aws-iam-language-server 0.0.8 → 0.0.9

package/src/data/servicereference/services/savingsplans.json

@@ -1 +1 @@
-{"name":"savingsplans","actions":{"CreateSavingsPlan":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a savings plan","accessLevel":"Write","resourceTypes":[]},"DeleteQueuedSavingsPlan":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"savingsplan"}],"description":"Grants permission to delete the queued savings plan associated with customers account","accessLevel":"Write","resourceTypes":[{"name":"savingsplan","required":true}]},"DescribeSavingsPlanRates":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"savingsplan"}],"description":"Grants permission to describe the rates associated with customers savings plan","accessLevel":"Read","resourceTypes":[{"name":"savingsplan","required":true}]},"DescribeSavingsPlans":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"savingsplan"}],"description":"Grants permission to describe the savings plans associated with customers account","accessLevel":"Read","resourceTypes":[{"name":"savingsplan","required":true}]},"DescribeSavingsPlansOfferingRates":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the rates assciated with savings plans offerings","accessLevel":"Read","resourceTypes":[]},"DescribeSavingsPlansOfferings":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the savings plans offerings that customer is eligible to purchase","accessLevel":"Read","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"savingsplan"}],"description":"Grants permission to list tags for a savings plan","accessLevel":"List","resourceTypes":[{"name":"savingsplan","required":true}]},"ReturnSavingsPlan":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"savingsplan"}],"description":"Grants permission to return a savings plan","accessLevel":"Write","resourceTypes":[{"name":"savingsplan","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"savingsplan"}],"description":"Grants permission to tag a savings plan","accessLevel":"Tagging","resourceTypes":[{"name":"savingsplan","required":true}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"savingsplan"}],"description":"Grants permission to untag a savings plan","accessLevel":"Tagging","resourceTypes":[{"name":"savingsplan","required":true}]}},"resources":[{"name":"savingsplan","arnFormats":["arn:${Partition}:savingsplans::${Account}:savingsplan/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the allowed set of values for each of the tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag-value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of mandatory tags in the request"}}}
+{"name":"savingsplans","actions":{"CreateSavingsPlan":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a savings plan","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/savingsplans/latest/APIReference/API_CreateSavingsPlan.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssavingsplans.html#awssavingsplans-CreateSavingsPlan"},"DeleteQueuedSavingsPlan":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"savingsplan"}],"description":"Grants permission to delete the queued savings plan associated with customers account","accessLevel":"Write","resourceTypes":[{"name":"savingsplan","required":true}],"operationUrl":"https://docs.aws.amazon.com/savingsplans/latest/APIReference/API_DeleteQueuedSavingsPlan.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssavingsplans.html#awssavingsplans-DeleteQueuedSavingsPlan"},"DescribeSavingsPlanRates":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"savingsplan"}],"description":"Grants permission to describe the rates associated with customers savings plan","accessLevel":"Read","resourceTypes":[{"name":"savingsplan","required":true}],"operationUrl":"https://docs.aws.amazon.com/savingsplans/latest/APIReference/API_DescribeSavingsPlanRates.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssavingsplans.html#awssavingsplans-DescribeSavingsPlanRates"},"DescribeSavingsPlans":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"savingsplan"}],"description":"Grants permission to describe the savings plans associated with customers account","accessLevel":"Read","resourceTypes":[{"name":"savingsplan","required":true}],"operationUrl":"https://docs.aws.amazon.com/savingsplans/latest/APIReference/API_DescribeSavingsPlans.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssavingsplans.html#awssavingsplans-DescribeSavingsPlans"},"DescribeSavingsPlansOfferingRates":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the rates assciated with savings plans offerings","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/savingsplans/latest/APIReference/API_DescribeSavingsPlansOfferingRates.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssavingsplans.html#awssavingsplans-DescribeSavingsPlansOfferingRates"},"DescribeSavingsPlansOfferings":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the savings plans offerings that customer is eligible to purchase","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/savingsplans/latest/APIReference/API_DescribeSavingsPlansOfferings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssavingsplans.html#awssavingsplans-DescribeSavingsPlansOfferings"},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"savingsplan"}],"description":"Grants permission to list tags for a savings plan","accessLevel":"List","resourceTypes":[{"name":"savingsplan","required":true}],"operationUrl":"https://docs.aws.amazon.com/savingsplans/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssavingsplans.html#awssavingsplans-ListTagsForResource"},"ReturnSavingsPlan":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"savingsplan"}],"description":"Grants permission to return a savings plan","accessLevel":"Write","resourceTypes":[{"name":"savingsplan","required":true}],"operationUrl":"https://docs.aws.amazon.com/savingsplans/latest/APIReference/API_ReturnSavingsPlan.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssavingsplans.html#awssavingsplans-ReturnSavingsPlan"},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"savingsplan"}],"description":"Grants permission to tag a savings plan","accessLevel":"Tagging","resourceTypes":[{"name":"savingsplan","required":true}],"operationUrl":"https://docs.aws.amazon.com/savingsplans/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssavingsplans.html#awssavingsplans-TagResource"},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"savingsplan"}],"description":"Grants permission to untag a savings plan","accessLevel":"Tagging","resourceTypes":[{"name":"savingsplan","required":true}],"operationUrl":"https://docs.aws.amazon.com/savingsplans/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssavingsplans.html#awssavingsplans-UntagResource"}},"resources":[{"name":"savingsplan","arnFormats":["arn:${Partition}:savingsplans::${Account}:savingsplan/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the allowed set of values for each of the tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag-value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of mandatory tags in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssavingsplans.html"}

package/src/data/servicereference/services/scheduler.json

@@ -1 +1 @@
-{"name":"scheduler","actions":{"CreateSchedule":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"schedule"}],"description":"Grants permission to create an Amazon EventBridge Scheduler schedule","accessLevel":"Write","resourceTypes":[{"name":"schedule","required":true}],"dependentActions":["iam:PassRole"]},"CreateScheduleGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"schedule-group"}],"description":"Grants permission to create an Amazon EventBridge Scheduler schedule group","accessLevel":"Write","resourceTypes":[{"name":"schedule-group","required":true}]},"DeleteSchedule":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"schedule"}],"description":"Grants permission to delete an Amazon EventBridge Scheduler schedule","accessLevel":"Write","resourceTypes":[{"name":"schedule","required":true}]},"DeleteScheduleGroup":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"schedule-group"}],"description":"Grants permission to delete an Amazon EventBridge Scheduler schedule group","accessLevel":"Write","resourceTypes":[{"name":"schedule-group","required":true}],"dependentActions":["scheduler:DeleteSchedule"]},"GetSchedule":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"schedule"}],"description":"Grants permission to view details about an Amazon EventBridge Scheduler schedule","accessLevel":"Read","resourceTypes":[{"name":"schedule","required":true}]},"GetScheduleGroup":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"schedule-group"}],"description":"Grants permission to view details about an Amazon EventBridge Scheduler schedule group","accessLevel":"Read","resourceTypes":[{"name":"schedule-group","required":true}]},"ListScheduleGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the Amazon EventBridge Scheduler schedule groups in your account","accessLevel":"List","resourceTypes":[]},"ListSchedules":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the Amazon EventBridge Scheduler schedules in your account","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"schedule-group"}],"description":"Grants permission to lists tag for an Amazon EventBridge Scheduler resource","accessLevel":"Read","resourceTypes":[{"name":"schedule-group","required":false}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"schedule-group"}],"description":"Grants permission to tag an Amazon EventBridge Scheduler resource","accessLevel":"Tagging","resourceTypes":[{"name":"schedule-group","required":true}]},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"schedule-group"}],"description":"Grants permission to untag an Amazon EventBridge Scheduler resource","accessLevel":"Tagging","resourceTypes":[{"name":"schedule-group","required":true}]},"UpdateSchedule":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"schedule"}],"description":"Grants permission to modify an Amazon EventBridge Scheduler schedule","accessLevel":"Write","resourceTypes":[{"name":"schedule","required":true}],"dependentActions":["iam:PassRole"]}},"resources":[{"name":"schedule","arnFormats":["arn:${Partition}:scheduler:${Region}:${Account}:schedule/${GroupName}/${ScheduleName}"],"conditionKeys":[]},{"name":"schedule-group","arnFormats":["arn:${Partition}:scheduler:${Region}:${Account}:schedule-group/${GroupName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by tag keys in the request"}}}
+{"name":"scheduler","actions":{"CreateSchedule":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"schedule"}],"description":"Grants permission to create an Amazon EventBridge Scheduler schedule","accessLevel":"Write","resourceTypes":[{"name":"schedule","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/scheduler/latest/APIReference/API_CreateSchedule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgescheduler.html#amazoneventbridgescheduler-CreateSchedule"},"CreateScheduleGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"schedule-group"}],"description":"Grants permission to create an Amazon EventBridge Scheduler schedule group","accessLevel":"Write","resourceTypes":[{"name":"schedule-group","required":true}],"operationUrl":"https://docs.aws.amazon.com/scheduler/latest/APIReference/API_CreateScheduleGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgescheduler.html#amazoneventbridgescheduler-CreateScheduleGroup"},"DeleteSchedule":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"schedule"}],"description":"Grants permission to delete an Amazon EventBridge Scheduler schedule","accessLevel":"Write","resourceTypes":[{"name":"schedule","required":true}],"operationUrl":"https://docs.aws.amazon.com/scheduler/latest/APIReference/API_DeleteSchedule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgescheduler.html#amazoneventbridgescheduler-DeleteSchedule"},"DeleteScheduleGroup":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"schedule-group"}],"description":"Grants permission to delete an Amazon EventBridge Scheduler schedule group","accessLevel":"Write","resourceTypes":[{"name":"schedule-group","required":true}],"dependentActions":["scheduler:DeleteSchedule"],"operationUrl":"https://docs.aws.amazon.com/scheduler/latest/APIReference/API_DeleteScheduleGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgescheduler.html#amazoneventbridgescheduler-DeleteScheduleGroup"},"GetSchedule":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"schedule"}],"description":"Grants permission to view details about an Amazon EventBridge Scheduler