aws-iam-ls 0.0.0

package/src/data/servicereference/services/inspector.json

@@ -0,0 +1 @@
+{"name":"inspector","actions":{"AddAttributesToFindings":{"conditionKeys":[],"resources":[],"description":"Grants permission to assign attributes (key and value pairs) to the findings that are specified by the ARNs of the findings","accessLevel":"Write","resourceTypes":[]},"CreateAssessmentTarget":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new assessment target using the ARN of the resource group that is generated by CreateResourceGroup","accessLevel":"Write","resourceTypes":[]},"CreateAssessmentTemplate":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an assessment template for the assessment target that is specified by the ARN of the assessment target","accessLevel":"Write","resourceTypes":[]},"CreateExclusionsPreview":{"conditionKeys":[],"resources":[],"description":"Grants permission to start the generation of an exclusions preview for the specified assessment template","accessLevel":"Write","resourceTypes":[]},"CreateResourceGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a resource group using the specified set of tags (key and value pairs) that are used to select the EC2 instances to be included in an Amazon Inspector assessment target","accessLevel":"Write","resourceTypes":[]},"DeleteAssessmentRun":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the assessment run that is specified by the ARN of the assessment run","accessLevel":"Write","resourceTypes":[]},"DeleteAssessmentTarget":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the assessment target that is specified by the ARN of the assessment target","accessLevel":"Write","resourceTypes":[]},"DeleteAssessmentTemplate":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the assessment template that is specified by the ARN of the assessment template","accessLevel":"Write","resourceTypes":[]},"DescribeAssessmentRuns":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the assessment runs that are specified by the ARNs of the assessment runs","accessLevel":"Read","resourceTypes":[]},"DescribeAssessmentTargets":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the assessment targets that are specified by the ARNs of the assessment targets","accessLevel":"Read","resourceTypes":[]},"DescribeAssessmentTemplates":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the assessment templates that are specified by the ARNs of the assessment templates","accessLevel":"Read","resourceTypes":[]},"DescribeCrossAccountAccessRole":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the IAM role that enables Amazon Inspector to access your AWS account","accessLevel":"Read","resourceTypes":[]},"DescribeExclusions":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the exclusions that are specified by the exclusions' ARNs","accessLevel":"Read","resourceTypes":[]},"DescribeFindings":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the findings that are specified by the ARNs of the findings","accessLevel":"Read","resourceTypes":[]},"DescribeResourceGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the resource groups that are specified by the ARNs of the resource groups","accessLevel":"Read","resourceTypes":[]},"DescribeRulesPackages":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the rules packages that are specified by the ARNs of the rules packages","accessLevel":"Read","resourceTypes":[]},"GetAssessmentReport":{"conditionKeys":[],"resources":[],"description":"Grants permission to produce an assessment report that includes detailed and comprehensive results of a specified assessment run","accessLevel":"Read","resourceTypes":[]},"GetExclusionsPreview":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the exclusions preview (a list of ExclusionPreview objects) specified by the preview token","accessLevel":"Read","resourceTypes":[]},"GetTelemetryMetadata":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about the data that is collected for the specified assessment run","accessLevel":"Read","resourceTypes":[]},"ListAssessmentRunAgents":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the agents of the assessment runs that are specified by the ARNs of the assessment runs","accessLevel":"List","resourceTypes":[]},"ListAssessmentRuns":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the assessment runs that correspond to the assessment templates that are specified by the ARNs of the assessment templates","accessLevel":"List","resourceTypes":[]},"ListAssessmentTargets":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the ARNs of the assessment targets within this AWS account","accessLevel":"List","resourceTypes":[]},"ListAssessmentTemplates":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the assessment templates that correspond to the assessment targets that are specified by the ARNs of the assessment targets","accessLevel":"List","resourceTypes":[]},"ListEventSubscriptions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the event subscriptions for the assessment template that is specified by the ARN of the assessment template","accessLevel":"List","resourceTypes":[]},"ListExclusions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list exclusions that are generated by the assessment run","accessLevel":"List","resourceTypes":[]},"ListFindings":{"conditionKeys":[],"resources":[],"description":"Grants permission to list findings that are generated by the assessment runs that are specified by the ARNs of the assessment runs","accessLevel":"List","resourceTypes":[]},"ListRulesPackages":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all available Amazon Inspector rules packages","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all tags associated with an assessment template","accessLevel":"Read","resourceTypes":[]},"PreviewAgents":{"conditionKeys":[],"resources":[],"description":"Grants permission to preview the agents installed on the EC2 instances that are part of the specified assessment target","accessLevel":"Read","resourceTypes":[]},"RegisterCrossAccountAccessRole":{"conditionKeys":[],"resources":[],"description":"Grants permission to register the IAM role that Amazon Inspector uses to list your EC2 instances at the start of the assessment run or when you call the PreviewAgents action","accessLevel":"Write","resourceTypes":[]},"RemoveAttributesFromFindings":{"conditionKeys":[],"resources":[],"description":"Grants permission to remove entire attributes (key and value pairs) from the findings that are specified by the ARNs of the findings where an attribute with the specified key exists","accessLevel":"Write","resourceTypes":[]},"SetTagsForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to set tags (key and value pairs) to the assessment template that is specified by the ARN of the assessment template","accessLevel":"Tagging","resourceTypes":[]},"StartAssessmentRun":{"conditionKeys":[],"resources":[],"description":"Grants permission to start the assessment run specified by the ARN of the assessment template","accessLevel":"Write","resourceTypes":[]},"StopAssessmentRun":{"conditionKeys":[],"resources":[],"description":"Grants permission to stop the assessment run that is specified by the ARN of the assessment run","accessLevel":"Write","resourceTypes":[]},"SubscribeToEvent":{"conditionKeys":[],"resources":[],"description":"Grants permission to enable the process of sending Amazon Simple Notification Service (SNS) notifications about a specified event to a specified SNS topic","accessLevel":"Write","resourceTypes":[]},"UnsubscribeFromEvent":{"conditionKeys":[],"resources":[],"description":"Grants permission to disable the process of sending Amazon Simple Notification Service (SNS) notifications about a specified event to a specified SNS topic","accessLevel":"Write","resourceTypes":[]},"UpdateAssessmentTarget":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the assessment target that is specified by the ARN of the assessment target","accessLevel":"Write","resourceTypes":[]}},"resources":[],"conditionKeys":{}}

package/src/data/servicereference/services/inspector2-telemetry.json

@@ -0,0 +1 @@
+{"name":"inspector2-telemetry","actions":{"NotifyHeartbeat":{"conditionKeys":[],"resources":[],"description":"Grants permission to notify heartbeat for an active telemetry session","accessLevel":"Write","resourceTypes":[]},"SendTelemetry":{"conditionKeys":[],"resources":[],"description":"Grants permission to send telemetry for an active telemetry session","accessLevel":"Write","resourceTypes":[]},"StartSession":{"conditionKeys":[],"resources":[],"description":"Grants permission to start a telemetry session","accessLevel":"Write","resourceTypes":[]},"StopSession":{"conditionKeys":[],"resources":[],"description":"Grants permission to stop a telemetry session","accessLevel":"Write","resourceTypes":[]}},"resources":[],"conditionKeys":{}}

package/src/data/servicereference/services/inspector2.json

@@ -0,0 +1 @@
+{"name":"inspector2","actions":{"AssociateMember":{"conditionKeys":[],"resources":[],"description":"Grants permission to associate an account with an Amazon Inspector administrator account","accessLevel":"Write","resourceTypes":[]},"BatchAssociateCodeSecurityScanConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to associate multiple code repositories with an Amazon Inspector code security scan configuration","accessLevel":"Write","resourceTypes":[]},"BatchDisassociateCodeSecurityScanConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to disassociate multiple code repositories from an Amazon Inspector code security scan configuration","accessLevel":"Write","resourceTypes":[]},"BatchGetAccountStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about Amazon Inspector accounts for an account","accessLevel":"Read","resourceTypes":[]},"BatchGetCodeSnippet":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve code snippet information about one or more code vulnerability findings","accessLevel":"Read","resourceTypes":[]},"BatchGetFindingDetails":{"conditionKeys":[],"resources":[],"description":"Grants permission to let a customer get enhanced vulnerability intelligence details for findings","accessLevel":"Read","resourceTypes":[]},"BatchGetFreeTrialInfo":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve free trial period eligibility about Amazon Inspector accounts for an account","accessLevel":"Read","resourceTypes":[]},"BatchGetMemberEc2DeepInspectionStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to delegated administrator to retrieve ec2 deep inspection status of member accounts","accessLevel":"Read","resourceTypes":[]},"BatchUpdateMemberEc2DeepInspectionStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to update ec2 deep inspection status by delegated administrator for its associated member accounts","accessLevel":"Write","resourceTypes":[]},"CancelFindingsReport":{"conditionKeys":[],"resources":[],"description":"Grants permission to cancel the generation of a findings report","accessLevel":"Write","resourceTypes":[]},"CancelSbomExport":{"conditionKeys":[],"resources":[],"description":"Grants permission to cancel the generation of an SBOM report","accessLevel":"Write","resourceTypes":[]},"CreateCisScanConfiguration":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"CIS Scan Configuration"}],"description":"Grants permission to create and define the settings for a CIS scan configuration","accessLevel":"Write","resourceTypes":[{"name":"CIS Scan Configuration","required":true}]},"CreateCodeSecurityIntegration":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Code Security Integration"}],"description":"Grants permission to create a code security integration with a source code repository provider","accessLevel":"Write","resourceTypes":[{"name":"Code Security Integration","required":true}]},"CreateCodeSecurityScanConfiguration":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Code Security Scan Configuration"}],"description":"Grants permission to create a scan configuration for code security scanning","accessLevel":"Write","resourceTypes":[{"name":"Code Security Scan Configuration","required":true}]},"CreateFilter":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Filter"}],"description":"Grants permission to create and define the settings for a findings filter","accessLevel":"Write","resourceTypes":[{"name":"Filter","required":true}]},"CreateFindingsReport":{"conditionKeys":[],"resources":[],"description":"Grants permission to request the generation of a findings report","accessLevel":"Write","resourceTypes":[]},"CreateSbomExport":{"conditionKeys":[],"resources":[],"description":"Grants permission to request the generation of an SBOM report","accessLevel":"Write","resourceTypes":[]},"DeleteCisScanConfiguration":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"CIS Scan Configuration"}],"description":"Grants permission to delete a CIS scan configuration","accessLevel":"Write","resourceTypes":[{"name":"CIS Scan Configuration","required":true}]},"DeleteCodeSecurityIntegration":{"conditionKeys":[],"resources":[{"name":"Code Security Integration"}],"description":"Grants permission to delete a code security integration","accessLevel":"Write","resourceTypes":[{"name":"Code Security Integration","required":true}]},"DeleteCodeSecurityScanConfiguration":{"conditionKeys":[],"resources":[{"name":"Code Security Scan Configuration"}],"description":"Grants permission to delete a code security scan configuration","accessLevel":"Write","resourceTypes":[{"name":"Code Security Scan Configuration","required":true}]},"DeleteFilter":{"conditionKeys":[],"resources":[{"name":"Filter"}],"description":"Grants permission to delete a findings filter","accessLevel":"Write","resourceTypes":[{"name":"Filter","required":true}]},"DescribeOrganizationConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about the Amazon Inspector configuration settings for an AWS organization","accessLevel":"Read","resourceTypes":[]},"Disable":{"conditionKeys":[],"resources":[],"description":"Grants permission to disable an Amazon Inspector account","accessLevel":"Write","resourceTypes":[]},"DisableDelegatedAdminAccount":{"conditionKeys":[],"resources":[],"description":"Grants permission to disable an account as the delegated Amazon Inspector administrator account for an AWS organization","accessLevel":"Write","resourceTypes":[]},"DisassociateMember":{"conditionKeys":[],"resources":[],"description":"Grants permission to an Amazon Inspector administrator account to disassociate from an Inspector member account","accessLevel":"Write","resourceTypes":[]},"Enable":{"conditionKeys":[],"resources":[],"description":"Grants permission to enable and specify the configuration settings for a new Amazon Inspector account","accessLevel":"Write","resourceTypes":[]},"EnableDelegatedAdminAccount":{"conditionKeys":[],"resources":[],"description":"Grants permission to enable an account as the delegated Amazon Inspector administrator account for an AWS organization","accessLevel":"Write","resourceTypes":[]},"GetCisScanReport":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a report containing information about completed CIS scans","accessLevel":"Read","resourceTypes":[]},"GetCisScanResultDetails":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about all details pertaining to one CIS scan and one targeted resource","accessLevel":"List","resourceTypes":[]},"GetClustersForImage":{"conditionKeys":[],"resources":[],"description":"Grants permission to get cluster information for a given a continuously scanned amazon Ecr image","accessLevel":"Read","resourceTypes":[]},"GetCodeSecurityIntegration":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about a code security integration","accessLevel":"Read","resourceTypes":[]},"GetCodeSecurityScan":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about a specific code security scan","accessLevel":"Read","resourceTypes":[]},"GetCodeSecurityScanConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about a code security scan configuration","accessLevel":"Read","resourceTypes":[]},"GetConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about the Amazon Inspector configuration settings for an AWS account","accessLevel":"Read","resourceTypes":[]},"GetDelegatedAdminAccount":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about the Amazon Inspector administrator account for an account","accessLevel":"Read","resourceTypes":[]},"GetEc2DeepInspectionConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve ec2 deep inspection configuration for standalone accounts, delegated administrator and member account","accessLevel":"Read","resourceTypes":[]},"GetEncryptionKey":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about the KMS key used to encrypt code snippets with","accessLevel":"Read","resourceTypes":[]},"GetFindingsReportStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve status for a requested findings report","accessLevel":"Read","resourceTypes":[]},"GetMember":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about an account that's associated with an Amazon Inspector administrator account","accessLevel":"Read","resourceTypes":[]},"GetSbomExport":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a requested SBOM report","accessLevel":"Read","resourceTypes":[]},"ListAccountPermissions":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve feature configuration permissions associated with an Amazon Inspector account within an organization","accessLevel":"List","resourceTypes":[]},"ListCisScanConfigurations":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about all CIS scan configurations","accessLevel":"List","resourceTypes":[]},"ListCisScanResultsAggregatedByChecks":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about all checks pertaining to one CIS scan","accessLevel":"List","resourceTypes":[]},"ListCisScanResultsAggregatedByTargetResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about all resources pertaining to one CIS scan","accessLevel":"List","resourceTypes":[]},"ListCisScans":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about completed CIS scans","accessLevel":"List","resourceTypes":[]},"ListCodeSecurityIntegrations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all code security integrations in your account","accessLevel":"List","resourceTypes":[]},"ListCodeSecurityScanConfigurationAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the associations between code repositories and Amazon Inspector code security scan configurations","accessLevel":"List","resourceTypes":[]},"ListCodeSecurityScanConfigurations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all code security scan configurations in your account","accessLevel":"List","resourceTypes":[]},"ListCoverage":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the types of statistics Amazon Inspector can generate for resources Inspector monitors","accessLevel":"List","resourceTypes":[]},"ListCoverageStatistics":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve statistical data and other information about the resources Amazon Inspector monitors","accessLevel":"List","resourceTypes":[]},"ListDelegatedAdminAccounts":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about the delegated Amazon Inspector administrator account for an AWS organization","accessLevel":"List","resourceTypes":[]},"ListFilters":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about all findings filters","accessLevel":"List","resourceTypes":[]},"ListFindingAggregations":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve statistical data and other information about Amazon Inspector findings","accessLevel":"List","resourceTypes":[]},"ListFindings":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a subset of information about one or more findings","accessLevel":"List","resourceTypes":[]},"ListMembers":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about the Amazon Inspector member accounts that are associated with an Inspector administrator account","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the tags for an Amazon Inspector resource","accessLevel":"Read","resourceTypes":[]},"ListUsageTotals":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve aggregated usage data for an account","accessLevel":"List","resourceTypes":[]},"ResetEncryptionKey":{"conditionKeys":[],"resources":[],"description":"Grants permission to let a customer reset to use an Amazon-owned KMS key to encrypt code snippets with","accessLevel":"Write","resourceTypes":[]},"SearchVulnerabilities":{"conditionKeys":[],"resources":[],"description":"Grants permission to list Amazon Inspector coverage details for a specific vulnerability","accessLevel":"Read","resourceTypes":[]},"SendCisSessionHealth":{"conditionKeys":[],"resources":[],"description":"Grants permission to send CIS health for a CIS scan","accessLevel":"Write","resourceTypes":[]},"SendCisSessionTelemetry":{"conditionKeys":[],"resources":[],"description":"Grants permission to send CIS telemetry for a CIS scan","accessLevel":"Write","resourceTypes":[]},"StartCisSession":{"conditionKeys":[],"resources":[],"description":"Grants permission to start a CIS scan session","accessLevel":"Write","resourceTypes":[]},"StartCodeSecurityScan":{"conditionKeys":[],"resources":[],"description":"Grants permission to initiate a code security scan on a specified repository","accessLevel":"Write","resourceTypes":[]},"StopCisSession":{"conditionKeys":[],"resources":[],"description":"Grants permission to stop a CIS scan session","accessLevel":"Write","resourceTypes":[]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"CIS Scan Configuration"},{"name":"Code Security Integration"},{"name":"Code Security Scan Configuration"},{"name":"Filter"}],"description":"Grants permission to add or update the tags for an Amazon Inspector resource","accessLevel":"Tagging","resourceTypes":[{"name":"CIS Scan Configuration","required":false},{"name":"Code Security Integration","required":false},{"name":"Code Security Scan Configuration","required":false},{"name":"Filter","required":false}]},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"CIS Scan Configuration"},{"name":"Code Security Integration"},{"name":"Code Security Scan Configuration"},{"name":"Filter"}],"description":"Grants permission to remove tags from an Amazon Inspector resource","accessLevel":"Tagging","resourceTypes":[{"name":"CIS Scan Configuration","required":false},{"name":"Code Security Integration","required":false},{"name":"Code Security Scan Configuration","required":false},{"name":"Filter","required":false}]},"UpdateCisScanConfiguration":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"CIS Scan Configuration"}],"description":"Grants permission to update the settings for a CIS scan configuration","accessLevel":"Write","resourceTypes":[{"name":"CIS Scan Configuration","required":true}]},"UpdateCodeSecurityIntegration":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Code Security Integration"}],"description":"Grants permission to update an existing code security integration","accessLevel":"Write","resourceTypes":[{"name":"Code Security Integration","required":true}]},"UpdateCodeSecurityScanConfiguration":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Code Security Scan Configuration"}],"description":"Grants permission to update an existing code security scan configuration","accessLevel":"Write","resourceTypes":[{"name":"Code Security Scan Configuration","required":true}]},"UpdateConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update information about the Amazon Inspector configuration settings for an AWS account","accessLevel":"Write","resourceTypes":[]},"UpdateEc2DeepInspectionConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update ec2 deep inspection configuration by delegated administrator, member and standalone account","accessLevel":"Write","resourceTypes":[]},"UpdateEncryptionKey":{"conditionKeys":[],"resources":[],"description":"Grants permission to let a customer use a KMS key to encrypt code snippets with","accessLevel":"Write","resourceTypes":[]},"UpdateFilter":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Filter"}],"description":"Grants permission to update the settings for a findings filter","accessLevel":"Write","resourceTypes":[{"name":"Filter","required":true}]},"UpdateOrgEc2DeepInspectionConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update ec2 deep inspection configuration by delegated administrator for its associated member accounts","accessLevel":"Write","resourceTypes":[]},"UpdateOrganizationConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update Amazon Inspector configuration settings for an AWS organization","accessLevel":"Write","resourceTypes":[]}},"resources":[{"name":"CIS Scan Configuration","arnFormats":["arn:${Partition}:inspector2:${Region}:${Account}:owner/${OwnerId}/cis-configuration/${CISScanConfigurationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Code Security Integration","arnFormats":["arn:${Partition}:inspector2:${Region}:${Account}:codesecurity-integration/${CodeSecurityIntegrationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Code Security Scan Configuration","arnFormats":["arn:${Partition}:inspector2:${Region}:${Account}:owner/${OwnerId}/codesecurity-configuration/${CodeSecurityScanConfigurationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Filter","arnFormats":["arn:${Partition}:inspector2:${Region}:${Account}:owner/${OwnerId}/filter/${FilterId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Finding","arnFormats":["arn:${Partition}:inspector2:${Region}:${Account}:finding/${FindingId}"],"conditionKeys":[]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"}}}

