aws-iam-ls 0.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (522) hide show
  1. package/.direnv/bin/nix-direnv-reload +19 -0
  2. package/.direnv/flake-profile-a5d5b61aa8a61b7d9d765e1daf971a9a578f1cfa.rc +2156 -0
  3. package/.github/workflows/publish.yml +37 -0
  4. package/.github/workflows/test.yml +16 -0
  5. package/.vscodeignore +17 -0
  6. package/LICENSE +21 -0
  7. package/package.json +53 -0
  8. package/readme.md +25 -0
  9. package/src/data/condition-keys/global.json +362 -0
  10. package/src/data/servicereference/actions.json +1 -0
  11. package/src/data/servicereference/service-principals.json +1 -0
  12. package/src/data/servicereference/services/a2c.json +1 -0
  13. package/src/data/servicereference/services/a4b.json +1 -0
  14. package/src/data/servicereference/services/access-analyzer.json +1 -0
  15. package/src/data/servicereference/services/account.json +1 -0
  16. package/src/data/servicereference/services/acm-pca.json +1 -0
  17. package/src/data/servicereference/services/acm.json +1 -0
  18. package/src/data/servicereference/services/aco-automation.json +1 -0
  19. package/src/data/servicereference/services/action-recommendations.json +1 -0
  20. package/src/data/servicereference/services/activate.json +1 -0
  21. package/src/data/servicereference/services/aidevops.json +1 -0
  22. package/src/data/servicereference/services/aiops.json +1 -0
  23. package/src/data/servicereference/services/airflow-serverless.json +1 -0
  24. package/src/data/servicereference/services/airflow.json +1 -0
  25. package/src/data/servicereference/services/amplify.json +1 -0
  26. package/src/data/servicereference/services/amplifybackend.json +1 -0
  27. package/src/data/servicereference/services/amplifyuibuilder.json +1 -0
  28. package/src/data/servicereference/services/aoss.json +1 -0
  29. package/src/data/servicereference/services/apigateway.json +1 -0
  30. package/src/data/servicereference/services/app-integrations.json +1 -0
  31. package/src/data/servicereference/services/appconfig.json +1 -0
  32. package/src/data/servicereference/services/appfabric.json +1 -0
  33. package/src/data/servicereference/services/appflow.json +1 -0
  34. package/src/data/servicereference/services/application-autoscaling.json +1 -0
  35. package/src/data/servicereference/services/application-signals.json +1 -0
  36. package/src/data/servicereference/services/application-transformation.json +1 -0
  37. package/src/data/servicereference/services/applicationinsights.json +1 -0
  38. package/src/data/servicereference/services/appmesh-preview.json +1 -0
  39. package/src/data/servicereference/services/appmesh.json +1 -0
  40. package/src/data/servicereference/services/apprunner.json +1 -0
  41. package/src/data/servicereference/services/appstream.json +1 -0
  42. package/src/data/servicereference/services/appstudio.json +1 -0
  43. package/src/data/servicereference/services/appsync.json +1 -0
  44. package/src/data/servicereference/services/apptest.json +1 -0
  45. package/src/data/servicereference/services/aps.json +1 -0
  46. package/src/data/servicereference/services/arc-region-switch.json +1 -0
  47. package/src/data/servicereference/services/arc-zonal-shift.json +1 -0
  48. package/src/data/servicereference/services/arsenal.json +1 -0
  49. package/src/data/servicereference/services/artifact.json +1 -0
  50. package/src/data/servicereference/services/athena.json +1 -0
  51. package/src/data/servicereference/services/auditmanager.json +1 -0
  52. package/src/data/servicereference/services/autoscaling-plans.json +1 -0
  53. package/src/data/servicereference/services/autoscaling.json +1 -0
  54. package/src/data/servicereference/services/aws-marketplace-management.json +1 -0
  55. package/src/data/servicereference/services/aws-marketplace.json +1 -0
  56. package/src/data/servicereference/services/aws-mcp.json +1 -0
  57. package/src/data/servicereference/services/aws-portal.json +1 -0
  58. package/src/data/servicereference/services/awsconnector.json +1 -0
  59. package/src/data/servicereference/services/b2bi.json +1 -0
  60. package/src/data/servicereference/services/backup-gateway.json +1 -0
  61. package/src/data/servicereference/services/backup-search.json +1 -0
  62. package/src/data/servicereference/services/backup-storage.json +1 -0
  63. package/src/data/servicereference/services/backup.json +1 -0
  64. package/src/data/servicereference/services/batch.json +1 -0
  65. package/src/data/servicereference/services/bcm-dashboards.json +1 -0
  66. package/src/data/servicereference/services/bcm-data-exports.json +1 -0
  67. package/src/data/servicereference/services/bcm-pricing-calculator.json +1 -0
  68. package/src/data/servicereference/services/bcm-recommended-actions.json +1 -0
  69. package/src/data/servicereference/services/bedrock-agentcore.json +1 -0
  70. package/src/data/servicereference/services/bedrock-mantle.json +1 -0
  71. package/src/data/servicereference/services/bedrock.json +1 -0
  72. package/src/data/servicereference/services/billing.json +1 -0
  73. package/src/data/servicereference/services/billingconductor.json +1 -0
  74. package/src/data/servicereference/services/braket.json +1 -0
  75. package/src/data/servicereference/services/budgets.json +1 -0
  76. package/src/data/servicereference/services/bugbust.json +1 -0
  77. package/src/data/servicereference/services/cases.json +1 -0
  78. package/src/data/servicereference/services/cassandra.json +1 -0
  79. package/src/data/servicereference/services/ce.json +1 -0
  80. package/src/data/servicereference/services/chatbot.json +1 -0
  81. package/src/data/servicereference/services/chime.json +1 -0
  82. package/src/data/servicereference/services/cleanrooms-ml.json +1 -0
  83. package/src/data/servicereference/services/cleanrooms.json +1 -0
  84. package/src/data/servicereference/services/cloud9.json +1 -0
  85. package/src/data/servicereference/services/clouddirectory.json +1 -0
  86. package/src/data/servicereference/services/cloudformation.json +1 -0
  87. package/src/data/servicereference/services/cloudfront-keyvaluestore.json +1 -0
  88. package/src/data/servicereference/services/cloudfront.json +1 -0
  89. package/src/data/servicereference/services/cloudhsm.json +1 -0
  90. package/src/data/servicereference/services/cloudsearch.json +1 -0
  91. package/src/data/servicereference/services/cloudshell.json +1 -0
  92. package/src/data/servicereference/services/cloudtrail-data.json +1 -0
  93. package/src/data/servicereference/services/cloudtrail.json +1 -0
  94. package/src/data/servicereference/services/cloudwatch.json +1 -0
  95. package/src/data/servicereference/services/codeartifact.json +1 -0
  96. package/src/data/servicereference/services/codebuild.json +1 -0
  97. package/src/data/servicereference/services/codecatalyst.json +1 -0
  98. package/src/data/servicereference/services/codecommit.json +1 -0
  99. package/src/data/servicereference/services/codeconnections.json +1 -0
  100. package/src/data/servicereference/services/codedeploy-commands-secure.json +1 -0
  101. package/src/data/servicereference/services/codedeploy.json +1 -0
  102. package/src/data/servicereference/services/codeguru-profiler.json +1 -0
  103. package/src/data/servicereference/services/codeguru-reviewer.json +1 -0
  104. package/src/data/servicereference/services/codeguru-security.json +1 -0
  105. package/src/data/servicereference/services/codeguru.json +1 -0
  106. package/src/data/servicereference/services/codepipeline.json +1 -0
  107. package/src/data/servicereference/services/codestar-connections.json +1 -0
  108. package/src/data/servicereference/services/codestar-notifications.json +1 -0
  109. package/src/data/servicereference/services/codestar.json +1 -0
  110. package/src/data/servicereference/services/codewhisperer.json +1 -0
  111. package/src/data/servicereference/services/cognito-identity.json +1 -0
  112. package/src/data/servicereference/services/cognito-idp.json +1 -0
  113. package/src/data/servicereference/services/cognito-sync.json +1 -0
  114. package/src/data/servicereference/services/comprehend.json +1 -0
  115. package/src/data/servicereference/services/comprehendmedical.json +1 -0
  116. package/src/data/servicereference/services/compute-optimizer.json +1 -0
  117. package/src/data/servicereference/services/config.json +1 -0
  118. package/src/data/servicereference/services/connect-campaigns.json +1 -0
  119. package/src/data/servicereference/services/connect.json +1 -0
  120. package/src/data/servicereference/services/consoleapp.json +1 -0
  121. package/src/data/servicereference/services/consolidatedbilling.json +1 -0
  122. package/src/data/servicereference/services/controlcatalog.json +1 -0
  123. package/src/data/servicereference/services/controltower.json +1 -0
  124. package/src/data/servicereference/services/cost-optimization-hub.json +1 -0
  125. package/src/data/servicereference/services/cur.json +1 -0
  126. package/src/data/servicereference/services/customer-verification.json +1 -0
  127. package/src/data/servicereference/services/databrew.json +1 -0
  128. package/src/data/servicereference/services/dataexchange.json +1 -0
  129. package/src/data/servicereference/services/datapipeline.json +1 -0
  130. package/src/data/servicereference/services/datasync.json +1 -0
  131. package/src/data/servicereference/services/datazone.json +1 -0
  132. package/src/data/servicereference/services/dax.json +1 -0
  133. package/src/data/servicereference/services/dbqms.json +1 -0
  134. package/src/data/servicereference/services/deadline.json +1 -0
  135. package/src/data/servicereference/services/detective.json +1 -0
  136. package/src/data/servicereference/services/devicefarm.json +1 -0
  137. package/src/data/servicereference/services/devops-guru.json +1 -0
  138. package/src/data/servicereference/services/directconnect.json +1 -0
  139. package/src/data/servicereference/services/discovery.json +1 -0
  140. package/src/data/servicereference/services/dlm.json +1 -0
  141. package/src/data/servicereference/services/dms.json +1 -0
  142. package/src/data/servicereference/services/docdb-elastic.json +1 -0
  143. package/src/data/servicereference/services/drs.json +1 -0
  144. package/src/data/servicereference/services/ds-data.json +1 -0
  145. package/src/data/servicereference/services/ds.json +1 -0
  146. package/src/data/servicereference/services/dsql.json +1 -0
  147. package/src/data/servicereference/services/dynamodb.json +1 -0
  148. package/src/data/servicereference/services/ebs.json +1 -0
  149. package/src/data/servicereference/services/ec2-instance-connect.json +1 -0
  150. package/src/data/servicereference/services/ec2.json +1 -0
  151. package/src/data/servicereference/services/ec2messages.json +1 -0
  152. package/src/data/servicereference/services/ecr-public.json +1 -0
  153. package/src/data/servicereference/services/ecr.json +1 -0
  154. package/src/data/servicereference/services/ecs-mcp.json +1 -0
  155. package/src/data/servicereference/services/ecs.json +1 -0
  156. package/src/data/servicereference/services/eks-auth.json +1 -0
  157. package/src/data/servicereference/services/eks-mcp.json +1 -0
  158. package/src/data/servicereference/services/eks.json +1 -0
  159. package/src/data/servicereference/services/elasticache.json +1 -0
  160. package/src/data/servicereference/services/elasticbeanstalk.json +1 -0
  161. package/src/data/servicereference/services/elasticfilesystem.json +1 -0
  162. package/src/data/servicereference/services/elasticloadbalancing.json +1 -0
  163. package/src/data/servicereference/services/elasticmapreduce.json +1 -0
  164. package/src/data/servicereference/services/elastictranscoder.json +1 -0
  165. package/src/data/servicereference/services/elemental-activations.json +1 -0
  166. package/src/data/servicereference/services/elemental-appliances-software.json +1 -0
  167. package/src/data/servicereference/services/elemental-inference.json +1 -0
  168. package/src/data/servicereference/services/elemental-support-cases.json +1 -0
  169. package/src/data/servicereference/services/elemental-support-content.json +1 -0
  170. package/src/data/servicereference/services/emr-containers.json +1 -0
  171. package/src/data/servicereference/services/emr-serverless.json +1 -0
  172. package/src/data/servicereference/services/entityresolution.json +1 -0
  173. package/src/data/servicereference/services/es.json +1 -0
  174. package/src/data/servicereference/services/events.json +1 -0
  175. package/src/data/servicereference/services/evidently.json +1 -0
  176. package/src/data/servicereference/services/evs.json +1 -0
  177. package/src/data/servicereference/services/execute-api.json +1 -0
  178. package/src/data/servicereference/services/finspace-api.json +1 -0
  179. package/src/data/servicereference/services/finspace.json +1 -0
  180. package/src/data/servicereference/services/firehose.json +1 -0
  181. package/src/data/servicereference/services/fis.json +1 -0
  182. package/src/data/servicereference/services/fms.json +1 -0
  183. package/src/data/servicereference/services/forecast.json +1 -0
  184. package/src/data/servicereference/services/frauddetector.json +1 -0
  185. package/src/data/servicereference/services/freertos.json +1 -0
  186. package/src/data/servicereference/services/freetier.json +1 -0
  187. package/src/data/servicereference/services/fsx.json +1 -0
  188. package/src/data/servicereference/services/gamelift.json +1 -0
  189. package/src/data/servicereference/services/gameliftstreams.json +1 -0
  190. package/src/data/servicereference/services/geo-maps.json +1 -0
  191. package/src/data/servicereference/services/geo-places.json +1 -0
  192. package/src/data/servicereference/services/geo-routes.json +1 -0
  193. package/src/data/servicereference/services/geo.json +1 -0
  194. package/src/data/servicereference/services/glacier.json +1 -0
  195. package/src/data/servicereference/services/globalaccelerator.json +1 -0
  196. package/src/data/servicereference/services/glue.json +1 -0
  197. package/src/data/servicereference/services/grafana.json +1 -0
  198. package/src/data/servicereference/services/greengrass.json +1 -0
  199. package/src/data/servicereference/services/groundstation.json +1 -0
  200. package/src/data/servicereference/services/groundtruthlabeling.json +1 -0
  201. package/src/data/servicereference/services/guardduty.json +1 -0
  202. package/src/data/servicereference/services/health-agent.json +1 -0
  203. package/src/data/servicereference/services/health.json +1 -0
  204. package/src/data/servicereference/services/healthlake.json +1 -0
  205. package/src/data/servicereference/services/honeycode.json +1 -0
  206. package/src/data/servicereference/services/iam.json +1 -0
  207. package/src/data/servicereference/services/identity-sync.json +1 -0
  208. package/src/data/servicereference/services/identitystore-auth.json +1 -0
  209. package/src/data/servicereference/services/identitystore.json +1 -0
  210. package/src/data/servicereference/services/imagebuilder.json +1 -0
  211. package/src/data/servicereference/services/importexport.json +1 -0
  212. package/src/data/servicereference/services/inspector-scan.json +1 -0
  213. package/src/data/servicereference/services/inspector.json +1 -0
  214. package/src/data/servicereference/services/inspector2-telemetry.json +1 -0
  215. package/src/data/servicereference/services/inspector2.json +1 -0
  216. package/src/data/servicereference/services/interconnect.json +1 -0
  217. package/src/data/servicereference/services/internetmonitor.json +1 -0
  218. package/src/data/servicereference/services/invoicing.json +1 -0
  219. package/src/data/servicereference/services/iot-device-tester.json +1 -0
  220. package/src/data/servicereference/services/iot.json +1 -0
  221. package/src/data/servicereference/services/iotanalytics.json +1 -0
  222. package/src/data/servicereference/services/iotdeviceadvisor.json +1 -0
  223. package/src/data/servicereference/services/iotevents.json +1 -0
  224. package/src/data/servicereference/services/iotfleethub.json +1 -0
  225. package/src/data/servicereference/services/iotfleetwise.json +1 -0
  226. package/src/data/servicereference/services/iotjobsdata.json +1 -0
  227. package/src/data/servicereference/services/iotmanagedintegrations.json +1 -0
  228. package/src/data/servicereference/services/iotsitewise.json +1 -0
  229. package/src/data/servicereference/services/iottwinmaker.json +1 -0
  230. package/src/data/servicereference/services/iotwireless.json +1 -0
  231. package/src/data/servicereference/services/iq-permission.json +1 -0
  232. package/src/data/servicereference/services/iq.json +1 -0
  233. package/src/data/servicereference/services/ivs.json +1 -0
  234. package/src/data/servicereference/services/ivschat.json +1 -0
  235. package/src/data/servicereference/services/kafka-cluster.json +1 -0
  236. package/src/data/servicereference/services/kafka.json +1 -0
  237. package/src/data/servicereference/services/kafkaconnect.json +1 -0
  238. package/src/data/servicereference/services/kendra-ranking.json +1 -0
  239. package/src/data/servicereference/services/kendra.json +1 -0
  240. package/src/data/servicereference/services/kinesis.json +1 -0
  241. package/src/data/servicereference/services/kinesisanalytics.json +1 -0
  242. package/src/data/servicereference/services/kinesisvideo.json +1 -0
  243. package/src/data/servicereference/services/kms.json +1 -0
  244. package/src/data/servicereference/services/lakeformation.json +1 -0
  245. package/src/data/servicereference/services/lambda.json +1 -0
  246. package/src/data/servicereference/services/launchwizard.json +1 -0
  247. package/src/data/servicereference/services/lex.json +1 -0
  248. package/src/data/servicereference/services/license-manager-linux-subscriptions.json +1 -0
  249. package/src/data/servicereference/services/license-manager-user-subscriptions.json +1 -0
  250. package/src/data/servicereference/services/license-manager.json +1 -0
  251. package/src/data/servicereference/services/lightsail.json +1 -0
  252. package/src/data/servicereference/services/logs.json +1 -0
  253. package/src/data/servicereference/services/lookoutequipment.json +1 -0
  254. package/src/data/servicereference/services/lookoutmetrics.json +1 -0
  255. package/src/data/servicereference/services/lookoutvision.json +1 -0
  256. package/src/data/servicereference/services/m2.json +1 -0
  257. package/src/data/servicereference/services/machinelearning.json +1 -0
  258. package/src/data/servicereference/services/macie2.json +1 -0
  259. package/src/data/servicereference/services/managedblockchain-query.json +1 -0
  260. package/src/data/servicereference/services/managedblockchain.json +1 -0
  261. package/src/data/servicereference/services/mapcredits.json +1 -0
  262. package/src/data/servicereference/services/marketplacecommerceanalytics.json +1 -0
  263. package/src/data/servicereference/services/mechanicalturk.json +1 -0
  264. package/src/data/servicereference/services/mediaconnect.json +1 -0
  265. package/src/data/servicereference/services/mediaconvert.json +1 -0
  266. package/src/data/servicereference/services/mediaimport.json +1 -0
  267. package/src/data/servicereference/services/medialive.json +1 -0
  268. package/src/data/servicereference/services/mediapackage-vod.json +1 -0
  269. package/src/data/servicereference/services/mediapackage.json +1 -0
  270. package/src/data/servicereference/services/mediapackagev2.json +1 -0
  271. package/src/data/servicereference/services/mediastore.json +1 -0
  272. package/src/data/servicereference/services/mediatailor.json +1 -0
  273. package/src/data/servicereference/services/medical-imaging.json +1 -0
  274. package/src/data/servicereference/services/memorydb.json +1 -0
  275. package/src/data/servicereference/services/mgh.json +1 -0
  276. package/src/data/servicereference/services/mgn.json +1 -0
  277. package/src/data/servicereference/services/migrationhub-orchestrator.json +1 -0
