aws-iam-language-server 0.0.9 → 0.0.11

package/src/data/servicereference/services/ssmmessages.json

@@ -1 +1 @@
-{"name":"ssmmessages","actions":{"CreateControlChannel":{"conditionKeys":["ec2:SourceInstanceARN","ssm:SourceInstanceARN"],"resources":[],"description":"Grants permission to register a control channel for an instance to send control messages to Systems Manager service","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/getting-started-create-iam-instance-profile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagegatewayservice.html#amazonmessagegatewayservice-CreateControlChannel"},"CreateDataChannel":{"conditionKeys":[],"resources":[],"description":"Grants permission to register a data channel for an instance to send data messages to Systems Manager service","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/getting-started-create-iam-instance-profile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagegatewayservice.html#amazonmessagegatewayservice-CreateDataChannel"},"OpenControlChannel":{"conditionKeys":[],"resources":[],"description":"Grants permission to open a websocket connection for a registered control channel stream from an instance to Systems Manager service","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/getting-started-create-iam-instance-profile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagegatewayservice.html#amazonmessagegatewayservice-OpenControlChannel"},"OpenDataChannel":{"conditionKeys":[],"resources":[],"description":"Grants permission to open a websocket connection for a registered data channel stream from an instance to Systems Manager service","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/getting-started-create-iam-instance-profile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagegatewayservice.html#amazonmessagegatewayservice-OpenDataChannel"}},"resources":[],"conditionKeys":{"ec2:SourceInstanceARN":{"types":["ARN"],"description":"Filters access by the ARN of the instance from which the request originated"},"ssm:SourceInstanceARN":{"types":["ARN"],"description":"Filters access by verifying the Amazon Resource Name (ARN) of the AWS Systems Manager's managed instance from which the request is made. This key is not present when the request comes from the managed instance authenticated with an IAM role associated with EC2 instance profile"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagegatewayservice.html"}
+{"name":"ssmmessages","actions":{"CreateControlChannel":{"name":"CreateControlChannel","service":"ssmmessages","conditionKeys":["ec2:SourceInstanceARN","ssm:SourceInstanceARN"],"resources":[],"description":"Grants permission to register a control channel for an instance to send control messages to Systems Manager service","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/getting-started-create-iam-instance-profile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagegatewayservice.html#amazonmessagegatewayservice-CreateControlChannel"},"CreateDataChannel":{"name":"CreateDataChannel","service":"ssmmessages","conditionKeys":[],"resources":[],"description":"Grants permission to register a data channel for an instance to send data messages to Systems Manager service","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/getting-started-create-iam-instance-profile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagegatewayservice.html#amazonmessagegatewayservice-CreateDataChannel"},"OpenControlChannel":{"name":"OpenControlChannel","service":"ssmmessages","conditionKeys":[],"resources":[],"description":"Grants permission to open a websocket connection for a registered control channel stream from an instance to Systems Manager service","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/getting-started-create-iam-instance-profile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagegatewayservice.html#amazonmessagegatewayservice-OpenControlChannel"},"OpenDataChannel":{"name":"OpenDataChannel","service":"ssmmessages","conditionKeys":[],"resources":[],"description":"Grants permission to open a websocket connection for a registered data channel stream from an instance to Systems Manager service","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/getting-started-create-iam-instance-profile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagegatewayservice.html#amazonmessagegatewayservice-OpenDataChannel"}},"resources":[],"conditionKeys":{"ec2:SourceInstanceARN":{"types":["ARN"],"description":"Filters access by the ARN of the instance from which the request originated"},"ssm:SourceInstanceARN":{"types":["ARN"],"description":"Filters access by verifying the Amazon Resource Name (ARN) of the AWS Systems Manager's managed instance from which the request is made. This key is not present when the request comes from the managed instance authenticated with an IAM role associated with EC2 instance profile"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagegatewayservice.html"}

package/src/data/servicereference/services/sso-directory.json

@@ -1 +1 @@
-{"name":"sso-directory","actions":{"AddMemberToGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to add a member to a group in the directory that AWS IAM Identity Center provides by default","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_CreateGroupMembership.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-AddMemberToGroup"},"CompleteVirtualMfaDeviceRegistration":{"conditionKeys":[],"resources":[],"description":"Grants permission to complete the creation process of a virtual MFA device","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-CompleteVirtualMfaDeviceRegistration"},"CompleteWebAuthnDeviceRegistration":{"conditionKeys":[],"resources":[],"description":"Grants permission to complete the registration process of a WebAuthn device","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-CompleteWebAuthnDeviceRegistration"},"CreateAlias":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an alias for the directory that AWS IAM Identity Center provides by default","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-CreateAlias"},"CreateBearerToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a bearer token for a given provisioning tenant","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-CreateBearerToken"},"CreateExternalIdPConfigurationForDirectory":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an External Identity Provider configuration for the directory","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-CreateExternalIdPConfigurationForDirectory"},"CreateGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a group in the directory that AWS IAM Identity