aws-iam-ls 0.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.direnv/bin/nix-direnv-reload +19 -0
- package/.direnv/flake-profile-a5d5b61aa8a61b7d9d765e1daf971a9a578f1cfa.rc +2156 -0
- package/.github/workflows/publish.yml +37 -0
- package/.github/workflows/test.yml +16 -0
- package/.vscodeignore +17 -0
- package/LICENSE +21 -0
- package/package.json +53 -0
- package/readme.md +25 -0
- package/src/data/condition-keys/global.json +362 -0
- package/src/data/servicereference/actions.json +1 -0
- package/src/data/servicereference/service-principals.json +1 -0
- package/src/data/servicereference/services/a2c.json +1 -0
- package/src/data/servicereference/services/a4b.json +1 -0
- package/src/data/servicereference/services/access-analyzer.json +1 -0
- package/src/data/servicereference/services/account.json +1 -0
- package/src/data/servicereference/services/acm-pca.json +1 -0
- package/src/data/servicereference/services/acm.json +1 -0
- package/src/data/servicereference/services/aco-automation.json +1 -0
- package/src/data/servicereference/services/action-recommendations.json +1 -0
- package/src/data/servicereference/services/activate.json +1 -0
- package/src/data/servicereference/services/aidevops.json +1 -0
- package/src/data/servicereference/services/aiops.json +1 -0
- package/src/data/servicereference/services/airflow-serverless.json +1 -0
- package/src/data/servicereference/services/airflow.json +1 -0
- package/src/data/servicereference/services/amplify.json +1 -0
- package/src/data/servicereference/services/amplifybackend.json +1 -0
- package/src/data/servicereference/services/amplifyuibuilder.json +1 -0
- package/src/data/servicereference/services/aoss.json +1 -0
- package/src/data/servicereference/services/apigateway.json +1 -0
- package/src/data/servicereference/services/app-integrations.json +1 -0
- package/src/data/servicereference/services/appconfig.json +1 -0
- package/src/data/servicereference/services/appfabric.json +1 -0
- package/src/data/servicereference/services/appflow.json +1 -0
- package/src/data/servicereference/services/application-autoscaling.json +1 -0
- package/src/data/servicereference/services/application-signals.json +1 -0
- package/src/data/servicereference/services/application-transformation.json +1 -0
- package/src/data/servicereference/services/applicationinsights.json +1 -0
- package/src/data/servicereference/services/appmesh-preview.json +1 -0
- package/src/data/servicereference/services/appmesh.json +1 -0
- package/src/data/servicereference/services/apprunner.json +1 -0
- package/src/data/servicereference/services/appstream.json +1 -0
- package/src/data/servicereference/services/appstudio.json +1 -0
- package/src/data/servicereference/services/appsync.json +1 -0
- package/src/data/servicereference/services/apptest.json +1 -0
- package/src/data/servicereference/services/aps.json +1 -0
- package/src/data/servicereference/services/arc-region-switch.json +1 -0
- package/src/data/servicereference/services/arc-zonal-shift.json +1 -0
- package/src/data/servicereference/services/arsenal.json +1 -0
- package/src/data/servicereference/services/artifact.json +1 -0
- package/src/data/servicereference/services/athena.json +1 -0
- package/src/data/servicereference/services/auditmanager.json +1 -0
- package/src/data/servicereference/services/autoscaling-plans.json +1 -0
- package/src/data/servicereference/services/autoscaling.json +1 -0
- package/src/data/servicereference/services/aws-marketplace-management.json +1 -0
- package/src/data/servicereference/services/aws-marketplace.json +1 -0
- package/src/data/servicereference/services/aws-mcp.json +1 -0
- package/src/data/servicereference/services/aws-portal.json +1 -0
- package/src/data/servicereference/services/awsconnector.json +1 -0
- package/src/data/servicereference/services/b2bi.json +1 -0
- package/src/data/servicereference/services/backup-gateway.json +1 -0
- package/src/data/servicereference/services/backup-search.json +1 -0
- package/src/data/servicereference/services/backup-storage.json +1 -0
- package/src/data/servicereference/services/backup.json +1 -0
- package/src/data/servicereference/services/batch.json +1 -0
- package/src/data/servicereference/services/bcm-dashboards.json +1 -0
- package/src/data/servicereference/services/bcm-data-exports.json +1 -0
- package/src/data/servicereference/services/bcm-pricing-calculator.json +1 -0
- package/src/data/servicereference/services/bcm-recommended-actions.json +1 -0
- package/src/data/servicereference/services/bedrock-agentcore.json +1 -0
- package/src/data/servicereference/services/bedrock-mantle.json +1 -0
- package/src/data/servicereference/services/bedrock.json +1 -0
- package/src/data/servicereference/services/billing.json +1 -0
- package/src/data/servicereference/services/billingconductor.json +1 -0
- package/src/data/servicereference/services/braket.json +1 -0
- package/src/data/servicereference/services/budgets.json +1 -0
- package/src/data/servicereference/services/bugbust.json +1 -0
- package/src/data/servicereference/services/cases.json +1 -0
- package/src/data/servicereference/services/cassandra.json +1 -0
- package/src/data/servicereference/services/ce.json +1 -0
- package/src/data/servicereference/services/chatbot.json +1 -0
- package/src/data/servicereference/services/chime.json +1 -0
- package/src/data/servicereference/services/cleanrooms-ml.json +1 -0
- package/src/data/servicereference/services/cleanrooms.json +1 -0
- package/src/data/servicereference/services/cloud9.json +1 -0
- package/src/data/servicereference/services/clouddirectory.json +1 -0
- package/src/data/servicereference/services/cloudformation.json +1 -0
- package/src/data/servicereference/services/cloudfront-keyvaluestore.json +1 -0
- package/src/data/servicereference/services/cloudfront.json +1 -0
- package/src/data/servicereference/services/cloudhsm.json +1 -0
- package/src/data/servicereference/services/cloudsearch.json +1 -0
- package/src/data/servicereference/services/cloudshell.json +1 -0
- package/src/data/servicereference/services/cloudtrail-data.json +1 -0
- package/src/data/servicereference/services/cloudtrail.json +1 -0
- package/src/data/servicereference/services/cloudwatch.json +1 -0
- package/src/data/servicereference/services/codeartifact.json +1 -0
- package/src/data/servicereference/services/codebuild.json +1 -0
- package/src/data/servicereference/services/codecatalyst.json +1 -0
- package/src/data/servicereference/services/codecommit.json +1 -0
- package/src/data/servicereference/services/codeconnections.json +1 -0
- package/src/data/servicereference/services/codedeploy-commands-secure.json +1 -0
- package/src/data/servicereference/services/codedeploy.json +1 -0
- package/src/data/servicereference/services/codeguru-profiler.json +1 -0
- package/src/data/servicereference/services/codeguru-reviewer.json +1 -0
- package/src/data/servicereference/services/codeguru-security.json +1 -0
- package/src/data/servicereference/services/codeguru.json +1 -0
- package/src/data/servicereference/services/codepipeline.json +1 -0
- package/src/data/servicereference/services/codestar-connections.json +1 -0
- package/src/data/servicereference/services/codestar-notifications.json +1 -0
- package/src/data/servicereference/services/codestar.json +1 -0
- package/src/data/servicereference/services/codewhisperer.json +1 -0
- package/src/data/servicereference/services/cognito-identity.json +1 -0
- package/src/data/servicereference/services/cognito-idp.json +1 -0
- package/src/data/servicereference/services/cognito-sync.json +1 -0
- package/src/data/servicereference/services/comprehend.json +1 -0
- package/src/data/servicereference/services/comprehendmedical.json +1 -0
- package/src/data/servicereference/services/compute-optimizer.json +1 -0
- package/src/data/servicereference/services/config.json +1 -0
- package/src/data/servicereference/services/connect-campaigns.json +1 -0
- package/src/data/servicereference/services/connect.json +1 -0
- package/src/data/servicereference/services/consoleapp.json +1 -0
- package/src/data/servicereference/services/consolidatedbilling.json +1 -0
- package/src/data/servicereference/services/controlcatalog.json +1 -0
- package/src/data/servicereference/services/controltower.json +1 -0
- package/src/data/servicereference/services/cost-optimization-hub.json +1 -0
- package/src/data/servicereference/services/cur.json +1 -0
- package/src/data/servicereference/services/customer-verification.json +1 -0
- package/src/data/servicereference/services/databrew.json +1 -0
- package/src/data/servicereference/services/dataexchange.json +1 -0
- package/src/data/servicereference/services/datapipeline.json +1 -0
- package/src/data/servicereference/services/datasync.json +1 -0
- package/src/data/servicereference/services/datazone.json +1 -0
- package/src/data/servicereference/services/dax.json +1 -0
- package/src/data/servicereference/services/dbqms.json +1 -0
- package/src/data/servicereference/services/deadline.json +1 -0
- package/src/data/servicereference/services/detective.json +1 -0
- package/src/data/servicereference/services/devicefarm.json +1 -0
- package/src/data/servicereference/services/devops-guru.json +1 -0
- package/src/data/servicereference/services/directconnect.json +1 -0
- package/src/data/servicereference/services/discovery.json +1 -0
- package/src/data/servicereference/services/dlm.json +1 -0
- package/src/data/servicereference/services/dms.json +1 -0
- package/src/data/servicereference/services/docdb-elastic.json +1 -0
- package/src/data/servicereference/services/drs.json +1 -0
- package/src/data/servicereference/services/ds-data.json +1 -0
- package/src/data/servicereference/services/ds.json +1 -0
- package/src/data/servicereference/services/dsql.json +1 -0
- package/src/data/servicereference/services/dynamodb.json +1 -0
- package/src/data/servicereference/services/ebs.json +1 -0
- package/src/data/servicereference/services/ec2-instance-connect.json +1 -0
- package/src/data/servicereference/services/ec2.json +1 -0
- package/src/data/servicereference/services/ec2messages.json +1 -0
- package/src/data/servicereference/services/ecr-public.json +1 -0
- package/src/data/servicereference/services/ecr.json +1 -0
- package/src/data/servicereference/services/ecs-mcp.json +1 -0
- package/src/data/servicereference/services/ecs.json +1 -0
- package/src/data/servicereference/services/eks-auth.json +1 -0
- package/src/data/servicereference/services/eks-mcp.json +1 -0
- package/src/data/servicereference/services/eks.json +1 -0
- package/src/data/servicereference/services/elasticache.json +1 -0
- package/src/data/servicereference/services/elasticbeanstalk.json +1 -0
- package/src/data/servicereference/services/elasticfilesystem.json +1 -0
- package/src/data/servicereference/services/elasticloadbalancing.json +1 -0
- package/src/data/servicereference/services/elasticmapreduce.json +1 -0
- package/src/data/servicereference/services/elastictranscoder.json +1 -0
- package/src/data/servicereference/services/elemental-activations.json +1 -0
- package/src/data/servicereference/services/elemental-appliances-software.json +1 -0
- package/src/data/servicereference/services/elemental-inference.json +1 -0
- package/src/data/servicereference/services/elemental-support-cases.json +1 -0
- package/src/data/servicereference/services/elemental-support-content.json +1 -0
- package/src/data/servicereference/services/emr-containers.json +1 -0
- package/src/data/servicereference/services/emr-serverless.json +1 -0
- package/src/data/servicereference/services/entityresolution.json +1 -0
- package/src/data/servicereference/services/es.json +1 -0
- package/src/data/servicereference/services/events.json +1 -0
- package/src/data/servicereference/services/evidently.json +1 -0
- package/src/data/servicereference/services/evs.json +1 -0
- package/src/data/servicereference/services/execute-api.json +1 -0
- package/src/data/servicereference/services/finspace-api.json +1 -0
- package/src/data/servicereference/services/finspace.json +1 -0
- package/src/data/servicereference/services/firehose.json +1 -0
- package/src/data/servicereference/services/fis.json +1 -0
- package/src/data/servicereference/services/fms.json +1 -0
- package/src/data/servicereference/services/forecast.json +1 -0
- package/src/data/servicereference/services/frauddetector.json +1 -0
- package/src/data/servicereference/services/freertos.json +1 -0
- package/src/data/servicereference/services/freetier.json +1 -0
- package/src/data/servicereference/services/fsx.json +1 -0
- package/src/data/servicereference/services/gamelift.json +1 -0
- package/src/data/servicereference/services/gameliftstreams.json +1 -0
- package/src/data/servicereference/services/geo-maps.json +1 -0
- package/src/data/servicereference/services/geo-places.json +1 -0
- package/src/data/servicereference/services/geo-routes.json +1 -0
- package/src/data/servicereference/services/geo.json +1 -0
- package/src/data/servicereference/services/glacier.json +1 -0
- package/src/data/servicereference/services/globalaccelerator.json +1 -0
- package/src/data/servicereference/services/glue.json +1 -0
- package/src/data/servicereference/services/grafana.json +1 -0
- package/src/data/servicereference/services/greengrass.json +1 -0
- package/src/data/servicereference/services/groundstation.json +1 -0
- package/src/data/servicereference/services/groundtruthlabeling.json +1 -0
- package/src/data/servicereference/services/guardduty.json +1 -0
- package/src/data/servicereference/services/health-agent.json +1 -0
- package/src/data/servicereference/services/health.json +1 -0
- package/src/data/servicereference/services/healthlake.json +1 -0
- package/src/data/servicereference/services/honeycode.json +1 -0
- package/src/data/servicereference/services/iam.json +1 -0
- package/src/data/servicereference/services/identity-sync.json +1 -0
- package/src/data/servicereference/services/identitystore-auth.json +1 -0
- package/src/data/servicereference/services/identitystore.json +1 -0
- package/src/data/servicereference/services/imagebuilder.json +1 -0
- package/src/data/servicereference/services/importexport.json +1 -0
- package/src/data/servicereference/services/inspector-scan.json +1 -0
- package/src/data/servicereference/services/inspector.json +1 -0
- package/src/data/servicereference/services/inspector2-telemetry.json +1 -0
- package/src/data/servicereference/services/inspector2.json +1 -0
- package/src/data/servicereference/services/interconnect.json +1 -0
- package/src/data/servicereference/services/internetmonitor.json +1 -0
- package/src/data/servicereference/services/invoicing.json +1 -0
- package/src/data/servicereference/services/iot-device-tester.json +1 -0
- package/src/data/servicereference/services/iot.json +1 -0
- package/src/data/servicereference/services/iotanalytics.json +1 -0
- package/src/data/servicereference/services/iotdeviceadvisor.json +1 -0
- package/src/data/servicereference/services/iotevents.json +1 -0
- package/src/data/servicereference/services/iotfleethub.json +1 -0
- package/src/data/servicereference/services/iotfleetwise.json +1 -0
- package/src/data/servicereference/services/iotjobsdata.json +1 -0
- package/src/data/servicereference/services/iotmanagedintegrations.json +1 -0
- package/src/data/servicereference/services/iotsitewise.json +1 -0
- package/src/data/servicereference/services/iottwinmaker.json +1 -0
- package/src/data/servicereference/services/iotwireless.json +1 -0
- package/src/data/servicereference/services/iq-permission.json +1 -0
- package/src/data/servicereference/services/iq.json +1 -0
- package/src/data/servicereference/services/ivs.json +1 -0
- package/src/data/servicereference/services/ivschat.json +1 -0
- package/src/data/servicereference/services/kafka-cluster.json +1 -0
- package/src/data/servicereference/services/kafka.json +1 -0
- package/src/data/servicereference/services/kafkaconnect.json +1 -0
- package/src/data/servicereference/services/kendra-ranking.json +1 -0
- package/src/data/servicereference/services/kendra.json +1 -0
- package/src/data/servicereference/services/kinesis.json +1 -0
- package/src/data/servicereference/services/kinesisanalytics.json +1 -0
- package/src/data/servicereference/services/kinesisvideo.json +1 -0
- package/src/data/servicereference/services/kms.json +1 -0
- package/src/data/servicereference/services/lakeformation.json +1 -0
- package/src/data/servicereference/services/lambda.json +1 -0
- package/src/data/servicereference/services/launchwizard.json +1 -0
- package/src/data/servicereference/services/lex.json +1 -0
- package/src/data/servicereference/services/license-manager-linux-subscriptions.json +1 -0
- package/src/data/servicereference/services/license-manager-user-subscriptions.json +1 -0
- package/src/data/servicereference/services/license-manager.json +1 -0
- package/src/data/servicereference/services/lightsail.json +1 -0
- package/src/data/servicereference/services/logs.json +1 -0
- package/src/data/servicereference/services/lookoutequipment.json +1 -0
- package/src/data/servicereference/services/lookoutmetrics.json +1 -0
- package/src/data/servicereference/services/lookoutvision.json +1 -0
- package/src/data/servicereference/services/m2.json +1 -0
- package/src/data/servicereference/services/machinelearning.json +1 -0
- package/src/data/servicereference/services/macie2.json +1 -0
- package/src/data/servicereference/services/managedblockchain-query.json +1 -0
- package/src/data/servicereference/services/managedblockchain.json +1 -0
- package/src/data/servicereference/services/mapcredits.json +1 -0
- package/src/data/servicereference/services/marketplacecommerceanalytics.json +1 -0
- package/src/data/servicereference/services/mechanicalturk.json +1 -0
- package/src/data/servicereference/services/mediaconnect.json +1 -0
- package/src/data/servicereference/services/mediaconvert.json +1 -0
- package/src/data/servicereference/services/mediaimport.json +1 -0
- package/src/data/servicereference/services/medialive.json +1 -0
- package/src/data/servicereference/services/mediapackage-vod.json +1 -0
- package/src/data/servicereference/services/mediapackage.json +1 -0
- package/src/data/servicereference/services/mediapackagev2.json +1 -0
- package/src/data/servicereference/services/mediastore.json +1 -0
- package/src/data/servicereference/services/mediatailor.json +1 -0
- package/src/data/servicereference/services/medical-imaging.json +1 -0
- package/src/data/servicereference/services/memorydb.json +1 -0
- package/src/data/servicereference/services/mgh.json +1 -0
- package/src/data/servicereference/services/mgn.json +1 -0
- package/src/data/servicereference/services/migrationhub-orchestrator.json +1 -0
- package/src/data/servicereference/services/migrationhub-strategy.json +1 -0
- package/src/data/servicereference/services/mobileanalytics.json +1 -0
- package/src/data/servicereference/services/mobiletargeting.json +1 -0
- package/src/data/servicereference/services/monitron.json +1 -0
- package/src/data/servicereference/services/mpa.json +1 -0
- package/src/data/servicereference/services/mq.json +1 -0
- package/src/data/servicereference/services/neptune-db.json +1 -0
- package/src/data/servicereference/services/neptune-graph.json +1 -0
- package/src/data/servicereference/services/network-firewall.json +1 -0
- package/src/data/servicereference/services/network-security-director.json +1 -0
- package/src/data/servicereference/services/networkflowmonitor.json +1 -0
- package/src/data/servicereference/services/networkmanager-chat.json +1 -0
- package/src/data/servicereference/services/networkmanager.json +1 -0
- package/src/data/servicereference/services/networkmonitor.json +1 -0
- package/src/data/servicereference/services/nimble.json +1 -0
- package/src/data/servicereference/services/notifications-contacts.json +1 -0
- package/src/data/servicereference/services/notifications.json +1 -0
- package/src/data/servicereference/services/nova-act.json +1 -0
- package/src/data/servicereference/services/oam.json +1 -0
- package/src/data/servicereference/services/observabilityadmin.json +1 -0
- package/src/data/servicereference/services/odb.json +1 -0
- package/src/data/servicereference/services/omics.json +1 -0
- package/src/data/servicereference/services/one.json +1 -0
- package/src/data/servicereference/services/opensearch.json +1 -0
- package/src/data/servicereference/services/opsworks-cm.json +1 -0
- package/src/data/servicereference/services/opsworks.json +1 -0
- package/src/data/servicereference/services/organizations.json +1 -0
- package/src/data/servicereference/services/osis.json +1 -0
- package/src/data/servicereference/services/outposts.json +1 -0
- package/src/data/servicereference/services/panorama.json +1 -0
- package/src/data/servicereference/services/partnercentral-account-management.json +1 -0
- package/src/data/servicereference/services/partnercentral.json +1 -0
- package/src/data/servicereference/services/payment-cryptography.json +1 -0
- package/src/data/servicereference/services/payments.json +1 -0
- package/src/data/servicereference/services/pca-connector-ad.json +1 -0
- package/src/data/servicereference/services/pca-connector-scep.json +1 -0
- package/src/data/servicereference/services/pcs.json +1 -0
- package/src/data/servicereference/services/personalize.json +1 -0
- package/src/data/servicereference/services/pi.json +1 -0
- package/src/data/servicereference/services/pipes.json +1 -0
- package/src/data/servicereference/services/polly.json +1 -0
- package/src/data/servicereference/services/pricing.json +1 -0
- package/src/data/servicereference/services/pricingplanmanager.json +1 -0
- package/src/data/servicereference/services/private-networks.json +1 -0
- package/src/data/servicereference/services/profile.json +1 -0
- package/src/data/servicereference/services/proton.json +1 -0
- package/src/data/servicereference/services/purchase-orders.json +1 -0
- package/src/data/servicereference/services/q.json +1 -0
- package/src/data/servicereference/services/qapps.json +1 -0
- package/src/data/servicereference/services/qbusiness.json +1 -0
- package/src/data/servicereference/services/qdeveloper.json +1 -0
- package/src/data/servicereference/services/qldb.json +1 -0
- package/src/data/servicereference/services/quicksight.json +1 -0
- package/src/data/servicereference/services/ram.json +1 -0
- package/src/data/servicereference/services/rbin.json +1 -0
- package/src/data/servicereference/services/rds-data.json +1 -0
- package/src/data/servicereference/services/rds-db.json +1 -0
- package/src/data/servicereference/services/rds.json +1 -0
- package/src/data/servicereference/services/redshift-data.json +1 -0
- package/src/data/servicereference/services/redshift-serverless.json +1 -0
- package/src/data/servicereference/services/redshift.json +1 -0
- package/src/data/servicereference/services/refactor-spaces.json +1 -0