schedule","accessLevel":"Read","resourceTypes":[{"name":"schedule","required":true}],"operationUrl":"https://docs.aws.amazon.com/scheduler/latest/APIReference/API_GetSchedule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgescheduler.html#amazoneventbridgescheduler-GetSchedule"},"GetScheduleGroup":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"schedule-group"}],"description":"Grants permission to view details about an Amazon EventBridge Scheduler schedule group","accessLevel":"Read","resourceTypes":[{"name":"schedule-group","required":true}],"operationUrl":"https://docs.aws.amazon.com/scheduler/latest/APIReference/API_GetScheduleGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgescheduler.html#amazoneventbridgescheduler-GetScheduleGroup"},"ListScheduleGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the Amazon EventBridge Scheduler schedule groups in your account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/scheduler/latest/APIReference/API_ListScheduleGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgescheduler.html#amazoneventbridgescheduler-ListScheduleGroups"},"ListSchedules":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the Amazon EventBridge Scheduler schedules in your account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/scheduler/latest/APIReference/API_ListSchedules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgescheduler.html#amazoneventbridgescheduler-ListSchedules"},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"schedule-group"}],"description":"Grants permission to lists tag for an Amazon EventBridge Scheduler resource","accessLevel":"Read","resourceTypes":[{"name":"schedule-group","required":false}],"operationUrl":"https://docs.aws.amazon.com/scheduler/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgescheduler.html#amazoneventbridgescheduler-ListTagsForResource"},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"schedule-group"}],"description":"Grants permission to tag an Amazon EventBridge Scheduler resource","accessLevel":"Tagging","resourceTypes":[{"name":"schedule-group","required":true}],"operationUrl":"https://docs.aws.amazon.com/scheduler/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgescheduler.html#amazoneventbridgescheduler-TagResource"},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"schedule-group"}],"description":"Grants permission to untag an Amazon EventBridge Scheduler resource","accessLevel":"Tagging","resourceTypes":[{"name":"schedule-group","required":true}],"operationUrl":"https://docs.aws.amazon.com/scheduler/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgescheduler.html#amazoneventbridgescheduler-UntagResource"},"UpdateSchedule":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"schedule"}],"description":"Grants permission to modify an Amazon EventBridge Scheduler schedule","accessLevel":"Write","resourceTypes":[{"name":"schedule","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/scheduler/latest/APIReference/API_UpdateSchedule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgescheduler.html#amazoneventbridgescheduler-UpdateSchedule"}},"resources":[{"name":"schedule","arnFormats":["arn:${Partition}:scheduler:${Region}:${Account}:schedule/${GroupName}/${ScheduleName}"],"conditionKeys":[]},{"name":"schedule-group","arnFormats":["arn:${Partition}:scheduler:${Region}:${Account}:schedule-group/${GroupName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by tag keys in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgescheduler.html"}

package/src/data/servicereference/services/schemas.json

@@ -1 +1 @@
-{"name":"schemas","actions":{"CreateDiscoverer":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an event schema discoverer. Once created, your events will be automatically map into corresponding schema documents","accessLevel":"Write","resourceTypes":[]},"CreateRegistry":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"registry"}],"description":"Grants permission to create a new schema registry in your account","accessLevel":"Write","resourceTypes":[{"name":"registry","required":true}]},"CreateSchema":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"schema"}],"description":"Grants permission to create a new schema in your account","accessLevel":"Write","resourceTypes":[{"name":"schema","required":true}]},"DeleteDiscoverer":{"conditionKeys":[],"resources":[{"name":"discoverer"}],"description":"Grants permission to delete discoverer in your account","accessLevel":"Write","resourceTypes":[{"name":"discoverer","required":true}]},"DeleteRegistry":{"conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to delete an existing registry in your account","accessLevel":"Write","resourceTypes":[{"name":"registry","required":true}]},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to delete the resource-based policy attached to a given registry","accessLevel":"Write","resourceTypes":[{"name":"registry","required":true}]},"DeleteSchema":{"conditionKeys":[],"resources":[{"name":"schema"}],"description":"Grants permission to delete an existing schema in your account","accessLevel":"Write","resourceTypes":[{"name":"schema","required":true}]},"DeleteSchemaVersion":{"conditionKeys":[],"resources":[{"name":"schema"}],"description":"Grants permission to delete a specific version of schema in your account","accessLevel":"Write","resourceTypes":[{"name":"schema","required":true}]},"DescribeCodeBinding":{"conditionKeys":[],"resources":[{"name":"schema"}],"description":"Grants permission to retrieve metadata for generated code for specific schema in your account","accessLevel":"Read","resourceTypes":[{"name":"schema","required":true}]},"DescribeDiscoverer":{"conditionKeys":[],"resources":[{"name":"discoverer"}],"description":"Grants permission to retrieve discoverer metadata in your account","accessLevel":"Read","resourceTypes":[{"name":"discoverer","required":true}]},"DescribeRegistry":{"conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to describe an existing registry metadata in your account","accessLevel":"Read","resourceTypes":[{"name":"registry","required":true}]},"DescribeSchema":{"conditionKeys":[],"resources":[{"name":"schema"}],"description":"Grants permission to retrieve an existing schema in your account","accessLevel":"Read","resourceTypes":[{"name":"schema","required":true}]},"ExportSchema":{"conditionKeys":[],"resources":[{"name":"registry"},{"name":"schema"}],"description":"Grants permission to export the AWS registry or discovered schemas in OpenAPI 3 format to JSONSchema format","accessLevel":"Read","resourceTypes":[{"name":"registry","required":true},{"name":"schema","required":true}]},"GetCodeBindingSource":{"conditionKeys":[],"resources":[{"name":"schema"}],"description":"Grants permission to retrieve metadata for generated code for specific schema in your account","accessLevel":"Read","resourceTypes":[{"name":"schema","required":true}]},"GetDiscoveredSchema":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a schema for the provided list of sample events","accessLevel":"Read","resourceTypes":[]},"GetResourcePolicy":{"conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to retrieve the resource-based policy attached to a given registry","accessLevel":"Read","resourceTypes":[{"name":"registry","required":true}]},"ListDiscoverers":{"conditionKeys":[],"resources":[{"name":"discoverer"}],"description":"Grants permission to list all discoverers in your account","accessLevel":"List","resourceTypes":[{"name":"discoverer","required":true}]},"ListRegistries":{"conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to list all registries in your account","accessLevel":"List","resourceTypes":[{"name":"registry","required":true}]},"ListSchemaVersions":{"conditionKeys":[],"resources":[{"name":"schema"}],"description":"Grants permission to list all versions of a schema","accessLevel":"List","resourceTypes":[{"name":"schema","required":true}]},"ListSchemas":{"conditionKeys":[],"resources":[{"name":"schema"}],"description":"Grants permission to list all schemas","accessLevel":"List","resourceTypes":[{"name":"schema","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"discoverer"},{"name":"registry"},{"name":"schema"}],"description":"Grants permission to lists tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"discoverer","required":false},{"name":"registry","required":false},{"name":"schema","required":false}]},"PutCodeBinding":{"conditionKeys":[],"resources":[{"name":"schema"}],"description":"Grants permission to generate code for specific schema in your account","accessLevel":"Write","resourceTypes":[{"name":"schema","required":true}]},"PutResourcePolicy":{"conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to attach a resource-based policy to a given registry","accessLevel":"Write","resourceTypes":[{"name":"registry","required":true}]},"SearchSchemas":{"conditionKeys":[],"resources":[{"name":"schema"}],"description":"Grants permission to search schemas based on specified keywords in your account","accessLevel":"List","resourceTypes":[{"name":"schema","required":true}]},"StartDiscoverer":{"conditionKeys":[],"resources":[{"name":"discoverer"}],"description":"Grants permission to start the specified discoverer. Once started the discoverer will automatically register schemas for published events to configured source in your account","accessLevel":"Write","resourceTypes":[{"name":"discoverer","required":true}]},"StopDiscoverer":{"conditionKeys":[],"resources":[{"name":"discoverer"}],"description":"Grants permission to stop the specified discoverer. Once stopped the discoverer will no longer register schemas for published events to configured source in your account","accessLevel":"Write","resourceTypes":[{"name":"discoverer","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"discoverer"},{"name":"registry"},{"name":"schema"}],"description":"Grants permission to tag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"discoverer","required":false},{"name":"registry","required":false},{"name":"schema","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"discoverer"},{"name":"registry"},{"name":"schema"}],"description":"Grants permission to remove a tag from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"discoverer","required":false},{"name":"registry","required":false},{"name":"schema","required":false}]},"UpdateDiscoverer":{"conditionKeys":[],"resources":[{"name":"discoverer"}],"description":"Grants permission to update an existing discoverer in your account","accessLevel":"Write","resourceTypes":[{"name":"discoverer","required":true}]},"UpdateRegistry":{"conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to update an existing registry metadata in your account","accessLevel":"Write","resourceTypes":[{"name":"registry","required":true}]},"UpdateSchema":{"conditionKeys":[],"resources":[{"name":"schema"}],"description":"Grants permission to update an existing schema in your account","accessLevel":"Write","resourceTypes":[{"name":"schema","required":true}]}},"resources":[{"name":"discoverer","arnFormats":["arn:${Partition}:schemas:${Region}:${Account}:discoverer/${DiscovererId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"registry","arnFormats":["arn:${Partition}:schemas:${Region}:${Account}:registry/${RegistryName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"schema","arnFormats":["arn:${Partition}:schemas:${Region}:${Account}:schema/${RegistryName}/${SchemaName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by allowed set of values for each of the tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag-value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of mandatory tags in the request"}}}