  278. package/src/data/servicereference/services/migrationhub-strategy.json +1 -0
  279. package/src/data/servicereference/services/mobileanalytics.json +1 -0
  280. package/src/data/servicereference/services/mobiletargeting.json +1 -0
  281. package/src/data/servicereference/services/monitron.json +1 -0
  282. package/src/data/servicereference/services/mpa.json +1 -0
  283. package/src/data/servicereference/services/mq.json +1 -0
  284. package/src/data/servicereference/services/neptune-db.json +1 -0
  285. package/src/data/servicereference/services/neptune-graph.json +1 -0
  286. package/src/data/servicereference/services/network-firewall.json +1 -0
  287. package/src/data/servicereference/services/network-security-director.json +1 -0
  288. package/src/data/servicereference/services/networkflowmonitor.json +1 -0
  289. package/src/data/servicereference/services/networkmanager-chat.json +1 -0
  290. package/src/data/servicereference/services/networkmanager.json +1 -0
  291. package/src/data/servicereference/services/networkmonitor.json +1 -0
  292. package/src/data/servicereference/services/nimble.json +1 -0
  293. package/src/data/servicereference/services/notifications-contacts.json +1 -0
  294. package/src/data/servicereference/services/notifications.json +1 -0
  295. package/src/data/servicereference/services/nova-act.json +1 -0
  296. package/src/data/servicereference/services/oam.json +1 -0
  297. package/src/data/servicereference/services/observabilityadmin.json +1 -0
  298. package/src/data/servicereference/services/odb.json +1 -0
  299. package/src/data/servicereference/services/omics.json +1 -0
  300. package/src/data/servicereference/services/one.json +1 -0
  301. package/src/data/servicereference/services/opensearch.json +1 -0
  302. package/src/data/servicereference/services/opsworks-cm.json +1 -0
  303. package/src/data/servicereference/services/opsworks.json +1 -0
  304. package/src/data/servicereference/services/organizations.json +1 -0
  305. package/src/data/servicereference/services/osis.json +1 -0
  306. package/src/data/servicereference/services/outposts.json +1 -0
  307. package/src/data/servicereference/services/panorama.json +1 -0
  308. package/src/data/servicereference/services/partnercentral-account-management.json +1 -0
  309. package/src/data/servicereference/services/partnercentral.json +1 -0
  310. package/src/data/servicereference/services/payment-cryptography.json +1 -0
  311. package/src/data/servicereference/services/payments.json +1 -0
  312. package/src/data/servicereference/services/pca-connector-ad.json +1 -0
  313. package/src/data/servicereference/services/pca-connector-scep.json +1 -0
  314. package/src/data/servicereference/services/pcs.json +1 -0
  315. package/src/data/servicereference/services/personalize.json +1 -0
  316. package/src/data/servicereference/services/pi.json +1 -0
  317. package/src/data/servicereference/services/pipes.json +1 -0
  318. package/src/data/servicereference/services/polly.json +1 -0
  319. package/src/data/servicereference/services/pricing.json +1 -0
  320. package/src/data/servicereference/services/pricingplanmanager.json +1 -0
  321. package/src/data/servicereference/services/private-networks.json +1 -0
  322. package/src/data/servicereference/services/profile.json +1 -0
  323. package/src/data/servicereference/services/proton.json +1 -0
  324. package/src/data/servicereference/services/purchase-orders.json +1 -0
  325. package/src/data/servicereference/services/q.json +1 -0
  326. package/src/data/servicereference/services/qapps.json +1 -0
  327. package/src/data/servicereference/services/qbusiness.json +1 -0
  328. package/src/data/servicereference/services/qdeveloper.json +1 -0
  329. package/src/data/servicereference/services/qldb.json +1 -0
  330. package/src/data/servicereference/services/quicksight.json +1 -0
  331. package/src/data/servicereference/services/ram.json +1 -0
  332. package/src/data/servicereference/services/rbin.json +1 -0
  333. package/src/data/servicereference/services/rds-data.json +1 -0
  334. package/src/data/servicereference/services/rds-db.json +1 -0
  335. package/src/data/servicereference/services/rds.json +1 -0
  336. package/src/data/servicereference/services/redshift-data.json +1 -0
  337. package/src/data/servicereference/services/redshift-serverless.json +1 -0
  338. package/src/data/servicereference/services/redshift.json +1 -0
  339. package/src/data/servicereference/services/refactor-spaces.json +1 -0
  340. package/src/data/servicereference/services/rekognition.json +1 -0
  341. package/src/data/servicereference/services/repostspace.json +1 -0
  342. package/src/data/servicereference/services/resiliencehub.json +1 -0
  343. package/src/data/servicereference/services/resource-explorer-2.json +1 -0
  344. package/src/data/servicereference/services/resource-explorer.json +1 -0
  345. package/src/data/servicereference/services/resource-groups.json +1 -0
  346. package/src/data/servicereference/services/rhelkb.json +1 -0
  347. package/src/data/servicereference/services/robomaker.json +1 -0
  348. package/src/data/servicereference/services/rolesanywhere.json +1 -0
  349. package/src/data/servicereference/services/route53-recovery-cluster.json +1 -0
  350. package/src/data/servicereference/services/route53-recovery-control-config.json +1 -0
  351. package/src/data/servicereference/services/route53-recovery-readiness.json +1 -0
  352. package/src/data/servicereference/services/route53.json +1 -0
  353. package/src/data/servicereference/services/route53domains.json +1 -0
  354. package/src/data/servicereference/services/route53globalresolver.json +1 -0
  355. package/src/data/servicereference/services/route53profiles.json +1 -0
  356. package/src/data/servicereference/services/route53resolver.json +1 -0
  357. package/src/data/servicereference/services/rtbfabric.json +1 -0
  358. package/src/data/servicereference/services/rum.json +1 -0
  359. package/src/data/servicereference/services/s3-object-lambda.json +1 -0
  360. package/src/data/servicereference/services/s3-outposts.json +1 -0
  361. package/src/data/servicereference/services/s3.json +1 -0
  362. package/src/data/servicereference/services/s3express.json +1 -0
  363. package/src/data/servicereference/services/s3tables.json +1 -0
  364. package/src/data/servicereference/services/s3vectors.json +1 -0
  365. package/src/data/servicereference/services/sagemaker-data-science-assistant.json +1 -0
  366. package/src/data/servicereference/services/sagemaker-geospatial.json +1 -0
  367. package/src/data/servicereference/services/sagemaker-mlflow.json +1 -0
  368. package/src/data/servicereference/services/sagemaker-unified-studio-mcp.json +1 -0
  369. package/src/data/servicereference/services/sagemaker.json +1 -0
  370. package/src/data/servicereference/services/savingsplans.json +1 -0
  371. package/src/data/servicereference/services/scheduler.json +1 -0
  372. package/src/data/servicereference/services/schemas.json +1 -0
  373. package/src/data/servicereference/services/scn.json +1 -0
  374. package/src/data/servicereference/services/sdb.json +1 -0
  375. package/src/data/servicereference/services/secretsmanager.json +1 -0
  376. package/src/data/servicereference/services/security-ir.json +1 -0
  377. package/src/data/servicereference/services/securityagent.json +1 -0
  378. package/src/data/servicereference/services/securityhub.json +1 -0
  379. package/src/data/servicereference/services/securitylake.json +1 -0
  380. package/src/data/servicereference/services/serverlessrepo.json +1 -0
  381. package/src/data/servicereference/services/servicecatalog.json +1 -0
  382. package/src/data/servicereference/services/servicediscovery.json +1 -0
  383. package/src/data/servicereference/services/serviceextract.json +1 -0
  384. package/src/data/servicereference/services/servicequotas.json +1 -0
  385. package/src/data/servicereference/services/ses.json +1 -0
  386. package/src/data/servicereference/services/shield.json +1 -0
  387. package/src/data/servicereference/services/signer.json +1 -0
  388. package/src/data/servicereference/services/signin.json +1 -0
  389. package/src/data/servicereference/services/simspaceweaver.json +1 -0
  390. package/src/data/servicereference/services/sms-voice.json +1 -0
  391. package/src/data/servicereference/services/sms.json +1 -0
  392. package/src/data/servicereference/services/snow-device-management.json +1 -0
  393. package/src/data/servicereference/services/snowball.json +1 -0
  394. package/src/data/servicereference/services/sns.json +1 -0
  395. package/src/data/servicereference/services/social-messaging.json +1 -0
  396. package/src/data/servicereference/services/sqlworkbench.json +1 -0
  397. package/src/data/servicereference/services/sqs.json +1 -0
  398. package/src/data/servicereference/services/ssm-contacts.json +1 -0
  399. package/src/data/servicereference/services/ssm-guiconnect.json +1 -0
  400. package/src/data/servicereference/services/ssm-incidents.json +1 -0
  401. package/src/data/servicereference/services/ssm-quicksetup.json +1 -0
  402. package/src/data/servicereference/services/ssm-sap.json +1 -0
  403. package/src/data/servicereference/services/ssm.json +1 -0
  404. package/src/data/servicereference/services/ssmmessages.json +1 -0
  405. package/src/data/servicereference/services/sso-directory.json +1 -0
  406. package/src/data/servicereference/services/sso-oauth.json +1 -0
  407. package/src/data/servicereference/services/sso.json +1 -0
  408. package/src/data/servicereference/services/states.json +1 -0
  409. package/src/data/servicereference/services/storagegateway.json +1 -0
  410. package/src/data/servicereference/services/sts.json +1 -0
  411. package/src/data/servicereference/services/support-console.json +1 -0
  412. package/src/data/servicereference/services/support.json +1 -0
  413. package/src/data/servicereference/services/supportapp.json +1 -0
  414. package/src/data/servicereference/services/supportplans.json +1 -0
  415. package/src/data/servicereference/services/sustainability.json +1 -0
  416. package/src/data/servicereference/services/swf.json +1 -0
  417. package/src/data/servicereference/services/synthetics.json +1 -0
  418. package/src/data/servicereference/services/tag.json +1 -0
  419. package/src/data/servicereference/services/tax.json +1 -0
  420. package/src/data/servicereference/services/textract.json +1 -0
  421. package/src/data/servicereference/services/thinclient.json +1 -0
  422. package/src/data/servicereference/services/timestream-influxdb.json +1 -0
  423. package/src/data/servicereference/services/timestream.json +1 -0
  424. package/src/data/servicereference/services/tiros.json +1 -0
  425. package/src/data/servicereference/services/tnb.json +1 -0
  426. package/src/data/servicereference/services/transcribe.json +1 -0
  427. package/src/data/servicereference/services/transfer.json +1 -0
  428. package/src/data/servicereference/services/transform-custom.json +1 -0
  429. package/src/data/servicereference/services/transform.json +1 -0
  430. package/src/data/servicereference/services/translate.json +1 -0
  431. package/src/data/servicereference/services/trustedadvisor.json +1 -0
  432. package/src/data/servicereference/services/ts.json +1 -0
  433. package/src/data/servicereference/services/user-subscriptions.json +1 -0
  434. package/src/data/servicereference/services/uxc.json +1 -0
  435. package/src/data/servicereference/services/vendor-insights.json +1 -0
  436. package/src/data/servicereference/services/verified-access.json +1 -0
  437. package/src/data/servicereference/services/verifiedpermissions.json +1 -0
  438. package/src/data/servicereference/services/voiceid.json +1 -0
  439. package/src/data/servicereference/services/vpc-lattice-svcs.json +1 -0
  440. package/src/data/servicereference/services/vpc-lattice.json +1 -0
  441. package/src/data/servicereference/services/vpce.json +1 -0
  442. package/src/data/servicereference/services/waf-regional.json +1 -0
  443. package/src/data/servicereference/services/waf.json +1 -0
  444. package/src/data/servicereference/services/wafv2.json +1 -0
  445. package/src/data/servicereference/services/wam.json +1 -0
  446. package/src/data/servicereference/services/wellarchitected.json +1 -0
  447. package/src/data/servicereference/services/wickr.json +1 -0
  448. package/src/data/servicereference/services/wisdom.json +1 -0
  449. package/src/data/servicereference/services/workdocs.json +1 -0
  450. package/src/data/servicereference/services/worklink.json +1 -0
  451. package/src/data/servicereference/services/workmail.json +1 -0
  452. package/src/data/servicereference/services/workmailmessageflow.json +1 -0
  453. package/src/data/servicereference/services/workspaces-instances.json +1 -0
  454. package/src/data/servicereference/services/workspaces-web.json +1 -0
  455. package/src/data/servicereference/services/workspaces.json +1 -0
  456. package/src/data/servicereference/services/xray.json +1 -0
  457. package/src/data/servicereference/services.json +1 -0
  458. package/src/extension.d.ts +3 -0
  459. package/src/extension.js +23 -0
  460. package/src/grammars/tree-sitter-hcl.wasm +0 -0
  461. package/src/grammars/tree-sitter-json.wasm +0 -0
  462. package/src/grammars/tree-sitter-yaml.wasm +0 -0
  463. package/src/handlers/completion/action-value.d.ts +4 -0
  464. package/src/handlers/completion/action-value.js +46 -0
  465. package/src/handlers/completion/condition-block.d.ts +4 -0
  466. package/src/handlers/completion/condition-block.js +31 -0
  467. package/src/handlers/completion/condition-key.d.ts +4 -0
  468. package/src/handlers/completion/condition-key.js +80 -0
  469. package/src/handlers/completion/condition-operator.d.ts +4 -0
  470. package/src/handlers/completion/condition-operator.js +22 -0
  471. package/src/handlers/completion/effect-value.d.ts +4 -0
  472. package/src/handlers/completion/effect-value.js +14 -0
  473. package/src/handlers/completion/index.d.ts +14 -0
  474. package/src/handlers/completion/index.js +96 -0
  475. package/src/handlers/completion/principal-block-identifier.d.ts +4 -0
  476. package/src/handlers/completion/principal-block-identifier.js +4 -0
  477. package/src/handlers/completion/principal-block-type.d.ts +4 -0
  478. package/src/handlers/completion/principal-block-type.js +24 -0
  479. package/src/handlers/completion/principal-block.d.ts +4 -0
  480. package/src/handlers/completion/principal-block.js +28 -0
  481. package/src/handlers/completion/principal-identifier-completions.d.ts +2 -0
  482. package/src/handlers/completion/principal-identifier-completions.js +131 -0
  483. package/src/handlers/completion/principal-type.d.ts +4 -0
  484. package/src/handlers/completion/principal-type.js +23 -0
  485. package/src/handlers/completion/principal-typed-value.d.ts +4 -0
  486. package/src/handlers/completion/principal-typed-value.js +4 -0
  487. package/src/handlers/completion/principal-value.d.ts +4 -0
  488. package/src/handlers/completion/principal-value.js +18 -0
  489. package/src/handlers/completion/resource-value.d.ts +4 -0
  490. package/src/handlers/completion/resource-value.js +144 -0
  491. package/src/handlers/completion/statement-block.d.ts +10 -0
  492. package/src/handlers/completion/statement-block.js +51 -0
  493. package/src/handlers/completion/statement-key.d.ts +4 -0
  494. package/src/handlers/completion/statement-key.js +41 -0
  495. package/src/lib/iam-policy/condition-operators.d.ts +317 -0
  496. package/src/lib/iam-policy/condition-operators.js +129 -0
  497. package/src/lib/iam-policy/location.d.ts +71 -0
  498. package/src/lib/iam-policy/location.js +82 -0
  499. package/src/lib/iam-policy/partitions.d.ts +116 -0
  500. package/src/lib/iam-policy/partitions.js +51 -0
  501. package/src/lib/iam-policy/principals.d.ts +21 -0
  502. package/src/lib/iam-policy/principals.js +37 -0
  503. package/src/lib/iam-policy/reference/services.d.ts +22 -0
  504. package/src/lib/iam-policy/reference/services.js +99 -0
  505. package/src/lib/iam-policy/reference/types.d.ts +71 -0
  506. package/src/lib/iam-policy/reference/types.js +1 -0
  507. package/src/lib/iam-policy/statement-keys.d.ts +8 -0
  508. package/src/lib/iam-policy/statement-keys.js +159 -0
  509. package/src/lib/iam-policy/wildcard.d.ts +2 -0
  510. package/src/lib/iam-policy/wildcard.js +14 -0
  511. package/src/lib/treesitter/base.d.ts +35 -0
  512. package/src/lib/treesitter/base.js +50 -0
  513. package/src/lib/treesitter/hcl.d.ts +9 -0
  514. package/src/lib/treesitter/hcl.js +888 -0
  515. package/src/lib/treesitter/json.d.ts +9 -0
  516. package/src/lib/treesitter/json.js +376 -0
  517. package/src/lib/treesitter/manager.d.ts +9 -0
  518. package/src/lib/treesitter/manager.js +66 -0
  519. package/src/lib/treesitter/yaml.d.ts +9 -0
  520. package/src/lib/treesitter/yaml.js +878 -0
  521. package/src/server.d.ts +2 -0
  522. package/src/server.js +26 -0
@@ -0,0 +1 @@
1
+ {"name":"codewhisperer","actions":{"AllowVendedLogDeliveryForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"customization"}],"description":"Grants permission to configure vended log delivery for CodeWhisperer customization resource","accessLevel":"Permissions management","resourceTypes":[{"name":"customization","required":true}],"permissionOnly":true},"AssociateCustomizationPermission":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"customization"}],"description":"Grants permission to invoke AssociateCustomizationPermission on CodeWhisperer","accessLevel":"Write","resourceTypes":[{"name":"customization","required":true}],"permissionOnly":true},"CreateCustomization":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"customization"}],"description":"Grants permission to invoke CreateCustomization on CodeWhisperer","accessLevel":"Write","resourceTypes":[{"name":"customization","required":true}],"permissionOnly":true},"CreateProfile":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"profile"}],"description":"Grants permission to invoke CreateProfile on CodeWhisperer","accessLevel":"Write","resourceTypes":[{"name":"profile","required":true}],"permissionOnly":true},"DeleteCustomization":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"customization"}],"description":"Grants permission to invoke DeleteCustomization on CodeWhisperer","accessLevel":"Write","resourceTypes":[{"name":"customization","required":true}],"permissionOnly":true},"DeleteProfile":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"profile"}],"description":"Grants permission to invoke DeleteProfile on CodeWhisperer","accessLevel":"Write","resourceTypes":[{"name":"profile","required":true}],"permissionOnly":true},"DisassociateCustomizationPermission":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"customization"}],"description":"Grants permission to invoke DisassociateCustomizationPermission on CodeWhisperer","accessLevel":"Write","resourceTypes":[{"name":"customization","required":true}],"permissionOnly":true},"GenerateRecommendations":{"conditionKeys":[],"resources":[],"description":"Grants permission to invoke GenerateRecommendations on CodeWhisperer","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetCustomization":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"customization"}],"description":"Grants permission to invoke GetCustomization on CodeWhisperer","accessLevel":"Read","resourceTypes":[{"name":"customization","required":true}],"permissionOnly":true},"ListCustomizationPermissions":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"customization"}],"description":"Grants permission to invoke ListCustomizationPermissions on CodeWhisperer","accessLevel":"List","resourceTypes":[{"name":"customization","required":true}],"permissionOnly":true},"ListCustomizationVersions":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"customization"}],"description":"Grants permission to invoke ListCustomizationVersions on