aws-iam-ls 0.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (522) hide show
  1. package/.direnv/bin/nix-direnv-reload +19 -0
  2. package/.direnv/flake-profile-a5d5b61aa8a61b7d9d765e1daf971a9a578f1cfa.rc +2156 -0
  3. package/.github/workflows/publish.yml +37 -0
  4. package/.github/workflows/test.yml +16 -0
  5. package/.vscodeignore +17 -0
  6. package/LICENSE +21 -0
  7. package/package.json +53 -0
  8. package/readme.md +25 -0
  9. package/src/data/condition-keys/global.json +362 -0
  10. package/src/data/servicereference/actions.json +1 -0
  11. package/src/data/servicereference/service-principals.json +1 -0
  12. package/src/data/servicereference/services/a2c.json +1 -0
  13. package/src/data/servicereference/services/a4b.json +1 -0
  14. package/src/data/servicereference/services/access-analyzer.json +1 -0
  15. package/src/data/servicereference/services/account.json +1 -0
  16. package/src/data/servicereference/services/acm-pca.json +1 -0
  17. package/src/data/servicereference/services/acm.json +1 -0
  18. package/src/data/servicereference/services/aco-automation.json +1 -0
  19. package/src/data/servicereference/services/action-recommendations.json +1 -0
  20. package/src/data/servicereference/services/activate.json +1 -0
  21. package/src/data/servicereference/services/aidevops.json +1 -0
  22. package/src/data/servicereference/services/aiops.json +1 -0
  23. package/src/data/servicereference/services/airflow-serverless.json +1 -0
  24. package/src/data/servicereference/services/airflow.json +1 -0
  25. package/src/data/servicereference/services/amplify.json +1 -0
  26. package/src/data/servicereference/services/amplifybackend.json +1 -0
  27. package/src/data/servicereference/services/amplifyuibuilder.json +1 -0
  28. package/src/data/servicereference/services/aoss.json +1 -0
  29. package/src/data/servicereference/services/apigateway.json +1 -0
  30. package/src/data/servicereference/services/app-integrations.json +1 -0
  31. package/src/data/servicereference/services/appconfig.json +1 -0
  32. package/src/data/servicereference/services/appfabric.json +1 -0
  33. package/src/data/servicereference/services/appflow.json +1 -0
  34. package/src/data/servicereference/services/application-autoscaling.json +1 -0
  35. package/src/data/servicereference/services/application-signals.json +1 -0
  36. package/src/data/servicereference/services/application-transformation.json +1 -0
  37. package/src/data/servicereference/services/applicationinsights.json +1 -0
  38. package/src/data/servicereference/services/appmesh-preview.json +1 -0
  39. package/src/data/servicereference/services/appmesh.json +1 -0
  40. package/src/data/servicereference/services/apprunner.json +1 -0
  41. package/src/data/servicereference/services/appstream.json +1 -0
  42. package/src/data/servicereference/services/appstudio.json +1 -0
  43. package/src/data/servicereference/services/appsync.json +1 -0
  44. package/src/data/servicereference/services/apptest.json +1 -0
  45. package/src/data/servicereference/services/aps.json +1 -0
  46. package/src/data/servicereference/services/arc-region-switch.json +1 -0
  47. package/src/data/servicereference/services/arc-zonal-shift.json +1 -0
  48. package/src/data/servicereference/services/arsenal.json +1 -0
  49. package/src/data/servicereference/services/artifact.json +1 -0
  50. package/src/data/servicereference/services/athena.json +1 -0
  51. package/src/data/servicereference/services/auditmanager.json +1 -0
  52. package/src/data/servicereference/services/autoscaling-plans.json +1 -0
  53. package/src/data/servicereference/services/autoscaling.json +1 -0
  54. package/src/data/servicereference/services/aws-marketplace-management.json +1 -0
  55. package/src/data/servicereference/services/aws-marketplace.json +1 -0
  56. package/src/data/servicereference/services/aws-mcp.json +1 -0
  57. package/src/data/servicereference/services/aws-portal.json +1 -0
  58. package/src/data/servicereference/services/awsconnector.json +1 -0
  59. package/src/data/servicereference/services/b2bi.json +1 -0
  60. package/src/data/servicereference/services/backup-gateway.json +1 -0
  61. package/src/data/servicereference/services/backup-search.json +1 -0
  62. package/src/data/servicereference/services/backup-storage.json +1 -0
  63. package/src/data/servicereference/services/backup.json +1 -0
  64. package/src/data/servicereference/services/batch.json +1 -0
  65. package/src/data/servicereference/services/bcm-dashboards.json +1 -0
  66. package/src/data/servicereference/services/bcm-data-exports.json +1 -0
  67. package/src/data/servicereference/services/bcm-pricing-calculator.json +1 -0
  68. package/src/data/servicereference/services/bcm-recommended-actions.json +1 -0
  69. package/src/data/servicereference/services/bedrock-agentcore.json +1 -0
  70. package/src/data/servicereference/services/bedrock-mantle.json +1 -0
  71. package/src/data/servicereference/services/bedrock.json +1 -0
  72. package/src/data/servicereference/services/billing.json +1 -0
  73. package/src/data/servicereference/services/billingconductor.json +1 -0
  74. package/src/data/servicereference/services/braket.json +1 -0
  75. package/src/data/servicereference/services/budgets.json +1 -0
  76. package/src/data/servicereference/services/bugbust.json +1 -0
  77. package/src/data/servicereference/services/cases.json +1 -0
  78. package/src/data/servicereference/services/cassandra.json +1 -0
  79. package/src/data/servicereference/services/ce.json +1 -0
  80. package/src/data/servicereference/services/chatbot.json +1 -0
  81. package/src/data/servicereference/services/chime.json +1 -0
  82. package/src/data/servicereference/services/cleanrooms-ml.json +1 -0
  83. package/src/data/servicereference/services/cleanrooms.json +1 -0
  84. package/src/data/servicereference/services/cloud9.json +1 -0
  85. package/src/data/servicereference/services/clouddirectory.json +1 -0
  86. package/src/data/servicereference/services/cloudformation.json +1 -0
  87. package/src/data/servicereference/services/cloudfront-keyvaluestore.json +1 -0
  88. package/src/data/servicereference/services/cloudfront.json +1 -0
  89. package/src/data/servicereference/services/cloudhsm.json +1 -0
  90. package/src/data/servicereference/services/cloudsearch.json +1 -0
  91. package/src/data/servicereference/services/cloudshell.json +1 -0
  92. package/src/data/servicereference/services/cloudtrail-data.json +1 -0
  93. package/src/data/servicereference/services/cloudtrail.json +1 -0
  94. package/src/data/servicereference/services/cloudwatch.json +1 -0
  95. package/src/data/servicereference/services/codeartifact.json +1 -0
  96. package/src/data/servicereference/services/codebuild.json +1 -0
  97. package/src/data/servicereference/services/codecatalyst.json +1 -0
  98. package/src/data/servicereference/services/codecommit.json +1 -0
  99. package/src/data/servicereference/services/codeconnections.json +1 -0
  100. package/src/data/servicereference/services/codedeploy-commands-secure.json +1 -0
  101. package/src/data/servicereference/services/codedeploy.json +1 -0
  102. package/src/data/servicereference/services/codeguru-profiler.json +1 -0
  103. package/src/data/servicereference/services/codeguru-reviewer.json +1 -0
  104. package/src/data/servicereference/services/codeguru-security.json +1 -0
  105. package/src/data/servicereference/services/codeguru.json +1 -0
  106. package/src/data/servicereference/services/codepipeline.json +1 -0
  107. package/src/data/servicereference/services/codestar-connections.json +1 -0
  108. package/src/data/servicereference/services/codestar-notifications.json +1 -0
  109. package/src/data/servicereference/services/codestar.json +1 -0
  110. package/src/data/servicereference/services/codewhisperer.json +1 -0
  111. package/src/data/servicereference/services/cognito-identity.json +1 -0
  112. package/src/data/servicereference/services/cognito-idp.json +1 -0
  113. package/src/data/servicereference/services/cognito-sync.json +1 -0
  114. package/src/data/servicereference/services/comprehend.json +1 -0
  115. package/src/data/servicereference/services/comprehendmedical.json +1 -0
  116. package/src/data/servicereference/services/compute-optimizer.json +1 -0
  117. package/src/data/servicereference/services/config.json +1 -0
  118. package/src/data/servicereference/services/connect-campaigns.json +1 -0
  119. package/src/data/servicereference/services/connect.json +1 -0
  120. package/src/data/servicereference/services/consoleapp.json +1 -0
  121. package/src/data/servicereference/services/consolidatedbilling.json +1 -0
  122. package/src/data/servicereference/services/controlcatalog.json +1 -0
  123. package/src/data/servicereference/services/controltower.json +1 -0
  124. package/src/data/servicereference/services/cost-optimization-hub.json +1 -0
  125. package/src/data/servicereference/services/cur.json +1 -0
  126. package/src/data/servicereference/services/customer-verification.json +1 -0
  127. package/src/data/servicereference/services/databrew.json +1 -0
  128. package/src/data/servicereference/services/dataexchange.json +1 -0
  129. package/src/data/servicereference/services/datapipeline.json +1 -0
  130. package/src/data/servicereference/services/datasync.json +1 -0
  131. package/src/data/servicereference/services/datazone.json +1 -0
  132. package/src/data/servicereference/services/dax.json +1 -0
  133. package/src/data/servicereference/services/dbqms.json +1 -0
  134. package/src/data/servicereference/services/deadline.json +1 -0
  135. package/src/data/servicereference/services/detective.json +1 -0
  136. package/src/data/servicereference/services/devicefarm.json +1 -0
  137. package/src/data/servicereference/services/devops-guru.json +1 -0
  138. package/src/data/servicereference/services/directconnect.json +1 -0
  139. package/src/data/servicereference/services/discovery.json +1 -0
  140. package/src/data/servicereference/services/dlm.json +1 -0
  141. package/src/data/servicereference/services/dms.json +1 -0
  142. package/src/data/servicereference/services/docdb-elastic.json +1 -0
  143. package/src/data/servicereference/services/drs.json +1 -0
  144. package/src/data/servicereference/services/ds-data.json +1 -0
  145. package/src/data/servicereference/services/ds.json +1 -0
  146. package/src/data/servicereference/services/dsql.json +1 -0
  147. package/src/data/servicereference/services/dynamodb.json +1 -0
  148. package/src/data/servicereference/services/ebs.json +1 -0
  149. package/src/data/servicereference/services/ec2-instance-connect.json +1 -0
  150. package/src/data/servicereference/services/ec2.json +1 -0
  151. package/src/data/servicereference/services/ec2messages.json +1 -0
  152. package/src/data/servicereference/services/ecr-public.json +1 -0
  153. package/src/data/servicereference/services/ecr.json +1 -0
  154. package/src/data/servicereference/services/ecs-mcp.json +1 -0
  155. package/src/data/servicereference/services/ecs.json +1 -0
  156. package/src/data/servicereference/services/eks-auth.json +1 -0
  157. package/src/data/servicereference/services/eks-mcp.json +1 -0
  158. package/src/data/servicereference/services/eks.json +1 -0
  159. package/src/data/servicereference/services/elasticache.json +1 -0
  160. package/src/data/servicereference/services/elasticbeanstalk.json +1 -0
  161. package/src/data/servicereference/services/elasticfilesystem.json +1 -0
  162. package/src/data/servicereference/services/elasticloadbalancing.json +1 -0
  163. package/src/data/servicereference/services/elasticmapreduce.json +1 -0
  164. package/src/data/servicereference/services/elastictranscoder.json +1 -0
  165. package/src/data/servicereference/services/elemental-activations.json +1 -0
  166. package/src/data/servicereference/services/elemental-appliances-software.json +1 -0
  167. package/src/data/servicereference/services/elemental-inference.json +1 -0
  168. package/src/data/servicereference/services/elemental-support-cases.json +1 -0
  169. package/src/data/servicereference/services/elemental-support-content.json +1 -0
  170. package/src/data/servicereference/services/emr-containers.json +1 -0
  171. package/src/data/servicereference/services/emr-serverless.json +1 -0
  172. package/src/data/servicereference/services/entityresolution.json +1 -0
  173. package/src/data/servicereference/services/es.json +1 -0
  174. package/src/data/servicereference/services/events.json +1 -0
  175. package/src/data/servicereference/services/evidently.json +1 -0
  176. package/src/data/servicereference/services/evs.json +1 -0
  177. package/src/data/servicereference/services/execute-api.json +1 -0
  178. package/src/data/servicereference/services/finspace-api.json +1 -0
  179. package/src/data/servicereference/services/finspace.json +1 -0
  180. package/src/data/servicereference/services/firehose.json +1 -0
  181. package/src/data/servicereference/services/fis.json +1 -0
  182. package/src/data/servicereference/services/fms.json +1 -0
  183. package/src/data/servicereference/services/forecast.json +1 -0
  184. package/src/data/servicereference/services/frauddetector.json +1 -0
  185. package/src/data/servicereference/services/freertos.json +1 -0
  186. package/src/data/servicereference/services/freetier.json +1 -0
  187. package/src/data/servicereference/services/fsx.json +1 -0
  188. package/src/data/servicereference/services/gamelift.json +1 -0
  189. package/src/data/servicereference/services/gameliftstreams.json +1 -0
  190. package/src/data/servicereference/services/geo-maps.json +1 -0
  191. package/src/data/servicereference/services/geo-places.json +1 -0
  192. package/src/data/servicereference/services/geo-routes.json +1 -0
  193. package/src/data/servicereference/services/geo.json +1 -0
  194. package/src/data/servicereference/services/glacier.json +1 -0
  195. package/src/data/servicereference/services/globalaccelerator.json +1 -0
  196. package/src/data/servicereference/services/glue.json +1 -0
  197. package/src/data/servicereference/services/grafana.json +1 -0
  198. package/src/data/servicereference/services/greengrass.json +1 -0
  199. package/src/data/servicereference/services/groundstation.json +1 -0
  200. package/src/data/servicereference/services/groundtruthlabeling.json +1 -0
  201. package/src/data/servicereference/services/guardduty.json +1 -0
  202. package/src/data/servicereference/services/health-agent.json +1 -0
  203. package/src/data/servicereference/services/health.json +1 -0
  204. package/src/data/servicereference/services/healthlake.json +1 -0
  205. package/src/data/servicereference/services/honeycode.json +1 -0
  206. package/src/data/servicereference/services/iam.json +1 -0
  207. package/src/data/servicereference/services/identity-sync.json +1 -0
  208. package/src/data/servicereference/services/identitystore-auth.json +1 -0
  209. package/src/data/servicereference/services/identitystore.json +1 -0
  210. package/src/data/servicereference/services/imagebuilder.json +1 -0
  211. package/src/data/servicereference/services/importexport.json +1 -0
  212. package/src/data/servicereference/services/inspector-scan.json +1 -0
  213. package/src/data/servicereference/services/inspector.json +1 -0
  214. package/src/data/servicereference/services/inspector2-telemetry.json +1 -0
  215. package/src/data/servicereference/services/inspector2.json +1 -0
  216. package/src/data/servicereference/services/interconnect.json +1 -0
  217. package/src/data/servicereference/services/internetmonitor.json +1 -0
  218. package/src/data/servicereference/services/invoicing.json +1 -0
  219. package/src/data/servicereference/services/iot-device-tester.json +1 -0
  220. package/src/data/servicereference/services/iot.json +1 -0
  221. package/src/data/servicereference/services/iotanalytics.json +1 -0
  222. package/src/data/servicereference/services/iotdeviceadvisor.json +1 -0
  223. package/src/data/servicereference/services/iotevents.json +1 -0
  224. package/src/data/servicereference/services/iotfleethub.json +1 -0
  225. package/src/data/servicereference/services/iotfleetwise.json +1 -0
  226. package/src/data/servicereference/services/iotjobsdata.json +1 -0
  227. package/src/data/servicereference/services/iotmanagedintegrations.json +1 -0
  228. package/src/data/servicereference/services/iotsitewise.json +1 -0
  229. package/src/data/servicereference/services/iottwinmaker.json +1 -0
  230. package/src/data/servicereference/services/iotwireless.json +1 -0
  231. package/src/data/servicereference/services/iq-permission.json +1 -0
  232. package/src/data/servicereference/services/iq.json +1 -0
  233. package/src/data/servicereference/services/ivs.json +1 -0
  234. package/src/data/servicereference/services/ivschat.json +1 -0
  235. package/src/data/servicereference/services/kafka-cluster.json +1 -0
  236. package/src/data/servicereference/services/kafka.json +1 -0
  237. package/src/data/servicereference/services/kafkaconnect.json +1 -0
  238. package/src/data/servicereference/services/kendra-ranking.json +1 -0
  239. package/src/data/servicereference/services/kendra.json +1 -0
  240. package/src/data/servicereference/services/kinesis.json +1 -0
  241. package/src/data/servicereference/services/kinesisanalytics.json +1 -0
  242. package/src/data/servicereference/services/kinesisvideo.json +1 -0
  243. package/src/data/servicereference/services/kms.json +1 -0
  244. package/src/data/servicereference/services/lakeformation.json +1 -0
  245. package/src/data/servicereference/services/lambda.json +1 -0
  246. package/src/data/servicereference/services/launchwizard.json +1 -0
  247. package/src/data/servicereference/services/lex.json +1 -0
  248. package/src/data/servicereference/services/license-manager-linux-subscriptions.json +1 -0
  249. package/src/data/servicereference/services/license-manager-user-subscriptions.json +1 -0
  250. package/src/data/servicereference/services/license-manager.json +1 -0
  251. package/src/data/servicereference/services/lightsail.json +1 -0
  252. package/src/data/servicereference/services/logs.json +1 -0
  253. package/src/data/servicereference/services/lookoutequipment.json +1 -0
  254. package/src/data/servicereference/services/lookoutmetrics.json +1 -0
  255. package/src/data/servicereference/services/lookoutvision.json +1 -0
  256. package/src/data/servicereference/services/m2.json +1 -0
  257. package/src/data/servicereference/services/machinelearning.json +1 -0
  258. package/src/data/servicereference/services/macie2.json +1 -0
  259. package/src/data/servicereference/services/managedblockchain-query.json +1 -0
  260. package/src/data/servicereference/services/managedblockchain.json +1 -0
  261. package/src/data/servicereference/services/mapcredits.json +1 -0
  262. package/src/data/servicereference/services/marketplacecommerceanalytics.json +1 -0
  263. package/src/data/servicereference/services/mechanicalturk.json +1 -0
  264. package/src/data/servicereference/services/mediaconnect.json +1 -0
  265. package/src/data/servicereference/services/mediaconvert.json +1 -0
  266. package/src/data/servicereference/services/mediaimport.json +1 -0
  267. package/src/data/servicereference/services/medialive.json +1 -0
  268. package/src/data/servicereference/services/mediapackage-vod.json +1 -0
  269. package/src/data/servicereference/services/mediapackage.json +1 -0
  270. package/src/data/servicereference/services/mediapackagev2.json +1 -0
  271. package/src/data/servicereference/services/mediastore.json +1 -0
  272. package/src/data/servicereference/services/mediatailor.json +1 -0
  273. package/src/data/servicereference/services/medical-imaging.json +1 -0
  274. package/src/data/servicereference/services/memorydb.json +1 -0
  275. package/src/data/servicereference/services/mgh.json +1 -0
  276. package/src/data/servicereference/services/mgn.json +1 -0
  277. package/src/data/servicereference/services/migrationhub-orchestrator.json +1 -0
  278. package/src/data/servicereference/services/migrationhub-strategy.json +1 -0
  279. package/src/data/servicereference/services/mobileanalytics.json +1 -0
  280. package/src/data/servicereference/services/mobiletargeting.json +1 -0
  281. package/src/data/servicereference/services/monitron.json +1 -0
  282. package/src/data/servicereference/services/mpa.json +1 -0
  283. package/src/data/servicereference/services/mq.json +1 -0
  284. package/src/data/servicereference/services/neptune-db.json +1 -0
  285. package/src/data/servicereference/services/neptune-graph.json +1 -0
  286. package/src/data/servicereference/services/network-firewall.json +1 -0
  287. package/src/data/servicereference/services/network-security-director.json +1 -0
  288. package/src/data/servicereference/services/networkflowmonitor.json +1 -0
  289. package/src/data/servicereference/services/networkmanager-chat.json +1 -0
  290. package/src/data/servicereference/services/networkmanager.json +1 -0
  291. package/src/data/servicereference/services/networkmonitor.json +1 -0
  292. package/src/data/servicereference/services/nimble.json +1 -0
  293. package/src/data/servicereference/services/notifications-contacts.json +1 -0
  294. package/src/data/servicereference/services/notifications.json +1 -0
  295. package/src/data/servicereference/services/nova-act.json +1 -0
  296. package/src/data/servicereference/services/oam.json +1 -0
  297. package/src/data/servicereference/services/observabilityadmin.json +1 -0
  298. package/src/data/servicereference/services/odb.json +1 -0
  299. package/src/data/servicereference/services/omics.json +1 -0
  300. package/src/data/servicereference/services/one.json +1 -0
  301. package/src/data/servicereference/services/opensearch.json +1 -0
  302. package/src/data/servicereference/services/opsworks-cm.json +1 -0
  303. package/src/data/servicereference/services/opsworks.json +1 -0
  304. package/src/data/servicereference/services/organizations.json +1 -0
  305. package/src/data/servicereference/services/osis.json +1 -0
  306. package/src/data/servicereference/services/outposts.json +1 -0
  307. package/src/data/servicereference/services/panorama.json +1 -0