package/src/data/servicereference/services/interconnect.json

@@ -0,0 +1 @@
+{"name":"interconnect","actions":{"AcceptConnectionProposal":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to accept a connection proposal generated elsewhere","accessLevel":"Write","resourceTypes":[]},"CreateConnection":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"connection"}],"description":"Grants permission to create a connection","accessLevel":"Write","resourceTypes":[{"name":"connection","required":true}]},"DeleteConnection":{"conditionKeys":[],"resources":[{"name":"connection"}],"description":"Grants permission to delete an existing connection","accessLevel":"Write","resourceTypes":[{"name":"connection","required":true}]},"DescribeConnectionProposal":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe a connection proposal","accessLevel":"Read","resourceTypes":[]},"GetConnection":{"conditionKeys":[],"resources":[{"name":"connection"}],"description":"Grants permission to describe a connection","accessLevel":"Read","resourceTypes":[{"name":"connection","required":true}]},"GetEnvironment":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to describe an environment","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true}]},"ListAttachPoints":{"conditionKeys":[],"resources":[],"description":"Grants permission to list available attach points","accessLevel":"Read","resourceTypes":[]},"ListConnections":{"conditionKeys":[],"resources":[],"description":"Grants permission to list connections","accessLevel":"List","resourceTypes":[]},"ListEnvironments":{"conditionKeys":[],"resources":[],"description":"Grants permission to list available environments","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to list tags on a resource","accessLevel":"Read","resourceTypes":[]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"connection"}],"description":"Grants permission to apply tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"connection","required":true}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"connection"}],"description":"Grants permission to remove tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"connection","required":true}]},"UpdateConnection":{"conditionKeys":[],"resources":[{"name":"connection"}],"description":"Grants permission to update an existing connection","accessLevel":"Write","resourceTypes":[{"name":"connection","required":true}]}},"resources":[{"name":"connection","arnFormats":["arn:${Partition}:interconnect:${Region}:${Account}:connection/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"environment","arnFormats":["arn:${Partition}:interconnect:${Region}:${Account}:environment/${Id}"],"conditionKeys":[]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair that is allowed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair of a resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by a list of tag keys that are allowed in the request"}}}

package/src/data/servicereference/services/internetmonitor.json

@@ -0,0 +1 @@
+{"name":"internetmonitor","actions":{"CreateMonitor":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Monitor"}],"description":"Grants permission to create a monitor","accessLevel":"Write","resourceTypes":[{"name":"Monitor","required":true}]},"DeleteMonitor":{"conditionKeys":[],"resources":[{"name":"Monitor"}],"description":"Grants permission to delete a monitor","accessLevel":"Write","resourceTypes":[{"name":"Monitor","required":true}]},"GetHealthEvent":{"conditionKeys":[],"resources":[{"name":"Monitor"}],"description":"Grants permission to get information about a health event for a specified monitor","accessLevel":"Read","resourceTypes":[{"name":"Monitor","required":true}]},"GetInternetEvent":{"conditionKeys":[],"resources":[{"name":"InternetEvent"}],"description":"Grants permission to get information about a specified internet event","accessLevel":"Read","resourceTypes":[{"name":"InternetEvent","required":true}]},"GetMonitor":{"conditionKeys":[],"resources":[{"name":"Monitor"}],"description":"Grants permission to get information about a monitor","accessLevel":"Read","resourceTypes":[{"name":"Monitor","required":true}]},"GetQueryResults":{"conditionKeys":[],"resources":[{"name":"Monitor"}],"description":"Grants permission to get results for a data query for a monitor","accessLevel":"Read","resourceTypes":[{"name":"Monitor","required":true}]},"GetQueryStatus":{"conditionKeys":[],"resources":[{"name":"Monitor"}],"description":"Grants permission to get status for a data query for a monitor","accessLevel":"Read","resourceTypes":[{"name":"Monitor","required":true}]},"Link":{"conditionKeys":[],"resources":[],"description":"Grants permission to share Internet Monitor resources with a monitoring account","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"ListHealthEvents":{"conditionKeys":[],"resources":[{"name":"Monitor"}],"description":"Grants permission to list all health events for a monitor","accessLevel":"List","resourceTypes":[{"name":"Monitor","required":true}]},"ListInternetEvents":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all internet events","accessLevel":"List","resourceTypes":[]},"ListMonitors":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all monitors in an account and their statuses","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"Monitor"}],"description":"Grants permission to list the tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"Monitor","required":true}]},"StartQuery":{"conditionKeys":[],"resources":[{"name":"Monitor"}],"description":"Grants permission to start a data query for a monitor","accessLevel":"Read","resourceTypes":[{"name":"Monitor","required":true}]},"StopQuery":{"conditionKeys":[],"resources":[{"name":"Monitor"}],"description":"Grants permission to stop a data query for a monitor","accessLevel":"Read","resourceTypes":[{"name":"Monitor","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Monitor"}],"description":"Grants permission to add tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"Monitor","required":true}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"Monitor"}],"description":"Grants permission to remove tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"Monitor","required":true}]},"UpdateMonitor":{"conditionKeys":[],"resources":[{"name":"Monitor"}],"description":"Grants permission to update a monitor","accessLevel":"Write","resourceTypes":[{"name":"Monitor","required":true}]}},"resources":[{"name":"HealthEvent","arnFormats":["arn:${Partition}:internetmonitor:${Region}:${Account}:monitor/${MonitorName}/health-event/${EventId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"InternetEvent","arnFormats":["arn:${Partition}:internetmonitor::${Account}:internet-event/${InternetEventId}"],"conditionKeys":[]},{"name":"Monitor","arnFormats":["arn:${Partition}:internetmonitor:${Region}:${Account}:monitor/${MonitorName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by tag keys in the request"}}}

package/src/data/servicereference/services/invoicing.json

@@ -0,0 +1 @@
+{"name":"invoicing","actions":{"BatchGetInvoiceProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to get invoice profile details for an account in your organization","accessLevel":"Read","resourceTypes":[]},"CreateInvoiceUnit":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an invoice unit for your organization","accessLevel":"Write","resourceTypes":[]},"CreateProcurementPortalPreference":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[],"description":"Grants permission to create a procurement portal preference","accessLevel":"Write","resourceTypes":[]},"DeleteInvoiceUnit":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"invoice-unit"}],"description":"Grants permission to update an invoice unit for your organization","accessLevel":"Write","resourceTypes":[{"name":"invoice-unit","required":true}]},"DeleteProcurementPortalPreference":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[],"description":"Grants permission to delete a procurement portal preference","accessLevel":"Write","resourceTypes":[]},"GetInvoiceCorrection":{"conditionKeys":[],"resources":[],"description":"Grants permission to get Invoice Correction","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetInvoiceEmailDeliveryPreferences":{"conditionKeys":[],"resources":[],"description":"Grants permission to get Invoice Email Delivery Preferences","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetInvoicePDF":{"conditionKeys":[],"resources":[],"description":"Grants permission to get downloadable Invoice document pre-signed URL with supplemental documents","accessLevel":"Read","resourceTypes":[]},"GetInvoiceUnit":{"conditionKeys":[],"resources":[{"name":"invoice-unit"}],"description":"Grants permission to get invoice units for your organization","accessLevel":"Read","resourceTypes":[{"name":"invoice-unit","required":true}]},"GetProcurementPortalPreference":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a procurement portal preference","accessLevel":"Read","resourceTypes":[]},"ListInvoiceCorrections":{"conditionKeys":[],"resources":[],"description":"Grants permission to list Invoice Corrections","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListInvoiceSummaries":{"conditionKeys":[],"resources":[],"description":"Grants permission to get Invoice summary information for your account or linked account","accessLevel":"Read","resourceTypes":[]},"ListInvoiceUnits":{"conditionKeys":[],"resources":[],"description":"Grants permission to list invoice units for your organization","accessLevel":"List","resourceTypes":[]},"ListProcurementPortalPreferences":{"conditionKeys":[],"resources":[],"description":"Grants permission to list procurement portal preferences for an account","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"invoice-unit"}],"description":"Grants permission to list tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"invoice-unit","required":true}]},"PutInvoiceEmailDeliveryPreferences":{"conditionKeys":[],"resources":[],"description":"Grants permission to put Invoice Email Delivery Preferences","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"PutProcurementPortalPreference":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[],"description":"Grants permission to update a procurement portal preference","accessLevel":"Write","resourceTypes":[]},"StartInvoiceCorrection":{"conditionKeys":[],"resources":[],"description":"Grants permission to start Invoice Correction","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"invoice-unit"}],"description":"Grants permission to tag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"invoice-unit","required":true}]},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"invoice-unit"}],"description":"Grants permission to untag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"invoice-unit","required":true}]},"UpdateInvoiceUnit":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"invoice-unit"}],"description":"Grants permission to update an invoice unit for your organization","accessLevel":"Write","resourceTypes":[{"name":"invoice-unit","required":true}]},"UpdateProcurementPortalPreferenceStatus":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[],"description":"Grants permission to update the status for a procurement portal preference","accessLevel":"Write","resourceTypes":[]}},"resources":[{"name":"invoice-unit","arnFormats":["arn:${Partition}:invoicing::${Account}:invoice-unit/${Identifier}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"procurement-portal-preference","arnFormats":["arn:${Partition}:invoicing::${Account}:procurement-portal-preference/${Identifier}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by allowed set of values for each of the tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag-value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by presence of mandatory tags in the request"}}}