CodeWhisperer","accessLevel":"List","resourceTypes":[{"name":"customization","required":true}],"permissionOnly":true},"ListCustomizations":{"conditionKeys":[],"resources":[{"name":"customization"}],"description":"Grants permission to invoke ListCustomizations on CodeWhisperer","accessLevel":"List","resourceTypes":[{"name":"customization","required":true}],"permissionOnly":true},"ListProfiles":{"conditionKeys":[],"resources":[],"description":"Grants permission to invoke ListProfiles on CodeWhisperer","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"customization"},{"name":"profile"}],"description":"Grants permission to invoke ListTagsForResource on CodeWhisperer","accessLevel":"List","resourceTypes":[{"name":"customization","required":false},{"name":"profile","required":false}],"permissionOnly":true},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"customization"},{"name":"profile"}],"description":"Grants permission to invoke TagResource on CodeWhisperer","accessLevel":"Tagging","resourceTypes":[{"name":"customization","required":false},{"name":"profile","required":false}],"permissionOnly":true},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"customization"},{"name":"profile"}],"description":"Grants permission to invoke UntagResource on CodeWhisperer","accessLevel":"Tagging","resourceTypes":[{"name":"customization","required":false},{"name":"profile","required":false}],"permissionOnly":true},"UpdateCustomization":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"customization"}],"description":"Grants permission to invoke UpdateCustomization on CodeWhisperer","accessLevel":"Write","resourceTypes":[{"name":"customization","required":true}],"permissionOnly":true},"UpdateProfile":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"profile"}],"description":"Grants permission to invoke UpdateProfile on CodeWhisperer","accessLevel":"Write","resourceTypes":[{"name":"profile","required":true}],"permissionOnly":true}},"resources":[{"name":"customization","arnFormats":["arn:${Partition}:codewhisperer:${Region}:${Account}:customization/${Identifier}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"profile","arnFormats":["arn:${Partition}:codewhisperer:${Region}:${Account}:profile/${Identifier}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with CodeWhisperer resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"cognito-identity","actions":{"CreateIdentityPool":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new identity pool","accessLevel":"Write","resourceTypes":[]},"DeleteIdentities":{"conditionKeys":["cognito-identity:IdentityPoolArn"],"resources":[],"description":"Grants permission to delete identities from an identity pool. You can specify a list of 1-60 identities that you want to delete","accessLevel":"Write","resourceTypes":[]},"DeleteIdentityPool":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to delete a user pool. Once a pool is deleted, users will not be able to authenticate with the pool","accessLevel":"Write","resourceTypes":[{"name":"identitypool","required":true}]},"DescribeIdentity":{"conditionKeys":["cognito-identity:IdentityPoolArn"],"resources":[],"description":"Grants permission to return metadata related to the given identity, including when the identity was created and any associated linked logins","accessLevel":"Read","resourceTypes":[]},"DescribeIdentityPool":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get details about a particular identity pool, including the pool name, ID description, creation date, and current number of users","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}]},"GetCredentialsForIdentity":{"conditionKeys":["cognito-identity-auth:AccountId","cognito-identity-auth:IdentityPoolArn","cognito-identity-unauth:AccountId","cognito-identity-unauth:IdentityPoolArn"],"resources":[],"description":"Grants permission to return credentials for the provided identity ID","accessLevel":"Read","resourceTypes":[]},"GetId":{"conditionKeys":["cognito-identity-auth:AccountId","cognito-identity-auth:IdentityPoolArn","cognito-identity-unauth:AccountId","cognito-identity-unauth:IdentityPoolArn"],"resources":[],"description":"Grants permission to generate (or retrieve) a Cognito ID. Supplying multiple logins will create an implicit linked account","accessLevel":"Write","resourceTypes":[]},"GetIdentityPoolAnalytics":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get analytics data about the total current identity count for all identity pool identity provider (IdPs)","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}]},"GetIdentityPoolDailyAnalytics":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get analytics data about the number of new identities and total identities for all identity pool identity providers (IdPs)","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}]},"GetIdentityPoolRoles":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get the roles for an identity pool","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}]},"GetIdentityProviderDailyAnalytics":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get analytics data about the number of new identities and total identities for one identity pool identity provider (IdPs)","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}]},"GetOpenIdToken":{"conditionKeys":["cognito-identity-auth:AccountId","cognito-identity-auth:IdentityPoolArn","cognito-identity-unauth:AccountId","cognito-identity-unauth:IdentityPoolArn"],"resources":[],"description":"Grants permission to get an OpenID token, using a known Cognito ID","accessLevel":"Read","resourceTypes":[]},"GetOpenIdTokenForDeveloperIdentity":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to register (or retrieve) a Cognito IdentityId and an OpenID Connect token for a user authenticated by your backend authentication process","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}]},"GetPrincipalTagAttributeMap":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get the principal tags for an identity pool and provider","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}]},"ListIdentities":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to list the identities in an identity pool","accessLevel":"List","resourceTypes":[{"name":"identitypool","required":true}]},"ListIdentityPools":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all of the Cognito identity pools registered for your account","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to list the tags that are assigned to an Amazon Cognito identity pool","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":false}]},"LookupDeveloperIdentity":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to retrieve the IdentityId associated with a DeveloperUserIdentifier or the list of DeveloperUserIdentifiers associated with an IdentityId for an existing identity","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}]},"MergeDeveloperIdentities":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to merge two users having different IdentityIds, existing in the same identity pool, and identified by the same developer provider","accessLevel":"Write","resourceTypes":[{"name":"identitypool","required":true}]},"SetIdentityPoolRoles":{"conditionKeys":[],"resources":[],"description":"Grants permission to set the roles for an identity pool. These roles are used when making calls to GetCredentialsForIdentity action","accessLevel":"Write","resourceTypes":[]},"SetPrincipalTagAttributeMap":{"conditionKeys":[],"resources":[],"description":"Grants permission to set the principal tags for an identity pool and provider. These tags are used when making calls to GetOpenIdToken action","accessLevel":"Write","resourceTypes":[]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"identitypool"}],"description":"Grants permission to assign a set of tags to an Amazon Cognito identity pool","accessLevel":"Tagging","resourceTypes":[{"name":"identitypool","required":true}]},"UnlinkDeveloperIdentity":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to unlink a DeveloperUserIdentifier from an existing identity","accessLevel":"Write","resourceTypes":[{"name":"identitypool","required":true}]},"UnlinkIdentity":{"conditionKeys":["cognito-identity-auth:AccountId","cognito-identity-auth:IdentityPoolArn"],"resources":[],"description":"Grants permission to unlink a federated identity from an existing account","accessLevel":"Write","resourceTypes":[]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"identitypool"}],"description":"Grants permission to remove the specified tags from an Amazon Cognito identity pool","accessLevel":"Tagging","resourceTypes":[{"name":"identitypool","required":true}]},"UpdateIdentityPool":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to update an identity pool","accessLevel":"Write","resourceTypes":[{"name":"identitypool","required":true}]}},"resources":[{"name":"identitypool","arnFormats":["arn:${Partition}:cognito-identity:${Region}:${Account}:identitypool/${IdentityPoolId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by a key that is present in the request"},"cognito-identity-auth:AccountId":{"types":["String"],"description":"Filters access by the owning AWS account ID for identity pool authenticated users. Applies to unauthenticated (public) API operations"},"cognito-identity-auth:IdentityPoolArn":{"types":["ARN"],"description":"Filters access by the identity pool ID for a given authenticated-user identity ID. Applies to unauthenticated (public) API operations"},"cognito-identity-unauth:AccountId":{"types":["String"],"description":"Filters access by the owning AWS account ID of an identity pool for identity pool guest users. Applies to unauthenticated (public) API operations"},"cognito-identity-unauth:IdentityPoolArn":{"types":["ARN"],"description":"Filters access by the identity pool ID for a given guest-user identity ID. Applies to unauthenticated (public) API operations"},"cognito-identity:IdentityPoolArn":{"types":["ARN"],"description":"Filters access by the identity pool ID for a given identity ID for DeleteIdentities and DescribeIdentity"}}}
@@ -0,0 +1 @@
1
+ {"name":"cognito-idp","actions":{"AddCustomAttributes":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to add user attributes to the user pool schema","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AddUserPoolClientSecret":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to add a new secret to a confidential client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminAddUserToGroup":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to add any user to any group","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminConfirmSignUp":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to confirm any user's registration without a confirmation code","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminCreateUser":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to create new users and send welcome messages via email or SMS","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminDeleteUser":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete any user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminDeleteUserAttributes":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete attributes from any user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminDisableProviderForUser":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to unlink any user pool user from a third-party identity provider (IdP) user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminDisableUser":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to deactivate any user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminEnableUser":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to activate any user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminForgetDevice":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to deregister any user's devices","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminGetDevice":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to get information about any user's devices","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"AdminGetUser":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to look up any user by user name","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"AdminInitiateAuth":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to authenticate any user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminLinkProviderForUser":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to link any user pool user to a third-party IdP user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminListDevices":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list any user's remembered devices","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}]},"AdminListGroupsForUser":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list the groups that any user belongs to","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}]},"AdminListUserAuthEvents":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to lists sign-in events for any user","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"AdminRemoveUserFromGroup":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to remove any user from any group","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminResetUserPassword":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to reset any user's password","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminRespondToAuthChallenge":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to respond to an authentication challenge during the authentication of any user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminSetUserMFAPreference":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to set any user's preferred MFA method","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminSetUserPassword":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to set any user's password","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminSetUserSettings":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to set user settings for any user","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminUpdateAuthEventFeedback":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update advanced security feedback for any user's authentication event","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminUpdateDeviceStatus":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update the status of any user's remembered devices","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminUpdateUserAttributes":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to updates any user's standard or custom attributes","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AdminUserGlobalSignOut":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to sign out any user from all sessions","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"AssociateSoftwareToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a unique generated shared secret key code for the user","accessLevel":"Write","resourceTypes":[]},"AssociateWebACL":{"conditionKeys":[],"resources":[{"name":"userpool"},{"name":"webacl"}],"description":"Grants permission to associate the user pool with an AWS WAF web ACL","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true},{"name":"webacl","required":true}],"permissionOnly":true},"ChangePassword":{"conditionKeys":[],"resources":[],"description":"Grants permission to change the password for a specified user in a user pool","accessLevel":"Write","resourceTypes":[]},"ConfirmDevice":{"conditionKeys":[],"resources":[],"description":"Grants permission to confirm tracking of the device. This API call is the call that begins device tracking","accessLevel":"Write","resourceTypes":[]},"ConfirmForgotPassword":{"conditionKeys":[],"resources":[],"description":"Grants permission to allow a user to enter a confirmation code to reset a forgotten password","accessLevel":"Write","resourceTypes":[]},"ConfirmSignUp":{"conditionKeys":[],"resources":[],"description":"Grants permission to confirm registration of a user and handles the existing alias from a previous user","accessLevel":"Write","resourceTypes":[]},"CreateGroup":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to create new user pool groups","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"CreateIdentityProvider":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to add identity providers to user pools","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"CreateManagedLoginBranding":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to create a branding settings for managed login and associate it with an app client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"CreateResourceServer":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to create and configure scopes for OAuth 2.0 resource servers","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"CreateTerms":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to create terms and associate it with an app client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"CreateUserImportJob":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to create user CSV import jobs","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"CreateUserPool":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create and set password policy for user pools","accessLevel":"Write","resourceTypes":[]},"CreateUserPoolClient":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to create user pool app clients","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"CreateUserPoolDomain":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to add user pool domains","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"DeleteGroup":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete any empty user pool group","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"DeleteIdentityProvider":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete any identity provider from user pools","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"DeleteManagedLoginBranding":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete the managed login branding style for any app client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"DeleteResourceServer":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete any OAuth 2.0 resource server from user pools","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"DeleteTerms":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete terms for an app client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"DeleteUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to allow a user to delete one's self","accessLevel":"Write","resourceTypes":[]},"DeleteUserAttributes":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the attributes for a user","accessLevel":"Write","resourceTypes":[]},"DeleteUserPool":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete user pools","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"DeleteUserPoolClient":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete any user pool app client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"DeleteUserPoolClientSecret":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete a secret from a list of secrets associated with a client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"DeleteUserPoolDomain":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to delete any user pool domain","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"DescribeIdentityProvider":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to describe any user pool identity provider","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"DescribeManagedLoginBranding":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to get the detailed information about the branding style of managed login","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"DescribeManagedLoginBrandingByClient":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to get the detailed information