  308. package/src/data/servicereference/services/partnercentral-account-management.json +1 -0
  309. package/src/data/servicereference/services/partnercentral.json +1 -0
  310. package/src/data/servicereference/services/payment-cryptography.json +1 -0
  311. package/src/data/servicereference/services/payments.json +1 -0
  312. package/src/data/servicereference/services/pca-connector-ad.json +1 -0
  313. package/src/data/servicereference/services/pca-connector-scep.json +1 -0
  314. package/src/data/servicereference/services/pcs.json +1 -0
  315. package/src/data/servicereference/services/personalize.json +1 -0
  316. package/src/data/servicereference/services/pi.json +1 -0
  317. package/src/data/servicereference/services/pipes.json +1 -0
  318. package/src/data/servicereference/services/polly.json +1 -0
  319. package/src/data/servicereference/services/pricing.json +1 -0
  320. package/src/data/servicereference/services/pricingplanmanager.json +1 -0
  321. package/src/data/servicereference/services/private-networks.json +1 -0
  322. package/src/data/servicereference/services/profile.json +1 -0
  323. package/src/data/servicereference/services/proton.json +1 -0
  324. package/src/data/servicereference/services/purchase-orders.json +1 -0
  325. package/src/data/servicereference/services/q.json +1 -0
  326. package/src/data/servicereference/services/qapps.json +1 -0
  327. package/src/data/servicereference/services/qbusiness.json +1 -0
  328. package/src/data/servicereference/services/qdeveloper.json +1 -0
  329. package/src/data/servicereference/services/qldb.json +1 -0
  330. package/src/data/servicereference/services/quicksight.json +1 -0
  331. package/src/data/servicereference/services/ram.json +1 -0
  332. package/src/data/servicereference/services/rbin.json +1 -0
  333. package/src/data/servicereference/services/rds-data.json +1 -0
  334. package/src/data/servicereference/services/rds-db.json +1 -0
  335. package/src/data/servicereference/services/rds.json +1 -0
  336. package/src/data/servicereference/services/redshift-data.json +1 -0
  337. package/src/data/servicereference/services/redshift-serverless.json +1 -0
  338. package/src/data/servicereference/services/redshift.json +1 -0
  339. package/src/data/servicereference/services/refactor-spaces.json +1 -0
  340. package/src/data/servicereference/services/rekognition.json +1 -0
  341. package/src/data/servicereference/services/repostspace.json +1 -0
  342. package/src/data/servicereference/services/resiliencehub.json +1 -0
  343. package/src/data/servicereference/services/resource-explorer-2.json +1 -0
  344. package/src/data/servicereference/services/resource-explorer.json +1 -0
  345. package/src/data/servicereference/services/resource-groups.json +1 -0
  346. package/src/data/servicereference/services/rhelkb.json +1 -0
  347. package/src/data/servicereference/services/robomaker.json +1 -0
  348. package/src/data/servicereference/services/rolesanywhere.json +1 -0
  349. package/src/data/servicereference/services/route53-recovery-cluster.json +1 -0
  350. package/src/data/servicereference/services/route53-recovery-control-config.json +1 -0
  351. package/src/data/servicereference/services/route53-recovery-readiness.json +1 -0
  352. package/src/data/servicereference/services/route53.json +1 -0
  353. package/src/data/servicereference/services/route53domains.json +1 -0
  354. package/src/data/servicereference/services/route53globalresolver.json +1 -0
  355. package/src/data/servicereference/services/route53profiles.json +1 -0
  356. package/src/data/servicereference/services/route53resolver.json +1 -0
  357. package/src/data/servicereference/services/rtbfabric.json +1 -0
  358. package/src/data/servicereference/services/rum.json +1 -0
  359. package/src/data/servicereference/services/s3-object-lambda.json +1 -0
  360. package/src/data/servicereference/services/s3-outposts.json +1 -0
  361. package/src/data/servicereference/services/s3.json +1 -0
  362. package/src/data/servicereference/services/s3express.json +1 -0
  363. package/src/data/servicereference/services/s3tables.json +1 -0
  364. package/src/data/servicereference/services/s3vectors.json +1 -0
  365. package/src/data/servicereference/services/sagemaker-data-science-assistant.json +1 -0
  366. package/src/data/servicereference/services/sagemaker-geospatial.json +1 -0
  367. package/src/data/servicereference/services/sagemaker-mlflow.json +1 -0
  368. package/src/data/servicereference/services/sagemaker-unified-studio-mcp.json +1 -0
  369. package/src/data/servicereference/services/sagemaker.json +1 -0
  370. package/src/data/servicereference/services/savingsplans.json +1 -0
  371. package/src/data/servicereference/services/scheduler.json +1 -0
  372. package/src/data/servicereference/services/schemas.json +1 -0
  373. package/src/data/servicereference/services/scn.json +1 -0
  374. package/src/data/servicereference/services/sdb.json +1 -0
  375. package/src/data/servicereference/services/secretsmanager.json +1 -0
  376. package/src/data/servicereference/services/security-ir.json +1 -0
  377. package/src/data/servicereference/services/securityagent.json +1 -0
  378. package/src/data/servicereference/services/securityhub.json +1 -0
  379. package/src/data/servicereference/services/securitylake.json +1 -0
  380. package/src/data/servicereference/services/serverlessrepo.json +1 -0
  381. package/src/data/servicereference/services/servicecatalog.json +1 -0
  382. package/src/data/servicereference/services/servicediscovery.json +1 -0
  383. package/src/data/servicereference/services/serviceextract.json +1 -0
  384. package/src/data/servicereference/services/servicequotas.json +1 -0
  385. package/src/data/servicereference/services/ses.json +1 -0
  386. package/src/data/servicereference/services/shield.json +1 -0
  387. package/src/data/servicereference/services/signer.json +1 -0
  388. package/src/data/servicereference/services/signin.json +1 -0
  389. package/src/data/servicereference/services/simspaceweaver.json +1 -0
  390. package/src/data/servicereference/services/sms-voice.json +1 -0
  391. package/src/data/servicereference/services/sms.json +1 -0
  392. package/src/data/servicereference/services/snow-device-management.json +1 -0
  393. package/src/data/servicereference/services/snowball.json +1 -0
  394. package/src/data/servicereference/services/sns.json +1 -0
  395. package/src/data/servicereference/services/social-messaging.json +1 -0
  396. package/src/data/servicereference/services/sqlworkbench.json +1 -0
  397. package/src/data/servicereference/services/sqs.json +1 -0
  398. package/src/data/servicereference/services/ssm-contacts.json +1 -0
  399. package/src/data/servicereference/services/ssm-guiconnect.json +1 -0
  400. package/src/data/servicereference/services/ssm-incidents.json +1 -0
  401. package/src/data/servicereference/services/ssm-quicksetup.json +1 -0
  402. package/src/data/servicereference/services/ssm-sap.json +1 -0
  403. package/src/data/servicereference/services/ssm.json +1 -0
  404. package/src/data/servicereference/services/ssmmessages.json +1 -0
  405. package/src/data/servicereference/services/sso-directory.json +1 -0
  406. package/src/data/servicereference/services/sso-oauth.json +1 -0
  407. package/src/data/servicereference/services/sso.json +1 -0
  408. package/src/data/servicereference/services/states.json +1 -0
  409. package/src/data/servicereference/services/storagegateway.json +1 -0
  410. package/src/data/servicereference/services/sts.json +1 -0
  411. package/src/data/servicereference/services/support-console.json +1 -0
  412. package/src/data/servicereference/services/support.json +1 -0
  413. package/src/data/servicereference/services/supportapp.json +1 -0
  414. package/src/data/servicereference/services/supportplans.json +1 -0
  415. package/src/data/servicereference/services/sustainability.json +1 -0
  416. package/src/data/servicereference/services/swf.json +1 -0
  417. package/src/data/servicereference/services/synthetics.json +1 -0
  418. package/src/data/servicereference/services/tag.json +1 -0
  419. package/src/data/servicereference/services/tax.json +1 -0
  420. package/src/data/servicereference/services/textract.json +1 -0
  421. package/src/data/servicereference/services/thinclient.json +1 -0
  422. package/src/data/servicereference/services/timestream-influxdb.json +1 -0
  423. package/src/data/servicereference/services/timestream.json +1 -0
  424. package/src/data/servicereference/services/tiros.json +1 -0
  425. package/src/data/servicereference/services/tnb.json +1 -0
  426. package/src/data/servicereference/services/transcribe.json +1 -0
  427. package/src/data/servicereference/services/transfer.json +1 -0
  428. package/src/data/servicereference/services/transform-custom.json +1 -0
  429. package/src/data/servicereference/services/transform.json +1 -0
  430. package/src/data/servicereference/services/translate.json +1 -0
  431. package/src/data/servicereference/services/trustedadvisor.json +1 -0
  432. package/src/data/servicereference/services/ts.json +1 -0
  433. package/src/data/servicereference/services/user-subscriptions.json +1 -0
  434. package/src/data/servicereference/services/uxc.json +1 -0
  435. package/src/data/servicereference/services/vendor-insights.json +1 -0
  436. package/src/data/servicereference/services/verified-access.json +1 -0
  437. package/src/data/servicereference/services/verifiedpermissions.json +1 -0
  438. package/src/data/servicereference/services/voiceid.json +1 -0
  439. package/src/data/servicereference/services/vpc-lattice-svcs.json +1 -0
  440. package/src/data/servicereference/services/vpc-lattice.json +1 -0
  441. package/src/data/servicereference/services/vpce.json +1 -0
  442. package/src/data/servicereference/services/waf-regional.json +1 -0
  443. package/src/data/servicereference/services/waf.json +1 -0
  444. package/src/data/servicereference/services/wafv2.json +1 -0
  445. package/src/data/servicereference/services/wam.json +1 -0
  446. package/src/data/servicereference/services/wellarchitected.json +1 -0
  447. package/src/data/servicereference/services/wickr.json +1 -0
  448. package/src/data/servicereference/services/wisdom.json +1 -0
  449. package/src/data/servicereference/services/workdocs.json +1 -0
  450. package/src/data/servicereference/services/worklink.json +1 -0
  451. package/src/data/servicereference/services/workmail.json +1 -0
  452. package/src/data/servicereference/services/workmailmessageflow.json +1 -0
  453. package/src/data/servicereference/services/workspaces-instances.json +1 -0
  454. package/src/data/servicereference/services/workspaces-web.json +1 -0
  455. package/src/data/servicereference/services/workspaces.json +1 -0
  456. package/src/data/servicereference/services/xray.json +1 -0
  457. package/src/data/servicereference/services.json +1 -0
  458. package/src/extension.d.ts +3 -0
  459. package/src/extension.js +23 -0
  460. package/src/grammars/tree-sitter-hcl.wasm +0 -0
  461. package/src/grammars/tree-sitter-json.wasm +0 -0
  462. package/src/grammars/tree-sitter-yaml.wasm +0 -0
  463. package/src/handlers/completion/action-value.d.ts +4 -0
  464. package/src/handlers/completion/action-value.js +46 -0
  465. package/src/handlers/completion/condition-block.d.ts +4 -0
  466. package/src/handlers/completion/condition-block.js +31 -0
  467. package/src/handlers/completion/condition-key.d.ts +4 -0
  468. package/src/handlers/completion/condition-key.js +80 -0
  469. package/src/handlers/completion/condition-operator.d.ts +4 -0
  470. package/src/handlers/completion/condition-operator.js +22 -0
  471. package/src/handlers/completion/effect-value.d.ts +4 -0
  472. package/src/handlers/completion/effect-value.js +14 -0
  473. package/src/handlers/completion/index.d.ts +14 -0
  474. package/src/handlers/completion/index.js +96 -0
  475. package/src/handlers/completion/principal-block-identifier.d.ts +4 -0
  476. package/src/handlers/completion/principal-block-identifier.js +4 -0
  477. package/src/handlers/completion/principal-block-type.d.ts +4 -0
  478. package/src/handlers/completion/principal-block-type.js +24 -0
  479. package/src/handlers/completion/principal-block.d.ts +4 -0
  480. package/src/handlers/completion/principal-block.js +28 -0
  481. package/src/handlers/completion/principal-identifier-completions.d.ts +2 -0
  482. package/src/handlers/completion/principal-identifier-completions.js +131 -0
  483. package/src/handlers/completion/principal-type.d.ts +4 -0
  484. package/src/handlers/completion/principal-type.js +23 -0
  485. package/src/handlers/completion/principal-typed-value.d.ts +4 -0
  486. package/src/handlers/completion/principal-typed-value.js +4 -0
  487. package/src/handlers/completion/principal-value.d.ts +4 -0
  488. package/src/handlers/completion/principal-value.js +18 -0
  489. package/src/handlers/completion/resource-value.d.ts +4 -0
  490. package/src/handlers/completion/resource-value.js +144 -0
  491. package/src/handlers/completion/statement-block.d.ts +10 -0
  492. package/src/handlers/completion/statement-block.js +51 -0
  493. package/src/handlers/completion/statement-key.d.ts +4 -0
  494. package/src/handlers/completion/statement-key.js +41 -0
  495. package/src/lib/iam-policy/condition-operators.d.ts +317 -0
  496. package/src/lib/iam-policy/condition-operators.js +129 -0
  497. package/src/lib/iam-policy/location.d.ts +71 -0
  498. package/src/lib/iam-policy/location.js +82 -0
  499. package/src/lib/iam-policy/partitions.d.ts +116 -0
  500. package/src/lib/iam-policy/partitions.js +51 -0
  501. package/src/lib/iam-policy/principals.d.ts +21 -0
  502. package/src/lib/iam-policy/principals.js +37 -0
  503. package/src/lib/iam-policy/reference/services.d.ts +22 -0
  504. package/src/lib/iam-policy/reference/services.js +99 -0
  505. package/src/lib/iam-policy/reference/types.d.ts +71 -0
  506. package/src/lib/iam-policy/reference/types.js +1 -0
  507. package/src/lib/iam-policy/statement-keys.d.ts +8 -0
  508. package/src/lib/iam-policy/statement-keys.js +159 -0
  509. package/src/lib/iam-policy/wildcard.d.ts +2 -0
  510. package/src/lib/iam-policy/wildcard.js +14 -0
  511. package/src/lib/treesitter/base.d.ts +35 -0
  512. package/src/lib/treesitter/base.js +50 -0
  513. package/src/lib/treesitter/hcl.d.ts +9 -0
  514. package/src/lib/treesitter/hcl.js +888 -0
  515. package/src/lib/treesitter/json.d.ts +9 -0
  516. package/src/lib/treesitter/json.js +376 -0
  517. package/src/lib/treesitter/manager.d.ts +9 -0
  518. package/src/lib/treesitter/manager.js +66 -0
  519. package/src/lib/treesitter/yaml.d.ts +9 -0
  520. package/src/lib/treesitter/yaml.js +878 -0
  521. package/src/server.d.ts +2 -0
  522. package/src/server.js +26 -0
@@ -0,0 +1 @@
1
+ {"name":"elasticloadbalancing","actions":{"AddListenerCertificates":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"listener/app"},{"name":"listener/net"}],"description":"Grants permission to add the specified certificates to the specified secure listener","accessLevel":"Write","resourceTypes":[{"name":"listener/app","required":true},{"name":"listener/net","required":true}]},"AddTags":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","elasticloadbalancing:CreateAction","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"listener-rule/app"},{"name":"listener-rule/net"},{"name":"listener/app"},{"name":"listener/gwy"},{"name":"listener/net"},{"name":"loadbalancer"},{"name":"loadbalancer/app/"},{"name":"loadbalancer/gwy/"},{"name":"loadbalancer/net/"},{"name":"targetgroup"},{"name":"truststore"}],"description":"Grants permission to add the specified tags to the specified load balancer. Each load balancer can have a maximum of 10 tags","accessLevel":"Tagging","resourceTypes":[{"name":"listener-rule/app","required":false},{"name":"listener-rule/net","required":false},{"name":"listener/app","required":false},{"name":"listener/gwy","required":false},{"name":"listener/net","required":false},{"name":"loadbalancer/app/","required":false},{"name":"loadbalancer/gwy/","required":false},{"name":"loadbalancer/net/","required":false},{"name":"targetgroup","required":false},{"name":"truststore","required":false}]},"AddTrustStoreRevocations":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"truststore"}],"description":"Grants permission to add revocations to a trust store","accessLevel":"Write","resourceTypes":[{"name":"truststore","required":true}]},"AllowVendedLogDeliveryForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to configure vended log delivery for load balancers","accessLevel":"Permissions management","resourceTypes":[],"permissionOnly":true},"ApplySecurityGroupsToLoadBalancer":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}","elasticloadbalancing:SecurityGroup"],"resources":[{"name":"loadbalancer"}],"description":"Grants permission to associate one or more security groups with your load balancer in a virtual private cloud (VPC)","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer","required":true}]},"AttachLoadBalancerToSubnets":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}","elasticloadbalancing:Subnet"],"resources":[{"name":"loadbalancer"}],"description":"Grants permission to add one or more subnets to the set of configured subnets for the specified load balancer","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer","required":true}]},"ConfigureHealthCheck":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"loadbalancer"}],"description":"Grants permission to specify the health check settings to use when evaluating the health state of your back-end instances","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer","required":true}]},"CreateAppCookieStickinessPolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"loadbalancer"}],"description":"Grants permission to generate a stickiness policy with sticky session lifetimes that follow that of an application-generated cookie","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer","required":true}]},"CreateLBCookieStickinessPolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"loadbalancer"}],"description":"Grants permission to generate a stickiness policy with sticky session lifetimes controlled by the lifetime of the browser (user-agent) or a specified expiration period","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer","required":true}]},"CreateListener":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","elasticloadbalancing:ListenerProtocol","elasticloadbalancing:ResourceTag/${TagKey}","elasticloadbalancing:SecurityPolicy"],"resources":[{"name":"loadbalancer/app/"},{"name":"loadbalancer/gwy/"},{"name":"loadbalancer/net/"}],"description":"Grants permission to create a listener for the specified Application Load Balancer","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer/app/","required":false},{"name":"loadbalancer/gwy/","required":false},{"name":"loadbalancer/net/","required":false}],"dependentActions":["elasticloadbalancing:AddTags"]},"CreateLoadBalancer":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","elasticloadbalancing:ListenerProtocol","elasticloadbalancing:ResourceTag/${TagKey}","elasticloadbalancing:Scheme","elasticloadbalancing:SecurityGroup","elasticloadbalancing:Subnet"],"resources":[{"name":"loadbalancer"},{"name":"loadbalancer/app/"},{"name":"loadbalancer/gwy/"},{"name":"loadbalancer/net/"}],"description":"Grants permission to create a load balancer","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer/app/","required":false},{"name":"loadbalancer/gwy/","required":false},{"name":"loadbalancer/net/","required":false}],"dependentActions":["elasticloadbalancing:AddTags"]},"CreateLoadBalancerListeners":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ListenerProtocol","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"loadbalancer"}],"description":"Grants permission to create one or more listeners for the specified load balancer","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer","required":true}]},"CreateLoadBalancerPolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}","elasticloadbalancing:SecurityPolicy"],"resources":[{"name":"loadbalancer"}],"description":"Grants permission to create a policy with the specified attributes for the specified load balancer","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer","required":true}]},"CreateRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"listener/app"},{"name":"listener/net"}],"description":"Grants permission to create a rule for the specified listener","accessLevel":"Write","resourceTypes":[{"name":"listener/app","required":true},{"name":"listener/net","required":true}],"dependentActions":["elasticloadbalancing:AddTags"]},"CreateTargetGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"targetgroup"}],"description":"Grants permission to create a target group","accessLevel":"Write","resourceTypes":[{"name":"targetgroup","required":true}],"dependentActions":["elasticloadbalancing:AddTags"]},"CreateTrustStore":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"truststore"}],"description":"Grants permission to create a trust store","accessLevel":"Write","resourceTypes":[{"name":"truststore","required":false}],"dependentActions":["elasticloadbalancing:AddTags"]},"CreateWebACLAssociation":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"loadbalancer/app/"}],"description":"Grants permission to associate WAF WebACL to the specified load balancer","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer/app/","required":true}],"permissionOnly":true},"DeleteListener":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"listener/app"},{"name":"listener/gwy"},{"name":"listener/net"}],"description":"Grants permission to delete the specified listener","accessLevel":"Write","resourceTypes":[{"name":"listener/app","required":true},{"name":"listener/gwy","required":true},{"name":"listener/net","required":true}]},"DeleteLoadBalancer":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"loadbalancer"},{"name":"loadbalancer/app/"},{"name":"loadbalancer/gwy/"},{"name":"loadbalancer/net/"}],"description":"Grants permission to delete the specified load