aws-iam-ls 0.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.direnv/bin/nix-direnv-reload +19 -0
- package/.direnv/flake-profile-a5d5b61aa8a61b7d9d765e1daf971a9a578f1cfa.rc +2156 -0
- package/.github/workflows/publish.yml +37 -0
- package/.github/workflows/test.yml +16 -0
- package/.vscodeignore +17 -0
- package/LICENSE +21 -0
- package/package.json +53 -0
- package/readme.md +25 -0
- package/src/data/condition-keys/global.json +362 -0
- package/src/data/servicereference/actions.json +1 -0
- package/src/data/servicereference/service-principals.json +1 -0
- package/src/data/servicereference/services/a2c.json +1 -0
- package/src/data/servicereference/services/a4b.json +1 -0
- package/src/data/servicereference/services/access-analyzer.json +1 -0
- package/src/data/servicereference/services/account.json +1 -0
- package/src/data/servicereference/services/acm-pca.json +1 -0
- package/src/data/servicereference/services/acm.json +1 -0
- package/src/data/servicereference/services/aco-automation.json +1 -0
- package/src/data/servicereference/services/action-recommendations.json +1 -0
- package/src/data/servicereference/services/activate.json +1 -0
- package/src/data/servicereference/services/aidevops.json +1 -0
- package/src/data/servicereference/services/aiops.json +1 -0
- package/src/data/servicereference/services/airflow-serverless.json +1 -0
- package/src/data/servicereference/services/airflow.json +1 -0
- package/src/data/servicereference/services/amplify.json +1 -0
- package/src/data/servicereference/services/amplifybackend.json +1 -0
- package/src/data/servicereference/services/amplifyuibuilder.json +1 -0
- package/src/data/servicereference/services/aoss.json +1 -0
- package/src/data/servicereference/services/apigateway.json +1 -0
- package/src/data/servicereference/services/app-integrations.json +1 -0
- package/src/data/servicereference/services/appconfig.json +1 -0
- package/src/data/servicereference/services/appfabric.json +1 -0
- package/src/data/servicereference/services/appflow.json +1 -0
- package/src/data/servicereference/services/application-autoscaling.json +1 -0
- package/src/data/servicereference/services/application-signals.json +1 -0
- package/src/data/servicereference/services/application-transformation.json +1 -0
- package/src/data/servicereference/services/applicationinsights.json +1 -0
- package/src/data/servicereference/services/appmesh-preview.json +1 -0
- package/src/data/servicereference/services/appmesh.json +1 -0
- package/src/data/servicereference/services/apprunner.json +1 -0
- package/src/data/servicereference/services/appstream.json +1 -0
- package/src/data/servicereference/services/appstudio.json +1 -0
- package/src/data/servicereference/services/appsync.json +1 -0
- package/src/data/servicereference/services/apptest.json +1 -0
- package/src/data/servicereference/services/aps.json +1 -0
- package/src/data/servicereference/services/arc-region-switch.json +1 -0
- package/src/data/servicereference/services/arc-zonal-shift.json +1 -0
- package/src/data/servicereference/services/arsenal.json +1 -0
- package/src/data/servicereference/services/artifact.json +1 -0
- package/src/data/servicereference/services/athena.json +1 -0
- package/src/data/servicereference/services/auditmanager.json +1 -0
- package/src/data/servicereference/services/autoscaling-plans.json +1 -0
- package/src/data/servicereference/services/autoscaling.json +1 -0
- package/src/data/servicereference/services/aws-marketplace-management.json +1 -0
- package/src/data/servicereference/services/aws-marketplace.json +1 -0
- package/src/data/servicereference/services/aws-mcp.json +1 -0
- package/src/data/servicereference/services/aws-portal.json +1 -0
- package/src/data/servicereference/services/awsconnector.json +1 -0
- package/src/data/servicereference/services/b2bi.json +1 -0
- package/src/data/servicereference/services/backup-gateway.json +1 -0
- package/src/data/servicereference/services/backup-search.json +1 -0
- package/src/data/servicereference/services/backup-storage.json +1 -0
- package/src/data/servicereference/services/backup.json +1 -0
- package/src/data/servicereference/services/batch.json +1 -0
- package/src/data/servicereference/services/bcm-dashboards.json +1 -0
- package/src/data/servicereference/services/bcm-data-exports.json +1 -0
- package/src/data/servicereference/services/bcm-pricing-calculator.json +1 -0
- package/src/data/servicereference/services/bcm-recommended-actions.json +1 -0
- package/src/data/servicereference/services/bedrock-agentcore.json +1 -0
- package/src/data/servicereference/services/bedrock-mantle.json +1 -0
- package/src/data/servicereference/services/bedrock.json +1 -0
- package/src/data/servicereference/services/billing.json +1 -0
- package/src/data/servicereference/services/billingconductor.json +1 -0
- package/src/data/servicereference/services/braket.json +1 -0
- package/src/data/servicereference/services/budgets.json +1 -0
- package/src/data/servicereference/services/bugbust.json +1 -0
- package/src/data/servicereference/services/cases.json +1 -0
- package/src/data/servicereference/services/cassandra.json +1 -0
- package/src/data/servicereference/services/ce.json +1 -0
- package/src/data/servicereference/services/chatbot.json +1 -0
- package/src/data/servicereference/services/chime.json +1 -0
- package/src/data/servicereference/services/cleanrooms-ml.json +1 -0
- package/src/data/servicereference/services/cleanrooms.json +1 -0
- package/src/data/servicereference/services/cloud9.json +1 -0
- package/src/data/servicereference/services/clouddirectory.json +1 -0
- package/src/data/servicereference/services/cloudformation.json +1 -0
- package/src/data/servicereference/services/cloudfront-keyvaluestore.json +1 -0
- package/src/data/servicereference/services/cloudfront.json +1 -0
- package/src/data/servicereference/services/cloudhsm.json +1 -0
- package/src/data/servicereference/services/cloudsearch.json +1 -0
- package/src/data/servicereference/services/cloudshell.json +1 -0
- package/src/data/servicereference/services/cloudtrail-data.json +1 -0
- package/src/data/servicereference/services/cloudtrail.json +1 -0
- package/src/data/servicereference/services/cloudwatch.json +1 -0
- package/src/data/servicereference/services/codeartifact.json +1 -0
- package/src/data/servicereference/services/codebuild.json +1 -0
- package/src/data/servicereference/services/codecatalyst.json +1 -0
- package/src/data/servicereference/services/codecommit.json +1 -0
- package/src/data/servicereference/services/codeconnections.json +1 -0
- package/src/data/servicereference/services/codedeploy-commands-secure.json +1 -0
- package/src/data/servicereference/services/codedeploy.json +1 -0
- package/src/data/servicereference/services/codeguru-profiler.json +1 -0
- package/src/data/servicereference/services/codeguru-reviewer.json +1 -0
- package/src/data/servicereference/services/codeguru-security.json +1 -0
- package/src/data/servicereference/services/codeguru.json +1 -0
- package/src/data/servicereference/services/codepipeline.json +1 -0
- package/src/data/servicereference/services/codestar-connections.json +1 -0
- package/src/data/servicereference/services/codestar-notifications.json +1 -0
- package/src/data/servicereference/services/codestar.json +1 -0
- package/src/data/servicereference/services/codewhisperer.json +1 -0
- package/src/data/servicereference/services/cognito-identity.json +1 -0
- package/src/data/servicereference/services/cognito-idp.json +1 -0
- package/src/data/servicereference/services/cognito-sync.json +1 -0
- package/src/data/servicereference/services/comprehend.json +1 -0
- package/src/data/servicereference/services/comprehendmedical.json +1 -0
- package/src/data/servicereference/services/compute-optimizer.json +1 -0
- package/src/data/servicereference/services/config.json +1 -0
- package/src/data/servicereference/services/connect-campaigns.json +1 -0
- package/src/data/servicereference/services/connect.json +1 -0
- package/src/data/servicereference/services/consoleapp.json +1 -0
- package/src/data/servicereference/services/consolidatedbilling.json +1 -0
- package/src/data/servicereference/services/controlcatalog.json +1 -0
- package/src/data/servicereference/services/controltower.json +1 -0
- package/src/data/servicereference/services/cost-optimization-hub.json +1 -0
- package/src/data/servicereference/services/cur.json +1 -0
- package/src/data/servicereference/services/customer-verification.json +1 -0
- package/src/data/servicereference/services/databrew.json +1 -0
- package/src/data/servicereference/services/dataexchange.json +1 -0
- package/src/data/servicereference/services/datapipeline.json +1 -0
- package/src/data/servicereference/services/datasync.json +1 -0
- package/src/data/servicereference/services/datazone.json +1 -0
- package/src/data/servicereference/services/dax.json +1 -0
- package/src/data/servicereference/services/dbqms.json +1 -0
- package/src/data/servicereference/services/deadline.json +1 -0
- package/src/data/servicereference/services/detective.json +1 -0
- package/src/data/servicereference/services/devicefarm.json +1 -0
- package/src/data/servicereference/services/devops-guru.json +1 -0
- package/src/data/servicereference/services/directconnect.json +1 -0
- package/src/data/servicereference/services/discovery.json +1 -0
- package/src/data/servicereference/services/dlm.json +1 -0
- package/src/data/servicereference/services/dms.json +1 -0
- package/src/data/servicereference/services/docdb-elastic.json +1 -0
- package/src/data/servicereference/services/drs.json +1 -0
- package/src/data/servicereference/services/ds-data.json +1 -0
- package/src/data/servicereference/services/ds.json +1 -0
- package/src/data/servicereference/services/dsql.json +1 -0
- package/src/data/servicereference/services/dynamodb.json +1 -0
- package/src/data/servicereference/services/ebs.json +1 -0
- package/src/data/servicereference/services/ec2-instance-connect.json +1 -0
- package/src/data/servicereference/services/ec2.json +1 -0
- package/src/data/servicereference/services/ec2messages.json +1 -0
- package/src/data/servicereference/services/ecr-public.json +1 -0
- package/src/data/servicereference/services/ecr.json +1 -0
- package/src/data/servicereference/services/ecs-mcp.json +1 -0
- package/src/data/servicereference/services/ecs.json +1 -0
- package/src/data/servicereference/services/eks-auth.json +1 -0
- package/src/data/servicereference/services/eks-mcp.json +1 -0
- package/src/data/servicereference/services/eks.json +1 -0
- package/src/data/servicereference/services/elasticache.json +1 -0
- package/src/data/servicereference/services/elasticbeanstalk.json +1 -0
- package/src/data/servicereference/services/elasticfilesystem.json +1 -0
- package/src/data/servicereference/services/elasticloadbalancing.json +1 -0
- package/src/data/servicereference/services/elasticmapreduce.json +1 -0
- package/src/data/servicereference/services/elastictranscoder.json +1 -0
- package/src/data/servicereference/services/elemental-activations.json +1 -0
- package/src/data/servicereference/services/elemental-appliances-software.json +1 -0
- package/src/data/servicereference/services/elemental-inference.json +1 -0
- package/src/data/servicereference/services/elemental-support-cases.json +1 -0
- package/src/data/servicereference/services/elemental-support-content.json +1 -0
- package/src/data/servicereference/services/emr-containers.json +1 -0
- package/src/data/servicereference/services/emr-serverless.json +1 -0
- package/src/data/servicereference/services/entityresolution.json +1 -0
- package/src/data/servicereference/services/es.json +1 -0
- package/src/data/servicereference/services/events.json +1 -0
- package/src/data/servicereference/services/evidently.json +1 -0
- package/src/data/servicereference/services/evs.json +1 -0
- package/src/data/servicereference/services/execute-api.json +1 -0
- package/src/data/servicereference/services/finspace-api.json +1 -0
- package/src/data/servicereference/services/finspace.json +1 -0
- package/src/data/servicereference/services/firehose.json +1 -0
- package/src/data/servicereference/services/fis.json +1 -0
- package/src/data/servicereference/services/fms.json +1 -0
- package/src/data/servicereference/services/forecast.json +1 -0
- package/src/data/servicereference/services/frauddetector.json +1 -0
- package/src/data/servicereference/services/freertos.json +1 -0
- package/src/data/servicereference/services/freetier.json +1 -0
- package/src/data/servicereference/services/fsx.json +1 -0
- package/src/data/servicereference/services/gamelift.json +1 -0
- package/src/data/servicereference/services/gameliftstreams.json +1 -0
- package/src/data/servicereference/services/geo-maps.json +1 -0
- package/src/data/servicereference/services/geo-places.json +1 -0
- package/src/data/servicereference/services/geo-routes.json +1 -0
- package/src/data/servicereference/services/geo.json +1 -0
- package/src/data/servicereference/services/glacier.json +1 -0
- package/src/data/servicereference/services/globalaccelerator.json +1 -0
- package/src/data/servicereference/services/glue.json +1 -0
- package/src/data/servicereference/services/grafana.json +1 -0
- package/src/data/servicereference/services/greengrass.json +1 -0
- package/src/data/servicereference/services/groundstation.json +1 -0
- package/src/data/servicereference/services/groundtruthlabeling.json +1 -0
- package/src/data/servicereference/services/guardduty.json +1 -0
- package/src/data/servicereference/services/health-agent.json +1 -0
- package/src/data/servicereference/services/health.json +1 -0
- package/src/data/servicereference/services/healthlake.json +1 -0
- package/src/data/servicereference/services/honeycode.json +1 -0
- package/src/data/servicereference/services/iam.json +1 -0
- package/src/data/servicereference/services/identity-sync.json +1 -0
- package/src/data/servicereference/services/identitystore-auth.json +1 -0
- package/src/data/servicereference/services/identitystore.json +1 -0
- package/src/data/servicereference/services/imagebuilder.json +1 -0
- package/src/data/servicereference/services/importexport.json +1 -0
- package/src/data/servicereference/services/inspector-scan.json +1 -0
- package/src/data/servicereference/services/inspector.json +1 -0
- package/src/data/servicereference/services/inspector2-telemetry.json +1 -0
- package/src/data/servicereference/services/inspector2.json +1 -0
- package/src/data/servicereference/services/interconnect.json +1 -0
- package/src/data/servicereference/services/internetmonitor.json +1 -0
- package/src/data/servicereference/services/invoicing.json +1 -0
- package/src/data/servicereference/services/iot-device-tester.json +1 -0
- package/src/data/servicereference/services/iot.json +1 -0
- package/src/data/servicereference/services/iotanalytics.json +1 -0
- package/src/data/servicereference/services/iotdeviceadvisor.json +1 -0
- package/src/data/servicereference/services/iotevents.json +1 -0
- package/src/data/servicereference/services/iotfleethub.json +1 -0
- package/src/data/servicereference/services/iotfleetwise.json +1 -0
- package/src/data/servicereference/services/iotjobsdata.json +1 -0
- package/src/data/servicereference/services/iotmanagedintegrations.json +1 -0
- package/src/data/servicereference/services/iotsitewise.json +1 -0
- package/src/data/servicereference/services/iottwinmaker.json +1 -0
- package/src/data/servicereference/services/iotwireless.json +1 -0
- package/src/data/servicereference/services/iq-permission.json +1 -0
- package/src/data/servicereference/services/iq.json +1 -0
- package/src/data/servicereference/services/ivs.json +1 -0
- package/src/data/servicereference/services/ivschat.json +1 -0
- package/src/data/servicereference/services/kafka-cluster.json +1 -0
- package/src/data/servicereference/services/kafka.json +1 -0
- package/src/data/servicereference/services/kafkaconnect.json +1 -0
- package/src/data/servicereference/services/kendra-ranking.json +1 -0
- package/src/data/servicereference/services/kendra.json +1 -0
- package/src/data/servicereference/services/kinesis.json +1 -0
- package/src/data/servicereference/services/kinesisanalytics.json +1 -0
- package/src/data/servicereference/services/kinesisvideo.json +1 -0
- package/src/data/servicereference/services/kms.json +1 -0
- package/src/data/servicereference/services/lakeformation.json +1 -0
- package/src/data/servicereference/services/lambda.json +1 -0
- package/src/data/servicereference/services/launchwizard.json +1 -0
- package/src/data/servicereference/services/lex.json +1 -0
- package/src/data/servicereference/services/license-manager-linux-subscriptions.json +1 -0
- package/src/data/servicereference/services/license-manager-user-subscriptions.json +1 -0
- package/src/data/servicereference/services/license-manager.json +1 -0
- package/src/data/servicereference/services/lightsail.json +1 -0
- package/src/data/servicereference/services/logs.json +1 -0
- package/src/data/servicereference/services/lookoutequipment.json +1 -0
- package/src/data/servicereference/services/lookoutmetrics.json +1 -0
- package/src/data/servicereference/services/lookoutvision.json +1 -0
- package/src/data/servicereference/services/m2.json +1 -0
- package/src/data/servicereference/services/machinelearning.json +1 -0
- package/src/data/servicereference/services/macie2.json +1 -0
- package/src/data/servicereference/services/managedblockchain-query.json +1 -0
- package/src/data/servicereference/services/managedblockchain.json +1 -0
- package/src/data/servicereference/services/mapcredits.json +1 -0
- package/src/data/servicereference/services/marketplacecommerceanalytics.json +1 -0
- package/src/data/servicereference/services/mechanicalturk.json +1 -0
- package/src/data/servicereference/services/mediaconnect.json +1 -0
- package/src/data/servicereference/services/mediaconvert.json +1 -0
- package/src/data/servicereference/services/mediaimport.json +1 -0
- package/src/data/servicereference/services/medialive.json +1 -0
- package/src/data/servicereference/services/mediapackage-vod.json +1 -0
- package/src/data/servicereference/services/mediapackage.json +1 -0
- package/src/data/servicereference/services/mediapackagev2.json +1 -0
- package/src/data/servicereference/services/mediastore.json +1 -0
- package/src/data/servicereference/services/mediatailor.json +1 -0
- package/src/data/servicereference/services/medical-imaging.json +1 -0
- package/src/data/servicereference/services/memorydb.json +1 -0
- package/src/data/servicereference/services/mgh.json +1 -0
- package/src/data/servicereference/services/mgn.json +1 -0
- package/src/data/servicereference/services/migrationhub-orchestrator.json +1 -0
- package/src/data/servicereference/services/migrationhub-strategy.json +1 -0
- package/src/data/servicereference/services/mobileanalytics.json +1 -0
- package/src/data/servicereference/services/mobiletargeting.json +1 -0
- package/src/data/servicereference/services/monitron.json +1 -0
- package/src/data/servicereference/services/mpa.json +1 -0
- package/src/data/servicereference/services/mq.json +1 -0
- package/src/data/servicereference/services/neptune-db.json +1 -0
- package/src/data/servicereference/services/neptune-graph.json +1 -0
- package/src/data/servicereference/services/network-firewall.json +1 -0
- package/src/data/servicereference/services/network-security-director.json +1 -0
- package/src/data/servicereference/services/networkflowmonitor.json +1 -0
- package/src/data/servicereference/services/networkmanager-chat.json +1 -0
- package/src/data/servicereference/services/networkmanager.json +1 -0
- package/src/data/servicereference/services/networkmonitor.json +1 -0
- package/src/data/servicereference/services/nimble.json +1 -0
- package/src/data/servicereference/services/notifications-contacts.json +1 -0
- package/src/data/servicereference/services/notifications.json +1 -0