package/src/data/servicereference/services/iot-device-tester.json

@@ -0,0 +1 @@
+{"name":"iot-device-tester","actions":{"CheckVersion":{"conditionKeys":[],"resources":[],"description":"Grants permission to IoT Device Tester to check if a given set of product, test suite and device tester version are compatible","accessLevel":"Read","resourceTypes":[]},"DownloadTestSuite":{"conditionKeys":[],"resources":[],"description":"Grants permission to IoT Device Tester to download compatible test suite versions","accessLevel":"Read","resourceTypes":[]},"LatestIdt":{"conditionKeys":[],"resources":[],"description":"Grants permission to IoT Device Tester to get information on latest version of device tester available","accessLevel":"Read","resourceTypes":[]},"SendMetrics":{"conditionKeys":[],"resources":[],"description":"Grants permission to IoT Device Tester to send usage metrics on your behalf","accessLevel":"Write","resourceTypes":[]},"SupportedVersion":{"conditionKeys":[],"resources":[],"description":"Grants permission to IoT Device Tester to get list of supported products and test suite versions","accessLevel":"Read","resourceTypes":[]}},"resources":[],"conditionKeys":{}}

package/src/data/servicereference/services/iot.json

@@ -0,0 +1 @@
+{"name":"iot","actions":{"AcceptCertificateTransfer":{"conditionKeys":[],"resources":[{"name":"cert"}],"description":"Grants permission to accept a pending certificate transfer","accessLevel":"Write","resourceTypes":[{"name":"cert","required":true}]},"AddThingToBillingGroup":{"conditionKeys":[],"resources":[{"name":"billinggroup"},{"name":"thing"}],"description":"Grants permission to add a thing to the specified billing group","accessLevel":"Write","resourceTypes":[{"name":"billinggroup","required":true},{"name":"thing","required":true}]},"AddThingToThingGroup":{"conditionKeys":[],"resources":[{"name":"thing"},{"name":"thinggroup"}],"description":"Grants permission to add a thing to the specified thing group","accessLevel":"Write","resourceTypes":[{"name":"thing","required":true},{"name":"thinggroup","required":true}]},"AssociateSbomWithPackageVersion":{"conditionKeys":[],"resources":[{"name":"packageversion"}],"description":"Grants permission to associate SBOM files to a package version","accessLevel":"Write","resourceTypes":[{"name":"packageversion","required":true}],"dependentActions":["iot:GetIndexingConfiguration"]},"AssociateTargetsWithJob":{"conditionKeys":[],"resources":[{"name":"job"},{"name":"thing"},{"name":"thinggroup"}],"description":"Grants permission to associate a group with a continuous job","accessLevel":"Write","resourceTypes":[{"name":"job","required":true},{"name":"thing","required":true},{"name":"thinggroup","required":true}]},"AttachPolicy":{"conditionKeys":[],"resources":[{"name":"cert"},{"name":"thinggroup"}],"description":"Grants permission to attach a policy to the specified target","accessLevel":"Permissions management","resourceTypes":[{"name":"cert","required":false},{"name":"thinggroup","required":false}]},"AttachPrincipalPolicy":{"conditionKeys":[],"resources":[{"name":"cert"}],"description":"Grants permission to attach the specified policy to the specified principal (certificate or other credential)","accessLevel":"Permissions management","resourceTypes":[{"name":"cert","required":false}]},"AttachSecurityProfile":{"conditionKeys":[],"resources":[{"name":"custommetric"},{"name":"dimension"},{"name":"securityprofile"},{"name":"thinggroup"}],"description":"Grants permission to associate a Device Defender security profile with a thing group or with this account","accessLevel":"Write","resourceTypes":[{"name":"securityprofile","required":true},{"name":"custommetric","required":false},{"name":"dimension","required":false},{"name":"thinggroup","required":false}]},"AttachThingPrincipal":{"conditionKeys":["iot:thingArn"],"resources":[{"name":"cert"}],"description":"Grants permission to attach the specified principal to the specified thing","accessLevel":"Write","resourceTypes":[{"name":"cert","required":false}]},"CancelAuditMitigationActionsTask":{"conditionKeys":[],"resources":[],"description":"Grants permission to cancel a mitigation action task that is in progress","accessLevel":"Write","resourceTypes":[]},"CancelAuditTask":{"conditionKeys":[],"resources":[],"description":"Grants permission to cancel an audit that is in progress. The audit can be either scheduled or on-demand","accessLevel":"Write","resourceTypes":[]},"CancelCertificateTransfer":{"conditionKeys":[],"resources":[{"name":"cert"}],"description":"Grants permission to cancel a pending transfer for the specified certificate","accessLevel":"Write","resourceTypes":[{"name":"cert","required":true}]},"CancelDetectMitigationActionsTask":{"conditionKeys":[],"resources":[],"description":"Grants permission to cancel a Device Defender ML Detect mitigation action","accessLevel":"Write","resourceTypes":[]},"CancelJob":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to cancel a job","accessLevel":"Write","resourceTypes":[{"name":"job","required":true}]},"CancelJobExecution":{"conditionKeys":[],"resources":[{"name":"job"},{"name":"thing"}],"description":"Grants permission to cancel a job execution on a particular device","accessLevel":"Write","resourceTypes":[{"name":"job","required":true},{"name":"thing","required":true}]},"ClearDefaultAuthorizer":{"conditionKeys":[],"resources":[],"description":"Grants permission to clear the default authorizer","accessLevel":"Write","resourceTypes":[]},"CloseTunnel":{"conditionKeys":["iot:Delete"],"resources":[{"name":"tunnel"}],"description":"Grants permission to close a tunnel","accessLevel":"Write","resourceTypes":[{"name":"tunnel","required":true}]},"ConfirmTopicRuleDestination":{"conditionKeys":[],"resources":[{"name":"destination"}],"description":"Grants permission to confirm a http url TopicRuleDestinationDestination","accessLevel":"Write","resourceTypes":[{"name":"destination","required":true}]},"Connect":{"conditionKeys":[],"resources":[{"name":"client"}],"description":"Grants permission to connect as the specified client","accessLevel":"Write","resourceTypes":[{"name":"client","required":true}]},"CreateAuditSuppression":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a Device Defender audit suppression","accessLevel":"Write","resourceTypes":[]},"CreateAuthorizer":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"authorizer"}],"description":"Grants permission to create an authorizer","accessLevel":"Write","resourceTypes":[{"name":"authorizer","required":true}]},"CreateBillingGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"billinggroup"}],"description":"Grants permission to create a billing group","accessLevel":"Write","resourceTypes":[{"name":"billinggroup","required":true}]},"CreateCertificateFromCsr":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an X.509 certificate using the specified certificate signing request","accessLevel":"Write","resourceTypes":[]},"CreateCertificateProvider":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"certificateprovider"}],"description":"Grants permission to create a certificate provider","accessLevel":"Write","resourceTypes":[{"name":"certificateprovider","required":true}]},"CreateCommand":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"command"}],"description":"Grants permission to create a command that can be used to start new executions against a device","accessLevel":"Write","resourceTypes":[{"name":"command","required":true}]},"CreateCustomMetric":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"custommetric"}],"description":"Grants permission to create a custom metric for device side metric reporting and monitoring","accessLevel":"Write","resourceTypes":[{"name":"custommetric","required":true}]},"CreateDimension":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"dimension"}],"description":"Grants permission to define a dimension that can be used to to limit the scope of a metric used in a security profile","accessLevel":"Write","resourceTypes":[{"name":"dimension","required":true}]},"CreateDomainConfiguration":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","iot:DomainName"],"resources":[{"name":"domainconfiguration"}],"description":"Grants permission to create a domain configuration","accessLevel":"Write","resourceTypes":[{"name":"domainconfiguration","required":true}]},"CreateDynamicThingGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"dynamicthinggroup"}],"description":"Grants permission to create a Dynamic Thing Group","accessLevel":"Write","resourceTypes":[{"name":"dynamicthinggroup","required":true}]},"CreateFleetMetric":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"fleetmetric"},{"name":"index"}],"description":"Grants permission to create a fleet metric","accessLevel":"Write","resourceTypes":[{"name":"fleetmetric","required":true},{"name":"index","required":true}]},"CreateJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"job"},{"name":"jobtemplate"},{"name":"package"},{"name":"packageversion"},{"name":"thing"},{"name":"thinggroup"}],"description":"Grants permission to create a job","accessLevel":"Write","resourceTypes":[{"name":"job","required":true},{"name":"thing","required":true},{"name":"thinggroup","required":true},{"name":"jobtemplate","required":false},{"name":"package","required":false},{"name":"packageversion","required":false}]},"CreateJobTemplate":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"job"},{"name":"jobtemplate"},{"name":"package"},{"name":"packageversion"}],"description":"Grants permission to create a job template","accessLevel":"Write","resourceTypes":[{"name":"jobtemplate","required":true},{"name":"job","required":false},{"name":"package","required":false},{"name":"packageversion","required":false}]},"CreateKeysAndCertificate":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a 2048 bit RSA key pair and issues an X.509 certificate using the issued public key","accessLevel":"Write","resourceTypes":[]},"CreateMitigationAction":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"mitigationaction"}],"description":"Grants permission to define an action that can be applied to audit findings by using StartAuditMitigationActionsTask","accessLevel":"Write","resourceTypes":[{"name":"mitigationaction","required":true}]},"CreateOTAUpdate":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"otaupdate"}],"description":"Grants permission to create an OTA update job","accessLevel":"Write","resourceTypes":[{"name":"otaupdate","required":true}]},"CreatePackage":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"package"}],"description":"Grants permission to create a software package that you can deploy to your devices","accessLevel":"Write","resourceTypes":[{"name":"package","required":true}],"dependentActions":["iot:GetIndexingConfiguration"]},"CreatePackageVersion":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"package"},{"name":"packageversion"}],"description":"Grants permission to create a version under the specified package","accessLevel":"Write","resourceTypes":[{"name":"package","required":true},{"name":"packageversion","required":true}],"dependentActions":["iot:GetIndexingConfiguration","s3:GetObjectVersion"]},"CreatePolicy":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"policy"}],"description":"Grants permission to create an AWS IoT policy","accessLevel":"Permissions management","resourceTypes":[{"name":"policy","required":true}]},"CreatePolicyVersion":{"conditionKeys":[],"resources":[{"name":"policy"}],"description":"Grants permission to create a new version of the specified AWS IoT policy","accessLevel":"Permissions management","resourceTypes":[{"name":"policy","required":true}]},"CreateProvisioningClaim":{"conditionKeys":[],"resources":[{"name":"provisioningtemplate"}],"description":"Grants permission to create a provisioning claim","accessLevel":"Write","resourceTypes":[{"name":"provisioningtemplate","required":true}]},"CreateProvisioningTemplate":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"provisioningtemplate"}],"description":"Grants permission to create a fleet provisioning template","accessLevel":"Write","resourceTypes":[{"name":"provisioningtemplate","required":true}],"dependentActions":["iam:PassRole"]},"CreateProvisioningTemplateVersion":{"conditionKeys":[],"resources":[{"name":"provisioningtemplate"}],"description":"Grants permission to create a new version of a fleet provisioning template","accessLevel":"Write","resourceTypes":[{"name":"provisioningtemplate","required":true}]},"CreateRoleAlias":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"rolealias"}],"description":"Grants permission to create a role alias","accessLevel":"Write","resourceTypes":[{"name":"rolealias","required":true}],"dependentActions":["iam:PassRole"]},"CreateScheduledAudit":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"scheduledaudit"}],"description":"Grants permission to create a scheduled audit that is run at a specified time interval","accessLevel":"Write","resourceTypes":[{"name":"scheduledaudit","required":true}]},"CreateSecurityProfile":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"custommetric"},{"name":"dimension"},{"name":"securityprofile"}],"description":"Grants permission to create a Device Defender security profile","accessLevel":"Write","resourceTypes":[{"name":"securityprofile","required":true},{"name":"custommetric","required":false},{"name":"dimension","required":false}]},"CreateStream":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"stream"}],"description":"Grants permission to create a new AWS IoT stream","accessLevel":"Write","resourceTypes":[{"name":"stream","required":true}]},"CreateThing":{"conditionKeys":[],"resources":[{"name":"billinggroup"},{"name":"thing"}],"description":"Grants permission to create a thing in the thing registry","accessLevel":"Write","resourceTypes":[{"name":"thing","required":true},{"name":"billinggroup","required":false}]},"CreateThingGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"thinggroup"}],"description":"Grants permission to create a thing group","accessLevel":"Write","resourceTypes":[{"name":"thinggroup","required":true}]},"CreateThingType":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"thingtype"}],"description":"Grants permission to create a new thing type","accessLevel":"Write","resourceTypes":[{"name":"thingtype","required":true}]},"CreateTopicRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"rule"}],"description":"Grants permission to create a rule","accessLevel":"Write","resourceTypes":[{"name":"rule","required":true}]},"CreateTopicRuleDestination":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a TopicRuleDestination","accessLevel":"Write","resourceTypes":[]},"DeleteAccountAuditConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the audit configuration associated with the account","accessLevel":"Write","resourceTypes":[]},"DeleteAuditSuppression":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a Device Defender audit suppression","accessLevel":"Write","resourceTypes":[]},"DeleteAuthorizer":{"conditionKeys":[],"resources":[{"name":"authorizer"}],"description":"Grants permission to delete the specified authorizer","accessLevel":"Write","resourceTypes":[{"name":"authorizer","required":true}]},"DeleteBillingGroup":{"conditionKeys":[],"resources":[{"name":"billinggroup"}],"description":"Grants permission to delete the specified billing group","accessLevel":"Write","resourceTypes":[{"name":"billinggroup","required":true}]},"DeleteCACertificate":{"conditionKeys":[],"resources":[{"name":"cacert"}],"description":"Grants permission to delete a registered CA certificate","accessLevel":"Write","resourceTypes":[{"name":"cacert","required":true}]},"DeleteCertificate":{"conditionKeys":[],"resources":[{"name":"cert"}],"description":"Grants permission to delete the specified certificate","accessLevel":"Write","resourceTypes":[{"name":"cert","required":true}]},"DeleteCertificateProvider":{"conditionKeys":[],"resources":[{"name":"certificateprovider"}],"description":"Grants permission to delete a certificate provider","accessLevel":"Write","resourceTypes":[{"name":"certificateprovider","required":true}]},"DeleteCommand":{"conditionKeys":[],"resources":[{"name":"command"}],"description":"Grants permission to delete a command","accessLevel":"Write","resourceTypes":[{"name":"command","required":true}]},"DeleteCommandExecution":{"conditionKeys":[],"resources":[{"name":"client"},{"name":"thing"}],"description":"Grants permission to delete a command execution","accessLevel":"Write","resourceTypes":[{"name":"client","required":false},{"name":"thing","required":false}]},"DeleteConnection":{"conditionKeys":[],"resources":[{"name":"client"}],"description":"Grants permission to disconnect the specified connection","accessLevel":"Write","resourceTypes":[{"name":"client","required":true}]},"DeleteCustomMetric":{"conditionKeys":[],"resources":[{"name":"custommetric"}],"description":"Grants permission to deletes the specified custom metric from your AWS account","accessLevel":"Write","resourceTypes":[{"name":"custommetric","required":true}]},"DeleteDimension":{"conditionKeys":[],"resources":[{"name":"dimension"}],"description":"Grants permission to remove the specified dimension from your AWS account","accessLevel":"Write","resourceTypes":[{"name":"dimension","required":true}]},"DeleteDomainConfiguration":{"conditionKeys":[],"resources":[{"name":"domainconfiguration"}],"description":"Grants permission to delete a domain configuration","accessLevel":"Write","resourceTypes":[{"name":"domainconfiguration","required":true}]},"DeleteDynamicThingGroup":{"conditionKeys":[],"resources":[{"name":"dynamicthinggroup"}],"description":"Grants permission to delete the specified Dynamic Thing Group","accessLevel":"Write","resourceTypes":[{"name":"dynamicthinggroup","required":true}]},"DeleteFleetMetric":{"conditionKeys":[],"resources":[{"name":"fleetmetric"}],"description":"Grants permission to delete the specified fleet metric","accessLevel":"Write","resourceTypes":[{"name":"fleetmetric","required":true}]},"DeleteJob":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to delete a job and its related job executions","accessLevel":"Write","resourceTypes":[{"name":"job","required":true}]},"DeleteJobExecution":{"conditionKeys":[],"resources":[{"name":"job"},{"name":"thing"}],"description":"Grants permission to delete a job execution","accessLevel":"Write","resourceTypes":[{"name":"job","required":true},{"name":"thing","required":true}]},"DeleteJobTemplate":{"conditionKeys":[],"resources":[{"name":"jobtemplate"}],"description":"Grants permission to delete a job template","accessLevel":"Write","resourceTypes":[{"name":"jobtemplate","required":true}]},"DeleteMitigationAction":{"conditionKeys":[],"resources":[{"name":"mitigationaction"}],"description":"Grants permission to delete a defined mitigation action from your AWS account","accessLevel":"Write","resourceTypes":[{"name":"mitigationaction","required":true}]},"DeleteOTAUpdate":{"conditionKeys":[],"resources":[{"name":"otaupdate"}],"description":"Grants permission to delete an OTA update job","accessLevel":"Write","resourceTypes":[{"name":"otaupdate","required":true}]},"DeletePackage":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to delete a