about the branding style of managed login associated with an appclient","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"DescribeResourceServer":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to describe any OAuth 2.0 resource server","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"DescribeRiskConfiguration":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to describe the risk configuration settings of user pools and app clients","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"DescribeTerms":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to get the detailed information about terms for an app client","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"DescribeUserImportJob":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to describe any user import job","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"DescribeUserPool":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to describe user pools","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"DescribeUserPoolClient":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to describe any user pool app client","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"DescribeUserPoolDomain":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe any user pool domain","accessLevel":"Read","resourceTypes":[]},"DisassociateWebACL":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to disassociate the user pool with an AWS WAF web ACL","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}],"permissionOnly":true},"ForgetDevice":{"conditionKeys":[],"resources":[],"description":"Grants permission to forget the specified device","accessLevel":"Write","resourceTypes":[]},"ForgotPassword":{"conditionKeys":[],"resources":[],"description":"Grants permission to send a message to the end user with a confirmation code that is required to change the user's password","accessLevel":"Write","resourceTypes":[]},"GetCSVHeader":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to generate headers for a user import .csv file","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"GetDevice":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the device","accessLevel":"Read","resourceTypes":[]},"GetGroup":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to describe a user pool group","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"GetIdentityProviderByIdentifier":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to correlate a user pool IdP identifier to the IdP Name","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"GetLogDeliveryConfiguration":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to get the detailed activity logging configuration for a user pool","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"GetSigningCertificate":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to look up signing certificates for user pools","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"GetTokensFromRefreshToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to update user tokens with refresh tokens","accessLevel":"Write","resourceTypes":[]},"GetUICustomization":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to get UI customization information for the hosted UI of any app client","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"GetUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the user attributes and metadata for a user","accessLevel":"Read","resourceTypes":[]},"GetUserAttributeVerificationCode":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the user attribute verification code for the specified attribute name","accessLevel":"Read","resourceTypes":[]},"GetUserPoolMfaConfig":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to look up the MFA configuration of user pools","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}]},"GetWebACLForResource":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to get the AWS WAF web ACL that is associated with an Amazon Cognito user pool","accessLevel":"Read","resourceTypes":[{"name":"userpool","required":true}],"permissionOnly":true},"GlobalSignOut":{"conditionKeys":[],"resources":[],"description":"Grants permission to sign out users from all devices","accessLevel":"Write","resourceTypes":[]},"InitiateAuth":{"conditionKeys":[],"resources":[],"description":"Grants permission to initiate the authentication flow","accessLevel":"Write","resourceTypes":[]},"ListDevices":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the devices","accessLevel":"List","resourceTypes":[]},"ListGroups":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list all groups in user pools","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}]},"ListIdentityProviders":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list all identity providers in user pools","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}]},"ListResourceServers":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list all resource servers in user pools","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}]},"ListResourcesForWebACL":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to list the user pools that are associated with an AWS WAF web ACL","accessLevel":"List","resourceTypes":[{"name":"webacl","required":true}],"permissionOnly":true},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list the tags that are assigned to an Amazon Cognito user pool","accessLevel":"List","resourceTypes":[{"name":"userpool","required":false}]},"ListTerms":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list all terms for a user pool","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}]},"ListUserImportJobs":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list all user import jobs","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}]},"ListUserPoolClientSecrets":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list all secrets associated with a client","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}]},"ListUserPoolClients":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list all app clients in user pools","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}]},"ListUserPools":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all user pools","accessLevel":"List","resourceTypes":[]},"ListUsers":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list all user pool users","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}]},"ListUsersInGroup":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to list the users in any group","accessLevel":"List","resourceTypes":[{"name":"userpool","required":true}]},"ResendConfirmationCode":{"conditionKeys":[],"resources":[],"description":"Grants permission to resend the confirmation (for confirmation of registration) to a specific user in the user pool","accessLevel":"Write","resourceTypes":[]},"RespondToAuthChallenge":{"conditionKeys":[],"resources":[],"description":"Grants permission to respond to the authentication challenge","accessLevel":"Write","resourceTypes":[]},"RevokeToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to revoke all of the access tokens generated by the specified refresh token","accessLevel":"Write","resourceTypes":[]},"SetLogDeliveryConfiguration":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to set up or modify the detailed activity logging configuration of a user pool","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"SetRiskConfiguration":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to set risk configuration for user pools and app clients","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"SetUICustomization":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to customize the hosted UI for any app client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"SetUserMFAPreference":{"conditionKeys":[],"resources":[],"description":"Grants permission to set MFA preference for the user in the userpool","accessLevel":"Write","resourceTypes":[]},"SetUserPoolMfaConfig":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to set user pool MFA configuration","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"SetUserSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to set the user settings like multi-factor authentication (MFA)","accessLevel":"Write","resourceTypes":[]},"SignUp":{"conditionKeys":[],"resources":[],"description":"Grants permission to register the user in the specified user pool and creates a user name, password, and user attributes","accessLevel":"Write","resourceTypes":[]},"StartUserImportJob":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to start any user import job","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"StopUserImportJob":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to stop any user import job","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"userpool"}],"description":"Grants permission to tag a user pool","accessLevel":"Tagging","resourceTypes":[{"name":"userpool","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"userpool"}],"description":"Grants permission to untag a user pool","accessLevel":"Tagging","resourceTypes":[{"name":"userpool","required":false}]},"UpdateAuthEventFeedback":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update the feedback for the user authentication event","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"UpdateDeviceStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the device status","accessLevel":"Write","resourceTypes":[]},"UpdateGroup":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update the configuration of any group","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"UpdateIdentityProvider":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update the configuration of any user pool IdP","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"UpdateManagedLoginBranding":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update the branding settings of a managed login","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"UpdateResourceServer":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update the configuration of any OAuth 2.0 resource server","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"UpdateTerms":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update terms for an app client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"UpdateUserAttributes":{"conditionKeys":[],"resources":[],"description":"Grants permission to allow a user to update a specific attribute (one at a time)","accessLevel":"Write","resourceTypes":[]},"UpdateUserPool":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"userpool"}],"description":"Grants permission to updates the configuration of user pools","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"UpdateUserPoolClient":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to update any user pool client","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"UpdateUserPoolDomain":{"conditionKeys":[],"resources":[{"name":"userpool"}],"description":"Grants permission to replace the certificate for any custom domain","accessLevel":"Write","resourceTypes":[{"name":"userpool","required":true}]},"VerifySoftwareToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to register a user's entered TOTP code and mark the user's software token MFA status as verified if successful","accessLevel":"Write","resourceTypes":[]},"VerifyUserAttribute":{"conditionKeys":[],"resources":[],"description":"Grants permission to verify a user attribute using a one time verification code","accessLevel":"Write","resourceTypes":[]}},"resources":[{"name":"userpool","arnFormats":["arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/${UserPoolId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"webacl","arnFormats":["arn:${Partition}:wafv2:${Region}:${Account}:${Scope}/webacl/${Name}/${Id}"],"conditionKeys":[]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by a key that is present in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"cognito-sync","actions":{"BulkPublish":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to initiate a bulk publish of all existing datasets for an Identity Pool to the configured stream","accessLevel":"Write","resourceTypes":[{"name":"identitypool","required":true}]},"DeleteDataset":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to delete a specific dataset","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}]},"DescribeDataset":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to get metadata about a dataset by identity and dataset name","accessLevel":"Read","resourceTypes":[{"name":"dataset","required":true}]},"DescribeIdentityPoolUsage":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get usage details (for example, data storage) about a particular identity pool","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}]},"DescribeIdentityUsage":{"conditionKeys":[],"resources":[{"name":"identity"}],"description":"Grants permission to get usage information for an identity, including number of datasets and data usage","accessLevel":"Read","resourceTypes":[{"name":"identity","required":true}]},"GetBulkPublishDetails":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get the status of the last BulkPublish operation for an identity pool","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}]},"GetCognitoEvents":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get the events and the corresponding Lambda functions associated with an identity pool","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}]},"GetIdentityPoolConfiguration":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get the configuration settings of an identity pool","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}]},"ListDatasets":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to list datasets for an identity","accessLevel":"List","resourceTypes":[{"name":"dataset","required":true}]},"ListIdentityPoolUsage":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to get a list of identity pools registered with Cognito","accessLevel":"Read","resourceTypes":[{"name":"identitypool","required":true}]},"ListRecords":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to get paginated records, optionally changed after a particular sync count for a dataset and identity","accessLevel":"Read","resourceTypes":[{"name":"dataset","required":true}]},"QueryRecords":{"conditionKeys":[],"resources":[],"description":"Grants permission to query records","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"RegisterDevice":{"conditionKeys":[],"resources":[{"name":"identity"}],"description":"Grants permission to register a device to receive push sync notifications","accessLevel":"Write","resourceTypes":[{"name":"identity","required":true}]},"SetCognitoEvents":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to set the AWS Lambda function for a given event type for an identity pool","accessLevel":"Write","resourceTypes":[{"name":"identitypool","required":true}]},"SetDatasetConfiguration":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to configure datasets","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}],"permissionOnly":true},"SetIdentityPoolConfiguration":{"conditionKeys":[],"resources":[{"name":"identitypool"}],"description":"Grants permission to set the necessary configuration for push sync","accessLevel":"Write","resourceTypes":[{"name":"identitypool","required":true}]},"SubscribeToDataset":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to subscribe to receive notifications when a dataset is modified by another device","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}]},"UnsubscribeFromDataset":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to unsubscribe from receiving notifications when a dataset is modified by another device","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}]},"UpdateRecords":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to post updates to records and add and delete records for a dataset and user","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}]}},"resources":[{"name":"dataset","arnFormats":["arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/${IdentityPoolId}/identity/${IdentityId}/dataset/${DatasetName}"],"conditionKeys":[]},{"name":"identity","arnFormats":["arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/${IdentityPoolId}/identity/${IdentityId}"],"conditionKeys":[]},{"name":"identitypool","arnFormats":["arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/${IdentityPoolId}"],"conditionKeys":[]}],"conditionKeys":{}}
@@ -0,0 +1 @@
1
+ {"name":"comprehend","actions":{"BatchDetectDominantLanguage":{"conditionKeys":[],"resources":[],"description":"Grants permission to detect the language or languages present in the list of text documents","accessLevel":"Read","resourceTypes":[]},"BatchDetectEntities":{"conditionKeys":[],"resources":[],"description":"Grants permission to detect the named entities (\"People\", \"Places\", \"Locations\", etc) within the given list of text documents","accessLevel":"Read","resourceTypes":[]},"BatchDetectKeyPhrases":{"conditionKeys":[],"resources":[],"description":"Grants permission to detect the phrases in the list of text documents that are most indicative of the content","accessLevel":"Read","resourceTypes":[]},"BatchDetectSentiment":{"conditionKeys":[],"resources":[],"description":"Grants permission to detect the sentiment of a text in the list of documents (Positive, Negative, Neutral, or Mixed)","accessLevel":"Read","resourceTypes":[]},"BatchDetectSyntax":{"conditionKeys":[],"resources":[],"description":"Grants permission to detect syntactic information (like Part of Speech, Tokens) in a list of text documents","accessLevel":"Read","resourceTypes":[]},"BatchDetectTargetedSentiment":{"conditionKeys":[],"resources":[],"description":"Grants permission to detect the sentiments associated with specific entities (such as brands or products) within the given list of text documents","accessLevel":"Read","resourceTypes":[]},"ClassifyDocument":{"conditionKeys":[],"resources":[{"name":"document-classifier-endpoint"}],"description":"Grants permission to create a new document classification request to analyze a single document in real-time, using a previously created and trained custom model and an endpoint","accessLevel":"Read","resourceTypes":[{"name":"document-classifier-endpoint","required":true}]},"ContainsPiiEntities":{"conditionKeys":[],"resources":[],"description":"Grants permission to classify the personally identifiable information within given documents in real-time","accessLevel":"Read","resourceTypes":[]},"CreateDataset":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"flywheel"}],"description":"Grants permission to create a new dataset within a flywheel","accessLevel":"Write","resourceTypes":[{"name":"flywheel","required":true}]},"CreateDocumentClassifier":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","comprehend:ModelKmsKey","comprehend:OutputKmsKey","comprehend:VolumeKmsKey","comprehend:VpcSecurityGroupIds","comprehend:VpcSubnets"],"resources":[{"name":"document-classifier"}],"description":"Grants permission to create a new document classifier that you can use to categorize documents","accessLevel":"Write","resourceTypes":[{"name":"document-classifier","required":true}]},"CreateEndpoint":{"conditionKeys":[],"resources":[{"name":"document-classifier"},{"name":"document-classifier-endpoint"},{"name":"entity-recognizer"},{"name":"entity-recognizer-endpoint"},{"name":"flywheel"}],"description":"Grants permission to create a model-specific endpoint for synchronous inference for a previously trained custom model","accessLevel":"Write","resourceTypes":[{"name":"document-classifier","required":true},{"name":"document-classifier-endpoint","required":true},{"name":"entity-recognizer","required":true},{"name":"entity-recognizer-endpoint","required":true},{"name":"flywheel","required":false}]},"CreateEntityRecognizer":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","comprehend:ModelKmsKey","comprehend:VolumeKmsKey","comprehend:VpcSecurityGroupIds","comprehend:VpcSubnets"],"resources":[{"name":"entity-recognizer"}],"description":"Grants