- package/src/data/servicereference/services/nova-act.json +1 -0
- package/src/data/servicereference/services/oam.json +1 -0
- package/src/data/servicereference/services/observabilityadmin.json +1 -0
- package/src/data/servicereference/services/odb.json +1 -0
- package/src/data/servicereference/services/omics.json +1 -0
- package/src/data/servicereference/services/one.json +1 -0
- package/src/data/servicereference/services/opensearch.json +1 -0
- package/src/data/servicereference/services/opsworks-cm.json +1 -0
- package/src/data/servicereference/services/opsworks.json +1 -0
- package/src/data/servicereference/services/organizations.json +1 -0
- package/src/data/servicereference/services/osis.json +1 -0
- package/src/data/servicereference/services/outposts.json +1 -0
- package/src/data/servicereference/services/panorama.json +1 -0
- package/src/data/servicereference/services/partnercentral-account-management.json +1 -0
- package/src/data/servicereference/services/partnercentral.json +1 -0
- package/src/data/servicereference/services/payment-cryptography.json +1 -0
- package/src/data/servicereference/services/payments.json +1 -0
- package/src/data/servicereference/services/pca-connector-ad.json +1 -0
- package/src/data/servicereference/services/pca-connector-scep.json +1 -0
- package/src/data/servicereference/services/pcs.json +1 -0
- package/src/data/servicereference/services/personalize.json +1 -0
- package/src/data/servicereference/services/pi.json +1 -0
- package/src/data/servicereference/services/pipes.json +1 -0
- package/src/data/servicereference/services/polly.json +1 -0
- package/src/data/servicereference/services/pricing.json +1 -0
- package/src/data/servicereference/services/pricingplanmanager.json +1 -0
- package/src/data/servicereference/services/private-networks.json +1 -0
- package/src/data/servicereference/services/profile.json +1 -0
- package/src/data/servicereference/services/proton.json +1 -0
- package/src/data/servicereference/services/purchase-orders.json +1 -0
- package/src/data/servicereference/services/q.json +1 -0
- package/src/data/servicereference/services/qapps.json +1 -0
- package/src/data/servicereference/services/qbusiness.json +1 -0
- package/src/data/servicereference/services/qdeveloper.json +1 -0
- package/src/data/servicereference/services/qldb.json +1 -0
- package/src/data/servicereference/services/quicksight.json +1 -0
- package/src/data/servicereference/services/ram.json +1 -0
- package/src/data/servicereference/services/rbin.json +1 -0
- package/src/data/servicereference/services/rds-data.json +1 -0
- package/src/data/servicereference/services/rds-db.json +1 -0
- package/src/data/servicereference/services/rds.json +1 -0
- package/src/data/servicereference/services/redshift-data.json +1 -0
- package/src/data/servicereference/services/redshift-serverless.json +1 -0
- package/src/data/servicereference/services/redshift.json +1 -0
- package/src/data/servicereference/services/refactor-spaces.json +1 -0
- package/src/data/servicereference/services/rekognition.json +1 -0
- package/src/data/servicereference/services/repostspace.json +1 -0
- package/src/data/servicereference/services/resiliencehub.json +1 -0
- package/src/data/servicereference/services/resource-explorer-2.json +1 -0
- package/src/data/servicereference/services/resource-explorer.json +1 -0
- package/src/data/servicereference/services/resource-groups.json +1 -0
- package/src/data/servicereference/services/rhelkb.json +1 -0
- package/src/data/servicereference/services/robomaker.json +1 -0
- package/src/data/servicereference/services/rolesanywhere.json +1 -0
- package/src/data/servicereference/services/route53-recovery-cluster.json +1 -0
- package/src/data/servicereference/services/route53-recovery-control-config.json +1 -0
- package/src/data/servicereference/services/route53-recovery-readiness.json +1 -0
- package/src/data/servicereference/services/route53.json +1 -0
- package/src/data/servicereference/services/route53domains.json +1 -0
- package/src/data/servicereference/services/route53globalresolver.json +1 -0
- package/src/data/servicereference/services/route53profiles.json +1 -0
- package/src/data/servicereference/services/route53resolver.json +1 -0
- package/src/data/servicereference/services/rtbfabric.json +1 -0
- package/src/data/servicereference/services/rum.json +1 -0
- package/src/data/servicereference/services/s3-object-lambda.json +1 -0
- package/src/data/servicereference/services/s3-outposts.json +1 -0
- package/src/data/servicereference/services/s3.json +1 -0
- package/src/data/servicereference/services/s3express.json +1 -0
- package/src/data/servicereference/services/s3tables.json +1 -0
- package/src/data/servicereference/services/s3vectors.json +1 -0
- package/src/data/servicereference/services/sagemaker-data-science-assistant.json +1 -0
- package/src/data/servicereference/services/sagemaker-geospatial.json +1 -0
- package/src/data/servicereference/services/sagemaker-mlflow.json +1 -0
- package/src/data/servicereference/services/sagemaker-unified-studio-mcp.json +1 -0
- package/src/data/servicereference/services/sagemaker.json +1 -0
- package/src/data/servicereference/services/savingsplans.json +1 -0
- package/src/data/servicereference/services/scheduler.json +1 -0
- package/src/data/servicereference/services/schemas.json +1 -0
- package/src/data/servicereference/services/scn.json +1 -0
- package/src/data/servicereference/services/sdb.json +1 -0
- package/src/data/servicereference/services/secretsmanager.json +1 -0
- package/src/data/servicereference/services/security-ir.json +1 -0
- package/src/data/servicereference/services/securityagent.json +1 -0
- package/src/data/servicereference/services/securityhub.json +1 -0
- package/src/data/servicereference/services/securitylake.json +1 -0
- package/src/data/servicereference/services/serverlessrepo.json +1 -0
- package/src/data/servicereference/services/servicecatalog.json +1 -0
- package/src/data/servicereference/services/servicediscovery.json +1 -0
- package/src/data/servicereference/services/serviceextract.json +1 -0
- package/src/data/servicereference/services/servicequotas.json +1 -0
- package/src/data/servicereference/services/ses.json +1 -0
- package/src/data/servicereference/services/shield.json +1 -0
- package/src/data/servicereference/services/signer.json +1 -0
- package/src/data/servicereference/services/signin.json +1 -0
- package/src/data/servicereference/services/simspaceweaver.json +1 -0
- package/src/data/servicereference/services/sms-voice.json +1 -0
- package/src/data/servicereference/services/sms.json +1 -0
- package/src/data/servicereference/services/snow-device-management.json +1 -0
- package/src/data/servicereference/services/snowball.json +1 -0
- package/src/data/servicereference/services/sns.json +1 -0
- package/src/data/servicereference/services/social-messaging.json +1 -0
- package/src/data/servicereference/services/sqlworkbench.json +1 -0
- package/src/data/servicereference/services/sqs.json +1 -0
- package/src/data/servicereference/services/ssm-contacts.json +1 -0
- package/src/data/servicereference/services/ssm-guiconnect.json +1 -0
- package/src/data/servicereference/services/ssm-incidents.json +1 -0
- package/src/data/servicereference/services/ssm-quicksetup.json +1 -0
- package/src/data/servicereference/services/ssm-sap.json +1 -0
- package/src/data/servicereference/services/ssm.json +1 -0
- package/src/data/servicereference/services/ssmmessages.json +1 -0
- package/src/data/servicereference/services/sso-directory.json +1 -0
- package/src/data/servicereference/services/sso-oauth.json +1 -0
- package/src/data/servicereference/services/sso.json +1 -0
- package/src/data/servicereference/services/states.json +1 -0
- package/src/data/servicereference/services/storagegateway.json +1 -0
- package/src/data/servicereference/services/sts.json +1 -0
- package/src/data/servicereference/services/support-console.json +1 -0
- package/src/data/servicereference/services/support.json +1 -0
- package/src/data/servicereference/services/supportapp.json +1 -0
- package/src/data/servicereference/services/supportplans.json +1 -0
- package/src/data/servicereference/services/sustainability.json +1 -0
- package/src/data/servicereference/services/swf.json +1 -0
- package/src/data/servicereference/services/synthetics.json +1 -0
- package/src/data/servicereference/services/tag.json +1 -0
- package/src/data/servicereference/services/tax.json +1 -0
- package/src/data/servicereference/services/textract.json +1 -0
- package/src/data/servicereference/services/thinclient.json +1 -0
- package/src/data/servicereference/services/timestream-influxdb.json +1 -0
- package/src/data/servicereference/services/timestream.json +1 -0
- package/src/data/servicereference/services/tiros.json +1 -0
- package/src/data/servicereference/services/tnb.json +1 -0
- package/src/data/servicereference/services/transcribe.json +1 -0
- package/src/data/servicereference/services/transfer.json +1 -0
- package/src/data/servicereference/services/transform-custom.json +1 -0
- package/src/data/servicereference/services/transform.json +1 -0
- package/src/data/servicereference/services/translate.json +1 -0
- package/src/data/servicereference/services/trustedadvisor.json +1 -0
- package/src/data/servicereference/services/ts.json +1 -0
- package/src/data/servicereference/services/user-subscriptions.json +1 -0
- package/src/data/servicereference/services/uxc.json +1 -0
- package/src/data/servicereference/services/vendor-insights.json +1 -0
- package/src/data/servicereference/services/verified-access.json +1 -0
- package/src/data/servicereference/services/verifiedpermissions.json +1 -0
- package/src/data/servicereference/services/voiceid.json +1 -0
- package/src/data/servicereference/services/vpc-lattice-svcs.json +1 -0
- package/src/data/servicereference/services/vpc-lattice.json +1 -0
- package/src/data/servicereference/services/vpce.json +1 -0
- package/src/data/servicereference/services/waf-regional.json +1 -0
- package/src/data/servicereference/services/waf.json +1 -0
- package/src/data/servicereference/services/wafv2.json +1 -0
- package/src/data/servicereference/services/wam.json +1 -0
- package/src/data/servicereference/services/wellarchitected.json +1 -0
- package/src/data/servicereference/services/wickr.json +1 -0
- package/src/data/servicereference/services/wisdom.json +1 -0
- package/src/data/servicereference/services/workdocs.json +1 -0
- package/src/data/servicereference/services/worklink.json +1 -0
- package/src/data/servicereference/services/workmail.json +1 -0
- package/src/data/servicereference/services/workmailmessageflow.json +1 -0
- package/src/data/servicereference/services/workspaces-instances.json +1 -0
- package/src/data/servicereference/services/workspaces-web.json +1 -0
- package/src/data/servicereference/services/workspaces.json +1 -0
- package/src/data/servicereference/services/xray.json +1 -0
- package/src/data/servicereference/services.json +1 -0
- package/src/extension.d.ts +3 -0
- package/src/extension.js +23 -0
- package/src/grammars/tree-sitter-hcl.wasm +0 -0
- package/src/grammars/tree-sitter-json.wasm +0 -0
- package/src/grammars/tree-sitter-yaml.wasm +0 -0
- package/src/handlers/completion/action-value.d.ts +4 -0
- package/src/handlers/completion/action-value.js +46 -0
- package/src/handlers/completion/condition-block.d.ts +4 -0
- package/src/handlers/completion/condition-block.js +31 -0
- package/src/handlers/completion/condition-key.d.ts +4 -0
- package/src/handlers/completion/condition-key.js +80 -0
- package/src/handlers/completion/condition-operator.d.ts +4 -0
- package/src/handlers/completion/condition-operator.js +22 -0
- package/src/handlers/completion/effect-value.d.ts +4 -0
- package/src/handlers/completion/effect-value.js +14 -0
- package/src/handlers/completion/index.d.ts +14 -0
- package/src/handlers/completion/index.js +96 -0
- package/src/handlers/completion/principal-block-identifier.d.ts +4 -0
- package/src/handlers/completion/principal-block-identifier.js +4 -0
- package/src/handlers/completion/principal-block-type.d.ts +4 -0
- package/src/handlers/completion/principal-block-type.js +24 -0
- package/src/handlers/completion/principal-block.d.ts +4 -0
- package/src/handlers/completion/principal-block.js +28 -0
- package/src/handlers/completion/principal-identifier-completions.d.ts +2 -0
- package/src/handlers/completion/principal-identifier-completions.js +131 -0
- package/src/handlers/completion/principal-type.d.ts +4 -0
- package/src/handlers/completion/principal-type.js +23 -0
- package/src/handlers/completion/principal-typed-value.d.ts +4 -0
- package/src/handlers/completion/principal-typed-value.js +4 -0
- package/src/handlers/completion/principal-value.d.ts +4 -0
- package/src/handlers/completion/principal-value.js +18 -0
- package/src/handlers/completion/resource-value.d.ts +4 -0
- package/src/handlers/completion/resource-value.js +144 -0
- package/src/handlers/completion/statement-block.d.ts +10 -0
- package/src/handlers/completion/statement-block.js +51 -0
- package/src/handlers/completion/statement-key.d.ts +4 -0
- package/src/handlers/completion/statement-key.js +41 -0
- package/src/lib/iam-policy/condition-operators.d.ts +317 -0
- package/src/lib/iam-policy/condition-operators.js +129 -0
- package/src/lib/iam-policy/location.d.ts +71 -0
- package/src/lib/iam-policy/location.js +82 -0
- package/src/lib/iam-policy/partitions.d.ts +116 -0
- package/src/lib/iam-policy/partitions.js +51 -0
- package/src/lib/iam-policy/principals.d.ts +21 -0
- package/src/lib/iam-policy/principals.js +37 -0
- package/src/lib/iam-policy/reference/services.d.ts +22 -0
- package/src/lib/iam-policy/reference/services.js +99 -0
- package/src/lib/iam-policy/reference/types.d.ts +71 -0
- package/src/lib/iam-policy/reference/types.js +1 -0
- package/src/lib/iam-policy/statement-keys.d.ts +8 -0
- package/src/lib/iam-policy/statement-keys.js +159 -0
- package/src/lib/iam-policy/wildcard.d.ts +2 -0
- package/src/lib/iam-policy/wildcard.js +14 -0
- package/src/lib/treesitter/base.d.ts +35 -0
- package/src/lib/treesitter/base.js +50 -0
- package/src/lib/treesitter/hcl.d.ts +9 -0
- package/src/lib/treesitter/hcl.js +888 -0
- package/src/lib/treesitter/json.d.ts +9 -0
- package/src/lib/treesitter/json.js +376 -0
- package/src/lib/treesitter/manager.d.ts +9 -0
- package/src/lib/treesitter/manager.js +66 -0
- package/src/lib/treesitter/yaml.d.ts +9 -0
- package/src/lib/treesitter/yaml.js +878 -0
- package/src/server.d.ts +2 -0
- package/src/server.js +26 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"evs","actions":{"AssociateEipToVlan":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to associate an Elastic IP address (EIP) with a public VLAN in an Amazon EVS environment","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}],"dependentActions":["ec2:AssociateAddress","ec2:DescribeAddresses"]},"CreateEnvironment":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an Amazon EVS environment","accessLevel":"Write","resourceTypes":[],"dependentActions":["ec2:CreateNetworkInterface","ec2:CreateSubnet","ec2:CreateTags","ec2:DeleteNetworkInterface","ec2:DeleteSubnet","ec2:DeleteVolume","ec2:DescribeAddresses","ec2:DescribeDhcpOptions","ec2:DescribeHosts","ec2:DescribeInstanceStatus","ec2:DescribeInstances","ec2:DescribeKeyPairs","ec2:DescribeNetworkInterfaces","ec2:DescribePlacementGroups","ec2:DescribeRouteServerEndpoints","ec2:DescribeRouteServerPeers","ec2:DescribeRouteServers","ec2:DescribeSecurityGroups","ec2:DescribeSubnets","ec2:DescribeVolumes","ec2:DescribeVpcs","ec2:DetachNetworkInterface","ec2:DetachVolume","ec2:GetAllowedImagesSettings","ec2:GetRouteServerAssociations","ec2:ModifyInstanceAttribute","ec2:ModifyNetworkInterfaceAttribute","ec2:RunInstances","ec2:TerminateInstances","iam:CreateServiceLinkedRole","kms:DescribeKey","kms:ListAliases","secretsmanager:CreateSecret","secretsmanager:DeleteSecret","secretsmanager:GetRandomPassword","secretsmanager:GetSecretValue","secretsmanager:TagResource","secretsmanager:UpdateSecret","servicequotas:GetServiceQuota","servicequotas:ListServiceQuotas","support:DescribeServices","support:DescribeSupportLevel"]},"CreateEnvironmentHost":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to add host to an Amazon EVS environment","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}],"dependentActions":["ec2:CreateNetworkInterface","ec2:CreateTags","ec2:DeleteNetworkInterface","ec2:DescribeDhcpOptions","ec2:DescribeHosts","ec2:DescribeInstanceStatus","ec2:DescribeInstances","ec2:DescribeKeyPairs","ec2:DescribeNetworkInterfaces","ec2:DescribePlacementGroups","ec2:DescribeSecurityGroups","ec2:DescribeSubnets","ec2:DescribeVpcs","ec2:ModifyNetworkInterfaceAttribute","ec2:RunInstances","evs:CreateEnvironmentHost","secretsmanager:CreateSecret","secretsmanager:DeleteSecret","secretsmanager:GetRandomPassword","secretsmanager:GetSecretValue","secretsmanager:TagResource","secretsmanager:UpdateSecret","servicequotas:GetServiceQuota","servicequotas:ListServiceQuotas"]},"DeleteEnvironment":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to delete an Amazon EVS environment","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}],"dependentActions":["ec2:DeleteNetworkInterface","ec2:DeleteSubnet","ec2:DescribeInstanceStatus","ec2:DescribeInstances","ec2:DescribeNetworkInterfaces","ec2:DescribeSubnets","ec2:ModifyInstanceAttribute","ec2:ModifyNetworkInterfaceAttribute","ec2:TerminateInstances","secretsmanager:DeleteSecret","secretsmanager:GetSecretValue"]},"DeleteEnvironmentHost":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to delete a host from an Amazon EVS environment","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}],"dependentActions":["ec2:DeleteNetworkInterface","ec2:DescribeInstanceStatus","ec2:DescribeInstances","ec2:DescribeNetworkInterfaces","ec2:ModifyInstanceAttribute","ec2:ModifyNetworkInterfaceAttribute","ec2:TerminateInstances","secretsmanager:DeleteSecret","secretsmanager:GetSecretValue"]},"DisassociateEipFromVlan":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to disassociate an Elastic IP address (EIP) from a public VLAN in an Amazon EVS environment","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}],"dependentActions":["ec2:DisassociateAddress"]},"GetEnvironment":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to get an Amazon EVS environment","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true}]},"GetVersions":{"conditionKeys":[],"resources":[],"description":"Grants permission to get versions provided for launch by Amazon EVS","accessLevel":"Read","resourceTypes":[]},"ListEnvironmentHosts":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to retrieve a list of hosts associated with an Amazon EVS environment","accessLevel":"List","resourceTypes":[{"name":"environment","required":true}]},"ListEnvironmentVlans":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to retrieve a list of Amazon EVS environment VLANs","accessLevel":"List","resourceTypes":[{"name":"environment","required":true}]},"ListEnvironments":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of Amazon EVS environments in an account","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to list the tags on a specified resource ARN","accessLevel":"Read","resourceTypes":[{"name":"environment","required":false}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"environment"}],"description":"Grants permission to tag a specified resource ARN","accessLevel":"Tagging","resourceTypes":[{"name":"environment","required":true}]},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"environment"}],"description":"Grants permission to remove tags from a specified resource