- package/src/data/servicereference/services/rekognition.json +1 -0
- package/src/data/servicereference/services/repostspace.json +1 -0
- package/src/data/servicereference/services/resiliencehub.json +1 -0
- package/src/data/servicereference/services/resource-explorer-2.json +1 -0
- package/src/data/servicereference/services/resource-explorer.json +1 -0
- package/src/data/servicereference/services/resource-groups.json +1 -0
- package/src/data/servicereference/services/rhelkb.json +1 -0
- package/src/data/servicereference/services/robomaker.json +1 -0
- package/src/data/servicereference/services/rolesanywhere.json +1 -0
- package/src/data/servicereference/services/route53-recovery-cluster.json +1 -0
- package/src/data/servicereference/services/route53-recovery-control-config.json +1 -0
- package/src/data/servicereference/services/route53-recovery-readiness.json +1 -0
- package/src/data/servicereference/services/route53.json +1 -0
- package/src/data/servicereference/services/route53domains.json +1 -0
- package/src/data/servicereference/services/route53globalresolver.json +1 -0
- package/src/data/servicereference/services/route53profiles.json +1 -0
- package/src/data/servicereference/services/route53resolver.json +1 -0
- package/src/data/servicereference/services/rtbfabric.json +1 -0
- package/src/data/servicereference/services/rum.json +1 -0
- package/src/data/servicereference/services/s3-object-lambda.json +1 -0
- package/src/data/servicereference/services/s3-outposts.json +1 -0
- package/src/data/servicereference/services/s3.json +1 -0
- package/src/data/servicereference/services/s3express.json +1 -0
- package/src/data/servicereference/services/s3tables.json +1 -0
- package/src/data/servicereference/services/s3vectors.json +1 -0
- package/src/data/servicereference/services/sagemaker-data-science-assistant.json +1 -0
- package/src/data/servicereference/services/sagemaker-geospatial.json +1 -0
- package/src/data/servicereference/services/sagemaker-mlflow.json +1 -0
- package/src/data/servicereference/services/sagemaker-unified-studio-mcp.json +1 -0
- package/src/data/servicereference/services/sagemaker.json +1 -0
- package/src/data/servicereference/services/savingsplans.json +1 -0
- package/src/data/servicereference/services/scheduler.json +1 -0
- package/src/data/servicereference/services/schemas.json +1 -0
- package/src/data/servicereference/services/scn.json +1 -0
- package/src/data/servicereference/services/sdb.json +1 -0
- package/src/data/servicereference/services/secretsmanager.json +1 -0
- package/src/data/servicereference/services/security-ir.json +1 -0
- package/src/data/servicereference/services/securityagent.json +1 -0
- package/src/data/servicereference/services/securityhub.json +1 -0
- package/src/data/servicereference/services/securitylake.json +1 -0
- package/src/data/servicereference/services/serverlessrepo.json +1 -0
- package/src/data/servicereference/services/servicecatalog.json +1 -0
- package/src/data/servicereference/services/servicediscovery.json +1 -0
- package/src/data/servicereference/services/serviceextract.json +1 -0
- package/src/data/servicereference/services/servicequotas.json +1 -0
- package/src/data/servicereference/services/ses.json +1 -0
- package/src/data/servicereference/services/shield.json +1 -0
- package/src/data/servicereference/services/signer.json +1 -0
- package/src/data/servicereference/services/signin.json +1 -0
- package/src/data/servicereference/services/simspaceweaver.json +1 -0
- package/src/data/servicereference/services/sms-voice.json +1 -0
- package/src/data/servicereference/services/sms.json +1 -0
- package/src/data/servicereference/services/snow-device-management.json +1 -0
- package/src/data/servicereference/services/snowball.json +1 -0
- package/src/data/servicereference/services/sns.json +1 -0
- package/src/data/servicereference/services/social-messaging.json +1 -0
- package/src/data/servicereference/services/sqlworkbench.json +1 -0
- package/src/data/servicereference/services/sqs.json +1 -0
- package/src/data/servicereference/services/ssm-contacts.json +1 -0
- package/src/data/servicereference/services/ssm-guiconnect.json +1 -0
- package/src/data/servicereference/services/ssm-incidents.json +1 -0
- package/src/data/servicereference/services/ssm-quicksetup.json +1 -0
- package/src/data/servicereference/services/ssm-sap.json +1 -0
- package/src/data/servicereference/services/ssm.json +1 -0
- package/src/data/servicereference/services/ssmmessages.json +1 -0
- package/src/data/servicereference/services/sso-directory.json +1 -0
- package/src/data/servicereference/services/sso-oauth.json +1 -0
- package/src/data/servicereference/services/sso.json +1 -0
- package/src/data/servicereference/services/states.json +1 -0
- package/src/data/servicereference/services/storagegateway.json +1 -0
- package/src/data/servicereference/services/sts.json +1 -0
- package/src/data/servicereference/services/support-console.json +1 -0
- package/src/data/servicereference/services/support.json +1 -0
- package/src/data/servicereference/services/supportapp.json +1 -0
- package/src/data/servicereference/services/supportplans.json +1 -0
- package/src/data/servicereference/services/sustainability.json +1 -0
- package/src/data/servicereference/services/swf.json +1 -0
- package/src/data/servicereference/services/synthetics.json +1 -0
- package/src/data/servicereference/services/tag.json +1 -0
- package/src/data/servicereference/services/tax.json +1 -0
- package/src/data/servicereference/services/textract.json +1 -0
- package/src/data/servicereference/services/thinclient.json +1 -0
- package/src/data/servicereference/services/timestream-influxdb.json +1 -0
- package/src/data/servicereference/services/timestream.json +1 -0
- package/src/data/servicereference/services/tiros.json +1 -0
- package/src/data/servicereference/services/tnb.json +1 -0
- package/src/data/servicereference/services/transcribe.json +1 -0
- package/src/data/servicereference/services/transfer.json +1 -0
- package/src/data/servicereference/services/transform-custom.json +1 -0
- package/src/data/servicereference/services/transform.json +1 -0
- package/src/data/servicereference/services/translate.json +1 -0
- package/src/data/servicereference/services/trustedadvisor.json +1 -0
- package/src/data/servicereference/services/ts.json +1 -0
- package/src/data/servicereference/services/user-subscriptions.json +1 -0
- package/src/data/servicereference/services/uxc.json +1 -0
- package/src/data/servicereference/services/vendor-insights.json +1 -0
- package/src/data/servicereference/services/verified-access.json +1 -0
- package/src/data/servicereference/services/verifiedpermissions.json +1 -0
- package/src/data/servicereference/services/voiceid.json +1 -0
- package/src/data/servicereference/services/vpc-lattice-svcs.json +1 -0
- package/src/data/servicereference/services/vpc-lattice.json +1 -0
- package/src/data/servicereference/services/vpce.json +1 -0
- package/src/data/servicereference/services/waf-regional.json +1 -0
- package/src/data/servicereference/services/waf.json +1 -0
- package/src/data/servicereference/services/wafv2.json +1 -0
- package/src/data/servicereference/services/wam.json +1 -0
- package/src/data/servicereference/services/wellarchitected.json +1 -0
- package/src/data/servicereference/services/wickr.json +1 -0
- package/src/data/servicereference/services/wisdom.json +1 -0
- package/src/data/servicereference/services/workdocs.json +1 -0
- package/src/data/servicereference/services/worklink.json +1 -0
- package/src/data/servicereference/services/workmail.json +1 -0
- package/src/data/servicereference/services/workmailmessageflow.json +1 -0
- package/src/data/servicereference/services/workspaces-instances.json +1 -0
- package/src/data/servicereference/services/workspaces-web.json +1 -0
- package/src/data/servicereference/services/workspaces.json +1 -0
- package/src/data/servicereference/services/xray.json +1 -0
- package/src/data/servicereference/services.json +1 -0
- package/src/extension.d.ts +3 -0
- package/src/extension.js +23 -0
- package/src/grammars/tree-sitter-hcl.wasm +0 -0
- package/src/grammars/tree-sitter-json.wasm +0 -0
- package/src/grammars/tree-sitter-yaml.wasm +0 -0
- package/src/handlers/completion/action-value.d.ts +4 -0
- package/src/handlers/completion/action-value.js +46 -0
- package/src/handlers/completion/condition-block.d.ts +4 -0
- package/src/handlers/completion/condition-block.js +31 -0
- package/src/handlers/completion/condition-key.d.ts +4 -0
- package/src/handlers/completion/condition-key.js +80 -0
- package/src/handlers/completion/condition-operator.d.ts +4 -0
- package/src/handlers/completion/condition-operator.js +22 -0
- package/src/handlers/completion/effect-value.d.ts +4 -0
- package/src/handlers/completion/effect-value.js +14 -0
- package/src/handlers/completion/index.d.ts +14 -0
- package/src/handlers/completion/index.js +96 -0
- package/src/handlers/completion/principal-block-identifier.d.ts +4 -0
- package/src/handlers/completion/principal-block-identifier.js +4 -0
- package/src/handlers/completion/principal-block-type.d.ts +4 -0
- package/src/handlers/completion/principal-block-type.js +24 -0
- package/src/handlers/completion/principal-block.d.ts +4 -0
- package/src/handlers/completion/principal-block.js +28 -0
- package/src/handlers/completion/principal-identifier-completions.d.ts +2 -0
- package/src/handlers/completion/principal-identifier-completions.js +131 -0
- package/src/handlers/completion/principal-type.d.ts +4 -0
- package/src/handlers/completion/principal-type.js +23 -0
- package/src/handlers/completion/principal-typed-value.d.ts +4 -0
- package/src/handlers/completion/principal-typed-value.js +4 -0
- package/src/handlers/completion/principal-value.d.ts +4 -0
- package/src/handlers/completion/principal-value.js +18 -0
- package/src/handlers/completion/resource-value.d.ts +4 -0
- package/src/handlers/completion/resource-value.js +144 -0
- package/src/handlers/completion/statement-block.d.ts +10 -0
- package/src/handlers/completion/statement-block.js +51 -0
- package/src/handlers/completion/statement-key.d.ts +4 -0
- package/src/handlers/completion/statement-key.js +41 -0
- package/src/lib/iam-policy/condition-operators.d.ts +317 -0
- package/src/lib/iam-policy/condition-operators.js +129 -0
- package/src/lib/iam-policy/location.d.ts +71 -0
- package/src/lib/iam-policy/location.js +82 -0
- package/src/lib/iam-policy/partitions.d.ts +116 -0
- package/src/lib/iam-policy/partitions.js +51 -0
- package/src/lib/iam-policy/principals.d.ts +21 -0
- package/src/lib/iam-policy/principals.js +37 -0
- package/src/lib/iam-policy/reference/services.d.ts +22 -0
- package/src/lib/iam-policy/reference/services.js +99 -0
- package/src/lib/iam-policy/reference/types.d.ts +71 -0
- package/src/lib/iam-policy/reference/types.js +1 -0
- package/src/lib/iam-policy/statement-keys.d.ts +8 -0
- package/src/lib/iam-policy/statement-keys.js +159 -0
- package/src/lib/iam-policy/wildcard.d.ts +2 -0
- package/src/lib/iam-policy/wildcard.js +14 -0
- package/src/lib/treesitter/base.d.ts +35 -0
- package/src/lib/treesitter/base.js +50 -0
- package/src/lib/treesitter/hcl.d.ts +9 -0
- package/src/lib/treesitter/hcl.js +888 -0
- package/src/lib/treesitter/json.d.ts +9 -0
- package/src/lib/treesitter/json.js +376 -0
- package/src/lib/treesitter/manager.d.ts +9 -0
- package/src/lib/treesitter/manager.js +66 -0
- package/src/lib/treesitter/yaml.d.ts +9 -0
- package/src/lib/treesitter/yaml.js +878 -0
- package/src/server.d.ts +2 -0
- package/src/server.js +26 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"codebuild","actions":{"BatchDeleteBuilds":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to delete one or more builds","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"BatchGetBuildBatches":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to get information about one or more build batches","accessLevel":"Read","resourceTypes":[{"name":"project","required":true}]},"BatchGetBuilds":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to get information about one or more builds","accessLevel":"Read","resourceTypes":[{"name":"project","required":true}]},"BatchGetCommandExecutions":{"conditionKeys":[],"resources":[{"name":"sandbox"}],"description":"Grants permission to get information about one or more command executions","accessLevel":"Read","resourceTypes":[{"name":"sandbox","required":true}]},"BatchGetFleets":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to return an array of the Fleet objects specified by the input parameter","accessLevel":"Read","resourceTypes":[{"name":"fleet","required":true}]},"BatchGetProjects":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to get information about one or more build projects","accessLevel":"Read","resourceTypes":[{"name":"project","required":true}]},"BatchGetReportGroups":{"conditionKeys":[],"resources":[{"name":"report-group"}],"description":"Grants permission to return an array of ReportGroup objects that are specified by the input reportGroupArns parameter","accessLevel":"Read","resourceTypes":[{"name":"report-group","required":true}]},"BatchGetReports":{"conditionKeys":[],"resources":[{"name":"report-group"}],"description":"Grants permission to return an array of the Report objects specified by the input reportArns parameter","accessLevel":"Read","resourceTypes":[{"name":"report-group","required":true}]},"BatchGetSandboxes":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to get information about one or more sandboxes","accessLevel":"Read","resourceTypes":[{"name":"project","required":true}]},"BatchPutCodeCoverages":{"conditionKeys":[],"resources":[{"name":"report-group"}],"description":"Grants permission to add or update information about a report","accessLevel":"Write","resourceTypes":[{"name":"report-group","required":true}],"permissionOnly":true},"BatchPutTestCases":{"conditionKeys":[],"resources":[{"name":"report-group"}],"description":"Grants permission to add or update information about a report","accessLevel":"Write","resourceTypes":[{"name":"report-group","required":true}],"permissionOnly":true},"CreateFleet":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","codebuild:computeConfiguration","codebuild:computeConfiguration.disk","codebuild:computeConfiguration.instanceType","codebuild:computeConfiguration.machineType","codebuild:computeConfiguration.memory","codebuild:computeConfiguration.vCpu","codebuild:computeType","codebuild:environmentType","codebuild:fleetServiceRole","codebuild:imageId","codebuild:vpcConfig","codebuild:vpcConfig.securityGroupIds","codebuild:vpcConfig.subnets","codebuild:vpcConfig.vpcId"],"resources":[{"name":"fleet"}],"description":"Grants permission to create a compute fleet","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true}]},"CreateProject":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","codebuild:artifacts","codebuild:artifacts.bucketOwnerAccess","codebuild:artifacts.encryptionDisabled","codebuild:artifacts.location","codebuild:autoRetryLimit","codebuild:buildBatchConfig","codebuild:buildBatchConfig.restrictions.computeTypesAllowed","codebuild:buildBatchConfig.restrictions.fleetsAllowed","codebuild:buildBatchConfig.serviceRole","codebuild:cache","codebuild:cache.location","codebuild:cache.modes","codebuild:cache.type","codebuild:concurrentBuildLimit","codebuild:encryptionKey","codebuild:environment","codebuild:environment.certificate","codebuild:environment.computeConfiguration","codebuild:environment.computeConfiguration.disk","codebuild:environment.computeConfiguration.instanceType","codebuild:environment.computeConfiguration.machineType","codebuild:environment.computeConfiguration.memory","codebuild:environment.computeConfiguration.vCpu","codebuild:environment.computeType","codebuild:environment.environmentVariables","codebuild:environment.environmentVariables.name","codebuild:environment.environmentVariables.value","codebuild:environment.environmentVariables/${name}.value","codebuild:environment.fleet.fleetArn","codebuild:environment.image","codebuild:environment.imagePullCredentialsType","codebuild:environment.privilegedMode","codebuild:environment.registryCredential","codebuild:environment.registryCredential.credential","codebuild:environment.registryCredential.credentialProvider","codebuild:environment.type","codebuild:fileSystemLocations.identifier","codebuild:fileSystemLocations.location","codebuild:fileSystemLocations.type","codebuild:fileSystemLocations/${identifier}.location","codebuild:fileSystemLocations/${identifier}.type","codebuild:logsConfig","codebuild:logsConfig.s3Logs","codebuild:logsConfig.s3Logs.bucketOwnerAccess","codebuild:logsConfig.s3Logs.encryptionDisabled","codebuild:logsConfig.s3Logs.location","codebuild:logsConfig.s3Logs.status","codebuild:secondaryArtifacts","codebuild:secondaryArtifacts.artifactIdentifier","codebuild:secondaryArtifacts.bucketOwnerAccess","codebuild:secondaryArtifacts.encryptionDisabled","codebuild:secondaryArtifacts.location","codebuild:secondaryArtifacts/${artifactIdentifier}.bucketOwnerAccess","codebuild:secondaryArtifacts/${artifactIdentifier}.encryptionDisabled","codebuild:secondaryArtifacts/${artifactIdentifier}.location","codebuild:secondarySources","codebuild:secondarySources.auth.resource","codebuild:secondarySources.auth.type","codebuild:secondarySources.buildStatusConfig.context","codebuild:secondarySources.buildStatusConfig.targetUrl","codebuild:secondarySources.buildspec","codebuild:secondarySources.insecureSsl","codebuild:secondarySources.location","codebuild:secondarySources.sourceIdentifier","codebuild:secondarySources/${sourceIdentifier}.auth.resource","codebuild:secondarySources/${sourceIdentifier}.auth.type","codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.context","codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.targetUrl","codebuild:secondarySources/${sourceIdentifier}.buildspec","codebuild:secondarySources/${sourceIdentifier}.insecureSsl","codebuild:secondarySources/${sourceIdentifier}.location","codebuild:serviceRole","codebuild:source","codebuild:source.auth.resource","codebuild:source.auth.type","codebuild:source.buildStatusConfig.context","codebuild:source.buildStatusConfig.targetUrl","codebuild:source.buildspec","codebuild:source.insecureSsl","codebuild:source.location","codebuild:vpcConfig","codebuild:vpcConfig.securityGroupIds","codebuild:vpcConfig.subnets","codebuild:vpcConfig.vpcId"],"resources":[{"name":"project"}],"description":"Grants permission to create a build project","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"CreateReport":{"conditionKeys":[],"resources":[{"name":"report-group"}],"description":"Grants permission to create a report. A report is created when tests specified in the buildspec file for a report groups run during the build of a project","accessLevel":"Write","resourceTypes":[{"name":"report-group","required":true}],"permissionOnly":true},"CreateReportGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","codebuild:exportConfig.s3Destination.bucket","codebuild:exportConfig.s3Destination.bucketOwner","codebuild:exportConfig.s3Destination.encryptionDisabled","codebuild:exportConfig.s3Destination.encryptionKey","codebuild:exportConfig.s3Destination.path"],"resources":[{"name":"report-group"}],"description":"Grants permission to create a report group","accessLevel":"Write","resourceTypes":[{"name":"report-group","required":true}]},"CreateWebhook":{"conditionKeys":["codebuild:buildType","codebuild:manualCreation","codebuild:scopeConfiguration.domain","codebuild:scopeConfiguration.name","codebuild:scopeConfiguration.scope"],"resources":[{"name":"project"}],"description":"Grants permission to create webhook. For an existing AWS CodeBuild build project that has its source code stored in a GitHub or Bitbucket repository, enables AWS CodeBuild to start rebuilding the source code every time a code change is pushed to the repository","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"DeleteBuildBatch":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to delete a build batch","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"DeleteFleet":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to delete a compute fleet","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true}]},"DeleteOAuthToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete an OAuth token from a connected third-party OAuth provider. Only used in the AWS CodeBuild console","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"DeleteProject":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to delete a build project","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"DeleteReport":{"conditionKeys":[],"resources":[{"name":"report-group"}],"description":"Grants permission to delete a report","accessLevel":"Write","resourceTypes":[{"name":"report-group","required":true}]},"DeleteReportGroup":{"conditionKeys":[],"resources":[{"name":"report-group"}],"description":"Grants permission to delete a report group","accessLevel":"Write","resourceTypes":[{"name":"report-group","required":true}]},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[{"name":"project"},{"name":"report-group"}],"description":"Grants permission to delete a resource policy for the associated project or report group","accessLevel":"Permissions management","resourceTypes":[{"name":"project","required":false},{"name":"report-group","required":false}]},"DeleteSourceCredentials":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a set of GitHub, GitHub Enterprise, or Bitbucket source credentials","accessLevel":"Write","resourceTypes":[]},"DeleteWebhook":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to delete webhook. For an existing AWS CodeBuild build project that has its source code stored in a GitHub or Bitbucket repository, stops AWS CodeBuild from rebuilding the source code every time a code change is pushed to the repository","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"DescribeCodeCoverages":{"conditionKeys":[],"resources":[{"name":"report-group"}],"description":"Grants permission to return an array of CodeCoverage objects","accessLevel":"Read","resourceTypes":[{"name":"report-group","required":true}]},"DescribeTestCases":{"conditionKeys":[],"resources":[{"name":"report-group"}],"description":"Grants permission to return an array of TestCase objects","accessLevel":"Read","resourceTypes":[{"name":"report-group","required":true}]},"GetReportGroupTrend":{"conditionKeys":[],"resources":[{"name":"report-group"}],"description":"Grants permission to analyze and accumulate test report values for the test reports in the specified report group","accessLevel":"Read","resourceTypes":[{"name":"report-group","required":true}]},"GetResourcePolicy":{"conditionKeys":[],"resources":[{"name":"project"},{"name":"report-group"}],"description":"Grants permission