permission to create an entity recognizer using submitted files","accessLevel":"Write","resourceTypes":[{"name":"entity-recognizer","required":true}]},"CreateFlywheel":{"conditionKeys":[],"resources":[{"name":"document-classifier"},{"name":"entity-recognizer"},{"name":"flywheel"}],"description":"Grants permission to create a new flywheel that you can use to train model versions","accessLevel":"Write","resourceTypes":[{"name":"flywheel","required":true},{"name":"document-classifier","required":false},{"name":"entity-recognizer","required":false}]},"DeleteDocumentClassifier":{"conditionKeys":[],"resources":[{"name":"document-classifier"}],"description":"Grants permission to delete a previously created document classifier","accessLevel":"Write","resourceTypes":[{"name":"document-classifier","required":true}]},"DeleteEndpoint":{"conditionKeys":[],"resources":[{"name":"document-classifier-endpoint"},{"name":"entity-recognizer-endpoint"}],"description":"Grants permission to delete a model-specific endpoint for a previously-trained custom model. All endpoints must be deleted in order for the model to be deleted","accessLevel":"Write","resourceTypes":[{"name":"document-classifier-endpoint","required":true},{"name":"entity-recognizer-endpoint","required":true}]},"DeleteEntityRecognizer":{"conditionKeys":[],"resources":[{"name":"entity-recognizer"}],"description":"Grants permission to delete a submitted entity recognizer","accessLevel":"Write","resourceTypes":[{"name":"entity-recognizer","required":true}]},"DeleteFlywheel":{"conditionKeys":[],"resources":[{"name":"flywheel"}],"description":"Grants permission to Delete a flywheel","accessLevel":"Write","resourceTypes":[{"name":"flywheel","required":true}]},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[{"name":"document-classifier"},{"name":"entity-recognizer"}],"description":"Grants permission to remove policy on resource","accessLevel":"Write","resourceTypes":[{"name":"document-classifier","required":true},{"name":"entity-recognizer","required":true}]},"DescribeDataset":{"conditionKeys":[],"resources":[{"name":"flywheel-dataset"}],"description":"Grants permission to get the properties associated with a dataset","accessLevel":"Read","resourceTypes":[{"name":"flywheel-dataset","required":true}]},"DescribeDocumentClassificationJob":{"conditionKeys":[],"resources":[{"name":"document-classification-job"}],"description":"Grants permission to get the properties associated with a document classification job","accessLevel":"Read","resourceTypes":[{"name":"document-classification-job","required":true}]},"DescribeDocumentClassifier":{"conditionKeys":[],"resources":[{"name":"document-classifier"}],"description":"Grants permission to get the properties associated with a document classifier","accessLevel":"Read","resourceTypes":[{"name":"document-classifier","required":true}]},"DescribeDominantLanguageDetectionJob":{"conditionKeys":[],"resources":[{"name":"dominant-language-detection-job"}],"description":"Grants permission to get the properties associated with a dominant language detection job","accessLevel":"Read","resourceTypes":[{"name":"dominant-language-detection-job","required":true}]},"DescribeEndpoint":{"conditionKeys":[],"resources":[{"name":"document-classifier-endpoint"},{"name":"entity-recognizer-endpoint"}],"description":"Grants permission to get the properties associated with a specific endpoint. Use this operation to get the status of an endpoint","accessLevel":"Read","resourceTypes":[{"name":"document-classifier-endpoint","required":true},{"name":"entity-recognizer-endpoint","required":true}]},"DescribeEntitiesDetectionJob":{"conditionKeys":[],"resources":[{"name":"entities-detection-job"}],"description":"Grants permission to get the properties associated with an entities detection job","accessLevel":"Read","resourceTypes":[{"name":"entities-detection-job","required":true}]},"DescribeEntityRecognizer":{"conditionKeys":[],"resources":[{"name":"entity-recognizer"}],"description":"Grants permission to provide details about an entity recognizer including status, S3 buckets containing training data, recognizer metadata, metrics, and so on","accessLevel":"Read","resourceTypes":[{"name":"entity-recognizer","required":true}]},"DescribeEventsDetectionJob":{"conditionKeys":[],"resources":[{"name":"events-detection-job"}],"description":"Grants permission to get the properties associated with an Events detection job","accessLevel":"Read","resourceTypes":[{"name":"events-detection-job","required":true}]},"DescribeFlywheel":{"conditionKeys":[],"resources":[{"name":"flywheel"}],"description":"Grants permission to get the properties associated with a flywheel","accessLevel":"Read","resourceTypes":[{"name":"flywheel","required":true}]},"DescribeFlywheelIteration":{"conditionKeys":["comprehend:FlywheelIterationId"],"resources":[{"name":"flywheel"}],"description":"Grants permission to get the properties associated with a flywheel iteration for a flywheel","accessLevel":"Read","resourceTypes":[{"name":"flywheel","required":true}]},"DescribeKeyPhrasesDetectionJob":{"conditionKeys":[],"resources":[{"name":"key-phrases-detection-job"}],"description":"Grants permission to get the properties associated with a key phrases detection job","accessLevel":"Read","resourceTypes":[{"name":"key-phrases-detection-job","required":true}]},"DescribePiiEntitiesDetectionJob":{"conditionKeys":[],"resources":[{"name":"pii-entities-detection-job"}],"description":"Grants permission to get the properties associated with a PII entities detection job","accessLevel":"Read","resourceTypes":[{"name":"pii-entities-detection-job","required":true}]},"DescribeResourcePolicy":{"conditionKeys":[],"resources":[{"name":"document-classifier"},{"name":"entity-recognizer"}],"description":"Grants permission to read attached policy on resource","accessLevel":"Read","resourceTypes":[{"name":"document-classifier","required":true},{"name":"entity-recognizer","required":true}]},"DescribeSentimentDetectionJob":{"conditionKeys":[],"resources":[{"name":"sentiment-detection-job"}],"description":"Grants permission to get the properties associated with a sentiment detection job","accessLevel":"Read","resourceTypes":[{"name":"sentiment-detection-job","required":true}]},"DescribeTargetedSentimentDetectionJob":{"conditionKeys":[],"resources":[{"name":"targeted-sentiment-detection-job"}],"description":"Grants permission to get the properties associated with a targeted sentiment detection job","accessLevel":"Read","resourceTypes":[{"name":"targeted-sentiment-detection-job","required":true}]},"DescribeTopicsDetectionJob":{"conditionKeys":[],"resources":[{"name":"topics-detection-job"}],"description":"Grants permission to get the properties associated with a topic detection job","accessLevel":"Read","resourceTypes":[{"name":"topics-detection-job","required":true}]},"DetectDominantLanguage":{"conditionKeys":[],"resources":[],"description":"Grants permission to detect the language or languages present in the text","accessLevel":"Read","resourceTypes":[]},"DetectEntities":{"conditionKeys":[],"resources":[{"name":"entity-recognizer-endpoint"}],"description":"Grants permission to detect the named entities (\"People\", \"Places\", \"Locations\", etc) within the given text document","accessLevel":"Read","resourceTypes":[{"name":"entity-recognizer-endpoint","required":false}]},"DetectKeyPhrases":{"conditionKeys":[],"resources":[],"description":"Grants permission to detect the phrases in the text that are most indicative of the content","accessLevel":"Read","resourceTypes":[]},"DetectPiiEntities":{"conditionKeys":[],"resources":[],"description":"Grants permission to detect the personally identifiable information entities (\"Name\", \"SSN\", \"PIN\", etc) within the given text document","accessLevel":"Read","resourceTypes":[]},"DetectSentiment":{"conditionKeys":[],"resources":[],"description":"Grants permission to detect the sentiment of a text in a document (Positive, Negative, Neutral, or Mixed)","accessLevel":"Read","resourceTypes":[]},"DetectSyntax":{"conditionKeys":[],"resources":[],"description":"Grants permission to detect syntactic information (like Part of Speech, Tokens) in a text document","accessLevel":"Read","resourceTypes":[]},"DetectTargetedSentiment":{"conditionKeys":[],"resources":[],"description":"Grants permission to detect the sentiments associated with specific entities (such as brands or products) in a document","accessLevel":"Read","resourceTypes":[]},"DetectToxicContent":{"conditionKeys":[],"resources":[],"description":"Grants permission to detect toxic content within the given list of text segments","accessLevel":"Read","resourceTypes":[]},"ImportModel":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","comprehend:ModelKmsKey"],"resources":[{"name":"document-classifier"},{"name":"entity-recognizer"}],"description":"Grants permission to import a trained Comprehend model","accessLevel":"Write","resourceTypes":[{"name":"document-classifier","required":true},{"name":"entity-recognizer","required":true}]},"ListDatasets":{"conditionKeys":[],"resources":[{"name":"flywheel"}],"description":"Grants permission to get a list of the Datasets associated with a flywheel","accessLevel":"Read","resourceTypes":[{"name":"flywheel","required":true}]},"ListDocumentClassificationJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of the document classification jobs that you have submitted","accessLevel":"Read","resourceTypes":[]},"ListDocumentClassifierSummaries":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of summaries of the document classifiers that you have created","accessLevel":"Read","resourceTypes":[]},"ListDocumentClassifiers":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of the document classifiers that you have created","accessLevel":"Read","resourceTypes":[]},"ListDominantLanguageDetectionJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of the dominant language detection jobs that you have submitted","accessLevel":"Read","resourceTypes":[]},"ListEndpoints":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of all existing endpoints that you've created","accessLevel":"Read","resourceTypes":[]},"ListEntitiesDetectionJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of the entity detection jobs that you have submitted","accessLevel":"Read","resourceTypes":[]},"ListEntityRecognizerSummaries":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of summaries for the entity recognizers that you have created","accessLevel":"Read","resourceTypes":[]},"ListEntityRecognizers":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of the properties of all entity recognizers that you created, including recognizers currently in training","accessLevel":"Read","resourceTypes":[]},"ListEventsDetectionJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of Events detection jobs that you have submitted","accessLevel":"Read","resourceTypes":[]},"ListFlywheelIterationHistory":{"conditionKeys":[],"resources":[{"name":"flywheel"}],"description":"Grants permission to get a list of iterations associated for a flywheel","accessLevel":"Read","resourceTypes":[{"name":"flywheel","required":true}]},"ListFlywheels":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of the flywheels that you have created","accessLevel":"Read","resourceTypes":[]},"ListKeyPhrasesDetectionJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of key phrase detection jobs that you have submitted","accessLevel":"Read","resourceTypes":[]},"ListPiiEntitiesDetectionJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of PII entities detection jobs that you have submitted","accessLevel":"Read","resourceTypes":[]},"ListSentimentDetectionJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of sentiment detection jobs that you have submitted","accessLevel":"Read","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"document-classification-job"},{"name":"document-classifier"},{"name":"document-classifier-endpoint"},{"name":"dominant-language-detection-job"},{"name":"entities-detection-job"},{"name":"entity-recognizer"},{"name":"entity-recognizer-endpoint"},{"name":"events-detection-job"},{"name":"flywheel"},{"name":"flywheel-dataset"},{"name":"key-phrases-detection-job"},{"name":"pii-entities-detection-job"},{"name":"sentiment-detection-job"},{"name":"targeted-sentiment-detection-job"},{"name":"topics-detection-job"}],"description":"Grants permission to list tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"document-classification-job","required":false},{"name":"document-classifier","required":false},{"name":"document-classifier-endpoint","required":false},{"name":"dominant-language-detection-job","required":false},{"name":"entities-detection-job","required":false},{"name":"entity-recognizer","required":false},{"name":"entity-recognizer-endpoint","required":false},{"name":"events-detection-job","required":false},{"name":"flywheel","required":false},{"name":"flywheel-dataset","required":false},{"name":"key-phrases-detection-job","required":false},{"name":"pii-entities-detection-job","required":false},{"name":"sentiment-detection-job","required":false},{"name":"targeted-sentiment-detection-job","required":false},{"name":"topics-detection-job","required":false}]},"ListTargetedSentimentDetectionJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of targeted sentiment detection jobs that you have submitted","accessLevel":"Read","resourceTypes":[]},"ListTopicsDetectionJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of the topic detection jobs that you have submitted","accessLevel":"Read","resourceTypes":[]},"PutResourcePolicy":{"conditionKeys":[],"resources":[{"name":"document-classifier"},{"name":"entity-recognizer"}],"description":"Grants permission to attach policy to resource","accessLevel":"Write","resourceTypes":[{"name":"document-classifier","required":true},{"name":"entity-recognizer","required":true}]},"StartDocumentClassificationJob":{"conditionKeys":[],"resources":[{"name":"document-classification-job"},{"name":"document-classifier"},{"name":"flywheel"}],"description":"Grants permission to start an asynchronous document classification job","accessLevel":"Write","resourceTypes":[{"name":"document-classification-job","required":true},{"name":"document-classifier","required":false},{"name":"flywheel","required":false}]},"StartDominantLanguageDetectionJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","comprehend:OutputKmsKey","comprehend:VolumeKmsKey","comprehend:VpcSecurityGroupIds","comprehend:VpcSubnets"],"resources":[{"name":"dominant-language-detection-job"}],"description":"Grants permission to start an asynchronous dominant language detection job for a collection of documents","accessLevel":"Write","resourceTypes":[{"name":"dominant-language-detection-job","required":true}]},"StartEntitiesDetectionJob":{"conditionKeys":[],"resources":[{"name":"entities-detection-job"},{"name":"entity-recognizer"},{"name":"flywheel"}],"description":"Grants permission to start an asynchronous entity detection job for a collection of documents","accessLevel":"Write","resourceTypes":[{"name":"entities-detection-job","required":true},{"name":"entity-recognizer","required":false},{"name":"flywheel","required":false}]},"StartEventsDetectionJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","comprehend:OutputKmsKey"],"resources":[{"name":"events-detection-job"}],"description":"Grants permission to start an asynchronous Events detection job for a collection of documents","accessLevel":"Write","resourceTypes":[{"name":"events-detection-job","required":true}]},"StartFlywheelIteration":{"conditionKeys":[],"resources":[{"name":"flywheel"}],"description":"Grants permission to start a flywheel iteration for a flywheel","accessLevel":"Write","resourceTypes":[{"name":"flywheel","required":true}]},"StartKeyPhrasesDetectionJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","comprehend:OutputKmsKey","comprehend:VolumeKmsKey","comprehend:VpcSecurityGroupIds","comprehend:VpcSubnets"],"resources":[{"name":"key-phrases-detection-job"}],"description":"Grants permission to start an asynchronous key phrase detection job for a collection of documents","accessLevel":"Write","resourceTypes":[{"name":"key-phrases-detection-job","required":true}]},"StartPiiEntitiesDetectionJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","comprehend:OutputKmsKey"],"resources":[{"name":"pii-entities-detection-job"}],"description":"Grants permission to start an asynchronous PII entities detection job for a collection of documents","accessLevel":"Write","resourceTypes":[{"name":"pii-entities-detection-job","required":true}]},"StartSentimentDetectionJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","comprehend:OutputKmsKey","comprehend:VolumeKmsKey","comprehend:VpcSecurityGroupIds","comprehend:VpcSubnets"],"resources":[{"name":"sentiment-detection-job"}],"description":"Grants permission to start an asynchronous sentiment detection job for a collection of documents","accessLevel":"Write","resourceTypes":[{"name":"sentiment-detection-job","required":true}]},"StartTargetedSentimentDetectionJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","comprehend:OutputKmsKey","comprehend:VolumeKmsKey","comprehend:VpcSecurityGroupIds","comprehend:VpcSubnets"],"resources":[{"name":"targeted-sentiment-detection-job"}],"description":"Grants permission to start an asynchronous targeted sentiment detection job for a collection of documents","accessLevel":"Write","resourceTypes":[{"name":"targeted-sentiment-detection-job","required":true}]},"StartTopicsDetectionJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","comprehend:OutputKmsKey","comprehend:VolumeKmsKey","comprehend:VpcSecurityGroupIds","comprehend:VpcSubnets"],"resources":[{"name":"topics-detection-job"}],"description":"Grants permission to start an asynchronous job to detect the most common topics in the collection of documents and the phrases associated with each topic","accessLevel":"Write","resourceTypes":[{"name":"topics-detection-job","required":true}]},"StopDominantLanguageDetectionJob":{"conditionKeys":[],"resources":[{"name":"dominant-language-detection-job"}],"description":"Grants permission to stop a dominant language detection job","accessLevel":"Write","resourceTypes":[{"name":"dominant-language-detection-job","required":true}]},"StopEntitiesDetectionJob":{"conditionKeys":[],"resources":[{"name":"entities-detection-job"}],"description":"Grants permission to stop an entity detection job","accessLevel":"Write","resourceTypes":[{"name":"entities-detection-job","required":true}]},"StopEventsDetectionJob":{"conditionKeys":[],"resources":[{"name":"events-detection-job"}],"description":"Grants permission to stop an Events detection job","accessLevel":"Write","resourceTypes":[{"name":"events-detection-job","required":true}]},"StopKeyPhrasesDetectionJob":{"conditionKeys":[],"resources":[{"name":"key-phrases-detection-job"}],"description":"Grants permission to stop a key phrase detection job","accessLevel":"Write","resourceTypes":[{"name":"key-phrases-detection-job","required":true}]},"StopPiiEntitiesDetectionJob":{"conditionKeys":[],"resources":[{"name":"pii-entities-detection-job"}],"description":"Grants permission to stop a PII entities detection job","accessLevel":"Write","resourceTypes":[{"name":"pii-entities-detection-job","required":true}]},"StopSentimentDetectionJob":{"conditionKeys":[],"resources":[{"name":"sentiment-detection-job"}],"description":"Grants permission to stop a sentiment detection job","accessLevel":"Write","resourceTypes":[{"name":"sentiment-detection-job","required":true}]},"StopTargetedSentimentDetectionJob":{"conditionKeys":[],"resources":[{"name":"targeted-sentiment-detection-job"}],"description":"Grants permission to stop a targeted sentiment detection