balancer","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer/app/","required":false},{"name":"loadbalancer/gwy/","required":false},{"name":"loadbalancer/net/","required":false}]},"DeleteLoadBalancerListeners":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"loadbalancer"}],"description":"Grants permission to delete the specified listeners from the specified load balancer","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer","required":true}]},"DeleteLoadBalancerPolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"loadbalancer"}],"description":"Grants permission to delete the specified policy from the specified load balancer. This policy must not be enabled for any listeners","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer","required":true}]},"DeleteRule":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"listener-rule/app"},{"name":"listener-rule/net"}],"description":"Grants permission to delete the specified rule","accessLevel":"Write","resourceTypes":[{"name":"listener-rule/app","required":true},{"name":"listener-rule/net","required":true}]},"DeleteSharedTrustStoreAssociation":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"truststore"}],"description":"Grants permission to delete the specified shared trust store association","accessLevel":"Write","resourceTypes":[{"name":"truststore","required":true}]},"DeleteTargetGroup":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"targetgroup"}],"description":"Grants permission to delete the specified target group","accessLevel":"Write","resourceTypes":[{"name":"targetgroup","required":true}]},"DeleteTrustStore":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"truststore"}],"description":"Grants permission to delete the specified trust store","accessLevel":"Write","resourceTypes":[{"name":"truststore","required":true}]},"DeleteWebACLAssociation":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"loadbalancer/app/"}],"description":"Grants permission to disassociate WAF WebACL from the specified load balancer","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer/app/","required":true}],"permissionOnly":true},"DeregisterInstancesFromLoadBalancer":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"loadbalancer"}],"description":"Grants permission to deregister the specified instances from the specified load balancer","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer","required":true}]},"DeregisterTargets":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"targetgroup"}],"description":"Grants permission to deregister the specified targets from the specified target group","accessLevel":"Write","resourceTypes":[{"name":"targetgroup","required":true}]},"DescribeAccountLimits":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the Elastic Load Balancing resource limits for the AWS account","accessLevel":"Read","resourceTypes":[]},"DescribeCapacityReservation":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the capacity reservation for a load balancer","accessLevel":"Read","resourceTypes":[]},"DescribeInstanceHealth":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the state of the specified instances with respect to the specified load balancer","accessLevel":"Read","resourceTypes":[]},"DescribeListenerAttributes":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the attributes for the specified listener","accessLevel":"Read","resourceTypes":[]},"DescribeListenerCertificates":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the certificates for the specified secure listener","accessLevel":"Read","resourceTypes":[]},"DescribeListeners":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the specified listeners or the listeners for the specified Application Load Balancer","accessLevel":"Read","resourceTypes":[]},"DescribeLoadBalancerAttributes":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the attributes for the specified load balancer","accessLevel":"Read","resourceTypes":[]},"DescribeLoadBalancerPolicies":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the specified policies","accessLevel":"Read","resourceTypes":[]},"DescribeLoadBalancerPolicyTypes":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the specified load balancer policy types","accessLevel":"Read","resourceTypes":[]},"DescribeLoadBalancers":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the specified the load balancers. If no load balancers are specified, the call describes all of your load balancers","accessLevel":"List","resourceTypes":[]},"DescribeRules":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the specified rules or the rules for the specified listener","accessLevel":"Read","resourceTypes":[]},"DescribeSSLPolicies":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the specified policies or all policies used for SSL negotiation","accessLevel":"Read","resourceTypes":[]},"DescribeTags":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the tags associated with the specified resource","accessLevel":"Read","resourceTypes":[]},"DescribeTargetGroupAttributes":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the attributes for the specified target group","accessLevel":"Read","resourceTypes":[]},"DescribeTargetGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the specified target groups or all of your target groups","accessLevel":"Read","resourceTypes":[]},"DescribeTargetHealth":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the health of the specified targets or all of your targets","accessLevel":"Read","resourceTypes":[]},"DescribeTrustStoreAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the associations with a trust store","accessLevel":"Read","resourceTypes":[]},"DescribeTrustStoreRevocations":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the specified trust stores revocations or all of your revocations related to a trust store","accessLevel":"Read","resourceTypes":[]},"DescribeTrustStores":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the specified trust stores or all of your trust stores","accessLevel":"Read","resourceTypes":[]},"DescribeWebACLAssociation":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe all load balancers associated to a WAF WebACL in your account","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"DetachLoadBalancerFromSubnets":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"loadbalancer"}],"description":"Grants permission to remove the specified subnets from the set of configured subnets for the load balancer","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer","required":true}]},"DisableAvailabilityZonesForLoadBalancer":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"loadbalancer"}],"description":"Grants permission to remove the specified Availability Zones from the set of Availability Zones for the specified load balancer","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer","required":true}]},"EnableAvailabilityZonesForLoadBalancer":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"loadbalancer"}],"description":"Grants permission to add the specified Availability Zones to the set of Availability Zones for the specified load balancer","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer","required":true}]},"GetLoadBalancerWebACL":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"loadbalancer/app/"}],"description":"Grants permission to retrieve the WAF WebACL associated to the specified load balancer","accessLevel":"Read","resourceTypes":[{"name":"loadbalancer/app/","required":true}],"permissionOnly":true},"GetResourcePolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"truststore"}],"description":"Grants permission to retrieve the resource policy associated with the resource","accessLevel":"Read","resourceTypes":[{"name":"truststore","required":false}]},"GetTrustStoreCaCertificatesBundle":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"truststore"}],"description":"Grants permission to retrieve a trust store CA certificates bundle","accessLevel":"Read","resourceTypes":[{"name":"truststore","required":true}]},"GetTrustStoreRevocationContent":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"truststore"}],"description":"Grants permission to retrieve a trust store revocation content","accessLevel":"Read","resourceTypes":[{"name":"truststore","required":true}]},"ModifyCapacityReservation":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"loadbalancer/app/"},{"name":"loadbalancer/gwy/"},{"name":"loadbalancer/net/"}],"description":"Grants permission to modify the capacity reservation for a load balancer","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer/app/","required":false},{"name":"loadbalancer/gwy/","required":false},{"name":"loadbalancer/net/","required":false}]},"ModifyIpPools":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"loadbalancer/app/"}],"description":"Grants permission to modify the ip pools for a load balancer","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer/app/","required":false}]},"ModifyListener":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ListenerProtocol","elasticloadbalancing:ResourceTag/${TagKey}","elasticloadbalancing:SecurityPolicy"],"resources":[{"name":"listener/app"},{"name":"listener/gwy"},{"name":"listener/net"}],"description":"Grants permission to modify the specified properties of the specified listener","accessLevel":"Write","resourceTypes":[{"name":"listener/app","required":true},{"name":"listener/gwy","required":true},{"name":"listener/net","required":true}]},"ModifyListenerAttributes":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"listener/app"},{"name":"listener/gwy"},{"name":"listener/net"}],"description":"Grants permission to modify the attributes of the specified listener","accessLevel":"Write","resourceTypes":[{"name":"listener/app","required":true},{"name":"listener/gwy","required":true},{"name":"listener/net","required":true}]},"ModifyLoadBalancerAttributes":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"loadbalancer"},{"name":"loadbalancer/app/"},{"name":"loadbalancer/gwy/"},{"name":"loadbalancer/net/"}],"description":"Grants permission to modify the attributes of the specified load balancer","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer/app/","required":false},{"name":"loadbalancer/gwy/","required":false},{"name":"loadbalancer/net/","required":false}]},"ModifyRule":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"listener-rule/app"},{"name":"listener-rule/net"}],"description":"Grants permission to modify the specified rule","accessLevel":"Write","resourceTypes":[{"name":"listener-rule/app","required":true},{"name":"listener-rule/net","required":true}]},"ModifyTargetGroup":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"targetgroup"}],"description":"Grants permission to modify the health checks used when evaluating the health state of the targets in the specified target group","accessLevel":"Write","resourceTypes":[{"name":"targetgroup","required":true}]},"ModifyTargetGroupAttributes":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"targetgroup"}],"description":"Grants permission to modify the specified attributes of the specified target group","accessLevel":"Write","resourceTypes":[{"name":"targetgroup","required":true}]},"ModifyTrustStore":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"truststore"}],"description":"Grants permission to modify the specified trust store","accessLevel":"Write","resourceTypes":[{"name":"truststore","required":true}]},"RegisterInstancesWithLoadBalancer":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"loadbalancer"}],"description":"Grants permission to add the specified instances to the specified load balancer","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer","required":true}]},"RegisterTargets":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"targetgroup"}],"description":"Grants permission to register the specified targets with the specified target group","accessLevel":"Write","resourceTypes":[{"name":"targetgroup","required":true}]},"RemoveListenerCertificates":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"listener/app"},{"name":"listener/net"}],"description":"Grants permission to remove the specified certificates of the specified secure listener","accessLevel":"Write","resourceTypes":[{"name":"listener/app","required":true},{"name":"listener/net","required":true}]},"RemoveTags":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"listener-rule/app"},{"name":"listener-rule/net"},{"name":"listener/app"},{"name":"listener/gwy"},{"name":"listener/net"},{"name":"loadbalancer"},{"name":"loadbalancer/app/"},{"name":"loadbalancer/gwy/"},{"name":"loadbalancer/net/"},{"name":"targetgroup"},{"name":"truststore"}],"description":"Grants permission to remove one or more tags from the specified load balancer","accessLevel":"Tagging","resourceTypes":[{"name":"listener-rule/app","required":false},{"name":"listener-rule/net","required":false},{"name":"listener/app","required":false},{"name":"listener/gwy","required":false},{"name":"listener/net","required":false},{"name":"loadbalancer/app/","required":false},{"name":"loadbalancer/gwy/","required":false},{"name":"loadbalancer/net/","required":false},{"name":"targetgroup","required":false},{"name":"truststore","required":false}]},"RemoveTrustStoreRevocations":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"truststore"}],"description":"Grants permission to remove revocations from a trust store","accessLevel":"Write","resourceTypes":[{"name":"truststore","required":true}]},"SetIpAddressType":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"loadbalancer/app/"},{"name":"loadbalancer/gwy/"},{"name":"loadbalancer/net/"}],"description":"Grants permission to set the type of IP addresses used by the subnets of the specified load balancer","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer/app/","required":false},{"name":"loadbalancer/gwy/","required":false},{"name":"loadbalancer/net/","required":false}]},"SetLoadBalancerListenerSSLCertificate":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"loadbalancer"}],"description":"Grants permission to set the certificate that terminates the specified listener's SSL connections","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer","required":true}]},"SetLoadBalancerPoliciesForBackendServer":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"loadbalancer"}],"description":"Grants permission to replace the set of policies associated with the specified port on which the back-end server is listening with a new set of policies","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer","required":true}]},"SetLoadBalancerPoliciesOfListener":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}","elasticloadbalancing:SecurityPolicy"],"resources":[{"name":"loadbalancer"}],"description":"Grants permission to replace the current set of policies for the specified load balancer port with the specified set of policies","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer","required":true}]},"SetRulePriorities":{"conditionKeys":[],"resources":[{"name":"listener-rule/app"},{"name":"listener-rule/net"}],"description":"Grants permission to set the priorities of the specified rules","accessLevel":"Write","resourceTypes":[{"name":"listener-rule/app","required":true},{"name":"listener-rule/net","required":true}]},"SetSecurityGroups":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}","elasticloadbalancing:SecurityGroup"],"resources":[{"name":"loadbalancer/app/"},{"name":"loadbalancer/net/"}],"description":"Grants permission to associate the specified security groups with the specified load balancer","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer/app/","required":false},{"name":"loadbalancer/net/","required":false}]},"SetSubnets":{"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}","elasticloadbalancing:Subnet"],"resources":[{"name":"loadbalancer/app/"},{"name":"loadbalancer/gwy/"},{"name":"loadbalancer/net/"}],"description":"Grants permission to enable the Availability Zone for the specified subnets for the specified load balancer","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer/app/","required":false},{"name":"loadbalancer/gwy/","required":false},{"name":"loadbalancer/net/","required":false}]},"SetWebAcl":{"conditionKeys":[],"resources":[],"description":"Grants permission to give WebAcl permission to WAF","accessLevel":"Write","resourceTypes":[],"permissionOnly":true}},"resources":[{"name":"listener-rule/app","arnFormats":["arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener-rule/app/${LoadBalancerName}/${LoadBalancerId}/${ListenerId}/${ListenerRuleId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"]},{"name":"listener-rule/net","arnFormats":["arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener-rule/net/${LoadBalancerName}/${LoadBalancerId}/${ListenerId}/${ListenerRuleId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"]},{"name":"listener/app","arnFormats":["arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/app/${LoadBalancerName}/${LoadBalancerId}/${ListenerId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"]},{"name":"listener/gwy","arnFormats":["arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/gwy/${LoadBalancerName}/${LoadBalancerId}/${ListenerId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"]},{"name":"listener/net","arnFormats":["arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/net/${LoadBalancerName}/${LoadBalancerId}/${ListenerId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"]},{"name":"loadbalancer","arnFormats":["arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/${LoadBalancerName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"]},{"name":"loadbalancer/app/","arnFormats":["arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/${LoadBalancerName}/${LoadBalancerId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"]},{"name":"loadbalancer/gwy/","arnFormats":["arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/gwy/${LoadBalancerName}/${LoadBalancerId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"]},{"name":"loadbalancer/net/","arnFormats":["arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/net/${LoadBalancerName}/${LoadBalancerId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"]},{"name":"targetgroup","arnFormats":["arn:${Partition}:elasticloadbalancing:${Region}:${Account}:targetgroup/${TargetGroupName}/${TargetGroupId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"]},{"name":"truststore","arnFormats":["arn:${Partition}:elasticloadbalancing:${Region}:${Account}:truststore/${TrustStoreName}/${TrustStoreId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair that is allowed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair of a resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by a list of tag keys that are allowed in the request"},"elasticloadbalancing:CreateAction":{"types":["String"],"description":"Filters access by the name of a resource-creating API action"},"elasticloadbalancing:ListenerProtocol":{"types":["ArrayOfString","String"],"description":"Filters access by the listener protocol that is allowed in the request"},"elasticloadbalancing:ResourceTag/":{"types":["String"],"description":"Filters access by the preface string for a tag key and value pair that are attached to a resource"},"elasticloadbalancing:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the preface string for a tag key and value pair that are attached to a resource"},"elasticloadbalancing:Scheme":{"types":["String"],"description":"Filters access by the load balancer scheme that is allowed in the request"},"elasticloadbalancing:SecurityGroup":{"types":["ArrayOfString"],"description":"Filters access by the security-group IDs that are allowed in the request"},"elasticloadbalancing:SecurityPolicy":{"types":["ArrayOfString"],"description":"Filters access by the SSL Security Policies that are allowed in the request"},"elasticloadbalancing:Subnet":{"types":["ArrayOfString"],"description":"Filters access by the subnet IDs that are allowed in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"elasticmapreduce","actions":{"AccessAllEventLogs":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to view all event logs in a persistent application history server","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"AddInstanceFleet":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to add an instance fleet to a running cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"AddInstanceGroups":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to add instance groups to a running cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"AddJobFlowSteps":{"conditionKeys":["elasticmapreduce:ExecutionRoleArn"],"resources":[{"name":"cluster"}],"description":"Grants permission to add new steps to a running cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"AddTags":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","elasticmapreduce:RequestTag/${TagKey}"],"resources":[{"name":"cluster"},{"name":"editor"},{"name":"notebook-execution"},{"name":"studio"}],"description":"Grants permission to add tags to an Amazon EMR resource","accessLevel":"Tagging","resourceTypes":[{"name":"cluster","required":false},{"name":"editor","required":false},{"name":"notebook-execution","required":false},{"name":"studio","required":false}]},"AttachEditor":{"conditionKeys":[],"resources":[{"name":"editor"}],"description":"Grants permission to attach an EMR notebook to a compute engine","accessLevel":"Write","resourceTypes":[{"name":"editor","required":true}],"permissionOnly":true},"CancelSteps":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to cancel a pending step or steps in a running cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"CreateEditor":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","elasticmapreduce:RequestTag/${TagKey}"],"resources":[{"name":"cluster"}],"description":"Grants permission to create an EMR notebook","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":false}],"permissionOnly":true},"CreatePersistentAppUI":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to create a persistent application history server","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"CreateRepository":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an