Center provides by default","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_CreateGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-CreateGroup"},"CreateProvisioningTenant":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a provisioning tenant for a given directory","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-CreateProvisioningTenant"},"CreateUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a user in the directory that AWS IAM Identity Center provides by default","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_CreateUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-CreateUser"},"DeleteBearerToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a bearer token","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DeleteBearerToken"},"DeleteExternalIdPCertificate":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the given external IdP certificate","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DeleteExternalIdPCertificate"},"DeleteExternalIdPConfigurationForDirectory":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete an External Identity Provider configuration associated with the directory","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DeleteExternalIdPConfigurationForDirectory"},"DeleteGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a group from the directory that AWS IAM Identity Center provides by default","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_DeleteGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DeleteGroup"},"DeleteMfaDeviceForUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a MFA device by device name for a given user","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DeleteMfaDeviceForUser"},"DeleteProvisioningTenant":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the provisioning tenant","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DeleteProvisioningTenant"},"DeleteUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a user from the directory that AWS IAM Identity Center provides by default","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_DeleteUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DeleteUser"},"DescribeDirectory":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about the directory that AWS IAM Identity Center provides by default","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DescribeDirectory"},"DescribeGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to query the group data, not including user and group members","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_DescribeGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DescribeGroup"},"DescribeGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about groups from the directory that AWS IAM Identity Center provides by default","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_DescribeGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DescribeGroups"},"DescribeProvisioningTenant":{"conditionKeys":[],"resources":[],"description":"Grants permission to describes the provisioning tenant","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DescribeProvisioningTenant"},"DescribeUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about a user from the directory that AWS IAM Identity Center provides by default","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_DescribeUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DescribeUser"},"DescribeUserByUniqueAttribute":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe user with a valid unique attribute represented for the user","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DescribeUserByUniqueAttribute"},"DescribeUsers":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about user from the directory that AWS IAM Identity Center provides by default","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_DescribeUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DescribeUsers"},"DisableExternalIdPConfigurationForDirectory":{"conditionKeys":[],"resources":[],"description":"Grants permission to disable authentication of end users with an External Identity Provider","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DisableExternalIdPConfigurationForDirectory"},"DisableUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to deactivate a user in the directory that AWS IAM Identity Center provides by default","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DisableUser"},"EnableExternalIdPConfigurationForDirectory":{"conditionKeys":[],"resources":[],"description":"Grants permission to enable authentication of end users with an External Identity Provider","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-EnableExternalIdPConfigurationForDirectory"},"EnableUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to activate user in the directory that AWS IAM Identity Center provides by default","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-EnableUser"},"GetAWSSPConfigurationForDirectory":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the AWS IAM Identity Center Service Provider configurations for the directory","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-GetAWSSPConfigurationForDirectory"},"GetGroupId":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve ID information about group from the directory that AWS IAM Identity Center provides by default","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_GetGroupId.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-GetGroupId"},"GetUserId":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve ID information about user from the directory that AWS IAM Identity Center provides by default","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_GetUserId.