aws-iam-ls 0.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (522) hide show
  1. package/.direnv/bin/nix-direnv-reload +19 -0
  2. package/.direnv/flake-profile-a5d5b61aa8a61b7d9d765e1daf971a9a578f1cfa.rc +2156 -0
  3. package/.github/workflows/publish.yml +37 -0
  4. package/.github/workflows/test.yml +16 -0
  5. package/.vscodeignore +17 -0
  6. package/LICENSE +21 -0
  7. package/package.json +53 -0
  8. package/readme.md +25 -0
  9. package/src/data/condition-keys/global.json +362 -0
  10. package/src/data/servicereference/actions.json +1 -0
  11. package/src/data/servicereference/service-principals.json +1 -0
  12. package/src/data/servicereference/services/a2c.json +1 -0
  13. package/src/data/servicereference/services/a4b.json +1 -0
  14. package/src/data/servicereference/services/access-analyzer.json +1 -0
  15. package/src/data/servicereference/services/account.json +1 -0
  16. package/src/data/servicereference/services/acm-pca.json +1 -0
  17. package/src/data/servicereference/services/acm.json +1 -0
  18. package/src/data/servicereference/services/aco-automation.json +1 -0
  19. package/src/data/servicereference/services/action-recommendations.json +1 -0
  20. package/src/data/servicereference/services/activate.json +1 -0
  21. package/src/data/servicereference/services/aidevops.json +1 -0
  22. package/src/data/servicereference/services/aiops.json +1 -0
  23. package/src/data/servicereference/services/airflow-serverless.json +1 -0
  24. package/src/data/servicereference/services/airflow.json +1 -0
  25. package/src/data/servicereference/services/amplify.json +1 -0
  26. package/src/data/servicereference/services/amplifybackend.json +1 -0
  27. package/src/data/servicereference/services/amplifyuibuilder.json +1 -0
  28. package/src/data/servicereference/services/aoss.json +1 -0
  29. package/src/data/servicereference/services/apigateway.json +1 -0
  30. package/src/data/servicereference/services/app-integrations.json +1 -0
  31. package/src/data/servicereference/services/appconfig.json +1 -0
  32. package/src/data/servicereference/services/appfabric.json +1 -0
  33. package/src/data/servicereference/services/appflow.json +1 -0
  34. package/src/data/servicereference/services/application-autoscaling.json +1 -0
  35. package/src/data/servicereference/services/application-signals.json +1 -0
  36. package/src/data/servicereference/services/application-transformation.json +1 -0
  37. package/src/data/servicereference/services/applicationinsights.json +1 -0
  38. package/src/data/servicereference/services/appmesh-preview.json +1 -0
  39. package/src/data/servicereference/services/appmesh.json +1 -0
  40. package/src/data/servicereference/services/apprunner.json +1 -0
  41. package/src/data/servicereference/services/appstream.json +1 -0
  42. package/src/data/servicereference/services/appstudio.json +1 -0
  43. package/src/data/servicereference/services/appsync.json +1 -0
  44. package/src/data/servicereference/services/apptest.json +1 -0
  45. package/src/data/servicereference/services/aps.json +1 -0
  46. package/src/data/servicereference/services/arc-region-switch.json +1 -0
  47. package/src/data/servicereference/services/arc-zonal-shift.json +1 -0
  48. package/src/data/servicereference/services/arsenal.json +1 -0
  49. package/src/data/servicereference/services/artifact.json +1 -0
  50. package/src/data/servicereference/services/athena.json +1 -0
  51. package/src/data/servicereference/services/auditmanager.json +1 -0
  52. package/src/data/servicereference/services/autoscaling-plans.json +1 -0
  53. package/src/data/servicereference/services/autoscaling.json +1 -0
  54. package/src/data/servicereference/services/aws-marketplace-management.json +1 -0
  55. package/src/data/servicereference/services/aws-marketplace.json +1 -0
  56. package/src/data/servicereference/services/aws-mcp.json +1 -0
  57. package/src/data/servicereference/services/aws-portal.json +1 -0
  58. package/src/data/servicereference/services/awsconnector.json +1 -0
  59. package/src/data/servicereference/services/b2bi.json +1 -0
  60. package/src/data/servicereference/services/backup-gateway.json +1 -0
  61. package/src/data/servicereference/services/backup-search.json +1 -0
  62. package/src/data/servicereference/services/backup-storage.json +1 -0
  63. package/src/data/servicereference/services/backup.json +1 -0