EMR notebook repository","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CreateSecurityConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a security configuration","accessLevel":"Write","resourceTypes":[]},"CreateStudio":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","elasticmapreduce:RequestTag/${TagKey}"],"resources":[],"description":"Grants permission to create an EMR Studio","accessLevel":"Write","resourceTypes":[]},"CreateStudioPresignedUrl":{"conditionKeys":[],"resources":[{"name":"studio"}],"description":"Grants permission to launch an EMR Studio using IAM authentication mode","accessLevel":"Write","resourceTypes":[{"name":"studio","required":true}]},"CreateStudioSessionMapping":{"conditionKeys":[],"resources":[{"name":"studio"}],"description":"Grants permission to create an EMR Studio session mapping","accessLevel":"Write","resourceTypes":[{"name":"studio","required":true}]},"DeleteEditor":{"conditionKeys":[],"resources":[{"name":"editor"}],"description":"Grants permission to delete an EMR notebook","accessLevel":"Write","resourceTypes":[{"name":"editor","required":true}],"permissionOnly":true},"DeleteRepository":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete an EMR notebook repository","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"DeleteSecurityConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a security configuration","accessLevel":"Write","resourceTypes":[]},"DeleteStudio":{"conditionKeys":[],"resources":[{"name":"studio"}],"description":"Grants permission to delete an EMR Studio","accessLevel":"Write","resourceTypes":[{"name":"studio","required":true}]},"DeleteStudioSessionMapping":{"conditionKeys":[],"resources":[{"name":"studio"}],"description":"Grants permission to delete an EMR Studio session mapping","accessLevel":"Write","resourceTypes":[{"name":"studio","required":true}]},"DeleteWorkspaceAccess":{"conditionKeys":[],"resources":[{"name":"editor"}],"description":"Grants permission to block an identity from opening a collaborative workspace","accessLevel":"Permissions management","resourceTypes":[{"name":"editor","required":true}],"permissionOnly":true},"DescribeCluster":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to get details about a cluster, including status, hardware and software configuration, VPC settings, and so on","accessLevel":"Read","resourceTypes":[{"name":"cluster","required":true}]},"DescribeEditor":{"conditionKeys":[],"resources":[{"name":"editor"}],"description":"Grants permission to view information about a notebook, including status, user, role, tags, location, and more","accessLevel":"Read","resourceTypes":[{"name":"editor","required":true}],"permissionOnly":true},"DescribeJobFlows":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to describe details of clusters (job flows). This API is deprecated and will eventually be removed. We recommend you use ListClusters, DescribeCluster, ListSteps, ListInstanceGroups and ListBootstrapActions instead","accessLevel":"Read","resourceTypes":[{"name":"cluster","required":true}]},"DescribeNotebookExecution":{"conditionKeys":[],"resources":[{"name":"notebook-execution"}],"description":"Grants permission to view information about a notebook execution","accessLevel":"Read","resourceTypes":[{"name":"notebook-execution","required":true}]},"DescribePersistentAppUI":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to describe a persistent application history server","accessLevel":"Read","resourceTypes":[{"name":"cluster","required":true}]},"DescribeReleaseLabel":{"conditionKeys":[],"resources":[],"description":"Grants permission to view information about an EMR release, such as which applications are supported","accessLevel":"Read","resourceTypes":[]},"DescribeRepository":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe an EMR notebook repository","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"DescribeSecurityConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to get details of a security configuration","accessLevel":"Read","resourceTypes":[]},"DescribeStep":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to get details about a cluster step","accessLevel":"Read","resourceTypes":[{"name":"cluster","required":true}]},"DescribeStudio":{"conditionKeys":[],"resources":[{"name":"studio"}],"description":"Grants permission to view information about an EMR Studio","accessLevel":"Read","resourceTypes":[{"name":"studio","required":true}]},"DetachEditor":{"conditionKeys":[],"resources":[{"name":"editor"}],"description":"Grants permission to detach an EMR notebook from a compute engine","accessLevel":"Write","resourceTypes":[{"name":"editor","required":true}],"permissionOnly":true},"GetAutoTerminationPolicy":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to retrieve the auto-termination policy associated with a cluster","accessLevel":"Read","resourceTypes":[{"name":"cluster","required":true}]},"GetBlockPublicAccessConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the EMR block public access configuration for the AWS account in the Region","accessLevel":"Read","resourceTypes":[]},"GetClusterSessionCredentials":{"conditionKeys":["elasticmapreduce:ExecutionRoleArn"],"resources":[{"name":"cluster"}],"description":"Grants permission to retrieve HTTP basic credentials associated with a given execution IAM Role for a fine-grained access control enabled EMR Cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"GetManagedScalingPolicy":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to retrieve the managed scaling policy associated with a cluster","accessLevel":"Read","resourceTypes":[{"name":"cluster","required":true}]},"GetOnClusterAppUIPresignedURL":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to get a presigned URL for an application history server running on the cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"GetPersistentAppUIPresignedURL":{"conditionKeys":["elasticmapreduce:ExecutionRoleArn"],"resources":[{"name":"cluster"}],"description":"Grants permission to get a presigned URL for a persistent application history server","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"GetStudioSessionMapping":{"conditionKeys":[],"resources":[{"name":"studio"}],"description":"Grants permission to view information about an EMR Studio session mapping","accessLevel":"Read","resourceTypes":[{"name":"studio","required":true}]},"LinkRepository":{"conditionKeys":[],"resources":[],"description":"Grants permission to link an EMR notebook repository to EMR notebooks","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"ListBootstrapActions":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to get details about the bootstrap actions associated with a cluster","accessLevel":"Read","resourceTypes":[{"name":"cluster","required":true}]},"ListClusters":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the status of accessible clusters","accessLevel":"List","resourceTypes":[]},"ListEditors":{"conditionKeys":[],"resources":[],"description":"Grants permission to list summary information for accessible EMR notebooks","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListInstanceFleets":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to get details of instance fleets in a cluster","accessLevel":"Read","resourceTypes":[{"name":"cluster","required":true}]},"ListInstanceGroups":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to get details of instance groups in a cluster","accessLevel":"Read","resourceTypes":[{"name":"cluster","required":true}]},"ListInstances":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to get details about the Amazon EC2 instances in a cluster","accessLevel":"Read","resourceTypes":[{"name":"cluster","required":true}]},"ListNotebookExecutions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list summary information for notebook executions","accessLevel":"List","resourceTypes":[]},"ListReleaseLabels":{"conditionKeys":[],"resources":[],"description":"Grants permission to list and filter the available EMR releases in the current region","accessLevel":"List","resourceTypes":[]},"ListRepositories":{"conditionKeys":[],"resources":[],"description":"Grants permission to list existing EMR notebook repositories","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListSecurityConfigurations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list available security configurations in this account by name, along with creation dates and times","accessLevel":"List","resourceTypes":[]},"ListSteps":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to list steps associated with a cluster","accessLevel":"Read","resourceTypes":[{"name":"cluster","required":true}]},"ListStudioSessionMappings":{"conditionKeys":[],"resources":[],"description":"Grants permission to list summary information about EMR Studio session mappings","accessLevel":"List","resourceTypes":[]},"ListStudios":{"conditionKeys":[],"resources":[],"description":"Grants permission to list summary information about EMR Studios","accessLevel":"List","resourceTypes":[]},"ListSupportedInstanceTypes":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the Amazon EC2 instance types that an Amazon EMR release supports","accessLevel":"List","resourceTypes":[]},"ListWorkspaceAccessIdentities":{"conditionKeys":[],"resources":[{"name":"editor"}],"description":"Grants permission to list identities that are granted access to a workspace","accessLevel":"List","resourceTypes":[{"name":"editor","required":true}],"permissionOnly":true},"ModifyCluster":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to change cluster settings such as number of steps that can be executed concurrently for a cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"ModifyInstanceFleet":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to change the target On-Demand and target Spot capacities for a instance fleet","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"ModifyInstanceGroups":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to change the number and configuration of EC2 instances for an instance group","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":false}]},"OpenEditorInConsole":{"conditionKeys":[],"resources":[{"name":"cluster"},{"name":"editor"}],"description":"Grants permission to launch the Jupyter notebook editor for an EMR notebook from within the console","accessLevel":"Write","resourceTypes":[{"name":"editor","required":true},{"name":"cluster","required":false}],"permissionOnly":true},"PutAutoScalingPolicy":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to create or update an automatic scaling policy for a core instance group or task instance group","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"PutAutoTerminationPolicy":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to create or update the auto-termination policy associated with a cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"PutBlockPublicAccessConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to create or update the EMR block public access configuration for the AWS account in the Region","accessLevel":"Permissions management","resourceTypes":[]},"PutManagedScalingPolicy":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to create or update the managed scaling policy associated with a cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"PutWorkspaceAccess":{"conditionKeys":[],"resources":[{"name":"editor"}],"description":"Grants permission to allow an identity to open a collaborative workspace","accessLevel":"Permissions management","resourceTypes":[{"name":"editor","required":true}],"permissionOnly":true},"RemoveAutoScalingPolicy":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to remove an automatic scaling policy from an instance group","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"RemoveAutoTerminationPolicy":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to remove the auto-termination policy associated with a cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"RemoveManagedScalingPolicy":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to remove the managed scaling policy associated with a cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"RemoveTags":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"cluster"},{"name":"editor"},{"name":"notebook-execution"},{"name":"studio"}],"description":"Grants permission to remove tags from an Amazon EMR resource","accessLevel":"Tagging","resourceTypes":[{"name":"cluster","required":false},{"name":"editor","required":false},{"name":"notebook-execution","required":false},{"name":"studio","required":false}]},"RunJobFlow":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","elasticmapreduce:RequestTag/${TagKey}"],"resources":[],"description":"Grants permission to create and launch a cluster (job flow)","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"]},"SetKeepJobFlowAliveWhenNoSteps":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to add and remove auto terminate after step execution for a cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"SetTerminationProtection":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to add and remove termination protection for a cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"SetUnhealthyNodeReplacement":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to enable or disable unhealthy node replacement for a cluster","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"SetVisibleToAllUsers":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to set whether all AWS Identity and Access Management (IAM) users in the AWS account can view a cluster. This API is deprecated and your cluster may be visible to all users in your account. To restrict cluster access using an IAM policy, see AWS Identity and Access Management for Amazon EMR (https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-plan-access-iam.html)","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"StartEditor":{"conditionKeys":[],"resources":[{"name":"cluster"},{"name":"editor"}],"description":"Grants permission to start an EMR notebook","accessLevel":"Write","resourceTypes":[{"name":"editor","required":true},{"name":"cluster","required":false}],"permissionOnly":true},"StartNotebookExecution":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","elasticmapreduce:RequestTag/${TagKey}"],"resources":[{"name":"cluster"},{"name":"editor"}],"description":"Grants permission to start an EMR notebook execution","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true},{"name":"editor","required":true}]},"StopEditor":{"conditionKeys":[],"resources":[{"name":"editor"}],"description":"Grants permission to shut down an EMR notebook","accessLevel":"Write","resourceTypes":[{"name":"editor","required":true}],"permissionOnly":true},"StopNotebookExecution":{"conditionKeys":[],"resources":[{"name":"notebook-execution"}],"description":"Grants permission to stop notebook execution","accessLevel":"Write","resourceTypes":[{"name":"notebook-execution","required":true}]},"TerminateJobFlows":{"conditionKeys":[],"resources":[{"name":"cluster"}],"description":"Grants permission to terminate a cluster (job flow)","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"UnlinkRepository":{"conditionKeys":[],"resources":[],"description":"Grants permission to unlink an EMR notebook repository from EMR notebooks","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"UpdateEditor":{"conditionKeys":[],"resources":[{"name":"editor"}],"description":"Grants permission to update an EMR notebook","accessLevel":"Write","resourceTypes":[{"name":"editor","required":true}],"permissionOnly":true},"UpdateRepository":{"conditionKeys":[],"resources":[],"description":"Grants permission to update an EMR notebook repository","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"UpdateStudio":{"conditionKeys":[],"resources":[{"name":"studio"}],"description":"Grants permission to update information about an EMR Studio","accessLevel":"Write","resourceTypes":[{"name":"studio","required":true}]},"UpdateStudioSessionMapping":{"conditionKeys":[],"resources":[{"name":"studio"}],"description":"Grants permission to update an EMR Studio session mapping","accessLevel":"Write","resourceTypes":[{"name":"studio","required":true}]},"ViewEventsFromAllClustersInConsole":{"conditionKeys":[],"resources":[],"description":"Grants permission to use the EMR console to view events from all clusters","accessLevel":"List","resourceTypes":[],"permissionOnly":true}},"resources":[{"name":"cluster","arnFormats":["arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/${ClusterId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","elasticmapreduce:ResourceTag/${TagKey}"]},{"name":"editor","arnFormats":["arn:${Partition}:elasticmapreduce:${Region}:${Account}:editor/${EditorId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","elasticmapreduce:ResourceTag/${TagKey}"]},{"name":"notebook-execution","arnFormats":["arn:${Partition}:elasticmapreduce:${Region}:${Account}:notebook-execution/${NotebookExecutionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","elasticmapreduce:ResourceTag/${TagKey}"]},{"name":"studio","arnFormats":["arn:${Partition}:elasticmapreduce:${Region}:${Account}:studio/${StudioId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","elasticmapreduce:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by whether the tag and value pair is provided with the action"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag and value pair associated with an Amazon EMR resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by whether the tag keys are provided with the action regardless of tag value"},"elasticmapreduce:ExecutionRoleArn":{"types":["ARN"],"description":"Filters access by whether the execution role ARN is provided with the action"},"elasticmapreduce:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by whether the tag and value pair is provided with the action"},"elasticmapreduce:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag and value pair associated with an Amazon EMR resource"}}}
@@ -0,0 +1 @@
1
+ {"name":"elastictranscoder","actions":{"CancelJob":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Cancel a job that Elastic Transcoder has not begun to process","accessLevel":"Write","resourceTypes":[{"name":"job","required":true}]},"CreateJob":{"conditionKeys":[],"resources":[{"name":"pipeline"},{"name":"preset"}],"description":"Create a job","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true},{"name":"preset","required":true}]},"CreatePipeline":{"conditionKeys":[],"resources":[],"description":"Create a pipeline","accessLevel":"Write","resourceTypes":[]},"CreatePreset":{"conditionKeys":[],"resources":[],"description":"Create a preset","accessLevel":"Write","resourceTypes":[]},"DeletePipeline":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Delete a pipeline","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]},"DeletePreset":{"conditionKeys":[],"resources":[{"name":"preset"}],"description":"Delete a preset","accessLevel":"Write","resourceTypes":[{"name":"preset","required":true}]},"ListJobsByPipeline":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Get a list of the jobs that you assigned to a pipeline","accessLevel":"List","resourceTypes":[{"name":"pipeline","required":true}]},"ListJobsByStatus":{"conditionKeys":[],"resources":[],"description":"Get information about all of the jobs associated with the current AWS account that have a specified status","accessLevel":"List","resourceTypes":[]},"ListPipelines":{"conditionKeys":[],"resources":[],"description":"Get a list of the pipelines associated with the current AWS account","accessLevel":"List","resourceTypes":[]},"ListPresets":{"conditionKeys":[],"resources":[],"description":"Get a list of all presets associated with the current AWS account","accessLevel":"List","resourceTypes":[]},"ReadJob":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Get detailed information about a job","accessLevel":"Read","resourceTypes":[{"name":"job","required":true}]},"ReadPipeline":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Get detailed information about a pipeline","accessLevel":"Read","resourceTypes":[{"name":"pipeline","required":true}]},"ReadPreset":{"conditionKeys":[],"resources":[{"name":"preset"}],"description":"Get detailed information about a preset","accessLevel":"Read","resourceTypes":[{"name":"preset","required":true}]},"TestRole":{"conditionKeys":[],"resources":[],"description":"Test the settings for a pipeline to ensure that Elastic Transcoder can create and process jobs","accessLevel":"Write","resourceTypes":[]},"UpdatePipeline":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Update settings for a pipeline","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]},"UpdatePipelineNotifications":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Update only Amazon Simple Notification Service (Amazon SNS) notifications for a pipeline","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]},"UpdatePipelineStatus":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Pause or reactivate a pipeline, so the pipeline stops or restarts processing jobs, update the status for the pipeline","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]}},"resources":[{"name":"job","arnFormats":["arn:${Partition}:elastictranscoder:${Region}:${Account}:job/${JobId}"],"conditionKeys":[]},{"name":"pipeline","arnFormats":["arn:${Partition}:elastictranscoder:${Region}:${Account}:pipeline/${PipelineId}"],"conditionKeys":[]},{"name":"preset","arnFormats":["arn:${Partition}:elastictranscoder:${Region}:${Account}:preset/${PresetId}"],"conditionKeys":[]}],"conditionKeys":{}}
@@ -0,0 +1 @@
1