package","accessLevel":"Write","resourceTypes":[{"name":"package","required":true}]},"DeletePackageVersion":{"conditionKeys":[],"resources":[{"name":"package"},{"name":"packageversion"}],"description":"Grants permission to delete a version of the specified package","accessLevel":"Write","resourceTypes":[{"name":"package","required":true},{"name":"packageversion","required":true}]},"DeletePolicy":{"conditionKeys":[],"resources":[{"name":"policy"}],"description":"Grants permission to delete the specified policy","accessLevel":"Permissions management","resourceTypes":[{"name":"policy","required":true}]},"DeletePolicyVersion":{"conditionKeys":[],"resources":[{"name":"policy"}],"description":"Grants permission to Delete the specified version of the specified policy","accessLevel":"Permissions management","resourceTypes":[{"name":"policy","required":true}]},"DeleteProvisioningTemplate":{"conditionKeys":[],"resources":[{"name":"provisioningtemplate"}],"description":"Grants permission to delete a fleet provisioning template","accessLevel":"Write","resourceTypes":[{"name":"provisioningtemplate","required":true}]},"DeleteProvisioningTemplateVersion":{"conditionKeys":[],"resources":[{"name":"provisioningtemplate"}],"description":"Grants permission to delete a fleet provisioning template version","accessLevel":"Write","resourceTypes":[{"name":"provisioningtemplate","required":true}]},"DeleteRegistrationCode":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a CA certificate registration code","accessLevel":"Write","resourceTypes":[]},"DeleteRoleAlias":{"conditionKeys":[],"resources":[{"name":"rolealias"}],"description":"Grants permission to delete the specified role alias","accessLevel":"Write","resourceTypes":[{"name":"rolealias","required":true}]},"DeleteScheduledAudit":{"conditionKeys":[],"resources":[{"name":"scheduledaudit"}],"description":"Grants permission to delete a scheduled audit","accessLevel":"Write","resourceTypes":[{"name":"scheduledaudit","required":true}]},"DeleteSecurityProfile":{"conditionKeys":[],"resources":[{"name":"custommetric"},{"name":"dimension"},{"name":"securityprofile"}],"description":"Grants permission to delete a Device Defender security profile","accessLevel":"Write","resourceTypes":[{"name":"securityprofile","required":true},{"name":"custommetric","required":false},{"name":"dimension","required":false}]},"DeleteStream":{"conditionKeys":[],"resources":[{"name":"stream"}],"description":"Grants permission to delete a specified stream","accessLevel":"Write","resourceTypes":[{"name":"stream","required":true}]},"DeleteThing":{"conditionKeys":[],"resources":[{"name":"thing"}],"description":"Grants permission to delete the specified thing","accessLevel":"Write","resourceTypes":[{"name":"thing","required":true}]},"DeleteThingGroup":{"conditionKeys":[],"resources":[{"name":"thinggroup"}],"description":"Grants permission to delete the specified thing group","accessLevel":"Write","resourceTypes":[{"name":"thinggroup","required":true}]},"DeleteThingShadow":{"conditionKeys":[],"resources":[{"name":"thing"}],"description":"Grants permission to delete the specified thing shadow","accessLevel":"Write","resourceTypes":[{"name":"thing","required":true}]},"DeleteThingType":{"conditionKeys":[],"resources":[{"name":"thingtype"}],"description":"Grants permission to delete the specified thing type","accessLevel":"Write","resourceTypes":[{"name":"thingtype","required":true}]},"DeleteTopicRule":{"conditionKeys":[],"resources":[{"name":"rule"}],"description":"Grants permission to delete the specified rule","accessLevel":"Write","resourceTypes":[{"name":"rule","required":true}]},"DeleteTopicRuleDestination":{"conditionKeys":[],"resources":[{"name":"destination"}],"description":"Grants permission to delete a TopicRuleDestination","accessLevel":"Write","resourceTypes":[{"name":"destination","required":true}]},"DeleteV2LoggingLevel":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the specified v2 logging level","accessLevel":"Write","resourceTypes":[]},"DeprecateThingType":{"conditionKeys":[],"resources":[{"name":"thingtype"}],"description":"Grants permission to deprecate the specified thing type","accessLevel":"Write","resourceTypes":[{"name":"thingtype","required":true}]},"DescribeAccountAuditConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about audit configurations for the account","accessLevel":"Read","resourceTypes":[]},"DescribeAuditFinding":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about a single audit finding. Properties include the reason for noncompliance, the severity of the issue, and when the audit that returned the finding was started","accessLevel":"Read","resourceTypes":[]},"DescribeAuditMitigationActionsTask":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about an audit mitigation task that is used to apply mitigation actions to a set of audit findings","accessLevel":"Read","resourceTypes":[]},"DescribeAuditSuppression":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about a Device Defender audit suppression","accessLevel":"Read","resourceTypes":[]},"DescribeAuditTask":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about a Device Defender audit","accessLevel":"Read","resourceTypes":[]},"DescribeAuthorizer":{"conditionKeys":[],"resources":[{"name":"authorizer"}],"description":"Grants permission to describe an authorizer","accessLevel":"Read","resourceTypes":[{"name":"authorizer","required":true}]},"DescribeBillingGroup":{"conditionKeys":[],"resources":[{"name":"billinggroup"}],"description":"Grants permission to get information about the specified billing group","accessLevel":"Read","resourceTypes":[{"name":"billinggroup","required":true}]},"DescribeCACertificate":{"conditionKeys":[],"resources":[{"name":"cacert"}],"description":"Grants permission to describe a registered CA certificate","accessLevel":"Read","resourceTypes":[{"name":"cacert","required":true}]},"DescribeCertificate":{"conditionKeys":[],"resources":[{"name":"cert"}],"description":"Grants permission to get information about the specified certificate","accessLevel":"Read","resourceTypes":[{"name":"cert","required":true}]},"DescribeCertificateProvider":{"conditionKeys":[],"resources":[{"name":"certificateprovider"}],"description":"Grants permission to describe a certificate provider","accessLevel":"Read","resourceTypes":[{"name":"certificateprovider","required":true}]},"DescribeCustomMetric":{"conditionKeys":[],"resources":[{"name":"custommetric"}],"description":"Grants permission to describe a custom metric that is defined in your AWS account","accessLevel":"Read","resourceTypes":[{"name":"custommetric","required":true}]},"DescribeDefaultAuthorizer":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the default authorizer","accessLevel":"Read","resourceTypes":[]},"DescribeDetectMitigationActionsTask":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe a Device Defender ML Detect mitigation action","accessLevel":"Read","resourceTypes":[]},"DescribeDimension":{"conditionKeys":[],"resources":[{"name":"dimension"}],"description":"Grants permission to get details about a dimension that is defined in your AWS account","accessLevel":"Read","resourceTypes":[{"name":"dimension","required":true}]},"DescribeDomainConfiguration":{"conditionKeys":[],"resources":[{"name":"domainconfiguration"}],"description":"Grants permission to get information about the domain configuration","accessLevel":"Read","resourceTypes":[{"name":"domainconfiguration","required":true}]},"DescribeEncryptionConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the encryption configuration for the account","accessLevel":"Read","resourceTypes":[]},"DescribeEndpoint":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a unique endpoint specific to the AWS account making the call","accessLevel":"Read","resourceTypes":[]},"DescribeEventConfigurations":{"conditionKeys":[],"resources":[],"description":"Grants permission to get account event configurations","accessLevel":"Read","resourceTypes":[]},"DescribeFleetMetric":{"conditionKeys":[],"resources":[{"name":"fleetmetric"}],"description":"Grants permission to get information about the specified fleet metric","accessLevel":"Read","resourceTypes":[{"name":"fleetmetric","required":true}]},"DescribeIndex":{"conditionKeys":[],"resources":[{"name":"index"}],"description":"Grants permission to get information about the specified index","accessLevel":"Read","resourceTypes":[{"name":"index","required":true}]},"DescribeJob":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to describe a job","accessLevel":"Read","resourceTypes":[{"name":"job","required":true}]},"DescribeJobExecution":{"conditionKeys":[],"resources":[{"name":"job"},{"name":"thing"}],"description":"Grants permission to describe a job execution","accessLevel":"Read","resourceTypes":[{"name":"job","required":false},{"name":"thing","required":false}]},"DescribeJobTemplate":{"conditionKeys":[],"resources":[{"name":"jobtemplate"}],"description":"Grants permission to describe a job template","accessLevel":"Read","resourceTypes":[{"name":"jobtemplate","required":true}]},"DescribeManagedJobTemplate":{"conditionKeys":[],"resources":[{"name":"jobtemplate"}],"description":"Grants permission to describe a managed job template","accessLevel":"Read","resourceTypes":[{"name":"jobtemplate","required":true}]},"DescribeMitigationAction":{"conditionKeys":[],"resources":[{"name":"mitigationaction"}],"description":"Grants permission to get information about a mitigation action","accessLevel":"Read","resourceTypes":[{"name":"mitigationaction","required":true}]},"DescribeProvisioningTemplate":{"conditionKeys":[],"resources":[{"name":"provisioningtemplate"}],"description":"Grants permission to get information about a fleet provisioning template","accessLevel":"Read","resourceTypes":[{"name":"provisioningtemplate","required":true}]},"DescribeProvisioningTemplateVersion":{"conditionKeys":[],"resources":[{"name":"provisioningtemplate"}],"description":"Grants permission to get information about a fleet provisioning template version","accessLevel":"Read","resourceTypes":[{"name":"provisioningtemplate","required":true}]},"DescribeRoleAlias":{"conditionKeys":[],"resources":[{"name":"rolealias"}],"description":"Grants permission to describe a role alias","accessLevel":"Read","resourceTypes":[{"name":"rolealias","required":true}]},"DescribeScheduledAudit":{"conditionKeys":[],"resources":[{"name":"scheduledaudit"}],"description":"Grants permission to get information about a scheduled audit","accessLevel":"Read","resourceTypes":[{"name":"scheduledaudit","required":true}]},"DescribeSecurityProfile":{"conditionKeys":[],"resources":[{"name":"securityprofile"}],"description":"Grants permission to get information about a Device Defender security profile","accessLevel":"Read","resourceTypes":[{"name":"securityprofile","required":true}]},"DescribeStream":{"conditionKeys":[],"resources":[{"name":"stream"}],"description":"Grants permission to get information about the specified stream","accessLevel":"Read","resourceTypes":[{"name":"stream","required":true}]},"DescribeThing":{"conditionKeys":[],"resources":[{"name":"thing"}],"description":"Grants permission to get information about the specified thing","accessLevel":"Read","resourceTypes":[{"name":"thing","required":true}]},"DescribeThingGroup":{"conditionKeys":[],"resources":[{"name":"thinggroup"}],"description":"Grants permission to get information about the specified thing group","accessLevel":"Read","resourceTypes":[{"name":"thinggroup","required":true}]},"DescribeThingRegistrationTask":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about the bulk thing registration task","accessLevel":"Read","resourceTypes":[]},"DescribeThingType":{"conditionKeys":[],"resources":[{"name":"thingtype"}],"description":"Grants permission to get information about the specified thing type","accessLevel":"Read","resourceTypes":[{"name":"thingtype","required":true}]},"DescribeTunnel":{"conditionKeys":[],"resources":[{"name":"tunnel"}],"description":"Grants permission to describe a tunnel","accessLevel":"Read","resourceTypes":[{"name":"tunnel","required":true}]},"DetachPolicy":{"conditionKeys":[],"resources":[{"name":"cert"},{"name":"thinggroup"}],"description":"Grants permission to detach a policy from the specified target","accessLevel":"Permissions management","resourceTypes":[{"name":"cert","required":false},{"name":"thinggroup","required":false}]},"DetachPrincipalPolicy":{"conditionKeys":[],"resources":[{"name":"cert"}],"description":"Grants permission to remove the specified policy from the specified certificate","accessLevel":"Permissions management","resourceTypes":[{"name":"cert","required":false}]},"DetachSecurityProfile":{"conditionKeys":[],"resources":[{"name":"custommetric"},{"name":"dimension"},{"name":"securityprofile"},{"name":"thinggroup"}],"description":"Grants permission to disassociate a Device Defender security profile from a thing group or from this account","accessLevel":"Write","resourceTypes":[{"name":"securityprofile","required":true},{"name":"custommetric","required":false},{"name":"dimension","required":false},{"name":"thinggroup","required":false}]},"DetachThingPrincipal":{"conditionKeys":["iot:thingArn"],"resources":[{"name":"cert"}],"description":"Grants permission to detach the specified principal from the specified thing","accessLevel":"Write","resourceTypes":[{"name":"cert","required":false}]},"DisableTopicRule":{"conditionKeys":[],"resources":[{"name":"rule"}],"description":"Grants permission to disable the specified rule","accessLevel":"Write","resourceTypes":[{"name":"rule","required":true}]},"DisassociateSbomFromPackageVersion":{"conditionKeys":[],"resources":[{"name":"packageversion"}],"description":"Grants permission to disassociate SBOM files from a package version","accessLevel":"Write","resourceTypes":[{"name":"packageversion","required":true}]},"EnableTopicRule":{"conditionKeys":[],"resources":[{"name":"rule"}],"description":"Grants permission to enable the specified rule","accessLevel":"Write","resourceTypes":[{"name":"rule","required":true}]},"GetBehaviorModelTrainingSummaries":{"conditionKeys":[],"resources":[{"name":"securityprofile"}],"description":"Grants permission to fetch a Device Defender's ML Detect Security Profile training model's status","accessLevel":"List","resourceTypes":[{"name":"securityprofile","required":false}]},"GetBucketsAggregation":{"conditionKeys":[],"resources":[{"name":"index"}],"description":"Grants permission to get buckets aggregation for IoT fleet index","accessLevel":"Read","resourceTypes":[{"name":"index","required":true}]},"GetCardinality":{"conditionKeys":[],"resources":[{"name":"index"}],"description":"Grants permission to get cardinality for IoT fleet index","accessLevel":"Read","resourceTypes":[{"name":"index","required":true}]},"GetCommand":{"conditionKeys":[],"resources":[{"name":"command"}],"description":"Grants permission to get the information about the command","accessLevel":"Read","resourceTypes":[{"name":"command","required":true}]},"GetCommandExecution":{"conditionKeys":[],"resources":[{"name":"client"},{"name":"thing"}],"description":"Grants permission to get the information of a command execution","accessLevel":"Read","resourceTypes":[{"name":"client","required":false},{"name":"thing","required":false}]},"GetEffectivePolicies":{"conditionKeys":[],"resources":[{"name":"cert"}],"description":"Grants permission to get effective policies","accessLevel":"Read","resourceTypes":[{"name":"cert","required":false}]},"GetIndexingConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to get current fleet indexing configuration","accessLevel":"Read","resourceTypes":[]},"GetJobDocument":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to get a job document","accessLevel":"Read","resourceTypes":[{"name":"job","required":true}]},"GetLoggingOptions":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the logging options","accessLevel":"Read","resourceTypes":[]},"GetOTAUpdate":{"conditionKeys":[],"resources":[{"name":"otaupdate"}],"description":"Grants permission to get the information about the OTA update job","accessLevel":"Read","resourceTypes":[{"name":"otaupdate","required":true}]},"GetPackage":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to get the information about the package","accessLevel":"Read","resourceTypes":[{"name":"package","required":true}]},"GetPackageConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the package configuration of the account","accessLevel":"Read","resourceTypes":[]},"GetPackageVersion":{"conditionKeys":[],"resources":[{"name":"package"},{"name":"packageversion"}],"description":"Grants permission to get the version of the package","accessLevel":"Read","resourceTypes":[{"name":"package","required":true},{"name":"packageversion","required":true}]},"GetPercentiles":{"conditionKeys":[],"resources":[{"name":"index"}],"description":"Grants permission to get percentiles for IoT fleet index","accessLevel":"Read","resourceTypes":[{"name":"index","required":true}]},"GetPolicy":{"conditionKeys":[],"resources":[{"name":"policy"}],"description":"Grants permission to get information about the specified policy with the policy document of the default version","accessLevel":"Read","resourceTypes":[{"name":"policy","required":true}]},"GetPolicyVersion":{"conditionKeys":[],"resources":[{"name":"policy"}],"description":"Grants permission to get information about the specified policy version","accessLevel":"Read","resourceTypes":[{"name":"policy","required":true}]},"GetRegistrationCode":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a registration code used to register a CA certificate with AWS IoT","accessLevel":"Read","resourceTypes":[]},"GetRetainedMessage":{"conditionKeys":[],"resources":[{"name":"topic"}],"description":"Grants permission to get the retained message on the specified topic","accessLevel":"Read","resourceTypes":[{"name":"topic","required":true}]},"GetStatistics":{"conditionKeys":[],"resources":[{"name":"index"}],"description":"Grants permission to get statistics for IoT fleet index","accessLevel":"Read","resourceTypes":[{"name":"index","required":true}]},"GetThingConnectivityData":{"conditionKeys":[],"resources":[{"name":"thing"}],"description":"Grants permission to get the thing's connectivity data","accessLevel":"Read","resourceTypes":[{"name":"thing","required":true}]},"GetThingShadow":{"conditionKeys":[],"resources":[{"name":"thing"}],"description":"Grants permission to get the thing shadow","accessLevel":"Read","resourceTypes":[{"name":"thing","required":true}]},"GetTopicRule":{"conditionKeys":[],"resources":[{"name":"rule"}],"description":"Grants permission to get information about the specified rule","accessLevel":"Read","resourceTypes":[{"name":"rule","required":true}]},"GetTopicRuleDestination":{"conditionKeys":[],"resources":[{"name":"destination"}],"description":"Grants permission to get a TopicRuleDestination","accessLevel":"Read","resourceTypes":[{"name":"destination","required":true}]},"GetV2LoggingOptions":{"conditionKeys":[],"resources":[],"description":"Grants permission to get v2 logging options","accessLevel":"Read","resourceTypes":[]},"ListActiveViolations":{"conditionKeys":[],"resources":[{"name":"securityprofile"},{"name":"thing"}],"description":"Grants permission to list the active violations for a given Device Defender security profile or