  64. package/src/data/servicereference/services/batch.json +1 -0
  65. package/src/data/servicereference/services/bcm-dashboards.json +1 -0
  66. package/src/data/servicereference/services/bcm-data-exports.json +1 -0
  67. package/src/data/servicereference/services/bcm-pricing-calculator.json +1 -0
  68. package/src/data/servicereference/services/bcm-recommended-actions.json +1 -0
  69. package/src/data/servicereference/services/bedrock-agentcore.json +1 -0
  70. package/src/data/servicereference/services/bedrock-mantle.json +1 -0
  71. package/src/data/servicereference/services/bedrock.json +1 -0
  72. package/src/data/servicereference/services/billing.json +1 -0
  73. package/src/data/servicereference/services/billingconductor.json +1 -0
  74. package/src/data/servicereference/services/braket.json +1 -0
  75. package/src/data/servicereference/services/budgets.json +1 -0
  76. package/src/data/servicereference/services/bugbust.json +1 -0
  77. package/src/data/servicereference/services/cases.json +1 -0
  78. package/src/data/servicereference/services/cassandra.json +1 -0
  79. package/src/data/servicereference/services/ce.json +1 -0
  80. package/src/data/servicereference/services/chatbot.json +1 -0
  81. package/src/data/servicereference/services/chime.json +1 -0
  82. package/src/data/servicereference/services/cleanrooms-ml.json +1 -0
  83. package/src/data/servicereference/services/cleanrooms.json +1 -0
  84. package/src/data/servicereference/services/cloud9.json +1 -0
  85. package/src/data/servicereference/services/clouddirectory.json +1 -0
  86. package/src/data/servicereference/services/cloudformation.json +1 -0
  87. package/src/data/servicereference/services/cloudfront-keyvaluestore.json +1 -0
  88. package/src/data/servicereference/services/cloudfront.json +1 -0
  89. package/src/data/servicereference/services/cloudhsm.json +1 -0
  90. package/src/data/servicereference/services/cloudsearch.json +1 -0
  91. package/src/data/servicereference/services/cloudshell.json +1 -0
  92. package/src/data/servicereference/services/cloudtrail-data.json +1 -0
  93. package/src/data/servicereference/services/cloudtrail.json +1 -0
  94. package/src/data/servicereference/services/cloudwatch.json +1 -0
  95. package/src/data/servicereference/services/codeartifact.json +1 -0
  96. package/src/data/servicereference/services/codebuild.json +1 -0
  97. package/src/data/servicereference/services/codecatalyst.json +1 -0
  98. package/src/data/servicereference/services/codecommit.json +1 -0
  99. package/src/data/servicereference/services/codeconnections.json +1 -0
  100. package/src/data/servicereference/services/codedeploy-commands-secure.json +1 -0
  101. package/src/data/servicereference/services/codedeploy.json +1 -0
  102. package/src/data/servicereference/services/codeguru-profiler.json +1 -0
  103. package/src/data/servicereference/services/codeguru-reviewer.json +1 -0
  104. package/src/data/servicereference/services/codeguru-security.json +1 -0
  105. package/src/data/servicereference/services/codeguru.json +1 -0
  106. package/src/data/servicereference/services/codepipeline.json +1 -0
  107. package/src/data/servicereference/services/codestar-connections.json +1 -0
  108. package/src/data/servicereference/services/codestar-notifications.json +1 -0
  109. package/src/data/servicereference/services/codestar.json +1 -0
  110. package/src/data/servicereference/services/codewhisperer.json +1 -0
  111. package/src/data/servicereference/services/cognito-identity.json +1 -0
  112. package/src/data/servicereference/services/cognito-idp.json +1 -0
  113. package/src/data/servicereference/services/cognito-sync.json +1 -0
  114. package/src/data/servicereference/services/comprehend.json +1 -0
  115. package/src/data/servicereference/services/comprehendmedical.json +1 -0
  116. package/src/data/servicereference/services/compute-optimizer.json +1 -0
  117. package/src/data/servicereference/services/config.json +1 -0
  118. package/src/data/servicereference/services/connect-campaigns.json +1 -0
  119. package/src/data/servicereference/services/connect.json +1 -0
  120. package/src/data/servicereference/services/consoleapp.json +1 -0
  121. package/src/data/servicereference/services/consolidatedbilling.json +1 -0
  122. package/src/data/servicereference/services/controlcatalog.json +1 -0