+ {"name":"elemental-activations","actions":{"CompleteAccountRegistration":{"conditionKeys":[],"resources":[],"description":"Grants permission to complete the process of registering customer account for AWS Elemental Appliances and Software Purchases","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CompleteFileUpload":{"conditionKeys":[],"resources":[],"description":"Grants permission to complete the process of uploading a Software file for AWS Elemental Appliances and Software Purchases","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"ConfirmAccount":{"conditionKeys":[],"resources":[],"description":"Grants permission to confirm asset ownership","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"DownloadKickstart":{"conditionKeys":[],"resources":[],"description":"Grants permission to download the kickstart files for AWS Elemental Appliances and Software purchases","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"DownloadSoftware":{"conditionKeys":[],"resources":[],"description":"Grants permission to download the Software files for AWS Elemental Appliances and Software Purchases","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GenerateLicense":{"conditionKeys":[],"resources":[],"description":"Grants permission to generate a software license for an AWS Elemental Appliances and Software purchase","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"GenerateLicenses":{"conditionKeys":[],"resources":[],"description":"Grants permission to generate Software Licenses for AWS Elemental Appliances and Software Purchases","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"GetArtifactGroupSoftwareVersions":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the software version of an artifact group","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetAsset":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe an asset","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetAssets":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe assets associated to the requesting account","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetProductAdvisories":{"conditionKeys":[],"resources":[],"description":"Grants permission to get all product advisories","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetSoftwareVersions":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe available software versions","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"StartFileUpload":{"conditionKeys":[],"resources":[],"description":"Grants permission to start the process of uploading a Software file for AWS Elemental Appliances and Software Purchases","accessLevel":"Write","resourceTypes":[],"permissionOnly":true}},"resources":[],"conditionKeys":{}}
@@ -0,0 +1 @@
1
+ {"name":"elemental-appliances-software","actions":{"CompleteUpload":{"conditionKeys":[],"resources":[],"description":"Grants permission to complete an upload of an attachment for a quote or order","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CreateOrderV1":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an order","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CreateQuote":{"conditionKeys":[],"resources":[{"name":"quote"}],"description":"Grants permission to create a quote","accessLevel":"Write","resourceTypes":[{"name":"quote","required":true}],"permissionOnly":true},"GetAvsCorrectAddress":{"conditionKeys":[],"resources":[],"description":"Grants permission to validate an address","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetBillingAddresses":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the billing addresses in the AWS Account","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetDeliveryAddressesV2":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the delivery addresses in the AWS Account","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetOrder":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe an order","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetOrdersV2":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the orders in the AWS Account","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetQuote":{"conditionKeys":[],"resources":[{"name":"quote"}],"description":"Grants permission to describe a quote","accessLevel":"Read","resourceTypes":[{"name":"quote","required":true}],"permissionOnly":true},"GetTaxes":{"conditionKeys":[],"resources":[],"description":"Grants permission to calculate taxes for an order","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"ListQuotes":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the quotes in the AWS Account","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"StartUpload":{"conditionKeys":[],"resources":[],"description":"Grants permission to start an upload of an attachment for a quote or order","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"SubmitOrderV1":{"conditionKeys":[],"resources":[],"description":"Grants permission to submit an order","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"UpdateQuote":{"conditionKeys":[],"resources":[{"name":"quote"}],"description":"Grants permission to modify a quote","accessLevel":"Write","resourceTypes":[{"name":"quote","required":true}],"permissionOnly":true}},"resources":[{"name":"quote","arnFormats":["arn:${Partition}:elemental-appliances-software:${Region}:${Account}:quote/${ResourceId}"],"conditionKeys":[]}],"conditionKeys":{}}
@@ -0,0 +1 @@
1
+ {"name":"elemental-inference","actions":{"AssociateFeed":{"conditionKeys":[],"resources":[{"name":"feed"}],"description":"Grants permission to associate a feed with an AWS resource","accessLevel":"Write","resourceTypes":[{"name":"feed","required":true}]},"CreateFeed":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new feed","accessLevel":"Write","resourceTypes":[]},"DeleteFeed":{"conditionKeys":[],"resources":[{"name":"feed"}],"description":"Grants permission to delete a feed","accessLevel":"Write","resourceTypes":[{"name":"feed","required":true}]},"DisassociateFeed":{"conditionKeys":[],"resources":[{"name":"feed"}],"description":"Grants permission to disassociate a feed from an AWS resource","accessLevel":"Write","resourceTypes":[{"name":"feed","required":true}]},"GetFeed":{"conditionKeys":[],"resources":[{"name":"feed"}],"description":"Grants permission to get feed details","accessLevel":"Read","resourceTypes":[{"name":"feed","required":true}]},"GetMetadata":{"conditionKeys":[],"resources":[{"name":"feed"}],"description":"Grants permission to retrieve metadata for a specific feed output","accessLevel":"Read","resourceTypes":[{"name":"feed","required":true}]},"ListFeeds":{"conditionKeys":[],"resources":[],"description":"Grants permission to list feeds in the account","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to list tags on a resource","accessLevel":"Read","resourceTypes":[]},"PutMedia":{"conditionKeys":[],"resources":[{"name":"feed"}],"description":"Grants permission to upload media data for a specified feed","accessLevel":"Write","resourceTypes":[{"name":"feed","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"feed"}],"description":"Grants permission to add tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"feed","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"feed"}],"description":"Grants permission to remove tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"feed","required":false}]},"UpdateFeed":{"conditionKeys":[],"resources":[{"name":"feed"}],"description":"Grants permission to update feed configuration","accessLevel":"Write","resourceTypes":[{"name":"feed","required":true}]}},"resources":[{"name":"feed","arnFormats":["arn:${Partition}:elemental-inference:${Region}:${Account}:feed/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by tag keys that are passed in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"elemental-support-cases","actions":{"AddCaseComment":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to add a comment to a support case","accessLevel":"Write","resourceTypes":[{"name":"case","required":true}],"permissionOnly":true},"CheckCasePermission":{"conditionKeys":[],"resources":[],"description":"Grants permission to verify whether the caller has the permissions to perform support case operations","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CompleteMultipartUpload":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to complete a multipart file upload to a support case","accessLevel":"Write","resourceTypes":[{"name":"case","required":true}],"permissionOnly":true},"CreateCase":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a support case","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CreateS3CLIUploadCommand":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to create a cli command to allow a file upload to a support case","accessLevel":"Write","resourceTypes":[{"name":"case","required":true}],"permissionOnly":true},"CreateS3DownloadUrl":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to download a file from a support case","accessLevel":"Write","resourceTypes":[{"name":"case","required":true}],"permissionOnly":true},"GetCase":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to describe a support case in your account","accessLevel":"Read","resourceTypes":[{"name":"case","required":true}],"permissionOnly":true},"GetCasePermission":{"conditionKeys":[],"resources":[],"description":"Grants permission to verify whether the caller has the permissions to perform support case operations","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetCases":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the support cases in your account","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetUICache":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve cached case user data for use in the Console","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"ListTagsForCase":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to list tags on a support case","accessLevel":"Read","resourceTypes":[{"name":"case","required":true}],"permissionOnly":true},"StartMultipartUpload":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to start a multipart file upload to a support case","accessLevel":"Write","resourceTypes":[{"name":"case","required":true}],"permissionOnly":true},"TagCase":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"case"}],"description":"Grants permission to add a tag on a support case","accessLevel":"Tagging","resourceTypes":[{"name":"case","required":true}],"permissionOnly":true},"UntagCase":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"case"}],"description":"Grants permission to remove a tag on a support case","accessLevel":"Tagging","resourceTypes":[{"name":"case","required":true}],"permissionOnly":true},"UpdateCase":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to update a support case","accessLevel":"Write","resourceTypes":[{"name":"case","required":true}],"permissionOnly":true},"UpdateCaseStatus":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to update a support case status","accessLevel":"Write","resourceTypes":[{"name":"case","required":true}],"permissionOnly":true},"UpdateMultipartUpload":{"conditionKeys":[],"resources":[{"name":"case"}],"description":"Grants permission to update a multipart file upload to a support case","accessLevel":"Write","resourceTypes":[{"name":"case","required":true}],"permissionOnly":true}},"resources":[{"name":"case","arnFormats":["arn:${Partition}:elemental-support-cases::${Account}:case/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by tag keys that are passed in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"elemental-support-content","actions":{"Query":{"conditionKeys":[],"resources":[],"description":"Grants permission to search support content","accessLevel":"Read","resourceTypes":[],"permissionOnly":true}},"resources":[],"conditionKeys":{}}
@@ -0,0 +1 @@
1
+ {"name":"emr-containers","actions":{"CancelJobRun":{"conditionKeys":[],"resources":[{"name":"jobRun"}],"description":"Grants permission to cancel a job run","accessLevel":"Write","resourceTypes":[{"name":"jobRun","required":true}]},"CreateCertificate":{"conditionKeys":[],"resources":[],"description":"Grants permission to call the CreateCertificate method to accept the CertificateSigningRequest, and return the signed certificate","accessLevel":"Write","resourceTypes":[]},"CreateJobTemplate":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a job template","accessLevel":"Write","resourceTypes":[]},"CreateManagedEndpoint":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","emr-containers:ExecutionRoleArn"],"resources":[{"name":"virtualCluster"}],"description":"Grants permission to create a managed endpoint","accessLevel":"Write","resourceTypes":[{"name":"virtualCluster","required":true}]},"CreateSecurityConfiguration":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a security configuration","accessLevel":"Write","resourceTypes":[]},"CreateVirtualCluster":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a virtual cluster","accessLevel":"Write","resourceTypes":[]},"DeleteJobTemplate":{"conditionKeys":[],"resources":[{"name":"jobTemplate"}],"description":"Grants permission to delete a job template","accessLevel":"Write","resourceTypes":[{"name":"jobTemplate","required":true}]},"DeleteManagedEndpoint":{"conditionKeys":[],"resources":[{"name":"managedEndpoint"}],"description":"Grants permission to delete a managed endpoint","accessLevel":"Write","resourceTypes":[{"name":"managedEndpoint","required":true}]},"DeleteSecurityConfiguration":{"conditionKeys":[],"resources":[{"name":"securityConfiguration"}],"description":"Grants permission to delete a security configuration","accessLevel":"Write","resourceTypes":[{"name":"securityConfiguration","required":true}]},"DeleteVirtualCluster":{"conditionKeys":[],"resources":[{"name":"virtualCluster"}],"description":"Grants permission to delete a virtual cluster","accessLevel":"Write","resourceTypes":[{"name":"virtualCluster","required":true}]},"DescribeJobRun":{"conditionKeys":[],"resources":[{"name":"jobRun"}],"description":"Grants permission to describe a job run","accessLevel":"Read","resourceTypes":[{"name":"jobRun","required":true}]},"DescribeJobTemplate":{"conditionKeys":[],"resources":[{"name":"jobTemplate"}],"description":"Grants permission to describe a job template","accessLevel":"Read","resourceTypes":[{"name":"jobTemplate","required":true}]},"DescribeManagedEndpoint":{"conditionKeys":[],"resources":[{"name":"managedEndpoint"}],"description":"Grants permission to describe a managed endpoint","accessLevel":"Read","resourceTypes":[{"name":"managedEndpoint","required":true}]},"DescribeSecurityConfiguration":{"conditionKeys":[],"resources":[{"name":"securityConfiguration"}],"description":"Grants permission to describe a security configuration","accessLevel":"Read","resourceTypes":[{"name":"securityConfiguration","required":true}]},"DescribeVirtualCluster":{"conditionKeys":[],"resources":[{"name":"virtualCluster"}],"description":"Grants permission to describe a virtual cluster","accessLevel":"Read","resourceTypes":[{"name":"virtualCluster","required":true}]},"GetManagedEndpointSessionCredentials":{"conditionKeys":[],"resources":[{"name":"managedEndpoint"}],"description":"Grants permission to generate a session token used to connect to a managed endpoint","accessLevel":"Write","resourceTypes":[{"name":"managedEndpoint","required":true}]},"ListJobRuns":{"conditionKeys":[],"resources":[{"name":"virtualCluster"}],"description":"Grants permission to list job runs associated with a virtual cluster","accessLevel":"List","resourceTypes":[{"name":"virtualCluster","required":true}]},"ListJobTemplates":{"conditionKeys":[],"resources":[],"description":"Grants permission to list job templates","accessLevel":"List","resourceTypes":[]},"ListManagedEndpoints":{"conditionKeys":[],"resources":[{"name":"virtualCluster"}],"description":"Grants permission to list managed endpoints associated with a virtual cluster","accessLevel":"List","resourceTypes":[{"name":"virtualCluster","required":true}]},"ListSecurityConfigurations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list security configurations","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"jobRun"},{"name":"jobTemplate"},{"name":"managedEndpoint"},{"name":"securityConfiguration"},{"name":"virtualCluster"}],"description":"Grants permission to list tags for the specified resource","accessLevel":"List","resourceTypes":[{"name":"jobRun","required":false},{"name":"jobTemplate","required":false},{"name":"managedEndpoint","required":false},{"name":"securityConfiguration","required":false},{"name":"virtualCluster","required":false}]},"ListVirtualClusters":{"conditionKeys":[],"resources":[],"description":"Grants permission to list virtual clusters","accessLevel":"List","resourceTypes":[]},"StartJobRun":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","emr-containers:ExecutionRoleArn","emr-containers:JobTemplateArn"],"resources":[{"name":"virtualCluster"}],"description":"Grants permission to start a job run","accessLevel":"Write","resourceTypes":[{"name":"virtualCluster","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"jobRun"},{"name":"jobTemplate"},{"name":"managedEndpoint"},{"name":"securityConfiguration"},{"name":"virtualCluster"}],"description":"Grants permission to tag the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"jobRun","required":false},{"name":"jobTemplate","required":false},{"name":"managedEndpoint","required":false},{"name":"securityConfiguration","required":false},{"name":"virtualCluster","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"jobRun"},{"name":"jobTemplate"},{"name":"managedEndpoint"},{"name":"securityConfiguration"},{"name":"virtualCluster"}],"description":"Grants permission to untag the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"jobRun","required":false},{"name":"jobTemplate","required":false},{"name":"managedEndpoint","required":false},{"name":"securityConfiguration","required":false},{"name":"virtualCluster","required":false}]}},"resources":[{"name":"jobRun","arnFormats":["arn:${Partition}:emr-containers:${Region}:${Account}:/virtualclusters/${VirtualClusterId}/jobruns/${JobRunId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"jobTemplate","arnFormats":["arn:${Partition}:emr-containers:${Region}:${Account}:/jobtemplates/${JobTemplateId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"managedEndpoint","arnFormats":["arn:${Partition}:emr-containers:${Region}:${Account}:/virtualclusters/${VirtualClusterId}/endpoints/${EndpointId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"securityConfiguration","arnFormats":["arn:${Partition}:emr-containers:${Region}:${Account}:/securityconfigurations/${SecurityConfigurationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"virtualCluster","arnFormats":["arn:${Partition}:emr-containers:${Region}:${Account}:/virtualclusters/${VirtualClusterId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs present in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys present in the request"},"emr-containers:ExecutionRoleArn":{"types":["ARN"],"description":"Filters access by the execution role arn present in the request"},"emr-containers:JobTemplateArn":{"types":["ARN"],"description":"Filters access by the job template arn present in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"emr-serverless","actions":{"AccessInteractiveEndpoints":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to execute interactive workloads on an application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}],"dependentActions":["iam:PassRole"],"permissionOnly":true},"AccessLivyEndpoints":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to execute interactive workloads on Livy Endpoint enabled on an EMR Serverless Application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}],"dependentActions":["iam:PassRole"],"permissionOnly":true},"AccessSystemProfileLogs":{"conditionKeys":[],"resources":[{"name":"jobRun"}],"description":"Grants permission to access system profile logs","accessLevel":"Write","resourceTypes":[{"name":"jobRun","required":true}],"permissionOnly":true},"CancelJobRun":{"conditionKeys":[],"resources":[{"name":"jobRun"}],"description":"Grants permission to cancel a job run","accessLevel":"Write","resourceTypes":[{"name":"jobRun","required":true}]},"CreateApplication":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an Application","accessLevel":"Write","resourceTypes":[]},"DeleteApplication":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to delete an application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"GetApplication":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to get application","accessLevel":"Read","resourceTypes":[{"name":"application","required":true}]},"GetDashboardForJobRun":{"conditionKeys":[],"resources":[{"name":"jobRun"}],"description":"Grants permission to get job run dashboard","accessLevel":"Read","resourceTypes":[{"name":"jobRun","required":true}]},"GetJobRun":{"conditionKeys":[],"resources":[{"name":"jobRun"}],"description":"Grants permission to get a job run","accessLevel":"Read","resourceTypes":[{"name":"jobRun","required":true}]},"ListApplications":{"conditionKeys":[],"resources":[],"description":"Grants permission to list applications","accessLevel":"List","resourceTypes":[]},"ListJobRunAttempts":{"conditionKeys":[],"resources":[{"name":"jobRun"}],"description":"Grants permission to list job run attempts associated with a job run","accessLevel":"List","resourceTypes":[{"name":"jobRun","required":true}]},"ListJobRuns":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to list job runs associated with an application","accessLevel":"List","resourceTypes":[{"name":"application","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"jobRun"}],"description":"Grants permission to list tags for the specified resource","accessLevel":"Read","resourceTypes":[{"name":"application","required":false},{"name":"jobRun","required":false}]},"StartApplication":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to Start an application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"StartJobRun":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"application"}],"description":"Grants permission to start a job run","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}],"dependentActions":["iam:PassRole"]},"StopApplication":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to Stop an application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"application"},{"name":"jobRun"}],"description":"Grants permission to tag the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"application","required":false},{"name":"jobRun","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"application"},{"name":"jobRun"}],"description":"Grants