+{"name":"schemas","actions":{"CreateDiscoverer":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an event schema discoverer. Once created, your events will be automatically map into corresponding schema documents","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-discoverers-id-discovererid.html#CreateDiscoverer","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-CreateDiscoverer"},"CreateRegistry":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"registry"}],"description":"Grants permission to create a new schema registry in your account","accessLevel":"Write","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-registries-name-registryname.html#CreateRegistry","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-CreateRegistry"},"CreateSchema":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"schema"}],"description":"Grants permission to create a new schema in your account","accessLevel":"Write","resourceTypes":[{"name":"schema","required":true}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-registries-name-registryname-schemas-name-schemaname.html#CreateSchema","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-CreateSchema"},"DeleteDiscoverer":{"conditionKeys":[],"resources":[{"name":"discoverer"}],"description":"Grants permission to delete discoverer in your account","accessLevel":"Write","resourceTypes":[{"name":"discoverer","required":true}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-discoverers-id-discovererid.html#DeleteDiscoverer","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-DeleteDiscoverer"},"DeleteRegistry":{"conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to delete an existing registry in your account","accessLevel":"Write","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-registries-name-registryname.html#DeleteRegistry","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-DeleteRegistry"},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to delete the resource-based policy attached to a given registry","accessLevel":"Write","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-policy.html#DeleteResourcePolicy","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-DeleteResourcePolicy"},"DeleteSchema":{"conditionKeys":[],"resources":[{"name":"schema"}],"description":"Grants permission to delete an existing schema in your account","accessLevel":"Write","resourceTypes":[{"name":"schema","required":true}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-registries-name-registryname-schemas-name-schemaname.html#DeleteSchema","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-DeleteSchema"},"DeleteSchemaVersion":{"conditionKeys":[],"resources":[{"name":"schema"}],"description":"Grants permission to delete a specific version of schema in your account","accessLevel":"Write","resourceTypes":[{"name":"schema","required":true}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-registries-name-registryname-schemas-name-schemaname-version-schemaversion.html#DeleteSchemaVersion","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-DeleteSchemaVersion"},"DescribeCodeBinding":{"conditionKeys":[],"resources":[{"name":"schema"}],"description":"Grants permission to retrieve metadata for generated code for specific schema in your account","accessLevel":"Read","resourceTypes":[{"name":"schema","required":true}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-registries-name-registryname-schemas-name-schemaname-language-language.html#DescribeCodeBinding","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-DescribeCodeBinding"},"DescribeDiscoverer":{"conditionKeys":[],"resources":[{"name":"discoverer"}],"description":"Grants permission to retrieve discoverer metadata in your account","accessLevel":"Read","resourceTypes":[{"name":"discoverer","required":true}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-discoverers-id-discovererid.html#DescribeDiscoverer","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-DescribeDiscoverer"},"DescribeRegistry":{"conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to describe an existing registry metadata in your account","accessLevel":"Read","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-registries-name-registryname.html#DescribeRegistry","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-DescribeRegistry"},"DescribeSchema":{"conditionKeys":[],"resources":[{"name":"schema"}],"description":"Grants permission to retrieve an existing schema in your account","accessLevel":"Read","resourceTypes":[{"name":"schema","required":true}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-registries-name-registryname-schemas-name-schemaname.html#DescribeSchema","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-DescribeSchema"},"ExportSchema":{"conditionKeys":[],"resources":[{"name":"registry"},{"name":"schema"}],"description":"Grants permission to export the AWS registry or discovered schemas in OpenAPI 3 format to JSONSchema format","accessLevel":"Read","resourceTypes":[{"name":"registry","required":true},{"name":"schema","required":true}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-policy.html#ExportSchema","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-ExportSchema"},"GetCodeBindingSource":{"conditionKeys":[],"resources":[{"name":"schema"}],"description":"Grants permission to retrieve metadata for generated code for specific schema in your account","accessLevel":"Read","resourceTypes":[{"name":"schema","required":true}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-registries-name-registryname-schemas-name-schemaname-language-language-source.html#GetCodeBindingSource","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-GetCodeBindingSource"},"GetDiscoveredSchema":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a schema for the provided list of sample events","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-discover.html#GetDiscoveredSchema","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-GetDiscoveredSchema"},"GetResourcePolicy":{"conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to retrieve the resource-based policy attached to a given registry","accessLevel":"Read","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-policy.html#GetResourcePolicy","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-GetResourcePolicy"},"ListDiscoverers":{"conditionKeys":[],"resources":[{"name":"discoverer"}],"description":"Grants permission to list all discoverers in your account","accessLevel":"List","resourceTypes":[{"name":"discoverer","required":true}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-discoverers.html#ListDiscoverers","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-ListDiscoverers"},"ListRegistries":{"conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to list all registries in your account","accessLevel":"List","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-registries.html#ListRegistries","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-ListRegistries"},"ListSchemaVersions":{"conditionKeys":[],"resources":[{"name":"schema"}],"description":"Grants permission to list all versions of a schema","accessLevel":"List","resourceTypes":[{"name":"schema","required":true}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-registries-name-registryname-schemas-name-schemaname-versions.html#ListSchemaVersions","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-ListSchemaVersions"},"ListSchemas":{"conditionKeys":[],"resources":[{"name":"schema"}],"description":"Grants permission to list all schemas","accessLevel":"List","resourceTypes":[{"name":"schema","required":true}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-registries-name-registryname-schemas.html#ListSchemas","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-ListSchemas"},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"discoverer"},{"name":"registry"},{"name":"schema"}],"description":"Grants permission to lists tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"discoverer","required":false},{"name":"registry","required":false},{"name":"schema","required":false}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/tags-resource-arn.html#ListTagsForResource","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-ListTagsForResource"},"PutCodeBinding":{"conditionKeys":[],"resources":[{"name":"schema"}],"description":"Grants permission to generate code for specific schema in your account","accessLevel":"Write","resourceTypes":[{"name":"schema","required":true}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-registries-name-registryname-schemas-name-schemaname-language-language.html#PutCodeBinding","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-PutCodeBinding"},"PutResourcePolicy":{"conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to attach a resource-based policy to a given registry","accessLevel":"Write","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-policy.html#PutResourcePolicy","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-PutResourcePolicy"},"SearchSchemas":{"conditionKeys":[],"resources":[{"name":"schema"}],"description":"Grants permission to search schemas based on specified keywords in your account","accessLevel":"List","resourceTypes":[{"name":"schema","required":true}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-registries-name-registryname-schemas-search.html#SearchSchemas","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-SearchSchemas"},"StartDiscoverer":{"conditionKeys":[],"resources":[{"name":"discoverer"}],"description":"Grants permission to start the specified discoverer. Once started the discoverer will automatically register schemas for published events to configured source in your account","accessLevel":"Write","resourceTypes":[{"name":"discoverer","required":true}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-discoverers-id-discovererid.html#StartDiscoverer","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-StartDiscoverer"},"StopDiscoverer":{"conditionKeys":[],"resources":[{"name":"discoverer"}],"description":"Grants permission to stop the specified discoverer. Once stopped the discoverer will no longer register schemas for published events to configured source in your account","accessLevel":"Write","resourceTypes":[{"name":"discoverer","required":true}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-discoverers-id-discovererid.html#StopDiscoverer","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-StopDiscoverer"},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"discoverer"},{"name":"registry"},{"name":"schema"}],"description":"Grants permission to tag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"discoverer","required":false},{"name":"registry","required":false},{"name":"schema","required":false}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/tags-resource-arn.html#TagResource","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-TagResource"},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"discoverer"},{"name":"registry"},{"name":"schema"}],"description":"Grants permission to remove a tag from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"discoverer","required":false},{"name":"registry","required":false},{"name":"schema","required":false}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/tags-resource-arn.html#UntagResource","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-UntagResource"},"UpdateDiscoverer":{"conditionKeys":[],"resources":[{"name":"discoverer"}],"description":"Grants permission to update an existing discoverer in your account","accessLevel":"Write","resourceTypes":[{"name":"discoverer","required":true}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-discoverers-id-discovererid.html#UpdateDiscoverer","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-UpdateDiscoverer"},"UpdateRegistry":{"conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to update an existing registry metadata in your account","accessLevel":"Write","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-registries-name-registryname.html#UpdateRegistry","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-UpdateRegistry"},"UpdateSchema":{"conditionKeys":[],"resources":[{"name":"schema"}],"description":"Grants permission to update an existing schema in your account","accessLevel":"Write","resourceTypes":[{"name":"schema","required":true}],"operationUrl":"https://docs.aws.amazon.com/eventbridge/latest/schema-reference/v1-registries-name-registryname-schemas-name-schemaname.html#UpdateSchema","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html#amazoneventbridgeschemas-UpdateSchema"}},"resources":[{"name":"discoverer","arnFormats":["arn:${Partition}:schemas:${Region}:${Account}:discoverer/${DiscovererId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"registry","arnFormats":["arn:${Partition}:schemas:${Region}:${Account}:registry/${RegistryName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"schema","arnFormats":["arn:${Partition}:schemas:${Region}:${Account}:schema/${RegistryName}/${SchemaName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by allowed set of values for each of the tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag-value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of mandatory tags in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoneventbridgeschemas.html"}

package/src/data/servicereference/services/scn.json

@@ -1 +1 @@