  123. package/src/data/servicereference/services/controltower.json +1 -0
  124. package/src/data/servicereference/services/cost-optimization-hub.json +1 -0
  125. package/src/data/servicereference/services/cur.json +1 -0
  126. package/src/data/servicereference/services/customer-verification.json +1 -0
  127. package/src/data/servicereference/services/databrew.json +1 -0
  128. package/src/data/servicereference/services/dataexchange.json +1 -0
  129. package/src/data/servicereference/services/datapipeline.json +1 -0
  130. package/src/data/servicereference/services/datasync.json +1 -0
  131. package/src/data/servicereference/services/datazone.json +1 -0
  132. package/src/data/servicereference/services/dax.json +1 -0
  133. package/src/data/servicereference/services/dbqms.json +1 -0
  134. package/src/data/servicereference/services/deadline.json +1 -0
  135. package/src/data/servicereference/services/detective.json +1 -0
  136. package/src/data/servicereference/services/devicefarm.json +1 -0
  137. package/src/data/servicereference/services/devops-guru.json +1 -0
  138. package/src/data/servicereference/services/directconnect.json +1 -0
  139. package/src/data/servicereference/services/discovery.json +1 -0
  140. package/src/data/servicereference/services/dlm.json +1 -0
  141. package/src/data/servicereference/services/dms.json +1 -0
  142. package/src/data/servicereference/services/docdb-elastic.json +1 -0
  143. package/src/data/servicereference/services/drs.json +1 -0
  144. package/src/data/servicereference/services/ds-data.json +1 -0
  145. package/src/data/servicereference/services/ds.json +1 -0
  146. package/src/data/servicereference/services/dsql.json +1 -0
  147. package/src/data/servicereference/services/dynamodb.json +1 -0
  148. package/src/data/servicereference/services/ebs.json +1 -0
  149. package/src/data/servicereference/services/ec2-instance-connect.json +1 -0
  150. package/src/data/servicereference/services/ec2.json +1 -0
  151. package/src/data/servicereference/services/ec2messages.json +1 -0
  152. package/src/data/servicereference/services/ecr-public.json +1 -0
  153. package/src/data/servicereference/services/ecr.json +1 -0
  154. package/src/data/servicereference/services/ecs-mcp.json +1 -0
  155. package/src/data/servicereference/services/ecs.json +1 -0
  156. package/src/data/servicereference/services/eks-auth.json +1 -0
  157. package/src/data/servicereference/services/eks-mcp.json +1 -0
  158. package/src/data/servicereference/services/eks.json +1 -0
  159. package/src/data/servicereference/services/elasticache.json +1 -0
  160. package/src/data/servicereference/services/elasticbeanstalk.json +1 -0
  161. package/src/data/servicereference/services/elasticfilesystem.json +1 -0
  162. package/src/data/servicereference/services/elasticloadbalancing.json +1 -0
  163. package/src/data/servicereference/services/elasticmapreduce.json +1 -0
  164. package/src/data/servicereference/services/elastictranscoder.json +1 -0
  165. package/src/data/servicereference/services/elemental-activations.json +1 -0
  166. package/src/data/servicereference/services/elemental-appliances-software.json +1 -0
  167. package/src/data/servicereference/services/elemental-inference.json +1 -0
  168. package/src/data/servicereference/services/elemental-support-cases.json +1 -0
  169. package/src/data/servicereference/services/elemental-support-content.json +1 -0
  170. package/src/data/servicereference/services/emr-containers.json +1 -0
  171. package/src/data/servicereference/services/emr-serverless.json +1 -0
  172. package/src/data/servicereference/services/entityresolution.json +1 -0
  173. package/src/data/servicereference/services/es.json +1 -0
  174. package/src/data/servicereference/services/events.json +1 -0
  175. package/src/data/servicereference/services/evidently.json +1 -0
  176. package/src/data/servicereference/services/evs.json +1 -0
  177. package/src/data/servicereference/services/execute-api.json +1 -0
  178. package/src/data/servicereference/services/finspace-api.json +1 -0
  179. package/src/data/servicereference/services/finspace.json +1 -0
  180. package/src/data/servicereference/services/firehose.json +1 -0
  181. package/src/data/servicereference/services/fis.json +1 -0
  182. package/src/data/servicereference/services/fms.json +1 -0
  183. package/src/data/servicereference/services/forecast.json +1 -0