to return a resource policy for the specified project or report group","accessLevel":"Read","resourceTypes":[{"name":"project","required":false},{"name":"report-group","required":false}]},"ImportSourceCredentials":{"conditionKeys":["codebuild:authType","codebuild:serverType","codebuild:shouldOverwrite","codebuild:token","codebuild:username"],"resources":[],"description":"Grants permission to import the source repository credentials for an AWS CodeBuild project that has its source code stored in a GitHub, GitHub Enterprise, or Bitbucket repository","accessLevel":"Write","resourceTypes":[]},"InvalidateProjectCache":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to reset the cache for a project","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"ListBuildBatches":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of build batch IDs, with each build batch ID representing a single build batch","accessLevel":"List","resourceTypes":[]},"ListBuildBatchesForProject":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to get a list of build batch IDs for the specified build project, with each build batch ID representing a single build batch","accessLevel":"List","resourceTypes":[{"name":"project","required":true}]},"ListBuilds":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of build IDs, with each build ID representing a single build","accessLevel":"List","resourceTypes":[]},"ListBuildsForProject":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to get a list of build IDs for the specified build project, with each build ID representing a single build","accessLevel":"List","resourceTypes":[{"name":"project","required":true}]},"ListCommandExecutionsForSandbox":{"conditionKeys":[],"resources":[{"name":"sandbox"}],"description":"Grants permission to get a list of command execution IDs for the specified sandbox, with each command execution ID representing a single command execution","accessLevel":"List","resourceTypes":[{"name":"sandbox","required":true}]},"ListConnectedOAuthAccounts":{"conditionKeys":[],"resources":[],"description":"Grants permission to list connected third-party OAuth providers. Only used in the AWS CodeBuild console","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListCuratedEnvironmentImages":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about Docker images that are managed by AWS CodeBuild","accessLevel":"List","resourceTypes":[]},"ListFleets":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of compute fleet ARNs, with each compute fleet ARN representing a single fleet","accessLevel":"List","resourceTypes":[]},"ListProjects":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of build project names, with each build project name representing a single build project","accessLevel":"List","resourceTypes":[]},"ListReportGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of report group ARNs. Each report group ARN represents one report group","accessLevel":"List","resourceTypes":[]},"ListReports":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of report ARNs. Each report ARN representing one report","accessLevel":"List","resourceTypes":[]},"ListReportsForReportGroup":{"conditionKeys":[],"resources":[{"name":"report-group"}],"description":"Grants permission to return a list of report ARNs that belong to the specified report group. Each report ARN represents one report","accessLevel":"List","resourceTypes":[{"name":"report-group","required":true}]},"ListRepositories":{"conditionKeys":[],"resources":[],"description":"Grants permission to list source code repositories from a connected third-party OAuth provider. Only used in the AWS CodeBuild console","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListSandboxes":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of sandbox IDs, with each sandbox ID representing a single sandbox","accessLevel":"List","resourceTypes":[]},"ListSandboxesForProject":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to get a list of sandbox IDs for the specified sandbox project, with each sandbox ID representing a single sandbox","accessLevel":"List","resourceTypes":[{"name":"project","required":true}]},"ListSharedProjects":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of project ARNs that have been shared with the requester. Each project ARN represents one project","accessLevel":"List","resourceTypes":[]},"ListSharedReportGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of report group ARNs that have been shared with the requester. Each report group ARN represents one report group","accessLevel":"List","resourceTypes":[]},"ListSourceCredentials":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of SourceCredentialsInfo objects","accessLevel":"List","resourceTypes":[]},"PersistOAuthToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to save an OAuth token from a connected third-party OAuth provider. Only used in the AWS CodeBuild console","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"PutResourcePolicy":{"conditionKeys":[],"resources":[{"name":"project"},{"name":"report-group"}],"description":"Grants permission to create a resource policy for the associated project or report group","accessLevel":"Permissions management","resourceTypes":[{"name":"project","required":false},{"name":"report-group","required":false}]},"RetryBuild":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to retry a build","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"RetryBuildBatch":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to retry a build batch","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"StartBuild":{"conditionKeys":["codebuild:artifacts","codebuild:artifacts.bucketOwnerAccess","codebuild:artifacts.encryptionDisabled","codebuild:artifacts.location","codebuild:autoRetryLimit","codebuild:cache","codebuild:cache.location","codebuild:cache.modes","codebuild:cache.type","codebuild:encryptionKey","codebuild:environment","codebuild:environment.certificate","codebuild:environment.computeType","codebuild:environment.environmentVariables","codebuild:environment.environmentVariables.name","codebuild:environment.environmentVariables.value","codebuild:environment.environmentVariables/${name}.value","codebuild:environment.fleet.fleetArn","codebuild:environment.image","codebuild:environment.imagePullCredentialsType","codebuild:environment.privilegedMode","codebuild:environment.registryCredential","codebuild:environment.registryCredential.credential","codebuild:environment.registryCredential.credentialProvider","codebuild:environment.type","codebuild:logsConfig","codebuild:logsConfig.s3Logs","codebuild:logsConfig.s3Logs.bucketOwnerAccess","codebuild:logsConfig.s3Logs.encryptionDisabled","codebuild:logsConfig.s3Logs.location","codebuild:logsConfig.s3Logs.status","codebuild:secondaryArtifacts","codebuild:secondaryArtifacts.artifactIdentifier","codebuild:secondaryArtifacts.bucketOwnerAccess","codebuild:secondaryArtifacts.encryptionDisabled","codebuild:secondaryArtifacts.location","codebuild:secondaryArtifacts/${artifactIdentifier}.bucketOwnerAccess","codebuild:secondaryArtifacts/${artifactIdentifier}.encryptionDisabled","codebuild:secondaryArtifacts/${artifactIdentifier}.location","codebuild:secondarySources","codebuild:secondarySources.auth.resource","codebuild:secondarySources.auth.type","codebuild:secondarySources.buildStatusConfig.context","codebuild:secondarySources.buildStatusConfig.targetUrl","codebuild:secondarySources.buildspec","codebuild:secondarySources.insecureSsl","codebuild:secondarySources.location","codebuild:secondarySources.sourceIdentifier","codebuild:secondarySources/${sourceIdentifier}.auth.resource","codebuild:secondarySources/${sourceIdentifier}.auth.type","codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.context","codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.targetUrl","codebuild:secondarySources/${sourceIdentifier}.buildspec","codebuild:secondarySources/${sourceIdentifier}.insecureSsl","codebuild:secondarySources/${sourceIdentifier}.location","codebuild:serviceRole","codebuild:source","codebuild:source.auth.resource","codebuild:source.auth.type","codebuild:source.buildStatusConfig.context","codebuild:source.buildStatusConfig.targetUrl","codebuild:source.buildspec","codebuild:source.insecureSsl","codebuild:source.location"],"resources":[{"name":"project"}],"description":"Grants permission to start running a build","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"StartBuildBatch":{"conditionKeys":["codebuild:artifacts","codebuild:artifacts.bucketOwnerAccess","codebuild:artifacts.encryptionDisabled","codebuild:artifacts.location","codebuild:buildBatchConfig","codebuild:buildBatchConfig.restrictions.computeTypesAllowed","codebuild:buildBatchConfig.restrictions.fleetsAllowed","codebuild:buildBatchConfig.serviceRole","codebuild:cache","codebuild:cache.location","codebuild:cache.modes","codebuild:cache.type","codebuild:encryptionKey","codebuild:environment","codebuild:environment.certificate","codebuild:environment.computeType","codebuild:environment.environmentVariables","codebuild:environment.environmentVariables.name","codebuild:environment.environmentVariables.value","codebuild:environment.environmentVariables/${name}.value","codebuild:environment.image","codebuild:environment.imagePullCredentialsType","codebuild:environment.privilegedMode","codebuild:environment.registryCredential","codebuild:environment.registryCredential.credential","codebuild:environment.registryCredential.credentialProvider","codebuild:environment.type","codebuild:logsConfig","codebuild:logsConfig.s3Logs","codebuild:logsConfig.s3Logs.bucketOwnerAccess","codebuild:logsConfig.s3Logs.encryptionDisabled","codebuild:logsConfig.s3Logs.location","codebuild:logsConfig.s3Logs.status","codebuild:secondaryArtifacts","codebuild:secondaryArtifacts.artifactIdentifier","codebuild:secondaryArtifacts.bucketOwnerAccess","codebuild:secondaryArtifacts.encryptionDisabled","codebuild:secondaryArtifacts.location","codebuild:secondaryArtifacts/${artifactIdentifier}.bucketOwnerAccess","codebuild:secondaryArtifacts/${artifactIdentifier}.encryptionDisabled","codebuild:secondaryArtifacts/${artifactIdentifier}.location","codebuild:secondarySources","codebuild:secondarySources.auth.resource","codebuild:secondarySources.auth.type","codebuild:secondarySources.buildStatusConfig.context","codebuild:secondarySources.buildStatusConfig.targetUrl","codebuild:secondarySources.buildspec","codebuild:secondarySources.insecureSsl","codebuild:secondarySources.location","codebuild:secondarySources.sourceIdentifier","codebuild:secondarySources/${sourceIdentifier}.auth.resource","codebuild:secondarySources/${sourceIdentifier}.auth.type","codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.context","codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.targetUrl","codebuild:secondarySources/${sourceIdentifier}.buildspec","codebuild:secondarySources/${sourceIdentifier}.insecureSsl","codebuild:secondarySources/${sourceIdentifier}.location","codebuild:serviceRole","codebuild:source","codebuild:source.auth.resource","codebuild:source.auth.type","codebuild:source.buildspec","codebuild:source.insecureSsl","codebuild:source.location"],"resources":[{"name":"project"}],"description":"Grants permission to start running a build batch","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"StartCommandExecution":{"conditionKeys":[],"resources":[{"name":"sandbox"}],"description":"Grants permission to start running a command execution","accessLevel":"Write","resourceTypes":[{"name":"sandbox","required":true}]},"StartSandbox":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to start running a sandbox","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"StartSandboxConnection":{"conditionKeys":[],"resources":[{"name":"sandbox"}],"description":"Grants permission to establish a connection to the sandbox","accessLevel":"Write","resourceTypes":[{"name":"sandbox","required":true}]},"StopBuild":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to attempt to stop running a build","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"StopBuildBatch":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to attempt to stop running a build batch","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"StopSandbox":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to attempt to stop running a sandbox","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"UpdateFleet":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","codebuild:computeConfiguration","codebuild:computeConfiguration.disk","codebuild:computeConfiguration.instanceType","codebuild:computeConfiguration.machineType","codebuild:computeConfiguration.memory","codebuild:computeConfiguration.vCpu","codebuild:computeType","codebuild:environmentType","codebuild:fleetServiceRole","codebuild:imageId","codebuild:vpcConfig","codebuild:vpcConfig.securityGroupIds","codebuild:vpcConfig.subnets","codebuild:vpcConfig.vpcId"],"resources":[{"name":"fleet"}],"description":"Grants permission to change the settings of an existing compute fleet","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true}]},"UpdateProject":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","codebuild:artifacts","codebuild:artifacts.bucketOwnerAccess","codebuild:artifacts.encryptionDisabled","codebuild:artifacts.location","codebuild:autoRetryLimit","codebuild:buildBatchConfig","codebuild:buildBatchConfig.restrictions.computeTypesAllowed","codebuild:buildBatchConfig.restrictions.fleetsAllowed","codebuild:buildBatchConfig.serviceRole","codebuild:cache","codebuild:cache.location","codebuild:cache.modes","codebuild:cache.type","codebuild:concurrentBuildLimit","codebuild:encryptionKey","codebuild:environment","codebuild:environment.certificate","codebuild:environment.computeConfiguration","codebuild:environment.computeConfiguration.disk","codebuild:environment.computeConfiguration.instanceType","codebuild:environment.computeConfiguration.machineType","codebuild:environment.computeConfiguration.memory","codebuild:environment.computeConfiguration.vCpu","codebuild:environment.computeType","codebuild:environment.environmentVariables","codebuild:environment.environmentVariables.name","codebuild:environment.environmentVariables.value","codebuild:environment.environmentVariables/${name}.value","codebuild:environment.fleet.fleetArn","codebuild:environment.image","codebuild:environment.imagePullCredentialsType","codebuild:environment.privilegedMode","codebuild:environment.registryCredential","codebuild:environment.registryCredential.credential","codebuild:environment.registryCredential.credentialProvider","codebuild:environment.type","codebuild:fileSystemLocations.identifier","codebuild:fileSystemLocations.location","codebuild:fileSystemLocations.type","codebuild:fileSystemLocations/${identifier}.location","codebuild:fileSystemLocations/${identifier}.type","codebuild:logsConfig","codebuild:logsConfig.s3Logs","codebuild:logsConfig.s3Logs.bucketOwnerAccess","codebuild:logsConfig.s3Logs.encryptionDisabled","codebuild:logsConfig.s3Logs.location","codebuild:logsConfig.s3Logs.status","codebuild:secondaryArtifacts","codebuild:secondaryArtifacts.artifactIdentifier","codebuild:secondaryArtifacts.bucketOwnerAccess","codebuild:secondaryArtifacts.encryptionDisabled","codebuild:secondaryArtifacts.location","codebuild:secondaryArtifacts/${artifactIdentifier}.bucketOwnerAccess","codebuild:secondaryArtifacts/${artifactIdentifier}.encryptionDisabled","codebuild:secondaryArtifacts/${artifactIdentifier}.location","codebuild:secondarySources","codebuild:secondarySources.auth.resource","codebuild:secondarySources.auth.type","codebuild:secondarySources.buildStatusConfig.context","codebuild:secondarySources.buildStatusConfig.targetUrl","codebuild:secondarySources.buildspec","codebuild:secondarySources.insecureSsl","codebuild:secondarySources.location","codebuild:secondarySources.sourceIdentifier","codebuild:secondarySources/${sourceIdentifier}.auth.resource","codebuild:secondarySources/${sourceIdentifier}.auth.type","codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.context","codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.targetUrl","codebuild:secondarySources/${sourceIdentifier}.buildspec","codebuild:secondarySources/${sourceIdentifier}.insecureSsl","codebuild:secondarySources/${sourceIdentifier}.location","codebuild:serviceRole","codebuild:source","codebuild:source.auth.resource","codebuild:source.auth.type","codebuild:source.buildStatusConfig.context","codebuild:source.buildStatusConfig.targetUrl","codebuild:source.buildspec","codebuild:source.insecureSsl","codebuild:source.location","codebuild:vpcConfig","codebuild:vpcConfig.securityGroupIds","codebuild:vpcConfig.subnets","codebuild:vpcConfig.vpcId"],"resources":[{"name":"project"}],"description":"Grants permission to change the settings of an existing build project","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"UpdateProjectVisibility":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","codebuild:projectVisibility"],"resources":[{"name":"project"}],"description":"Grants permission to change the public visibility of a project and its builds","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"UpdateReport":{"conditionKeys":[],"resources":[{"name":"report-group"}],"description":"Grants permission to update information about a report","accessLevel":"Write","resourceTypes":[{"name":"report-group","required":true}],"permissionOnly":true},"UpdateReportGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","codebuild:exportConfig.s3Destination.bucket","codebuild:exportConfig.s3Destination.bucketOwner","codebuild:exportConfig.s3Destination.encryptionDisabled","codebuild:exportConfig.s3Destination.encryptionKey","codebuild:exportConfig.s3Destination.path"],"resources":[{"name":"report-group"}],"description":"Grants permission to change the settings of an existing report group","accessLevel":"Write","resourceTypes":[{"name":"report-group","required":true}]},"UpdateWebhook":{"conditionKeys":["codebuild:buildType","codebuild:manualCreation","codebuild:scopeConfiguration.domain","codebuild:scopeConfiguration.name","codebuild:scopeConfiguration.scope"],"resources":[{"name":"project"}],"description":"Grants permission to update the webhook associated with an AWS CodeBuild build project","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]}},"resources":[{"name":"build","arnFormats":["arn:${Partition}:codebuild:${Region}:${Account}:build/${BuildId}"],"conditionKeys":[]},{"name":"build-batch","arnFormats":["arn:${Partition}:codebuild:${Region}:${Account}:build-batch/${BuildBatchId}"],"conditionKeys":[]},{"name":"fleet","arnFormats":["arn:${Partition}:codebuild:${Region}:${Account}:fleet/${FleetName}:${FleetId}"],"conditionKeys":[]},{"name":"project","arnFormats":["arn:${Partition}:codebuild:${Region}:${Account}:project/${ProjectName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"report","arnFormats":["arn:${Partition}:codebuild:${Region}:${Account}:report/${ReportGroupName}:${ReportId}"],"conditionKeys":[]},{"name":"report-group","arnFormats":["arn:${Partition}:codebuild:${Region}:${Account}:report-group/${ReportGroupName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"sandbox","arnFormats":["arn:${Partition}:codebuild:${Region}:${Account}:sandbox/${SandboxId}"],"conditionKeys":[]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by actions based on the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by actions based on tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by actions based on the presence of tag keys in the request"},"codebuild:artifacts":{"types":["Bool"],"description":"Filters access by the API corresponding argument value"},"codebuild:artifacts.bucketOwnerAccess":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:artifacts.encryptionDisabled":{"types":["Bool"],"description":"Filters access by the API corresponding argument value"},"codebuild:artifacts.location":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:authType":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:autoRetryLimit":{"types":["Numeric"],"description":"Filters access by the API corresponding argument value"},"codebuild:buildArn":{"types":["ARN"],"description":"Filters access by the ARN of the AWS CodeBuild build from which the request originated"},"codebuild:buildBatchConfig":{"types":["Bool"],"description":"Filters access by the API corresponding argument value"},"codebuild:buildBatchConfig.restrictions.computeTypesAllowed":{"types":["ArrayOfString"],"description":"Filters access by the API corresponding argument value"},"codebuild:buildBatchConfig.restrictions.fleetsAllowed":{"types":["ArrayOfString"],"description":"Filters access by the API corresponding argument value"},"codebuild:buildBatchConfig.serviceRole":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:buildType":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:cache":{"types":["Bool"],"description":"Filters access by the API corresponding argument value"},"codebuild:cache.location":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:cache.modes":{"types":["ArrayOfString"],"description":"Filters access by the API corresponding argument value"},"codebuild:cache.type":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:computeConfiguration":{"types":["Bool"],"description":"Filters access by the API corresponding argument value"},"codebuild:computeConfiguration.disk":{"types":["Numeric"],"description":"Filters access by the API corresponding argument value"},"codebuild:computeConfiguration.instanceType":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:computeConfiguration.machineType":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:computeConfiguration.memory":{"types":["Numeric"],"description":"Filters access by the API corresponding argument value"},"codebuild:computeConfiguration.vCpu":{"types":["Numeric"],"description":"Filters access by the API corresponding argument value"},"codebuild:computeType":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:concurrentBuildLimit":{"types":["Numeric"],"description":"Filters access by the API corresponding argument value"},"codebuild:encryptionKey":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:environment":{"types":["Bool"],"description":"Filters access by the API corresponding argument value"},"codebuild:environment.certificate":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:environment.computeConfiguration":{"types":["Bool"],"description":"Filters access by the API corresponding argument value"},"codebuild:environment.computeConfiguration.disk":{"types":["Numeric"],"description":"Filters access by the API corresponding argument value"},"codebuild:environment.computeConfiguration.instanceType":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:environment.computeConfiguration.machineType":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:environment.computeConfiguration.memory":{"types":["Numeric"],"description":"Filters