-{"name":"scn","actions":{"AssignAdminPermissionsToUser":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to add AWS Supply Chain administrator permission to federated user","accessLevel":"Write","resourceTypes":[{"name":"instance","required":true}]},"CreateBillOfMaterialsImportJob":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to create a BillOfMaterialsImportJob which will import a CSV file of BillOfMaterials records","accessLevel":"Write","resourceTypes":[{"name":"instance","required":true}]},"CreateDataIntegrationFlow":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"instance"}],"description":"Grants permission to create DataIntegrationFlow that can transform from multiple sources to one target","accessLevel":"Write","resourceTypes":[{"name":"instance","required":true}]},"CreateDataLakeDataset":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"instance"}],"description":"Grants permission to create the data lake dataset","accessLevel":"Write","resourceTypes":[{"name":"instance","required":true}]},"CreateDataLakeNamespace":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"instance"}],"description":"Grants permission to create the data lake namespace","accessLevel":"Write","resourceTypes":[{"name":"instance","required":true}]},"CreateInstance":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"instance"}],"description":"Grants permission to create a new AWS Supply Chain instance","accessLevel":"Write","resourceTypes":[{"name":"instance","required":true}]},"CreateSSOApplication":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to create IAM Identity Center application for a AWS Supply Chain instance","accessLevel":"Write","resourceTypes":[{"name":"instance","required":true}]},"DeleteDataIntegrationFlow":{"conditionKeys":[],"resources":[{"name":"data-integration-flow"}],"description":"Grants permission to delete the DataIntegrationFlow","accessLevel":"Write","resourceTypes":[{"name":"data-integration-flow","required":true}]},"DeleteDataLakeDataset":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to delete the data lake dataset","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}]},"DeleteDataLakeNamespace":{"conditionKeys":[],"resources":[{"name":"namespace"}],"description":"Grants permission to delete the data lake namespace","accessLevel":"Write","resourceTypes":[{"name":"namespace","required":true}]},"DeleteInstance":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to delete an AWS Supply Chain instance","accessLevel":"Write","resourceTypes":[{"name":"instance","required":true}]},"DeleteSSOApplication":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to delete IAM Identity Center application of the AWS Supply Chain instance","accessLevel":"Write","resourceTypes":[{"name":"instance","required":true}]},"DescribeInstance":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to view details of an AWS Supply Chain instance","accessLevel":"Read","resourceTypes":[{"name":"instance","required":true}]},"GetBillOfMaterialsImportJob":{"conditionKeys":[],"resources":[{"name":"bill-of-materials-import-job"}],"description":"Grants permission to view status and details of a BillOfMaterialsImportJob","accessLevel":"Read","resourceTypes":[{"name":"bill-of-materials-import-job","required":true}]},"GetDataIntegrationEvent":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to get a DataIntegrationEvent","accessLevel":"Read","resourceTypes":[{"name":"instance","required":true}]},"GetDataIntegrationFlow":{"conditionKeys":[],"resources":[{"name":"data-integration-flow"}],"description":"Grants permission to get the DataIntegrationFlow details","accessLevel":"Read","resourceTypes":[{"name":"data-integration-flow","required":true}]},"GetDataIntegrationFlowExecution":{"conditionKeys":[],"resources":[{"name":"data-integration-flow"}],"description":"Grants permission to get a particular execution of one specified DataIntegrationFlow","accessLevel":"Read","resourceTypes":[{"name":"data-integration-flow","required":true}]},"GetDataLakeDataset":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to get the dataset details","accessLevel":"Read","resourceTypes":[{"name":"dataset","required":true}]},"GetDataLakeNamespace":{"conditionKeys":[],"resources":[{"name":"namespace"}],"description":"Grants permission to get the namespace details","accessLevel":"Read","resourceTypes":[{"name":"namespace","required":true}]},"GetInstance":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to view details of an AWS Supply Chain instance","accessLevel":"Read","resourceTypes":[{"name":"instance","required":true}]},"ListAdminUsers":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to list AWS Supply Chain administrators of an instance","accessLevel":"List","resourceTypes":[{"name":"instance","required":true}]},"ListDataIntegrationEvents":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to list all DataIntegrationEvents under an instance","accessLevel":"List","resourceTypes":[{"name":"instance","required":true}]},"ListDataIntegrationFlowExecutions":{"conditionKeys":[],"resources":[{"name":"data-integration-flow"}],"description":"Grants permission to list all executions of one specified DataIntegrationFlow","accessLevel":"List","resourceTypes":[{"name":"data-integration-flow","required":true}]},"ListDataIntegrationFlows":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to list all the DataIntegrationFlows in a paginated way","accessLevel":"List","resourceTypes":[{"name":"instance","required":true}]},"ListDataLakeDatasets":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to list the data lake datasets under specific instance or namespace","accessLevel":"List","resourceTypes":[{"name":"instance","required":true}]},"ListDataLakeNamespaces":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to list the data lake namespaces under specific instance","accessLevel":"List","resourceTypes":[{"name":"instance","required":true}]},"ListInstances":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to view the AWS Supply Chain instances associated with an AWS account","accessLevel":"List","resourceTypes":[{"name":"instance","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to list tags for an AWS Supply Chain resource","accessLevel":"List","resourceTypes":[{"name":"instance","required":true}]},"RemoveAdminPermissionsForUser":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to remove AWS Supply Chain administrator permission from federated user","accessLevel":"Write","resourceTypes":[{"name":"instance","required":true}]},"SendDataIntegrationEvent":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to create a DataIntegrationEvent which will ingest data in real-time","accessLevel":"Write","resourceTypes":[{"name":"instance","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"instance"}],"description":"Grants permission to tag an AWS Supply Chain resource","accessLevel":"Tagging","resourceTypes":[{"name":"instance","required":true}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"instance"}],"description":"Grants permission to remove tag from an AWS Supply Chain resource","accessLevel":"Tagging","resourceTypes":[{"name":"instance","required":true}]},"UpdateDataIntegrationFlow":{"conditionKeys":[],"resources":[{"name":"data-integration-flow"}],"description":"Grants permission to update the DataIntegrationFlow","accessLevel":"Write","resourceTypes":[{"name":"data-integration-flow","required":true}]},"UpdateDataLakeDataset":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to update the data lake dataset","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}]},"UpdateDataLakeNamespace":{"conditionKeys":[],"resources":[{"name":"namespace"}],"description":"Grants permission to update the data lake namespace","accessLevel":"Write","resourceTypes":[{"name":"namespace","required":true}]},"UpdateInstance":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to update an AWS Supply Chain instance","accessLevel":"Write","resourceTypes":[{"name":"instance","required":true}]}},"resources":[{"name":"bill-of-materials-import-job","arnFormats":["arn:${Partition}:scn:${Region}:${Account}:instance/${InstanceId}/bill-of-materials-import-job/${JobId}"],"conditionKeys":[]},{"name":"data-integration-flow","arnFormats":["arn:${Partition}:scn:${Region}:${Account}:instance/${InstanceId}/data-integration-flows/${FlowName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"dataset","arnFormats":["arn:${Partition}:scn:${Region}:${Account}:instance/${InstanceId}/namespaces/${Namespace}/datasets/${DatasetName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"instance","arnFormats":["arn:${Partition}:scn:${Region}:${Account}:instance/${InstanceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"namespace","arnFormats":["arn:${Partition}:scn:${Region}:${Account}:instance/${InstanceId}/namespaces/${Namespace}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by using tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by using tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by using tag keys in the request"}}}
+{"name":"scn","actions":{"AssignAdminPermissionsToUser":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to add AWS Supply Chain administrator permission to federated user","accessLevel":"Write","resourceTypes":[{"name":"instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-AssignAdminPermissionsToUser"},"CreateBillOfMaterialsImportJob":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to create a BillOfMaterialsImportJob which will import a CSV file of BillOfMaterials records","accessLevel":"Write","resourceTypes":[{"name":"instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-CreateBillOfMaterialsImportJob"},"CreateDataIntegrationFlow":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"instance"}],"description":"Grants permission to create DataIntegrationFlow that can transform from multiple sources to one target","accessLevel":"Write","resourceTypes":[{"name":"instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-CreateDataIntegrationFlow"},"CreateDataLakeDataset":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"instance"}],"description":"Grants permission to create the data lake dataset","accessLevel":"Write","resourceTypes":[{"name":"instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-CreateDataLakeDataset"},"CreateDataLakeNamespace":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"instance"}],"description":"Grants permission to create the data lake namespace","accessLevel":"Write","resourceTypes":[{"name":"instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-CreateDataLakeNamespace"},"CreateInstance":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"instance"}],"description":"Grants permission to create a new AWS Supply Chain instance","accessLevel":"Write","resourceTypes":[{"name":"instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-CreateInstance"},"CreateSSOApplication":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to create IAM Identity Center application for a AWS Supply Chain instance","accessLevel":"Write","resourceTypes":[{"name":"instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-CreateSSOApplication"},"DeleteDataIntegrationFlow":{"conditionKeys":[],"resources":[{"name":"data-integration-flow"}],"description":"Grants permission to delete the DataIntegrationFlow","accessLevel":"Write","resourceTypes":[{"name":"data-integration-flow","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-DeleteDataIntegrationFlow"},"DeleteDataLakeDataset":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to delete the data lake dataset","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-DeleteDataLakeDataset"},"DeleteDataLakeNamespace":{"conditionKeys":[],"resources":[{"name":"namespace"}],"description":"Grants permission to delete the data lake namespace","accessLevel":"Write","resourceTypes":[{"name":"namespace","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-DeleteDataLakeNamespace"},"DeleteInstance":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to delete an AWS Supply Chain instance","accessLevel":"Write","resourceTypes":[{"name":"instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-DeleteInstance"},"DeleteSSOApplication":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to delete IAM Identity Center application of the AWS Supply Chain instance","accessLevel":"Write","resourceTypes":[{"name":"instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-DeleteSSOApplication"},"DescribeInstance":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to view details of an AWS Supply Chain instance","accessLevel":"Read","resourceTypes":[{"name":"instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-DescribeInstance"},"GetBillOfMaterialsImportJob":{"conditionKeys":[],"resources":[{"name":"bill-of-materials-import-job"}],"description":"Grants permission to view status and details of a BillOfMaterialsImportJob","accessLevel":"Read","resourceTypes":[{"name":"bill-of-materials-import-job","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-GetBillOfMaterialsImportJob"},"GetDataIntegrationEvent":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to get