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-GetUserId"},"GetUserPoolInfo":{"conditionKeys":[],"resources":[],"description":"(Deprecated) Grants permission to get UserPool Info","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-GetUserPoolInfo"},"ImportExternalIdPCertificate":{"conditionKeys":[],"resources":[],"description":"Grants permission to import the IdP certificate used for verifying external IdP responses","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-ImportExternalIdPCertificate"},"IsMemberInGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to check if a member is a part of the group in the directory that AWS IAM Identity Center provides by default","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_IsMemberInGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-IsMemberInGroup"},"IsMemberInGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to check if a member is a part of multiple groups in the directory that AWS IAM Identity Center provides by default","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_IsMemberInGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-IsMemberInGroups"},"ListBearerTokens":{"conditionKeys":[],"resources":[],"description":"Grants permission to list bearer tokens for a given provisioning tenant","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-ListBearerTokens"},"ListExternalIdPCertificates":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the external IdP certificates of a given directory and IdP","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-ListExternalIdPCertificates"},"ListExternalIdPConfigurationsForDirectory":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the External Identity Provider configurations created for the directory","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-ListExternalIdPConfigurationsForDirectory"},"ListGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to list groups from the directory that AWS IAM Identity Center provides by default","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_ListGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-ListGroups"},"ListGroupsForMember":{"conditionKeys":[],"resources":[],"description":"Grants permission to list groups of the target member","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_ListGroupMembershipsForMember.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-ListGroupsForMember"},"ListGroupsForUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to list groups for a user from the directory that AWS IAM Identity Center provides by default","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_ListGroupMembershipsForMember.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-ListGroupsForUser"},"ListMembersInGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve all members that are part of a group in the directory that AWS IAM Identity Center provides by default","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_ListGroupMemberships.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-ListMembersInGroup"},"ListMfaDevicesForUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all active MFA devices and their MFA device metadata for a user","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-ListMfaDevicesForUser"},"ListProvisioningTenants":{"conditionKeys":[],"resources":[],"description":"Grants permission to list provisioning tenants for a given directory","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-ListProvisioningTenants"},"ListUsers":{"conditionKeys":[],"resources":[],"description":"Grants permission to list users from the directory that AWS IAM Identity Center provides by default","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_ListUsers.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-ListUsers"},"RemoveMemberFromGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to remove a member that is part of a group in the directory that AWS IAM Identity Center provides by default","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_DeleteGroupMembership.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-RemoveMemberFromGroup"},"SearchGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to search for groups within the associated directory","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-SearchGroups"},"SearchUsers":{"conditionKeys":[],"resources":[],"description":"Grants permission to search for users within the associated directory","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-SearchUsers"},"StartVirtualMfaDeviceRegistration":{"conditionKeys":[],"resources":[],"description":"Grants permission to begin the creation process of virtual mfa device","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-StartVirtualMfaDeviceRegistration"},"StartWebAuthnDeviceRegistration":{"conditionKeys":[],"resources":[],"description":"Grants permission to begin the registration process of a WebAuthn device","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-StartWebAuthnDeviceRegistration"},"UpdateExternalIdPConfigurationForDirectory":{"conditionKeys":[],"resources":[],"description":"Grants permission to update an External Identity Provider configuration associated with the directory","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-UpdateExternalIdPConfigurationForDirectory"},"UpdateGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to update information about a group in the directory that AWS IAM Identity Center provides by default","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_UpdateGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-UpdateGroup"},"UpdateGroupDisplayName":{"conditionKeys":[],"resources":[],"description":"Grants permission to update group display name update group display name response","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-UpdateGroupDisplayName"},"UpdateMfaDeviceForUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to update MFA device information","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-UpdateMfaDeviceForUser"},"UpdatePassword":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a password by sending password reset link via email or generating one time password for a user in the directory that AWS IAM Identity Center provides by default","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-UpdatePassword"},"UpdateUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to update user information in the directory that AWS IAM Identity Center provides by default","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_UpdateUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-UpdateUser"},"UpdateUserName":{"conditionKeys":[],"resources":[],"description":"Grants permission to update user name update user name response","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-UpdateUserName"},"VerifyEmail":{"conditionKeys":[],"resources":[],"description":"Grants permission to verify an email address of an User","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-VerifyEmail"}},"resources":[],"conditionKeys":{},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html"}