access by the API corresponding argument value"},"codebuild:environment.computeConfiguration.vCpu":{"types":["Numeric"],"description":"Filters access by the API corresponding argument value"},"codebuild:environment.computeType":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:environment.environmentVariables":{"types":["Bool"],"description":"Filters access by the API corresponding argument value"},"codebuild:environment.environmentVariables.name":{"types":["ArrayOfString"],"description":"Filters access by the API corresponding argument value"},"codebuild:environment.environmentVariables.value":{"types":["ArrayOfString"],"description":"Filters access by the API corresponding argument value"},"codebuild:environment.environmentVariables/${name}.value":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:environment.fleet.fleetArn":{"types":["ARN"],"description":"Filters access by the API corresponding argument value"},"codebuild:environment.image":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:environment.imagePullCredentialsType":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:environment.privilegedMode":{"types":["Bool"],"description":"Filters access by the API corresponding argument value"},"codebuild:environment.registryCredential":{"types":["Bool"],"description":"Filters access by the API corresponding argument value"},"codebuild:environment.registryCredential.credential":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:environment.registryCredential.credentialProvider":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:environment.type":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:environmentType":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:exportConfig.s3Destination.bucket":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:exportConfig.s3Destination.bucketOwner":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:exportConfig.s3Destination.encryptionDisabled":{"types":["Bool"],"description":"Filters access by the API corresponding argument value"},"codebuild:exportConfig.s3Destination.encryptionKey":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:exportConfig.s3Destination.path":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:fileSystemLocations.identifier":{"types":["ArrayOfString"],"description":"Filters access by the API corresponding argument value"},"codebuild:fileSystemLocations.location":{"types":["ArrayOfString"],"description":"Filters access by the API corresponding argument value"},"codebuild:fileSystemLocations.type":{"types":["ArrayOfString"],"description":"Filters access by the API corresponding argument value"},"codebuild:fileSystemLocations/${identifier}.location":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:fileSystemLocations/${identifier}.type":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:fleetServiceRole":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:imageId":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:logsConfig":{"types":["Bool"],"description":"Filters access by the API corresponding argument value"},"codebuild:logsConfig.s3Logs":{"types":["Bool"],"description":"Filters access by the API corresponding argument value"},"codebuild:logsConfig.s3Logs.bucketOwnerAccess":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:logsConfig.s3Logs.encryptionDisabled":{"types":["Bool"],"description":"Filters access by the API corresponding argument value"},"codebuild:logsConfig.s3Logs.location":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:logsConfig.s3Logs.status":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:manualCreation":{"types":["Bool"],"description":"Filters access by the API corresponding argument value"},"codebuild:projectArn":{"types":["ARN"],"description":"Filters access by the ARN of the AWS CodeBuild project from which the request originated"},"codebuild:projectVisibility":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:scopeConfiguration.domain":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:scopeConfiguration.name":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:scopeConfiguration.scope":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:secondaryArtifacts":{"types":["Bool"],"description":"Filters access by the API corresponding argument value"},"codebuild:secondaryArtifacts.artifactIdentifier":{"types":["ArrayOfString"],"description":"Filters access by the API corresponding argument value"},"codebuild:secondaryArtifacts.bucketOwnerAccess":{"types":["ArrayOfString"],"description":"Filters access by the API corresponding argument value"},"codebuild:secondaryArtifacts.encryptionDisabled":{"types":["ArrayOfBool"],"description":"Filters access by the API corresponding argument value"},"codebuild:secondaryArtifacts.location":{"types":["ArrayOfString"],"description":"Filters access by the API corresponding argument value"},"codebuild:secondaryArtifacts/${artifactIdentifier}.bucketOwnerAccess":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:secondaryArtifacts/${artifactIdentifier}.encryptionDisabled":{"types":["Bool"],"description":"Filters access by the API corresponding argument value"},"codebuild:secondaryArtifacts/${artifactIdentifier}.location":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:secondarySources":{"types":["Bool"],"description":"Filters access by the API corresponding argument value"},"codebuild:secondarySources.auth.resource":{"types":["ArrayOfString"],"description":"Filters access by the API corresponding argument value"},"codebuild:secondarySources.auth.type":{"types":["ArrayOfString"],"description":"Filters access by the API corresponding argument value"},"codebuild:secondarySources.buildStatusConfig.context":{"types":["ArrayOfString"],"description":"Filters access by the API corresponding argument value"},"codebuild:secondarySources.buildStatusConfig.targetUrl":{"types":["ArrayOfString"],"description":"Filters access by the API corresponding argument value"},"codebuild:secondarySources.buildspec":{"types":["Bool"],"description":"Filters access by the API corresponding argument value"},"codebuild:secondarySources.insecureSsl":{"types":["ArrayOfBool"],"description":"Filters access by the API corresponding argument value"},"codebuild:secondarySources.location":{"types":["ArrayOfString"],"description":"Filters access by the API corresponding argument value"},"codebuild:secondarySources.sourceIdentifier":{"types":["ArrayOfString"],"description":"Filters access by the API corresponding argument value"},"codebuild:secondarySources/${sourceIdentifier}.auth.resource":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:secondarySources/${sourceIdentifier}.auth.type":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.context":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.targetUrl":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:secondarySources/${sourceIdentifier}.buildspec":{"types":["Bool"],"description":"Filters access by the API corresponding argument value"},"codebuild:secondarySources/${sourceIdentifier}.insecureSsl":{"types":["Bool"],"description":"Filters access by the API corresponding argument value"},"codebuild:secondarySources/${sourceIdentifier}.location":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:serverType":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:serviceRole":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:shouldOverwrite":{"types":["Bool"],"description":"Filters access by the API corresponding argument value"},"codebuild:source":{"types":["Bool"],"description":"Filters access by the API corresponding argument value"},"codebuild:source.auth.resource":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:source.auth.type":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:source.buildStatusConfig.context":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:source.buildStatusConfig.targetUrl":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:source.buildspec":{"types":["Bool"],"description":"Filters access by the API corresponding argument value"},"codebuild:source.insecureSsl":{"types":["Bool"],"description":"Filters access by the API corresponding argument value"},"codebuild:source.location":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:token":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:username":{"types":["String"],"description":"Filters access by the API corresponding argument value"},"codebuild:vpcConfig":{"types":["Bool"],"description":"Filters access by the API corresponding argument value"},"codebuild:vpcConfig.securityGroupIds":{"types":["ArrayOfString"],"description":"Filters access by the API corresponding argument value"},"codebuild:vpcConfig.subnets":{"types":["ArrayOfString"],"description":"Filters access by the API corresponding argument value"},"codebuild:vpcConfig.vpcId":{"types":["String"],"description":"Filters access by the API corresponding argument value"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"codecatalyst","actions":{"AcceptConnection":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to accept a request to connect this account to an Amazon CodeCatalyst space","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"AssociateIamRoleToConnection":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"connections"}],"description":"Grants permission to associate an IAM role to a connection","accessLevel":"Write","resourceTypes":[{"name":"connections","required":true}],"dependentActions":["iam:PassRole"],"permissionOnly":true},"AssociateIdentityCenterApplicationToSpace":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"identity-center-applications"}],"description":"Grants permission to associate an IAM Identity Center application with an Amazon CodeCatalyst space","accessLevel":"Write","resourceTypes":[{"name":"identity-center-applications","required":true}],"permissionOnly":true},"AssociateIdentityToIdentityCenterApplication":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"identity-center-applications"}],"description":"Grants permission to associate an identity with an IAM Identity Center application for an Amazon CodeCatalyst space","accessLevel":"Write","resourceTypes":[{"name":"identity-center-applications","required":true}],"permissionOnly":true},"BatchAssociateIdentitiesToIdentityCenterApplication":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"identity-center-applications"}],"description":"Grants permission to associate multiple identities with an IAM Identity Center application for an Amazon CodeCatalyst space","accessLevel":"Write","resourceTypes":[{"name":"identity-center-applications","required":true}],"permissionOnly":true},"BatchDisassociateIdentitiesFromIdentityCenterApplication":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"identity-center-applications"}],"description":"Grants permission to disassociate multiple identities from an IAM Identity Center application for an Amazon CodeCatalyst space","accessLevel":"Write","resourceTypes":[{"name":"identity-center-applications","required":true}],"permissionOnly":true},"CreateIdentityCenterApplication":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an IAM Identity Center application","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CreateSpace":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an Amazon CodeCatalyst space","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CreateSpaceAdminRoleAssignment":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"identity-center-applications"}],"description":"Grants permission to create an administrator role assignment for a given Amazon CodeCatalyst space and IAM Identity Center application","accessLevel":"Write","resourceTypes":[{"name":"identity-center-applications","required":true}],"permissionOnly":true},"DeleteConnection":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"connections"}],"description":"Grants permission to delete a connection","accessLevel":"Write","resourceTypes":[{"name":"connections","required":true}],"permissionOnly":true},"DeleteIdentityCenterApplication":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"identity-center-applications"}],"description":"Grants permission to delete an IAM Identity Center application","accessLevel":"Write","resourceTypes":[{"name":"identity-center-applications","required":true}],"permissionOnly":true},"DisassociateIamRoleFromConnection":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"connections"}],"description":"Grants permission to disassociate an IAM role from a connection","accessLevel":"Write","resourceTypes":[{"name":"connections","required":true}],"permissionOnly":true},"DisassociateIdentityCenterApplicationFromSpace":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"identity-center-applications"}],"description":"Grants permission to disassociate an IAM Identity Center application from an Amazon CodeCatalyst space","accessLevel":"Write","resourceTypes":[{"name":"identity-center-applications","required":true}],"permissionOnly":true},"DisassociateIdentityFromIdentityCenterApplication":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"identity-center-applications"}],"description":"Grants permission to disassociate an identity from an IAM Identity Center application for an Amazon CodeCatalyst space","accessLevel":"Write","resourceTypes":[{"name":"identity-center-applications","required":true}],"permissionOnly":true},"GetBillingAuthorization":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"connections"}],"description":"Grants permission to describe the billing authorization for a connection","accessLevel":"Read","resourceTypes":[{"name":"connections","required":true}],"permissionOnly":true},"GetConnection":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"connections"}],"description":"Grants permission to get a connection","accessLevel":"Read","resourceTypes":[{"name":"connections","required":true}],"permissionOnly":true},"GetIdentityCenterApplication":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"identity-center-applications"}],"description":"Grants permission to get information about an IAM Identity Center application","accessLevel":"Read","resourceTypes":[{"name":"identity-center-applications","required":true}],"permissionOnly":true},"GetPendingConnection":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a pending request to connect this account to an Amazon CodeCatalyst space","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"ListConnections":{"conditionKeys":[],"resources":[],"description":"Grants permission to list connections that are not pending","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListIamRolesForConnection":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"connections"}],"description":"Grants permission to list IAM roles associated with a connection","accessLevel":"List","resourceTypes":[{"name":"connections","required":true}],"permissionOnly":true},"ListIdentityCenterApplications":{"conditionKeys":[],"resources":[],"description":"Grants permission to view a list of all IAM Identity Center applications in the account","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListIdentityCenterApplicationsForSpace":{"conditionKeys":[],"resources":[],"description":"Grants permission to view a list of IAM Identity Center applications by Amazon CodeCatalyst space","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListSpacesForIdentityCenterApplication":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"identity-center-applications"}],"description":"Grants permission to view a list of Amazon CodeCatalyst spaces by IAM Identity Center application","accessLevel":"List","resourceTypes":[{"name":"identity-center-applications","required":true}],"permissionOnly":true},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"connections"},{"name":"identity-center-applications"}],"description":"Grants permission to list tags for an Amazon CodeCatalyst resource","accessLevel":"Read","resourceTypes":[{"name":"connections","required":false},{"name":"identity-center-applications","required":false}],"permissionOnly":true},"PutBillingAuthorization":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"connections"}],"description":"Grants permission to create or update the billing authorization for a connection","accessLevel":"Write","resourceTypes":[{"name":"connections","required":true}],"permissionOnly":true},"RejectConnection":{"conditionKeys":[],"resources":[],"description":"Grants permission to reject a request to connect this account to an Amazon CodeCatalyst space","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"SynchronizeIdentityCenterApplication":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"identity-center-applications"}],"description":"Grants permission to synchronize an IAM Identity Center application with the backing identity store","accessLevel":"Write","resourceTypes":[{"name":"identity-center-applications","required":true}],"permissionOnly":true},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"connections"},{"name":"identity-center-applications"}],"description":"Grants permission to tag an Amazon CodeCatalyst resource","accessLevel":"Tagging","resourceTypes":[{"name":"connections","required":false},{"name":"identity-center-applications","required":false}],"permissionOnly":true},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"connections"},{"name":"identity-center-applications"}],"description":"Grants permission to untag an Amazon CodeCatalyst resource","accessLevel":"Tagging","resourceTypes":[{"name":"connections","required":false},{"name":"identity-center-applications","required":false}],"permissionOnly":true},"UpdateIdentityCenterApplication":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"identity-center-applications"}],"description":"Grants permission to update an IAM Identity Center application","accessLevel":"Write","resourceTypes":[{"name":"identity-center-applications","required":true}],"permissionOnly":true}},"resources":[{"name":"connections","arnFormats":["arn:${Partition}:codecatalyst:${Region}:${Account}:/connections/${ConnectionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"identity-center-applications","arnFormats":["arn:${Partition}:codecatalyst:${Region}:${Account}:/identity-center-applications/${IdentityCenterApplicationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"project","arnFormats":["arn:${Partition}:codecatalyst:::space/${SpaceId}/project/${ProjectId}"],"conditionKeys":[]},{"name":"space","arnFormats":["arn:${Partition}:codecatalyst:::space/${SpaceId}"],"conditionKeys":[]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag's key and value in a request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys in a request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"codecommit","actions":{"AssociateApprovalRuleTemplateWithRepository":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to associate an approval rule template with a repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"BatchAssociateApprovalRuleTemplateWithRepositories":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to associate an approval rule template with multiple repositories in a single operation","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"BatchDescribeMergeConflicts":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to get information about multiple merge conflicts when attempting to merge two commits using either the three-way merge or the squash merge option","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"BatchDisassociateApprovalRuleTemplateFromRepositories":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to remove the association between an approval rule template and multiple repositories in a single operation","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"BatchGetCommits":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to return information about one or more commits in an AWS CodeCommit repository","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"BatchGetPullRequests":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to return information about one or more pull requests in an AWS CodeCommit repository","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"permissionOnly":true},"BatchGetRepositories":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to get information about multiple repositories","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"CancelUploadArchive":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to cancel the uploading of an archive to a pipeline in AWS CodePipeline","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"permissionOnly":true},"CreateApprovalRuleTemplate":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an approval rule template that will automatically create approval rules in pull requests that match the conditions defined in the template; does not grant permission to create approval rules for individual pull requests","accessLevel":"Write","resourceTypes":[]},"CreateBranch":{"conditionKeys":["codecommit:References"],"resources":[{"name":"repository"}],"description":"Grants permission to create a branch in an AWS CodeCommit repository with this API; does not control Git create branch actions","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"CreateCommit":{"conditionKeys":["codecommit:References"],"resources":[{"name":"repository"}],"description":"Grants permission to add, copy, move or update single or multiple files in a branch in an AWS CodeCommit repository, and generate a commit for the changes in the specified branch","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"CreatePullRequest":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to create a pull request in the specified repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"CreatePullRequestApprovalRule":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to create an approval rule specific to an individual pull request; does not grant permission to create approval rule templates","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"CreateRepository":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"repository"}],"description":"Grants permission to create an AWS CodeCommit repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"CreateUnreferencedMergeCommit":{"conditionKeys":["codecommit:References"],"resources":[{"name":"repository"}],"description":"Grants permission to create an unreferenced commit that contains the result of merging two commits using either the three-way or the squash merge option; does not control Git merge actions","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"DeleteApprovalRuleTemplate":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete an approval rule