permission to untag the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"application","required":false},{"name":"jobRun","required":false}]},"UpdateApplication":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to Update an application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]}},"resources":[{"name":"application","arnFormats":["arn:${Partition}:emr-serverless:${Region}:${Account}:/applications/${ApplicationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"jobRun","arnFormats":["arn:${Partition}:emr-serverless:${Region}:${Account}:/applications/${ApplicationId}/jobruns/${JobRunId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"entityresolution","actions":{"AddPolicyStatement":{"conditionKeys":[],"resources":[],"description":"Grants permission to give an AWS service or another account permission to use an AWS Entity Resolution resources","accessLevel":"Permissions management","resourceTypes":[]},"BatchDeleteUniqueId":{"conditionKeys":[],"resources":[{"name":"MatchingWorkflow"}],"description":"Grants permission to batch delete unique Id","accessLevel":"Write","resourceTypes":[{"name":"MatchingWorkflow","required":true}]},"CreateIdMappingWorkflow":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a idmapping workflow","accessLevel":"Write","resourceTypes":[]},"CreateIdNamespace":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a IdNamespace","accessLevel":"Write","resourceTypes":[]},"CreateMatchingWorkflow":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a matching workflow","accessLevel":"Write","resourceTypes":[]},"CreateSchemaMapping":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a schema mapping","accessLevel":"Write","resourceTypes":[]},"DeleteIdMappingWorkflow":{"conditionKeys":[],"resources":[{"name":"IdMappingWorkflow"}],"description":"Grants permission to delete a idmapping workflow","accessLevel":"Write","resourceTypes":[{"name":"IdMappingWorkflow","required":true}]},"DeleteIdNamespace":{"conditionKeys":[],"resources":[{"name":"IdNamespace"}],"description":"Grants permission to delete a IdNamespace","accessLevel":"Write","resourceTypes":[{"name":"IdNamespace","required":true}]},"DeleteMatchingWorkflow":{"conditionKeys":[],"resources":[{"name":"MatchingWorkflow"}],"description":"Grants permission to delete a matching workflow","accessLevel":"Write","resourceTypes":[{"name":"MatchingWorkflow","required":true}]},"DeletePolicyStatement":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete permission given to an AWS service or another account permission to use an AWS Entity Resolution resources","accessLevel":"Permissions management","resourceTypes":[]},"DeleteSchemaMapping":{"conditionKeys":[],"resources":[{"name":"SchemaMapping"}],"description":"Grants permission to delete a schema mapping","accessLevel":"Write","resourceTypes":[{"name":"SchemaMapping","required":true}]},"GenerateMatchId":{"conditionKeys":[],"resources":[{"name":"MatchingWorkflow"}],"description":"Grants permission to generate match Id","accessLevel":"Write","resourceTypes":[{"name":"MatchingWorkflow","required":true}]},"GetIdMappingJob":{"conditionKeys":[],"resources":[{"name":"IdMappingWorkflow"}],"description":"Grants permission to get a idmapping job","accessLevel":"Read","resourceTypes":[{"name":"IdMappingWorkflow","required":true}]},"GetIdMappingWorkflow":{"conditionKeys":[],"resources":[{"name":"IdMappingWorkflow"}],"description":"Grants permission to get a idmapping workflow","accessLevel":"Read","resourceTypes":[{"name":"IdMappingWorkflow","required":true}]},"GetIdNamespace":{"conditionKeys":[],"resources":[{"name":"IdNamespace"}],"description":"Grants permission to get a IdNamespace","accessLevel":"Read","resourceTypes":[{"name":"IdNamespace","required":true}]},"GetMatchId":{"conditionKeys":[],"resources":[{"name":"MatchingWorkflow"}],"description":"Grants permission to get match Id","accessLevel":"Read","resourceTypes":[{"name":"MatchingWorkflow","required":true}]},"GetMatchingJob":{"conditionKeys":[],"resources":[{"name":"MatchingWorkflow"}],"description":"Grants permission to get a matching job","accessLevel":"Read","resourceTypes":[{"name":"MatchingWorkflow","required":true}]},"GetMatchingWorkflow":{"conditionKeys":[],"resources":[{"name":"MatchingWorkflow"}],"description":"Grants permission to get a matching workflow","accessLevel":"Read","resourceTypes":[{"name":"MatchingWorkflow","required":true}]},"GetPolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a resource policy for an AWS Entity Resolution resources","accessLevel":"Read","resourceTypes":[]},"GetProviderService":{"conditionKeys":[],"resources":[{"name":"ProviderService"}],"description":"Grants permission to get provider service","accessLevel":"Read","resourceTypes":[{"name":"ProviderService","required":true}]},"GetSchemaMapping":{"conditionKeys":[],"resources":[{"name":"SchemaMapping"}],"description":"Grants permission to get a schema mapping","accessLevel":"Read","resourceTypes":[{"name":"SchemaMapping","required":true}]},"ListIdMappingJobs":{"conditionKeys":[],"resources":[{"name":"IdMappingWorkflow"}],"description":"Grants permission to list idmapping jobs","accessLevel":"List","resourceTypes":[{"name":"IdMappingWorkflow","required":true}]},"ListIdMappingWorkflows":{"conditionKeys":[],"resources":[],"description":"Grants permission to list idmapping workflows","accessLevel":"List","resourceTypes":[]},"ListIdNamespaces":{"conditionKeys":[],"resources":[],"description":"Grants permission to list IdNamespaces","accessLevel":"List","resourceTypes":[]},"ListMatchingJobs":{"conditionKeys":[],"resources":[{"name":"MatchingWorkflow"}],"description":"Grants permission to list matching jobs","accessLevel":"List","resourceTypes":[{"name":"MatchingWorkflow","required":true}]},"ListMatchingWorkflows":{"conditionKeys":[],"resources":[],"description":"Grants permission to list matching workflows","accessLevel":"List","resourceTypes":[]},"ListProviderServices":{"conditionKeys":[],"resources":[],"description":"Grants permission to list provider service","accessLevel":"List","resourceTypes":[]},"ListSchemaMappings":{"conditionKeys":[],"resources":[],"description":"Grants permission to list schema mappings","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to List tags for a resource","accessLevel":"Read","resourceTypes":[]},"PutPolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to put a resource policy for an AWS Entity Resolution resources","accessLevel":"Permissions management","resourceTypes":[]},"StartIdMappingJob":{"conditionKeys":[],"resources":[{"name":"IdMappingWorkflow"}],"description":"Grants permission to start a idmapping job","accessLevel":"Write","resourceTypes":[{"name":"IdMappingWorkflow","required":true}]},"StartMatchingJob":{"conditionKeys":[],"resources":[{"name":"MatchingWorkflow"}],"description":"Grants permission to start a matching job","accessLevel":"Write","resourceTypes":[{"name":"MatchingWorkflow","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"IdMappingWorkflow"},{"name":"IdNamespace"},{"name":"MatchingWorkflow"},{"name":"ProviderService"},{"name":"SchemaMapping"}],"description":"Grants permission to adds tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"IdMappingWorkflow","required":false},{"name":"IdNamespace","required":false},{"name":"MatchingWorkflow","required":false},{"name":"ProviderService","required":false},{"name":"SchemaMapping","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"IdMappingWorkflow"},{"name":"IdNamespace"},{"name":"MatchingWorkflow"},{"name":"ProviderService"},{"name":"SchemaMapping"}],"description":"Grants permission to untag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"IdMappingWorkflow","required":false},{"name":"IdNamespace","required":false},{"name":"MatchingWorkflow","required":false},{"name":"ProviderService","required":false},{"name":"SchemaMapping","required":false}]},"UpdateIdMappingWorkflow":{"conditionKeys":[],"resources":[{"name":"IdMappingWorkflow"}],"description":"Grants permission to update a idmapping workflow","accessLevel":"Write","resourceTypes":[{"name":"IdMappingWorkflow","required":true}]},"UpdateIdNamespace":{"conditionKeys":[],"resources":[{"name":"IdNamespace"}],"description":"Grants permission to update a IdNamespace","accessLevel":"Write","resourceTypes":[{"name":"IdNamespace","required":true}]},"UpdateMatchingWorkflow":{"conditionKeys":[],"resources":[{"name":"MatchingWorkflow"}],"description":"Grants permission to update a matching workflow","accessLevel":"Write","resourceTypes":[{"name":"MatchingWorkflow","required":true}]},"UpdateSchemaMapping":{"conditionKeys":[],"resources":[{"name":"SchemaMapping"}],"description":"Grants permission to update a schema mapping","accessLevel":"Write","resourceTypes":[{"name":"SchemaMapping","required":true}]},"UseIdNamespace":{"conditionKeys":[],"resources":[],"description":"Grants permission to give an AWS service or another account permission to use IdNamespace within a workflow","accessLevel":"Permissions management","resourceTypes":[]},"UseWorkflow":{"conditionKeys":[],"resources":[],"description":"Grants permission to give an AWS service or another account permission to use workflow within a IdNamespace","accessLevel":"Permissions management","resourceTypes":[]}},"resources":[{"name":"IdMappingWorkflow","arnFormats":["arn:${Partition}:entityresolution:${Region}:${Account}:idmappingworkflow/${WorkflowName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"IdNamespace","arnFormats":["arn:${Partition}:entityresolution:${Region}:${Account}:idnamespace/${IdNamespaceName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"MatchingWorkflow","arnFormats":["arn:${Partition}:entityresolution:${Region}:${Account}:matchingworkflow/${WorkflowName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"ProviderService","arnFormats":["arn:${Partition}:entityresolution:${Region}:${Account}:providerservice/${ProviderName}/${ProviderServiceName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"SchemaMapping","arnFormats":["arn:${Partition}:entityresolution:${Region}:${Account}:schemamapping/${SchemaName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by a key that is present in the request the user makes to the entity resolution service"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the list of all the tag key names present in the request the user makes to the entity resolution service"}}}
@@ -0,0 +1 @@
1
+ {"name":"es","actions":{"AcceptInboundConnection":{"conditionKeys":[],"resources":[],"description":"Grants permission to the destination domain owner to accept an inbound cross-cluster search connection request","accessLevel":"Write","resourceTypes":[]},"AcceptInboundCrossClusterSearchConnection":{"conditionKeys":[],"resources":[],"description":"Grants permission to the destination domain owner to accept an inbound cross-cluster search connection request. This permission is deprecated. Use AcceptInboundConnection instead","accessLevel":"Write","resourceTypes":[]},"AddDataSource":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to add the data source for the OpenSearch Service domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"AddDirectQueryDataSource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"datasource"}],"description":"Grants permission to add the data source for the provided OpenSearch arns","accessLevel":"Write","resourceTypes":[{"name":"datasource","required":true}]},"AddTags":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"application"},{"name":"datasource"},{"name":"domain"}],"description":"Grants permission to attach resource tags to an OpenSearch Service domain, data source, or application","accessLevel":"Tagging","resourceTypes":[{"name":"application","required":true},{"name":"datasource","required":true},{"name":"domain","required":true}]},"AssociatePackage":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to associate a package with an OpenSearch Service domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"AssociatePackages":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to associate multiple packages with an OpenSearch Service domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"AuthorizeVpcEndpointAccess":{"conditionKeys":[],"resources":[],"description":"Grants permission to provide access to an Amazon OpenSearch Service domain through the use of an interface VPC endpoint","accessLevel":"Write","resourceTypes":[]},"CancelDomainConfigChange":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to cancel a change on an OpenSearch Service domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"CancelElasticsearchServiceSoftwareUpdate":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to cancel a service software update of a domain. This permission is deprecated. Use CancelServiceSoftwareUpdate instead","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"CancelServiceSoftwareUpdate":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to cancel a service software update of a domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"CreateApplication":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an OpenSearch Application","accessLevel":"Write","resourceTypes":[]},"CreateDomain":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"domain"}],"description":"Grants permission to create an Amazon OpenSearch Service domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":false}]},"CreateElasticsearchDomain":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"domain"}],"description":"Grants permission to create an OpenSearch Service domain. This permission is deprecated. Use CreateDomain instead","accessLevel":"Write","resourceTypes":[{"name":"domain","required":false}]},"CreateElasticsearchServiceRole":{"conditionKeys":[],"resources":[],"description":"Grants permission to create the service-linked role required for OpenSearch Service domains that use VPC access. This permission is deprecated. OpenSearch Service creates the service-linked role for you","accessLevel":"Write","resourceTypes":[]},"CreateIndex":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to create index for the OpenSearch Service domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"CreateOutboundConnection":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to create a new cross-cluster search connection from a source domain to a destination domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"CreateOutboundCrossClusterSearchConnection":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to create a new cross-cluster search connection from a source domain to a destination domain. This permission is deprecated. Use CreateOutboundConnection instead","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"CreatePackage":{"conditionKeys":[],"resources":[],"description":"Grants permission to add a package for use with OpenSearch Service domains","accessLevel":"Write","resourceTypes":[]},"CreateServiceRole":{"conditionKeys":[],"resources":[],"description":"Grants permission to create the service-linked role required for Amazon OpenSearch Service domains that use VPC access","accessLevel":"Write","resourceTypes":[]},"CreateVpcEndpoint":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an Amazon OpenSearch Service-managed VPC endpoint","accessLevel":"Write","resourceTypes":[]},"DeleteApplication":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to delete an OpenSearch Application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"DeleteDataSource":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to delete the data source for the OpenSearch Service domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DeleteDirectQueryDataSource":{"conditionKeys":[],"resources":[{"name":"datasource"}],"description":"Grants permission to delete the data source for the provided OpenSearch arns","accessLevel":"Write","resourceTypes":[{"name":"datasource","required":true}]},"DeleteDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to delete an Amazon OpenSearch Service domain and all of its data","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DeleteElasticsearchDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to delete an OpenSearch Service domain and all of its data. This permission is deprecated. Use DeleteDomain instead","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DeleteElasticsearchServiceRole":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the service-linked role required for OpenSearch Service domains that use VPC access. This permission is deprecated. Use the IAM API to delete service-linked roles","accessLevel":"Write","resourceTypes":[]},"DeleteInboundConnection":{"conditionKeys":[],"resources":[],"description":"Grants permission to the destination domain owner to delete an existing inbound cross-cluster search connection","accessLevel":"Write","resourceTypes":[]},"DeleteInboundCrossClusterSearchConnection":{"conditionKeys":[],"resources":[],"description":"Grants permission to the destination domain owner to delete an existing inbound cross-cluster search connection. This permission is deprecated. Use DeleteInboundConnection instead","accessLevel":"Write","resourceTypes":[]},"DeleteIndex":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to delete Index for the OpenSearch Service domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DeleteOutboundConnection":{"conditionKeys":[],"resources":[],"description":"Grants permission to the source domain owner to delete an existing outbound cross-cluster search connection","accessLevel":"Write","resourceTypes":[]},"DeleteOutboundCrossClusterSearchConnection":{"conditionKeys":[],"resources":[],"description":"Grants permission to the source domain owner to delete an existing outbound cross-cluster search connection. This permission is deprecated. Use DeleteOutboundConnection instead","accessLevel":"Write","resourceTypes":[]},"DeletePackage":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a package from OpenSearch Service. The package cannot be associated with any domains","accessLevel":"Write","resourceTypes":[]},"DeleteVpcEndpoint":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete an Amazon OpenSearch Service-managed interface VPC endpoint","accessLevel":"Write","resourceTypes":[]},"DescribeDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to view a description of the domain configuration for the specified OpenSearch Service domain, including the domain ID, service endpoint, and ARN","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"DescribeDomainAutoTunes":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to view the Auto-Tune configuration of the domain for the specified OpenSearch Service domain, including the Auto-Tune state and maintenance schedules","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"DescribeDomainChangeProgress":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to view detail stage progress of an OpenSearch Service domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"DescribeDomainConfig":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to view a description of the configuration options and status of an OpenSearch Service domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"DescribeDomainHealth":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to view information about domain and node health, the standby Availability Zone, number of nodes per Availability Zone, and shard count per node","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"DescribeDomainNodes":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to view information about nodes configured for the domain and their configurations- the node id, type of node, status of node, Availability Zone, instance type and storage","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"DescribeDomains":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to view a description of the domain configuration for up to five specified OpenSearch Service domains","accessLevel":"List","resourceTypes":[{"name":"domain","required":true}]},"DescribeDryRunProgress":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to describe the status of a pre-update validation check on an OpenSearch Service domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"DescribeElasticsearchDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to view a description of the domain configuration for the specified OpenSearch Service domain, including the domain ID, service endpoint, and ARN. This permission is deprecated. Use DescribeDomain instead","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"DescribeElasticsearchDomainConfig":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to view a description of the configuration and status of an OpenSearch Service domain. This permission is deprecated. Use DescribeDomainConfig instead","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"DescribeElasticsearchDomains":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to view a description of the domain configuration for up to five specified Amazon OpenSearch domains. This permission is deprecated. Use DescribeDomains instead","accessLevel":"List","resourceTypes":[{"name":"domain","required":true}]},"DescribeElasticsearchInstanceTypeLimits":{"conditionKeys":[],"resources":[],"description":"Grants permission to view the instance count, storage, and master node limits for a given OpenSearch version and instance type. This permission is deprecated. Use DescribeInstanceTypeLimits instead","accessLevel":"List","resourceTypes":[]},"DescribeInboundConnections":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the inbound cross-cluster search connections for a destination domain","accessLevel":"List","resourceTypes":[]},"DescribeInboundCrossClusterSearchConnections":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the inbound cross-cluster search connections for a destination domain. This permission is deprecated. Use DescribeInboundConnections instead","accessLevel":"List","resourceTypes":[]},"DescribeInstanceTypeLimits":{"conditionKeys":[],"resources":[],"description":"Grants permission to view the instance