+{"name":"sso-directory","actions":{"AddMemberToGroup":{"name":"AddMemberToGroup","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to add a member to a group in the directory that AWS IAM Identity Center provides by default","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_CreateGroupMembership.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-AddMemberToGroup"},"CompleteVirtualMfaDeviceRegistration":{"name":"CompleteVirtualMfaDeviceRegistration","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to complete the creation process of a virtual MFA device","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-CompleteVirtualMfaDeviceRegistration"},"CompleteWebAuthnDeviceRegistration":{"name":"CompleteWebAuthnDeviceRegistration","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to complete the registration process of a WebAuthn device","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-CompleteWebAuthnDeviceRegistration"},"CreateAlias":{"name":"CreateAlias","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to create an alias for the directory that AWS IAM Identity Center provides by default","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-CreateAlias"},"CreateBearerToken":{"name":"CreateBearerToken","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to create a bearer token for a given provisioning tenant","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-CreateBearerToken"},"CreateExternalIdPConfigurationForDirectory":{"name":"CreateExternalIdPConfigurationForDirectory","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to create an External Identity Provider configuration for the directory","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-CreateExternalIdPConfigurationForDirectory"},"CreateGroup":{"name":"CreateGroup","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to create a group in the directory that AWS IAM Identity Center provides by default","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_CreateGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-CreateGroup"},"CreateProvisioningTenant":{"name":"CreateProvisioningTenant","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to create a provisioning tenant for a given directory","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-CreateProvisioningTenant"},"CreateUser":{"name":"CreateUser","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to create a user in the directory that AWS IAM Identity Center provides by default","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_CreateUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-CreateUser"},"DeleteBearerToken":{"name":"DeleteBearerToken","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to delete a bearer token","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DeleteBearerToken"},"DeleteExternalIdPCertificate":{"name":"DeleteExternalIdPCertificate","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to delete the given external IdP certificate","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DeleteExternalIdPCertificate"},"DeleteExternalIdPConfigurationForDirectory":{"name":"DeleteExternalIdPConfigurationForDirectory","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to delete an External Identity Provider configuration associated with the directory","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DeleteExternalIdPConfigurationForDirectory"},"DeleteGroup":{"name":"DeleteGroup","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to delete a group from the directory that AWS IAM Identity Center provides by default","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_DeleteGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DeleteGroup"},"DeleteMfaDeviceForUser":{"name":"DeleteMfaDeviceForUser","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to delete a MFA device by device name for a given user","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DeleteMfaDeviceForUser"},"DeleteProvisioningTenant":{"name":"DeleteProvisioningTenant","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to delete the provisioning tenant","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DeleteProvisioningTenant"},"DeleteUser":{"name":"DeleteUser","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to delete a user from the directory that AWS IAM Identity Center provides by default","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_DeleteUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DeleteUser"},"DescribeDirectory":{"name":"DescribeDirectory","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about the directory that AWS IAM Identity Center provides by default","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DescribeDirectory"},"DescribeGroup":{"name":"DescribeGroup","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to query the group data, not including user and group members","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_DescribeGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DescribeGroup"},"DescribeGroups":{"name":"DescribeGroups","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about groups from the directory that AWS IAM Identity Center provides by default","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_DescribeGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DescribeGroups"},"DescribeProvisioningTenant":{"name":"DescribeProvisioningTenant","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to describes the provisioning tenant","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DescribeProvisioningTenant"},"DescribeUser":{"name":"DescribeUser","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about a user from the directory that AWS IAM Identity Center provides by default","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_DescribeUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DescribeUser"},"DescribeUserByUniqueAttribute":{"name":"DescribeUserByUniqueAttribute","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to describe user with a valid unique attribute represented for the user","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DescribeUserByUniqueAttribute"},"DescribeUsers":{"name":"DescribeUsers","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about user from the directory that AWS IAM Identity Center provides by default","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_DescribeUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DescribeUsers"},"DisableExternalIdPConfigurationForDirectory":{"name":"DisableExternalIdPConfigurationForDirectory","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to disable authentication of end users with an External Identity Provider","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DisableExternalIdPConfigurationForDirectory"},"DisableUser":{"name":"DisableUser","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to deactivate a user in the directory that AWS IAM Identity Center provides by default","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-DisableUser"},"EnableExternalIdPConfigurationForDirectory":{"name":"EnableExternalIdPConfigurationForDirectory","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to