job","accessLevel":"Write","resourceTypes":[{"name":"targeted-sentiment-detection-job","required":true}]},"StopTrainingDocumentClassifier":{"conditionKeys":[],"resources":[{"name":"document-classifier"}],"description":"Grants permission to stop a previously created document classifier training job","accessLevel":"Write","resourceTypes":[{"name":"document-classifier","required":true}]},"StopTrainingEntityRecognizer":{"conditionKeys":[],"resources":[{"name":"entity-recognizer"}],"description":"Grants permission to stop a previously created entity recognizer training job","accessLevel":"Write","resourceTypes":[{"name":"entity-recognizer","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"document-classification-job"},{"name":"document-classifier"},{"name":"document-classifier-endpoint"},{"name":"dominant-language-detection-job"},{"name":"entities-detection-job"},{"name":"entity-recognizer"},{"name":"entity-recognizer-endpoint"},{"name":"events-detection-job"},{"name":"flywheel"},{"name":"flywheel-dataset"},{"name":"key-phrases-detection-job"},{"name":"pii-entities-detection-job"},{"name":"sentiment-detection-job"},{"name":"targeted-sentiment-detection-job"},{"name":"topics-detection-job"}],"description":"Grants permission to tag a resource with given key value pairs","accessLevel":"Tagging","resourceTypes":[{"name":"document-classification-job","required":false},{"name":"document-classifier","required":false},{"name":"document-classifier-endpoint","required":false},{"name":"dominant-language-detection-job","required":false},{"name":"entities-detection-job","required":false},{"name":"entity-recognizer","required":false},{"name":"entity-recognizer-endpoint","required":false},{"name":"events-detection-job","required":false},{"name":"flywheel","required":false},{"name":"flywheel-dataset","required":false},{"name":"key-phrases-detection-job","required":false},{"name":"pii-entities-detection-job","required":false},{"name":"sentiment-detection-job","required":false},{"name":"targeted-sentiment-detection-job","required":false},{"name":"topics-detection-job","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"document-classification-job"},{"name":"document-classifier"},{"name":"document-classifier-endpoint"},{"name":"dominant-language-detection-job"},{"name":"entities-detection-job"},{"name":"entity-recognizer"},{"name":"entity-recognizer-endpoint"},{"name":"events-detection-job"},{"name":"flywheel"},{"name":"flywheel-dataset"},{"name":"key-phrases-detection-job"},{"name":"pii-entities-detection-job"},{"name":"sentiment-detection-job"},{"name":"targeted-sentiment-detection-job"},{"name":"topics-detection-job"}],"description":"Grants permission to untag a resource with given key","accessLevel":"Tagging","resourceTypes":[{"name":"document-classification-job","required":false},{"name":"document-classifier","required":false},{"name":"document-classifier-endpoint","required":false},{"name":"dominant-language-detection-job","required":false},{"name":"entities-detection-job","required":false},{"name":"entity-recognizer","required":false},{"name":"entity-recognizer-endpoint","required":false},{"name":"events-detection-job","required":false},{"name":"flywheel","required":false},{"name":"flywheel-dataset","required":false},{"name":"key-phrases-detection-job","required":false},{"name":"pii-entities-detection-job","required":false},{"name":"sentiment-detection-job","required":false},{"name":"targeted-sentiment-detection-job","required":false},{"name":"topics-detection-job","required":false}]},"UpdateEndpoint":{"conditionKeys":[],"resources":[{"name":"document-classifier-endpoint"},{"name":"entity-recognizer-endpoint"},{"name":"flywheel"}],"description":"Grants permission to update information about the specified endpoint","accessLevel":"Write","resourceTypes":[{"name":"document-classifier-endpoint","required":true},{"name":"entity-recognizer-endpoint","required":true},{"name":"flywheel","required":false}]},"UpdateFlywheel":{"conditionKeys":[],"resources":[{"name":"document-classifier"},{"name":"entity-recognizer"},{"name":"flywheel"}],"description":"Grants permission to Update a flywheel's configuration","accessLevel":"Write","resourceTypes":[{"name":"flywheel","required":true},{"name":"document-classifier","required":false},{"name":"entity-recognizer","required":false}]}},"resources":[{"name":"document-classification-job","arnFormats":["arn:${Partition}:comprehend:${Region}:${Account}:document-classification-job/${JobId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"document-classifier","arnFormats":["arn:${Partition}:comprehend:${Region}:${Account}:document-classifier/${DocumentClassifierName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"document-classifier-endpoint","arnFormats":["arn:${Partition}:comprehend:${Region}:${Account}:document-classifier-endpoint/${DocumentClassifierEndpointName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"dominant-language-detection-job","arnFormats":["arn:${Partition}:comprehend:${Region}:${Account}:dominant-language-detection-job/${JobId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"entities-detection-job","arnFormats":["arn:${Partition}:comprehend:${Region}:${Account}:entities-detection-job/${JobId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"entity-recognizer","arnFormats":["arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer/${EntityRecognizerName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"entity-recognizer-endpoint","arnFormats":["arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer-endpoint/${EntityRecognizerEndpointName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"events-detection-job","arnFormats":["arn:${Partition}:comprehend:${Region}:${Account}:events-detection-job/${JobId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"flywheel","arnFormats":["arn:${Partition}:comprehend:${Region}:${Account}:flywheel/${FlywheelName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"flywheel-dataset","arnFormats":["arn:${Partition}:comprehend:${Region}:${Account}:flywheel/${FlywheelName}/dataset/${DatasetName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"key-phrases-detection-job","arnFormats":["arn:${Partition}:comprehend:${Region}:${Account}:key-phrases-detection-job/${JobId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"pii-entities-detection-job","arnFormats":["arn:${Partition}:comprehend:${Region}:${Account}:pii-entities-detection-job/${JobId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"sentiment-detection-job","arnFormats":["arn:${Partition}:comprehend:${Region}:${Account}:sentiment-detection-job/${JobId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"targeted-sentiment-detection-job","arnFormats":["arn:${Partition}:comprehend:${Region}:${Account}:targeted-sentiment-detection-job/${JobId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"topics-detection-job","arnFormats":["arn:${Partition}:comprehend:${Region}:${Account}:topics-detection-job/${JobId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by requiring tag values present in a resource creation request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by requiring tag value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by requiring the presence of mandatory tags in the request"},"comprehend:DataLakeKmsKey":{"types":["ARN"],"description":"Filters access by the DataLake Kms Key associated with the flywheel resource in the request"},"comprehend:FlywheelIterationId":{"types":["String"],"description":"Filters access by particular Iteration Id for a flywheel"},"comprehend:ModelKmsKey":{"types":["ARN"],"description":"Filters access by the model KMS key associated with the resource in the request"},"comprehend:OutputKmsKey":{"types":["ARN"],"description":"Filters access by the output KMS key associated with the resource in the request"},"comprehend:VolumeKmsKey":{"types":["ARN"],"description":"Filters access by the volume KMS key associated with the resource in the request"},"comprehend:VpcSecurityGroupIds":{"types":["ArrayOfString"],"description":"Filters access by the list of all VPC security group ids associated with the resource in the request"},"comprehend:VpcSubnets":{"types":["ArrayOfString"],"description":"Filters access by the list of all VPC subnets associated with the resource in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"comprehendmedical","actions":{"DescribeEntitiesDetectionV2Job":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the properties of a medical entity detection job that you have submitted","accessLevel":"Read","resourceTypes":[]},"DescribeICD10CMInferenceJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the properties of an ICD-10-CM linking job that you have submitted","accessLevel":"Read","resourceTypes":[]},"DescribePHIDetectionJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the properties of a PHI entity detection job that you have submitted","accessLevel":"Read","resourceTypes":[]},"DescribeRxNormInferenceJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the properties of an RxNorm linking job that you have submitted","accessLevel":"Read","resourceTypes":[]},"DescribeSNOMEDCTInferenceJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the properties of a SNOMED-CT linking job that you have submitted","accessLevel":"Read","resourceTypes":[]},"DetectEntitiesV2":{"conditionKeys":[],"resources":[],"description":"Grants permission to detect the named medical entities, and their relationships and traits within the given text document","accessLevel":"Read","resourceTypes":[]},"DetectPHI":{"conditionKeys":[],"resources":[],"description":"Grants permission to detect the protected health information (PHI) entities within the given text document","accessLevel":"Read","resourceTypes":[]},"InferICD10CM":{"conditionKeys":[],"resources":[],"description":"Grants permission to detect the medical condition entities within the given text document and link them to ICD-10-CM codes","accessLevel":"Read","resourceTypes":[]},"InferRxNorm":{"conditionKeys":[],"resources":[],"description":"Grants permission to detect the medication entities within the given text document and link them to RxCUI concept identifiers from the National Library of Medicine RxNorm database","accessLevel":"Read","resourceTypes":[]},"InferSNOMEDCT":{"conditionKeys":[],"resources":[],"description":"Grants permission to detect the medical condition, anatomy, and test, treatment, and procedure entities within the given text document and link them to SNOMED-CT codes","accessLevel":"Read","resourceTypes":[]},"ListEntitiesDetectionV2Jobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the medical entity detection jobs that you have submitted","accessLevel":"Read","resourceTypes":[]},"ListICD10CMInferenceJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the ICD-10-CM linking jobs that you have submitted","accessLevel":"Read","resourceTypes":[]},"ListPHIDetectionJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the PHI entity detection jobs that you have submitted","accessLevel":"Read","resourceTypes":[]},"ListRxNormInferenceJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the RxNorm linking jobs that you have submitted","accessLevel":"Read","resourceTypes":[]},"ListSNOMEDCTInferenceJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the SNOMED-CT linking jobs that you have submitted","accessLevel":"Read","resourceTypes":[]},"StartEntitiesDetectionV2Job":{"conditionKeys":[],"resources":[],"description":"Grants permission to start an asynchronous medical entity detection job for a collection of documents","accessLevel":"Write","resourceTypes":[]},"StartICD10CMInferenceJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to start an asynchronous ICD-10-CM linking job for a collection of documents","accessLevel":"Write","resourceTypes":[]},"StartPHIDetectionJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to start an asynchronous PHI entity detection job for a collection of documents","accessLevel":"Write","resourceTypes":[]},"StartRxNormInferenceJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to start an asynchronous RxNorm linking job for a collection of documents","accessLevel":"Write","resourceTypes":[]},"StartSNOMEDCTInferenceJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to start an asynchronous SNOMED-CT linking job for a collection of documents","accessLevel":"Write","resourceTypes":[]},"StopEntitiesDetectionV2Job":{"conditionKeys":[],"resources":[],"description":"Grants permission to stop a medical entity detection job","accessLevel":"Write","resourceTypes":[]},"StopICD10CMInferenceJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to stop an ICD-10-CM linking job","accessLevel":"Write","resourceTypes":[]},"StopPHIDetectionJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to stop a PHI entity detection job","accessLevel":"Write","resourceTypes":[]},"StopRxNormInferenceJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to stop an RxNorm linking job","accessLevel":"Write","resourceTypes":[]},"StopSNOMEDCTInferenceJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to stop a SNOMED-CT linking job","accessLevel":"Write","resourceTypes":[]}},"resources":[],"conditionKeys":{"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"compute-optimizer","actions":{"DeleteRecommendationPreferences":{"conditionKeys":["compute-optimizer:ResourceType"],"resources":[],"description":"Grants permission to delete recommendation preferences","accessLevel":"Write","resourceTypes":[],"dependentActions":["autoscaling:DescribeAutoScalingGroups","ec2:DescribeInstances","rds:DescribeDBClusters","rds:DescribeDBInstances"]},"DescribeRecommendationExportJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to view the status of recommendation export jobs","accessLevel":"List","resourceTypes":[]},"ExportAutoScalingGroupRecommendations":{"conditionKeys":[],"resources":[],"description":"Grants permission to export AutoScaling group recommendations to S3 for the provided accounts","accessLevel":"Write","resourceTypes":[],"dependentActions":["autoscaling:DescribeAutoScalingGroups","compute-optimizer:GetAutoScalingGroupRecommendations"]},"ExportEBSVolumeRecommendations":{"conditionKeys":[],"resources":[],"description":"Grants permission to export EBS volume recommendations to S3 for the provided accounts","accessLevel":"Write","resourceTypes":[],"dependentActions":["compute-optimizer:GetEBSVolumeRecommendations","ec2:DescribeVolumes"]},"ExportEC2InstanceRecommendations":{"conditionKeys":[],"resources":[],"description":"Grants permission to export EC2 instance recommendations to S3 for the provided accounts","accessLevel":"Write","resourceTypes":[],"dependentActions":["compute-optimizer:GetEC2InstanceRecommendations","ec2:DescribeInstances"]},"ExportECSServiceRecommendations":{"conditionKeys":[],"resources":[],"description":"Grants permission to export ECS service recommendations to S3 for the provided accounts","accessLevel":"Write","resourceTypes":[],"dependentActions":["compute-optimizer:GetECSServiceRecommendations","ecs:ListClusters","ecs:ListServices"]},"ExportIdleRecommendations":{"conditionKeys":[],"resources":[],"description":"Grants permission to export idle recommendations to S3 for the provided accounts","accessLevel":"Write","resourceTypes":[],"dependentActions":["compute-optimizer:GetIdleRecommendations"]},"ExportLambdaFunctionRecommendations":{"conditionKeys":[],"resources":[],"description":"Grants permission to export Lambda function recommendations to S3 for the provided accounts","accessLevel":"Write","resourceTypes":[],"dependentActions":["compute-optimizer:GetLambdaFunctionRecommendations","lambda:ListFunctions","lambda:ListProvisionedConcurrencyConfigs"]},"ExportLicenseRecommendations":{"conditionKeys":[],"resources":[],"description":"Grants permission to export license recommendations to S3 for the provided account(s)","accessLevel":"Write","resourceTypes":[],"dependentActions":["compute-optimizer:GetLicenseRecommendations","ec2:DescribeInstances"]},"ExportRDSDatabaseRecommendations":{"conditionKeys":[],"resources":[],"description":"Grants permission to export rds recommendations to S3 for the provided accounts","accessLevel":"Write","resourceTypes":[],"dependentActions":["compute-optimizer:GetRDSDatabaseRecommendations","rds:DescribeDBClusters","rds:DescribeDBInstances"]},"GetAutoScalingGroupRecommendations":{"conditionKeys":[],"resources":[],"description":"Grants permission to get recommendations for the provided AutoScaling groups","accessLevel":"List","resourceTypes":[],"dependentActions":["autoscaling:DescribeAutoScalingGroups"]},"GetEBSVolumeRecommendations":{"conditionKeys":[],"resources":[],"description":"Grants permission to get recommendations for the provided EBS volumes","accessLevel":"List","resourceTypes":[],"dependentActions":["ec2:DescribeVolumes"]},"GetEC2InstanceRecommendations":{"conditionKeys":[],"resources":[],"description":"Grants permission to get recommendations for the provided EC2 instances","accessLevel":"List","resourceTypes":[],"dependentActions":["ec2:DescribeInstances"]},"GetEC2RecommendationProjectedMetrics":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the recommendation projected metrics of the specified instance","accessLevel":"List","resourceTypes":[],"dependentActions":["ec2:DescribeInstances"]},"GetECSServiceRecommendationProjectedMetrics":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the recommendation projected metrics of the specified ECS service","accessLevel":"List","resourceTypes":[]},"GetECSServiceRecommendations":{"conditionKeys":[],"resources":[],"description":"Grants permission to get recommendations for the provided ECS services","accessLevel":"List","resourceTypes":[],"dependentActions":["ecs:ListClusters","ecs:ListServices"]},"GetEffectiveRecommendationPreferences":{"conditionKeys":["compute-optimizer:ResourceType"],"resources":[],"description":"Grants permission to get recommendation preferences that are in effect","accessLevel":"Read","resourceTypes":[],"dependentActions":["autoscaling:DescribeAutoScalingGroups","autoscaling:DescribeAutoScalingInstances","ec2:DescribeInstances","rds:DescribeDBClusters","rds:DescribeDBInstances"]},"GetEnrollmentStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the enrollment status for the specified account","accessLevel":"List","resourceTypes":[]},"GetEnrollmentStatusesForOrganization":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the enrollment statuses for member accounts of the organization","accessLevel":"List","resourceTypes":[]},"GetIdleRecommendations":{"conditionKeys":[],"resources":[],"description":"Grants permission to get idle recommendations for the specified account(s)","accessLevel":"List","resourceTypes":[]},"GetLambdaFunctionRecommendations":{"conditionKeys":[],"resources":[],"description":"Grants permission to get recommendations for the provided Lambda functions","accessLevel":"List","resourceTypes":[],"dependentActions":["lambda:ListFunctions","lambda:ListProvisionedConcurrencyConfigs"]},"GetLicenseRecommendations":{"conditionKeys":[],"resources":[],"description":"Grants permission to get license recommendations for the specified account(s)","accessLevel":"List","resourceTypes":[],"dependentActions":["ec2:DescribeInstances"]},"GetRDSDatabaseRecommendationProjectedMetrics":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the recommendation projected metrics of the specified instance","accessLevel":"List","resourceTypes":[],"dependentActions":["rds:DescribeDBClusters","rds:DescribeDBInstances"]},"GetRDSDatabaseRecommendations":{"conditionKeys":[],"resources":[],"description":"Grants permission to get rds recommendations for the specified account(s)","accessLevel":"List","resourceTypes":[],"dependentActions":["rds:DescribeDBClusters","rds:DescribeDBInstances"]},"GetRecommendationPreferences":{"conditionKeys":["compute-optimizer:ResourceType"],"resources":[],"description":"Grants permission to get recommendation preferences","accessLevel":"Read","resourceTypes":[]},"GetRecommendationSummaries":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the recommendation summaries for the specified account(s)","accessLevel":"List","resourceTypes":[]},"PutRecommendationPreferences":{"conditionKeys":["compute-optimizer:ResourceType"],"resources":[],"description":"Grants permission to put recommendation preferences","accessLevel":"Write","resourceTypes":[],"dependentActions":["autoscaling:DescribeAutoScalingGroups","autoscaling:DescribeAutoScalingInstances","ec2:DescribeInstances","rds:DescribeDBClusters","rds:DescribeDBInstances"]},"UpdateEnrollmentStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the enrollment status","accessLevel":"Write","resourceTypes":[]}},"resources":[],"conditionKeys":{"compute-optimizer:ResourceType":{"types":["String"],"description":"Filters access by the resource type"}}}