Thing","accessLevel":"List","resourceTypes":[{"name":"securityprofile","required":false},{"name":"thing","required":false}]},"ListAttachedPolicies":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the policies attached to the specified thing group","accessLevel":"List","resourceTypes":[]},"ListAuditFindings":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the findings (results) of a Device Defender audit or of the audits performed during a specified time period","accessLevel":"List","resourceTypes":[]},"ListAuditMitigationActionsExecutions":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the status of audit mitigation action tasks that were executed","accessLevel":"List","resourceTypes":[]},"ListAuditMitigationActionsTasks":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of audit mitigation action tasks that match the specified filters","accessLevel":"List","resourceTypes":[]},"ListAuditSuppressions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list your Device Defender audit suppressions","accessLevel":"List","resourceTypes":[]},"ListAuditTasks":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the Device Defender audits that have been performed during a given time period","accessLevel":"List","resourceTypes":[]},"ListAuthorizers":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the authorizers registered in your account","accessLevel":"List","resourceTypes":[]},"ListBillingGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all billing groups","accessLevel":"List","resourceTypes":[]},"ListCACertificates":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the CA certificates registered for your AWS account","accessLevel":"List","resourceTypes":[]},"ListCertificateProviders":{"conditionKeys":[],"resources":[],"description":"Grants permission to list certificate providers in the account","accessLevel":"List","resourceTypes":[]},"ListCertificates":{"conditionKeys":[],"resources":[],"description":"Grants permission to list your certificates","accessLevel":"List","resourceTypes":[]},"ListCertificatesByCA":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the device certificates signed by the specified CA certificate","accessLevel":"List","resourceTypes":[]},"ListCommandExecutions":{"conditionKeys":[],"resources":[{"name":"client"},{"name":"command"},{"name":"thing"}],"description":"Grants permission to list commands executions in the account","accessLevel":"List","resourceTypes":[{"name":"client","required":false},{"name":"command","required":false},{"name":"thing","required":false}]},"ListCommands":{"conditionKeys":[],"resources":[],"description":"Grants permission to list commands in the account","accessLevel":"List","resourceTypes":[]},"ListCustomMetrics":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the custom metrics in your AWS account","accessLevel":"List","resourceTypes":[]},"ListDetectMitigationActionsExecutions":{"conditionKeys":[],"resources":[{"name":"thing"}],"description":"Grants permission to lists mitigation actions executions for a Device Defender ML Detect Security Profile","accessLevel":"List","resourceTypes":[{"name":"thing","required":false}]},"ListDetectMitigationActionsTasks":{"conditionKeys":[],"resources":[],"description":"Grants permission to list Device Defender ML Detect mitigation actions tasks","accessLevel":"List","resourceTypes":[]},"ListDimensions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the dimensions that are defined for your AWS account","accessLevel":"List","resourceTypes":[]},"ListDomainConfigurations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the domain configuration created by your AWS account","accessLevel":"List","resourceTypes":[]},"ListFleetMetrics":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the fleet metrics in your account","accessLevel":"List","resourceTypes":[]},"ListIndices":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all indices for fleet index","accessLevel":"List","resourceTypes":[]},"ListJobExecutionsForJob":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to list the job executions for a job","accessLevel":"List","resourceTypes":[{"name":"job","required":true}]},"ListJobExecutionsForThing":{"conditionKeys":[],"resources":[{"name":"thing"}],"description":"Grants permission to list the job executions for the specified thing","accessLevel":"List","resourceTypes":[{"name":"thing","required":true}]},"ListJobTemplates":{"conditionKeys":[],"resources":[],"description":"Grants permission to list job templates","accessLevel":"List","resourceTypes":[]},"ListJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to list jobs","accessLevel":"List","resourceTypes":[]},"ListManagedJobTemplates":{"conditionKeys":[],"resources":[],"description":"Grants permission to list managed job templates","accessLevel":"List","resourceTypes":[]},"ListMetricValues":{"conditionKeys":[],"resources":[{"name":"thing"}],"description":"Grants permissions to list the metric values for a thing based on the metricName, and dimension if specified","accessLevel":"List","resourceTypes":[{"name":"thing","required":true}]},"ListMitigationActions":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of all mitigation actions that match the specified filter criteria","accessLevel":"List","resourceTypes":[]},"ListNamedShadowsForThing":{"conditionKeys":[],"resources":[{"name":"thing"}],"description":"Grants permission to list all named shadows for a given thing","accessLevel":"List","resourceTypes":[{"name":"thing","required":true}]},"ListOTAUpdates":{"conditionKeys":[],"resources":[],"description":"Grants permission to list OTA update jobs in the account","accessLevel":"List","resourceTypes":[]},"ListOutgoingCertificates":{"conditionKeys":[],"resources":[],"description":"Grants permission to list certificates that are being transfered but not yet accepted","accessLevel":"List","resourceTypes":[]},"ListPackageVersions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list versions for a package in the account","accessLevel":"List","resourceTypes":[]},"ListPackages":{"conditionKeys":[],"resources":[],"description":"Grants permission to list packages in the account","accessLevel":"List","resourceTypes":[]},"ListPolicies":{"conditionKeys":[],"resources":[],"description":"Grants permission to list your policies","accessLevel":"List","resourceTypes":[]},"ListPolicyPrincipals":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the principals associated with the specified policy","accessLevel":"List","resourceTypes":[]},"ListPolicyVersions":{"conditionKeys":[],"resources":[{"name":"policy"}],"description":"Grants permission to list the versions of the specified policy, and identifies the default version","accessLevel":"List","resourceTypes":[{"name":"policy","required":true}]},"ListPrincipalPolicies":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the policies attached to the specified principal. If you use an Amazon Cognito identity, the ID needs to be in Amazon Cognito Identity format","accessLevel":"List","resourceTypes":[]},"ListPrincipalThings":{"conditionKeys":[],"resources":[{"name":"cert"}],"description":"Grants permission to list the things associated with the specified principal","accessLevel":"List","resourceTypes":[{"name":"cert","required":false}]},"ListPrincipalThingsV2":{"conditionKeys":[],"resources":[{"name":"cert"}],"description":"Grants permission to list the things associated with the specified principal","accessLevel":"List","resourceTypes":[{"name":"cert","required":false}]},"ListProvisioningTemplateVersions":{"conditionKeys":[],"resources":[{"name":"provisioningtemplate"}],"description":"Grants permission to get a list of fleet provisioning template versions","accessLevel":"List","resourceTypes":[{"name":"provisioningtemplate","required":true}]},"ListProvisioningTemplates":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the fleet provisioning templates in your AWS account","accessLevel":"List","resourceTypes":[]},"ListRelatedResourcesForAuditFinding":{"conditionKeys":[],"resources":[],"description":"Grants permission to list related resources for a single audit finding","accessLevel":"List","resourceTypes":[]},"ListRetainedMessages":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the retained messages for your account","accessLevel":"List","resourceTypes":[]},"ListRoleAliases":{"conditionKeys":[],"resources":[],"description":"Grants permission to list role aliases","accessLevel":"List","resourceTypes":[]},"ListSbomValidationResults":{"conditionKeys":[],"resources":[{"name":"packageversion"}],"description":"Grants permission to list SBOM validation results of a package version","accessLevel":"List","resourceTypes":[{"name":"packageversion","required":true}]},"ListScheduledAudits":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all of your scheduled audits","accessLevel":"List","resourceTypes":[]},"ListSecurityProfiles":{"conditionKeys":[],"resources":[{"name":"custommetric"},{"name":"dimension"}],"description":"Grants permission to list the Device Defender security profiles you have created","accessLevel":"List","resourceTypes":[{"name":"custommetric","required":false},{"name":"dimension","required":false}]},"ListSecurityProfilesForTarget":{"conditionKeys":[],"resources":[{"name":"thinggroup"}],"description":"Grants permission to list the Device Defender security profiles attached to a target","accessLevel":"List","resourceTypes":[{"name":"thinggroup","required":false}]},"ListStreams":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the streams in your account","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"authorizer"},{"name":"billinggroup"},{"name":"cacert"},{"name":"certificateprovider"},{"name":"command"},{"name":"custommetric"},{"name":"dimension"},{"name":"domainconfiguration"},{"name":"dynamicthinggroup"},{"name":"fleetmetric"},{"name":"job"},{"name":"jobtemplate"},{"name":"mitigationaction"},{"name":"otaupdate"},{"name":"policy"},{"name":"provisioningtemplate"},{"name":"rolealias"},{"name":"rule"},{"name":"scheduledaudit"},{"name":"securityprofile"},{"name":"stream"},{"name":"thinggroup"},{"name":"thingtype"}],"description":"Grants permission to list all tags for a given resource","accessLevel":"Read","resourceTypes":[{"name":"authorizer","required":false},{"name":"billinggroup","required":false},{"name":"cacert","required":false},{"name":"certificateprovider","required":false},{"name":"command","required":false},{"name":"custommetric","required":false},{"name":"dimension","required":false},{"name":"domainconfiguration","required":false},{"name":"dynamicthinggroup","required":false},{"name":"fleetmetric","required":false},{"name":"job","required":false},{"name":"jobtemplate","required":false},{"name":"mitigationaction","required":false},{"name":"otaupdate","required":false},{"name":"policy","required":false},{"name":"provisioningtemplate","required":false},{"name":"rolealias","required":false},{"name":"rule","required":false},{"name":"scheduledaudit","required":false},{"name":"securityprofile","required":false},{"name":"stream","required":false},{"name":"thinggroup","required":false},{"name":"thingtype","required":false}]},"ListTargetsForPolicy":{"conditionKeys":[],"resources":[{"name":"policy"}],"description":"Grants permission to list targets for the specified policy","accessLevel":"List","resourceTypes":[{"name":"policy","required":true}]},"ListTargetsForSecurityProfile":{"conditionKeys":[],"resources":[{"name":"securityprofile"}],"description":"Grants permission to list the targets associated with a given Device Defender security profile","accessLevel":"List","resourceTypes":[{"name":"securityprofile","required":true}]},"ListThingGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all thing groups","accessLevel":"List","resourceTypes":[]},"ListThingGroupsForThing":{"conditionKeys":[],"resources":[{"name":"thing"}],"description":"Grants permission to list thing groups to which the specified thing belongs","accessLevel":"List","resourceTypes":[{"name":"thing","required":true}]},"ListThingPrincipals":{"conditionKeys":[],"resources":[{"name":"thing"}],"description":"Grants permission to list the principals associated with the specified thing","accessLevel":"List","resourceTypes":[{"name":"thing","required":true}]},"ListThingPrincipalsV2":{"conditionKeys":[],"resources":[{"name":"thing"}],"description":"Grants permission to list the principals associated with the specified thing","accessLevel":"List","resourceTypes":[{"name":"thing","required":true}]},"ListThingRegistrationTaskReports":{"conditionKeys":[],"resources":[],"description":"Grants permission to list information about bulk thing registration tasks","accessLevel":"List","resourceTypes":[]},"ListThingRegistrationTasks":{"conditionKeys":[],"resources":[],"description":"Grants permission to list bulk thing registration tasks","accessLevel":"List","resourceTypes":[]},"ListThingTypes":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all thing types","accessLevel":"List","resourceTypes":[]},"ListThings":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all things","accessLevel":"List","resourceTypes":[]},"ListThingsInBillingGroup":{"conditionKeys":[],"resources":[{"name":"billinggroup"}],"description":"Grants permission to list all things in the specified billing group","accessLevel":"List","resourceTypes":[{"name":"billinggroup","required":true}]},"ListThingsInThingGroup":{"conditionKeys":[],"resources":[{"name":"thinggroup"}],"description":"Grants permission to list all things in the specified thing group","accessLevel":"List","resourceTypes":[{"name":"thinggroup","required":true}]},"ListTopicRuleDestinations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all TopicRuleDestinations","accessLevel":"List","resourceTypes":[]},"ListTopicRules":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the rules for the specific topic","accessLevel":"List","resourceTypes":[]},"ListTunnels":{"conditionKeys":[],"resources":[],"description":"Grants permission to list tunnels","accessLevel":"List","resourceTypes":[]},"ListV2LoggingLevels":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the v2 logging levels","accessLevel":"List","resourceTypes":[]},"ListViolationEvents":{"conditionKeys":[],"resources":[{"name":"securityprofile"},{"name":"thing"}],"description":"Grants permission to list the Device Defender security profile violations discovered during the given time period","accessLevel":"List","resourceTypes":[{"name":"securityprofile","required":false},{"name":"thing","required":false}]},"OpenTunnel":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","iot:ThingGroupArn","iot:TunnelDestinationService"],"resources":[],"description":"Grants permission to open a tunnel","accessLevel":"Write","resourceTypes":[]},"Publish":{"conditionKeys":[],"resources":[{"name":"topic"}],"description":"Grants permission to publish to the specified topic","accessLevel":"Write","resourceTypes":[{"name":"topic","required":true}]},"PutVerificationStateOnViolation":{"conditionKeys":[],"resources":[],"description":"Grants permission to put verification state on a violation","accessLevel":"Write","resourceTypes":[]},"Receive":{"conditionKeys":[],"resources":[{"name":"topic"}],"description":"Grants permission to receive from the specified topic","accessLevel":"Write","resourceTypes":[{"name":"topic","required":true}]},"RegisterCACertificate":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to register a CA certificate with AWS IoT","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"]},"RegisterCertificate":{"conditionKeys":[],"resources":[],"description":"Grants permission to register a device certificate with AWS IoT","accessLevel":"Write","resourceTypes":[]},"RegisterCertificateWithoutCA":{"conditionKeys":[],"resources":[],"description":"Grants permission to register a device certificate with AWS IoT without a registered CA (certificate authority)","accessLevel":"Write","resourceTypes":[]},"RegisterThing":{"conditionKeys":[],"resources":[],"description":"Grants permission to register your thing","accessLevel":"Write","resourceTypes":[]},"RejectCertificateTransfer":{"conditionKeys":[],"resources":[{"name":"cert"}],"description":"Grants permission to reject a pending certificate transfer","accessLevel":"Write","resourceTypes":[{"name":"cert","required":true}]},"RemoveThingFromBillingGroup":{"conditionKeys":[],"resources":[{"name":"billinggroup"},{"name":"thing"}],"description":"Grants permission to remove thing from the specified billing group","accessLevel":"Write","resourceTypes":[{"name":"billinggroup","required":true},{"name":"thing","required":true}]},"RemoveThingFromThingGroup":{"conditionKeys":[],"resources":[{"name":"thing"},{"name":"thinggroup"}],"description":"Grants permission to remove thing from the specified thing group","accessLevel":"Write","resourceTypes":[{"name":"thing","required":true},{"name":"thinggroup","required":true}]},"ReplaceTopicRule":{"conditionKeys":[],"resources":[{"name":"rule"}],"description":"Grants permission to replace the specified rule","accessLevel":"Write","resourceTypes":[{"name":"rule","required":true}]},"RetainPublish":{"conditionKeys":[],"resources":[{"name":"topic"}],"description":"Grants permission to publish a retained message to the specified topic","accessLevel":"Write","resourceTypes":[{"name":"topic","required":true}]},"RotateTunnelAccessToken":{"conditionKeys":["iot:ClientMode","iot:ThingGroupArn","iot:TunnelDestinationService"],"resources":[{"name":"tunnel"}],"description":"Grants permission to rotate the access token of a tunnel","accessLevel":"Write","resourceTypes":[{"name":"tunnel","required":true}]},"SearchIndex":{"conditionKeys":[],"resources":[{"name":"index"}],"description":"Grants permission to search IoT fleet index","accessLevel":"Read","resourceTypes":[{"name":"index","required":true}]},"SetDefaultAuthorizer":{"conditionKeys":[],"resources":[{"name":"authorizer"}],"description":"Grants permission to set the default authorizer. This will be used if a websocket connection is made without specifying an authorizer","accessLevel":"Permissions management","resourceTypes":[{"name":"authorizer","required":true}]},"SetDefaultPolicyVersion":{"conditionKeys":[],"resources":[{"name":"policy"}],"description":"Grants permission to set the specified version of the specified policy as the policy's default (operative) version","accessLevel":"Permissions management","resourceTypes":[{"name":"policy","required":true}]},"SetLoggingOptions":{"conditionKeys":[],"resources":[],"description":"Grants permission to set the logging options","accessLevel":"Write","resourceTypes":[]},"SetV2LoggingLevel":{"conditionKeys":[],"resources":[],"description":"Grants permission to set the v2 logging level","accessLevel":"Write","resourceTypes":[]},"SetV2LoggingOptions":{"conditionKeys":[],"resources":[],"description":"Grants permission to set the v2 logging options","accessLevel":"Write","resourceTypes":[]},"StartAuditMitigationActionsTask":{"conditionKeys":[],"resources":[],"description":"Grants permission to start a task that applies a set of mitigation actions to the specified target","accessLevel":"Write","resourceTypes":[]},"StartCommandExecution":{"conditionKeys":["iot:CommandExecutionParameterBoolean/${CommandParameterName}","iot:CommandExecutionParameterNumber/${CommandParameterName}","iot:CommandExecutionParameterString/${CommandParameterName}"],"resources":[{"name":"client"},{"name":"command"},{"name":"thing"}],"description":"Grants permission