaries":{"conditionKeys":[],"resources":[],"description":"Grants permission to list account summaries for an account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/network-security-director/latest/APIReference/API_ListAccountSummaries.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsshieldnetworksecuritydirector.html#awsshieldnetworksecuritydirector-ListAccountSummaries"},"ListFindings":{"conditionKeys":[],"resources":[],"description":"Grants permission to list findings","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/network-security-director/latest/APIReference/API_ListFindings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsshieldnetworksecuritydirector.html#awsshieldnetworksecuritydirector-ListFindings"},"ListInsights":{"conditionKeys":[],"resources":[],"description":"Grants permission to list insights about the latest network security scan","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/network-security-director/latest/APIReference/API_ListInsights.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsshieldnetworksecuritydirector.html#awsshieldnetworksecuritydirector-ListInsights"},"ListRemediations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list remediations for a finding","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/network-security-director/latest/APIReference/API_ListRemediations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsshieldnetworksecuritydirector.html#awsshieldnetworksecuritydirector-ListRemediations"},"ListResources":{"conditionKeys":[],"resources":[],"description":"Grants permission to list resources","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/network-security-director/latest/APIReference/API_ListResources.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsshieldnetworksecuritydirector.html#awsshieldnetworksecuritydirector-ListResources"},"UpdateFinding":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the status of a finding","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/network-security-director/latest/APIReference/API_UpdateFinding.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsshieldnetworksecuritydirector.html#awsshieldnetworksecuritydirector-UpdateFinding"}},"resources":[],"conditionKeys":{},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsshieldnetworksecuritydirector.html"}

package/src/data/servicereference/services/networkflowmonitor.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"name":"networkflowmonitor","actions":{"CreateMonitor":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"monitor"}],"description":"Grants permission to create a monitor","accessLevel":"Write","resourceTypes":[{"name":"monitor","required":true}]},"CreateScope":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a scope","accessLevel":"Write","resourceTypes":[]},"DeleteMonitor":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to delete a monitor","accessLevel":"Write","resourceTypes":[{"name":"monitor","required":true}]},"DeleteScope":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to delete a scope","accessLevel":"Write","resourceTypes":[{"name":"scope","required":true}]},"GetMonitor":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to get information about a monitor","accessLevel":"Read","resourceTypes":[{"name":"monitor","required":true}]},"GetQueryResultsMonitorTopContributors":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to get the results of a query that retrieves top contributors data for a monitor","accessLevel":"Read","resourceTypes":[{"name":"monitor","required":true}]},"GetQueryResultsWorkloadInsightsTopContributors":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to get the results of a query that retrieves top contributors for workload insights","accessLevel":"Read","resourceTypes":[{"name":"scope","required":true}]},"GetQueryResultsWorkloadInsightsTopContributorsData":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to get the results of a query that retrieves top contributors data points for workload insights","accessLevel":"Read","resourceTypes":[{"name":"scope","required":true}]},"GetQueryStatusMonitorTopContributors":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to get the status of a query that retrieves top contributors data for a monitor","accessLevel":"Read","resourceTypes":[{"name":"monitor","required":true}]},"GetQueryStatusWorkloadInsightsTopContributors":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to get the status of a query that retrieves top contributors for workload insights","accessLevel":"Read","resourceTypes":[{"name":"scope","required":true}]},"GetQueryStatusWorkloadInsightsTopContributorsData":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to get the status of a query that retrieves top contributors data points for workload insights","accessLevel":"Read","resourceTypes":[{"name":"scope","required":true}]},"GetScope":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to get information about a scope","accessLevel":"Read","resourceTypes":[{"name":"scope","required":true}]},"ListMonitors":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all monitors in an account and their statuses","accessLevel":"List","resourceTypes":[]},"ListScopes":{"conditionKeys":[],"resources":[],"description":"Grants permission to get all scopes for an account","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"monitor"},{"name":"scope"}],"description":"Grants permission to list the tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"monitor","required":false},{"name":"scope","required":false}]},"Publish":{"conditionKeys":[],"resources":[],"description":"Grants permission to publish a report","accessLevel":"Write","resourceTypes":[]},"StartQueryMonitorTopContributors":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to