ARN","accessLevel":"Tagging","resourceTypes":[{"name":"environment","required":true}]}},"resources":[{"name":"environment","arnFormats":["arn:${Partition}:evs:${Region}:${Account}:environment/${EnvironmentIdentifier}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair that is allowed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair of a resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by a list of tag keys that are allowed in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"execute-api","actions":{"InvalidateCache":{"conditionKeys":[],"resources":[{"name":"execute-api-general"}],"description":"Grants permission to invalidate API cache upon a client request","accessLevel":"Write","resourceTypes":[{"name":"execute-api-general","required":true}]},"Invoke":{"conditionKeys":[],"resources":[{"name":"execute-api-domain"},{"name":"execute-api-general"}],"description":"Grants permission to invoke an API upon a client request","accessLevel":"Write","resourceTypes":[{"name":"execute-api-domain","required":false},{"name":"execute-api-general","required":false}]},"ManageConnections":{"conditionKeys":[],"resources":[{"name":"execute-api-general"}],"description":"Grants permission to access the Websocket @connections Route","accessLevel":"Write","resourceTypes":[{"name":"execute-api-general","required":true}]}},"resources":[{"name":"execute-api-domain","arnFormats":["arn:${Partition}:execute-api:${Region}:${Account}:/domainnames/${DomainName}+${DomainIdentifier}"],"conditionKeys":[]},{"name":"execute-api-general","arnFormats":["arn:${Partition}:execute-api:${Region}:${Account}:${ApiId}/${Stage}/${Method}/${ApiSpecificResourcePath}"],"conditionKeys":["execute-api:viaDomainArn"]}],"conditionKeys":{"execute-api:viaDomainArn":{"types":["ARN"],"description":"Filters access by the DomainName ARN the API is called from"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"finspace-api","actions":{"GetProgrammaticAccessCredentials":{"conditionKeys":[],"resources":[{"name":"credential"}],"description":"Grants permission to retrieve FinSpace programmatic access credentials","accessLevel":"Read","resourceTypes":[{"name":"credential","required":true}]}},"resources":[{"name":"credential","arnFormats":["arn:${Partition}:finspace-api:${Region}:${Account}:/credentials/programmatic"],"conditionKeys":[]}],"conditionKeys":{}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"finspace","actions":{"ConnectKxCluster":{"conditionKeys":[],"resources":[{"name":"kxCluster"}],"description":"Grants permission to connect to a kdb cluster","accessLevel":"Write","resourceTypes":[{"name":"kxCluster","required":true}],"permissionOnly":true},"CreateEnvironment":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"environment"}],"description":"Grants permission to create a FinSpace environment","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}]},"CreateKxChangeset":{"conditionKeys":[],"resources":[{"name":"kxDatabase"}],"description":"Grants permission to create a changeset for a kdb database","accessLevel":"Write","resourceTypes":[{"name":"kxDatabase","required":true}]},"CreateKxCluster":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"kxCluster"}],"description":"Grants permission to create a cluster in a managed kdb environment","accessLevel":"Write","resourceTypes":[{"name":"kxCluster","required":true}],"dependentActions":["ec2:DescribeSubnets","finspace:MountKxDatabase"]},"CreateKxDatabase":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"kxDatabase"}],"description":"Grants permission to create a kdb database in a managed kdb environment","accessLevel":"Write","resourceTypes":[{"name":"kxDatabase","required":true}]},"CreateKxDataview":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"kxDataview"}],"description":"Grants permission to create a dataview in a managed kdb environment","accessLevel":"Write","resourceTypes":[{"name":"kxDataview","required":true}]},"CreateKxEnvironment":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a managed kdb environment","accessLevel":"Write","resourceTypes":[]},"CreateKxScalingGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"kxScalingGroup"}],"description":"Grants permission to create a scaling group in a managed kdb environment","accessLevel":"Write","resourceTypes":[{"name":"kxScalingGroup","required":true}]},"CreateKxUser":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"kxEnvironment"}],"description":"Grants permission to create a user in a managed kdb environment","accessLevel":"Write","resourceTypes":[{"name":"kxEnvironment","required":true}]},"CreateKxVolume":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"kxVolume"}],"description":"Grants permission to create a volume in a managed kdb environment","accessLevel":"Write","resourceTypes":[{"name":"kxVolume","required":true}]},"CreateUser":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"environment"},{"name":"user"}],"description":"Grants permission to create a FinSpace user","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true},{"name":"user","required":true}]},"DeleteEnvironment":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to delete a FinSpace environment","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}]},"DeleteKxCluster":{"conditionKeys":[],"resources":[{"name":"kxCluster"}],"description":"Grants permission to delete a kdb cluster","accessLevel":"Write","resourceTypes":[{"name":"kxCluster","required":true}]},"DeleteKxClusterNode":{"conditionKeys":[],"resources":[{"name":"kxCluster"}],"description":"Grants permission to delete a node from a kdb cluster","accessLevel":"Write","resourceTypes":[{"name":"kxCluster","required":true}]},"DeleteKxDatabase":{"conditionKeys":[],"resources":[{"name":"kxDatabase"}],"description":"Grants permission to delete a kdb database","accessLevel":"Write","resourceTypes":[{"name":"kxDatabase","required":true}]},"DeleteKxDataview":{"conditionKeys":[],"resources":[{"name":"kxDataview"}],"description":"Grants permission to delete a dataview in a managed kdb environment","accessLevel":"Write","resourceTypes":[{"name":"kxDataview","required":true}]},"DeleteKxEnvironment":{"conditionKeys":[],"resources":[{"name":"kxEnvironment"}],"description":"Grants permission to delete a managed kdb environment","accessLevel":"Write","resourceTypes":[{"name":"kxEnvironment","required":true}]},"DeleteKxScalingGroup":{"conditionKeys":[],"resources":[{"name":"kxScalingGroup"}],"description":"Grants permission to delete a scaling group in a managed kdb environment","accessLevel":"Write","resourceTypes":[{"name":"kxScalingGroup","required":true}]},"DeleteKxUser":{"conditionKeys":[],"resources":[{"name":"kxUser"}],"description":"Grants permission to delete a kdb user","accessLevel":"Write","resourceTypes":[{"name":"kxUser","required":true}]},"DeleteKxVolume":{"conditionKeys":[],"resources":[{"name":"kxVolume"}],"description":"Grants permission to delete a volume in a managed kdb environment","accessLevel":"Write","resourceTypes":[{"name":"kxVolume","required":true}]},"GetEnvironment":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to describe a FinSpace environment","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true}]},"GetKxChangeset":{"conditionKeys":[],"resources":[{"name":"kxDatabase"}],"description":"Grants permission to describe a changeset for a kdb database","accessLevel":"Read","resourceTypes":[{"name":"kxDatabase","required":true}]},"GetKxCluster":{"conditionKeys":[],"resources":[{"name":"kxCluster"}],"description":"Grants permission to describe a cluster in a managed kdb environment","accessLevel":"Read","resourceTypes":[{"name":"kxCluster","required":true}]},"GetKxConnectionString":{"conditionKeys":[],"resources":[{"name":"kxCluster"}],"description":"Grants permission to retrieve a connection string for kdb clusters","accessLevel":"Read","resourceTypes":[{"name":"kxCluster","required":true}],"dependentActions":["finspace:ConnectKxCluster"]},"GetKxDatabase":{"conditionKeys":[],"resources":[{"name":"kxDatabase"}],"description":"Grants permission to describe a kdb database","accessLevel":"Read","resourceTypes":[{"name":"kxDatabase","required":true}]},"GetKxDataview":{"conditionKeys":[],"resources":[{"name":"kxDataview"}],"description":"Grants permission to describe a databiew in a managed kdb environment","accessLevel":"Read","resourceTypes":[{"name":"kxDataview","required":true}]},"GetKxEnvironment":{"conditionKeys":[],"resources":[{"name":"kxEnvironment"}],"description":"Grants permission to describe a managed kdb environment","accessLevel":"Read","resourceTypes":[{"name":"kxEnvironment","required":true}]},"GetKxScalingGroup":{"conditionKeys":[],"resources":[{"name":"kxScalingGroup"}],"description":"Grants permission to describe a scaling group in a managed kdb environment","accessLevel":"Read","resourceTypes":[{"name":"kxScalingGroup","required":true}]},"GetKxUser":{"conditionKeys":[],"resources":[{"name":"kxUser"}],"description":"Grants permission to describe a kdb user","accessLevel":"Read","resourceTypes":[{"name":"kxUser","required":true}]},"GetKxVolume":{"conditionKeys":[],"resources":[{"name":"kxVolume"}],"description":"Grants permission to describe a volume in a managed kdb environment","accessLevel":"Read","resourceTypes":[{"name":"kxVolume","required":true}]},"GetLoadSampleDataSetGroupIntoEnvironmentStatus":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to request status of the loading of sample data bundle","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true}]},"GetUser":{"conditionKeys":[],"resources":[{"name":"environment"},{"name":"user"}],"description":"Grants permission to describe a FinSpace user","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true},{"name":"user","required":true}]},"ListEnvironments":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to list FinSpace environments in the AWS account","accessLevel":"List","resourceTypes":[{"name":"environment","required":true}]},"ListKxChangesets":{"conditionKeys":[],"resources":[{"name":"kxDatabase"}],"description":"Grants permission to list changesets for a kdb database","accessLevel":"List","resourceTypes":[{"name":"kxDatabase","required":true}]},"ListKxClusterNodes":{"conditionKeys":[],"resources":[{"name":"kxCluster"}],"description":"Grants permission to list cluster nodes in a managed kdb environment","accessLevel":"List","resourceTypes":[{"name":"kxCluster","required":true}]},"ListKxClusters":{"conditionKeys":[],"resources":[{"name":"kxEnvironment"}],"description":"Grants permission to list clusters in a managed kdb environment","accessLevel":"List","resourceTypes":[{"name":"kxEnvironment","required":true}]},"ListKxDatabases":{"conditionKeys":[],"resources":[{"name":"kxEnvironment"}],"description":"Grants permission to list kdb databases in a managed kdb environment","accessLevel":"List","resourceTypes":[{"name":"kxEnvironment","required":true}]},"ListKxDataviews":{"conditionKeys":[],"resources":[{"name":"kxDatabase"}],"description":"Grants permission to list dataviews in a database","accessLevel":"List","resourceTypes":[{"name":"kxDatabase","required":true}]},"ListKxEnvironments":{"conditionKeys":[],"resources":[],"description":"Grants permission to list managed kdb environments","accessLevel":"List","resourceTypes":[]},"ListKxScalingGroups":{"conditionKeys":[],"resources":[{"name":"kxEnvironment"}],"description":"Grants permission to list scaling groups in a managed kdb environment","accessLevel":"List","resourceTypes":[{"name":"kxEnvironment","required":true}]},"ListKxUsers":{"conditionKeys":[],"resources":[{"name":"kxEnvironment"}],"description":"Grants permission to list users in a managed kdb environment","accessLevel":"List","resourceTypes":[{"name":"kxEnvironment","required":true}]},"ListKxVolumes":{"conditionKeys":[],"resources":[{"name":"kxEnvironment"}],"description":"Grants permission to list volumes in a managed kdb environment","accessLevel":"List","resourceTypes":[{"name":"kxEnvironment","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"environment"},{"name":"kxCluster"},{"name":"kxDatabase"},{"name":"kxDataview"},{"name":"kxEnvironment"},{"name":"kxScalingGroup"},{"name":"kxUser"},{"name":"kxVolume"}],"description":"Grants permission to return a list of tags for a resource","accessLevel":"List","resourceTypes":[{"name":"environment","required":true},{"name":"kxCluster","required":true},{"name":"kxDatabase","required":true},{"name":"kxDataview","required":true},{"name":"kxEnvironment","required":true},{"name":"kxScalingGroup","required":true},{"name":"kxUser","required":true},{"name":"kxVolume","required":true}]},"ListUsers":{"conditionKeys":[],"resources":[{"name":"environment"},{"name":"user"}],"description":"Grants permission to list FinSpace users in an environment","accessLevel":"List","resourceTypes":[{"name":"environment","required":true},{"name":"user","required":true}]},"LoadSampleDataSetGroupIntoEnvironment":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to load sample data bundle into your FinSpace environment","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}]},"MountKxDatabase":{"conditionKeys":[],"resources":[{"name":"kxDatabase"}],"description":"Grants permission to mount a database to a kdb cluster","accessLevel":"Write","resourceTypes":[{"name":"kxDatabase","required":true}],"permissionOnly":true},"ResetUserPassword":{"conditionKeys":[],"resources":[{"name":"environment"},{"name":"user"}],"description":"Grants permission to reset the password for a FinSpace user","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true},{"name":"user","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"environment"},{"name":"kxCluster"},{"name":"kxDatabase"},{"name":"kxDataview"},{"name":"kxEnvironment"},{"name":"kxScalingGroup"},{"name":"kxUser"},{"name":"kxVolume"}],"description":"Grants permission to tag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"environment","required":false},{"name":"kxCluster","required":false},{"name":"kxDatabase","required":false},{"name":"kxDataview","required":false},{"name":"kxEnvironment","required":false},{"name":"kxScalingGroup","required":false},{"name":"kxUser","required":false},{"name":"kxVolume","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"environment"},{"name":"kxCluster"},{"name":"kxDatabase"},{"name":"kxDataview"},{"name":"kxEnvironment"},{"name":"kxScalingGroup"},{"name":"kxUser"},{"name":"kxVolume"}],"description":"Grants permission to untag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"environment","required":false},{"name":"kxCluster","required":false},{"name":"kxDatabase","required":false},{"name":"kxDataview","required":false},{"name":"kxEnvironment","required":false},{"name":"kxScalingGroup","required":false},{"name":"kxUser","required":false},{"name":"kxVolume","required":false}]},"UpdateEnvironment":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to update a FinSpace environment","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}]},"UpdateKxClusterCodeConfiguration":{"conditionKeys":[],"resources":[{"name":"kxCluster"}],"description":"Grants permission to update code configuration for a cluster in a managed kdb environment","accessLevel":"Write","resourceTypes":[{"name":"kxCluster","required":true}]},"UpdateKxClusterDatabases":{"conditionKeys":[],"resources":[{"name":"kxCluster"}],"description":"Grants permission to update databases for a cluster in a managed kdb environment","accessLevel":"Write","resourceTypes":[{"name":"kxCluster","required":true}]},"UpdateKxDatabase":{"conditionKeys":[],"resources":[{"name":"kxDatabase"}],"description":"Grants permission to update a kdb database","accessLevel":"Write","resourceTypes":[{"name":"kxDatabase","required":true}]},"UpdateKxDataview":{"conditionKeys":[],"resources":[{"name":"kxDataview"}],"description":"Grants permission to update a dataview in a managed kdb environment","accessLevel":"Write","resourceTypes":[{"name":"kxDataview","required":true}]},"UpdateKxEnvironment":{"conditionKeys":[],"resources":[{"name":"kxEnvironment"}],"description":"Grants permission to update a managed kdb environment","accessLevel":"Write","resourceTypes":[{"name":"kxEnvironment","required":true}]},"UpdateKxEnvironmentNetwork":{"conditionKeys":[],"resources":[{"name":"kxEnvironment"}],"description":"Grants permission to update the network for a managed kdb environment","accessLevel":"Write","resourceTypes":[{"name":"kxEnvironment","required":true}]},"UpdateKxUser":{"conditionKeys":[],"resources":[{"name":"kxUser"}],"description":"Grants permission to update a kdb user","accessLevel":"Write","resourceTypes":[{"name":"kxUser","required":true}]},"UpdateKxVolume":{"conditionKeys":[],"resources":[{"name":"kxVolume"}],"description":"Grants permission to update a volume in a managed kdb environment","accessLevel":"Write","resourceTypes":[{"name":"kxVolume","required":true}]},"UpdateUser":{"conditionKeys":[],"resources":[{"name":"environment"},{"name":"user"}],"description":"Grants permission to update a FinSpace user","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true},{"name":"user","required":true}]}},"resources":[{"name":"environment","arnFormats":["arn:${Partition}:finspace:${Region}:${Account}:environment/${EnvironmentId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"kxCluster","arnFormats":["arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/${EnvironmentId}/kxCluster/${KxCluster}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"kxDatabase","arnFormats":["arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/${EnvironmentId}/kxDatabase/${KxDatabase}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"kxDataview","arnFormats":["arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/${EnvironmentId}/kxDatabase/${KxDatabase}/kxDataview/${KxDataview}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"kxEnvironment","arnFormats":["arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/${EnvironmentId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"kxScalingGroup","arnFormats":["arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/${EnvironmentId}/kxScalingGroup/${KxScalingGroup}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"kxUser","arnFormats":["arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/${EnvironmentId}/kxUser/${UserName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"kxVolume","arnFormats":["arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/${EnvironmentId}/kxVolume/${KxVolume}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"user","arnFormats":["arn:${Partition}:finspace:${Region}:${Account}:user/${UserId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"firehose","actions":{"CreateDeliveryStream":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"deliverystream"}],"description":"Grants permission to create a delivery stream","accessLevel":"Write","resourceTypes":[{"name":"deliverystream","required":true}]},"DeleteDeliveryStream":{"conditionKeys":[],"resources":[{"name":"deliverystream"}],"description":"Grants permission to delete a delivery stream and its data","accessLevel":"Write","resourceTypes":[{"name":"deliverystream","required":true}]},"DescribeDeliveryStream":{"conditionKeys":[],"resources":[{"name":"deliverystream"}],"description":"Grants permission to describe the specified delivery stream and gets the status","accessLevel":"Read","resourceTypes":[{"name":"deliverystream","required":true}]},"ListDeliveryStreams":{"conditionKeys":[],"resources":[],"description":"Grants permission to list your delivery streams","accessLevel":"List","resourceTypes":[]},"ListTagsForDeliveryStream":{"conditionKeys":[],"resources":[{"name":"deliverystream"}],"description":"Grants permission to list the tags for the specified delivery stream","accessLevel":"List","resourceTypes":[{"name":"deliverystream","required":true}]},"PutRecord":{"conditionKeys":[],"resources":[{"name":"deliverystream"}],"description":"Grants permission to write a single data record into an Amazon