to start a new command execution","accessLevel":"Write","resourceTypes":[{"name":"command","required":true},{"name":"client","required":false},{"name":"thing","required":false}]},"StartDetectMitigationActionsTask":{"conditionKeys":[],"resources":[{"name":"securityprofile"}],"description":"Grants permission to start a Device Defender ML Detect mitigation actions task","accessLevel":"Write","resourceTypes":[{"name":"securityprofile","required":false}]},"StartOnDemandAuditTask":{"conditionKeys":[],"resources":[],"description":"Grants permission to start an on-demand Device Defender audit","accessLevel":"Write","resourceTypes":[]},"StartThingRegistrationTask":{"conditionKeys":[],"resources":[],"description":"Grants permission to start a bulk thing registration task","accessLevel":"Write","resourceTypes":[]},"StopThingRegistrationTask":{"conditionKeys":[],"resources":[],"description":"Grants permission to stop a bulk thing registration task","accessLevel":"Write","resourceTypes":[]},"Subscribe":{"conditionKeys":[],"resources":[{"name":"topicfilter"}],"description":"Grants permission to subscribe to the specified TopicFilter","accessLevel":"Write","resourceTypes":[{"name":"topicfilter","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"authorizer"},{"name":"billinggroup"},{"name":"cacert"},{"name":"certificateprovider"},{"name":"command"},{"name":"custommetric"},{"name":"dimension"},{"name":"domainconfiguration"},{"name":"dynamicthinggroup"},{"name":"fleetmetric"},{"name":"job"},{"name":"jobtemplate"},{"name":"mitigationaction"},{"name":"otaupdate"},{"name":"package"},{"name":"packageversion"},{"name":"policy"},{"name":"provisioningtemplate"},{"name":"rolealias"},{"name":"rule"},{"name":"scheduledaudit"},{"name":"securityprofile"},{"name":"stream"},{"name":"thinggroup"},{"name":"thingtype"}],"description":"Grants permission to tag a specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"authorizer","required":false},{"name":"billinggroup","required":false},{"name":"cacert","required":false},{"name":"certificateprovider","required":false},{"name":"command","required":false},{"name":"custommetric","required":false},{"name":"dimension","required":false},{"name":"domainconfiguration","required":false},{"name":"dynamicthinggroup","required":false},{"name":"fleetmetric","required":false},{"name":"job","required":false},{"name":"jobtemplate","required":false},{"name":"mitigationaction","required":false},{"name":"otaupdate","required":false},{"name":"package","required":false},{"name":"packageversion","required":false},{"name":"policy","required":false},{"name":"provisioningtemplate","required":false},{"name":"rolealias","required":false},{"name":"rule","required":false},{"name":"scheduledaudit","required":false},{"name":"securityprofile","required":false},{"name":"stream","required":false},{"name":"thinggroup","required":false},{"name":"thingtype","required":false}]},"TestAuthorization":{"conditionKeys":[],"resources":[{"name":"cert"}],"description":"Grants permission to test the policies evaluation for group policies","accessLevel":"Read","resourceTypes":[{"name":"cert","required":false}]},"TestInvokeAuthorizer":{"conditionKeys":[],"resources":[{"name":"authorizer"}],"description":"Grants permission to test invoke the specified custom authorizer for testing purposes","accessLevel":"Read","resourceTypes":[{"name":"authorizer","required":true}]},"TransferCertificate":{"conditionKeys":[],"resources":[{"name":"cert"}],"description":"Grants permission to transfer the specified certificate to the specified AWS account","accessLevel":"Write","resourceTypes":[{"name":"cert","required":true}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"authorizer"},{"name":"billinggroup"},{"name":"cacert"},{"name":"certificateprovider"},{"name":"command"},{"name":"custommetric"},{"name":"dimension"},{"name":"domainconfiguration"},{"name":"dynamicthinggroup"},{"name":"fleetmetric"},{"name":"job"},{"name":"jobtemplate"},{"name":"mitigationaction"},{"name":"otaupdate"},{"name":"package"},{"name":"packageversion"},{"name":"policy"},{"name":"provisioningtemplate"},{"name":"rolealias"},{"name":"rule"},{"name":"scheduledaudit"},{"name":"securityprofile"},{"name":"stream"},{"name":"thinggroup"},{"name":"thingtype"}],"description":"Grants permission to untag a specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"authorizer","required":false},{"name":"billinggroup","required":false},{"name":"cacert","required":false},{"name":"certificateprovider","required":false},{"name":"command","required":false},{"name":"custommetric","required":false},{"name":"dimension","required":false},{"name":"domainconfiguration","required":false},{"name":"dynamicthinggroup","required":false},{"name":"fleetmetric","required":false},{"name":"job","required":false},{"name":"jobtemplate","required":false},{"name":"mitigationaction","required":false},{"name":"otaupdate","required":false},{"name":"package","required":false},{"name":"packageversion","required":false},{"name":"policy","required":false},{"name":"provisioningtemplate","required":false},{"name":"rolealias","required":false},{"name":"rule","required":false},{"name":"scheduledaudit","required":false},{"name":"securityprofile","required":false},{"name":"stream","required":false},{"name":"thinggroup","required":false},{"name":"thingtype","required":false}]},"UpdateAccountAuditConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to configure or reconfigure the Device Defender audit settings for this account","accessLevel":"Write","resourceTypes":[]},"UpdateAuditSuppression":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a Device Defender audit suppression","accessLevel":"Write","resourceTypes":[]},"UpdateAuthorizer":{"conditionKeys":[],"resources":[{"name":"authorizer"}],"description":"Grants permission to update an authorizer","accessLevel":"Write","resourceTypes":[{"name":"authorizer","required":true}]},"UpdateBillingGroup":{"conditionKeys":[],"resources":[{"name":"billinggroup"}],"description":"Grants permission to update information associated with the specified billing group","accessLevel":"Write","resourceTypes":[{"name":"billinggroup","required":true}]},"UpdateCACertificate":{"conditionKeys":[],"resources":[{"name":"cacert"}],"description":"Grants permission to update a registered CA certificate","accessLevel":"Write","resourceTypes":[{"name":"cacert","required":true}],"dependentActions":["iam:PassRole"]},"UpdateCertificate":{"conditionKeys":[],"resources":[{"name":"cert"}],"description":"Grants permission to update the status of the specified certificate. This operation is idempotent","accessLevel":"Write","resourceTypes":[{"name":"cert","required":true}]},"UpdateCertificateProvider":{"conditionKeys":[],"resources":[{"name":"certificateprovider"}],"description":"Grants permission to update a certificate provider","accessLevel":"Write","resourceTypes":[{"name":"certificateprovider","required":true}]},"UpdateCommand":{"conditionKeys":[],"resources":[{"name":"command"}],"description":"Grants permission to update a command","accessLevel":"Write","resourceTypes":[{"name":"command","required":true}]},"UpdateCustomMetric":{"conditionKeys":[],"resources":[{"name":"custommetric"}],"description":"Grants permission to update the specified custom metric","accessLevel":"Write","resourceTypes":[{"name":"custommetric","required":true}]},"UpdateDimension":{"conditionKeys":[],"resources":[{"name":"dimension"}],"description":"Grants permission to update the definition for a dimension","accessLevel":"Write","resourceTypes":[{"name":"dimension","required":true}]},"UpdateDomainConfiguration":{"conditionKeys":[],"resources":[{"name":"domainconfiguration"}],"description":"Grants permission to update a domain configuration","accessLevel":"Write","resourceTypes":[{"name":"domainconfiguration","required":true}]},"UpdateDynamicThingGroup":{"conditionKeys":[],"resources":[{"name":"dynamicthinggroup"}],"description":"Grants permission to update a Dynamic Thing Group","accessLevel":"Write","resourceTypes":[{"name":"dynamicthinggroup","required":true}]},"UpdateEncryptionConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the encryption configuration for the account","accessLevel":"Write","resourceTypes":[]},"UpdateEventConfigurations":{"conditionKeys":[],"resources":[],"description":"Grants permission to update event configurations","accessLevel":"Write","resourceTypes":[]},"UpdateFleetMetric":{"conditionKeys":[],"resources":[{"name":"fleetmetric"},{"name":"index"}],"description":"Grants permission to update a fleet metric","accessLevel":"Write","resourceTypes":[{"name":"fleetmetric","required":true},{"name":"index","required":true}]},"UpdateIndexingConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update fleet indexing configuration","accessLevel":"Write","resourceTypes":[]},"UpdateJob":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to update a job","accessLevel":"Write","resourceTypes":[{"name":"job","required":true}]},"UpdateMitigationAction":{"conditionKeys":[],"resources":[{"name":"mitigationaction"}],"description":"Grants permission to update the definition for the specified mitigation action","accessLevel":"Write","resourceTypes":[{"name":"mitigationaction","required":true}]},"UpdatePackage":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to update a package","accessLevel":"Write","resourceTypes":[{"name":"package","required":true}],"dependentActions":["iot:GetIndexingConfiguration"]},"UpdatePackageConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the package configuration of the account","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"]},"UpdatePackageVersion":{"conditionKeys":[],"resources":[{"name":"package"},{"name":"packageversion"}],"description":"Grants permission to update the version of the specified package","accessLevel":"Write","resourceTypes":[{"name":"package","required":true},{"name":"packageversion","required":true}],"dependentActions":["iot:GetIndexingConfiguration","s3:GetObjectVersion"]},"UpdateProvisioningTemplate":{"conditionKeys":[],"resources":[{"name":"provisioningtemplate"}],"description":"Grants permission to update a fleet provisioning template","accessLevel":"Write","resourceTypes":[{"name":"provisioningtemplate","required":true}],"dependentActions":["iam:PassRole"]},"UpdateRoleAlias":{"conditionKeys":[],"resources":[{"name":"rolealias"}],"description":"Grants permission to update the role alias","accessLevel":"Write","resourceTypes":[{"name":"rolealias","required":true}],"dependentActions":["iam:PassRole"]},"UpdateScheduledAudit":{"conditionKeys":[],"resources":[{"name":"scheduledaudit"}],"description":"Grants permission to update a scheduled audit, including what checks are performed and how often the audit takes place","accessLevel":"Write","resourceTypes":[{"name":"scheduledaudit","required":true}]},"UpdateSecurityProfile":{"conditionKeys":[],"resources":[{"name":"custommetric"},{"name":"dimension"},{"name":"securityprofile"}],"description":"Grants permission to update a Device Defender security profile","accessLevel":"Write","resourceTypes":[{"name":"securityprofile","required":true},{"name":"custommetric","required":false},{"name":"dimension","required":false}]},"UpdateStream":{"conditionKeys":[],"resources":[{"name":"stream"}],"description":"Grants permission to update the data for a stream","accessLevel":"Write","resourceTypes":[{"name":"stream","required":true}]},"UpdateThing":{"conditionKeys":[],"resources":[{"name":"thing"}],"description":"Grants permission to update information associated with the specified thing","accessLevel":"Write","resourceTypes":[{"name":"thing","required":true}]},"UpdateThingGroup":{"conditionKeys":[],"resources":[{"name":"thinggroup"}],"description":"Grants permission to update information associated with the specified thing group","accessLevel":"Write","resourceTypes":[{"name":"thinggroup","required":true}]},"UpdateThingGroupsForThing":{"conditionKeys":[],"resources":[{"name":"thing"},{"name":"thinggroup"}],"description":"Grants permission to update the thing groups to which the thing belongs","accessLevel":"Write","resourceTypes":[{"name":"thing","required":true},{"name":"thinggroup","required":false}]},"UpdateThingShadow":{"conditionKeys":[],"resources":[{"name":"thing"}],"description":"Grants permission to update the thing shadow","accessLevel":"Write","resourceTypes":[{"name":"thing","required":true}]},"UpdateThingType":{"conditionKeys":[],"resources":[{"name":"thingtype"}],"description":"Grants permission to update information associated with the specified thing type","accessLevel":"Write","resourceTypes":[{"name":"thingtype","required":true}]},"UpdateTopicRuleDestination":{"conditionKeys":[],"resources":[{"name":"destination"}],"description":"Grants permission to update a TopicRuleDestination","accessLevel":"Write","resourceTypes":[{"name":"destination","required":true}]},"ValidateSecurityProfileBehaviors":{"conditionKeys":[],"resources":[],"description":"Grants permission to validate a Device Defender security profile behaviors specification","accessLevel":"Read","resourceTypes":[]}},"resources":[{"name":"authorizer","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:authorizer/${AuthorizerName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"billinggroup","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:billinggroup/${BillingGroupName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"cacert","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:cacert/${CACertificate}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"cert","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:cert/${Certificate}"],"conditionKeys":[]},{"name":"certificateprovider","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:certificateprovider/${CertificateProviderName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"client","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:client/${ClientId}"],"conditionKeys":[]},{"name":"command","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:command/${CommandId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"custommetric","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:custommetric/${MetricName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"destination","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:ruledestination/${DestinationType}/${Uuid}"],"conditionKeys":[]},{"name":"dimension","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:dimension/${DimensionName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"domainconfiguration","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:domainconfiguration/${DomainConfigurationName}/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"dynamicthinggroup","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:thinggroup/${ThingGroupName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"fleetmetric","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:fleetmetric/${FleetMetricName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"index","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:index/${IndexName}"],"conditionKeys":[]},{"name":"job","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:job/${JobId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"jobtemplate","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:jobtemplate/${JobTemplateId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"mitigationaction","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:mitigationaction/${MitigationActionName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"otaupdate","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:otaupdate/${OtaUpdateId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"package","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:package/${PackageName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"packageversion","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:package/${PackageName}/version/${VersionName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"policy","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:policy/${PolicyName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"provisioningtemplate","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:provisioningtemplate/${ProvisioningTemplate}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"rolealias","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:rolealias/${RoleAlias}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"rule","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:rule/${RuleName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"scheduledaudit","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:scheduledaudit/${ScheduleName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"securityprofile","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:securityprofile/${SecurityProfileName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"stream","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:stream/${StreamId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"thing","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:thing/${ThingName}"],"conditionKeys":[]},{"name":"thinggroup","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:thinggroup/${ThingGroupName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"thingtype","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:thingtype/${ThingTypeName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"topic","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:topic/${TopicName}"],"conditionKeys":[]},{"name":"topicfilter","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:topicfilter/${TopicFilter}"],"conditionKeys":[]},{"name":"tunnel","arnFormats":["arn:${Partition}:iot:${Region}:${Account}:tunnel/${TunnelId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key that is present in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key component of a tag associated to the IoT resource in the request"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by a list of tag keys associated to the IoT resource in the request"},"iot:ClientMode":{"types":["String"],"description":"Filters access by the mode of the client for IoT Tunnel"},"iot:CommandExecutionParameterBoolean/${CommandParameterName}":{"types":["Bool"],"description":"Filters access by the command parameter name and boolean value"},"iot:CommandExecutionParameterNumber/${CommandParameterName}":{"types":["Numeric"],"description":"Filters access by the command parameter name and numeric value"},"iot:CommandExecutionParameterString/${CommandParameterName}":{"types":["String"],"description":"Filters access by the command parameter name and string value"},"iot:Delete":{"types":["Bool"],"description":"Filters access by a flag indicating whether or not to also delete an IoT Tunnel immediately when making iot:CloseTunnel request"},"iot:DomainName":{"types":["String"],"description":"Filters access by based on the domain name of an IoT DomainConfiguration"},"iot:ThingGroupArn":{"types":["ArrayOfARN"],"description":"Filters access by a list of IoT Thing Group ARNs that the destination IoT Thing belongs to for an IoT Tunnel"},"iot:TunnelDestinationService":{"types":["ArrayOfString"],"description":"Filters access by a list of destination services for an IoT Tunnel"},"iot:thingArn":{"types":["ARN"],"description":"Filters access by the ARN of an IoT Thing"}}}