start a query for retrieving top contributors data for a monitor","accessLevel":"Write","resourceTypes":[{"name":"monitor","required":true}]},"StartQueryWorkloadInsightsTopContributors":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to start a query for retrieving top contributors data for workload insights","accessLevel":"Write","resourceTypes":[{"name":"scope","required":true}]},"StartQueryWorkloadInsightsTopContributorsData":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to start a query for retrieving top contributors data points for workload insights","accessLevel":"Write","resourceTypes":[{"name":"scope","required":true}]},"StopQueryMonitorTopContributors":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to stop a query for retrieving top contributors data for a monitor","accessLevel":"Write","resourceTypes":[{"name":"monitor","required":true}]},"StopQueryWorkloadInsightsTopContributors":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to stop a query for retrieving top contributors for workload insights","accessLevel":"Write","resourceTypes":[{"name":"scope","required":true}]},"StopQueryWorkloadInsightsTopContributorsData":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to stop a query for retrieving top contributors data points for workload insights","accessLevel":"Write","resourceTypes":[{"name":"scope","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"monitor"},{"name":"scope"}],"description":"Grants permission to add tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"monitor","required":false},{"name":"scope","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"monitor"},{"name":"scope"}],"description":"Grants permission to remove tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"monitor","required":false},{"name":"scope","required":false}]},"UpdateMonitor":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to update a monitor","accessLevel":"Write","resourceTypes":[{"name":"monitor","required":true}]},"UpdateScope":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to update a scope","accessLevel":"Write","resourceTypes":[{"name":"scope","required":true}]}},"resources":[{"name":"monitor","arnFormats":["arn:${Partition}:networkflowmonitor:${Region}:${Account}:monitor/${MonitorName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"scope","arnFormats":["arn:${Partition}:networkflowmonitor:${Region}:${Account}:scope/${ScopeId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys in the request"}}}
1	+ {"name":"networkflowmonitor","actions":{"CreateMonitor":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"monitor"}],"description":"Grants permission to create a monitor","accessLevel":"Write","resourceTypes":[{"name":"monitor","required":true}],"operationUrl":"https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_CreateMonitor.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html#networkflowmonitor-CreateMonitor"},"CreateScope":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a scope","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_CreateScope.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html#networkflowmonitor-CreateScope"},"DeleteMonitor":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to delete a monitor","accessLevel":"Write","resourceTypes":[{"name":"monitor","required":true}],"operationUrl":"https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_DeleteMonitor.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html#networkflowmonitor-DeleteMonitor"},"DeleteScope":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to delete a scope","accessLevel":"Write","resourceTypes":[{"name":"scope","required":true}],"operationUrl":"https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_DeleteScope.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html#networkflowmonitor-DeleteScope"},"GetMonitor":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to get information about a monitor","accessLevel":"Read","resourceTypes":[{"name":"monitor","required":true}],"operationUrl":"https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_GetMonitor.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html#networkflowmonitor-GetMonitor"},"GetQueryResultsMonitorTopContributors":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to get the results of a query that retrieves top contributors data for a monitor","accessLevel":"Read","resourceTypes":[{"name":"monitor","required":true}],"operationUrl":"https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_GetQueryResultsMonitorTopContributors.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html#networkflowmonitor-GetQueryResultsMonitorTopContributors"},"GetQueryResultsWorkloadInsightsTopContributors":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to get the results of a query that retrieves top contributors for workload insights","accessLevel":"Read","resourceTypes":[{"name":"scope","required":true}],"operationUrl":"https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_GetQueryResultsWorkloadInsightsTopContributors.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html#networkflowmonitor-GetQueryResultsWorkloadInsightsTopContributors"},"GetQueryResultsWorkloadInsightsTopContributorsData":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to get the results of a query that retrieves top contributors data points for workload insights","accessLevel":"Read","resourceTypes":[{"name":"scope","required":true}],"operationUrl":"https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_GetQueryResultsWorkloadInsightsTopContributorsData.