  184. package/src/data/servicereference/services/frauddetector.json +1 -0
  185. package/src/data/servicereference/services/freertos.json +1 -0
  186. package/src/data/servicereference/services/freetier.json +1 -0
  187. package/src/data/servicereference/services/fsx.json +1 -0
  188. package/src/data/servicereference/services/gamelift.json +1 -0
  189. package/src/data/servicereference/services/gameliftstreams.json +1 -0
  190. package/src/data/servicereference/services/geo-maps.json +1 -0
  191. package/src/data/servicereference/services/geo-places.json +1 -0
  192. package/src/data/servicereference/services/geo-routes.json +1 -0
  193. package/src/data/servicereference/services/geo.json +1 -0
  194. package/src/data/servicereference/services/glacier.json +1 -0
  195. package/src/data/servicereference/services/globalaccelerator.json +1 -0
  196. package/src/data/servicereference/services/glue.json +1 -0
  197. package/src/data/servicereference/services/grafana.json +1 -0
  198. package/src/data/servicereference/services/greengrass.json +1 -0
  199. package/src/data/servicereference/services/groundstation.json +1 -0
  200. package/src/data/servicereference/services/groundtruthlabeling.json +1 -0
  201. package/src/data/servicereference/services/guardduty.json +1 -0
  202. package/src/data/servicereference/services/health-agent.json +1 -0
  203. package/src/data/servicereference/services/health.json +1 -0
  204. package/src/data/servicereference/services/healthlake.json +1 -0
  205. package/src/data/servicereference/services/honeycode.json +1 -0
  206. package/src/data/servicereference/services/iam.json +1 -0
  207. package/src/data/servicereference/services/identity-sync.json +1 -0
  208. package/src/data/servicereference/services/identitystore-auth.json +1 -0
  209. package/src/data/servicereference/services/identitystore.json +1 -0
  210. package/src/data/servicereference/services/imagebuilder.json +1 -0
  211. package/src/data/servicereference/services/importexport.json +1 -0
  212. package/src/data/servicereference/services/inspector-scan.json +1 -0
  213. package/src/data/servicereference/services/inspector.json +1 -0
  214. package/src/data/servicereference/services/inspector2-telemetry.json +1 -0
  215. package/src/data/servicereference/services/inspector2.json +1 -0
  216. package/src/data/servicereference/services/interconnect.json +1 -0
  217. package/src/data/servicereference/services/internetmonitor.json +1 -0
  218. package/src/data/servicereference/services/invoicing.json +1 -0
  219. package/src/data/servicereference/services/iot-device-tester.json +1 -0
  220. package/src/data/servicereference/services/iot.json +1 -0
  221. package/src/data/servicereference/services/iotanalytics.json +1 -0
  222. package/src/data/servicereference/services/iotdeviceadvisor.json +1 -0
  223. package/src/data/servicereference/services/iotevents.json +1 -0
  224. package/src/data/servicereference/services/iotfleethub.json +1 -0
  225. package/src/data/servicereference/services/iotfleetwise.json +1 -0
  226. package/src/data/servicereference/services/iotjobsdata.json +1 -0
  227. package/src/data/servicereference/services/iotmanagedintegrations.json +1 -0
  228. package/src/data/servicereference/services/iotsitewise.json +1 -0
  229. package/src/data/servicereference/services/iottwinmaker.json +1 -0
  230. package/src/data/servicereference/services/iotwireless.json +1 -0
  231. package/src/data/servicereference/services/iq-permission.json +1 -0
  232. package/src/data/servicereference/services/iq.json +1 -0
  233. package/src/data/servicereference/services/ivs.json +1 -0
  234. package/src/data/servicereference/services/ivschat.json +1 -0
  235. package/src/data/servicereference/services/kafka-cluster.json +1 -0
  236. package/src/data/servicereference/services/kafka.json +1 -0
  237. package/src/data/servicereference/services/kafkaconnect.json +1 -0
  238. package/src/data/servicereference/services/kendra-ranking.json +1 -0
  239. package/src/data/servicereference/services/kendra.json +1 -0
  240. package/src/data/servicereference/services/kinesis.json +1 -0
  241. package/src/data/servicereference/services/kinesisanalytics.json +1 -0
  242. package/src/data/servicereference/services/kinesisvideo.json +1 -0
  243. package/src/data/servicereference/services/kms.json +1 -0