Kinesis Firehose delivery stream","accessLevel":"Write","resourceTypes":[{"name":"deliverystream","required":true}]},"PutRecordBatch":{"conditionKeys":[],"resources":[{"name":"deliverystream"}],"description":"Grants permission to write multiple data records into a delivery stream in a single call, which can achieve higher throughput per producer than when writing single records","accessLevel":"Write","resourceTypes":[{"name":"deliverystream","required":true}]},"StartDeliveryStreamEncryption":{"conditionKeys":[],"resources":[{"name":"deliverystream"}],"description":"Grants permission to enable server-side encryption (SSE) for the delivery stream","accessLevel":"Write","resourceTypes":[{"name":"deliverystream","required":true}]},"StopDeliveryStreamEncryption":{"conditionKeys":[],"resources":[{"name":"deliverystream"}],"description":"Grants permission to disable the specified destination of the specified delivery stream","accessLevel":"Write","resourceTypes":[{"name":"deliverystream","required":true}]},"TagDeliveryStream":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"deliverystream"}],"description":"Grants permission to add or update tags for the specified delivery stream","accessLevel":"Tagging","resourceTypes":[{"name":"deliverystream","required":true}]},"UntagDeliveryStream":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"deliverystream"}],"description":"Grants permission to remove tags from the specified delivery stream","accessLevel":"Tagging","resourceTypes":[{"name":"deliverystream","required":true}]},"UpdateDestination":{"conditionKeys":[],"resources":[{"name":"deliverystream"}],"description":"Grants permission to update the specified destination of the specified delivery stream","accessLevel":"Write","resourceTypes":[{"name":"deliverystream","required":true}]}},"resources":[{"name":"deliverystream","arnFormats":["arn:${Partition}:firehose:${Region}:${Account}:deliverystream/${DeliveryStreamName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"fis","actions":{"CreateExperimentTemplate":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"action"},{"name":"experiment-template"}],"description":"Grants permission to create an AWS FIS experiment template","accessLevel":"Write","resourceTypes":[{"name":"action","required":true},{"name":"experiment-template","required":true}]},"CreateTargetAccountConfiguration":{"conditionKeys":[],"resources":[{"name":"experiment-template"}],"description":"Grants permission to create an AWS FIS target account configuration","accessLevel":"Write","resourceTypes":[{"name":"experiment-template","required":true}]},"DeleteExperimentTemplate":{"conditionKeys":[],"resources":[{"name":"experiment-template"}],"description":"Grants permission to delete the AWS FIS experiment template","accessLevel":"Write","resourceTypes":[{"name":"experiment-template","required":true}]},"DeleteTargetAccountConfiguration":{"conditionKeys":[],"resources":[{"name":"experiment-template"}],"description":"Grants permission to delete an AWS FIS target account configuration","accessLevel":"Write","resourceTypes":[{"name":"experiment-template","required":true}]},"GetAction":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"action"}],"description":"Grants permission to retrieve an AWS FIS action","accessLevel":"Read","resourceTypes":[{"name":"action","required":true}]},"GetExperiment":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"experiment"}],"description":"Grants permission to retrieve an AWS FIS experiment","accessLevel":"Read","resourceTypes":[{"name":"experiment","required":true}]},"GetExperimentTargetAccountConfiguration":{"conditionKeys":[],"resources":[{"name":"experiment"}],"description":"Grants permission to retrieve an AWS FIS target account configuration for an AWS FIS experiment","accessLevel":"Read","resourceTypes":[{"name":"experiment","required":true}]},"GetExperimentTemplate":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"experiment-template"}],"description":"Grants permission to retrieve an AWS FIS Experiment Template","accessLevel":"Read","resourceTypes":[{"name":"experiment-template","required":true}]},"GetSafetyLever":{"conditionKeys":[],"resources":[{"name":"safety-lever"}],"description":"Grants permission to get information about the safety lever","accessLevel":"Read","resourceTypes":[{"name":"safety-lever","required":true}]},"GetTargetAccountConfiguration":{"conditionKeys":[],"resources":[{"name":"experiment-template"}],"description":"Grants permission to retrieve an AWS FIS target account configuration for an AWS FIS experiment template","accessLevel":"Read","resourceTypes":[{"name":"experiment-template","required":true}]},"GetTargetResourceType":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about the specified resource type","accessLevel":"Read","resourceTypes":[]},"InjectApiInternalError":{"conditionKeys":["fis:Operations","fis:Percentage","fis:Service","fis:Targets"],"resources":[{"name":"experiment"}],"description":"Grants permission to inject an API internal error on the provided AWS service from an FIS Experiment","accessLevel":"Write","resourceTypes":[{"name":"experiment","required":true}],"permissionOnly":true},"InjectApiThrottleError":{"conditionKeys":["fis:Operations","fis:Percentage","fis:Service","fis:Targets"],"resources":[{"name":"experiment"}],"description":"Grants permission to inject an API throttle error on the provided AWS service from an FIS Experiment","accessLevel":"Write","resourceTypes":[{"name":"experiment","required":true}],"permissionOnly":true},"InjectApiUnavailableError":{"conditionKeys":["fis:Operations","fis:Percentage","fis:Service","fis:Targets"],"resources":[{"name":"experiment"}],"description":"Grants permission to inject an API unavailable error on the provided AWS service from an FIS Experiment","accessLevel":"Write","resourceTypes":[{"name":"experiment","required":true}],"permissionOnly":true},"ListActions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all available AWS FIS actions","accessLevel":"List","resourceTypes":[]},"ListExperimentResolvedTargets":{"conditionKeys":[],"resources":[{"name":"experiment"}],"description":"Grants permission to list resolved targets for AWS FIS experiments","accessLevel":"List","resourceTypes":[{"name":"experiment","required":true}]},"ListExperimentTargetAccountConfigurations":{"conditionKeys":[],"resources":[{"name":"experiment"}],"description":"Grants permission to list target account configurations for AWS FIS experiments","accessLevel":"List","resourceTypes":[{"name":"experiment","required":true}]},"ListExperimentTemplates":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all available AWS FIS experiment templates","accessLevel":"List","resourceTypes":[]},"ListExperiments":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all available AWS FIS experiments","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"action"},{"name":"experiment"},{"name":"experiment-template"}],"description":"Grants permission to list the tags for an AWS FIS resource","accessLevel":"Read","resourceTypes":[{"name":"action","required":false},{"name":"experiment","required":false},{"name":"experiment-template","required":false}]},"ListTargetAccountConfigurations":{"conditionKeys":[],"resources":[{"name":"experiment-template"}],"description":"Grants permission to list target account configurations for AWS FIS experiment templates","accessLevel":"List","resourceTypes":[{"name":"experiment-template","required":true}]},"ListTargetResourceTypes":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the resource types","accessLevel":"List","resourceTypes":[]},"StartExperiment":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"experiment"},{"name":"experiment-template"}],"description":"Grants permission to run an AWS FIS experiment","accessLevel":"Write","resourceTypes":[{"name":"experiment","required":true},{"name":"experiment-template","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"]},"StopExperiment":{"conditionKeys":[],"resources":[{"name":"experiment"}],"description":"Grants permission to stop an AWS FIS experiment","accessLevel":"Write","resourceTypes":[{"name":"experiment","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"action"},{"name":"experiment"},{"name":"experiment-template"}],"description":"Grants permission to tag AWS FIS resources","accessLevel":"Tagging","resourceTypes":[{"name":"action","required":false},{"name":"experiment","required":false},{"name":"experiment-template","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"action"},{"name":"experiment"},{"name":"experiment-template"}],"description":"Grants permission to untag AWS FIS resources","accessLevel":"Tagging","resourceTypes":[{"name":"action","required":false},{"name":"experiment","required":false},{"name":"experiment-template","required":false}]},"UpdateExperimentTemplate":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"action"},{"name":"experiment-template"}],"description":"Grants permission to update the specified AWS FIS experiment template","accessLevel":"Write","resourceTypes":[{"name":"experiment-template","required":true},{"name":"action","required":false}]},"UpdateSafetyLeverState":{"conditionKeys":[],"resources":[{"name":"safety-lever"}],"description":"Grants permission to update the state of the safety lever","accessLevel":"Write","resourceTypes":[{"name":"safety-lever","required":true}]},"UpdateTargetAccountConfiguration":{"conditionKeys":[],"resources":[{"name":"experiment-template"}],"description":"Grants permission to update an AWS FIS target account configuration","accessLevel":"Write","resourceTypes":[{"name":"experiment-template","required":true}]}},"resources":[{"name":"action","arnFormats":["arn:${Partition}:fis:${Region}:${Account}:action/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"experiment","arnFormats":["arn:${Partition}:fis:${Region}:${Account}:experiment/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"experiment-template","arnFormats":["arn:${Partition}:fis:${Region}:${Account}:experiment-template/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"safety-lever","arnFormats":["arn:${Partition}:fis:${Region}:${Account}:safety-lever/${Id}"],"conditionKeys":[]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair that is allowed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair of a resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by a list of tag keys that are allowed in the request"},"fis:Operations":{"types":["ArrayOfString"],"description":"Filters access by the list of operations on the AWS service that is being affected by the AWS FIS action"},"fis:Percentage":{"types":["Numeric"],"description":"Filters access by the percentage of calls being affected by the AWS FIS action"},"fis:Service":{"types":["String"],"description":"Filters access by the AWS service that is being affected by the AWS FIS action"},"fis:Targets":{"types":["ArrayOfString"],"description":"Filters access by the list of resource ARNs being targeted by the AWS FIS action"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"fms","actions":{"AssociateAdminAccount":{"conditionKeys":[],"resources":[],"description":"Grants permission to set the AWS Firewall Manager administrator account and enables the service in all organization accounts","accessLevel":"Write","resourceTypes":[]},"AssociateThirdPartyFirewall":{"conditionKeys":[],"resources":[],"description":"Grants permission to set the Firewall Manager administrator as a tenant administrator of a third-party firewall service","accessLevel":"Write","resourceTypes":[]},"BatchAssociateResource":{"conditionKeys":[],"resources":[{"name":"resource-set"}],"description":"Grants permission to associate resources to an AWS Firewall Manager resource set","accessLevel":"Write","resourceTypes":[{"name":"resource-set","required":true}]},"BatchDisassociateResource":{"conditionKeys":[],"resources":[{"name":"resource-set"}],"description":"Grants permission to disassociate resources from an AWS Firewall Manager resource set","accessLevel":"Write","resourceTypes":[{"name":"resource-set","required":true}]},"DeleteAppsList":{"conditionKeys":[],"resources":[{"name":"applications-list"}],"description":"Grants permission to permanently deletes an AWS Firewall Manager applications list","accessLevel":"Write","resourceTypes":[{"name":"applications-list","required":true}]},"DeleteNotificationChannel":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete an AWS Firewall Manager association with the IAM role and the Amazon Simple Notification Service (SNS) topic that is used to notify the FM administrator about major FM events and errors across the organization","accessLevel":"Write","resourceTypes":[]},"DeletePolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"policy"}],"description":"Grants permission to permanently delete an AWS Firewall Manager policy","accessLevel":"Write","resourceTypes":[{"name":"policy","required":true}]},"DeleteProtocolsList":{"conditionKeys":[],"resources":[{"name":"protocols-list"}],"description":"Grants permission to permanently deletes an AWS Firewall Manager protocols list","accessLevel":"Write","resourceTypes":[{"name":"protocols-list","required":true}]},"DeleteResourceSet":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"resource-set"}],"description":"Grants permission to permanently delete an AWS Firewall Manager resource set","accessLevel":"Write","resourceTypes":[{"name":"resource-set","required":true}]},"DisassociateAdminAccount":{"conditionKeys":[],"resources":[],"description":"Grants permission to disassociate the account that has been set as the AWS Firewall Manager administrator account and and disables the service in all organization accounts","accessLevel":"Write","resourceTypes":[]},"DisassociateThirdPartyFirewall":{"conditionKeys":[],"resources":[],"description":"Grants permission to disassociate a Firewall Manager administrator from a third-party firewall tenant","accessLevel":"Write","resourceTypes":[]},"GetAdminAccount":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the AWS Organizations account that is associated with AWS Firewall Manager as the AWS Firewall Manager administrator","accessLevel":"Read","resourceTypes":[]},"GetAdminScope":{"conditionKeys":[],"resources":[],"description":"Grants permission to return information about the specified account's administrative scope","accessLevel":"Read","resourceTypes":[]},"GetAppsList":{"conditionKeys":[],"resources":[{"name":"applications-list"}],"description":"Grants permission to return information about the specified AWS Firewall Manager applications list","accessLevel":"Read","resourceTypes":[{"name":"applications-list","required":true}]},"GetComplianceDetail":{"conditionKeys":[],"resources":[{"name":"policy"}],"description":"Grants permission to retrieve detailed compliance information about the specified member account. Details include resources that are in and out of compliance with the specified policy","accessLevel":"Read","resourceTypes":[{"name":"policy","required":true}]},"GetNotificationChannel":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about the Amazon Simple Notification Service (SNS) topic that is used to record AWS Firewall Manager SNS logs","accessLevel":"Read","resourceTypes":[]},"GetPolicy":{"conditionKeys":[],"resources":[{"name":"policy"}],"description":"Grants permission to retrieve information about the specified AWS Firewall Manager policy","accessLevel":"Read","resourceTypes":[{"name":"policy","required":true}]},"GetProtectionStatus":{"conditionKeys":[],"resources":[{"name":"policy"}],"description":"Grants permission to retrieve policy-level attack summary information in the event of a potential DDoS attack","accessLevel":"Read","resourceTypes":[{"name":"policy","required":true}]},"GetProtocolsList":{"conditionKeys":[],"resources":[{"name":"protocols-list"}],"description":"Grants permission to return information about the specified AWS Firewall Manager protocols list","accessLevel":"Read","resourceTypes":[{"name":"protocols-list","required":true}]},"GetResourceSet":{"conditionKeys":[],"resources":[{"name":"resource-set"}],"description":"Grants permission to retrieve information about the specified AWS Firewall Manager resource set","accessLevel":"Read","resourceTypes":[{"name":"resource-set","required":true}]},"GetThirdPartyFirewallAssociationStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the onboarding status of a Firewall Manager administrator account to third-party firewall vendor tenant","accessLevel":"Read","resourceTypes":[]},"GetViolationDetails":{"conditionKeys":[],"resources":[{"name":"policy"}],"description":"Grants permission to retrieve violations for a resource based on the specified AWS Firewall Manager policy and AWS account","accessLevel":"Read","resourceTypes":[{"name":"policy","required":true}]},"ListAdminAccountsForOrganization":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a AdminAccounts object that lists the Firewall Manager administrators within the organization that are onboarded to Firewall Manager by AssociateAdminAccount","accessLevel":"List","resourceTypes":[]},"ListAdminsManagingAccount":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the accounts that are managing the specified AWS Organizations member account","accessLevel":"List","resourceTypes":[]},"ListAppsLists":{"conditionKeys":[],"resources":[],"description":"Grants permission to return an array of AppsListDataSummary objects","accessLevel":"List","resourceTypes":[]},"ListComplianceStatus":{"conditionKeys":[],"resources":[{"name":"policy"}],"description":"Grants permission to retrieve an array of PolicyComplianceStatus objects in the response. Use PolicyComplianceStatus to get a summary of which member accounts are protected by the specified policy","accessLevel":"List","resourceTypes":[{"name":"policy","required":true}]},"ListDiscoveredResources":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of resources in the organization's accounts that are available to be associated with a resource set","accessLevel":"List","resourceTypes":[]},"ListMemberAccounts":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of member account ids if the caller is FMS admin account","accessLevel":"List","resourceTypes":[]},"ListPolicies":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of PolicySummary objects in the response","accessLevel":"List","resourceTypes":[]},"ListProtocolsLists":{"conditionKeys":[],"resources":[],"description":"Grants permission to return an array of ProtocolsListDataSummary objects","accessLevel":"List","resourceTypes":[]},"ListResourceSetResources":{"conditionKeys":[],"resources":[{"name":"resource-set"}],"description":"Grants permission to retrieve an array of resources that are currently associated to a resource set","accessLevel":"List","resourceTypes":[{"name":"resource-set","required":true}]},"ListResourceSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of ResourceSetSummary objects","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"policy"}],"description":"Grants permission to list Tags for a given resource","accessLevel":"Read","resourceTypes":[{"name":"policy","required":true}]},"ListThirdPartyFirewallFirewallPolicies":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of all of the third-party firewall policies that are associated with the third-party firewall administrator's account","accessLevel":"List","resourceTypes":[]},"PutAdminAccount":{"conditionKeys":[],"resources":[],"description":"Grants permission to create or update an Firewall Manager administrator account","accessLevel":"Write","resourceTypes":[]},"PutAppsList":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"applications-list"}],"description":"Grants permission to create an AWS Firewall Manager applications list","accessLevel":"Write","resourceTypes":[{"name":"applications-list","required":true}]},"PutNotificationChannel":{"conditionKeys":[],"resources":[],"description":"Grants