count, storage, and master node limits for a given engine version and instance type","accessLevel":"List","resourceTypes":[]},"DescribeOutboundConnections":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the outbound cross-cluster search connections for a source domain","accessLevel":"List","resourceTypes":[]},"DescribeOutboundCrossClusterSearchConnections":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the outbound cross-cluster search connections for a source domain. This permission is deprecated. Use DescribeOutboundConnections instead","accessLevel":"List","resourceTypes":[]},"DescribePackages":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe all packages available to OpenSearch Service domains","accessLevel":"Read","resourceTypes":[]},"DescribeReservedElasticsearchInstanceOfferings":{"conditionKeys":[],"resources":[],"description":"Grants permission to fetch Reserved Instance offerings for Amazon OpenSearch Service. This permission is deprecated. Use DescribeReservedInstanceOfferings instead","accessLevel":"List","resourceTypes":[]},"DescribeReservedElasticsearchInstances":{"conditionKeys":[],"resources":[],"description":"Grants permission to fetch OpenSearch Service Reserved Instances that have already been purchased. This permission is deprecated. Use DescribeReservedInstances instead","accessLevel":"List","resourceTypes":[]},"DescribeReservedInstanceOfferings":{"conditionKeys":[],"resources":[],"description":"Grants permission to fetch Reserved Instance offerings for OpenSearch Service","accessLevel":"List","resourceTypes":[]},"DescribeReservedInstances":{"conditionKeys":[],"resources":[],"description":"Grants permission to fetch OpenSearch Service Reserved Instances that have already been purchased","accessLevel":"List","resourceTypes":[]},"DescribeVpcEndpoints":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe one or more Amazon OpenSearch Service-managed VPC endpoints","accessLevel":"List","resourceTypes":[]},"DissociatePackage":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to disassociate a package from the specified OpenSearch Service domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DissociatePackages":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to disassociate multiple packages from the specified OpenSearch Service domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"ESCrossClusterGet":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to send cross-cluster requests to a destination domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":false}]},"ESHttpDelete":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to send HTTP DELETE requests to the OpenSearch APIs","accessLevel":"Write","resourceTypes":[{"name":"domain","required":false}]},"ESHttpGet":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to send HTTP GET requests to the OpenSearch APIs","accessLevel":"Read","resourceTypes":[{"name":"domain","required":false}]},"ESHttpHead":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to send HTTP HEAD requests to the OpenSearch APIs","accessLevel":"Read","resourceTypes":[{"name":"domain","required":false}]},"ESHttpPatch":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to send HTTP PATCH requests to the OpenSearch APIs","accessLevel":"Write","resourceTypes":[{"name":"domain","required":false}]},"ESHttpPost":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to send HTTP POST requests to the OpenSearch APIs","accessLevel":"Write","resourceTypes":[{"name":"domain","required":false}]},"ESHttpPut":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to send HTTP PUT requests to the OpenSearch APIs","accessLevel":"Write","resourceTypes":[{"name":"domain","required":false}]},"GetApplication":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to get information about an OpenSearch Application","accessLevel":"Read","resourceTypes":[{"name":"application","required":true}]},"GetCompatibleElasticsearchVersions":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to fetch a list of compatible OpenSearch and Elasticsearch versions to which an OpenSearch Service domain can be upgraded. This permission is deprecated. Use GetCompatibleVersions instead","accessLevel":"List","resourceTypes":[{"name":"domain","required":true}]},"GetCompatibleVersions":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to fetch list of compatible engine versions to which an OpenSearch Service domain can be upgraded","accessLevel":"List","resourceTypes":[{"name":"domain","required":true}]},"GetDataSource":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to get the data source for the OpenSearch Service domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"GetDefaultApplicationSetting":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to get the default application setting for OpenSearch Service","accessLevel":"Read","resourceTypes":[{"name":"application","required":true}]},"GetDirectQueryDataSource":{"conditionKeys":[],"resources":[{"name":"datasource"}],"description":"Grants permission to get the data source for the provided OpenSearch arns","accessLevel":"Read","resourceTypes":[{"name":"datasource","required":true}]},"GetDomainMaintenanceStatus":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to retrieve the status of maintenance action for the node","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"GetIndex":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to get index for the OpenSearch Service domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"GetPackageVersionHistory":{"conditionKeys":[],"resources":[],"description":"Grants permission to fetch the version history for a package","accessLevel":"Read","resourceTypes":[]},"GetUpgradeHistory":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to fetch the upgrade history of a given OpenSearch Service domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"GetUpgradeStatus":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to fetch the upgrade status of a given OpenSearch Service domain","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"ListApplications":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to list OpenSearch Applications","accessLevel":"List","resourceTypes":[{"name":"application","required":true}]},"ListDataSources":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to retrieve a list of data source for the OpenSearch Service domain","accessLevel":"List","resourceTypes":[{"name":"domain","required":true}]},"ListDirectQueryDataSources":{"conditionKeys":[],"resources":[{"name":"datasource"}],"description":"Grants permission to retrieve a list of data source for the provided OpenSearch arns","accessLevel":"List","resourceTypes":[{"name":"datasource","required":true}]},"ListDomainMaintenances":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to retrieve a list of maintenance actions for the OpenSearch Service domain","accessLevel":"List","resourceTypes":[{"name":"domain","required":true}]},"ListDomainNames":{"conditionKeys":[],"resources":[],"description":"Grants permission to display the names of all OpenSearch Service domains that the current user owns","accessLevel":"List","resourceTypes":[]},"ListDomainsForPackage":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all OpenSearch Service domains that a package is associated with","accessLevel":"List","resourceTypes":[]},"ListElasticsearchInstanceTypeDetails":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all instance types and available features for a given OpenSearch version. This permission is deprecated. Use ListInstanceTypeDetails instead","accessLevel":"List","resourceTypes":[]},"ListElasticsearchInstanceTypes":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all EC2 instance types that are supported for a given OpenSearch version","accessLevel":"List","resourceTypes":[]},"ListElasticsearchVersions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all supported OpenSearch versions on Amazon OpenSearch Service. This permission is deprecated. Use ListVersions instead","accessLevel":"List","resourceTypes":[]},"ListInstanceTypeDetails":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all instance types and available features for a given OpenSearch or Elasticsearch version","accessLevel":"List","resourceTypes":[]},"ListPackagesForDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to list all packages associated with the OpenSearch Service domain","accessLevel":"List","resourceTypes":[{"name":"domain","required":true}]},"ListScheduledActions":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to retrieve a list of configuration changes that are scheduled for a OpenSearch Service domain","accessLevel":"List","resourceTypes":[{"name":"domain","required":true}]},"ListTags":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"datasource"},{"name":"domain"}],"description":"Grants permission to display all resource tags for an OpenSearch Service domain, data source, or application","accessLevel":"Read","resourceTypes":[{"name":"application","required":true},{"name":"datasource","required":true},{"name":"domain","required":true}]},"ListVersions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all supported OpenSearch and Elasticsearch versions in Amazon OpenSearch Service","accessLevel":"List","resourceTypes":[]},"ListVpcEndpointAccess":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about each AWS principal that is allowed to access a given Amazon OpenSearch Service domain through the use of an interface VPC endpoint","accessLevel":"List","resourceTypes":[]},"ListVpcEndpoints":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve all Amazon OpenSearch Service-managed VPC endpoints in the current AWS account and Region","accessLevel":"List","resourceTypes":[]},"ListVpcEndpointsForDomain":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve all Amazon OpenSearch Service-managed VPC endpoints associated with a particular domain","accessLevel":"List","resourceTypes":[]},"PurchaseReservedElasticsearchInstanceOffering":{"conditionKeys":[],"resources":[],"description":"Grants permission to purchase OpenSearch Service Reserved Instances. This permission is deprecated. Use PurchaseReservedInstanceOffering instead","accessLevel":"Write","resourceTypes":[]},"PurchaseReservedInstanceOffering":{"conditionKeys":[],"resources":[],"description":"Grants permission to purchase OpenSearch reserved instances","accessLevel":"Write","resourceTypes":[]},"PutDefaultApplicationSetting":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to set or remove the default application setting for OpenSearch Service","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"RejectInboundConnection":{"conditionKeys":[],"resources":[],"description":"Grants permission to the destination domain owner to reject an inbound cross-cluster search connection request","accessLevel":"Write","resourceTypes":[]},"RejectInboundCrossClusterSearchConnection":{"conditionKeys":[],"resources":[],"description":"Grants permission to the destination domain owner to reject an inbound cross-cluster search connection request. This permission is deprecated. Use RejectInboundConnection instead","accessLevel":"Write","resourceTypes":[]},"RemoveTags":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"application"},{"name":"datasource"},{"name":"domain"}],"description":"Grants permission to remove resource tags from an OpenSearch Service domain, data source, or application","accessLevel":"Tagging","resourceTypes":[{"name":"application","required":true},{"name":"datasource","required":true},{"name":"domain","required":true}]},"RevokeVpcEndpointAccess":{"conditionKeys":[],"resources":[],"description":"Grants permission to revoke access to an Amazon OpenSearch Service domain that was provided through an interface VPC endpoint","accessLevel":"Write","resourceTypes":[]},"RollbackElasticsearchServiceSoftwareUpdate":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to rollback a service software update of an elasticsearch domain to its previous version","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"RollbackServiceSoftwareUpdate":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to rollback a service software update of an opensearch domain to its previous version","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"StartDomainMaintenance":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to initiate the maintenance on the node","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"StartElasticsearchServiceSoftwareUpdate":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to start a service software update of a domain. This permission is deprecated. Use StartServiceSoftwareUpdate instead","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"StartServiceSoftwareUpdate":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to start a service software update of a domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"UpdateApplication":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to update an OpenSearch Application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"UpdateDataSource":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to update the data source for the OpenSearch Service domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"UpdateDirectQueryDataSource":{"conditionKeys":[],"resources":[{"name":"datasource"}],"description":"Grants permission to update the data source for the provided OpenSearch arns","accessLevel":"Write","resourceTypes":[{"name":"datasource","required":true}]},"UpdateDomainConfig":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to modify the configuration of an OpenSearch Service domain, such as the instance type or number of instances","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"UpdateElasticsearchDomainConfig":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to modify the configuration of an OpenSearch Service domain, such as the instance type or number of instances. This permission is deprecated. Use UpdateDomainConfig instead","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"UpdateIndex":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to update index for the OpenSearch Service domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"UpdatePackage":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a package for use with OpenSearch Service domains","accessLevel":"Write","resourceTypes":[]},"UpdatePackageScope":{"conditionKeys":[],"resources":[],"description":"Grants permission to update scope a package","accessLevel":"Write","resourceTypes":[]},"UpdateScheduledAction":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to reschedule a planned OpenSearch Service domain configuration change for a later time","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"UpdateVpcEndpoint":{"conditionKeys":[],"resources":[],"description":"Grants permission to modify an Amazon OpenSearch Service-managed interface VPC endpoint","accessLevel":"Write","resourceTypes":[]},"UpgradeDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to initiate upgrade of an OpenSearch Service domain to a given version","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"UpgradeElasticsearchDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to initiate upgrade of an OpenSearch Service domain to a specified version. This permission is deprecated. Use UpgradeDomain instead","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]}},"resources":[{"name":"application","arnFormats":["arn:${Partition}:opensearch:${Region}:${Account}:application/${AppId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"datasource","arnFormats":["arn:${Partition}:opensearch:${Region}:${Account}:datasource/${DataSourceName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"domain","arnFormats":["arn:${Partition}:es:${Region}:${Account}:domain/${DomainName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"es_role","arnFormats":["arn:${Partition}:iam::${Account}:role/aws-service-role/es.amazonaws.com/AWSServiceRoleForAmazonOpenSearchService"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"opensearchservice_role","arnFormats":["arn:${Partition}:iam::${Account}:role/aws-service-role/opensearchservice.amazonaws.com/AWSServiceRoleForAmazonOpenSearchService"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access based on the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access based on the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access based on the tag keys that are passed in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"events","actions":{"ActivateEventSource":{"conditionKeys":[],"resources":[{"name":"event-source"}],"description":"Grants permission to activate partner event sources","accessLevel":"Write","resourceTypes":[{"name":"event-source","required":true}]},"AllowVendedLogDeliveryForResource":{"conditionKeys":[],"resources":[{"name":"event-bus"}],"description":"Grants permission to configure vended log delivery for EventBridge","accessLevel":"Write","resourceTypes":[{"name":"event-bus","required":true}],"permissionOnly":true},"CancelReplay":{"conditionKeys":[],"resources":[{"name":"replay"}],"description":"Grants permission to cancel a replay","accessLevel":"Write","resourceTypes":[{"name":"replay","required":true}]},"CreateApiDestination":{"conditionKeys":[],"resources":[{"name":"api-destination"},{"name":"connection"}],"description":"Grants permission to create a new api destination","accessLevel":"Write","resourceTypes":[{"name":"api-destination","required":true},{"name":"connection","required":true}]},"CreateArchive":{"conditionKeys":[],"resources":[{"name":"alias"},{"name":"archive"},{"name":"event-bus"},{"name":"key"}],"description":"Grants permission to create a new archive","accessLevel":"Write","resourceTypes":[{"name":"archive","required":true},{"name":"event-bus","required":true},{"name":"alias","required":false},{"name":"key","required":false}]},"CreateConnection":{"conditionKeys":[],"resources":[{"name":"connection"}],"description":"Grants permission to create a new connection","accessLevel":"Write","resourceTypes":[{"name":"connection","required":true}]},"CreateEndpoint":{"conditionKeys":["events:EventBusArn"],"resources":[{"name":"endpoint"}],"description":"Grants permission to create an endpoint","accessLevel":"Write","resourceTypes":[{"name":"endpoint","required":true}]},"CreateEventBus":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"event-bus"}],"description":"Grants permission to create event buses","accessLevel":"Write","resourceTypes":[{"name":"event-bus","required":true}]},"CreatePartnerEventSource":{"conditionKeys":[],"resources":[{"name":"event-source"}],"description":"Grants permission to create partner event sources","accessLevel":"Write","resourceTypes":[{"name":"event-source","required":true}]},"DeactivateEventSource":{"conditionKeys":[],"resources":[{"name":"event-source"}],"description":"Grants permission to deactivate event sources","accessLevel":"Write","resourceTypes":[{"name":"event-source","required":true}]},"DeauthorizeConnection":{"conditionKeys":[],"resources":[{"name":"connection"}],"description":"Grants permission to deauthorize a connection, deleting its stored authorization secrets","accessLevel":"Write","resourceTypes":[{"name":"connection","required":true}]},"DeleteApiDestination":{"conditionKeys":[],"resources":[{"name":"api-destination"}],"description":"Grants permission to delete an api destination","accessLevel":"Write","resourceTypes":[{"name":"api-destination","required":true}]},"DeleteArchive":{"conditionKeys":[],"resources":[{"name":"archive"}],"description":"Grants permission to delete an archive","accessLevel":"Write","resourceTypes":[{"name":"archive","required":true}]},"DeleteConnection":{"conditionKeys":[],"resources":[{"name":"connection"}],"description":"Grants permission to delete a connection","accessLevel":"Write","resourceTypes":[{"name":"connection","required":true}]},"DeleteEndpoint":{"conditionKeys":[],"resources":[{"name":"endpoint"}],"description":"Grants permission to delete an endpoint","accessLevel":"Write","resourceTypes":[{"name":"endpoint","required":true}]},"DeleteEventBus":{"conditionKeys":[],"resources":[{"name":"event-bus"}],"description":"Grants permission to delete event buses","accessLevel":"Write","resourceTypes":[{"name":"event-bus","required":true}]},"DeletePartnerEventSource":{"conditionKeys":[],"resources":[{"name":"event-source"}],"description":"Grants permission to delete partner event sources","accessLevel":"Write","resourceTypes":[{"name":"event-source","required":true}]},"DeleteRule":{"conditionKeys":["events:ManagedBy","events:creatorAccount"],"resources":[{"name":"rule-on-custom-event-bus"},{"name":"rule-on-default-event-bus"}],"description":"Grants permission to delete rules","accessLevel":"Write","resourceTypes":[{"name":"rule-on-custom-event-bus","required":false},{"name":"rule-on-default-event-bus","required":false}]},"DescribeApiDestination":{"conditionKeys":[],"resources":[{"name":"api-destination"},{"name":"connection"}],"description":"Grants permission to retrieve details about an api destination","accessLevel":"Read","resourceTypes":[{"name":"api-destination","required":true},{"name":"connection","required":true}]},"DescribeArchive":{"conditionKeys":[],"resources":[{"name":"archive"}],"description":"Grants permission to retrieve details about an archive","accessLevel":"Read","resourceTypes":[{"name":"archive","required":true}]},"DescribeConnection":{"conditionKeys":[],"resources":[{"name":"connection"}],"description":"Grants permission to retrieve details about a conection","accessLevel":"Read","resourceTypes":[{"name":"connection","required":true}]},"DescribeEndpoint":{"conditionKeys":[],"resources":[{"name":"endpoint"}],"description":"Grants permission to retrieve details about an endpoint","accessLevel":"Read","resourceTypes":[{"name":"endpoint","required":true}]},"DescribeEventBus":{"conditionKeys":[],"resources":[{"name":"event-bus"}],"description":"Grants permission to retrieve details about event buses","accessLevel":"Read","resourceTypes":[{"name":"event-bus","required":false}]},"DescribeEventSource":{"conditionKeys":[],"resources":[{"name":"event-source"}],"description":"Grants