a DataIntegrationEvent","accessLevel":"Read","resourceTypes":[{"name":"instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-GetDataIntegrationEvent"},"GetDataIntegrationFlow":{"conditionKeys":[],"resources":[{"name":"data-integration-flow"}],"description":"Grants permission to get the DataIntegrationFlow details","accessLevel":"Read","resourceTypes":[{"name":"data-integration-flow","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-GetDataIntegrationFlow"},"GetDataIntegrationFlowExecution":{"conditionKeys":[],"resources":[{"name":"data-integration-flow"}],"description":"Grants permission to get a particular execution of one specified DataIntegrationFlow","accessLevel":"Read","resourceTypes":[{"name":"data-integration-flow","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-GetDataIntegrationFlowExecution"},"GetDataLakeDataset":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to get the dataset details","accessLevel":"Read","resourceTypes":[{"name":"dataset","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-GetDataLakeDataset"},"GetDataLakeNamespace":{"conditionKeys":[],"resources":[{"name":"namespace"}],"description":"Grants permission to get the namespace details","accessLevel":"Read","resourceTypes":[{"name":"namespace","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-GetDataLakeNamespace"},"GetInstance":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to view details of an AWS Supply Chain instance","accessLevel":"Read","resourceTypes":[{"name":"instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-GetInstance"},"ListAdminUsers":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to list AWS Supply Chain administrators of an instance","accessLevel":"List","resourceTypes":[{"name":"instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-ListAdminUsers"},"ListDataIntegrationEvents":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to list all DataIntegrationEvents under an instance","accessLevel":"List","resourceTypes":[{"name":"instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-ListDataIntegrationEvents"},"ListDataIntegrationFlowExecutions":{"conditionKeys":[],"resources":[{"name":"data-integration-flow"}],"description":"Grants permission to list all executions of one specified DataIntegrationFlow","accessLevel":"List","resourceTypes":[{"name":"data-integration-flow","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-ListDataIntegrationFlowExecutions"},"ListDataIntegrationFlows":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to list all the DataIntegrationFlows in a paginated way","accessLevel":"List","resourceTypes":[{"name":"instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-ListDataIntegrationFlows"},"ListDataLakeDatasets":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to list the data lake datasets under specific instance or namespace","accessLevel":"List","resourceTypes":[{"name":"instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-ListDataLakeDatasets"},"ListDataLakeNamespaces":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to list the data lake namespaces under specific instance","accessLevel":"List","resourceTypes":[{"name":"instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-ListDataLakeNamespaces"},"ListInstances":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to view the AWS Supply Chain instances associated with an AWS account","accessLevel":"List","resourceTypes":[{"name":"instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-ListInstances"},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to list tags for an AWS Supply Chain resource","accessLevel":"List","resourceTypes":[{"name":"instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-ListTagsForResource"},"RemoveAdminPermissionsForUser":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to remove AWS Supply Chain administrator permission from federated user","accessLevel":"Write","resourceTypes":[{"name":"instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-RemoveAdminPermissionsForUser"},"SendDataIntegrationEvent":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to create a DataIntegrationEvent which will ingest data in real-time","accessLevel":"Write","resourceTypes":[{"name":"instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-SendDataIntegrationEvent"},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"instance"}],"description":"Grants permission to tag an AWS Supply Chain resource","accessLevel":"Tagging","resourceTypes":[{"name":"instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-TagResource"},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"instance"}],"description":"Grants permission to remove tag from an AWS Supply Chain resource","accessLevel":"Tagging","resourceTypes":[{"name":"instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-UntagResource"},"UpdateDataIntegrationFlow":{"conditionKeys":[],"resources":[{"name":"data-integration-flow"}],"description":"Grants permission to update the DataIntegrationFlow","accessLevel":"Write","resourceTypes":[{"name":"data-integration-flow","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-UpdateDataIntegrationFlow"},"UpdateDataLakeDataset":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to update the data lake dataset","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-UpdateDataLakeDataset"},"UpdateDataLakeNamespace":{"conditionKeys":[],"resources":[{"name":"namespace"}],"description":"Grants permission to update the data lake namespace","accessLevel":"Write","resourceTypes":[{"name":"namespace","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-UpdateDataLakeNamespace"},"UpdateInstance":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to update an AWS Supply Chain instance","accessLevel":"Write","resourceTypes":[{"name":"instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html#awssupplychain-UpdateInstance"}},"resources":[{"name":"bill-of-materials-import-job","arnFormats":["arn:${Partition}:scn:${Region}:${Account}:instance/${InstanceId}/bill-of-materials-import-job/${JobId}"],"conditionKeys":[]},{"name":"data-integration-flow","arnFormats":["arn:${Partition}:scn:${Region}:${Account}:instance/${InstanceId}/data-integration-flows/${FlowName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"dataset","arnFormats":["arn:${Partition}:scn:${Region}:${Account}:instance/${InstanceId}/namespaces/${Namespace}/datasets/${DatasetName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"instance","arnFormats":["arn:${Partition}:scn:${Region}:${Account}:instance/${InstanceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"namespace","arnFormats":["arn:${Partition}:scn:${Region}:${Account}:instance/${InstanceId}/namespaces/${Namespace}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by using tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by using tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by using tag keys in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupplychain.html"}

package/src/data/servicereference/services/sdb.json

@@ -1 +1 @@
-{"name":"sdb","actions":{"BatchDeleteAttributes":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to perform multiple DeleteAttributes operations in a single call, which reduces round trips and latencies","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"BatchPutAttributes":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to perform multiple PutAttribute operations in a single call, which reduces round trips and latencies","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"CreateDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to create a new domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DeleteAttributes":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to delete one or more attributes associated with the item","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DeleteDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to delete a domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DomainMetadata":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to return information about the domain, including when the domain was created, the number of items and attributes, and the size of attribute names and values","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"GetAttributes":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to return all of the attributes associated with the item","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"GetExport":{"conditionKeys":[],"resources":[{"name":"export"}],"description":"Grants permission to return information for an existing domain export arn","accessLevel":"Read","resourceTypes":[{"name":"export","required":true}]},"ListDomains":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all domains","accessLevel":"List","resourceTypes":[]},"ListExports":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to list all exports that were created. The results are paginated and can be filtered by domain name","accessLevel":"List","resourceTypes":[{"name":"domain","required":false}]},"PutAttributes":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to create or replace attributes in an item","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"Select":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to execute a query against the items in a domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"StartDomainExport":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to initiates the export of a SimpleDB domain to an S3 bucket","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]}},"resources":[{"name":"domain","arnFormats":["arn:${Partition}:sdb:${Region}:${Account}:domain/${DomainName}"],"conditionKeys":[]},{"name":"export","arnFormats":["arn:${Partition}:sdb:${Region}:${Account}:domain/${DomainName}/export/${ExportUUID}"],"conditionKeys":[]}],"conditionKeys":{}}
+{"name":"sdb","actions":{"BatchDeleteAttributes":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to perform multiple DeleteAttributes operations in a single call, which reduces round trips and latencies","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonSimpleDB/latest/DeveloperGuide/SDB_API_BatchDeleteAttributes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsimpledb.html#amazonsimpledb-BatchDeleteAttributes"},"BatchPutAttributes":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to perform multiple PutAttribute operations in a single call, which reduces round trips and latencies","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonSimpleDB/latest/DeveloperGuide/SDB_API_BatchPutAttributes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsimpledb.html#amazonsimpledb-BatchPutAttributes"},"CreateDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to create a new domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonSimpleDB/latest/DeveloperGuide/SDB_API_CreateDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsimpledb.html#amazonsimpledb-CreateDomain"},"DeleteAttributes":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to delete one or more attributes associated with the item","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonSimpleDB/latest/DeveloperGuide/SDB_API_DeleteAttributes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsimpledb.html#amazonsimpledb-DeleteAttributes"},"DeleteDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to delete a domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonSimpleDB/latest/DeveloperGuide/SDB_API_DeleteDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsimpledb.html#amazonsimpledb-DeleteDomain"},"DomainMetadata":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to return information about the domain, including when the domain was created, the number of items and attributes, and the size of attribute names and values","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonSimpleDB/latest/DeveloperGuide/SDB_API_DomainMetadata.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsimpledb.html#amazonsimpledb-DomainMetadata"},"GetAttributes":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to return all of the attributes associated with the item","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonSimpleDB/latest/DeveloperGuide/SDB_API_GetAttributes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsimpledb.html#amazonsimpledb-GetAttributes"},"GetExport":{"conditionKeys":[],"resources":[{"name":"export"}],"description":"Grants permission to return information for an existing domain export arn","accessLevel":"Read","resourceTypes":[{"name":"export","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonSimpleDB/latest/DeveloperGuide/SDB_API_GetExport.