permission to designate the IAM role and Amazon Simple Notification Service (SNS) topic that AWS Firewall Manager (FM) could use to notify the FM administrator about major FM events and errors across the organization","accessLevel":"Write","resourceTypes":[]},"PutPolicy":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"policy"}],"description":"Grants permission to create an AWS Firewall Manager policy","accessLevel":"Write","resourceTypes":[{"name":"policy","required":true}]},"PutProtocolsList":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"protocols-list"}],"description":"Grants permission to creates an AWS Firewall Manager protocols list","accessLevel":"Write","resourceTypes":[{"name":"protocols-list","required":true}]},"PutResourceSet":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"resource-set"}],"description":"Grants permission to create an AWS Firewall Manager resource set","accessLevel":"Write","resourceTypes":[{"name":"resource-set","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"applications-list"},{"name":"policy"},{"name":"protocols-list"},{"name":"resource-set"}],"description":"Grants permission to add a Tag to a given resource","accessLevel":"Tagging","resourceTypes":[{"name":"applications-list","required":false},{"name":"policy","required":false},{"name":"protocols-list","required":false},{"name":"resource-set","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"applications-list"},{"name":"policy"},{"name":"protocols-list"},{"name":"resource-set"}],"description":"Grants permission to remove a Tag from a given resource","accessLevel":"Tagging","resourceTypes":[{"name":"applications-list","required":false},{"name":"policy","required":false},{"name":"protocols-list","required":false},{"name":"resource-set","required":false}]}},"resources":[{"name":"applications-list","arnFormats":["arn:${Partition}:fms:${Region}:${Account}:applications-list/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"policy","arnFormats":["arn:${Partition}:fms:${Region}:${Account}:policy/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"protocols-list","arnFormats":["arn:${Partition}:fms:${Region}:${Account}:protocols-list/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"resource-set","arnFormats":["arn:${Partition}:fms:${Region}:${Account}:resource-set/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the the presence of tag keys in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"forecast","actions":{"CreateAutoPredictor":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an auto predictor","accessLevel":"Write","resourceTypes":[]},"CreateDataset":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"dataset"}],"description":"Grants permission to create a dataset","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}]},"CreateDatasetGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"datasetGroup"}],"description":"Grants permission to create a dataset group","accessLevel":"Write","resourceTypes":[{"name":"datasetGroup","required":true}]},"CreateDatasetImportJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"datasetImportJob"}],"description":"Grants permission to create a dataset import job","accessLevel":"Write","resourceTypes":[{"name":"datasetImportJob","required":true}]},"CreateExplainability":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"forecast"}],"description":"Grants permission to create an explainability","accessLevel":"Write","resourceTypes":[{"name":"forecast","required":true}]},"CreateExplainabilityExport":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"explainability"}],"description":"Grants permission to create an explainability export using an explainability resource","accessLevel":"Write","resourceTypes":[{"name":"explainability","required":true}]},"CreateForecast":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"predictor"}],"description":"Grants permission to create a forecast","accessLevel":"Write","resourceTypes":[{"name":"predictor","required":true}]},"CreateForecastEndpoint":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"predictor"}],"description":"Grants permission to create an endpoint using a Predictor resource","accessLevel":"Write","resourceTypes":[{"name":"predictor","required":true}],"permissionOnly":true},"CreateForecastExportJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"forecast"}],"description":"Grants permission to create a forecast export job using a forecast resource","accessLevel":"Write","resourceTypes":[{"name":"forecast","required":true}]},"CreateMonitor":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"predictor"}],"description":"Grants permission to create an monitor using a Predictor resource","accessLevel":"Write","resourceTypes":[{"name":"predictor","required":true}]},"CreatePredictor":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"datasetGroup"}],"description":"Grants permission to create a predictor","accessLevel":"Write","resourceTypes":[{"name":"datasetGroup","required":true}]},"CreatePredictorBacktestExportJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"predictor"}],"description":"Grants permission to create a predictor backtest export job using a predictor","accessLevel":"Write","resourceTypes":[{"name":"predictor","required":true}]},"CreateWhatIfAnalysis":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"forecast"}],"description":"Grants permission to create a what-if analysis","accessLevel":"Write","resourceTypes":[{"name":"forecast","required":true}]},"CreateWhatIfForecast":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"whatIfAnalysis"}],"description":"Grants permission to create a what-if forecast","accessLevel":"Write","resourceTypes":[{"name":"whatIfAnalysis","required":true}]},"CreateWhatIfForecastExport":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"whatIfForecast"}],"description":"Grants permission to create a what-if forecast export using what-if forecast resources","accessLevel":"Write","resourceTypes":[{"name":"whatIfForecast","required":true}]},"DeleteDataset":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to delete a dataset","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}]},"DeleteDatasetGroup":{"conditionKeys":[],"resources":[{"name":"datasetGroup"}],"description":"Grants permission to delete a dataset group","accessLevel":"Write","resourceTypes":[{"name":"datasetGroup","required":true}]},"DeleteDatasetImportJob":{"conditionKeys":[],"resources":[{"name":"datasetImportJob"}],"description":"Grants permission to delete a dataset import job","accessLevel":"Write","resourceTypes":[{"name":"datasetImportJob","required":true}]},"DeleteExplainability":{"conditionKeys":[],"resources":[{"name":"explainability"}],"description":"Grants permission to delete an explainability","accessLevel":"Write","resourceTypes":[{"name":"explainability","required":true}]},"DeleteExplainabilityExport":{"conditionKeys":[],"resources":[{"name":"explainabilityExport"}],"description":"Grants permission to delete an explainability export","accessLevel":"Write","resourceTypes":[{"name":"explainabilityExport","required":true}]},"DeleteForecast":{"conditionKeys":[],"resources":[{"name":"forecast"}],"description":"Grants permission to delete a forecast","accessLevel":"Write","resourceTypes":[{"name":"forecast","required":true}]},"DeleteForecastEndpoint":{"conditionKeys":[],"resources":[{"name":"endpoint"}],"description":"Grants permission to delete an endpoint resource","accessLevel":"Write","resourceTypes":[{"name":"endpoint","required":true}],"permissionOnly":true},"DeleteForecastExportJob":{"conditionKeys":[],"resources":[{"name":"forecastExport"}],"description":"Grants permission to delete a forecast export job","accessLevel":"Write","resourceTypes":[{"name":"forecastExport","required":true}]},"DeleteMonitor":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to delete a monitor resource","accessLevel":"Write","resourceTypes":[{"name":"monitor","required":true}]},"DeletePredictor":{"conditionKeys":[],"resources":[{"name":"predictor"}],"description":"Grants permission to delete a predictor","accessLevel":"Write","resourceTypes":[{"name":"predictor","required":true}]},"DeletePredictorBacktestExportJob":{"conditionKeys":[],"resources":[{"name":"predictorBacktestExportJob"}],"description":"Grants permission to delete a predictor backtest export job","accessLevel":"Write","resourceTypes":[{"name":"predictorBacktestExportJob","required":true}]},"DeleteResourceTree":{"conditionKeys":[],"resources":[{"name":"dataset"},{"name":"datasetGroup"},{"name":"datasetImportJob"},{"name":"endpoint"},{"name":"explainability"},{"name":"explainabilityExport"},{"name":"forecast"},{"name":"forecastExport"},{"name":"monitor"},{"name":"predictor"},{"name":"predictorBacktestExportJob"},{"name":"whatIfAnalysis"},{"name":"whatIfForecast"},{"name":"whatIfForecastExport"}],"description":"Grants permission to delete a resource and its child resources","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true},{"name":"datasetGroup","required":true},{"name":"datasetImportJob","required":true},{"name":"endpoint","required":true},{"name":"explainability","required":true},{"name":"explainabilityExport","required":true},{"name":"forecast","required":true},{"name":"forecastExport","required":true},{"name":"monitor","required":true},{"name":"predictor","required":true},{"name":"predictorBacktestExportJob","required":true},{"name":"whatIfAnalysis","required":true},{"name":"whatIfForecast","required":true},{"name":"whatIfForecastExport","required":true}]},"DeleteWhatIfAnalysis":{"conditionKeys":[],"resources":[{"name":"whatIfAnalysis"}],"description":"Grants permission to delete a what-if analysis","accessLevel":"Write","resourceTypes":[{"name":"whatIfAnalysis","required":true}]},"DeleteWhatIfForecast":{"conditionKeys":[],"resources":[{"name":"whatIfForecast"}],"description":"Grants permission to delete a what-if forecast","accessLevel":"Write","resourceTypes":[{"name":"whatIfForecast","required":true}]},"DeleteWhatIfForecastExport":{"conditionKeys":[],"resources":[{"name":"whatIfForecastExport"}],"description":"Grants permission to delete a what-if forecast export","accessLevel":"Write","resourceTypes":[{"name":"whatIfForecastExport","required":true}]},"DescribeAutoPredictor":{"conditionKeys":[],"resources":[{"name":"predictor"}],"description":"Grants permission to describe an auto predictor","accessLevel":"Read","resourceTypes":[{"name":"predictor","required":true}]},"DescribeDataset":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to describe a dataset","accessLevel":"Read","resourceTypes":[{"name":"dataset","required":true}]},"DescribeDatasetGroup":{"conditionKeys":[],"resources":[{"name":"datasetGroup"}],"description":"Grants permission to describe a dataset group","accessLevel":"Read","resourceTypes":[{"name":"datasetGroup","required":true}]},"DescribeDatasetImportJob":{"conditionKeys":[],"resources":[{"name":"datasetImportJob"}],"description":"Grants permission to describe a dataset import job","accessLevel":"Read","resourceTypes":[{"name":"datasetImportJob","required":true}]},"DescribeExplainability":{"conditionKeys":[],"resources":[{"name":"explainability"}],"description":"Grants permission to describe an explainability","accessLevel":"Read","resourceTypes":[{"name":"explainability","required":true}]},"DescribeExplainabilityExport":{"conditionKeys":[],"resources":[{"name":"explainabilityExport"}],"description":"Grants permission to describe an explainability export","accessLevel":"Read","resourceTypes":[{"name":"explainabilityExport","required":true}]},"DescribeForecast":{"conditionKeys":[],"resources":[{"name":"forecast"}],"description":"Grants permission to describe a forecast","accessLevel":"Read","resourceTypes":[{"name":"forecast","required":true}]},"DescribeForecastEndpoint":{"conditionKeys":[],"resources":[{"name":"endpoint"}],"description":"Grants permission to describe an endpoint resource","accessLevel":"Read","resourceTypes":[{"name":"endpoint","required":true}],"permissionOnly":true},"DescribeForecastExportJob":{"conditionKeys":[],"resources":[{"name":"forecastExport"}],"description":"Grants permission to describe a forecast export job","accessLevel":"Read","resourceTypes":[{"name":"forecastExport","required":true}]},"DescribeMonitor":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to describe an monitor resource","accessLevel":"Read","resourceTypes":[{"name":"monitor","required":true}]},"DescribePredictor":{"conditionKeys":[],"resources":[{"name":"predictor"}],"description":"Grants permission to describe a predictor","accessLevel":"Read","resourceTypes":[{"name":"predictor","required":true}]},"DescribePredictorBacktestExportJob":{"conditionKeys":[],"resources":[{"name":"predictorBacktestExportJob"}],"description":"Grants permission to describe a predictor backtest export job","accessLevel":"Read","resourceTypes":[{"name":"predictorBacktestExportJob","required":true}]},"DescribeWhatIfAnalysis":{"conditionKeys":[],"resources":[{"name":"whatIfAnalysis"}],"description":"Grants permission to describe a what-if analysis","accessLevel":"Read","resourceTypes":[{"name":"whatIfAnalysis","required":true}]},"DescribeWhatIfForecast":{"conditionKeys":[],"resources":[{"name":"whatIfForecast"}],"description":"Grants permission to describe a what-if forecast","accessLevel":"Read","resourceTypes":[{"name":"whatIfForecast","required":true}]},"DescribeWhatIfForecastExport":{"conditionKeys":[],"resources":[{"name":"whatIfForecastExport"}],"description":"Grants permission to describe a what-if forecast export","accessLevel":"Read","resourceTypes":[{"name":"whatIfForecastExport","required":true}]},"GetAccuracyMetrics":{"conditionKeys":[],"resources":[{"name":"predictor"}],"description":"Grants permission to get the Accuracy Metrics for a predictor","accessLevel":"Read","resourceTypes":[{"name":"predictor","required":true}]},"GetRecentForecastContext":{"conditionKeys":[],"resources":[{"name":"endpoint"}],"description":"Grants permission to get the forecast context of a timeseries for an endpoint","accessLevel":"Read","resourceTypes":[{"name":"endpoint","required":true}],"permissionOnly":true},"InvokeForecastEndpoint":{"conditionKeys":[],"resources":[{"name":"endpoint"}],"description":"Grants permission to invoke the endpoint to get forecast for a timeseries","accessLevel":"Read","resourceTypes":[{"name":"endpoint","required":true}],"permissionOnly":true},"ListDatasetGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the dataset groups","accessLevel":"Read","resourceTypes":[]},"ListDatasetImportJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the dataset import jobs","accessLevel":"Read","resourceTypes":[]},"ListDatasets":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the datasets","accessLevel":"Read","resourceTypes":[]},"ListExplainabilities":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the explainabilities","accessLevel":"Read","resourceTypes":[]},"ListExplainabilityExports":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the explainability exports","accessLevel":"Read","resourceTypes":[]},"ListForecastExportJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the forecast export jobs","accessLevel":"Read","resourceTypes":[]},"ListForecasts":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the forecasts","accessLevel":"Read","resourceTypes":[]},"ListMonitorEvaluations":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to list all the monitor evaluation result for a monitor","accessLevel":"Read","resourceTypes":[{"name":"monitor","required":true}]},"ListMonitors":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the monitor resources","accessLevel":"Read","resourceTypes":[]},"ListPredictorBacktestExportJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the predictor backtest export jobs","accessLevel":"Read","resourceTypes":[]},"ListPredictors":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the predictors","accessLevel":"Read","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"dataset"},{"name":"datasetGroup"},{"name":"datasetImportJob"},{"name":"endpoint"},{"name":"explainability"},{"name":"explainabilityExport"},{"name":"forecast"},{"name":"forecastExport"},{"name":"monitor"},{"name":"predictor"},{"name":"predictorBacktestExportJob"},{"name":"whatIfAnalysis"},{"name":"whatIfForecast"},{"name":"whatIfForecastExport"}],"description":"Grants permission to list the tags for an Amazon Forecast resource","accessLevel":"Read","resourceTypes":[{"name":"dataset","required":false},{"name":"datasetGroup","required":false},{"name":"datasetImportJob","required":false},{"name":"endpoint","required":false},{"name":"explainability","required":false},{"name":"explainabilityExport","required":false},{"name":"forecast","required":false},{"name":"forecastExport","required":false},{"name":"monitor","required":false},{"name":"predictor","required":false},{"name":"predictorBacktestExportJob","required":false},{"name":"whatIfAnalysis","required":false},{"name":"whatIfForecast","required":false},{"name":"whatIfForecastExport","required":false}]},"ListWhatIfAnalyses":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the what-if analyses","accessLevel":"Read","resourceTypes":[]},"ListWhatIfForecastExports":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the what-if forecast exports","accessLevel":"Read","resourceTypes":[]},"ListWhatIfForecasts":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the what-if forecasts","accessLevel":"Read","resourceTypes":[]},"QueryForecast":{"conditionKeys":[],"resources":[{"name":"forecast"}],"description":"Grants permission to retrieve a forecast for a single item","accessLevel":"Read","resourceTypes":[{"name":"forecast","required":true}]},"QueryWhatIfForecast":{"conditionKeys":[],"resources":[{"name":"whatIfForecast"}],"description":"Grants permission to retrieve a what-if forecast for a single item","accessLevel":"Read","resourceTypes":[{"name":"whatIfForecast","required":true}]},"ResumeResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"monitor"}],"description":"Grants permission to resume Amazon Forecast resource jobs","accessLevel":"Write","resourceTypes":[{"name":"monitor","required":true}]},"StopResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"datasetImportJob"},{"name":"endpoint"},{"name":"explainability"},{"name":"explainabilityExport"},{"name":"forecast"},{"name":"forecastExport"},{"name":"monitor"},{"name":"predictor"},{"name":"predictorBacktestExportJob"},{"name":"whatIfAnalysis"},{"name":"whatIfForecast"},{"name":"whatIfForecastExport"}],"description":"Grants permission to stop Amazon Forecast resource jobs","accessLevel":"Write","resourceTypes":[{"name":"datasetImportJob","required":true},{"name":"endpoint","required":true},{"name":"explainability","required":true},{"name":"explainabilityExport","required":true},{"name":"forecast","required":true},{"name":"forecastExport","required":true},{"name":"monitor","required":true},{"name":"predictor","required":true},{"name":"predictorBacktestExportJob","required":true},{"name":"whatIfAnalysis","required":true},{"name":"whatIfForecast","required":true},{"name":"whatIfForecastExport","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"dataset"},{"name":"datasetGroup"},{"name":"datasetImportJob"},{"name":"endpoint"},{"name":"explainability"},{"name":"explainabilityExport"},{"name":"forecast"},{"name":"forecastExport"},{"name":"monitor"},{"name":"predictor"},{"name":"predictorBacktestExportJob"},{"name":"whatIfAnalysis"},{"name":"whatIfForecast"},{"name":"whatIfForecastExport"}],"description":"Grants permission to associate the specified tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"dataset","required":false},{"name":"datasetGroup","required":false},{"name":"datasetImportJob","required":false},{"name":"endpoint","required":false},{"name":"explainability","required":false},{"name":"explainabilityExport","required":false},{"name":"forecast","required":false},{"name":"forecastExport","required":false},{"name":"monitor","required":false},{"name":"predictor","required":false},{"name":"predictorBacktestExportJob","required":false},{"name":"whatIfAnalysis","required":false},{"name":"whatIfForecast","required":false},{"name":"whatIfForecastExport","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"dataset"},{"name":"datasetGroup"},{"name":"datasetImportJob"},{"name":"endpoint"},{"name":"explainability"},{"name":"explainabilityExport"},{"name":"forecast"},{"name":"forecastExport"},{"name":"monitor"},{"name":"predictor"},{"name":"predictorBacktestExportJob"},{"name":"whatIfAnalysis"},{"name":"whatIfForecast"},{"name":"whatIfForecastExport"}],"description":"Grants permission to delete the specified tags for a resource","accessLevel":"Tagging","resourceTypes":[{"name":"dataset","required":false},{"name":"datasetGroup","required":false},{"name":"datasetImportJob","required":false},{"name":"endpoint","required":false},{"name":"explainability","required":false},{"name":"explainabilityExport","required":false},{"name":"forecast","required":false},{"name":"forecastExport","required":false},{"name":"monitor","required":false},{"name":"predictor","required":false},{"name":"predictorBacktestExportJob","required":false},{"name":"whatIfAnalysis","required":false},{"name":"whatIfForecast","required":false},{"name":"whatIfForecastExport","required":false}]},"UpdateDatasetGroup":{"conditionKeys":[],"resources":[{"name":"dataset"},{"name":"datasetGroup"}],"description":"Grants permission to update a dataset group","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true},{"name":"datasetGroup","required":true}]}},"resources":[{"name":"algorithm","arnFormats":["arn:${Partition}:forecast:::algorithm/${ResourceId}"],"conditionKeys":[]},{"name":"dataset","arnFormats":["arn:${Partition}:forecast:${Region}:${Account}:dataset/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"datasetGroup","arnFormats":["arn:${Partition}:forecast:${Region}:${Account}:dataset-group/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"datasetImportJob","arnFormats":["arn:${Partition}:forecast:${Region}:${Account}:dataset-import-job/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"endpoint","arnFormats":["arn:${Partition}:forecast:${Region}:${Account}:forecast-endpoint/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"explainability","arnFormats":["arn:${Partition}:forecast:${Region}:${Account}:explainability/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"explainabilityExport","arnFormats":["arn:${Partition}:forecast:${Region}:${Account}:explainability-export/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"forecast","arnFormats":["arn:${Partition}:forecast:${Region}:${Account}:forecast/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"forecastExport","arnFormats":["arn:${Partition}:forecast:${Region}:${Account}:forecast-export-job/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"monitor","arnFormats":["arn:${Partition}:forecast:${Region}:${Account}:monitor/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"predictor","arnFormats":["arn:${Partition}:forecast:${Region}:${Account}:predictor/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"predictorBacktestExportJob","arnFormats":["arn:${Partition}:forecast:${Region}:${Account}:predictor-backtest-export-job/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"whatIfAnalysis","arnFormats":["arn:${Partition}:forecast:${Region}:${Account}:what-if-analysis/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"whatIfForecast","arnFormats":["arn:${Partition}:forecast:${Region}:${Account}:what-if-forecast/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"whatIfForecastExport","arnFormats":["arn:${Partition}:forecast:${Region}:${Account}:what-if-forecast-export/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"frauddetector","actions":{"BatchCreateVariable":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a batch of variables","accessLevel":"Write","resourceTypes":[]},"BatchGetVariable":{"conditionKeys":[],"resources":[{"name":"variable"}],"description":"Grants permission to get a batch of variables","accessLevel":"List","resourceTypes":[{"name":"variable","required":true}]},"CancelBatchImportJob":{"conditionKeys":[],"resources":[{"name":"batch-import"}],"description":"Grants permission to cancel the specified batch import job","accessLevel":"Write","resourceTypes":[{"name":"batch-import","required":true}]},"CancelBatchPredictionJob":{"conditionKeys":[],"resources":[{"name":"batch-prediction"}],"description":"Grants permission to cancel the specified batch prediction job","accessLevel":"Write","resourceTypes":[{"name":"batch-prediction","required":true}]},"CreateBatchImportJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"batch-import"},{"name":"event-type"}],"description":"Grants permission to create a batch import job","accessLevel":"Write","resourceTypes":[{"name":"batch-import","required":true},{"name":"event-type","required":true}]},"CreateBatchPredictionJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"batch-prediction"},{"name":"detector"},{"name":"detector-version"},{"name":"event-type"}],"description":"Grants permission to create a batch prediction job","accessLevel":"Write","resourceTypes":[{"name":"batch-prediction","required":true},{"name":"detector","required":true},{"name":"detector-version","required":true},{"name":"event-type","required":true}]},"CreateDetectorVersion":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"detector"},{"name":"external-model"},{"name":"model-version"}],"description":"Grants permission to create a detector version. The detector version starts in a DRAFT status","accessLevel":"Write","resourceTypes":[{"name":"detector","required":true},{"name":"external-model","required":false},{"name":"model-version","required":false}]},"CreateList":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a list","accessLevel":"Write","resourceTypes":[]},"CreateModel":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"event-type"},{"name":"model"}],"description":"Grants permission to create a model using the specified model type","accessLevel":"Write","resourceTypes":[{"name":"event-type","required":true},{"name":"model","required":true}]},"CreateModelVersion":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"model"}],"description":"Grants permission to create a version of the model using the specified model type and model id","accessLevel":"Write","resourceTypes":[{"name":"model","required":true}]},"CreateRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"detector"}],"description":"Grants permission to create a rule for use with the specified detector","accessLevel":"Write","resourceTypes":[{"name":"detector","required":true}]},"CreateVariable":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a variable","accessLevel":"Write","resourceTypes":[]},"DeleteBatchImportJob":{"conditionKeys":[],"resources":[{"name":"batch-import"}],"description":"Grants permission to delete a batch import job","accessLevel":"Write","resourceTypes":[{"name":"batch-import","required":true}]},"DeleteBatchPredictionJob":{"conditionKeys":[],"resources":[{"name":"batch-prediction"}],"description":"Grants permission to delete a batch prediction job","accessLevel":"Write","resourceTypes":[{"name":"batch-prediction","required":true}]},"DeleteDetector":{"conditionKeys":[],"resources":[{"name":"detector"}],"description":"Grants permission to delete the detector. Before deleting a detector, you must first delete all detector versions and rule versions associated with the detector","accessLevel":"Write","resourceTypes":[{"name":"detector","required":true}]},"DeleteDetectorVersion":{"conditionKeys":[],"resources":[{"name":"detector-version"}],"description":"Grants permission to delete the detector version. You cannot delete detector versions that are in ACTIVE status","accessLevel":"Write","resourceTypes":[{"name":"detector-version","required":true}]},"DeleteEntityType":{"conditionKeys":[],"resources":[{"name":"entity-type"}],"description":"Grants permission to delete an entity type. You cannot delete an entity type that is included in an event type","accessLevel":"Write","resourceTypes":[{"name":"entity-type","required":true}]},"DeleteEvent":{"conditionKeys":[],"resources":[{"name":"event-type"}],"description":"Grants permission to deletes the specified event","accessLevel":"Write","resourceTypes":[{"name":"event-type","required":true}]},"DeleteEventType":{"conditionKeys":[],"resources":[{"name":"event-type"}],"description":"Grants permission to delete an event type. You cannot delete an event type that is used in a detector or a model","accessLevel":"Write","resourceTypes":[{"name":"event-type","required":true}]},"DeleteEventsByEventType":{"conditionKeys":[],"resources":[{"name":"event-type"}],"description":"Grants permission to delete events for the specified event type","accessLevel":"Write","resourceTypes":[{"name":"event-type","required":true}]},"DeleteExternalModel":{"conditionKeys":[],"resources":[{"name":"external-model"}],"description":"Grants permission to remove a SageMaker model from Amazon Fraud Detector. You can remove an Amazon SageMaker model if it is not associated with a detector version","accessLevel":"Write","resourceTypes":[{"name":"external-model","required":true}]},"DeleteLabel":{"conditionKeys":[],"resources":[{"name":"label"}],"description":"Grants permission to delete a label. You cannot delete labels that are included in an event type in Amazon Fraud Detector. You cannot delete a label assigned to an event ID. You must first delete the relevant event ID","accessLevel":"Write","resourceTypes":[{"name":"label","required":true}]},"DeleteList":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"list"}],"description":"Grants permission to delete a list","accessLevel":"Write","resourceTypes":[{"name":"list","required":true}]},"DeleteModel":{"conditionKeys":[],"resources":[{"name":"model"}],"description":"Grants permission to delete a model. You can delete models and model versions in Amazon Fraud Detector, provided that they are not associated with a detector version","accessLevel":"Write","resourceTypes":[{"name":"model","required":true}]},"DeleteModelVersion":{"conditionKeys":[],"resources":[{"name":"model-version"}],"description":"Grants permission to delete a model version. You can delete models and model versions in Amazon Fraud Detector, provided that they are not associated with a detector version","accessLevel":"Write","resourceTypes":[{"name":"model-version","required":true}]},"DeleteOutcome":{"conditionKeys":[],"resources":[{"name":"outcome"}],"description":"Grants permission to delete an outcome. You cannot delete an outcome that is used in a rule version","accessLevel":"Write","resourceTypes":[{"name":"outcome","required":true}]},"DeleteRule":{"conditionKeys":[],"resources":[{"name":"rule"}],"description":"Grants permission to delete the rule. You cannot delete a rule if it is used by an ACTIVE or INACTIVE detector version","accessLevel":"Write","resourceTypes":[{"name":"rule","required":true}]},"DeleteVariable":{"conditionKeys":[],"resources":[{"name":"variable"}],"description":"Grants permission to delete a variable. You cannot delete variables that are included in an event type in Amazon Fraud Detector","accessLevel":"Write","resourceTypes":[{"name":"variable","required":true}]},"DescribeDetector":{"conditionKeys":[],"resources":[{"name":"detector"}],"description":"Grants permission to get all versions for a specified detector","accessLevel":"Read","resourceTypes":[{"name":"detector","required":true}]},"DescribeModelVersions":{"conditionKeys":[],"resources":[{"name":"model-version"}],"description":"Grants permission to get all of the model versions for the specified model type or for the specified model type and model ID. You can also get details for a single, specified model version","accessLevel":"Read","resourceTypes":[{"name":"model-version","required":false}]},"GetBatchImportJobValidationReport":{"conditionKeys":[],"resources":[{"name":"batch-import"}],"description":"Grants permission to get the data validation report of a specific batch import job","accessLevel":"Read","resourceTypes":[{"name":"batch-import","required":true}],"permissionOnly":true},"GetBatchImportJobs":{"conditionKeys":[],"resources":[{"name":"batch-import"}],"description":"Grants permission to get all batch import jobs or a specific job if you specify a job ID","accessLevel":"List","resourceTypes":[{"name":"batch-import","required":false}]},"GetBatchPredictionJobs":{"conditionKeys":[],"resources":[{"name":"batch-prediction"}],"description":"Grants permission to get all batch prediction jobs or a specific job if you specify a job ID. This is a paginated API. If you provide a null maxResults, this action retrieves a maximum of 50 records per page. If you provide a maxResults, the value must be between 1 and 50. To get the next page results, provide the pagination token from the GetBatchPredictionJobsResponse as part of your request. A null pagination token fetches the records from the beginning","accessLevel":"List","resourceTypes":[{"name":"batch-prediction","required":false}]},"GetDeleteEventsByEventTypeStatus":{"conditionKeys":[],"resources":[{"name":"event-type"}],"description":"Grants permission to get a specific event type DeleteEventsByEventType API execution status","accessLevel":"Read","resourceTypes":[{"name":"event-type","required":true}]},"GetDetectorVersion":{"conditionKeys":[],"resources":[{"name":"detector-version"}],"description":"Grants permission to get a particular detector version","accessLevel":"Read","resourceTypes":[{"name":"detector-version","required":true}]},"GetDetectors":{"conditionKeys":[],"resources":[{"name":"detector"}],"description":"Grants permission to get all detectors or a single detector if a detectorId is specified. This is a paginated API. If you provide a null maxResults, this action retrieves a maximum of 10 records per page. If you provide a maxResults, the value must be between 5 and 10. To get the next page results, provide the pagination token from the GetDetectorsResponse as part of your request. A null pagination token fetches the records from the beginning","accessLevel":"List","resourceTypes":[{"name":"detector","required":false}]},"GetEntityTypes":{"conditionKeys":[],"resources":[{"name":"entity-type"}],"description":"Grants permission to get all entity types or a specific entity type if a name is specified. This is a paginated API. If you provide a null maxResults, this action retrieves a maximum of 10 records per page. If you provide a maxResults, the value must be between 5 and 10. To get the next page results, provide the pagination token from the GetEntityTypesResponse as part of your request. A null pagination token fetches the records from the beginning","accessLevel":"List","resourceTypes":[{"name":"entity-type","required":false}]},"GetEvent":{"conditionKeys":[],"resources":[{"name":"event-type"}],"description":"Grants permission to get the details of the specified event","accessLevel":"Read","resourceTypes":[{"name":"event-type","required":true}]},"GetEventPrediction":{"conditionKeys":[],"resources":[{"name":"detector"},{"name":"detector-version"},{"name":"event-type"}],"description":"Grants permission to evaluate an event against a detector version. If a version ID is not provided, the detector's (ACTIVE) version is used","accessLevel":"Read","resourceTypes":[{"name":"detector","required":true},{"name":"detector-version","required":true},{"name":"event-type","required":true}]},"GetEventPredictionMetadata":{"conditionKeys":[],"resources":[{"name":"detector"},{"name":"detector-version"},{"name":"event-type"}],"description":"Grants permission to get more details of a particular prediction","accessLevel":"Read","resourceTypes":[{"name":"detector","required":true},{"name":"detector-version","required":true},{"name":"event-type","required":true}]},"GetEventTypes":{"conditionKeys":[],"resources":[{"name":"event-type"}],"description":"Grants permission to get all event types or a specific event type if name is provided. This is a paginated API. If you provide a null maxResults, this action retrieves a maximum of 10 records per page. If you provide a maxResults, the value must be between 5 and 10. To get the next page results, provide the pagination token from the GetEventTypesResponse as part of your request. A null pagination token fetches the records from the beginning","accessLevel":"List","resourceTypes":[{"name":"event-type","required":false}]},"GetExternalModels":{"conditionKeys":[],"resources":[{"name":"external-model"}],"description":"Grants permission to get the details for one or more Amazon SageMaker models that have been imported into the service. This is a paginated API. If you provide a null maxResults, this actions retrieves a maximum of 10 records per page. If you provide a maxResults, the value must be between 5 and 10. To get the next page results, provide the pagination token from the GetExternalModelsResult as part of your request. A null pagination token fetches the records from the beginning","accessLevel":"List","resourceTypes":[{"name":"external-model","required":false}]},"GetKMSEncryptionKey":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the encryption key if a Key Management Service (KMS) customer master key (CMK) has been specified to be used to encrypt content in Amazon Fraud Detector","accessLevel":"Read","resourceTypes":[]},"GetLabels":{"conditionKeys":[],"resources":[{"name":"label"}],"description":"Grants permission to get all labels or a specific label if name is provided. This is a paginated API. If you provide a null maxResults, this action retrieves a maximum of 50 records per page. If you provide a maxResults, the value must be between 10 and 50. To get the next page results, provide the pagination token from the GetGetLabelsResponse as part of your request. A null pagination token fetches the records from the beginning","accessLevel":"List","resourceTypes":[{"name":"label","required":false}]},"GetListElements":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"list"}],"description":"Grants permission to get elements of a list","accessLevel":"Read","resourceTypes":[{"name":"list","required":true}]},"GetListsMetadata":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"list"}],"description":"Grants permission to get metadata about lists","accessLevel":"List","resourceTypes":[{"name":"list","required":false}]},"GetModelVersion":{"conditionKeys":[],"resources":[{"name":"model-version"}],"description":"Grants permission to get the details of the specified model version","accessLevel":"Read","resourceTypes":[{"name":"model-version","required":true}]},"GetModels":{"conditionKeys":[],"resources":[{"name":"model"}],"description":"Grants permission to get one or more models. Gets all models for the AWS account if no model type and no model id provided. Gets all models for the AWS account and model type, if the model type is specified but model id is not provided. Gets a specific model if (model type, model id) tuple is specified","accessLevel":"List","resourceTypes":[{"name":"model","required":false}]},"GetOutcomes":{"conditionKeys":[],"resources":[{"name":"outcome"}],"description":"Grants permission to get one or more outcomes. This is a paginated API. If you provide a null maxResults, this actions retrieves a maximum of 100 records per page. If you provide a maxResults, the value must be between 50 and 100. To get the next page results, provide the pagination token from the GetOutcomesResult as part of your