template","accessLevel":"Write","resourceTypes":[]},"DeleteBranch":{"conditionKeys":["codecommit:References"],"resources":[{"name":"repository"}],"description":"Grants permission to delete a branch in an AWS CodeCommit repository with this API; does not control Git delete branch actions","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"DeleteCommentContent":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to delete the content of a comment made on a change, file, or commit in a repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"DeleteFile":{"conditionKeys":["codecommit:References"],"resources":[{"name":"repository"}],"description":"Grants permission to delete a specified file from a specified branch","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"DeletePullRequestApprovalRule":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to delete approval rule created for a pull request if the rule was not created by an approval rule template","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"DeleteRepository":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to delete an AWS CodeCommit repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"DescribeMergeConflicts":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to get information about specific merge conflicts when attempting to merge two commits using either the three-way or the squash merge option","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"DescribePullRequestEvents":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to return information about one or more pull request events","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"DisassociateApprovalRuleTemplateFromRepository":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to remove the association between an approval rule template and a repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"EvaluatePullRequestApprovalRules":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to evaluate whether a pull request is mergable based on its current approval state and approval rule requirements","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"GetApprovalRuleTemplate":{"conditionKeys":[],"resources":[],"description":"Grants permission to return information about an approval rule template","accessLevel":"Read","resourceTypes":[]},"GetBlob":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to view the encoded content of an individual file in an AWS CodeCommit repository from the AWS CodeCommit console","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"GetBranch":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to get details about a branch in an AWS CodeCommit repository with this API; does not control Git branch actions","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"GetComment":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to get the content of a comment made on a change, file, or commit in a repository","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"GetCommentReactions":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to get the reactions on a comment","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"GetCommentsForComparedCommit":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to get information about comments made on the comparison between two commits","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"GetCommentsForPullRequest":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to get comments made on a pull request","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"GetCommit":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to return information about a commit, including commit message and committer information, with this API; does not control Git log actions","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"GetCommitHistory":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to get information about the history of commits in a repository","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"permissionOnly":true},"GetCommitsFromMergeBase":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to get information about the difference between commits in the context of a potential merge","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"permissionOnly":true},"GetDifferences":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to view information about the differences between valid commit specifiers such as a branch, tag, HEAD, commit ID, or other fully qualified reference","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"GetFile":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to return the base-64 encoded contents of a specified file and its metadata","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"GetFolder":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to return the contents of a specified folder in a repository","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"GetMergeCommit":{"conditionKeys":["codecommit:References"],"resources":[{"name":"repository"}],"description":"Grants permission to get information about a merge commit created by one of the merge options for pull requests that creates merge commits. Not all merge options create merge commits. This permission does not control Git merge actions","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"GetMergeConflicts":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to get information about merge conflicts between the before and after commit IDs for a pull request in a repository","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"GetMergeOptions":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to get information about merge options for pull requests that can be used to merge two commits; does not control Git merge actions","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"GetObjectIdentifier":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to resolve blobs, trees, and commits to their identifier","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"permissionOnly":true},"GetPullRequest":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to get information about a pull request in a specified repository","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"GetPullRequestApprovalStates":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to retrieve the current approvals on an inputted pull request","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"GetPullRequestOverrideState":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to retrieve the current override state of a given pull request","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"GetReferences":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to get details about references in an AWS CodeCommit repository; does not control Git reference actions","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"permissionOnly":true},"GetRepository":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to get information about an AWS CodeCommit repository","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"GetRepositoryTriggers":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to get information about triggers configured for a repository","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}]},"GetTree":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to view the contents of a specified tree in an AWS CodeCommit repository from the AWS CodeCommit console","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"permissionOnly":true},"GetUploadArchiveStatus":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to get status information about an archive upload to a pipeline in AWS CodePipeline","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"permissionOnly":true},"GitPull":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to pull information from an AWS CodeCommit repository to a local repo","accessLevel":"Read","resourceTypes":[{"name":"repository","required":true}],"permissionOnly":true},"GitPush":{"conditionKeys":["codecommit:References"],"resources":[{"name":"repository"}],"description":"Grants permission to push information from a local repo to an AWS CodeCommit repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"permissionOnly":true},"ListApprovalRuleTemplates":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all approval rule templates in an AWS Region for the AWS account","accessLevel":"List","resourceTypes":[]},"ListAssociatedApprovalRuleTemplatesForRepository":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to list approval rule templates that are associated with a repository","accessLevel":"List","resourceTypes":[{"name":"repository","required":true}]},"ListBranches":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to list branches for an AWS CodeCommit repository with this API; does not control Git branch actions","accessLevel":"List","resourceTypes":[{"name":"repository","required":true}]},"ListFileCommitHistory":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to list commits and changes to a specified file","accessLevel":"List","resourceTypes":[{"name":"repository","required":true}]},"ListPullRequests":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to list pull requests for a specified repository","accessLevel":"List","resourceTypes":[{"name":"repository","required":true}]},"ListRepositories":{"conditionKeys":[],"resources":[],"description":"Grants permission to list information about AWS CodeCommit repositories in the current Region for your AWS account","accessLevel":"List","resourceTypes":[]},"ListRepositoriesForApprovalRuleTemplate":{"conditionKeys":[],"resources":[],"description":"Grants permission to list repositories that are associated with an approval rule template","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to list the resource attached to a CodeCommit resource ARN","accessLevel":"List","resourceTypes":[{"name":"repository","required":false}]},"MergeBranchesByFastForward":{"conditionKeys":["codecommit:References"],"resources":[{"name":"repository"}],"description":"Grants permission to merge two commits into the specified destination branch using the fast-forward merge option","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"MergeBranchesBySquash":{"conditionKeys":["codecommit:References"],"resources":[{"name":"repository"}],"description":"Grants permission to merge two commits into the specified destination branch using the squash merge option","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"MergeBranchesByThreeWay":{"conditionKeys":["codecommit:References"],"resources":[{"name":"repository"}],"description":"Grants permission to merge two commits into the specified destination branch using the three-way merge option","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"MergePullRequestByFastForward":{"conditionKeys":["codecommit:References"],"resources":[{"name":"repository"}],"description":"Grants permission to close a pull request and attempt to merge it into the specified destination branch for that pull request at the specified commit using the fast-forward merge option","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"MergePullRequestBySquash":{"conditionKeys":["codecommit:References"],"resources":[{"name":"repository"}],"description":"Grants permission to close a pull request and attempt to merge it into the specified destination branch for that pull request at the specified commit using the squash merge option","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"MergePullRequestByThreeWay":{"conditionKeys":["codecommit:References"],"resources":[{"name":"repository"}],"description":"Grants permission to close a pull request and attempt to merge it into the specified destination branch for that pull request at the specified commit using the three-way merge option","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"OverridePullRequestApprovalRules":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to override all approval rules for a pull request, including approval rules created by a template","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"PostCommentForComparedCommit":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to post a comment on the comparison between two commits","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"PostCommentForPullRequest":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to post a comment on a pull request","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"PostCommentReply":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to post a comment in reply to a comment on a comparison between commits or a pull request","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"PutCommentReaction":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to post a reaction on a comment","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"PutFile":{"conditionKeys":["codecommit:References"],"resources":[{"name":"repository"}],"description":"Grants permission to add or update a file in a branch in an AWS CodeCommit repository, and generate a commit for the addition in the specified branch","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"PutRepositoryTriggers":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to create, update, or delete triggers for a repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"repository"}],"description":"Grants permission to attach resource tags to a CodeCommit resource ARN","accessLevel":"Tagging","resourceTypes":[{"name":"repository","required":false}]},"TestRepositoryTriggers":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to test the functionality of repository triggers by sending information to the trigger target","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"repository"}],"description":"Grants permission to disassociate resource tags from a CodeCommit resource ARN","accessLevel":"Tagging","resourceTypes":[{"name":"repository","required":false}]},"UpdateApprovalRuleTemplateContent":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the content of approval rule templates; does not grant permission to update content of approval rules created specifically for pull requests","accessLevel":"Write","resourceTypes":[]},"UpdateApprovalRuleTemplateDescription":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the description of approval rule templates","accessLevel":"Write","resourceTypes":[]},"UpdateApprovalRuleTemplateName":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the name of approval rule templates","accessLevel":"Write","resourceTypes":[]},"UpdateComment":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to update the contents of a comment if the identity matches the identity used to create the comment","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"UpdateDefaultBranch":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to change the default branch in an AWS CodeCommit repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"UpdatePullRequestApprovalRuleContent":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to update the content for approval rules created for a specific pull requests; does not grant permission to update approval rule content for rules created with an approval rule template","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"UpdatePullRequestApprovalState":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to update the approval state for pull requests","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"UpdatePullRequestDescription":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to update the description of a pull request","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"UpdatePullRequestStatus":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to update the status of a pull request","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"UpdatePullRequestTitle":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to update the title of a pull request","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"UpdateRepositoryDescription":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to change the description of an AWS CodeCommit repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"UpdateRepositoryEncryptionKey":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to change the AWS KMS encryption key used to encrypt and decrypt an AWS CodeCommit repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"UpdateRepositoryName":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to change the name of an AWS CodeCommit repository","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}]},"UploadArchive":{"conditionKeys":[],"resources":[{"name":"repository"}],"description":"Grants permission to the service role for AWS CodePipeline to upload repository changes into a pipeline","accessLevel":"Write","resourceTypes":[{"name":"repository","required":true}],"permissionOnly":true}},"resources":[{"name":"repository","arnFormats":["arn:${Partition}:codecommit:${Region}:${Account}:${RepositoryName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"},"codecommit:References":{"types":["String"],"description":"Filters access by Git reference to specified AWS CodeCommit actions"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"codeconnections","actions":{"CreateConnection":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","codeconnections:ProviderType"],"resources":[],"description":"Grants permission to create a Connection resource","accessLevel":"Write","resourceTypes":[]},"CreateHost":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","codeconnections:ProviderType","codeconnections:VpcId"],"resources":[],"description":"Grants permission to create a host resource","accessLevel":"Write","resourceTypes":[]},"CreateRepositoryLink":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Connection"}],"description":"Grants permission to create a repository link","accessLevel":"Write","resourceTypes":[{"name":"Connection","required":true}],"dependentActions":["codeconnections:PassConnection","codeconnections:UseConnection"]},"CreateSyncConfiguration":{"conditionKeys":["codeconnections:Branch"],"resources":[{"name":"RepositoryLink"}],"description":"Grants permission to create a template sync config","accessLevel":"Write","resourceTypes":[{"name":"RepositoryLink","required":true}],"dependentActions":["codeconnections:PassRepository","iam:PassRole"]},"DeleteConnection":{"conditionKeys":[],"resources":[{"name":"Connection"}],"description":"Grants permission to delete a Connection resource","accessLevel":"Write","resourceTypes":[{"name":"Connection","required":true}]},"DeleteHost":{"conditionKeys":[],"resources":[{"name":"Host"}],"description":"Grants permission to delete a host resource","accessLevel":"Write","resourceTypes":[{"name":"Host","required":true}]},"DeleteRepositoryLink":{"conditionKeys":[],"resources":[{"name":"RepositoryLink"}],"description":"Grants permission to delete a repository link","accessLevel":"Write","resourceTypes":[{"name":"RepositoryLink","required":true}]},"DeleteSyncConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a sync configuration","accessLevel":"Write","resourceTypes":[]},"GetConnection":{"conditionKeys":[],"resources":[{"name":"Connection"}],"description":"Grants permission to get details about a Connection resource","accessLevel":"Read","resourceTypes":[{"name":"Connection","required":true}]},"GetConnectionToken":{"conditionKeys":[],"resources":[{"name":"Connection"}],"description":"Grants permission to get a Connection token to call provider actions","accessLevel":"Read","resourceTypes":[{"name":"Connection","required":true}],"permissionOnly":true},"GetHost":{"conditionKeys":[],"resources":[{"name":"Host"}],"description":"Grants permission to get details about a host resource","accessLevel":"Read","resourceTypes":[{"name":"Host","required":true}]},"GetIndividualAccessToken":{"conditionKeys":["codeconnections:ProviderType"],"resources":[],"description":"Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection","accessLevel":"Read","resourceTypes":[],"dependentActions":["codeconnections:StartOAuthHandshake"],"permissionOnly":true},"GetInstallationUrl":{"conditionKeys":["codeconnections:ProviderType"],"resources":[],"description":"Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetRepositoryLink":{"conditionKeys":[],"resources":[{"name":"RepositoryLink"}],"description":"Grants permission to describe a repository link","accessLevel":"Read","resourceTypes":[{"name":"RepositoryLink","required":true}]},"GetRepositorySyncStatus":{"conditionKeys":["codeconnections:Branch"],"resources":[{"name":"RepositoryLink"}],"description":"Grants permission to get the latest sync status for a repository","accessLevel":"Read","resourceTypes":[{"name":"RepositoryLink","required":true}]},"GetResourceSyncStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the latest sync status for a resource (cfn stack or other resources)","accessLevel":"Read","resourceTypes":[]},"GetSyncBlockerSummary":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe service sync blockers on a resource (cfn stack or other resources)","accessLevel":"Read","resourceTypes":[]},"GetSyncConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe a sync configuration","accessLevel":"Read","resourceTypes":[]},"ListConnections":{"conditionKeys":["codeconnections:ProviderTypeFilter"],"resources":[{"name":"Connection"}],"description":"Grants permission to list Connection resources","accessLevel":"List","resourceTypes":[{"name":"Connection","required":true}]},"ListHosts":{"conditionKeys":["codeconnections:ProviderTypeFilter"],"resources":[],"description":"Grants permission to list host resources","accessLevel":"List","resourceTypes":[]},"ListInstallationTargets":{"conditionKeys":[],"resources":[],"description":"Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection","accessLevel":"List","resourceTypes":[],"dependentActions":["codeconnections:GetIndividualAccessToken","codeconnections:StartOAuthHandshake"],"permissionOnly":true},"ListRepositoryLinks":{"conditionKeys":[],"resources":[],"description":"Grants permission to list repository links","accessLevel":"List","resourceTypes":[]},"ListRepositorySyncDefinitions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list repository sync definitions","accessLevel":"List","resourceTypes":[]},"ListSyncConfigurations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list sync configurations for a repository link","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"Connection"},{"name":"Host"},{"name":"RepositoryLink"}],"description":"Grants permission to the set of key-value pairs that are used to manage the resource","accessLevel":"List","resourceTypes":[{"name":"Connection","required":false},{"name":"Host","required":false},{"name":"RepositoryLink","required":false}]},"PassConnection":{"conditionKeys":["codeconnections:PassedToService"],"resources":[{"name":"Connection"}],"description":"Grants