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsimpledb.html#amazonsimpledb-GetExport"},"ListDomains":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all domains","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/AmazonSimpleDB/latest/DeveloperGuide/SDB_API_ListDomains.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsimpledb.html#amazonsimpledb-ListDomains"},"ListExports":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to list all exports that were created. The results are paginated and can be filtered by domain name","accessLevel":"List","resourceTypes":[{"name":"domain","required":false}],"operationUrl":"https://docs.aws.amazon.com/AmazonSimpleDB/latest/DeveloperGuide/SDB_API_ListExports.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsimpledb.html#amazonsimpledb-ListExports"},"PutAttributes":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to create or replace attributes in an item","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonSimpleDB/latest/DeveloperGuide/SDB_API_PutAttributes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsimpledb.html#amazonsimpledb-PutAttributes"},"Select":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to execute a query against the items in a domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonSimpleDB/latest/DeveloperGuide/SDB_API_Select.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsimpledb.html#amazonsimpledb-Select"},"StartDomainExport":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to initiates the export of a SimpleDB domain to an S3 bucket","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"operationUrl":"https://docs.aws.amazon.com/AmazonSimpleDB/latest/DeveloperGuide/SDB_API_StartDomainExport.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsimpledb.html#amazonsimpledb-StartDomainExport"}},"resources":[{"name":"domain","arnFormats":["arn:${Partition}:sdb:${Region}:${Account}:domain/${DomainName}"],"conditionKeys":[]},{"name":"export","arnFormats":["arn:${Partition}:sdb:${Region}:${Account}:domain/${DomainName}/export/${ExportUUID}"],"conditionKeys":[]}],"conditionKeys":{},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsimpledb.html"}

package/src/data/servicereference/services/secretsmanager.json

@@ -1 +1 @@
-{"name":"secretsmanager","actions":{"BatchGetSecretValue":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve and decrypt a list of secrets","accessLevel":"List","resourceTypes":[]},"CancelRotateSecret":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to cancel an in-progress secret rotation","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}]},"CreateSecret":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","secretsmanager:AddReplicaRegions","secretsmanager:Description","secretsmanager:ForceOverwriteReplicaSecret","secretsmanager:KmsKeyArn","secretsmanager:KmsKeyId","secretsmanager:Name","secretsmanager:ResourceTag/tag-key","secretsmanager:Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to create a secret that stores encrypted data that can be queried and rotated","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}]},"DeleteResourcePolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to delete the resource policy attached to a secret","accessLevel":"Permissions management","resourceTypes":[{"name":"Secret","required":true}]},"DeleteSecret":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ForceDeleteWithoutRecovery","secretsmanager:RecoveryWindowInDays","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to delete a secret","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}]},"DescribeSecret":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to retrieve the metadata about a secret, but not the encrypted data","accessLevel":"Read","resourceTypes":[{"name":"Secret","required":true}]},"GetRandomPassword":{"conditionKeys":[],"resources":[],"description":"Grants permission to generate a random string for use in password creation","accessLevel":"Read","resourceTypes":[]},"GetResourcePolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to get the resource policy attached to a secret","accessLevel":"Read","resourceTypes":[{"name":"Secret","required":true}]},"GetSecretValue":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:VersionId","secretsmanager:VersionStage","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to retrieve and decrypt the encrypted data","accessLevel":"Read","resourceTypes":[{"name":"Secret","required":true}]},"ListSecretVersionIds":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to list the available versions of a secret","accessLevel":"Read","resourceTypes":[{"name":"Secret","required":true}]},"ListSecrets":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the available secrets","accessLevel":"List","resourceTypes":[]},"PutResourcePolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:BlockPublicPolicy","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to attach a resource policy to a secret","accessLevel":"Permissions management","resourceTypes":[{"name":"Secret","required":true}]},"PutSecretValue":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to create a new version of the secret with new encrypted data","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}]},"RemoveRegionsFromReplication":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to remove regions from replication","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}]},"ReplicateSecretToRegions":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:AddReplicaRegions","secretsmanager:ForceOverwriteReplicaSecret","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to convert an existing secret to a multi-Region secret and begin replicating the secret to a list of new regions","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}]},"RestoreSecret":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to cancel deletion of a secret","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}]},"RotateSecret":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ExternalSecretRotationRoleArn","secretsmanager:ModifyRotationRules","secretsmanager:ResourceTag/tag-key","secretsmanager:RotateImmediately","secretsmanager:RotationLambdaARN","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to start rotation of a secret","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}]},"StopReplicationToReplica":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to remove the secret from replication and promote the secret to a regional secret in the replica Region","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to add tags to a secret","accessLevel":"Tagging","resourceTypes":[{"name":"Secret","required":true}]},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to remove tags from a secret","accessLevel":"Tagging","resourceTypes":[{"name":"Secret","required":true}]},"UpdateSecret":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:Description","secretsmanager:KmsKeyArn","secretsmanager:KmsKeyId","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:Type","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to update a secret with new metadata or with a new version of the encrypted data","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}]},"UpdateSecretVersionStage":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:VersionStage","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to move a stage from one secret to another","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}]},"ValidateResourcePolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to validate a resource policy before attaching policy","accessLevel":"Permissions management","resourceTypes":[{"name":"Secret","required":true}]}},"resources":[{"name":"Secret","arnFormats":["arn:${Partition}:secretsmanager:${Region}:${Account}:secret:${SecretId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","secretsmanager:ResourceTag/tag-key","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by a key that is present in the request the user makes to the Secrets Manager service"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the list of all the tag key names present in the request the user makes to the Secrets Manager service"},"secretsmanager:AddReplicaRegions":{"types":["ArrayOfString"],"description":"Filters access by the list of Regions in which to replicate the secret"},"secretsmanager:BlockPublicPolicy":{"types":["Bool"],"description":"Filters access by whether the resource policy blocks broad AWS account access"},"secretsmanager:Description":{"types":["String"],"description":"Filters access by the description text in the request"},"secretsmanager:ExternalSecretRotationRoleArn":{"types":["ARN"],"description":"Filters access by the managed external secret rotation role ARN in the request"},"secretsmanager:ForceDeleteWithoutRecovery":{"types":["Bool"],"description":"Filters access by whether the secret is to be deleted immediately without any recovery window"},"secretsmanager:ForceOverwriteReplicaSecret":{"types":["Bool"],"description":"Filters access by whether to overwrite a secret with the same name in the destination Region"},"secretsmanager:KmsKeyArn":{"types":["ARN"],"description":"Filters access by the key ARN of the KMS key in the request"},"secretsmanager:KmsKeyId":{"types":["String"],"description":"Filters access by the key identifier of the KMS key in the request. Deprecated: Use secretsmanager:KmsKeyArn"},"secretsmanager:ModifyRotationRules":{"types":["Bool"],"description":"Filters access by whether the rotation rules of the secret are to be modified"},"secretsmanager:Name":{"types":["String"],"description":"Filters access by the friendly name of the secret in the request"},"secretsmanager:RecoveryWindowInDays":{"types":["Numeric"],"description":"Filters access by the number of days that Secrets Manager waits before it can delete the secret"},"secretsmanager:ResourceTag/tag-key":{"types":["String"],"description":"Filters access by a tag key and value pair"},"secretsmanager:RotateImmediately":{"types":["Bool"],"description":"Filters access by whether the secret is to be rotated immediately"},"secretsmanager:RotationLambdaARN":{"types":["ARN"],"description":"Filters access by the ARN of the rotation Lambda function in the request"},"secretsmanager:SecretId":{"types":["ARN"],"description":"Filters access by the SecretID value in the request"},"secretsmanager:SecretPrimaryRegion":{"types":["String"],"description":"Filters access by primary region in which the secret is created if the secret is a multi-Region secret"},"secretsmanager:Type":{"types":["String"],"description":"Filters access by the managed external secret type in the request"},"secretsmanager:VersionId":{"types":["String"],"description":"Filters access by the unique identifier of the version of the secret in the request"},"secretsmanager:VersionStage":{"types":["String"],"description":"Filters access by the list of version stages in the request"},"secretsmanager:resource/AllowRotationLambdaArn":{"types":["ARN"],"description":"Filters access by the ARN of the rotation Lambda function associated with the secret"},"secretsmanager:resource/Type":{"types":["String"],"description":"Filters access by the managed external secret type associated with the secret"}}}