enable authentication of end users with an External Identity Provider","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-EnableExternalIdPConfigurationForDirectory"},"EnableUser":{"name":"EnableUser","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to activate user in the directory that AWS IAM Identity Center provides by default","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-EnableUser"},"GetAWSSPConfigurationForDirectory":{"name":"GetAWSSPConfigurationForDirectory","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the AWS IAM Identity Center Service Provider configurations for the directory","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-GetAWSSPConfigurationForDirectory"},"GetGroupId":{"name":"GetGroupId","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve ID information about group from the directory that AWS IAM Identity Center provides by default","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_GetGroupId.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-GetGroupId"},"GetUserId":{"name":"GetUserId","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve ID information about user from the directory that AWS IAM Identity Center provides by default","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_GetUserId.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-GetUserId"},"GetUserPoolInfo":{"name":"GetUserPoolInfo","service":"sso-directory","conditionKeys":[],"resources":[],"description":"(Deprecated) Grants permission to get UserPool Info","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-GetUserPoolInfo"},"ImportExternalIdPCertificate":{"name":"ImportExternalIdPCertificate","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to import the IdP certificate used for verifying external IdP responses","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-ImportExternalIdPCertificate"},"IsMemberInGroup":{"name":"IsMemberInGroup","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to check if a member is a part of the group in the directory that AWS IAM Identity Center provides by default","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_IsMemberInGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-IsMemberInGroup"},"IsMemberInGroups":{"name":"IsMemberInGroups","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to check if a member is a part of multiple groups in the directory that AWS IAM Identity Center provides by default","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_IsMemberInGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-IsMemberInGroups"},"ListBearerTokens":{"name":"ListBearerTokens","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to list bearer tokens for a given provisioning tenant","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-ListBearerTokens"},"ListExternalIdPCertificates":{"name":"ListExternalIdPCertificates","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to list the external IdP certificates of a given directory and IdP","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-ListExternalIdPCertificates"},"ListExternalIdPConfigurationsForDirectory":{"name":"ListExternalIdPConfigurationsForDirectory","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to list all the External Identity Provider configurations created for the directory","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-ListExternalIdPConfigurationsForDirectory"},"ListGroups":{"name":"ListGroups","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to list groups from the directory that AWS IAM Identity Center provides by default","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_ListGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-ListGroups"},"ListGroupsForMember":{"name":"ListGroupsForMember","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to list groups of the target member","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_ListGroupMembershipsForMember.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-ListGroupsForMember"},"ListGroupsForUser":{"name":"ListGroupsForUser","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to list groups for a user from the directory that AWS IAM Identity Center provides by default","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_ListGroupMembershipsForMember.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-ListGroupsForUser"},"ListMembersInGroup":{"name":"ListMembersInGroup","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve all members that are part of a group in the directory that AWS IAM Identity Center provides by default","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_ListGroupMemberships.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-ListMembersInGroup"},"ListMfaDevicesForUser":{"name":"ListMfaDevicesForUser","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to list all active MFA devices and their MFA device metadata for a user","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-ListMfaDevicesForUser"},"ListProvisioningTenants":{"name":"ListProvisioningTenants","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to list provisioning tenants for a given directory","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-ListProvisioningTenants"},"ListUsers":{"name":"ListUsers","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to list users from the directory that AWS IAM Identity Center provides by default","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_ListUsers.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-ListUsers"},"RemoveMemberFromGroup":{"name":"RemoveMemberFromGroup","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to remove a member that is part of a group in the directory that AWS IAM Identity Center provides by default","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_DeleteGroupMembership.