package/src/data/servicereference/services/iotanalytics.json

@@ -0,0 +1 @@
+{"name":"iotanalytics","actions":{"BatchPutMessage":{"conditionKeys":[],"resources":[{"name":"channel"}],"description":"Puts a batch of messages into the specified channel","accessLevel":"Write","resourceTypes":[{"name":"channel","required":true}]},"CancelPipelineReprocessing":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Cancels reprocessing for the specified pipeline","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]},"CreateChannel":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"channel"}],"description":"Creates a channel","accessLevel":"Write","resourceTypes":[{"name":"channel","required":true}]},"CreateDataset":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"dataset"}],"description":"Creates a dataset","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}]},"CreateDatasetContent":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Generates content from the specified dataset (by executing the dataset actions)","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}]},"CreateDatastore":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"datastore"}],"description":"Creates a datastore","accessLevel":"Write","resourceTypes":[{"name":"datastore","required":true}]},"CreatePipeline":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"pipeline"}],"description":"Creates a pipeline","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]},"DeleteChannel":{"conditionKeys":[],"resources":[{"name":"channel"}],"description":"Deletes the specified channel","accessLevel":"Write","resourceTypes":[{"name":"channel","required":true}]},"DeleteDataset":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Deletes the specified dataset","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}]},"DeleteDatasetContent":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Deletes the content of the specified dataset","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}]},"DeleteDatastore":{"conditionKeys":[],"resources":[{"name":"datastore"}],"description":"Deletes the specified datastore","accessLevel":"Write","resourceTypes":[{"name":"datastore","required":true}]},"DeletePipeline":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Deletes the specified pipeline","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]},"DescribeChannel":{"conditionKeys":[],"resources":[{"name":"channel"}],"description":"Describes the specified channel","accessLevel":"Read","resourceTypes":[{"name":"channel","required":true}]},"DescribeDataset":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Describes the specified dataset","accessLevel":"Read","resourceTypes":[{"name":"dataset","required":true}]},"DescribeDatastore":{"conditionKeys":[],"resources":[{"name":"datastore"}],"description":"Describes the specified datastore","accessLevel":"Read","resourceTypes":[{"name":"datastore","required":true}]},"DescribeLoggingOptions":{"conditionKeys":[],"resources":[],"description":"Describes logging options for the the account","accessLevel":"Read","resourceTypes":[]},"DescribePipeline":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Describes the specified pipeline","accessLevel":"Read","resourceTypes":[{"name":"pipeline","required":true}]},"GetDatasetContent":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Gets the content of the specified dataset","accessLevel":"Read","resourceTypes":[{"name":"dataset","required":true}]},"ListChannels":{"conditionKeys":[],"resources":[],"description":"Lists the channels for the account","accessLevel":"List","resourceTypes":[]},"ListDatasetContents":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Lists information about dataset contents that have been created","accessLevel":"List","resourceTypes":[{"name":"dataset","required":true}]},"ListDatasets":{"conditionKeys":[],"resources":[],"description":"Lists the datasets for the account","accessLevel":"List","resourceTypes":[]},"ListDatastores":{"conditionKeys":[],"resources":[],"description":"Lists the datastores for the account","accessLevel":"List","resourceTypes":[]},"ListPipelines":{"conditionKeys":[],"resources":[],"description":"Lists the pipelines for the account","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"channel"},{"name":"dataset"},{"name":"datastore"},{"name":"pipeline"}],"description":"Lists the tags (metadata) which you have assigned to the resource","accessLevel":"Read","resourceTypes":[{"name":"channel","required":false},{"name":"dataset","required":false},{"name":"datastore","required":false},{"name":"pipeline","required":false}]},"PutLoggingOptions":{"conditionKeys":[],"resources":[],"description":"Puts logging options for the the account","accessLevel":"Write","resourceTypes":[]},"RunPipelineActivity":{"conditionKeys":[],"resources":[],"description":"Runs the specified pipeline activity","accessLevel":"Read","resourceTypes":[]},"SampleChannelData":{"conditionKeys":[],"resources":[{"name":"channel"}],"description":"Samples the specified channel's data","accessLevel":"Read","resourceTypes":[{"name":"channel","required":true}]},"StartPipelineReprocessing":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Starts reprocessing for the specified pipeline","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"channel"},{"name":"dataset"},{"name":"datastore"},{"name":"pipeline"}],"description":"Adds to or modifies the tags of the given resource. Tags are metadata which can be used to manage a resource","accessLevel":"Tagging","resourceTypes":[{"name":"channel","required":false},{"name":"dataset","required":false},{"name":"datastore","required":false},{"name":"pipeline","required":false}]},"UntagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"channel"},{"name":"dataset"},{"name":"datastore"},{"name":"pipeline"}],"description":"Removes the given tags (metadata) from the resource","accessLevel":"Tagging","resourceTypes":[{"name":"channel","required":false},{"name":"dataset","required":false},{"name":"datastore","required":false},{"name":"pipeline","required":false}]},"UpdateChannel":{"conditionKeys":[],"resources":[{"name":"channel"}],"description":"Updates the specified channel","accessLevel":"Write","resourceTypes":[{"name":"channel","required":true}]},"UpdateDataset":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Updates the specified dataset","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}]},"UpdateDatastore":{"conditionKeys":[],"resources":[{"name":"datastore"}],"description":"Updates the specified datastore","accessLevel":"Write","resourceTypes":[{"name":"datastore","required":true}]},"UpdatePipeline":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Updates the specified pipeline","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]}},"resources":[{"name":"channel","arnFormats":["arn:${Partition}:iotanalytics:${Region}:${Account}:channel/${ChannelName}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","iotanalytics:ResourceTag/${TagKey}"]},{"name":"dataset","arnFormats":["arn:${Partition}:iotanalytics:${Region}:${Account}:dataset/${DatasetName}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","iotanalytics:ResourceTag/${TagKey}"]},{"name":"datastore","arnFormats":["arn:${Partition}:iotanalytics:${Region}:${Account}:datastore/${DatastoreName}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","iotanalytics:ResourceTag/${TagKey}"]},{"name":"pipeline","arnFormats":["arn:${Partition}:iotanalytics:${Region}:${Account}:pipeline/${PipelineName}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","iotanalytics:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access based on the tags that are passed in the request"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access based on the presence of tag keys in the request"},"iotanalytics:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs attached to the resource"}}}