permission to retrieve details about event sources","accessLevel":"Read","resourceTypes":[{"name":"event-source","required":true}]},"DescribePartnerEventSource":{"conditionKeys":[],"resources":[{"name":"event-source"}],"description":"Grants permission to retrieve details about partner event sources","accessLevel":"Read","resourceTypes":[{"name":"event-source","required":true}]},"DescribeReplay":{"conditionKeys":[],"resources":[{"name":"replay"}],"description":"Grants permission to retrieve the details of a replay","accessLevel":"Read","resourceTypes":[{"name":"replay","required":true}]},"DescribeRule":{"conditionKeys":["events:creatorAccount"],"resources":[{"name":"rule-on-custom-event-bus"},{"name":"rule-on-default-event-bus"}],"description":"Grants permission to retrieve details about rules","accessLevel":"Read","resourceTypes":[{"name":"rule-on-custom-event-bus","required":false},{"name":"rule-on-default-event-bus","required":false}]},"DisableRule":{"conditionKeys":["events:ManagedBy","events:creatorAccount"],"resources":[{"name":"rule-on-custom-event-bus"},{"name":"rule-on-default-event-bus"}],"description":"Grants permission to disable rules","accessLevel":"Write","resourceTypes":[{"name":"rule-on-custom-event-bus","required":false},{"name":"rule-on-default-event-bus","required":false}]},"EnableRule":{"conditionKeys":["events:ManagedBy","events:creatorAccount"],"resources":[{"name":"rule-on-custom-event-bus"},{"name":"rule-on-default-event-bus"}],"description":"Grants permission to enable rules","accessLevel":"Write","resourceTypes":[{"name":"rule-on-custom-event-bus","required":false},{"name":"rule-on-default-event-bus","required":false}]},"InvokeApiDestination":{"conditionKeys":[],"resources":[{"name":"api-destination"}],"description":"Grants permission to invoke an api destination","accessLevel":"Write","resourceTypes":[{"name":"api-destination","required":true}],"permissionOnly":true},"ListApiDestinations":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of api destinations","accessLevel":"List","resourceTypes":[]},"ListArchives":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of archives","accessLevel":"List","resourceTypes":[]},"ListConnections":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of connections","accessLevel":"List","resourceTypes":[]},"ListEndpoints":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of endpoints","accessLevel":"List","resourceTypes":[]},"ListEventBuses":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of the event buses in your account","accessLevel":"List","resourceTypes":[]},"ListEventSources":{"conditionKeys":[],"resources":[],"description":"Grants permission to to retrieve a list of event sources shared with this account","accessLevel":"List","resourceTypes":[]},"ListPartnerEventSourceAccounts":{"conditionKeys":[],"resources":[{"name":"event-source"}],"description":"Grants permission to retrieve a list of AWS account IDs associated with an event source","accessLevel":"List","resourceTypes":[{"name":"event-source","required":true}]},"ListPartnerEventSources":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list partner event sources","accessLevel":"List","resourceTypes":[]},"ListReplays":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of replays","accessLevel":"List","resourceTypes":[]},"ListRuleNamesByTarget":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of the names of the rules associated with a target","accessLevel":"List","resourceTypes":[]},"ListRules":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of the Amazon EventBridge rules in the account","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["events:creatorAccount"],"resources":[{"name":"event-bus"},{"name":"rule-on-custom-event-bus"},{"name":"rule-on-default-event-bus"}],"description":"Grants permission to retrieve a list of tags associated with an Amazon EventBridge resource","accessLevel":"List","resourceTypes":[{"name":"event-bus","required":false},{"name":"rule-on-custom-event-bus","required":false},{"name":"rule-on-default-event-bus","required":false}]},"ListTargetsByRule":{"conditionKeys":["events:creatorAccount"],"resources":[{"name":"rule-on-custom-event-bus"},{"name":"rule-on-default-event-bus"}],"description":"Grants permission to retrieve a list of targets defined for a rule","accessLevel":"List","resourceTypes":[{"name":"rule-on-custom-event-bus","required":false},{"name":"rule-on-default-event-bus","required":false}]},"PutEvents":{"conditionKeys":["events:detail-type","events:eventBusInvocation","events:source"],"resources":[{"name":"event-bus"}],"description":"Grants permission to send custom events to Amazon EventBridge","accessLevel":"Write","resourceTypes":[{"name":"event-bus","required":true}]},"PutPartnerEvents":{"conditionKeys":[],"resources":[],"description":"Grants permission to sends custom events to Amazon EventBridge","accessLevel":"Write","resourceTypes":[]},"PutPermission":{"conditionKeys":[],"resources":[],"description":"Grants permission to use the PutPermission action to grants permission to another AWS account to put events to your default event bus","accessLevel":"Permissions management","resourceTypes":[]},"PutRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","events:ManagedBy","events:creatorAccount","events:detail-type","events:detail.eventTypeCode","events:detail.service","events:detail.userIdentity.principalId","events:source"],"resources":[{"name":"rule-on-custom-event-bus"},{"name":"rule-on-default-event-bus"}],"description":"Grants permission to create or updates rules","accessLevel":"Write","resourceTypes":[{"name":"rule-on-custom-event-bus","required":false},{"name":"rule-on-default-event-bus","required":false}]},"PutTargets":{"conditionKeys":["events:ManagedBy","events:TargetArn","events:creatorAccount"],"resources":[{"name":"rule-on-custom-event-bus"},{"name":"rule-on-default-event-bus"}],"description":"Grants permission to add targets to a rule","accessLevel":"Write","resourceTypes":[{"name":"rule-on-custom-event-bus","required":false},{"name":"rule-on-default-event-bus","required":false}]},"RemovePermission":{"conditionKeys":[],"resources":[],"description":"Grants permission to revoke the permission of another AWS account to put events to your default event bus","accessLevel":"Permissions management","resourceTypes":[]},"RemoveTargets":{"conditionKeys":["events:ManagedBy","events:creatorAccount"],"resources":[{"name":"rule-on-custom-event-bus"},{"name":"rule-on-default-event-bus"}],"description":"Grants permission to removes targets from a rule","accessLevel":"Write","resourceTypes":[{"name":"rule-on-custom-event-bus","required":false},{"name":"rule-on-default-event-bus","required":false}]},"RetrieveConnectionCredentials":{"conditionKeys":[],"resources":[{"name":"connection"}],"description":"Grants permission to retrieve credentials from a connection","accessLevel":"Write","resourceTypes":[{"name":"connection","required":true}],"permissionOnly":true},"StartReplay":{"conditionKeys":[],"resources":[{"name":"archive"},{"name":"event-bus"},{"name":"replay"}],"description":"Grants permission to start a replay of an archive","accessLevel":"Write","resourceTypes":[{"name":"archive","required":true},{"name":"event-bus","required":true},{"name":"replay","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","events:creatorAccount"],"resources":[{"name":"event-bus"},{"name":"rule-on-custom-event-bus"},{"name":"rule-on-default-event-bus"}],"description":"Grants permission to add a tag to an Amazon EventBridge resource","accessLevel":"Tagging","resourceTypes":[{"name":"event-bus","required":false},{"name":"rule-on-custom-event-bus","required":false},{"name":"rule-on-default-event-bus","required":false}]},"TestEventPattern":{"conditionKeys":[],"resources":[],"description":"Grants permission to test whether an event pattern matches the provided event","accessLevel":"Read","resourceTypes":[]},"UntagResource":{"conditionKeys":["aws:TagKeys","events:creatorAccount"],"resources":[{"name":"event-bus"},{"name":"rule-on-custom-event-bus"},{"name":"rule-on-default-event-bus"}],"description":"Grants permission to remove a tag from an Amazon EventBridge resource","accessLevel":"Tagging","resourceTypes":[{"name":"event-bus","required":false},{"name":"rule-on-custom-event-bus","required":false},{"name":"rule-on-default-event-bus","required":false}]},"UpdateApiDestination":{"conditionKeys":[],"resources":[{"name":"api-destination"}],"description":"Grants permission to update an api destination","accessLevel":"Write","resourceTypes":[{"name":"api-destination","required":true}]},"UpdateArchive":{"conditionKeys":[],"resources":[{"name":"alias"},{"name":"archive"},{"name":"key"}],"description":"Grants permission to update an archive","accessLevel":"Write","resourceTypes":[{"name":"archive","required":true},{"name":"alias","required":false},{"name":"key","required":false}]},"UpdateConnection":{"conditionKeys":[],"resources":[{"name":"connection"}],"description":"Grants permission to update a connection","accessLevel":"Write","resourceTypes":[{"name":"connection","required":true}]},"UpdateEndpoint":{"conditionKeys":["events:EventBusArn"],"resources":[{"name":"endpoint"}],"description":"Grants permission to update an endpoint","accessLevel":"Write","resourceTypes":[{"name":"endpoint","required":true}]},"UpdateEventBus":{"conditionKeys":[],"resources":[{"name":"event-bus"}],"description":"Grants permission to update event buses","accessLevel":"Write","resourceTypes":[{"name":"event-bus","required":true}]}},"resources":[{"name":"alias","arnFormats":["arn:${Partition}:kms:${Region}:${Account}:alias/${Alias}"],"conditionKeys":[]},{"name":"api-destination","arnFormats":["arn:${Partition}:events:${Region}:${Account}:api-destination/${ApiDestinationName}"],"conditionKeys":[]},{"name":"archive","arnFormats":["arn:${Partition}:events:${Region}:${Account}:archive/${ArchiveName}"],"conditionKeys":[]},{"name":"connection","arnFormats":["arn:${Partition}:events:${Region}:${Account}:connection/${ConnectionName}"],"conditionKeys":[]},{"name":"create-snapshot","arnFormats":["arn:${Partition}:events:${Region}:${Account}:target/create-snapshot"],"conditionKeys":[]},{"name":"endpoint","arnFormats":["arn:${Partition}:events:${Region}:${Account}:endpoint/${EndpointName}"],"conditionKeys":[]},{"name":"event-bus","arnFormats":["arn:${Partition}:events:${Region}:${Account}:event-bus/${EventBusName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"event-source","arnFormats":["arn:${Partition}:events:${Region}::event-source/${EventSourceName}"],"conditionKeys":[]},{"name":"key","arnFormats":["arn:${Partition}:kms:${Region}:${Account}:key/${KeyId}"],"conditionKeys":[]},{"name":"reboot-instance","arnFormats":["arn:${Partition}:events:${Region}:${Account}:target/reboot-instance"],"conditionKeys":[]},{"name":"replay","arnFormats":["arn:${Partition}:events:${Region}:${Account}:replay/${ReplayName}"],"conditionKeys":[]},{"name":"rule-on-custom-event-bus","arnFormats":["arn:${Partition}:events:${Region}:${Account}:rule/${EventBusName}/${RuleName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"rule-on-default-event-bus","arnFormats":["arn:${Partition}:events:${Region}:${Account}:rule/${RuleName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"stop-instance","arnFormats":["arn:${Partition}:events:${Region}:${Account}:target/stop-instance"],"conditionKeys":[]},{"name":"terminate-instance","arnFormats":["arn:${Partition}:events:${Region}:${Account}:target/terminate-instance"],"conditionKeys":[]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the allowed set of values for each of the tags to event bus and rule actions"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag-value associated with the resource to event bus and rule actions"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tags in the request to event bus and rule actions"},"events:EventBusArn":{"types":["ArrayOfARN"],"description":"Filters access by the ARN of the event buses that can be associated with an endpoint to CreateEndpoint and UpdateEndpoint actions"},"events:ManagedBy":{"types":["String"],"description":"Filters access by AWS services. If a rule is created by an AWS service on your behalf, the value is the principal name of the service that created the rule"},"events:TargetArn":{"types":["ArrayOfARN"],"description":"Filters access by the ARN of a target that can be put to a rule to PutTargets actions. TargetARN doesn't include DeadLetterConfigArn"},"events:creatorAccount":{"types":["String"],"description":"Filters access by the account the rule was created in to rule actions"},"events:detail-type":{"types":["ArrayOfString"],"description":"Filters access by the literal string of the detail-type of the event to PutEvents and PutRule actions"},"events:detail.eventTypeCode":{"types":["String"],"description":"Filters access by the literal string for the detail.eventTypeCode field of the event to PutRule actions"},"events:detail.service":{"types":["String"],"description":"Filters access by the literal string for the detail.service field of the event to PutRule actions"},"events:detail.userIdentity.principalId":{"types":["String"],"description":"Filters access by the literal string for the detail.useridentity.principalid field of the event to PutRule actions"},"events:eventBusInvocation":{"types":["String"],"description":"Filters access by whether the event was generated via API or cross-account bus invocation to PutEvents actions"},"events:source":{"types":["ArrayOfString"],"description":"Filters access by the AWS service or AWS partner event source that generated the event to PutEvents and PutRule actions. Matches the literal string of the source field of the event"}}}
@@ -0,0 +1 @@
1
+ {"name":"evidently","actions":{"BatchEvaluateFeature":{"conditionKeys":[],"resources":[{"name":"Feature"}],"description":"Grants permission to send a batched evaluate feature request","accessLevel":"Write","resourceTypes":[{"name":"Feature","required":true}]},"CreateExperiment":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an experiment","accessLevel":"Write","resourceTypes":[]},"CreateFeature":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a feature","accessLevel":"Write","resourceTypes":[]},"CreateLaunch":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a launch","accessLevel":"Write","resourceTypes":[]},"CreateProject":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a project","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:CreateServiceLinkedRole","iam:GetRole"]},"CreateSegment":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a segment","accessLevel":"Write","resourceTypes":[]},"DeleteExperiment":{"conditionKeys":[],"resources":[{"name":"Experiment"}],"description":"Grants permission to delete an experiment","accessLevel":"Write","resourceTypes":[{"name":"Experiment","required":true}]},"DeleteFeature":{"conditionKeys":[],"resources":[{"name":"Feature"}],"description":"Grants permission to delete a feature","accessLevel":"Write","resourceTypes":[{"name":"Feature","required":true}]},"DeleteLaunch":{"conditionKeys":[],"resources":[{"name":"Launch"}],"description":"Grants permission to delete a launch","accessLevel":"Write","resourceTypes":[{"name":"Launch","required":true}]},"DeleteProject":{"conditionKeys":[],"resources":[{"name":"Project"}],"description":"Grants permission to delete a project","accessLevel":"Write","resourceTypes":[{"name":"Project","required":true}]},"DeleteSegment":{"conditionKeys":[],"resources":[{"name":"Segment"}],"description":"Grants permission to delete a segment","accessLevel":"Write","resourceTypes":[{"name":"Segment","required":true}]},"EvaluateFeature":{"conditionKeys":[],"resources":[{"name":"Feature"}],"description":"Grants permission to send an evaluate feature request","accessLevel":"Write","resourceTypes":[{"name":"Feature","required":true}]},"GetExperiment":{"conditionKeys":[],"resources":[{"name":"Experiment"}],"description":"Grants permission to get experiment details","accessLevel":"Read","resourceTypes":[{"name":"Experiment","required":true}]},"GetExperimentResults":{"conditionKeys":[],"resources":[{"name":"Experiment"}],"description":"Grants permission to get experiment result","accessLevel":"Read","resourceTypes":[{"name":"Experiment","required":true}]},"GetFeature":{"conditionKeys":[],"resources":[{"name":"Feature"}],"description":"Grants permission to get feature details","accessLevel":"Read","resourceTypes":[{"name":"Feature","required":true}]},"GetLaunch":{"conditionKeys":[],"resources":[{"name":"Launch"}],"description":"Grants permission to get launch details","accessLevel":"Read","resourceTypes":[{"name":"Launch","required":true}]},"GetProject":{"conditionKeys":[],"resources":[{"name":"Project"}],"description":"Grants permission to get project details","accessLevel":"Read","resourceTypes":[{"name":"Project","required":true}]},"GetSegment":{"conditionKeys":[],"resources":[{"name":"Segment"}],"description":"Grants permission to get segment details","accessLevel":"Read","resourceTypes":[{"name":"Segment","required":true}]},"ListExperiments":{"conditionKeys":[],"resources":[],"description":"Grants permission to list experiments","accessLevel":"Read","resourceTypes":[]},"ListFeatures":{"conditionKeys":[],"resources":[],"description":"Grants permission to list features","accessLevel":"Read","resourceTypes":[]},"ListLaunches":{"conditionKeys":[],"resources":[],"description":"Grants permission to list launches","accessLevel":"Read","resourceTypes":[]},"ListProjects":{"conditionKeys":[],"resources":[],"description":"Grants permission to list projects","accessLevel":"Read","resourceTypes":[]},"ListSegmentReferences":{"conditionKeys":[],"resources":[],"description":"Grants permission to list resources referencing a segment","accessLevel":"Read","resourceTypes":[]},"ListSegments":{"conditionKeys":[],"resources":[],"description":"Grants permission to list segments","accessLevel":"Read","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to list tags for resources","accessLevel":"Read","resourceTypes":[]},"PutProjectEvents":{"conditionKeys":[],"resources":[{"name":"Project"}],"description":"Grants permission to send performance events","accessLevel":"Write","resourceTypes":[{"name":"Project","required":true}]},"StartExperiment":{"conditionKeys":[],"resources":[{"name":"Experiment"}],"description":"Grants permission to start an experiment","accessLevel":"Write","resourceTypes":[{"name":"Experiment","required":true}]},"StartLaunch":{"conditionKeys":[],"resources":[{"name":"Launch"}],"description":"Grants permission to start a launch","accessLevel":"Write","resourceTypes":[{"name":"Launch","required":true}]},"StopExperiment":{"conditionKeys":[],"resources":[{"name":"Experiment"}],"description":"Grants permission to stop an experiment","accessLevel":"Write","resourceTypes":[{"name":"Experiment","required":true}]},"StopLaunch":{"conditionKeys":[],"resources":[{"name":"Launch"}],"description":"Grants permission to stop a launch","accessLevel":"Write","resourceTypes":[{"name":"Launch","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Experiment"},{"name":"Feature"},{"name":"Launch"},{"name":"Project"},{"name":"Segment"}],"description":"Grants permission to tag resources","accessLevel":"Tagging","resourceTypes":[{"name":"Experiment","required":false},{"name":"Feature","required":false},{"name":"Launch","required":false},{"name":"Project","required":false},{"name":"Segment","required":false}]},"TestSegmentPattern":{"conditionKeys":[],"resources":[],"description":"Grants permission to test a segment pattern","accessLevel":"Read","resourceTypes":[]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"Experiment"},{"name":"Feature"},{"name":"Launch"},{"name":"Project"},{"name":"Segment"}],"description":"Grants permission to untag resources","accessLevel":"Tagging","resourceTypes":[{"name":"Experiment","required":false},{"name":"Feature","required":false},{"name":"Launch","required":false},{"name":"Project","required":false},{"name":"Segment","required":false}]},"UpdateExperiment":{"conditionKeys":[],"resources":[{"name":"Experiment"}],"description":"Grants permission to update experiment","accessLevel":"Write","resourceTypes":[{"name":"Experiment","required":true}]},"UpdateFeature":{"conditionKeys":[],"resources":[{"name":"Feature"}],"description":"Grants permission to update feature","accessLevel":"Write","resourceTypes":[{"name":"Feature","required":true}]},"UpdateLaunch":{"conditionKeys":[],"resources":[{"name":"Launch"}],"description":"Grants permission to update a launch","accessLevel":"Write","resourceTypes":[{"name":"Launch","required":true}]},"UpdateProject":{"conditionKeys":[],"resources":[{"name":"Project"}],"description":"Grants permission to update project","accessLevel":"Write","resourceTypes":[{"name":"Project","required":true}],"dependentActions":["iam:CreateServiceLinkedRole","iam:GetRole"]},"UpdateProjectDataDelivery":{"conditionKeys":[],"resources":[{"name":"Project"}],"description":"Grants permission to update project data delivery","accessLevel":"Write","resourceTypes":[{"name":"Project","required":true}]}},"resources":[{"name":"Experiment","arnFormats":["arn:${Partition}:evidently:${Region}:${Account}:project/${ProjectName}/experiment/${ExperimentName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Feature","arnFormats":["arn:${Partition}:evidently:${Region}:${Account}:project/${ProjectName}/feature/${FeatureName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Launch","arnFormats":["arn:${Partition}:evidently:${Region}:${Account}:project/${ProjectName}/launch/${LaunchName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Project","arnFormats":["arn:${Partition}:evidently:${Region}:${Account}:project/${ProjectName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Segment","arnFormats":["arn:${Partition}:evidently:${Region}:${Account}:segment/${SegmentName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed the request on behalf of the IAM principal"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource that make the request on behalf of the IAM principal"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request on behalf of the IAM principal"}}}