request. A null pagination token fetches the records from the beginning","accessLevel":"List","resourceTypes":[{"name":"outcome","required":false}]},"GetRules":{"conditionKeys":[],"resources":[{"name":"rule"}],"description":"Grants permission to get all rules for a detector (paginated) if ruleId and ruleVersion are not specified. Gets all rules for the detector and the ruleId if present (paginated). Gets a specific rule if both the ruleId and the ruleVersion are specified","accessLevel":"List","resourceTypes":[{"name":"rule","required":false}]},"GetVariables":{"conditionKeys":[],"resources":[{"name":"variable"}],"description":"Grants permission to get all of the variables or the specific variable. This is a paginated API. Providing null maxSizePerPage results in retrieving maximum of 100 records per page. If you provide maxSizePerPage the value must be between 50 and 100. To get the next page result, a provide a pagination token from GetVariablesResult as part of your request. Null pagination token fetches the records from the beginning","accessLevel":"List","resourceTypes":[{"name":"variable","required":false}]},"ListEventPredictions":{"conditionKeys":[],"resources":[{"name":"detector"},{"name":"detector-version"},{"name":"event-type"}],"description":"Grants permission to get a list of past predictions","accessLevel":"List","resourceTypes":[{"name":"detector","required":false},{"name":"detector-version","required":false},{"name":"event-type","required":false}]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"batch-import"},{"name":"batch-prediction"},{"name":"detector"},{"name":"detector-version"},{"name":"entity-type"},{"name":"event-type"},{"name":"external-model"},{"name":"label"},{"name":"list"},{"name":"model"},{"name":"model-version"},{"name":"outcome"},{"name":"rule"},{"name":"variable"}],"description":"Grants permission to list all tags associated with the resource. This is a paginated API. To get the next page results, provide the pagination token from the response as part of your request. A null pagination token fetches the records from the beginning","accessLevel":"Read","resourceTypes":[{"name":"batch-import","required":false},{"name":"batch-prediction","required":false},{"name":"detector","required":false},{"name":"detector-version","required":false},{"name":"entity-type","required":false},{"name":"event-type","required":false},{"name":"external-model","required":false},{"name":"label","required":false},{"name":"list","required":false},{"name":"model","required":false},{"name":"model-version","required":false},{"name":"outcome","required":false},{"name":"rule","required":false},{"name":"variable","required":false}]},"PutDetector":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"detector"},{"name":"event-type"}],"description":"Grants permission to create or update a detector","accessLevel":"Write","resourceTypes":[{"name":"detector","required":true},{"name":"event-type","required":true}]},"PutEntityType":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"entity-type"}],"description":"Grants permission to create or update an entity type. An entity represents who is performing the event. As part of a fraud prediction, you pass the entity ID to indicate the specific entity who performed the event. An entity type classifies the entity. Example classifications include customer, merchant, or account","accessLevel":"Write","resourceTypes":[{"name":"entity-type","required":true}]},"PutEventType":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"event-type"}],"description":"Grants permission to create or update an event type. An event is a business activity that is evaluated for fraud risk. With Amazon Fraud Detector, you generate fraud predictions for events. An event type defines the structure for an event sent to Amazon Fraud Detector. This includes the variables sent as part of the event, the entity performing the event (such as a customer), and the labels that classify the event. Example event types include online payment transactions, account registrations, and authentications","accessLevel":"Write","resourceTypes":[{"name":"event-type","required":true}]},"PutExternalModel":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"event-type"},{"name":"external-model"}],"description":"Grants permission to create or update an Amazon SageMaker model endpoint. You can also use this action to update the configuration of the model endpoint, including the IAM role and/or the mapped variables","accessLevel":"Write","resourceTypes":[{"name":"event-type","required":true},{"name":"external-model","required":true}]},"PutKMSEncryptionKey":{"conditionKeys":[],"resources":[],"description":"Grants permission to specify the Key Management Service (KMS) customer master key (CMK) to be used to encrypt content in Amazon Fraud Detector","accessLevel":"Write","resourceTypes":[]},"PutLabel":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"label"}],"description":"Grants permission to create or update label. A label classifies an event as fraudulent or legitimate. Labels are associated with event types and used to train supervised machine learning models in Amazon Fraud Detector","accessLevel":"Write","resourceTypes":[{"name":"label","required":true}]},"PutOutcome":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"outcome"}],"description":"Grants permission to create or update an outcome","accessLevel":"Write","resourceTypes":[{"name":"outcome","required":true}]},"SendEvent":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"event-type"}],"description":"Grants permission to send event","accessLevel":"Write","resourceTypes":[{"name":"event-type","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"batch-import"},{"name":"batch-prediction"},{"name":"detector"},{"name":"detector-version"},{"name":"entity-type"},{"name":"event-type"},{"name":"external-model"},{"name":"label"},{"name":"list"},{"name":"model"},{"name":"model-version"},{"name":"outcome"},{"name":"rule"},{"name":"variable"},{"name":"variable"}],"description":"Grants permission to assign tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"batch-import","required":false},{"name":"batch-prediction","required":false},{"name":"detector","required":false},{"name":"detector-version","required":false},{"name":"entity-type","required":false},{"name":"event-type","required":false},{"name":"external-model","required":false},{"name":"label","required":false},{"name":"list","required":false},{"name":"model","required":false},{"name":"model-version","required":false},{"name":"outcome","required":false},{"name":"rule","required":false},{"name":"variable","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"batch-import"},{"name":"batch-prediction"},{"name":"detector"},{"name":"detector-version"},{"name":"entity-type"},{"name":"event-type"},{"name":"external-model"},{"name":"label"},{"name":"list"},{"name":"model"},{"name":"model-version"},{"name":"outcome"},{"name":"rule"},{"name":"variable"},{"name":"variable"}],"description":"Grants permission to remove tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"batch-import","required":false},{"name":"batch-prediction","required":false},{"name":"detector","required":false},{"name":"detector-version","required":false},{"name":"entity-type","required":false},{"name":"event-type","required":false},{"name":"external-model","required":false},{"name":"label","required":false},{"name":"list","required":false},{"name":"model","required":false},{"name":"model-version","required":false},{"name":"outcome","required":false},{"name":"rule","required":false},{"name":"variable","required":false}]},"UpdateDetectorVersion":{"conditionKeys":[],"resources":[{"name":"detector"},{"name":"external-model"},{"name":"model-version"}],"description":"Grants permission to update a detector version. The detector version attributes that you can update include models, external model endpoints, rules, rule execution mode, and description. You can only update a DRAFT detector version","accessLevel":"Write","resourceTypes":[{"name":"detector","required":true},{"name":"external-model","required":false},{"name":"model-version","required":false}]},"UpdateDetectorVersionMetadata":{"conditionKeys":[],"resources":[{"name":"detector-version"}],"description":"Grants permission to update the detector version's description. You can update the metadata for any detector version (DRAFT, ACTIVE, or INACTIVE)","accessLevel":"Write","resourceTypes":[{"name":"detector-version","required":true}]},"UpdateDetectorVersionStatus":{"conditionKeys":[],"resources":[{"name":"detector-version"}],"description":"Grants permission to update the detector version's status. You can perform the following promotions or demotions using UpdateDetectorVersionStatus: DRAFT to ACTIVE, ACTIVE to INACTIVE, and INACTIVE to ACTIVE","accessLevel":"Write","resourceTypes":[{"name":"detector-version","required":true}]},"UpdateEventLabel":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"event-type"}],"description":"Grants permission to update an existing event record's label value","accessLevel":"Write","resourceTypes":[{"name":"event-type","required":true}]},"UpdateList":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"list"}],"description":"Grants permission to update a list","accessLevel":"Write","resourceTypes":[{"name":"list","required":true}]},"UpdateModel":{"conditionKeys":[],"resources":[{"name":"model"}],"description":"Grants permission to update a model. You can update the description attribute using this action","accessLevel":"Write","resourceTypes":[{"name":"model","required":true}]},"UpdateModelVersion":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"model"}],"description":"Grants permission to update a model version. Updating a model version retrains an existing model version using updated training data and produces a new minor version of the model. You can update the training data set location and data access role attributes using this action. This action creates and trains a new minor version of the model, for example version 1.01, 1.02, 1.03","accessLevel":"Write","resourceTypes":[{"name":"model","required":true}]},"UpdateModelVersionStatus":{"conditionKeys":[],"resources":[{"name":"model-version"}],"description":"Grants permission to update the status of a model version","accessLevel":"Write","resourceTypes":[{"name":"model-version","required":true}]},"UpdateRuleMetadata":{"conditionKeys":[],"resources":[{"name":"rule"}],"description":"Grants permission to update a rule's metadata. The description attribute can be updated","accessLevel":"Write","resourceTypes":[{"name":"rule","required":true}]},"UpdateRuleVersion":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"rule"}],"description":"Grants permission to update a rule version resulting in a new rule version. Updates a rule version resulting in a new rule version (version 1, 2, 3 ...)","accessLevel":"Write","resourceTypes":[{"name":"rule","required":true}]},"UpdateVariable":{"conditionKeys":[],"resources":[{"name":"variable"}],"description":"Grants permission to update a variable","accessLevel":"Write","resourceTypes":[{"name":"variable","required":true}]}},"resources":[{"name":"batch-import","arnFormats":["arn:${Partition}:frauddetector:${Region}:${Account}:batch-import/${ResourcePath}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"batch-prediction","arnFormats":["arn:${Partition}:frauddetector:${Region}:${Account}:batch-prediction/${ResourcePath}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"detector","arnFormats":["arn:${Partition}:frauddetector:${Region}:${Account}:detector/${ResourcePath}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"detector-version","arnFormats":["arn:${Partition}:frauddetector:${Region}:${Account}:detector-version/${ResourcePath}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"entity-type","arnFormats":["arn:${Partition}:frauddetector:${Region}:${Account}:entity-type/${ResourcePath}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"event-type","arnFormats":["arn:${Partition}:frauddetector:${Region}:${Account}:event-type/${ResourcePath}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"external-model","arnFormats":["arn:${Partition}:frauddetector:${Region}:${Account}:external-model/${ResourcePath}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"label","arnFormats":["arn:${Partition}:frauddetector:${Region}:${Account}:label/${ResourcePath}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"list","arnFormats":["arn:${Partition}:frauddetector:${Region}:${Account}:list/${ResourcePath}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"model","arnFormats":["arn:${Partition}:frauddetector:${Region}:${Account}:model/${ResourcePath}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"model-version","arnFormats":["arn:${Partition}:frauddetector:${Region}:${Account}:model-version/${ResourcePath}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"outcome","arnFormats":["arn:${Partition}:frauddetector:${Region}:${Account}:outcome/${ResourcePath}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"rule","arnFormats":["arn:${Partition}:frauddetector:${Region}:${Account}:rule/${ResourcePath}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"variable","arnFormats":["arn:${Partition}:frauddetector:${Region}:${Account}:variable/${ResourcePath}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters actions based on the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters actions based on the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters actions based on the tag keys that are passed in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"freertos","actions":{"CreateSoftwareConfiguration":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"configuration"}],"description":"Grants permission to create a software configuration","accessLevel":"Write","resourceTypes":[{"name":"configuration","required":true}]},"CreateSubscription":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a subscription for FreeRTOS extended maintenance plan (EMP)","accessLevel":"Write","resourceTypes":[]},"DeleteSoftwareConfiguration":{"conditionKeys":[],"resources":[{"name":"configuration"}],"description":"Grants permission to delete the software configuration","accessLevel":"Write","resourceTypes":[{"name":"configuration","required":true}]},"DescribeHardwarePlatform":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the hardware platform","accessLevel":"Read","resourceTypes":[]},"DescribeSoftwareConfiguration":{"conditionKeys":[],"resources":[{"name":"configuration"}],"description":"Grants permission to describe the software configuration","accessLevel":"Read","resourceTypes":[{"name":"configuration","required":true}]},"DescribeSubscription":{"conditionKeys":[],"resources":[{"name":"subscription"}],"description":"Grants permission to describes the subscription for FreeRTOS extended maintenance plan (EMP)","accessLevel":"Read","resourceTypes":[{"name":"subscription","required":true}]},"GetEmpPatchUrl":{"conditionKeys":[],"resources":[],"description":"Grants permission to get URL for sotware patch-release, patch-diff and release notes under FreeRTOS extended maintenance plan (EMP)","accessLevel":"Read","resourceTypes":[]},"GetSoftwareURL":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the URL for Amazon FreeRTOS software download","accessLevel":"Read","resourceTypes":[]},"GetSoftwareURLForConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the URL for Amazon FreeRTOS software download based on the configuration","accessLevel":"Read","resourceTypes":[]},"GetSubscriptionBillingAmount":{"conditionKeys":[],"resources":[],"description":"Grants permission to fetch the subscription billing amount for FreeRTOS extended maintenance plan (EMP)","accessLevel":"Read","resourceTypes":[]},"ListFreeRTOSVersions":{"conditionKeys":[],"resources":[],"description":"Grants permission to lists versions of AmazonFreeRTOS","accessLevel":"List","resourceTypes":[]},"ListHardwarePlatforms":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the hardware platforms","accessLevel":"List","resourceTypes":[]},"ListHardwareVendors":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the hardware vendors","accessLevel":"List","resourceTypes":[]},"ListSoftwareConfigurations":{"conditionKeys":[],"resources":[],"description":"Grants permission to lists the software configurations","accessLevel":"List","resourceTypes":[]},"ListSoftwarePatches":{"conditionKeys":[],"resources":[],"description":"Grants permission to list software patches of subscription for FreeRTOS extended maintenance plan (EMP)","accessLevel":"List","resourceTypes":[]},"ListSubscriptionEmails":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the subscription emails for FreeRTOS extended maintenance plan (EMP)","accessLevel":"List","resourceTypes":[]},"ListSubscriptions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the subscriptions for FreeRTOS extended maintenance plan (EMP)","accessLevel":"List","resourceTypes":[]},"UpdateEmailRecipients":{"conditionKeys":[],"resources":[],"description":"Grants permission to update list of subscription email address for FreeRTOS extended maintenance plan (EMP)","accessLevel":"Write","resourceTypes":[]},"UpdateSoftwareConfiguration":{"conditionKeys":[],"resources":[{"name":"configuration"}],"description":"Grants permission to update the software configuration","accessLevel":"Write","resourceTypes":[{"name":"configuration","required":true}]},"VerifyEmail":{"conditionKeys":[],"resources":[],"description":"Grants permission to verify the email for FreeRTOS extended maintenance plan (EMP)","accessLevel":"Write","resourceTypes":[]}},"resources":[{"name":"configuration","arnFormats":["arn:${Partition}:freertos:${Region}:${Account}:configuration/${ConfigurationName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"subscription","arnFormats":["arn:${Partition}:freertos:${Region}:${Account}:subscription/${SubscriptionID}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key present in the request that the user makes to Amazon FreeRTOS"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key component attached to an Amazon FreeRTOS resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the list of all the tag key names associated with the resource in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"freetier","actions":{"GetAccountActivity":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a specific activity record","accessLevel":"Read","resourceTypes":[]},"GetAccountPlanState":{"conditionKeys":[],"resources":[],"description":"Grants permission to get all of the information related to the state of the account plan related to Free Tier","accessLevel":"Read","resourceTypes":[]},"GetFreeTierAlertPreference":{"conditionKeys":[],"resources":[],"description":"Grants permission to get free tier alert preference (email address)","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetFreeTierUsage":{"conditionKeys":[],"resources":[],"description":"Grants permission to get free tier usage limits and MTD usage status","accessLevel":"Read","resourceTypes":[]},"ListAccountActivities":{"conditionKeys":[],"resources":[],"description":"Grants permission to list available activities","accessLevel":"List","resourceTypes":[]},"PutFreeTierAlertPreference":{"conditionKeys":[],"resources":[],"description":"Grants permission to set free tier alert preference (email address)","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"UpgradeAccountPlan":{"conditionKeys":[],"resources":[],"description":"Grants permission to trigger an upgrade of account plan","accessLevel":"Write","resourceTypes":[]}},"resources":[],"conditionKeys":{}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"fsx","actions":{"AssociateFileGateway":{"conditionKeys":[],"resources":[{"name":"file-system"}],"description":"Grants