permission to pass a Connection resource to an AWS service that accepts a Connection ARN as input, such as codepipeline:CreatePipeline","accessLevel":"Read","resourceTypes":[{"name":"Connection","required":true}],"permissionOnly":true},"PassRepository":{"conditionKeys":["codeconnections:PassedToService"],"resources":[{"name":"RepositoryLink"}],"description":"Grants permission to pass a repository link resource to an AWS service that accepts a RepositoryLinkId as input, such as codeconnections:CreateSyncConfiguration","accessLevel":"Read","resourceTypes":[{"name":"RepositoryLink","required":true}],"permissionOnly":true},"RegisterAppCode":{"conditionKeys":["codeconnections:HostArn"],"resources":[],"description":"Grants permission to associate a third party server, such as a GitHub Enterprise Server instance, with a Host","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"StartAppRegistrationHandshake":{"conditionKeys":["codeconnections:HostArn"],"resources":[],"description":"Grants permission to associate a third party server, such as a GitHub Enterprise Server instance, with a Host","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"StartOAuthHandshake":{"conditionKeys":["codeconnections:ProviderType"],"resources":[],"description":"Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Connection"},{"name":"Host"},{"name":"RepositoryLink"}],"description":"Grants permission to add or modify the tags of the given resource","accessLevel":"Tagging","resourceTypes":[{"name":"Connection","required":false},{"name":"Host","required":false},{"name":"RepositoryLink","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"Connection"},{"name":"Host"},{"name":"RepositoryLink"}],"description":"Grants permission to remove tags from an AWS resource","accessLevel":"Tagging","resourceTypes":[{"name":"Connection","required":false},{"name":"Host","required":false},{"name":"RepositoryLink","required":false}]},"UpdateConnectionInstallation":{"conditionKeys":["codeconnections:InstallationId"],"resources":[{"name":"Connection"}],"description":"Grants permission to update a Connection resource with an installation of the CodeStar Connections App","accessLevel":"Write","resourceTypes":[{"name":"Connection","required":true}],"dependentActions":["codeconnections:GetIndividualAccessToken","codeconnections:GetInstallationUrl","codeconnections:ListInstallationTargets","codeconnections:StartOAuthHandshake"]},"UpdateHost":{"conditionKeys":["codeconnections:VpcId"],"resources":[{"name":"Host"}],"description":"Grants permission to update a host resource","accessLevel":"Write","resourceTypes":[{"name":"Host","required":true}]},"UpdateRepositoryLink":{"conditionKeys":[],"resources":[{"name":"RepositoryLink"}],"description":"Grants permission to update a repository link","accessLevel":"Write","resourceTypes":[{"name":"RepositoryLink","required":true}]},"UpdateSyncBlocker":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a sync blocker for a resource (cfn stack or other resources)","accessLevel":"Write","resourceTypes":[]},"UpdateSyncConfiguration":{"conditionKeys":["codeconnections:Branch"],"resources":[],"description":"Grants permission to update a sync configuration","accessLevel":"Write","resourceTypes":[]},"UseConnection":{"conditionKeys":["codeconnections:BranchName","codeconnections:FullRepositoryId","codeconnections:OwnerId","codeconnections:ProviderAction","codeconnections:ProviderPermissionsRequired","codeconnections:RepositoryName"],"resources":[{"name":"Connection"}],"description":"Grants permission to use a Connection resource to call provider actions","accessLevel":"Read","resourceTypes":[{"name":"Connection","required":true}],"permissionOnly":true}},"resources":[{"name":"Connection","arnFormats":["arn:${Partition}:codeconnections:${Region}:${Account}:connection/${ConnectionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Host","arnFormats":["arn:${Partition}:codeconnections:${Region}:${Account}:host/${HostId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"RepositoryLink","arnFormats":["arn:${Partition}:codeconnections:${Region}:${Account}:repository-link/${RepositoryLinkId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"codeconnections:Branch":{"types":["String"],"description":"Filters access by the branch name that is passed in the request"},"codeconnections:BranchName":{"types":["String"],"description":"Filters access by the branch name that is passed in the request. Applies only to UseConnection requests for access to a specific repository branch"},"codeconnections:FullRepositoryId":{"types":["String"],"description":"Filters access by the repository that is passed in the request. Applies only to UseConnection requests for access to a specific repository"},"codeconnections:HostArn":{"types":["ARN"],"description":"Filters access by the host resource associated with the connection used in the request"},"codeconnections:InstallationId":{"types":["String"],"description":"Filters access by the third-party ID (such as the Bitbucket App installation ID for CodeConnections) that is used to update a Connection. Allows you to restrict which third-party App installations can be used to make a Connection"},"codeconnections:OwnerId":{"types":["String"],"description":"Filters access by the owner of the third-party repository. Applies only to UseConnection requests for access to repositories owned by a specific user"},"codeconnections:PassedToService":{"types":["String"],"description":"Filters access by the service to which the principal is allowed to pass a Connection or RepositoryLink"},"codeconnections:ProviderAction":{"types":["String"],"description":"Filters access by the provider action in a UseConnection request such as ListRepositories. See documentation for all valid values"},"codeconnections:ProviderPermissionsRequired":{"types":["String"],"description":"Filters access by the write permissions of a provider action in a UseConnection request. Valid types include read_only and read_write"},"codeconnections:ProviderType":{"types":["String"],"description":"Filters access by the type of third-party provider passed in the request"},"codeconnections:ProviderTypeFilter":{"types":["String"],"description":"Filters access by the type of third-party provider used to filter results"},"codeconnections:RepositoryName":{"types":["String"],"description":"Filters access by the repository name that is passed in the request. Applies only to UseConnection requests for access to repositories owned by a specific user"},"codeconnections:VpcId":{"types":["String"],"description":"Filters access by the VpcId passed in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"codedeploy-commands-secure","actions":{"GetDeploymentSpecification":{"conditionKeys":[],"resources":[],"description":"Grants permission to get deployment specification","accessLevel":"Read","resourceTypes":[]},"PollHostCommand":{"conditionKeys":[],"resources":[],"description":"Grants permission to request host agent commands","accessLevel":"Read","resourceTypes":[]},"PutHostCommandAcknowledgement":{"conditionKeys":[],"resources":[],"description":"Grants permission to mark host agent commands acknowledged","accessLevel":"Write","resourceTypes":[]},"PutHostCommandComplete":{"conditionKeys":[],"resources":[],"description":"Grants permission to mark host agent commands completed","accessLevel":"Write","resourceTypes":[]}},"resources":[],"conditionKeys":{}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"codedeploy","actions":{"AddTagsToOnPremisesInstances":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to add tags to one or more on-premises instances","accessLevel":"Tagging","resourceTypes":[{"name":"instance","required":true}]},"BatchGetApplicationRevisions":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to get information about one or more application revisions","accessLevel":"Read","resourceTypes":[{"name":"application","required":true}]},"BatchGetApplications":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to get information about multiple applications associated with the IAM user","accessLevel":"Read","resourceTypes":[{"name":"application","required":true}]},"BatchGetDeploymentGroups":{"conditionKeys":[],"resources":[{"name":"deploymentgroup"}],"description":"Grants permission to get information about one or more deployment groups","accessLevel":"Read","resourceTypes":[{"name":"deploymentgroup","required":true}]},"BatchGetDeploymentInstances":{"conditionKeys":[],"resources":[{"name":"deploymentgroup"}],"description":"Grants permission to get information about one or more instance that are part of a deployment group","accessLevel":"Read","resourceTypes":[{"name":"deploymentgroup","required":true}]},"BatchGetDeploymentTargets":{"conditionKeys":[],"resources":[],"description":"Grants permission to return an array of one or more targets associated with a deployment. This method works with all compute types and should be used instead of the deprecated BatchGetDeploymentInstances. The maximum number of targets that can be returned is 25","accessLevel":"Read","resourceTypes":[]},"BatchGetDeployments":{"conditionKeys":[],"resources":[{"name":"deploymentgroup"}],"description":"Grants permission to get information about multiple deployments associated with the IAM user","accessLevel":"Read","resourceTypes":[{"name":"deploymentgroup","required":true}]},"BatchGetOnPremisesInstances":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to get information about one or more on-premises instances","accessLevel":"Read","resourceTypes":[{"name":"instance","required":true}]},"ContinueDeployment":{"conditionKeys":[],"resources":[],"description":"Grants permission to start the process of rerouting traffic from instances in the original environment to instances in thereplacement environment without waiting for a specified wait time to elapse","accessLevel":"Write","resourceTypes":[]},"CreateApplication":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"application"}],"description":"Grants permission to create an application associated with the IAM user","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"CreateCloudFormationDeployment":{"conditionKeys":[],"resources":[],"description":"Grants permission to create CloudFormation deployment to cooperate ochestration for a CloudFormation stack update","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CreateDeployment":{"conditionKeys":[],"resources":[{"name":"deploymentgroup"}],"description":"Grants permission to create a deployment for an application associated with the IAM user","accessLevel":"Write","resourceTypes":[{"name":"deploymentgroup","required":true}]},"CreateDeploymentConfig":{"conditionKeys":[],"resources":[{"name":"deploymentconfig"}],"description":"Grants permission to create a custom deployment configuration associated with the IAM user","accessLevel":"Write","resourceTypes":[{"name":"deploymentconfig","required":true}]},"CreateDeploymentGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"deploymentgroup"}],"description":"Grants permission to create a deployment group for an application associated with the IAM user","accessLevel":"Write","resourceTypes":[{"name":"deploymentgroup","required":true}]},"DeleteApplication":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to delete an application associated with the IAM user","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"DeleteDeploymentConfig":{"conditionKeys":[],"resources":[{"name":"deploymentconfig"}],"description":"Grants permission to delete a custom deployment configuration associated with the IAM user","accessLevel":"Write","resourceTypes":[{"name":"deploymentconfig","required":true}]},"DeleteDeploymentGroup":{"conditionKeys":[],"resources":[{"name":"deploymentgroup"}],"description":"Grants permission to delete a deployment group for an application associated with the IAM user","accessLevel":"Write","resourceTypes":[{"name":"deploymentgroup","required":true}]},"DeleteGitHubAccountToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a GitHub account connection","accessLevel":"Write","resourceTypes":[]},"DeleteResourcesByExternalId":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete resources associated with the given external Id","accessLevel":"Write","resourceTypes":[]},"DeregisterOnPremisesInstance":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to deregister an on-premises instance","accessLevel":"Write","resourceTypes":[{"name":"instance","required":true}]},"GetApplication":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to get information about a single application associated with the IAM user","accessLevel":"List","resourceTypes":[{"name":"application","required":true}]},"GetApplicationRevision":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to get information about a single application revision for an application associated with the IAM user","accessLevel":"List","resourceTypes":[{"name":"application","required":true}]},"GetDeployment":{"conditionKeys":[],"resources":[{"name":"deploymentgroup"}],"description":"Grants permission to get information about a single deployment to a deployment group for an application associated with the IAM user","accessLevel":"List","resourceTypes":[{"name":"deploymentgroup","required":true}]},"GetDeploymentConfig":{"conditionKeys":[],"resources":[{"name":"deploymentconfig"}],"description":"Grants permission to get information about a single deployment configuration associated with the IAM user","accessLevel":"List","resourceTypes":[{"name":"deploymentconfig","required":true}]},"GetDeploymentGroup":{"conditionKeys":[],"resources":[{"name":"deploymentgroup"}],"description":"Grants permission to get information about a single deployment group for an application associated with the IAM user","accessLevel":"List","resourceTypes":[{"name":"deploymentgroup","required":true}]},"GetDeploymentInstance":{"conditionKeys":[],"resources":[{"name":"deploymentgroup"}],"description":"Grants permission to get information about a single instance in a deployment associated with the IAM user","accessLevel":"List","resourceTypes":[{"name":"deploymentgroup","required":true}]},"GetDeploymentTarget":{"conditionKeys":[],"resources":[],"description":"Grants permission to return information about a deployment target","accessLevel":"Read","resourceTypes":[]},"GetOnPremisesInstance":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to get information about a single on-premises instance","accessLevel":"List","resourceTypes":[{"name":"instance","required":true}]},"ListApplicationRevisions":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to get information about all application revisions for an application associated with the IAM user","accessLevel":"List","resourceTypes":[{"name":"application","required":true}]},"ListApplications":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about all applications associated with the IAM user","accessLevel":"List","resourceTypes":[]},"ListDeploymentConfigs":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about all deployment configurations associated with the IAM user","accessLevel":"List","resourceTypes":[]},"ListDeploymentGroups":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to get information about all deployment groups for an application associated with the IAM user","accessLevel":"List","resourceTypes":[{"name":"application","required":true}]},"ListDeploymentInstances":{"conditionKeys":[],"resources":[{"name":"deploymentgroup"}],"description":"Grants permission to get information about all instances in a deployment associated with the IAM user","accessLevel":"List","resourceTypes":[{"name":"deploymentgroup","required":true}]},"ListDeploymentTargets":{"conditionKeys":[],"resources":[],"description":"Grants permission to return an array of target IDs that are associated a deployment","accessLevel":"List","resourceTypes":[]},"ListDeployments":{"conditionKeys":[],"resources":[{"name":"deploymentgroup"}],"description":"Grants permission to get information about all deployments to a deployment group associated with the IAM user, or to get all deployments associated with the IAM user","accessLevel":"List","resourceTypes":[{"name":"deploymentgroup","required":true}]},"ListGitHubAccountTokenNames":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the names of stored connections to GitHub accounts","accessLevel":"List","resourceTypes":[]},"ListOnPremisesInstances":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of one or more on-premises instance names","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"deploymentgroup"}],"description":"Grants permission to return a list of tags for the resource identified by a specified ARN. Tags are used to organize and categorize your CodeDeploy resources","accessLevel":"List","resourceTypes":[{"name":"application","required":false},{"name":"deploymentgroup","required":false}]},"PutLifecycleEventHookExecutionStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to notify a lifecycle event hook execution status for associated deployment with the IAM user","accessLevel":"Write","resourceTypes":[]},"RegisterApplicationRevision":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to register information about an application revision for an application associated with the IAM user","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"RegisterOnPremisesInstance":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to register an on-premises instance","accessLevel":"Write","resourceTypes":[{"name":"instance","required":true}]},"RemoveTagsFromOnPremisesInstances":{"conditionKeys":[],"resources":[{"name":"instance"}],"description":"Grants permission to remove tags from one or more on-premises instances","accessLevel":"Tagging","resourceTypes":[{"name":"instance","required":true}]},"SkipWaitTimeForInstanceTermination":{"conditionKeys":[],"resources":[],"description":"Grants permission to override any specified wait time and starts terminating instances immediately after the traffic routing is complete. This action applies to blue-green deployments only","accessLevel":"Write","resourceTypes":[]},"StopDeployment":{"conditionKeys":[],"resources":[],"description":"Grants permission to stop a deployment","accessLevel":"Write","resourceTypes":[]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"application"},{"name":"deploymentgroup"}],"description":"Grants permission to associate the list of tags in the input Tags parameter with the resource identified by the ResourceArn input parameter","accessLevel":"Tagging","resourceTypes":[{"name":"application","required":false},{"name":"deploymentgroup","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"application"},{"name":"deploymentgroup"}],"description":"Grants permission to disassociate a resource from a list of tags. The resource is identified by the ResourceArn input parameter. The tags are identfied by the list of keys in the TagKeys input parameter","accessLevel":"Tagging","resourceTypes":[{"name":"application","required":false},{"name":"deploymentgroup","required":false}]},"UpdateApplication":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to update an application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"UpdateDeploymentGroup":{"conditionKeys":[],"resources":[{"name":"deploymentgroup"}],"description":"Grants permission to change information about a single deployment group for an application associated with the IAM user","accessLevel":"Write","resourceTypes":[{"name":"deploymentgroup","required":true}]}},"resources":[{"name":"application","arnFormats":["arn:${Partition}:codedeploy:${Region}:${Account}:application:${ApplicationName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"deploymentconfig","arnFormats":["arn:${Partition}:codedeploy:${Region}:${Account}:deploymentconfig:${DeploymentConfigurationName}"],"conditionKeys":[]},{"name":"deploymentgroup","arnFormats":["arn:${Partition}:codedeploy:${Region}:${Account}:deploymentgroup:${ApplicationName}/${DeploymentGroupName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"instance","arnFormats":["arn:${Partition}:codedeploy:${Region}:${Account}:instance:${InstanceName}"],"conditionKeys":[]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters actions based on the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters actions based on tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters actions based on the presence of tag keys in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"codeguru-profiler","actions":{"AddNotificationChannels":{"conditionKeys":[],"resources":[{"name":"ProfilingGroup"}],"description":"Grants permission to add up to 2 topic ARNs of existing AWS SNS topics to publish notifications","accessLevel":"Write","resourceTypes":[{"name":"ProfilingGroup","required":true}]},"BatchGetFrameMetricData":{"conditionKeys":[],"resources":[{"name":"ProfilingGroup"}],"description":"Grants permission to get the frame metric data for a Profiling Group","accessLevel":"List","resourceTypes":[{"name":"ProfilingGroup","required":true}]},"ConfigureAgent":{"conditionKeys":[],"resources":[{"name":"ProfilingGroup"}],"description":"Grants permission to register with the orchestration service and retrieve profiling configuration information, used by agents","accessLevel":"Write","resourceTypes":[{"name":"ProfilingGroup","required":true}]},"CreateProfilingGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a profiling group","accessLevel":"Write","resourceTypes":[]},"DeleteProfilingGroup":{"conditionKeys":[],"resources":[{"name":"ProfilingGroup"}],"description":"Grants permission to delete a profiling group","accessLevel":"Write","resourceTypes":[{"name":"ProfilingGroup","required":true}]},"DescribeProfilingGroup":{"conditionKeys":[],"resources":[{"name":"ProfilingGroup"}],"description":"Grants permission to describe a profiling group","accessLevel":"Read","resourceTypes":[{"name":"ProfilingGroup","required":true}]},"GetFindingsReportAccountSummary":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a summary of recent recommendations for each profiling group in the account","accessLevel":"Read","resourceTypes":[]},"GetNotificationConfiguration":{"conditionKeys":[],"resources":[{"name":"ProfilingGroup"}],"description":"Grants permission to get the notification configuration","accessLevel":"Read","resourceTypes":[{"name":"ProfilingGroup","required":true}]},"GetPolicy":{"conditionKeys":[],"resources":[{"name":"ProfilingGroup"}],"description":"Grants permission to get the resource policy associated with the specified Profiling Group","accessLevel":"Read","resourceTypes":[{"name":"ProfilingGroup","required":true}]},"GetProfile":{"conditionKeys":[],"resources":[{"name":"ProfilingGroup"}],"description":"Grants permission to get aggregated profiles for a specific profiling