package/src/data/servicereference/services/iotdeviceadvisor.json

@@ -0,0 +1 @@
+{"name":"iotdeviceadvisor","actions":{"CreateSuiteDefinition":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a suite definition","accessLevel":"Write","resourceTypes":[]},"DeleteSuiteDefinition":{"conditionKeys":[],"resources":[{"name":"Suitedefinition"}],"description":"Grants permission to delete a suite definition","accessLevel":"Write","resourceTypes":[{"name":"Suitedefinition","required":true}]},"GetEndpoint":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a Device Advisor endpoint","accessLevel":"Read","resourceTypes":[]},"GetSuiteDefinition":{"conditionKeys":[],"resources":[{"name":"Suitedefinition"}],"description":"Grants permission to get a suite definition","accessLevel":"Read","resourceTypes":[{"name":"Suitedefinition","required":true}]},"GetSuiteRun":{"conditionKeys":[],"resources":[{"name":"Suiterun"}],"description":"Grants permission to get a suite run","accessLevel":"Read","resourceTypes":[{"name":"Suiterun","required":true}]},"GetSuiteRunReport":{"conditionKeys":[],"resources":[{"name":"Suiterun"}],"description":"Grants permission to get the qualification report for a suite run","accessLevel":"Read","resourceTypes":[{"name":"Suiterun","required":true}]},"ListSuiteDefinitions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list suite definitions","accessLevel":"List","resourceTypes":[]},"ListSuiteRuns":{"conditionKeys":[],"resources":[{"name":"Suitedefinition"}],"description":"Grants permission to list suite runs","accessLevel":"List","resourceTypes":[{"name":"Suitedefinition","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"Suitedefinition"},{"name":"Suiterun"}],"description":"Grants permission to list the tags (metadata) assigned to a resource","accessLevel":"Read","resourceTypes":[{"name":"Suitedefinition","required":false},{"name":"Suiterun","required":false}]},"StartSuiteRun":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to start a suite run","accessLevel":"Write","resourceTypes":[]},"StopSuiteRun":{"conditionKeys":[],"resources":[{"name":"Suiterun"}],"description":"Grants permission to stop a suite run","accessLevel":"Write","resourceTypes":[{"name":"Suiterun","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Suitedefinition"},{"name":"Suiterun"}],"description":"Grants permission to add to or modify the tags of the given resource. Tags are metadata which can be used to manage a resource","accessLevel":"Tagging","resourceTypes":[{"name":"Suitedefinition","required":false},{"name":"Suiterun","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"Suitedefinition"},{"name":"Suiterun"}],"description":"Grants permission to remove the given tags (metadata) from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"Suitedefinition","required":false},{"name":"Suiterun","required":false}]},"UpdateSuiteDefinition":{"conditionKeys":[],"resources":[{"name":"Suitedefinition"}],"description":"Grants permission to update a suite definition","accessLevel":"Write","resourceTypes":[{"name":"Suitedefinition","required":true}]}},"resources":[{"name":"Suitedefinition","arnFormats":["arn:${Partition}:iotdeviceadvisor:${Region}:${Account}:suitedefinition/${SuiteDefinitionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Suiterun","arnFormats":["arn:${Partition}:iotdeviceadvisor:${Region}:${Account}:suiterun/${SuiteDefinitionId}/${SuiteRunId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}}}

package/src/data/servicereference/services/iotevents.json

@@ -0,0 +1 @@
+{"name":"iotevents","actions":{"BatchAcknowledgeAlarm":{"conditionKeys":[],"resources":[{"name":"alarmModel"}],"description":"Grants permission to send one or more acknowledge action requests to AWS IoT Events","accessLevel":"Write","resourceTypes":[{"name":"alarmModel","required":true}]},"BatchDeleteDetector":{"conditionKeys":[],"resources":[{"name":"detectorModel"}],"description":"Grants permission to delete a detector instance within the AWS IoT Events system","accessLevel":"Write","resourceTypes":[{"name":"detectorModel","required":true}]},"BatchDisableAlarm":{"conditionKeys":[],"resources":[{"name":"alarmModel"}],"description":"Grants permission to disable one or more alarm instances","accessLevel":"Write","resourceTypes":[{"name":"alarmModel","required":true}]},"BatchEnableAlarm":{"conditionKeys":[],"resources":[{"name":"alarmModel"}],"description":"Grants permission to enable one or more alarm instances","accessLevel":"Write","resourceTypes":[{"name":"alarmModel","required":true}]},"BatchPutMessage":{"conditionKeys":[],"resources":[{"name":"input"}],"description":"Grants permission to send a set of messages to the AWS IoT Events system","accessLevel":"Write","resourceTypes":[{"name":"input","required":true}]},"BatchResetAlarm":{"conditionKeys":[],"resources":[{"name":"alarmModel"}],"description":"Grants permission to reset one or more alarm instances","accessLevel":"Write","resourceTypes":[{"name":"alarmModel","required":true}]},"BatchSnoozeAlarm":{"conditionKeys":[],"resources":[{"name":"alarmModel"}],"description":"Grants permission to change one or more alarm instances to the snooze mode","accessLevel":"Write","resourceTypes":[{"name":"alarmModel","required":true}]},"BatchUpdateDetector":{"conditionKeys":[],"resources":[{"name":"detectorModel"}],"description":"Grants permission to update a detector instance within the AWS IoT Events system","accessLevel":"Write","resourceTypes":[{"name":"detectorModel","required":true}]},"CreateAlarmModel":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"alarmModel"}],"description":"Grants permission to create an alarm model to monitor an AWS IoT Events input attribute or an AWS IoT SiteWise asset property","accessLevel":"Write","resourceTypes":[{"name":"alarmModel","required":true}]},"CreateDetectorModel":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"detectorModel"}],"description":"Grants permission to create a detector model to monitor an AWS IoT Events input attribute","accessLevel":"Write","resourceTypes":[{"name":"detectorModel","required":true}]},"CreateInput":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"input"}],"description":"Grants permission to create an Input in IotEvents","accessLevel":"Write","resourceTypes":[{"name":"input","required":true}]},"DeleteAlarmModel":{"conditionKeys":[],"resources":[{"name":"alarmModel"}],"description":"Grants permission to delete an alarm model","accessLevel":"Write","resourceTypes":[{"name":"alarmModel","required":true}]},"DeleteDetectorModel":{"conditionKeys":[],"resources":[{"name":"detectorModel"}],"description":"Grants permission to delete a detector model","accessLevel":"Write","resourceTypes":[{"name":"detectorModel","required":true}]},"DeleteInput":{"conditionKeys":[],"resources":[{"name":"input"}],"description":"Grants permission to delete an input","accessLevel":"Write","resourceTypes":[{"name":"input","required":true}]},"DescribeAlarm":{"conditionKeys":[],"resources":[{"name":"alarmModel"}],"description":"Grants permission to retrieve information about an alarm instance","accessLevel":"Read","resourceTypes":[{"name":"alarmModel","required":true}]},"DescribeAlarmModel":{"conditionKeys":[],"resources":[{"name":"alarmModel"}],"description":"Grants permission to retrieve information about an alarm model","accessLevel":"Read","resourceTypes":[{"name":"alarmModel","required":true}]},"DescribeDetector":{"conditionKeys":[],"resources":[{"name":"detectorModel"}],"description":"Grants permission to retriev information about a detector instance","accessLevel":"Read","resourceTypes":[{"name":"detectorModel","required":true}]},"DescribeDetectorModel":{"conditionKeys":[],"resources":[{"name":"detectorModel"}],"description":"Grants permission to retrieve information about a detector model","accessLevel":"Read","resourceTypes":[{"name":"detectorModel","required":true}]},"DescribeDetectorModelAnalysis":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the detector model analysis information","accessLevel":"Read","resourceTypes":[]},"DescribeInput":{"conditionKeys":[],"resources":[{"name":"input"}],"description":"Grants permission to retrieve an information about Input","accessLevel":"Read","resourceTypes":[{"name":"input","required":true}]},"DescribeLoggingOptions":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the current settings of the AWS IoT Events logging options","accessLevel":"Read","resourceTypes":[]},"GetDetectorModelAnalysisResults":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the detector model analysis results","accessLevel":"Read","resourceTypes":[]},"ListAlarmModelVersions":{"conditionKeys":[],"resources":[{"name":"alarmModel"}],"description":"Grants permission to list all the versions of an alarm model","accessLevel":"List","resourceTypes":[{"name":"alarmModel","required":true}]},"ListAlarmModels":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the alarm models that you created","accessLevel":"List","resourceTypes":[]},"ListAlarms":{"conditionKeys":[],"resources":[{"name":"alarmModel"}],"description":"Grants permission to retrieve information about all alarm instances per alarmModel","accessLevel":"List","resourceTypes":[{"name":"alarmModel","required":true}]},"ListDetectorModelVersions":{"conditionKeys":[],"resources":[{"name":"detectorModel"}],"description":"Grants permission to list all the versions of a detector model","accessLevel":"List","resourceTypes":[{"name":"detectorModel","required":true}]},"ListDetectorModels":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the detector models that you created","accessLevel":"List","resourceTypes":[]},"ListDetectors":{"conditionKeys":[],"resources":[{"name":"detectorModel"}],"description":"Grants permission to retrieve information about all detector instances per detectormodel","accessLevel":"List","resourceTypes":[{"name":"detectorModel","required":true}]},"ListInputRoutings":{"conditionKeys":[],"resources":[],"description":"Grants permission to list one or more input routings","accessLevel":"List","resourceTypes":[]},"ListInputs":{"conditionKeys":[],"resources":[],"description":"Grants permission to lists the inputs you have created","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"alarmModel"},{"name":"detectorModel"},{"name":"input"}],"description":"Grants permission to list the tags (metadata) which you have assigned to the resource","accessLevel":"Read","resourceTypes":[{"name":"alarmModel","required":false},{"name":"detectorModel","required":false},{"name":"input","required":false}]},"PutLoggingOptions":{"conditionKeys":[],"resources":[],"description":"Grants permission to set or update the AWS IoT Events logging options","accessLevel":"Write","resourceTypes":[]},"StartDetectorModelAnalysis":{"conditionKeys":[],"resources":[],"description":"Grants permission to start the detector model analysis","accessLevel":"Write","resourceTypes":[]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"alarmModel"},{"name":"detectorModel"},{"name":"input"}],"description":"Grants permission to adds to or modifies the tags of the given resource.Tags are metadata which can be used to manage a resource","accessLevel":"Tagging","resourceTypes":[{"name":"alarmModel","required":false},{"name":"detectorModel","required":false},{"name":"input","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"alarmModel"},{"name":"detectorModel"},{"name":"input"}],"description":"Grants permission to remove the given tags (metadata) from the resource","accessLevel":"Tagging","resourceTypes":[{"name":"alarmModel","required":false},{"name":"detectorModel","required":false},{"name":"input","required":false}]},"UpdateAlarmModel":{"conditionKeys":[],"resources":[{"name":"alarmModel"}],"description":"Grants permission to update an alarm model","accessLevel":"Write","resourceTypes":[{"name":"alarmModel","required":true}]},"UpdateDetectorModel":{"conditionKeys":[],"resources":[{"name":"detectorModel"}],"description":"Grants permission to update a detector model","accessLevel":"Write","resourceTypes":[{"name":"detectorModel","required":true}]},"UpdateInput":{"conditionKeys":[],"resources":[{"name":"input"}],"description":"Grants permission to update an input","accessLevel":"Write","resourceTypes":[{"name":"input","required":true}]},"UpdateInputRouting":{"conditionKeys":[],"resources":[{"name":"input"}],"description":"Grants permission to update input routing","accessLevel":"Write","resourceTypes":[{"name":"input","required":true}]}},"resources":[{"name":"alarmModel","arnFormats":["arn:${Partition}:iotevents:${Region}:${Account}:alarmModel/${AlarmModelName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"detectorModel","arnFormats":["arn:${Partition}:iotevents:${Region}:${Account}:detectorModel/${DetectorModelName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"input","arnFormats":["arn:${Partition}:iotevents:${Region}:${Account}:input/${InputName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters actions by the tag keys in the request"},"iotevents:keyValue":{"types":["String"],"description":"Filters access by the instanceId (key-value) of the message"}}}

package/src/data/servicereference/services/iotfleethub.json

@@ -0,0 +1 @@
+{"name":"iotfleethub","actions":{"CreateApplication":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an application","accessLevel":"Write","resourceTypes":[],"dependentActions":["sso:CreateManagedApplicationInstance","sso:DescribeRegisteredRegions"]},"DeleteApplication":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to delete an application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}],"dependentActions":["sso:DeleteManagedApplicationInstance"]},"DescribeApplication":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to describe an application","accessLevel":"Read","resourceTypes":[{"name":"application","required":true}]},"ListApplications":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all applications","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to list all tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"application","required":false}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"application"}],"description":"Grants permission to tag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"application","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"application"}],"description":"Grants permission to untag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"application","required":false}]},"UpdateApplication":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to update an application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]}},"resources":[{"name":"application","arnFormats":["arn:${Partition}:iotfleethub:${Region}:${Account}:application/${ApplicationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters actions by the tag keys in the request"}}}