permission to associate a File Gateway instance with an Amazon FSx for Windows File Server file system","accessLevel":"Write","resourceTypes":[{"name":"file-system","required":true}],"permissionOnly":true},"AssociateFileSystemAliases":{"conditionKeys":[],"resources":[{"name":"file-system"}],"description":"Grants permission to associate DNS aliases with an Amazon FSx for Windows File Server file system","accessLevel":"Write","resourceTypes":[{"name":"file-system","required":true}]},"BypassSnaplockEnterpriseRetention":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to allow deletion of an FSx for ONTAP SnapLock Enterprise volume that contains WORM (write once, read many) files with active retention periods","accessLevel":"Permissions management","resourceTypes":[{"name":"volume","required":true}],"permissionOnly":true},"CancelDataRepositoryTask":{"conditionKeys":[],"resources":[{"name":"task"}],"description":"Grants permission to cancel a data repository task","accessLevel":"Write","resourceTypes":[{"name":"task","required":true}]},"CopyBackup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"backup"}],"description":"Grants permission to copy a backup","accessLevel":"Write","resourceTypes":[{"name":"backup","required":true}],"dependentActions":["fsx:TagResource"]},"CopySnapshotAndUpdateVolume":{"conditionKeys":[],"resources":[{"name":"snapshot"},{"name":"volume"}],"description":"Grants permission to update an existing volume by using a snapshot from another Amazon FSx for OpenZFS file system","accessLevel":"Write","resourceTypes":[{"name":"snapshot","required":true},{"name":"volume","required":true}]},"CreateAndAttachS3AccessPoint":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to create and attach a S3 Access Point to a FSx File System","accessLevel":"Write","resourceTypes":[{"name":"volume","required":false}],"dependentActions":["s3:CreateAccessPoint","s3:GetAccessPoint","s3:PutAccessPointPolicy"]},"CreateBackup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"backup"},{"name":"file-system"},{"name":"volume"}],"description":"Grants permission to create a new backup of an Amazon FSx file system or an Amazon FSx volume","accessLevel":"Write","resourceTypes":[{"name":"backup","required":true},{"name":"file-system","required":false},{"name":"volume","required":false}],"dependentActions":["fsx:TagResource"]},"CreateDataRepositoryAssociation":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"association"},{"name":"file-system"}],"description":"Grants permission to create a new data respository association for an Amazon FSx for Lustre file system","accessLevel":"Write","resourceTypes":[{"name":"association","required":true},{"name":"file-system","required":true}],"dependentActions":["fsx:TagResource"]},"CreateDataRepositoryTask":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"file-system"},{"name":"task"}],"description":"Grants permission to create a new data respository task for an Amazon FSx for Lustre file system","accessLevel":"Write","resourceTypes":[{"name":"file-system","required":true},{"name":"task","required":true}],"dependentActions":["fsx:TagResource"]},"CreateFileCache":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"association"},{"name":"file-cache"}],"description":"Grants permission to create a new, empty, Amazon file cache","accessLevel":"Write","resourceTypes":[{"name":"file-cache","required":true},{"name":"association","required":false}],"dependentActions":["ec2:DescribeSecurityGroups","ec2:DescribeSubnets","ec2:DescribeVpcs","ec2:GetSecurityGroupsForVpc","fsx:CreateDataRepositoryAssociation","fsx:TagResource","logs:CreateLogGroup","logs:CreateLogStream","logs:PutLogEvents","s3:ListBucket"]},"CreateFileSystem":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"file-system"}],"description":"Grants permission to create a new, empty, Amazon FSx file system","accessLevel":"Write","resourceTypes":[{"name":"file-system","required":true}],"dependentActions":["ec2:GetSecurityGroupsForVpc","fsx:TagResource"]},"CreateFileSystemFromBackup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"backup"},{"name":"file-system"}],"description":"Grants permission to create a new Amazon FSx file system from an existing backup","accessLevel":"Write","resourceTypes":[{"name":"backup","required":true},{"name":"file-system","required":true}],"dependentActions":["ec2:GetSecurityGroupsForVpc","fsx:TagResource"]},"CreateSnapshot":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"snapshot"},{"name":"volume"}],"description":"Grants permission to create a new snapshot on a volume","accessLevel":"Write","resourceTypes":[{"name":"snapshot","required":true},{"name":"volume","required":true}],"dependentActions":["fsx:TagResource"]},"CreateStorageVirtualMachine":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"file-system"},{"name":"storage-virtual-machine"}],"description":"Grants permission to create a new storage virtual machine in an Amazon FSx for Ontap file system","accessLevel":"Write","resourceTypes":[{"name":"file-system","required":true},{"name":"storage-virtual-machine","required":true}],"dependentActions":["fsx:TagResource"]},"CreateVolume":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","fsx:ParentVolumeId","fsx:StorageVirtualMachineId"],"resources":[{"name":"snapshot"},{"name":"volume"}],"description":"Grants permission to create a new volume","accessLevel":"Write","resourceTypes":[{"name":"volume","required":true},{"name":"snapshot","required":false}],"dependentActions":["fsx:TagResource"]},"CreateVolumeFromBackup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","fsx:StorageVirtualMachineId"],"resources":[{"name":"backup"},{"name":"storage-virtual-machine"},{"name":"volume"}],"description":"Grants permission to create a new volume from backup","accessLevel":"Write","resourceTypes":[{"name":"backup","required":true},{"name":"storage-virtual-machine","required":true},{"name":"volume","required":true}],"dependentActions":["fsx:TagResource"]},"DeleteBackup":{"conditionKeys":[],"resources":[{"name":"backup"}],"description":"Grants permission to delete a backup, deleting its contents. After deletion, the backup no longer exists, and its data is no longer available","accessLevel":"Write","resourceTypes":[{"name":"backup","required":true}]},"DeleteDataRepositoryAssociation":{"conditionKeys":[],"resources":[{"name":"association"}],"description":"Grants permission to delete a data repository association","accessLevel":"Write","resourceTypes":[{"name":"association","required":true}]},"DeleteFileCache":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"association"},{"name":"file-cache"}],"description":"Grants permission to delete a file cache, deleting its contents","accessLevel":"Write","resourceTypes":[{"name":"file-cache","required":true},{"name":"association","required":false}],"dependentActions":["fsx:DeleteDataRepositoryAssociation"]},"DeleteFileSystem":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"backup"},{"name":"file-system"}],"description":"Grants permission to delete a file system, deleting its contents and any existing automatic backups of the file system","accessLevel":"Write","resourceTypes":[{"name":"file-system","required":true},{"name":"backup","required":false}],"dependentActions":["fsx:CreateBackup","fsx:TagResource"]},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to manage cross-account sharing of FSx volumes through AWS Resource Access Manager (RAM). PutResourcePolicy and GetResourcePolicy are also required","accessLevel":"Permissions management","resourceTypes":[{"name":"volume","required":true}],"permissionOnly":true},"DeleteSnapshot":{"conditionKeys":[],"resources":[{"name":"snapshot"}],"description":"Grants permission to delete a snapshot on a volume","accessLevel":"Write","resourceTypes":[{"name":"snapshot","required":true}]},"DeleteStorageVirtualMachine":{"conditionKeys":[],"resources":[{"name":"storage-virtual-machine"}],"description":"Grants permission to delete a storage virtual machine, deleting its contents","accessLevel":"Write","resourceTypes":[{"name":"storage-virtual-machine","required":true}]},"DeleteVolume":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","fsx:ParentVolumeId","fsx:StorageVirtualMachineId"],"resources":[{"name":"backup"},{"name":"volume"}],"description":"Grants permission to delete a volume, deleting its contents and any existing automatic backups of the volume","accessLevel":"Write","resourceTypes":[{"name":"volume","required":true},{"name":"backup","required":false}],"dependentActions":["fsx:TagResource"]},"DescribeAssociatedFileGateways":{"conditionKeys":[],"resources":[{"name":"file-system"}],"description":"Grants permission to describe the File Gateway instances associated with an Amazon FSx for Windows File Server file system","accessLevel":"Read","resourceTypes":[{"name":"file-system","required":true}],"permissionOnly":true},"DescribeBackups":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the descriptions of all backups owned by your AWS account in the AWS Region of the endpoint that you're calling","accessLevel":"Read","resourceTypes":[]},"DescribeDataRepositoryAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the descriptions of all data repository associations owned by your AWS account in the AWS Region of the endpoint that you're calling","accessLevel":"Read","resourceTypes":[]},"DescribeDataRepositoryTasks":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the descriptions of all data repository tasks owned by your AWS account in the AWS Region of the endpoint that you're calling","accessLevel":"Read","resourceTypes":[]},"DescribeFileCaches":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the descriptions of all file caches owned by your AWS account in the AWS Region of the endpoint that you're calling","accessLevel":"Read","resourceTypes":[]},"DescribeFileSystemAliases":{"conditionKeys":[],"resources":[{"name":"file-system"}],"description":"Grants permission to return the description of all DNS aliases owned by your Amazon FSx for Windows File Server file system","accessLevel":"Read","resourceTypes":[{"name":"file-system","required":true}]},"DescribeFileSystems":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the descriptions of all file systems owned by your AWS account in the AWS Region of the endpoint that you're calling","accessLevel":"Read","resourceTypes":[]},"DescribeS3AccessPointAttachments":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the descriptions of S3 Access Point Attachments","accessLevel":"Read","resourceTypes":[]},"DescribeSharedVpcConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the descriptions of whether FSx route table updates from participant accounts are allowed in your account","accessLevel":"Read","resourceTypes":[]},"DescribeSnapshots":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the descriptions of all snapshots owned by your AWS account in the AWS Region of the endpoint you're calling","accessLevel":"Read","resourceTypes":[]},"DescribeStorageVirtualMachines":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the descriptions of all storage virtual machines owned by your AWS account in the AWS Region of the endpoint that you're calling","accessLevel":"Read","resourceTypes":[]},"DescribeVolumes":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the descriptions of all volumes owned by your AWS account in the AWS Region of the endpoint that you're calling","accessLevel":"Read","resourceTypes":[]},"DetachAndDeleteS3AccessPoint":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to detach an S3 Access Point from an Amazon FSx File System and delete the S3 Access Point","accessLevel":"Write","resourceTypes":[{"name":"volume","required":false}],"dependentActions":["s3:DeleteAccessPoint"]},"DisassociateFileGateway":{"conditionKeys":[],"resources":[{"name":"file-system"}],"description":"Grants permission to disassociate a File Gateway instance from an Amazon FSx for Windows File Server file system","accessLevel":"Write","resourceTypes":[{"name":"file-system","required":true}],"permissionOnly":true},"DisassociateFileSystemAliases":{"conditionKeys":[],"resources":[{"name":"file-system"}],"description":"Grants permission to disassociate file system aliases with an Amazon FSx for Windows File Server file system","accessLevel":"Write","resourceTypes":[{"name":"file-system","required":true}]},"GetResourcePolicy":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to manage cross-account sharing of FSx volumes through AWS Resource Access Manager (RAM). PutResourcePolicy and DeleteResourcePolicy are also required","accessLevel":"Permissions management","resourceTypes":[{"name":"volume","required":true}],"permissionOnly":true},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"association"},{"name":"backup"},{"name":"file-cache"},{"name":"file-system"},{"name":"snapshot"},{"name":"storage-virtual-machine"},{"name":"task"},{"name":"volume"}],"description":"Grants permission to list tags for an Amazon FSx resource","accessLevel":"Read","resourceTypes":[{"name":"association","required":false},{"name":"backup","required":false},{"name":"file-cache","required":false},{"name":"file-system","required":false},{"name":"snapshot","required":false},{"name":"storage-virtual-machine","required":false},{"name":"task","required":false},{"name":"volume","required":false}]},"ManageBackupPrincipalAssociations":{"conditionKeys":[],"resources":[{"name":"backup"}],"description":"Grants permission to manage backup principal associations through AWS Backup","accessLevel":"Permissions management","resourceTypes":[{"name":"backup","required":true}],"permissionOnly":true},"PutResourcePolicy":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to manage cross-account sharing of FSx volumes through AWS Resource Access Manager (RAM). DeleteResourcePolicy and GetResourcePolicy are also required","accessLevel":"Permissions management","resourceTypes":[{"name":"volume","required":true}],"permissionOnly":true},"ReleaseFileSystemNfsV3Locks":{"conditionKeys":[],"resources":[{"name":"file-system"}],"description":"Grants permission to release file system NFS V3 locks","accessLevel":"Write","resourceTypes":[{"name":"file-system","required":true}]},"RestoreVolumeFromSnapshot":{"conditionKeys":[],"resources":[{"name":"snapshot"},{"name":"volume"}],"description":"Grants permission to restore volume state from a snapshot","accessLevel":"Write","resourceTypes":[{"name":"snapshot","required":true},{"name":"volume","required":true}]},"StartMisconfiguredStateRecovery":{"conditionKeys":[],"resources":[{"name":"file-system"}],"description":"Grants permission to start misconfigured state recovery","accessLevel":"Write","resourceTypes":[{"name":"file-system","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"association"},{"name":"backup"},{"name":"file-cache"},{"name":"file-system"},{"name":"snapshot"},{"name":"storage-virtual-machine"},{"name":"task"},{"name":"volume"}],"description":"Grants permission to tag an Amazon FSx resource","accessLevel":"Tagging","resourceTypes":[{"name":"association","required":false},{"name":"backup","required":false},{"name":"file-cache","required":false},{"name":"file-system","required":false},{"name":"snapshot","required":false},{"name":"storage-virtual-machine","required":false},{"name":"task","required":false},{"name":"volume","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"association"},{"name":"backup"},{"name":"file-cache"},{"name":"file-system"},{"name":"snapshot"},{"name":"storage-virtual-machine"},{"name":"task"},{"name":"volume"}],"description":"Grants permission to remove a tag from an Amazon FSx resource","accessLevel":"Tagging","resourceTypes":[{"name":"association","required":false},{"name":"backup","required":false},{"name":"file-cache","required":false},{"name":"file-system","required":false},{"name":"snapshot","required":false},{"name":"storage-virtual-machine","required":false},{"name":"task","required":false},{"name":"volume","required":false}]},"UpdateDataRepositoryAssociation":{"conditionKeys":[],"resources":[{"name":"association"}],"description":"Grants permission to update data repository association configuration","accessLevel":"Write","resourceTypes":[{"name":"association","required":true}]},"UpdateFileCache":{"conditionKeys":[],"resources":[{"name":"file-cache"}],"description":"Grants permission to update file cache configuration","accessLevel":"Write","resourceTypes":[{"name":"file-cache","required":true}]},"UpdateFileSystem":{"conditionKeys":[],"resources":[{"name":"file-system"}],"description":"Grants permission to update file system configuration","accessLevel":"Write","resourceTypes":[{"name":"file-system","required":true}]},"UpdateSharedVpcConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to enable or disable FSx route table updates from participant accounts in your account","accessLevel":"Write","resourceTypes":[]},"UpdateSnapshot":{"conditionKeys":[],"resources":[{"name":"snapshot"}],"description":"Grants permission to update snapshot configuration","accessLevel":"Write","resourceTypes":[{"name":"snapshot","required":true}]},"UpdateStorageVirtualMachine":{"conditionKeys":[],"resources":[{"name":"storage-virtual-machine"}],"description":"Grants permission to update storage virtual machine configuration","accessLevel":"Write","resourceTypes":[{"name":"storage-virtual-machine","required":true}]},"UpdateVolume":{"conditionKeys":["fsx:ParentVolumeId","fsx:StorageVirtualMachineId"],"resources":[{"name":"volume"}],"description":"Grants permission to update volume configuration","accessLevel":"Write","resourceTypes":[{"name":"volume","required":true}]}},"resources":[{"name":"association","arnFormats":["arn:${Partition}:fsx:${Region}:${Account}:association/${FileSystemIdOrFileCacheId}/${DataRepositoryAssociationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"backup","arnFormats":["arn:${Partition}:fsx:${Region}:${Account}:backup/${BackupId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"file-cache","arnFormats":["arn:${Partition}:fsx:${Region}:${Account}:file-cache/${FileCacheId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"file-system","arnFormats":["arn:${Partition}:fsx:${Region}:${Account}:file-system/${FileSystemId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"snapshot","arnFormats":["arn:${Partition}:fsx:${Region}:${Account}:snapshot/${VolumeId}/${SnapshotId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"storage-virtual-machine","arnFormats":["arn:${Partition}:fsx:${Region}:${Account}:storage-virtual-machine/${FileSystemId}/${StorageVirtualMachineId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"task","arnFormats":["arn:${Partition}:fsx:${Region}:${Account}:task/${TaskId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"volume","arnFormats":["arn:${Partition}:fsx:${Region}:${Account}:volume/${FileSystemId}/${VolumeId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"fsx:IsBackupCopyDestination":{"types":["Bool"],"description":"Filters access by whether the backup is a destination backup for a CopyBackup operation"},"fsx:IsBackupCopySource":{"types":["Bool"],"description":"Filters access by whether the backup is a source backup for a CopyBackup operation"},"fsx:NfsDataRepositoryAuthenticationEnabled":{"types":["Bool"],"description":"Filters access by NFS data repositories which support authentication"},"fsx:NfsDataRepositoryEncryptionInTransitEnabled":{"types":["Bool"],"description":"Filters access by NFS data repositories which support encryption-in-transit"},"fsx:ParentVolumeId":{"types":["String"],"description":"Filters access by the containing parent volume for mutating volume operations"},"fsx:StorageVirtualMachineId":{"types":["String"],"description":"Filters access by the containing storage virtual machine for a volume for mutating volume operations"}}}
|