group","accessLevel":"Read","resourceTypes":[{"name":"ProfilingGroup","required":true}]},"GetRecommendations":{"conditionKeys":[],"resources":[{"name":"ProfilingGroup"}],"description":"Grants permission to get recommendations","accessLevel":"Read","resourceTypes":[{"name":"ProfilingGroup","required":true}]},"ListFindingsReports":{"conditionKeys":[],"resources":[{"name":"ProfilingGroup"}],"description":"Grants permission to list the available recommendations reports for a specific profiling group","accessLevel":"List","resourceTypes":[{"name":"ProfilingGroup","required":true}]},"ListProfileTimes":{"conditionKeys":[],"resources":[{"name":"ProfilingGroup"}],"description":"Grants permission to list the start times of the available aggregated profiles for a specific profiling group","accessLevel":"List","resourceTypes":[{"name":"ProfilingGroup","required":true}]},"ListProfilingGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to list profiling groups in the account","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"ProfilingGroup"}],"description":"Grants permission to list tags for a Profiling Group","accessLevel":"List","resourceTypes":[{"name":"ProfilingGroup","required":true}]},"PostAgentProfile":{"conditionKeys":[],"resources":[{"name":"ProfilingGroup"}],"description":"Grants permission to submit a profile collected by an agent belonging to a specific profiling group for aggregation","accessLevel":"Write","resourceTypes":[{"name":"ProfilingGroup","required":true}]},"PutPermission":{"conditionKeys":[],"resources":[{"name":"ProfilingGroup"}],"description":"Grants permission to update the list of principals allowed for an action group in the resource policy associated with the specified Profiling Group","accessLevel":"Permissions management","resourceTypes":[{"name":"ProfilingGroup","required":true}]},"RemoveNotificationChannel":{"conditionKeys":[],"resources":[{"name":"ProfilingGroup"}],"description":"Grants permission to delete an already configured SNStopic arn from the notification configuration","accessLevel":"Write","resourceTypes":[{"name":"ProfilingGroup","required":true}]},"RemovePermission":{"conditionKeys":[],"resources":[{"name":"ProfilingGroup"}],"description":"Grants permission to remove the permission of specified Action Group from the resource policy associated with the specified Profiling Group","accessLevel":"Permissions management","resourceTypes":[{"name":"ProfilingGroup","required":true}]},"SubmitFeedback":{"conditionKeys":[],"resources":[{"name":"ProfilingGroup"}],"description":"Grants permission to submit user feedback for useful or non useful anomaly","accessLevel":"Write","resourceTypes":[{"name":"ProfilingGroup","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ProfilingGroup"}],"description":"Grants permission to add or overwrite tags to a Profiling Group","accessLevel":"Tagging","resourceTypes":[{"name":"ProfilingGroup","required":true}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"ProfilingGroup"}],"description":"Grants permission to remove tags from a Profiling Group","accessLevel":"Tagging","resourceTypes":[{"name":"ProfilingGroup","required":true}]},"UpdateProfilingGroup":{"conditionKeys":[],"resources":[{"name":"ProfilingGroup"}],"description":"Grants permission to update a specific profiling group","accessLevel":"Write","resourceTypes":[{"name":"ProfilingGroup","required":true}]}},"resources":[{"name":"ProfilingGroup","arnFormats":["arn:${Partition}:codeguru-profiler:${Region}:${Account}:profilingGroup/${ProfilingGroupName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"codeguru-reviewer","actions":{"AssociateRepository":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to associates a repository with Amazon CodeGuru Reviewer","accessLevel":"Write","resourceTypes":[],"dependentActions":["codecommit:GetRepository","codecommit:ListRepositories","codecommit:TagResource","codestar-connections:PassConnection","events:PutRule","events:PutTargets","iam:CreateServiceLinkedRole","s3:CreateBucket","s3:ListBucket","s3:PutBucketPolicy","s3:PutLifecycleConfiguration"]},"CreateCodeReview":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"association"}],"description":"Grants permission to create a code review","accessLevel":"Write","resourceTypes":[{"name":"association","required":true}],"dependentActions":["s3:GetObject"]},"CreateConnectionToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to perform webbased oauth handshake for 3rd party providers","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"DescribeCodeReview":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"association"}],"description":"Grants permission to describe a code review","accessLevel":"Read","resourceTypes":[{"name":"association","required":true}]},"DescribeRecommendationFeedback":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"association"}],"description":"Grants permission to describe a recommendation feedback on a code review","accessLevel":"Read","resourceTypes":[{"name":"association","required":true}]},"DescribeRepositoryAssociation":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"association"}],"description":"Grants permission to describe a repository association","accessLevel":"Read","resourceTypes":[{"name":"association","required":true}]},"DisassociateRepository":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"association"}],"description":"Grants permission to disassociate a repository with Amazon CodeGuru Reviewer","accessLevel":"Write","resourceTypes":[{"name":"association","required":true}],"dependentActions":["codecommit:UntagResource","events:DeleteRule","events:RemoveTargets"]},"GetMetricsData":{"conditionKeys":[],"resources":[],"description":"Grants permission to view pull request metrics in console","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"ListCodeReviews":{"conditionKeys":[],"resources":[],"description":"Grants permission to list summary of code reviews","accessLevel":"List","resourceTypes":[]},"ListRecommendationFeedback":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"association"}],"description":"Grants permission to list summary of recommendation feedback on a code review","accessLevel":"List","resourceTypes":[{"name":"association","required":true}]},"ListRecommendations":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"association"}],"description":"Grants permission to list summary of recommendations on a code review","accessLevel":"List","resourceTypes":[{"name":"association","required":true}]},"ListRepositoryAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list summary of repository associations","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"association"}],"description":"Grants permission to list the resource attached to a associated repository ARN","accessLevel":"List","resourceTypes":[{"name":"association","required":true}]},"ListThirdPartyRepositories":{"conditionKeys":[],"resources":[],"description":"Grants permission to list 3rd party providers repositories in console","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"PutRecommendationFeedback":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"association"}],"description":"Grants permission to put feedback for a recommendation on a code review","accessLevel":"Write","resourceTypes":[{"name":"association","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"association"}],"description":"Grants permission to attach resource tags to an associated repository ARN","accessLevel":"Tagging","resourceTypes":[{"name":"association","required":true}]},"UnTagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"association"}],"description":"Grants permission to disassociate resource tags from an associated repository ARN","accessLevel":"Tagging","resourceTypes":[{"name":"association","required":true}]}},"resources":[{"name":"association","arnFormats":["arn:${Partition}:codeguru-reviewer:${Region}:${Account}:association:${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"codereview","arnFormats":["arn:${Partition}:codeguru-reviewer:${Region}:${Account}:association:${ResourceId}:codereview:${CodeReviewId}"],"conditionKeys":[]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access based on the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters actions based on tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access based on the presence of tag keys in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"codeguru-security","actions":{"BatchGetFindings":{"conditionKeys":[],"resources":[{"name":"ScanName"}],"description":"Grants permission to batch retrieve specific findings generated by CodeGuru Security","accessLevel":"Read","resourceTypes":[{"name":"ScanName","required":true}]},"CreateScan":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ScanName"}],"description":"Grants permission to create a CodeGuru Security scan","accessLevel":"Write","resourceTypes":[{"name":"ScanName","required":true}]},"CreateUploadUrl":{"conditionKeys":[],"resources":[{"name":"ScanName"}],"description":"Grants permission to generate a presigned url for uploading code archives","accessLevel":"Write","resourceTypes":[{"name":"ScanName","required":true}]},"DeleteScansByCategory":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete all the scans and related findings from CodeGuru Security by given category","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"GetAccountConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the account level configurations","accessLevel":"Read","resourceTypes":[]},"GetFindings":{"conditionKeys":[],"resources":[{"name":"ScanName"}],"description":"Grants permission to retrieve findings for a scan generated by CodeGuru Security","accessLevel":"List","resourceTypes":[{"name":"ScanName","required":true}]},"GetMetricsSummary":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve AWS accout level metrics summary generated by CodeGuru Security","accessLevel":"Read","resourceTypes":[]},"GetScan":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ScanName"}],"description":"Grants permission to retrieve CodeGuru Security scan metadata","accessLevel":"Read","resourceTypes":[{"name":"ScanName","required":true}]},"ListFindings":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve findings generated by CodeGuru Security","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListFindingsMetrics":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of account level findings metrics within a date range","accessLevel":"List","resourceTypes":[]},"ListScans":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve list of CodeGuru Security scan metadata","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ScanName"}],"description":"Grants permission to retrieve a list of tags for a scan name ARN","accessLevel":"Read","resourceTypes":[{"name":"ScanName","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ScanName"}],"description":"Grants permission to add tags to a scan name ARN","accessLevel":"Tagging","resourceTypes":[{"name":"ScanName","required":true}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"ScanName"}],"description":"Grants permission to remove tags from a scan name ARN","accessLevel":"Tagging","resourceTypes":[{"name":"ScanName","required":true}]},"UpdateAccountConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the account level configurations","accessLevel":"Write","resourceTypes":[]}},"resources":[{"name":"ScanName","arnFormats":["arn:${Partition}:codeguru-security:${Region}:${Account}:scans/${ScanName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"codeguru","actions":{"GetCodeGuruFreeTrialSummary":{"conditionKeys":[],"resources":[],"description":"Grants permission to get free trial summary for the CodeGuru service which includes expiration date","accessLevel":"Read","resourceTypes":[],"permissionOnly":true}},"resources":[],"conditionKeys":{}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"codepipeline","actions":{"AcknowledgeJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to view information about a specified job and whether that job has been received by the job worker","accessLevel":"Write","resourceTypes":[]},"AcknowledgeThirdPartyJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to confirm that a job worker has received the specified job (partner actions only)","accessLevel":"Write","resourceTypes":[]},"CreateCustomActionType":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"actiontype"}],"description":"Grants permission to create a custom action that you can use in the pipelines associated with your AWS account","accessLevel":"Write","resourceTypes":[{"name":"actiontype","required":true}]},"CreatePipeline":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"pipeline"}],"description":"Grants permission to create a uniquely named pipeline","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]},"DeleteCustomActionType":{"conditionKeys":[],"resources":[{"name":"actiontype"}],"description":"Grants permission to delete a custom action","accessLevel":"Write","resourceTypes":[{"name":"actiontype","required":true}]},"DeletePipeline":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Grants permission to delete a specified pipeline","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]},"DeleteWebhook":{"conditionKeys":[],"resources":[{"name":"webhook"}],"description":"Grants permission to delete a specified webhook","accessLevel":"Write","resourceTypes":[{"name":"webhook","required":true}]},"DeregisterWebhookWithThirdParty":{"conditionKeys":[],"resources":[{"name":"webhook"}],"description":"Grants permission to remove the registration of a webhook with the third party specified in its configuration","accessLevel":"Write","resourceTypes":[{"name":"webhook","required":true}]},"DisableStageTransition":{"conditionKeys":[],"resources":[{"name":"stage"}],"description":"Grants permission to prevent revisions from transitioning to the next stage in a pipeline","accessLevel":"Write","resourceTypes":[{"name":"stage","required":true}]},"EnableStageTransition":{"conditionKeys":[],"resources":[{"name":"stage"}],"description":"Grants permission to allow revisions to transition to the next stage in a pipeline","accessLevel":"Write","resourceTypes":[{"name":"stage","required":true}]},"GetActionType":{"conditionKeys":[],"resources":[],"description":"Grants permission to view information about an action type","accessLevel":"Read","resourceTypes":[]},"GetJobDetails":{"conditionKeys":[],"resources":[],"description":"Grants permission to view information about a job (custom actions only)","accessLevel":"Read","resourceTypes":[]},"GetPipeline":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Grants permission to retrieve information about a pipeline structure","accessLevel":"Read","resourceTypes":[{"name":"pipeline","required":true}]},"GetPipelineExecution":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Grants permission to view information about an execution of a pipeline, including details about artifacts, the pipeline execution ID, and the name, version, and status of the pipeline","accessLevel":"Read","resourceTypes":[{"name":"pipeline","required":true}]},"GetPipelineState":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Grants permission to view information about the current state of the stages and actions of a pipeline","accessLevel":"Read","resourceTypes":[{"name":"pipeline","required":true}]},"GetThirdPartyJobDetails":{"conditionKeys":[],"resources":[],"description":"Grants permission to view the details of a job for a third-party action (partner actions only)","accessLevel":"Read","resourceTypes":[]},"ListActionExecutions":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Grants permission to list the action executions that have occurred in a pipeline","accessLevel":"Read","resourceTypes":[{"name":"pipeline","required":true}]},"ListActionTypes":{"conditionKeys":[],"resources":[],"description":"Grants permission to list a summary of all the action types available for pipelines in your account","accessLevel":"Read","resourceTypes":[]},"ListDeployActionExecutionTargets":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Grants permission to list the deployment details for deploy action executions that have occurred in a pipeline","accessLevel":"Read","resourceTypes":[{"name":"pipeline","required":true}]},"ListPipelineExecutions":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Grants permission to list a summary of the most recent executions for a pipeline","accessLevel":"List","resourceTypes":[{"name":"pipeline","required":true}]},"ListPipelines":{"conditionKeys":[],"resources":[],"description":"Grants permission to list a summary of all the pipelines associated with your AWS account","accessLevel":"List","resourceTypes":[]},"ListRuleExecutions":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Grants permission to list the rule executions that have occurred in a pipeline","accessLevel":"Read","resourceTypes":[{"name":"pipeline","required":true}]},"ListRuleTypes":{"conditionKeys":[],"resources":[],"description":"Grants permission to list a summary of all the rule types available for pipelines in your account","accessLevel":"Read","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"actiontype"},{"name":"pipeline"},{"name":"webhook"}],"description":"Grants permission to list tags for a CodePipeline resource","accessLevel":"Read","resourceTypes":[{"name":"actiontype","required":false},{"name":"pipeline","required":false},{"name":"webhook","required":false}]},"ListWebhooks":{"conditionKeys":[],"resources":[{"name":"webhook"}],"description":"Grants permission to list all of the webhooks associated with your AWS account","accessLevel":"List","resourceTypes":[{"name":"webhook","required":true}]},"OverrideStageCondition":{"conditionKeys":[],"resources":[{"name":"stage"}],"description":"Grants permission to resume the pipeline execution by overriding a condition in a stage","accessLevel":"Write","resourceTypes":[{"name":"stage","required":true}]},"PollForJobs":{"conditionKeys":[],"resources":[{"name":"actiontype"}],"description":"Grants permission to view information about any jobs for CodePipeline to act on","accessLevel":"Write","resourceTypes":[{"name":"actiontype","required":true}]},"PollForThirdPartyJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to determine whether there are any third-party jobs for a job worker to act on (partner actions only)","accessLevel":"Write","resourceTypes":[]},"PutActionRevision":{"conditionKeys":[],"resources":[{"name":"action"}],"description":"Grants permission to edit actions in a pipeline","accessLevel":"Write","resourceTypes":[{"name":"action","required":true}]},"PutApprovalResult":{"conditionKeys":[],"resources":[{"name":"action"}],"description":"Grants permission to provide a response (Approved or Rejected) to a manual approval request in CodePipeline","accessLevel":"Write","resourceTypes":[{"name":"action","required":true}]},"PutJobFailureResult":{"conditionKeys":[],"resources":[],"description":"Grants permission to represent the failure of a job as returned to the pipeline by a job worker (custom actions only)","accessLevel":"Write","resourceTypes":[]},"PutJobSuccessResult":{"conditionKeys":[],"resources":[],"description":"Grants permission to represent the success of a job as returned to the pipeline by a job worker (custom actions only)","accessLevel":"Write","resourceTypes":[]},"PutThirdPartyJobFailureResult":{"conditionKeys":[],"resources":[],"description":"Grants permission to represent the failure of a third-party job as returned to the pipeline by a job worker (partner actions only)","accessLevel":"Write","resourceTypes":[]},"PutThirdPartyJobSuccessResult":{"conditionKeys":[],"resources":[],"description":"Grants permission to represent the success of a third-party job as returned to the pipeline by a job worker (partner actions only)","accessLevel":"Write","resourceTypes":[]},"PutWebhook":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"pipeline"},{"name":"webhook"}],"description":"Grants permission to create or update a webhook","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true},{"name":"webhook","required":true}]},"RegisterWebhookWithThirdParty":{"conditionKeys":[],"resources":[{"name":"webhook"}],"description":"Grants permission to register a webhook with the third party specified in its configuration","accessLevel":"Write","resourceTypes":[{"name":"webhook","required":true}]},"RetryStageExecution":{"conditionKeys":[],"resources":[{"name":"stage"}],"description":"Grants permission to resume the pipeline execution by retrying the last failed actions in a stage","accessLevel":"Write","resourceTypes":[{"name":"stage","required":true}]},"RollbackStage":{"conditionKeys":[],"resources":[{"name":"stage"}],"description":"Grants permission to rollback the stage to a previous successful execution","accessLevel":"Write","resourceTypes":[{"name":"stage","required":true}]},"StartPipelineExecution":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Grants permission to run the most recent revision through the pipeline","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]},"StopPipelineExecution":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Grants permission to stop an in-progress pipeline execution","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"actiontype"},{"name":"pipeline"},{"name":"webhook"}],"description":"Grants permission to tag a CodePipeline resource","accessLevel":"Tagging","resourceTypes":[{"name":"actiontype","required":false},{"name":"pipeline","required":false},{"name":"webhook","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"actiontype"},{"name":"pipeline"},{"name":"webhook"}],"description":"Grants permission to remove a tag from a CodePipeline resource","accessLevel":"Tagging","resourceTypes":[{"name":"actiontype","required":false},{"name":"pipeline","required":false},{"name":"webhook","required":false}]},"UpdateActionType":{"conditionKeys":[],"resources":[{"name":"actiontype"}],"description":"Grants permission to update an action type","accessLevel":"Write","resourceTypes":[{"name":"actiontype","required":true}]},"UpdatePipeline":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Grants permission to update a pipeline with changes to the structure of the pipeline","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]}},"resources":[{"name":"action","arnFormats":["arn:${Partition}:codepipeline:${Region}:${Account}:${PipelineName}/${StageName}/${ActionName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"actiontype","arnFormats":["arn:${Partition}:codepipeline:${Region}:${Account}:actiontype:${Owner}/${Category}/${Provider}/${Version}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"pipeline","arnFormats":["arn:${Partition}:codepipeline:${Region}:${Account}:${PipelineName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"stage","arnFormats":["arn:${Partition}:codepipeline:${Region}:${Account}:${PipelineName}/${StageName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"webhook","arnFormats":["arn:${Partition}:codepipeline:${Region}:${Account}:webhook:${WebhookName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters actions based on the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters actions based on tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters actions based on the presence of tag keys in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"codestar-connections","actions":{"CreateConnection":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","codestar-connections:ProviderType"],"resources":[],"description":"Grants permission to create a Connection resource","accessLevel":"Write","resourceTypes":[]},"CreateHost":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","codestar-connections:ProviderType","codestar-connections:VpcId"],"resources":[],"description":"Grants permission to create a host resource","accessLevel":"Write","resourceTypes":[]},"CreateRepositoryLink":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Connection"}],"description":"Grants permission to create a repository link","accessLevel":"Write","resourceTypes":[{"name":"Connection","required":true}],"dependentActions":["codestar-connections:PassConnection","codestar-connections:UseConnection"]},"CreateSyncConfiguration":{"conditionKeys":["codestar-connections:Branch"],"resources":[{"name":"RepositoryLink"}],"description":"Grants permission to create a template sync config","accessLevel":"Write","resourceTypes":[{"name":"RepositoryLink","required":true}],"dependentActions":["codestar-connections:PassRepository","iam:PassRole"]},"DeleteConnection":{"conditionKeys":[],"resources":[{"name":"Connection"}],"description":"Grants permission to delete a Connection resource","accessLevel":"Write","resourceTypes":[{"name":"Connection","required":true}]},"DeleteHost":{"conditionKeys":[],"resources":[{"name":"Host"}],"description":"Grants permission to delete a host resource","accessLevel":"Write","resourceTypes":[{"name":"Host","required":true}]},"DeleteRepositoryLink":{"conditionKeys":[],"resources":[{"name":"RepositoryLink"}],"description":"Grants permission to delete a repository link","accessLevel":"Write","resourceTypes":[{"name":"RepositoryLink","required":true}]},"DeleteSyncConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a sync configuration","accessLevel":"Write","resourceTypes":[]},"GetConnection":{"conditionKeys":[],"resources":[{"name":"Connection"}],"description":"Grants permission to get details about a Connection resource","accessLevel":"Read","resourceTypes":[{"name":"Connection","required":true}]},"GetConnectionToken":{"conditionKeys":[],"resources":[{"name":"Connection"}],"description":"Grants permission to get a Connection token to call provider actions","accessLevel":"Read","resourceTypes":[{"name":"Connection","required":true}],"permissionOnly":true},"GetHost":{"conditionKeys":[],"resources":[{"name":"Host"}],"description":"Grants permission to get details about a host resource","accessLevel":"Read","resourceTypes":[{"name":"Host","required":true}]},"GetIndividualAccessToken":{"conditionKeys":["codestar-connections:ProviderType"],"resources":[],"description":"Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection","accessLevel":"Read","resourceTypes":[],"dependentActions":["codestar-connections:StartOAuthHandshake"],"permissionOnly":true},"GetInstallationUrl":{"conditionKeys":["codestar-connections:ProviderType"],"resources":[],"description":"Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetRepositoryLink":{"conditionKeys":[],"resources":[{"name":"RepositoryLink"}],"description":"Grants permission to describe a repository link","accessLevel":"Read","resourceTypes":[{"name":"RepositoryLink","required":true}]},"GetRepositorySyncStatus":{"conditionKeys":["codestar-connections:Branch"],"resources":[{"name":"RepositoryLink"}],"description":"Grants permission to get the latest sync status for a repository","accessLevel":"Read","resourceTypes":[{"name":"RepositoryLink","required":true}]},"GetResourceSyncStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the latest sync status for a resource (cfn stack or other resources)","accessLevel":"Read","resourceTypes":[]},"GetSyncBlockerSummary":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe service sync blockers on a resource (cfn stack or other resources)","accessLevel":"Read","resourceTypes":[]},"GetSyncConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe a sync configuration","accessLevel":"Read","resourceTypes":[]},"ListConnections":{"conditionKeys":["codestar-connections:ProviderTypeFilter"],"resources":[{"name":"Connection"}],"description":"Grants permission to list Connection resources","accessLevel":"List","resourceTypes":[{"name":"Connection","required":true}]},"ListHosts":{"conditionKeys":["codestar-connections:ProviderTypeFilter"],"resources":[],"description":"Grants permission to list host resources","accessLevel":"List","resourceTypes":[]},"ListInstallationTargets":{"conditionKeys":[],"resources":[],"description":"Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection","accessLevel":"List","resourceTypes":[],"dependentActions":["codestar-connections:GetIndividualAccessToken","codestar-connections:StartOAuthHandshake"],"permissionOnly":true},"ListRepositoryLinks":{"conditionKeys":[],"resources":[],"description":"Grants permission to list repository links","accessLevel":"List","resourceTypes":[]},"ListRepositorySyncDefinitions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list repository sync definitions","accessLevel":"List","resourceTypes":[]},"ListSyncConfigurations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list sync configurations for a repository link","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"Connection"},{"name":"Host"},{"name":"RepositoryLink"}],"description":"Grants permission to the set of key-value pairs that are used to manage the resource","accessLevel":"List","resourceTypes":[{"name":"Connection","required":false},{"name":"Host","required":false},{"name":"RepositoryLink","required":false}]},"PassConnection":{"conditionKeys":["codestar-connections:PassedToService"],"resources":[{"name":"Connection"}],"description":"Grants permission to pass a Connection resource to an AWS service that accepts a Connection ARN as input, such as codepipeline:CreatePipeline","accessLevel":"Read","resourceTypes":[{"name":"Connection","required":true}],"permissionOnly":true},"PassRepository":{"conditionKeys":["codestar-connections:PassedToService"],"resources":[{"name":"RepositoryLink"}],"description":"Grants permission to pass a repository link resource to an AWS service that accepts a RepositoryLinkId as input, such as codestar-connections:CreateSyncConfiguration","accessLevel":"Read","resourceTypes":[{"name":"RepositoryLink","required":true}],"permissionOnly":true},"RegisterAppCode":{"conditionKeys":["codestar-connections:HostArn"],"resources":[],"description":"Grants permission to associate a third party server, such as a GitHub Enterprise Server instance, with a Host","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"StartAppRegistrationHandshake":{"conditionKeys":["codestar-connections:HostArn"],"resources":[],"description":"Grants permission to associate a third party server, such as a GitHub Enterprise Server instance, with a Host","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"StartOAuthHandshake":{"conditionKeys":["codestar-connections:ProviderType"],"resources":[],"description":"Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Connection"},{"name":"Host"},{"name":"RepositoryLink"}],"description":"Grants permission to add or modify the tags of the given resource","accessLevel":"Tagging","resourceTypes":[{"name":"Connection","required":false},{"name":"Host","required":false},{"name":"RepositoryLink","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"Connection"},{"name":"Host"},{"name":"RepositoryLink"}],"description":"Grants permission to remove tags from an AWS resource","accessLevel":"Tagging","resourceTypes":[{"name":"Connection","required":false},{"name":"Host","required":false},{"name":"RepositoryLink","required":false}]},"UpdateConnectionInstallation":{"conditionKeys":["codestar-connections:InstallationId"],"resources":[{"name":"Connection"}],"description":"Grants permission to update a Connection resource with an installation of the CodeStar Connections App","accessLevel":"Write","resourceTypes":[{"name":"Connection","required":true}],"dependentActions":["codestar-connections:GetIndividualAccessToken","codestar-connections:GetInstallationUrl","codestar-connections:ListInstallationTargets","codestar-connections:StartOAuthHandshake"]},"UpdateHost":{"conditionKeys":["codestar-connections:VpcId"],"resources":[{"name":"Host"}],"description":"Grants permission to update a host resource","accessLevel":"Write","resourceTypes":[{"name":"Host","required":true}]},"UpdateRepositoryLink":{"conditionKeys":[],"resources":[{"name":"RepositoryLink"}],"description":"Grants permission to update a repository link","accessLevel":"Write","resourceTypes":[{"name":"RepositoryLink","required":true}]},"UpdateSyncBlocker":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a sync blocker for a resource (cfn stack or other resources)","accessLevel":"Write","resourceTypes":[]},"UpdateSyncConfiguration":{"conditionKeys":["codestar-connections:Branch"],"resources":[],"description":"Grants permission to update a sync configuration","accessLevel":"Write","resourceTypes":[]},"UseConnection":{"conditionKeys":["codestar-connections:BranchName","codestar-connections:FullRepositoryId","codestar-connections:OwnerId","codestar-connections:ProviderAction","codestar-connections:ProviderPermissionsRequired","codestar-connections:RepositoryName"],"resources":[{"name":"Connection"}],"description":"Grants permission to use a Connection resource to call provider actions","accessLevel":"Read","resourceTypes":[{"name":"Connection","required":true}],"permissionOnly":true}},"resources":[{"name":"Connection","arnFormats":["arn:${Partition}:codestar-connections:${Region}:${Account}:connection/${ConnectionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Host","arnFormats":["arn:${Partition}:codestar-connections:${Region}:${Account}:host/${HostId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"RepositoryLink","arnFormats":["arn:${Partition}:codestar-connections:${Region}:${Account}:repository-link/${RepositoryLinkId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"codestar-connections:Branch":{"types":["String"],"description":"Filters access by the branch name that is passed in the request"},"codestar-connections:BranchName":{"types":["String"],"description":"Filters access by the branch name that is passed in the request. Applies only to UseConnection requests for access to a specific repository branch"},"codestar-connections:FullRepositoryId":{"types":["String"],"description":"Filters access by the repository that is passed in the request. Applies only to UseConnection requests for access to a specific repository"},"codestar-connections:HostArn":{"types":["ARN"],"description":"Filters access by the host resource associated with the connection used in the request"},"codestar-connections:InstallationId":{"types":["String"],"description":"Filters access by the third-party ID (such as the Bitbucket App installation ID for CodeStar Connections) that is used to update a Connection. Allows you to restrict which third-party App installations can be used to make a Connection"},"codestar-connections:OwnerId":{"types":["String"],"description":"Filters access by the owner of the third-party repository. Applies only to UseConnection requests for access to repositories owned by a specific user"},"codestar-connections:PassedToService":{"types":["String"],"description":"Filters access by the service to which the principal is allowed to pass a Connection or RepositoryLink"},"codestar-connections:ProviderAction":{"types":["String"],"description":"Filters access by the provider action in a UseConnection request such as ListRepositories. See documentation for all valid values"},"codestar-connections:ProviderPermissionsRequired":{"types":["String"],"description":"Filters access by the write permissions of a provider action in a UseConnection request. Valid types include read_only and read_write"},"codestar-connections:ProviderType":{"types":["String"],"description":"Filters access by the type of third-party provider passed in the request"},"codestar-connections:ProviderTypeFilter":{"types":["String"],"description":"Filters access by the type of third-party provider used to filter results"},"codestar-connections:RepositoryName":{"types":["String"],"description":"Filters access by the repository name that is passed in the request. Applies only to UseConnection requests for access to repositories owned by a specific user"},"codestar-connections:VpcId":{"types":["String"],"description":"Filters access by the VpcId passed in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"codestar-notifications","actions":{"CreateNotificationRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","codestar-notifications:NotificationsForResource"],"resources":[{"name":"notificationrule"}],"description":"Grants permission to create a notification rule for a resource","accessLevel":"Write","resourceTypes":[{"name":"notificationrule","required":true}]},"DeleteNotificationRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","codestar-notifications:NotificationsForResource"],"resources":[{"name":"notificationrule"}],"description":"Grants permission to delete a notification rule for a resource","accessLevel":"Write","resourceTypes":[{"name":"notificationrule","required":true}]},"DeleteTarget":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to delete a target for a notification rule","accessLevel":"Write","resourceTypes":[]},"DescribeNotificationRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","codestar-notifications:NotificationsForResource"],"resources":[{"name":"notificationrule"}],"description":"Grants permission to get information about a notification rule","accessLevel":"Read","resourceTypes":[{"name":"notificationrule","required":true}]},"ListEventTypes":{"conditionKeys":[],"resources":[],"description":"Grants permission to list notifications event types","accessLevel":"List","resourceTypes":[]},"ListNotificationRules":{"conditionKeys":[],"resources":[],"description":"Grants permission to list notification rules in an AWS account","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"notificationrule"}],"description":"Grants permission to list the tags attached to a notification rule resource ARN","accessLevel":"List","resourceTypes":[{"name":"notificationrule","required":true}]},"ListTargets":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to list the notification rule targets for an AWS account","accessLevel":"List","resourceTypes":[]},"Subscribe":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","codestar-notifications:NotificationsForResource"],"resources":[{"name":"notificationrule"}],"description":"Grants permission to create an association between a notification rule and an Amazon SNS topic","accessLevel":"Write","resourceTypes":[{"name":"notificationrule","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"notificationrule"}],"description":"Grants permission to attach resource tags to a notification rule resource ARN","accessLevel":"Tagging","resourceTypes":[{"name":"notificationrule","required":true}]},"Unsubscribe":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","codestar-notifications:NotificationsForResource"],"resources":[{"name":"notificationrule"}],"description":"Grants permission to remove an association between a notification rule and an Amazon SNS topic","accessLevel":"Write","resourceTypes":[{"name":"notificationrule","required":true}]},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"notificationrule"}],"description":"Grants permission to disassociate resource tags from a notification rule resource ARN","accessLevel":"Tagging","resourceTypes":[{"name":"notificationrule","required":true}]},"UpdateNotificationRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","codestar-notifications:NotificationsForResource"],"resources":[{"name":"notificationrule"}],"description":"Grants permission to change a notification rule for a resource","accessLevel":"Write","resourceTypes":[{"name":"notificationrule","required":true}]}},"resources":[{"name":"notificationrule","arnFormats":["arn:${Partition}:codestar-notifications:${Region}:${Account}:notificationrule/${NotificationRuleId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters actions based on the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters actions based on tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters actions based on the presence of tag keys in the request"},"codestar-notifications:NotificationsForResource":{"types":["ARN"],"description":"Filters access based on the ARN of the resource for which notifications are configured"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"codestar","actions":{"AssociateTeamMember":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to add a user to the team for an AWS CodeStar project","accessLevel":"Permissions management","resourceTypes":[{"name":"project","required":true}]},"CreateProject":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a project with minimal structure, customer policies, and no resources","accessLevel":"Permissions management","resourceTypes":[]},"CreateUserProfile":{"conditionKeys":[],"resources":[{"name":"user"}],"description":"Grants permission to create a profile for a user that includes user preferences, display name, and email","accessLevel":"Write","resourceTypes":[{"name":"user","required":true}]},"DeleteExtendedAccess":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to extended delete APIs","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}],"permissionOnly":true},"DeleteProject":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to delete a project, including project resources. Does not delete users associated with the project, but does delete the IAM roles that allowed access to the project","accessLevel":"Permissions management","resourceTypes":[{"name":"project","required":true}]},"DeleteUserProfile":{"conditionKeys":[],"resources":[{"name":"user"}],"description":"Grants permission to delete a user profile in AWS CodeStar, including all personal preference data associated with that profile, such as display name and email address. It does not delete the history of that user, for example the history of commits made by that user","accessLevel":"Write","resourceTypes":[{"name":"user","required":true}]},"DescribeProject":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to describe a project and its resources","accessLevel":"Read","resourceTypes":[{"name":"project","required":true}]},"DescribeUserProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe a user in AWS CodeStar and the user attributes across all projects","accessLevel":"Read","resourceTypes":[]},"DisassociateTeamMember":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to remove a user from a project. Removing a user from a project also removes the IAM policies from that user that allowed access to the project and its resources","accessLevel":"Permissions management","resourceTypes":[{"name":"project","required":true}]},"GetExtendedAccess":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to extended read APIs","accessLevel":"Read","resourceTypes":[{"name":"project","required":true}],"permissionOnly":true},"ListProjects":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all projects in CodeStar associated with your AWS account","accessLevel":"List","resourceTypes":[]},"ListResources":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to list all resources associated with a project in CodeStar","accessLevel":"List","resourceTypes":[{"name":"project","required":true}]},"ListTagsForProject":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to list the tags associated with a project in CodeStar","accessLevel":"List","resourceTypes":[{"name":"project","required":true}]},"ListTeamMembers":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to list all team members associated with a project","accessLevel":"List","resourceTypes":[{"name":"project","required":true}]},"ListUserProfiles":{"conditionKeys":[],"resources":[],"description":"Grants permission to list user profiles in AWS CodeStar","accessLevel":"List","resourceTypes":[]},"PutExtendedAccess":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to extended write APIs","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}],"permissionOnly":true},"TagProject":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"project"}],"description":"Grants permission to add tags to a project in CodeStar","accessLevel":"Tagging","resourceTypes":[{"name":"project","required":true}]},"UntagProject":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"project"}],"description":"Grants permission to remove tags from a project in CodeStar","accessLevel":"Tagging","resourceTypes":[{"name":"project","required":true}]},"UpdateProject":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to update a project in CodeStar","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"UpdateTeamMember":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to update team member attributes within a CodeStar project","accessLevel":"Permissions management","resourceTypes":[{"name":"project","required":true}]},"UpdateUserProfile":{"conditionKeys":[],"resources":[{"name":"user"}],"description":"Grants permission to update a profile for a user that includes user preferences, display name, and email","accessLevel":"Write","resourceTypes":[{"name":"user","required":true}]},"VerifyServiceRole":{"conditionKeys":[],"resources":[],"description":"Grants permission to verify whether the AWS CodeStar service role exists in the customer's account","accessLevel":"List","resourceTypes":[]}},"resources":[{"name":"project","arnFormats":["arn:${Partition}:codestar:${Region}:${Account}:project/${ProjectId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"user","arnFormats":["arn:${Partition}:iam::${Account}:user/${AwsUserName}"],"conditionKeys":["iam:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by requests based on the allowed set of values for each of the tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by actions based on tag-value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by requests based on the presence of mandatory tags in the request"},"iam:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by actions based on tag-value associated with the resource"}}}
|