  244. package/src/data/servicereference/services/lakeformation.json +1 -0
  245. package/src/data/servicereference/services/lambda.json +1 -0
  246. package/src/data/servicereference/services/launchwizard.json +1 -0
  247. package/src/data/servicereference/services/lex.json +1 -0
  248. package/src/data/servicereference/services/license-manager-linux-subscriptions.json +1 -0
  249. package/src/data/servicereference/services/license-manager-user-subscriptions.json +1 -0
  250. package/src/data/servicereference/services/license-manager.json +1 -0
  251. package/src/data/servicereference/services/lightsail.json +1 -0
  252. package/src/data/servicereference/services/logs.json +1 -0
  253. package/src/data/servicereference/services/lookoutequipment.json +1 -0
  254. package/src/data/servicereference/services/lookoutmetrics.json +1 -0
  255. package/src/data/servicereference/services/lookoutvision.json +1 -0
  256. package/src/data/servicereference/services/m2.json +1 -0
  257. package/src/data/servicereference/services/machinelearning.json +1 -0
  258. package/src/data/servicereference/services/macie2.json +1 -0
  259. package/src/data/servicereference/services/managedblockchain-query.json +1 -0
  260. package/src/data/servicereference/services/managedblockchain.json +1 -0
  261. package/src/data/servicereference/services/mapcredits.json +1 -0
  262. package/src/data/servicereference/services/marketplacecommerceanalytics.json +1 -0
  263. package/src/data/servicereference/services/mechanicalturk.json +1 -0
  264. package/src/data/servicereference/services/mediaconnect.json +1 -0
  265. package/src/data/servicereference/services/mediaconvert.json +1 -0
  266. package/src/data/servicereference/services/mediaimport.json +1 -0
  267. package/src/data/servicereference/services/medialive.json +1 -0
  268. package/src/data/servicereference/services/mediapackage-vod.json +1 -0
  269. package/src/data/servicereference/services/mediapackage.json +1 -0
  270. package/src/data/servicereference/services/mediapackagev2.json +1 -0
  271. package/src/data/servicereference/services/mediastore.json +1 -0
  272. package/src/data/servicereference/services/mediatailor.json +1 -0
  273. package/src/data/servicereference/services/medical-imaging.json +1 -0
  274. package/src/data/servicereference/services/memorydb.json +1 -0
  275. package/src/data/servicereference/services/mgh.json +1 -0
  276. package/src/data/servicereference/services/mgn.json +1 -0
  277. package/src/data/servicereference/services/migrationhub-orchestrator.json +1 -0
  278. package/src/data/servicereference/services/migrationhub-strategy.json +1 -0
  279. package/src/data/servicereference/services/mobileanalytics.json +1 -0
  280. package/src/data/servicereference/services/mobiletargeting.json +1 -0
  281. package/src/data/servicereference/services/monitron.json +1 -0
  282. package/src/data/servicereference/services/mpa.json +1 -0
  283. package/src/data/servicereference/services/mq.json +1 -0
  284. package/src/data/servicereference/services/neptune-db.json +1 -0
  285. package/src/data/servicereference/services/neptune-graph.json +1 -0
  286. package/src/data/servicereference/services/network-firewall.json +1 -0
  287. package/src/data/servicereference/services/network-security-director.json +1 -0
  288. package/src/data/servicereference/services/networkflowmonitor.json +1 -0
  289. package/src/data/servicereference/services/networkmanager-chat.json +1 -0
  290. package/src/data/servicereference/services/networkmanager.json +1 -0
  291. package/src/data/servicereference/services/networkmonitor.json +1 -0
  292. package/src/data/servicereference/services/nimble.json +1 -0
  293. package/src/data/servicereference/services/notifications-contacts.json +1 -0
  294. package/src/data/servicereference/services/notifications.json +1 -0
  295. package/src/data/servicereference/services/nova-act.json +1 -0
  296. package/src/data/servicereference/services/oam.json +1 -0
  297. package/src/data/servicereference/services/observabilityadmin.json +1 -0
  298. package/src/data/servicereference/services/odb.json +1 -0
  299. package/src/data/servicereference/services/omics.json +1 -0
  300. package/src/data/servicereference/services/one.json +1 -0
  301. package/src/data/servicereference/services/opensearch.json +1 -0
  302. package/src/data/servicereference/services/opsworks-cm.json +1 -0