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html#networkflowmonitor-GetQueryResultsWorkloadInsightsTopContributorsData"},"GetQueryStatusMonitorTopContributors":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to get the status of a query that retrieves top contributors data for a monitor","accessLevel":"Read","resourceTypes":[{"name":"monitor","required":true}],"operationUrl":"https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_GetQueryStatusMonitorTopContributors.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html#networkflowmonitor-GetQueryStatusMonitorTopContributors"},"GetQueryStatusWorkloadInsightsTopContributors":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to get the status of a query that retrieves top contributors for workload insights","accessLevel":"Read","resourceTypes":[{"name":"scope","required":true}],"operationUrl":"https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_GetQueryStatusWorkloadInsightsTopContributors.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html#networkflowmonitor-GetQueryStatusWorkloadInsightsTopContributors"},"GetQueryStatusWorkloadInsightsTopContributorsData":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to get the status of a query that retrieves top contributors data points for workload insights","accessLevel":"Read","resourceTypes":[{"name":"scope","required":true}],"operationUrl":"https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_GetQueryStatusWorkloadInsightsTopContributorsData.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html#networkflowmonitor-GetQueryStatusWorkloadInsightsTopContributorsData"},"GetScope":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to get information about a scope","accessLevel":"Read","resourceTypes":[{"name":"scope","required":true}],"operationUrl":"https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_GetScope.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html#networkflowmonitor-GetScope"},"ListMonitors":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all monitors in an account and their statuses","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_ListMonitors.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html#networkflowmonitor-ListMonitors"},"ListScopes":{"conditionKeys":[],"resources":[],"description":"Grants permission to get all scopes for an account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_ListScopes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html#networkflowmonitor-ListScopes"},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"monitor"},{"name":"scope"}],"description":"Grants permission to list the tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"monitor","required":false},{"name":"scope","required":false}],"operationUrl":"https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html#networkflowmonitor-ListTagsForResource"},"Publish":{"conditionKeys":[],"resources":[],"description":"Grants permission to publish a report","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_Publish.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html#networkflowmonitor-Publish"},"StartQueryMonitorTopContributors":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to start a query for retrieving top contributors data for a monitor","accessLevel":"Write","resourceTypes":[{"name":"monitor","required":true}],"operationUrl":"https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_StartQueryMonitorTopContributors.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html#networkflowmonitor-StartQueryMonitorTopContributors"},"StartQueryWorkloadInsightsTopContributors":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to start a query for retrieving top contributors data for workload insights","accessLevel":"Write","resourceTypes":[{"name":"scope","required":true}],"operationUrl":"https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_StartQueryWorkloadInsightsTopContributors.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html#networkflowmonitor-StartQueryWorkloadInsightsTopContributors"},"StartQueryWorkloadInsightsTopContributorsData":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to start a query for retrieving top contributors data points for workload insights","accessLevel":"Write","resourceTypes":[{"name":"scope","required":true}],"operationUrl":"https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_StartQueryWorkloadInsightsTopContributorsData.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html#networkflowmonitor-StartQueryWorkloadInsightsTopContributorsData"},"StopQueryMonitorTopContributors":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to stop a query for retrieving top contributors data for a monitor","accessLevel":"Write","resourceTypes":[{"name":"monitor","required":true}],"operationUrl":"https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_StopQueryMonitorTopContributors.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html#networkflowmonitor-StopQueryMonitorTopContributors"},"StopQueryWorkloadInsightsTopContributors":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to stop a query for retrieving top contributors for workload insights","accessLevel":"Write","resourceTypes":[{"name":"scope","required":true}],"operationUrl":"https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_StopQueryWorkloadInsightsTopContributors.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html#networkflowmonitor-StopQueryWorkloadInsightsTopContributors"},"StopQueryWorkloadInsightsTopContributorsData":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to stop a query for retrieving top contributors data points for workload insights","accessLevel":"Write","resourceTypes":[{"name":"scope","required":true}],"operationUrl":"https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_StopQueryWorkloadInsightsTopContributorsData.