@@ -0,0 +1 @@
1
+ {"name":"config","actions":{"AssociateResourceTypes":{"conditionKeys":[],"resources":[{"name":"ConfigurationRecorder"}],"description":"Grants permission to add all specified resource types to the RecordingGroup of configuration recorder and includes those resource types when recording","accessLevel":"Write","resourceTypes":[{"name":"ConfigurationRecorder","required":true}]},"BatchGetAggregateResourceConfig":{"conditionKeys":[],"resources":[{"name":"ConfigurationAggregator"}],"description":"Grants permission to return the current configuration items for resources that are present in your AWS Config aggregator","accessLevel":"Read","resourceTypes":[{"name":"ConfigurationAggregator","required":true}]},"BatchGetResourceConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the current configuration for one or more requested resources","accessLevel":"Read","resourceTypes":[]},"DeleteAggregationAuthorization":{"conditionKeys":[],"resources":[{"name":"AggregationAuthorization"}],"description":"Grants permission to delete the authorization granted to the specified configuration aggregator account in a specified region","accessLevel":"Write","resourceTypes":[{"name":"AggregationAuthorization","required":true}]},"DeleteConfigRule":{"conditionKeys":[],"resources":[{"name":"ConfigRule"}],"description":"Grants permission to delete the specified AWS Config rule and all of its evaluation results","accessLevel":"Write","resourceTypes":[{"name":"ConfigRule","required":true}]},"DeleteConfigurationAggregator":{"conditionKeys":[],"resources":[{"name":"ConfigurationAggregator"}],"description":"Grants permission to delete the specified configuration aggregator and the aggregated data associated with the aggregator","accessLevel":"Write","resourceTypes":[{"name":"ConfigurationAggregator","required":true}]},"DeleteConfigurationRecorder":{"conditionKeys":[],"resources":[{"name":"ConfigurationRecorder"}],"description":"Grants permission to delete the customer managed configuration recorder","accessLevel":"Write","resourceTypes":[{"name":"ConfigurationRecorder","required":true}]},"DeleteConformancePack":{"conditionKeys":[],"resources":[{"name":"ConformancePack"}],"description":"Grants permission to delete the specified conformance pack and all the AWS Config rules and all evaluation results within that conformance pack","accessLevel":"Write","resourceTypes":[{"name":"ConformancePack","required":true}]},"DeleteDeliveryChannel":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the delivery channel","accessLevel":"Write","resourceTypes":[]},"DeleteEvaluationResults":{"conditionKeys":[],"resources":[{"name":"ConfigRule"}],"description":"Grants permission to delete the evaluation results for the specified Config rule","accessLevel":"Write","resourceTypes":[{"name":"ConfigRule","required":true}]},"DeleteOrganizationConfigRule":{"conditionKeys":[],"resources":[{"name":"OrganizationConfigRule"}],"description":"Grants permission to delete the specified organization config rule and all of its evaluation results from all member accounts in that organization","accessLevel":"Write","resourceTypes":[{"name":"OrganizationConfigRule","required":true}]},"DeleteOrganizationConformancePack":{"conditionKeys":[],"resources":[{"name":"OrganizationConformancePack"}],"description":"Grants permission to delete the specified organization conformance pack and all of its evaluation results from all member accounts in that organization","accessLevel":"Write","resourceTypes":[{"name":"OrganizationConformancePack","required":true}]},"DeletePendingAggregationRequest":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete pending authorization requests for a specified aggregator account in a specified region","accessLevel":"Write","resourceTypes":[]},"DeleteRemediationConfiguration":{"conditionKeys":[],"resources":[{"name":"RemediationConfiguration"}],"description":"Grants permission to delete the remediation configuration","accessLevel":"Write","resourceTypes":[{"name":"RemediationConfiguration","required":true}]},"DeleteRemediationExceptions":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete one or more remediation exceptions for specific resource keys for a specific AWS Config Rule","accessLevel":"Write","resourceTypes":[]},"DeleteResourceConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to record the configuration state for a custom resource that has been deleted","accessLevel":"Write","resourceTypes":[]},"DeleteRetentionConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the retention configuration","accessLevel":"Write","resourceTypes":[]},"DeleteServiceLinkedConfigurationRecorder":{"conditionKeys":["config:ConfigurationRecorderServicePrincipal"],"resources":[{"name":"ConfigurationRecorder"}],"description":"Grants permission to delete the service-linked configuration recorder","accessLevel":"Write","resourceTypes":[{"name":"ConfigurationRecorder","required":true}]},"DeleteStoredQuery":{"conditionKeys":[],"resources":[{"name":"StoredQuery"}],"description":"Grants permission to delete the stored query for an AWS account in an AWS Region","accessLevel":"Write","resourceTypes":[{"name":"StoredQuery","required":true}]},"DeliverConfigSnapshot":{"conditionKeys":[],"resources":[],"description":"Grants permission to schedule delivery of a configuration snapshot to the Amazon S3 bucket in the specified delivery channel","accessLevel":"Read","resourceTypes":[]},"DescribeAggregateComplianceByConfigRules":{"conditionKeys":[],"resources":[{"name":"ConfigurationAggregator"}],"description":"Grants permission to return a list of compliant and noncompliant rules with the number of resources for compliant and noncompliant rules","accessLevel":"Read","resourceTypes":[{"name":"ConfigurationAggregator","required":true}]},"DescribeAggregateComplianceByConformancePacks":{"conditionKeys":[],"resources":[{"name":"ConfigurationAggregator"}],"description":"Grants permission to return a list of compliant and noncompliant conformance packs along with count of compliant, non-compliant and total rules within each conformance pack","accessLevel":"Read","resourceTypes":[{"name":"ConfigurationAggregator","required":true}]},"DescribeAggregationAuthorizations":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of authorizations granted to various aggregator accounts and regions","accessLevel":"List","resourceTypes":[]},"DescribeComplianceByConfigRule":{"conditionKeys":[],"resources":[],"description":"Grants permission to indicate whether the specified AWS Config rules are compliant","accessLevel":"Read","resourceTypes":[]},"DescribeComplianceByResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to indicate whether the specified AWS resources are compliant","accessLevel":"Read","resourceTypes":[]},"DescribeConfigRuleEvaluationStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to return status information for each of your AWS managed Config rules","accessLevel":"Read","resourceTypes":[]},"DescribeConfigRules":{"conditionKeys":[],"resources":[],"description":"Grants permission to return details about your AWS Config rules","accessLevel":"List","resourceTypes":[]},"DescribeConfigurationAggregatorSourcesStatus":{"conditionKeys":[],"resources":[{"name":"ConfigurationAggregator"}],"description":"Grants permission to return status information for sources within an aggregator","accessLevel":"Read","resourceTypes":[{"name":"ConfigurationAggregator","required":true}]},"DescribeConfigurationAggregators":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the details of one or more configuration aggregators","accessLevel":"List","resourceTypes":[]},"DescribeConfigurationRecorderStatus":{"conditionKeys":["config:ConfigurationRecorderServicePrincipal"],"resources":[{"name":"ConfigurationRecorder"}],"description":"Grants permission to return the current status of the specified configuration recorder","accessLevel":"Read","resourceTypes":[{"name":"ConfigurationRecorder","required":true}]},"DescribeConfigurationRecorders":{"conditionKeys":["config:ConfigurationRecorderServicePrincipal"],"resources":[{"name":"ConfigurationRecorder"}],"description":"Grants permission to return the names of one or more specified configuration recorders","accessLevel":"Read","resourceTypes":[{"name":"ConfigurationRecorder","required":true}]},"DescribeConformancePackCompliance":{"conditionKeys":[],"resources":[{"name":"ConformancePack"}],"description":"Grants permission to return compliance information for each rule in that conformance pack","accessLevel":"Read","resourceTypes":[{"name":"ConformancePack","required":true}]},"DescribeConformancePackStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to provide one or more conformance packs deployment status","accessLevel":"Read","resourceTypes":[]},"DescribeConformancePacks":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of one or more conformance packs","accessLevel":"List","resourceTypes":[]},"DescribeDeliveryChannelStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the current status of the specified delivery channel","accessLevel":"Read","resourceTypes":[]},"DescribeDeliveryChannels":{"conditionKeys":[],"resources":[],"description":"Grants permission to return details about the specified delivery channel","accessLevel":"List","resourceTypes":[]},"DescribeOrganizationConfigRuleStatuses":{"conditionKeys":[],"resources":[],"description":"Grants permission to provide organization config rule deployment status for an organization","accessLevel":"Read","resourceTypes":[]},"DescribeOrganizationConfigRules":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of organization config rules","accessLevel":"List","resourceTypes":[]},"DescribeOrganizationConformancePackStatuses":{"conditionKeys":[],"resources":[],"description":"Grants permission to provide organization conformance pack deployment status for an organization","accessLevel":"Read","resourceTypes":[]},"DescribeOrganizationConformancePacks":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of organization conformance packs","accessLevel":"List","resourceTypes":[]},"DescribePendingAggregationRequests":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of all pending aggregation requests","accessLevel":"List","resourceTypes":[]},"DescribeRemediationConfigurations":{"conditionKeys":[],"resources":[{"name":"RemediationConfiguration"}],"description":"Grants permission to return the details of one or more remediation configurations","accessLevel":"List","resourceTypes":[{"name":"RemediationConfiguration","required":true}]},"DescribeRemediationExceptions":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the details of one or more remediation exceptions","accessLevel":"List","resourceTypes":[]},"DescribeRemediationExecutionStatus":{"conditionKeys":[],"resources":[{"name":"RemediationConfiguration"}],"description":"Grants permission to provide a detailed view of a Remediation Execution for a set of resources including state, timestamps and any error messages for steps that have failed","accessLevel":"Read","resourceTypes":[{"name":"RemediationConfiguration","required":true}]},"DescribeRetentionConfigurations":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the details of one or more retention configurations","accessLevel":"List","resourceTypes":[]},"DisassociateResourceTypes":{"conditionKeys":[],"resources":[{"name":"ConfigurationRecorder"}],"description":"Grants permission to remove all specified resource types from the RecordingGroup of configuration recorder and excludes these resource types when recording","accessLevel":"Write","resourceTypes":[{"name":"ConfigurationRecorder","required":true}]},"GetAggregateComplianceDetailsByConfigRule":{"conditionKeys":[],"resources":[{"name":"ConfigurationAggregator"}],"description":"Grants permission to return the evaluation results for the specified AWS Config rule for a specific resource in a rule","accessLevel":"Read","resourceTypes":[{"name":"ConfigurationAggregator","required":true}]},"GetAggregateConfigRuleComplianceSummary":{"conditionKeys":[],"resources":[{"name":"ConfigurationAggregator"}],"description":"Grants permission to return the number of compliant and noncompliant rules for one or more accounts and regions in an aggregator","accessLevel":"Read","resourceTypes":[{"name":"ConfigurationAggregator","required":true}]},"GetAggregateConformancePackComplianceSummary":{"conditionKeys":[],"resources":[{"name":"ConfigurationAggregator"}],"description":"Grants permission to return the number of compliant and noncompliant conformance packs for one or more accounts and regions in an aggregator","accessLevel":"Read","resourceTypes":[{"name":"ConfigurationAggregator","required":true}]},"GetAggregateDiscoveredResourceCounts":{"conditionKeys":[],"resources":[{"name":"ConfigurationAggregator"}],"description":"Grants permission to return the resource counts across accounts and regions that are present in your AWS Config aggregator","accessLevel":"Read","resourceTypes":[{"name":"ConfigurationAggregator","required":true}]},"GetAggregateResourceConfig":{"conditionKeys":[],"resources":[{"name":"ConfigurationAggregator"}],"description":"Grants permission to return configuration item that is aggregated for your specific resource in a specific source account and region","accessLevel":"Read","resourceTypes":[{"name":"ConfigurationAggregator","required":true}]},"GetComplianceDetailsByConfigRule":{"conditionKeys":[],"resources":[{"name":"ConfigRule"}],"description":"Grants permission to return the evaluation results for the specified AWS Config rule","accessLevel":"Read","resourceTypes":[{"name":"ConfigRule","required":true}]},"GetComplianceDetailsByResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the evaluation results for the specified AWS resource","accessLevel":"Read","resourceTypes":[]},"GetComplianceSummaryByConfigRule":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the number of AWS Config rules that are compliant and noncompliant, up to a maximum of 25 for each","accessLevel":"Read","resourceTypes":[]},"GetComplianceSummaryByResourceType":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the number of resources that are compliant and the number that are noncompliant","accessLevel":"Read","resourceTypes":[]},"GetConformancePackComplianceDetails":{"conditionKeys":[],"resources":[{"name":"ConformancePack"}],"description":"Grants permission to return compliance details of a conformance pack for all AWS resources that are monitered by conformance pack","accessLevel":"Read","resourceTypes":[{"name":"ConformancePack","required":true}]},"GetConformancePackComplianceSummary":{"conditionKeys":[],"resources":[{"name":"ConformancePack"}],"description":"Grants permission to provide compliance summary for one or more conformance packs","accessLevel":"Read","resourceTypes":[{"name":"ConformancePack","required":true}]},"GetCustomRulePolicy":{"conditionKeys":[],"resources":[{"name":"ConfigRule"}],"description":"Grants permission to return the policy definition containing the logic for your AWS Config Custom Policy rule","accessLevel":"Read","resourceTypes":[{"name":"ConfigRule","required":true}]},"GetDiscoveredResourceCounts":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the resource types, the number of each resource type, and the total number of resources that AWS Config is recording in this region for your AWS account","accessLevel":"Read","resourceTypes":[]},"GetOrganizationConfigRuleDetailedStatus":{"conditionKeys":[],"resources":[{"name":"OrganizationConfigRule"}],"description":"Grants permission to return detailed status for each member account within an organization for a given organization config rule","accessLevel":"Read","resourceTypes":[{"name":"OrganizationConfigRule","required":true}]},"GetOrganizationConformancePackDetailedStatus":{"conditionKeys":[],"resources":[{"name":"OrganizationConformancePack"}],"description":"Grants permission to return detailed status for each member account within an organization for a given organization conformance pack","accessLevel":"Read","resourceTypes":[{"name":"OrganizationConformancePack","required":true}]},"GetOrganizationCustomRulePolicy":{"conditionKeys":[],"resources":[{"name":"OrganizationConfigRule"}],"description":"Grants permission to return the policy definition containing the logic for your organization AWS Config Custom Policy rule","accessLevel":"Read","resourceTypes":[{"name":"OrganizationConfigRule","required":true}]},"GetResourceConfigHistory":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of configuration items for the specified resource","accessLevel":"Read","resourceTypes":[]},"GetResourceEvaluationSummary":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the summary of resource evaluations for a specific resource evaluation ID","accessLevel":"Read","resourceTypes":[]},"GetStoredQuery":{"conditionKeys":[],"resources":[{"name":"StoredQuery"}],"description":"Grants permission to return the details of a specific stored query","accessLevel":"Read","resourceTypes":[{"name":"StoredQuery","required":true}]},"ListAggregateDiscoveredResources":{"conditionKeys":[],"resources":[{"name":"ConfigurationAggregator"}],"description":"Grants permission to accept a resource type and returns a list of resource identifiers that are aggregated for a specific resource type across accounts and regions","accessLevel":"List","resourceTypes":[{"name":"ConfigurationAggregator","required":true}]},"ListConfigurationRecorders":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the configuration recorder summaries for an AWS account in an AWS Region","accessLevel":"List","resourceTypes":[]},"ListConformancePackComplianceScores":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the percentage of compliant rule-resource combinations in a conformance pack compared to the number of total possible rule-resource combinations","accessLevel":"List","resourceTypes":[]},"ListDiscoveredResources":{"conditionKeys":[],"resources":[],"description":"Grants permission to accept a resource type and returns a list of resource identifiers for the resources of that type","accessLevel":"List","resourceTypes":[]},"ListResourceEvaluations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the resource evaluation summaries for an AWS account in an AWS Region","accessLevel":"List","resourceTypes":[]},"ListStoredQueries":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the stored queries for an AWS account in an AWS Region","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"AggregationAuthorization"},{"name":"ConfigRule"},{"name":"ConfigurationAggregator"},{"name":"ConfigurationRecorder"},{"name":"ConformancePack"},{"name":"OrganizationConfigRule"},{"name":"OrganizationConformancePack"},{"name":"StoredQuery"}],"description":"Grants permission to list the tags for AWS Config resource","accessLevel":"Read","resourceTypes":[{"name":"AggregationAuthorization","required":false},{"name":"ConfigRule","required":false},{"name":"ConfigurationAggregator","required":false},{"name":"ConfigurationRecorder","required":false},{"name":"ConformancePack","required":false},{"name":"OrganizationConfigRule","required":false},{"name":"OrganizationConformancePack","required":false},{"name":"StoredQuery","required":false}]},"PutAggregationAuthorization":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"AggregationAuthorization"}],"description":"Grants