+{"name":"secretsmanager","actions":{"BatchGetSecretValue":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve and decrypt a list of secrets","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_BatchGetSecretValue.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-BatchGetSecretValue"},"CancelRotateSecret":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to cancel an in-progress secret rotation","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_CancelRotateSecret.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-CancelRotateSecret"},"CreateSecret":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","secretsmanager:AddReplicaRegions","secretsmanager:Description","secretsmanager:ForceOverwriteReplicaSecret","secretsmanager:KmsKeyArn","secretsmanager:KmsKeyId","secretsmanager:Name","secretsmanager:ResourceTag/tag-key","secretsmanager:Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to create a secret that stores encrypted data that can be queried and rotated","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_CreateSecret.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-CreateSecret"},"DeleteResourcePolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to delete the resource policy attached to a secret","accessLevel":"Permissions management","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_DeleteResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-DeleteResourcePolicy"},"DeleteSecret":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ForceDeleteWithoutRecovery","secretsmanager:RecoveryWindowInDays","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to delete a secret","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_DeleteSecret.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-DeleteSecret"},"DescribeSecret":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to retrieve the metadata about a secret, but not the encrypted data","accessLevel":"Read","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_DescribeSecret.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-DescribeSecret"},"GetRandomPassword":{"conditionKeys":[],"resources":[],"description":"Grants permission to generate a random string for use in password creation","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_GetRandomPassword.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-GetRandomPassword"},"GetResourcePolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to get the resource policy attached to a secret","accessLevel":"Read","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_GetResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-GetResourcePolicy"},"GetSecretValue":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:VersionId","secretsmanager:VersionStage","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to retrieve and decrypt the encrypted data","accessLevel":"Read","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_GetSecretValue.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-GetSecretValue"},"ListSecretVersionIds":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to list the available versions of a secret","accessLevel":"Read","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_ListSecretVersionIds.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-ListSecretVersionIds"},"ListSecrets":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the available secrets","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_ListSecrets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-ListSecrets"},"PutResourcePolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:BlockPublicPolicy","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to attach a resource policy to a secret","accessLevel":"Permissions management","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_PutResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-PutResourcePolicy"},"PutSecretValue":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to create a new version of the secret with new encrypted data","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_PutSecretValue.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-PutSecretValue"},"RemoveRegionsFromReplication":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to remove regions from replication","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_RemoveRegionsFromReplication.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-RemoveRegionsFromReplication"},"ReplicateSecretToRegions":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:AddReplicaRegions","secretsmanager:ForceOverwriteReplicaSecret","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to convert an existing secret to a multi-Region secret and begin replicating the secret to a list of new regions","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_ReplicateSecretToRegions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-ReplicateSecretToRegions"},"RestoreSecret":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to cancel deletion of a secret","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_RestoreSecret.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-RestoreSecret"},"RotateSecret":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ExternalSecretRotationRoleArn","secretsmanager:ModifyRotationRules","secretsmanager:ResourceTag/tag-key","secretsmanager:RotateImmediately","secretsmanager:RotationLambdaARN","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to start rotation of a secret","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_RotateSecret.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-RotateSecret"},"StopReplicationToReplica":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to remove the secret from replication and promote the secret to a regional secret in the replica Region","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_StopReplicationToReplica.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-StopReplicationToReplica"},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to add tags to a secret","accessLevel":"Tagging","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-TagResource"},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to remove tags from a secret","accessLevel":"Tagging","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-UntagResource"},"UpdateSecret":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:Description","secretsmanager:KmsKeyArn","secretsmanager:KmsKeyId","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:Type","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to update a secret with new metadata or with a new version of the encrypted data","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_UpdateSecret.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-UpdateSecret"},"UpdateSecretVersionStage":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:VersionStage","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to move a stage from one secret to another","accessLevel":"Write","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_UpdateSecretVersionStage.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-UpdateSecretVersionStage"},"ValidateResourcePolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}","secretsmanager:ResourceTag/tag-key","secretsmanager:SecretId","secretsmanager:SecretPrimaryRegion","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"],"resources":[{"name":"Secret"}],"description":"Grants permission to validate a resource policy before attaching policy","accessLevel":"Permissions management","resourceTypes":[{"name":"Secret","required":true}],"operationUrl":"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_ValidateResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-ValidateResourcePolicy"}},"resources":[{"name":"Secret","arnFormats":["arn:${Partition}:secretsmanager:${Region}:${Account}:secret:${SecretId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","secretsmanager:ResourceTag/tag-key","secretsmanager:resource/AllowRotationLambdaArn","secretsmanager:resource/Type"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by a key that is present in the request the user makes to the Secrets Manager service"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the list of all the tag key names present in the request the user makes to the Secrets Manager service"},"secretsmanager:AddReplicaRegions":{"types":["ArrayOfString"],"description":"Filters access by the list of Regions in which to replicate the secret"},"secretsmanager:BlockPublicPolicy":{"types":["Bool"],"description":"Filters access by whether the resource policy blocks broad AWS account access"},"secretsmanager:Description":{"types":["String"],"description":"Filters access by the description text in the request"},"secretsmanager:ExternalSecretRotationRoleArn":{"types":["ARN"],"description":"Filters access by the managed external secret rotation role ARN in the request"},"secretsmanager:ForceDeleteWithoutRecovery":{"types":["Bool"],"description":"Filters access by whether the secret is to be deleted immediately without any recovery window"},"secretsmanager:ForceOverwriteReplicaSecret":{"types":["Bool"],"description":"Filters access by whether to overwrite a secret with the same name in the destination Region"},"secretsmanager:KmsKeyArn":{"types":["ARN"],"description":"Filters access by the key ARN of the KMS key in the request"},"secretsmanager:KmsKeyId":{"types":["String"],"description":"Filters access by the key identifier of the KMS key in the request. Deprecated: Use secretsmanager:KmsKeyArn"},"secretsmanager:ModifyRotationRules":{"types":["Bool"],"description":"Filters access by whether the rotation rules of the secret are to be modified"},"secretsmanager:Name":{"types":["String"],"description":"Filters access by the friendly name of the secret in the request"},"secretsmanager:RecoveryWindowInDays":{"types":["Numeric"],"description":"Filters access by the number of days that Secrets Manager waits before it can delete the secret"},"secretsmanager:ResourceTag/tag-key":{"types":["String"],"description":"Filters access by a tag key and value pair"},"secretsmanager:RotateImmediately":{"types":["Bool"],"description":"Filters access by whether the secret is to be rotated immediately"},"secretsmanager:RotationLambdaARN":{"types":["ARN"],"description":"Filters access by the ARN of the rotation Lambda function in the request"},"secretsmanager:SecretId":{"types":["ARN"],"description":"Filters access by the SecretID value in the request"},"secretsmanager:SecretPrimaryRegion":{"types":["String"],"description":"Filters access by primary region in which the secret is created if the secret is a multi-Region secret"},"secretsmanager:Type":{"types":["String"],"description":"Filters access by the managed external secret type in the request"},"secretsmanager:VersionId":{"types":["String"],"description":"Filters access by the unique identifier of the version of the secret in the request"},"secretsmanager:VersionStage":{"types":["String"],"description":"Filters access by the list of version stages in the request"},"secretsmanager:resource/AllowRotationLambdaArn":{"types":["ARN"],"description":"Filters access by the ARN of the rotation Lambda function associated with the secret"},"secretsmanager:resource/Type":{"types":["String"],"description":"Filters access by the managed external secret type associated with the secret"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html"}

package/src/data/servicereference/services/security-ir.json

@@ -1 +1 @@
-{"name":"security-ir","actions":{"BatchGetMemberAccountDetails":{"conditionKeys":[],"resources":[{"name":"membership"}],"description":"Grants permission to get member account details in batch","accessLevel":"Read","resourceTypes":[{"name":"membership","required":true}]},"CancelMembership":{"conditionKeys":[],"resources":[{"name":"membership"}],"description":"Grants permission to cancel a membership","accessLevel":"Write","resourceTypes":[{"name":"membership","required":true}]},"CloseCase":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to close a case","accessLevel":"Write","resourceTypes":[{"name":"case","required":true}]},"CreateCase":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"case"}],"description":"Grants permission to create a case","accessLevel":"Write","resourceTypes":[{"name":"case","required":true}]},"CreateCaseComment":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to create a case comment","accessLevel":"Write","resourceTypes":[{"name":"case","required":true}]},"CreateMembership":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"membership"}],"description":"Grants permission to create a membership","accessLevel":"Write","resourceTypes":[{"name":"membership","required":true}],"dependentActions":["iam:CreateServiceLinkedRole","organizations:DescribeOrganization","organizations:ListAWSServiceAccessForOrganization","organizations:ListDelegatedAdministrators"]},"GetCase":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to get a case","accessLevel":"Read","resourceTypes":[{"name":"case","required":true}]},"GetCaseAttachmentDownloadUrl":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to get a case attachment download URL","accessLevel":"Read","resourceTypes":[{"name":"case","required":true}]},"GetCaseAttachmentUploadUrl":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to get a case attachment upload URL","accessLevel":"Write","resourceTypes":[{"name":"case","required":true}]},"GetMembership":{"conditionKeys":[],"resources":[{"name":"membership"}],"description":"Grants permission to get a membership","accessLevel":"Read","resourceTypes":[{"name":"membership","required":true}]},"ListCaseEdits":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to list case edits","accessLevel":"Read","resourceTypes":[{"name":"case","required":true}]},"ListCases":{"conditionKeys":[],"resources":[],"description":"Grants permission to list cases","accessLevel":"List","resourceTypes":[]},"ListComments":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to list case comments","accessLevel":"Read","resourceTypes":[{"name":"case","required":true}]},"ListInvestigations":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to list investigations for a