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html#networkflowmonitor-StopQueryWorkloadInsightsTopContributorsData"},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"monitor"},{"name":"scope"}],"description":"Grants permission to add tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"monitor","required":false},{"name":"scope","required":false}],"operationUrl":"https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html#networkflowmonitor-TagResource"},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"monitor"},{"name":"scope"}],"description":"Grants permission to remove tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"monitor","required":false},{"name":"scope","required":false}],"operationUrl":"https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html#networkflowmonitor-UntagResource"},"UpdateMonitor":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to update a monitor","accessLevel":"Write","resourceTypes":[{"name":"monitor","required":true}],"operationUrl":"https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_UpdateMonitor.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html#networkflowmonitor-UpdateMonitor"},"UpdateScope":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to update a scope","accessLevel":"Write","resourceTypes":[{"name":"scope","required":true}],"operationUrl":"https://docs.aws.amazon.com/networkflowmonitor/2.0/APIReference/API_UpdateScope.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html#networkflowmonitor-UpdateScope"}},"resources":[{"name":"monitor","arnFormats":["arn:${Partition}:networkflowmonitor:${Region}:${Account}:monitor/${MonitorName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"scope","arnFormats":["arn:${Partition}:networkflowmonitor:${Region}:${Account}:scope/${ScopeId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_networkflowmonitor.html"}

package/src/data/servicereference/services/networkmanager-chat.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"name":"networkmanager-chat","actions":{"CancelMessageResponse":{"conditionKeys":[],"resources":[],"description":"Grants permission to cancel a response to a message","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CreateConversation":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a conversation","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"DeleteConversation":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a conversation","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"ListConversationMessages":{"conditionKeys":[],"resources":[],"description":"Grants permission to list conversation messages","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListConversations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list conversations","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"NotifyConversationIsActive":{"conditionKeys":[],"resources":[],"description":"Grants permission to notify whether there is activity in a conversation","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"SendConversationMessage":{"conditionKeys":[],"resources":[],"description":"Grants permission to send a conversation message","accessLevel":"Write","resourceTypes":[],"permissionOnly":true}},"resources":[],"conditionKeys":{}}
1	+ {"name":"networkmanager-chat","actions":{"CancelMessageResponse":{"conditionKeys":[],"resources":[],"description":"Grants permission to cancel a response to a message","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/vpc/latest/reachability/security_iam_required-API-permissions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkmanagerchat.html#awsnetworkmanagerchat-CancelMessageResponse"},"CreateConversation":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a conversation","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/vpc/latest/reachability/security_iam_required-API-permissions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkmanagerchat.html#awsnetworkmanagerchat-CreateConversation"},"DeleteConversation":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a conversation","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/vpc/latest/reachability/security_iam_required-API-permissions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkmanagerchat.html#awsnetworkmanagerchat-DeleteConversation"},"ListConversationMessages":{"conditionKeys":[],"resources":[],"description":"Grants permission to list conversation messages","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/vpc/latest/reachability/security_iam_required-API-permissions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkmanagerchat.html#awsnetworkmanagerchat-ListConversationMessages"},"ListConversations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list conversations","accessLevel":"List","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/vpc/latest/reachability/security_iam_required-API-permissions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkmanagerchat.html#awsnetworkmanagerchat-ListConversations"},"NotifyConversationIsActive":{"conditionKeys":[],"resources":[],"description":"Grants permission to notify whether there is activity in a conversation","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/vpc/latest/reachability/security_iam_required-API-permissions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkmanagerchat.html#awsnetworkmanagerchat-NotifyConversationIsActive"},"SendConversationMessage":{"conditionKeys":[],"resources":[],"description":"Grants permission to send a conversation message","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/vpc/latest/reachability/security_iam_required-API-permissions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkmanagerchat.html#awsnetworkmanagerchat-SendConversationMessage"}},"resources":[],"conditionKeys":{},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsnetworkmanagerchat.html"}