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-RemoveMemberFromGroup"},"SearchGroups":{"name":"SearchGroups","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to search for groups within the associated directory","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-SearchGroups"},"SearchUsers":{"name":"SearchUsers","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to search for users within the associated directory","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-SearchUsers"},"StartVirtualMfaDeviceRegistration":{"name":"StartVirtualMfaDeviceRegistration","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to begin the creation process of virtual mfa device","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-StartVirtualMfaDeviceRegistration"},"StartWebAuthnDeviceRegistration":{"name":"StartWebAuthnDeviceRegistration","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to begin the registration process of a WebAuthn device","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-StartWebAuthnDeviceRegistration"},"UpdateExternalIdPConfigurationForDirectory":{"name":"UpdateExternalIdPConfigurationForDirectory","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to update an External Identity Provider configuration associated with the directory","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-UpdateExternalIdPConfigurationForDirectory"},"UpdateGroup":{"name":"UpdateGroup","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to update information about a group in the directory that AWS IAM Identity Center provides by default","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_UpdateGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-UpdateGroup"},"UpdateGroupDisplayName":{"name":"UpdateGroupDisplayName","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to update group display name update group display name response","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-UpdateGroupDisplayName"},"UpdateMfaDeviceForUser":{"name":"UpdateMfaDeviceForUser","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to update MFA device information","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-UpdateMfaDeviceForUser"},"UpdatePassword":{"name":"UpdatePassword","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to update a password by sending password reset link via email or generating one time password for a user in the directory that AWS IAM Identity Center provides by default","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-UpdatePassword"},"UpdateUser":{"name":"UpdateUser","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to update user information in the directory that AWS IAM Identity Center provides by default","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_UpdateUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-UpdateUser"},"UpdateUserName":{"name":"UpdateUserName","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to update user name update user name response","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-UpdateUserName"},"VerifyEmail":{"name":"VerifyEmail","service":"sso-directory","conditionKeys":[],"resources":[],"description":"Grants permission to verify an email address of an User","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html#awsiamidentitycenterdirectory-VerifyEmail"}},"resources":[],"conditionKeys":{},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html"}

package/src/data/servicereference/services/sso-oauth.json

@@ -1 +1 @@
-{"name":"sso-oauth","actions":{"CreateTokenWithIAM":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to create and return OAuth 2.0 access tokens and refresh tokens for authorized client applications. These tokens might contain defined scopes that specify permissions such as `read:profile` or `write:data`","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/OIDCAPIReference/API_CreateTokenWithIAM.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenteroidcservice.html#awsiamidentitycenteroidcservice-CreateTokenWithIAM"},"IntrospectTokenWithIAM":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to validate and retrieve information about active OAuth 2.0 access tokens and refresh tokens, including their associated scopes and permissions. This permission is used only by AWS managed applications and is not documented in the IAM Identity Center OIDC API Reference","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-resource-based-policies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenteroidcservice.html#awsiamidentitycenteroidcservice-IntrospectTokenWithIAM"},"RevokeTokenWithIAM":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to revoke OAuth 2.0 access tokens and refresh tokens, invalidating them before their normal expiration. This permission is used only by AWS managed applications and is not documented in the IAM Identity Center OIDC API Reference","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-resource-based-policies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenteroidcservice.html#awsiamidentitycenteroidcservice-RevokeTokenWithIAM"}},"resources":[{"name":"Application","arnFormats":["arn:${Partition}:sso::${AccountId}:application/${InstanceId}/${ApplicationId}"],"conditionKeys":[]}],"conditionKeys":{},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenteroidcservice.html"}
+{"name":"sso-oauth","actions":{"CreateTokenWithIAM":{"name":"CreateTokenWithIAM","service":"sso-oauth","conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to create and return OAuth 2.0 access tokens and refresh tokens for authorized client applications. These tokens might contain defined scopes that specify permissions such as `read:profile` or `write:data`","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"],"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/OIDCAPIReference/API_CreateTokenWithIAM.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenteroidcservice.html#awsiamidentitycenteroidcservice-CreateTokenWithIAM"},"IntrospectTokenWithIAM":{"name":"IntrospectTokenWithIAM","service":"sso-oauth","conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to validate and retrieve information about active OAuth 2.0 access tokens and refresh tokens, including their associated scopes and permissions. This permission is used only by AWS managed applications and is not documented in the IAM Identity Center OIDC API Reference","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-resource-based-policies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenteroidcservice.html#awsiamidentitycenteroidcservice-IntrospectTokenWithIAM"},"RevokeTokenWithIAM":{"name":"RevokeTokenWithIAM","service":"sso-oauth","conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to revoke OAuth 2.0 access tokens and refresh tokens, invalidating them before their normal expiration. This permission is used only by AWS managed applications and is not documented in the IAM Identity Center OIDC API Reference","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-resource-based-policies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenteroidcservice.html#awsiamidentitycenteroidcservice-RevokeTokenWithIAM"}},"resources":[{"name":"Application","arnFormats":["arn:${Partition}:sso::${AccountId}:application/${InstanceId}/${ApplicationId}"],"conditionKeys":[]}],"conditionKeys":{},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenteroidcservice.html"}