case","accessLevel":"Read","resourceTypes":[{"name":"case","required":true}]},"ListMemberships":{"conditionKeys":[],"resources":[],"description":"Grants permission to list memberships","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"case"},{"name":"membership"}],"description":"Grants permission to list the tags attached to the specified resource","accessLevel":"Read","resourceTypes":[{"name":"case","required":false},{"name":"membership","required":false}]},"SendFeedback":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to send feedback for investigation results","accessLevel":"Write","resourceTypes":[{"name":"case","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"case"},{"name":"membership"}],"description":"Grants permission to add tags to the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"case","required":false},{"name":"membership","required":false}]},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"case"},{"name":"membership"}],"description":"Grants permission to remove tags from the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"case","required":false},{"name":"membership","required":false}]},"UpdateCase":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to update a case","accessLevel":"Write","resourceTypes":[{"name":"case","required":true}]},"UpdateCaseComment":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to update a case comment","accessLevel":"Write","resourceTypes":[{"name":"case","required":true}]},"UpdateCaseStatus":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to update a case status","accessLevel":"Write","resourceTypes":[{"name":"case","required":true}]},"UpdateMembership":{"conditionKeys":[],"resources":[{"name":"membership"}],"description":"Grants permission to update memberships","accessLevel":"Write","resourceTypes":[{"name":"membership","required":true}],"dependentActions":["iam:CreateServiceLinkedRole","organizations:DescribeOrganizationalUnit"]},"UpdateResolverType":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to update case resolver type","accessLevel":"Write","resourceTypes":[{"name":"case","required":true}]}},"resources":[{"name":"case","arnFormats":["arn:${Partition}:security-ir:${Region}:${Account}:case/${CaseId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"membership","arnFormats":["arn:${Partition}:security-ir:${Region}:${Account}:membership/${MembershipId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}}}
+{"name":"security-ir","actions":{"BatchGetMemberAccountDetails":{"conditionKeys":[],"resources":[{"name":"membership"}],"description":"Grants permission to get member account details in batch","accessLevel":"Read","resourceTypes":[{"name":"membership","required":true}],"operationUrl":"https://docs.aws.amazon.com/security-ir/latest/APIReference/API_BatchGetMemberAccountDetails.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityincidentresponse.html#awssecurityincidentresponse-BatchGetMemberAccountDetails"},"CancelMembership":{"conditionKeys":[],"resources":[{"name":"membership"}],"description":"Grants permission to cancel a membership","accessLevel":"Write","resourceTypes":[{"name":"membership","required":true}],"operationUrl":"https://docs.aws.amazon.com/security-ir/latest/APIReference/API_CancelMembership.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityincidentresponse.html#awssecurityincidentresponse-CancelMembership"},"CloseCase":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to close a case","accessLevel":"Write","resourceTypes":[{"name":"case","required":true}],"operationUrl":"https://docs.aws.amazon.com/security-ir/latest/APIReference/API_CloseCase.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityincidentresponse.html#awssecurityincidentresponse-CloseCase"},"CreateCase":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"case"}],"description":"Grants permission to create a case","accessLevel":"Write","resourceTypes":[{"name":"case","required":true}],"operationUrl":"https://docs.aws.amazon.com/security-ir/latest/APIReference/API_CreateCase.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityincidentresponse.html#awssecurityincidentresponse-CreateCase"},"CreateCaseComment":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to create a case comment","accessLevel":"Write","resourceTypes":[{"name":"case","required":true}],"operationUrl":"https://docs.aws.amazon.com/security-ir/latest/APIReference/API_CreateCaseComment.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityincidentresponse.html#awssecurityincidentresponse-CreateCaseComment"},"CreateMembership":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"membership"}],"description":"Grants permission to create a membership","accessLevel":"Write","resourceTypes":[{"name":"membership","required":true}],"dependentActions":["iam:CreateServiceLinkedRole","organizations:DescribeOrganization","organizations:ListAWSServiceAccessForOrganization","organizations:ListDelegatedAdministrators"],"operationUrl":"https://docs.aws.amazon.com/security-ir/latest/APIReference/API_CreateMembership.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityincidentresponse.html#awssecurityincidentresponse-CreateMembership"},"GetCase":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to get a case","accessLevel":"Read","resourceTypes":[{"name":"case","required":true}],"operationUrl":"https://docs.aws.amazon.com/security-ir/latest/APIReference/API_GetCase.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityincidentresponse.html#awssecurityincidentresponse-GetCase"},"GetCaseAttachmentDownloadUrl":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to get a case attachment download URL","accessLevel":"Read","resourceTypes":[{"name":"case","required":true}],"operationUrl":"https://docs.aws.amazon.com/security-ir/latest/APIReference/API_GetCaseAttachmentDownloadUrl.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityincidentresponse.html#awssecurityincidentresponse-GetCaseAttachmentDownloadUrl"},"GetCaseAttachmentUploadUrl":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to get a case attachment upload URL","accessLevel":"Write","resourceTypes":[{"name":"case","required":true}],"operationUrl":"https://docs.aws.amazon.com/security-ir/latest/APIReference/API_GetCaseAttachmentUploadUrl.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityincidentresponse.html#awssecurityincidentresponse-GetCaseAttachmentUploadUrl"},"GetMembership":{"conditionKeys":[],"resources":[{"name":"membership"}],"description":"Grants permission to get a membership","accessLevel":"Read","resourceTypes":[{"name":"membership","required":true}],"operationUrl":"https://docs.aws.amazon.com/security-ir/latest/APIReference/API_GetMembership.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityincidentresponse.html#awssecurityincidentresponse-GetMembership"},"ListCaseEdits":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to list case edits","accessLevel":"Read","resourceTypes":[{"name":"case","required":true}],"operationUrl":"https://docs.aws.amazon.com/security-ir/latest/APIReference/API_ListCaseEdits.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityincidentresponse.html#awssecurityincidentresponse-ListCaseEdits"},"ListCases":{"conditionKeys":[],"resources":[],"description":"Grants permission to list cases","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/security-ir/latest/APIReference/API_ListCases.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityincidentresponse.html#awssecurityincidentresponse-ListCases"},"ListComments":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to list case comments","accessLevel":"Read","resourceTypes":[{"name":"case","required":true}],"operationUrl":"https://docs.aws.amazon.com/security-ir/latest/APIReference/API_ListComments.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityincidentresponse.html#awssecurityincidentresponse-ListComments"},"ListInvestigations":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to list investigations for a case","accessLevel":"Read","resourceTypes":[{"name":"case","required":true}],"operationUrl":"https://docs.aws.amazon.com/security-ir/latest/APIReference/API_ListInvestigations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityincidentresponse.html#awssecurityincidentresponse-ListInvestigations"},"ListMemberships":{"conditionKeys":[],"resources":[],"description":"Grants permission to list memberships","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/security-ir/latest/APIReference/API_ListMemberships.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityincidentresponse.html#awssecurityincidentresponse-ListMemberships"},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"case"},{"name":"membership"}],"description":"Grants permission to list the tags attached to the specified resource","accessLevel":"Read","resourceTypes":[{"name":"case","required":false},{"name":"membership","required":false}],"operationUrl":"https://docs.aws.amazon.com/security-ir/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityincidentresponse.html#awssecurityincidentresponse-ListTagsForResource"},"SendFeedback":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to send feedback for investigation results","accessLevel":"Write","resourceTypes":[{"name":"case","required":true}],"operationUrl":"https://docs.aws.amazon.com/security-ir/latest/APIReference/API_SendFeedback.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityincidentresponse.html#awssecurityincidentresponse-SendFeedback"},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"case"},{"name":"membership"}],"description":"Grants permission to add tags to the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"case","required":false},{"name":"membership","required":false}],"operationUrl":"https://docs.aws.amazon.com/security-ir/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityincidentresponse.html#awssecurityincidentresponse-TagResource"},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"case"},{"name":"membership"}],"description":"Grants permission to remove tags from the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"case","required":false},{"name":"membership","required":false}],"operationUrl":"https://docs.aws.amazon.com/security-ir/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityincidentresponse.html#awssecurityincidentresponse-UntagResource"},"UpdateCase":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to update a case","accessLevel":"Write","resourceTypes":[{"name":"case","required":true}],"operationUrl":"https://docs.aws.amazon.com/security-ir/latest/APIReference/API_UpdateCase.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityincidentresponse.html#awssecurityincidentresponse-UpdateCase"},"UpdateCaseComment":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to update a case comment","accessLevel":"Write","resourceTypes":[{"name":"case","required":true}],"operationUrl":"https://docs.aws.amazon.com/security-ir/latest/APIReference/API_UpdateCaseComment.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityincidentresponse.html#awssecurityincidentresponse-UpdateCaseComment"},"UpdateCaseStatus":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to update a case status","accessLevel":"Write","resourceTypes":[{"name":"case","required":true}],"operationUrl":"https://docs.aws.amazon.com/security-ir/latest/APIReference/API_UpdateCaseStatus.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityincidentresponse.html#awssecurityincidentresponse-UpdateCaseStatus"},"UpdateMembership":{"conditionKeys":[],"resources":[{"name":"membership"}],"description":"Grants permission to update memberships","accessLevel":"Write","resourceTypes":[{"name":"membership","required":true}],"dependentActions":["iam:CreateServiceLinkedRole","organizations:DescribeOrganizationalUnit"],"operationUrl":"https://docs.aws.amazon.com/security-ir/latest/APIReference/API_UpdateMembership.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityincidentresponse.html#awssecurityincidentresponse-UpdateMembership"},"UpdateResolverType":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to update case resolver type","accessLevel":"Write","resourceTypes":[{"name":"case","required":true}],"operationUrl":"https://docs.aws.amazon.com/security-ir/latest/APIReference/API_UpdateResolverType.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityincidentresponse.html#awssecurityincidentresponse-UpdateResolverType"}},"resources":[{"name":"case","arnFormats":["arn:${Partition}:security-ir:${Region}:${Account}:case/${CaseId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"membership","arnFormats":["arn:${Partition}:security-ir:${Region}:${Account}:membership/${MembershipId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityincidentresponse.html"}