permission to authorize the aggregator account and region to collect data from the source account and region","accessLevel":"Write","resourceTypes":[{"name":"AggregationAuthorization","required":true}]},"PutConfigRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ConfigRule"}],"description":"Grants permission to add or update an AWS Config rule for evaluating whether your AWS resources comply with your desired configurations","accessLevel":"Write","resourceTypes":[{"name":"ConfigRule","required":true}]},"PutConfigurationAggregator":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ConfigurationAggregator"}],"description":"Grants permission to create and update the configuration aggregator with the selected source accounts and regions","accessLevel":"Write","resourceTypes":[{"name":"ConfigurationAggregator","required":true}],"dependentActions":["iam:PassRole","organizations:EnableAWSServiceAccess","organizations:ListDelegatedAdministrators"]},"PutConfigurationRecorder":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ConfigurationRecorder"}],"description":"Grants permission to create or update a customer managed configuration recorder to record the selected resource configurations","accessLevel":"Write","resourceTypes":[{"name":"ConfigurationRecorder","required":true}],"dependentActions":["iam:PassRole"]},"PutConformancePack":{"conditionKeys":[],"resources":[{"name":"ConformancePack"}],"description":"Grants permission to create or update a conformance pack","accessLevel":"Write","resourceTypes":[{"name":"ConformancePack","required":true}],"dependentActions":["iam:CreateServiceLinkedRole","iam:PassRole","s3:GetObject","s3:ListBucket","ssm:GetDocument"]},"PutDeliveryChannel":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a delivery channel object to deliver configuration information to an Amazon S3 bucket and Amazon SNS topic","accessLevel":"Write","resourceTypes":[]},"PutEvaluations":{"conditionKeys":[],"resources":[],"description":"Grants permission to be used by an AWS Lambda function to deliver evaluation results to AWS Config","accessLevel":"Write","resourceTypes":[]},"PutExternalEvaluation":{"conditionKeys":[],"resources":[{"name":"ConfigRule"}],"description":"Grants permission to deliver evaluation result to AWS Config","accessLevel":"Write","resourceTypes":[{"name":"ConfigRule","required":true}]},"PutOrganizationConfigRule":{"conditionKeys":[],"resources":[{"name":"OrganizationConfigRule"}],"description":"Grants permission to add or update organization config rule for your entire organization evaluating whether your AWS resources comply with your desired configurations","accessLevel":"Write","resourceTypes":[{"name":"OrganizationConfigRule","required":true}],"dependentActions":["iam:CreateServiceLinkedRole","iam:PassRole","organizations:EnableAWSServiceAccess","organizations:ListDelegatedAdministrators"]},"PutOrganizationConformancePack":{"conditionKeys":[],"resources":[{"name":"OrganizationConformancePack"}],"description":"Grants permission to add or update organization conformance pack for your entire organization evaluating whether your AWS resources comply with your desired configurations","accessLevel":"Write","resourceTypes":[{"name":"OrganizationConformancePack","required":true}],"dependentActions":["iam:CreateServiceLinkedRole","iam:PassRole","organizations:EnableAWSServiceAccess","organizations:ListDelegatedAdministrators","s3:GetObject"]},"PutRemediationConfigurations":{"conditionKeys":[],"resources":[{"name":"RemediationConfiguration"}],"description":"Grants permission to add or update the remediation configuration with a specific AWS Config rule with the selected target or action","accessLevel":"Write","resourceTypes":[{"name":"RemediationConfiguration","required":true}],"dependentActions":["iam:PassRole"]},"PutRemediationExceptions":{"conditionKeys":[],"resources":[],"description":"Grants permission to add or update remediation exceptions for specific resources for a specific AWS Config rule","accessLevel":"Write","resourceTypes":[]},"PutResourceConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to record the configuration state for the resource provided in the request","accessLevel":"Write","resourceTypes":[]},"PutRetentionConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to create and update the retention configuration with details about retention period (number of days) that AWS Config stores your historical information","accessLevel":"Write","resourceTypes":[]},"PutServiceLinkedConfigurationRecorder":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","config:ConfigurationRecorderServicePrincipal"],"resources":[],"description":"Grants permission to create a new service-linked configuration recorder to record the resource configurations in scope for the linked service","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:CreateServiceLinkedRole","iam:PassRole"]},"PutStoredQuery":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"StoredQuery"}],"description":"Grants permission to save a new query or updates an existing saved query","accessLevel":"Write","resourceTypes":[{"name":"StoredQuery","required":true}]},"SelectAggregateResourceConfig":{"conditionKeys":[],"resources":[{"name":"ConfigurationAggregator"}],"description":"Grants permission to accept a structured query language (SQL) SELECT command and an aggregator to query configuration state of AWS resources across multiple accounts and regions, performs the corresponding search, and returns resource configurations matching the properties","accessLevel":"Read","resourceTypes":[{"name":"ConfigurationAggregator","required":true}]},"SelectResourceConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to accept a structured query language (SQL) SELECT command, performs the corresponding search, and returns resource configurations matching the properties","accessLevel":"Read","resourceTypes":[]},"StartConfigRulesEvaluation":{"conditionKeys":[],"resources":[{"name":"ConfigRule"}],"description":"Grants permission to evaluate your resources against the specified Config rules","accessLevel":"Write","resourceTypes":[{"name":"ConfigRule","required":true}]},"StartConfigurationRecorder":{"conditionKeys":[],"resources":[{"name":"ConfigurationRecorder"}],"description":"Grants permission to the customer managed configuration recorder to start recording configurations of the AWS resources you have selected to record in your AWS account","accessLevel":"Write","resourceTypes":[{"name":"ConfigurationRecorder","required":true}]},"StartRemediationExecution":{"conditionKeys":[],"resources":[],"description":"Grants permission to run an on-demand remediation for the specified AWS Config rules against the last known remediation configuration","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"]},"StartResourceEvaluation":{"conditionKeys":[],"resources":[],"description":"Grants permission to evaluate your resource details against the AWS Config rules in your account","accessLevel":"Write","resourceTypes":[],"dependentActions":["cloudformation:DescribeType"]},"StopConfigurationRecorder":{"conditionKeys":[],"resources":[{"name":"ConfigurationRecorder"}],"description":"Grants permission to the customer managed configuration recorder to stop recording configurations of the AWS resources you have selected to record in your AWS account","accessLevel":"Write","resourceTypes":[{"name":"ConfigurationRecorder","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"AggregationAuthorization"},{"name":"ConfigRule"},{"name":"ConfigurationAggregator"},{"name":"ConfigurationRecorder"},{"name":"ConformancePack"},{"name":"OrganizationConfigRule"},{"name":"OrganizationConformancePack"},{"name":"StoredQuery"}],"description":"Grants permission to associate the specified tags to a resource with the specified resourceArn","accessLevel":"Tagging","resourceTypes":[{"name":"AggregationAuthorization","required":false},{"name":"ConfigRule","required":false},{"name":"ConfigurationAggregator","required":false},{"name":"ConfigurationRecorder","required":false},{"name":"ConformancePack","required":false},{"name":"OrganizationConfigRule","required":false},{"name":"OrganizationConformancePack","required":false},{"name":"StoredQuery","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"AggregationAuthorization"},{"name":"ConfigRule"},{"name":"ConfigurationAggregator"},{"name":"ConfigurationRecorder"},{"name":"ConformancePack"},{"name":"OrganizationConfigRule"},{"name":"OrganizationConformancePack"},{"name":"StoredQuery"}],"description":"Grants permission to delete specified tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"AggregationAuthorization","required":false},{"name":"ConfigRule","required":false},{"name":"ConfigurationAggregator","required":false},{"name":"ConfigurationRecorder","required":false},{"name":"ConformancePack","required":false},{"name":"OrganizationConfigRule","required":false},{"name":"OrganizationConformancePack","required":false},{"name":"StoredQuery","required":false}]}},"resources":[{"name":"AggregationAuthorization","arnFormats":["arn:${Partition}:config:${Region}:${Account}:aggregation-authorization/${AggregatorAccount}/${AggregatorRegion}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"ConfigRule","arnFormats":["arn:${Partition}:config:${Region}:${Account}:config-rule/${ConfigRuleId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"ConfigurationAggregator","arnFormats":["arn:${Partition}:config:${Region}:${Account}:config-aggregator/${AggregatorId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"ConfigurationRecorder","arnFormats":["arn:${Partition}:config:${Region}:${Account}:configuration-recorder/${RecorderName}/${RecorderId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"ConformancePack","arnFormats":["arn:${Partition}:config:${Region}:${Account}:conformance-pack/${ConformancePackName}/${ConformancePackId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"OrganizationConfigRule","arnFormats":["arn:${Partition}:config:${Region}:${Account}:organization-config-rule/${OrganizationConfigRuleId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"OrganizationConformancePack","arnFormats":["arn:${Partition}:config:${Region}:${Account}:organization-conformance-pack/${OrganizationConformancePackId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"RemediationConfiguration","arnFormats":["arn:${Partition}:config:${Region}:${Account}:remediation-configuration/${RemediationConfigurationId}"],"conditionKeys":[]},{"name":"StoredQuery","arnFormats":["arn:${Partition}:config:${Region}:${Account}:stored-query/${StoredQueryName}/${StoredQueryId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the allowed set of values for each of the tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag-value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of mandatory tags in the request"},"config:ConfigurationRecorderServicePrincipal":{"types":["String"],"description":"Filters access by service principal of the configuration recorder"}}}
@@ -0,0 +1 @@
1
+ {"name":"connect-campaigns","actions":{"CreateCampaign":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"campaign"}],"description":"Grants permission to create a campaign","accessLevel":"Write","resourceTypes":[{"name":"campaign","required":true}]},"DeleteCampaign":{"conditionKeys":[],"resources":[{"name":"campaign"}],"description":"Grants permission to delete a campaign","accessLevel":"Write","resourceTypes":[{"name":"campaign","required":true}]},"DeleteCampaignChannelSubtypeConfig":{"conditionKeys":[],"resources":[{"name":"campaign"}],"description":"Grants permission to delete the channel subtype configuration of a campaign","accessLevel":"Write","resourceTypes":[{"name":"campaign","required":true}]},"DeleteCampaignCommunicationLimits":{"conditionKeys":[],"resources":[{"name":"campaign"}],"description":"Grants permission to delete the communication limits configuration of a campaign","accessLevel":"Write","resourceTypes":[{"name":"campaign","required":true}]},"DeleteCampaignCommunicationTime":{"conditionKeys":[],"resources":[{"name":"campaign"}],"description":"Grants permission to delete the communication time configuration of a campaign","accessLevel":"Write","resourceTypes":[{"name":"campaign","required":true}]},"DeleteConnectInstanceConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to remove configuration information for an Amazon Connect instance","accessLevel":"Write","resourceTypes":[]},"DeleteConnectInstanceIntegration":{"conditionKeys":[],"resources":[],"description":"Grants permission to remove integration information for an Amazon Connect instance","accessLevel":"Write","resourceTypes":[]},"DeleteInstanceOnboardingJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to remove onboarding job for an Amazon Connect instance","accessLevel":"Write","resourceTypes":[]},"DescribeCampaign":{"conditionKeys":["aws:RequestTag/${TagKey}"],"resources":[{"name":"campaign"}],"description":"Grants permission to describe a specific campaign","accessLevel":"Read","resourceTypes":[{"name":"campaign","required":true}]},"GetCampaignState":{"conditionKeys":["aws:RequestTag/${TagKey}"],"resources":[{"name":"campaign"}],"description":"Grants permission to get state of a campaign","accessLevel":"Read","resourceTypes":[{"name":"campaign","required":true}]},"GetCampaignStateBatch":{"conditionKeys":["aws:RequestTag/${TagKey}"],"resources":[{"name":"campaign"}],"description":"Grants permission to get state of campaigns","accessLevel":"Read","resourceTypes":[{"name":"campaign","required":true}]},"GetConnectInstanceConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to get configuration information for an Amazon Connect instance","accessLevel":"Read","resourceTypes":[]},"GetInstanceCommunicationLimits":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the communication limits configuration of an Amazon Connect instance","accessLevel":"Read","resourceTypes":[]},"GetInstanceOnboardingJobStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to get onboarding job status for an Amazon Connect instance","accessLevel":"Read","resourceTypes":[]},"ListCampaigns":{"conditionKeys":["aws:RequestTag/${TagKey}"],"resources":[],"description":"Grants permission to provide summary of all campaigns","accessLevel":"List","resourceTypes":[]},"ListConnectInstanceIntegrations":{"conditionKeys":[],"resources":[],"description":"Grants permission to provide summary of all integrations with an Amazon Connect instance","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"campaign"}],"description":"Grants permission to list tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"campaign","required":false}]},"PauseCampaign":{"conditionKeys":[],"resources":[{"name":"campaign"}],"description":"Grants permission to pause a campaign","accessLevel":"Write","resourceTypes":[{"name":"campaign","required":true}]},"PutConnectInstanceIntegration":{"conditionKeys":[],"resources":[],"description":"Grants permission to put an integration configuration with an Amazon Connect instance","accessLevel":"Write","resourceTypes":[]},"PutDialRequestBatch":{"conditionKeys":[],"resources":[{"name":"campaign"}],"description":"Grants permission to create dial requests for the specified campaign","accessLevel":"Write","resourceTypes":[{"name":"campaign","required":true}]},"PutInstanceCommunicationLimits":{"conditionKeys":[],"resources":[],"description":"Grants permission to put the communication limits configuration of an Amazon Connect instance","accessLevel":"Write","resourceTypes":[]},"PutOutboundRequestBatch":{"conditionKeys":[],"resources":[{"name":"campaign"}],"description":"Grants permission to create dial requests for the specified campaign","accessLevel":"Write","resourceTypes":[{"name":"campaign","required":true}]},"PutProfileOutboundRequestBatch":{"conditionKeys":[],"resources":[{"name":"campaign"}],"description":"Grants permission to create profile outbound requests for the specified campaign","accessLevel":"Write","resourceTypes":[{"name":"campaign","required":true}]},"ResumeCampaign":{"conditionKeys":[],"resources":[{"name":"campaign"}],"description":"Grants permission to resume a campaign","accessLevel":"Write","resourceTypes":[{"name":"campaign","required":true}]},"StartCampaign":{"conditionKeys":[],"resources":[{"name":"campaign"}],"description":"Grants permission to start a campaign","accessLevel":"Write","resourceTypes":[{"name":"campaign","required":true}]},"StartInstanceOnboardingJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to start onboarding job for an Amazon Connect instance","accessLevel":"Write","resourceTypes":[]},"StopCampaign":{"conditionKeys":[],"resources":[{"name":"campaign"}],"description":"Grants permission to stop a campaign","accessLevel":"Write","resourceTypes":[{"name":"campaign","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"campaign"}],"description":"Grants permission to tag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"campaign","required":true}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"campaign"}],"description":"Grants permission to untag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"campaign","required":true}]},"UpdateCampaignChannelSubtypeConfig":{"conditionKeys":[],"resources":[{"name":"campaign"}],"description":"Grants permission to update the channel subtype configuration of a campaign","accessLevel":"Write","resourceTypes":[{"name":"campaign","required":true}]},"UpdateCampaignCommunicationLimits":{"conditionKeys":[],"resources":[{"name":"campaign"}],"description":"Grants permission to update the communication limits configuration of a campaign","accessLevel":"Write","resourceTypes":[{"name":"campaign","required":true}]},"UpdateCampaignCommunicationTime":{"conditionKeys":[],"resources":[{"name":"campaign"}],"description":"Grants permission to update the communication time configuration of a campaign","accessLevel":"Write","resourceTypes":[{"name":"campaign","required":true}]},"UpdateCampaignDialerConfig":{"conditionKeys":[],"resources":[{"name":"campaign"}],"description":"Grants permission to update the dialer configuration of a campaign","accessLevel":"Write","resourceTypes":[{"name":"campaign","required":true}]},"UpdateCampaignFlowAssociation":{"conditionKeys":[],"resources":[{"name":"campaign"}],"description":"Grants permission to update the flow association of a campaign","accessLevel":"Write","resourceTypes":[{"name":"campaign","required":true}]},"UpdateCampaignName":{"conditionKeys":[],"resources":[{"name":"campaign"}],"description":"Grants permission to update the name of a campaign","accessLevel":"Write","resourceTypes":[{"name":"campaign","required":true}]},"UpdateCampaignOutboundCallConfig":{"conditionKeys":[],"resources":[{"name":"campaign"}],"description":"Grants permission to update the outbound call configuration of a campaign","accessLevel":"Write","resourceTypes":[{"name":"campaign","required":true}]},"UpdateCampaignSchedule":{"conditionKeys":[],"resources":[{"name":"campaign"}],"description":"Grants permission to update the schedule of a campaign","accessLevel":"Write","resourceTypes":[{"name":"campaign","required":true}]},"UpdateCampaignSource":{"conditionKeys":[],"resources":[{"name":"campaign"}],"description":"Grants permission to update the source of a campaign","accessLevel":"Write","resourceTypes":[{"name":"campaign","required":true}]}},"resources":[{"name":"campaign","arnFormats":["arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/${CampaignId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by actions based on the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by actions based on tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by actions based on the presence of tag keys in the request"}}}