  303. package/src/data/servicereference/services/opsworks.json +1 -0
  304. package/src/data/servicereference/services/organizations.json +1 -0
  305. package/src/data/servicereference/services/osis.json +1 -0
  306. package/src/data/servicereference/services/outposts.json +1 -0
  307. package/src/data/servicereference/services/panorama.json +1 -0
  308. package/src/data/servicereference/services/partnercentral-account-management.json +1 -0
  309. package/src/data/servicereference/services/partnercentral.json +1 -0
  310. package/src/data/servicereference/services/payment-cryptography.json +1 -0
  311. package/src/data/servicereference/services/payments.json +1 -0
  312. package/src/data/servicereference/services/pca-connector-ad.json +1 -0
  313. package/src/data/servicereference/services/pca-connector-scep.json +1 -0
  314. package/src/data/servicereference/services/pcs.json +1 -0
  315. package/src/data/servicereference/services/personalize.json +1 -0
  316. package/src/data/servicereference/services/pi.json +1 -0
  317. package/src/data/servicereference/services/pipes.json +1 -0
  318. package/src/data/servicereference/services/polly.json +1 -0
  319. package/src/data/servicereference/services/pricing.json +1 -0
  320. package/src/data/servicereference/services/pricingplanmanager.json +1 -0
  321. package/src/data/servicereference/services/private-networks.json +1 -0
  322. package/src/data/servicereference/services/profile.json +1 -0
  323. package/src/data/servicereference/services/proton.json +1 -0
  324. package/src/data/servicereference/services/purchase-orders.json +1 -0
  325. package/src/data/servicereference/services/q.json +1 -0
  326. package/src/data/servicereference/services/qapps.json +1 -0
  327. package/src/data/servicereference/services/qbusiness.json +1 -0
  328. package/src/data/servicereference/services/qdeveloper.json +1 -0
  329. package/src/data/servicereference/services/qldb.json +1 -0
  330. package/src/data/servicereference/services/quicksight.json +1 -0
  331. package/src/data/servicereference/services/ram.json +1 -0
  332. package/src/data/servicereference/services/rbin.json +1 -0
  333. package/src/data/servicereference/services/rds-data.json +1 -0
  334. package/src/data/servicereference/services/rds-db.json +1 -0
  335. package/src/data/servicereference/services/rds.json +1 -0
  336. package/src/data/servicereference/services/redshift-data.json +1 -0
  337. package/src/data/servicereference/services/redshift-serverless.json +1 -0
  338. package/src/data/servicereference/services/redshift.json +1 -0
  339. package/src/data/servicereference/services/refactor-spaces.json +1 -0
  340. package/src/data/servicereference/services/rekognition.json +1 -0
  341. package/src/data/servicereference/services/repostspace.json +1 -0
  342. package/src/data/servicereference/services/resiliencehub.json +1 -0
  343. package/src/data/servicereference/services/resource-explorer-2.json +1 -0
  344. package/src/data/servicereference/services/resource-explorer.json +1 -0
  345. package/src/data/servicereference/services/resource-groups.json +1 -0
  346. package/src/data/servicereference/services/rhelkb.json +1 -0
  347. package/src/data/servicereference/services/robomaker.json +1 -0
  348. package/src/data/servicereference/services/rolesanywhere.json +1 -0
  349. package/src/data/servicereference/services/route53-recovery-cluster.json +1 -0
  350. package/src/data/servicereference/services/route53-recovery-control-config.json +1 -0
  351. package/src/data/servicereference/services/route53-recovery-readiness.json +1 -0
  352. package/src/data/servicereference/services/route53.json +1 -0
  353. package/src/data/servicereference/services/route53domains.json +1 -0
  354. package/src/data/servicereference/services/route53globalresolver.json +1 -0
  355. package/src/data/servicereference/services/route53profiles.json +1 -0
  356. package/src/data/servicereference/services/route53resolver.json +1 -0
  357. package/src/data/servicereference/services/rtbfabric.json +1 -0
  358. package/src/data/servicereference/services/rum.json +1 -0
  359. package/src/data/servicereference/services/s3-object-lambda.json +1 -0
  360. package/src/data/servicereference/services/s3-outposts.json +1 -0
  361. package/src/data/servicereference/services/s3.json +1 -0
  362. package/src/data/servicereference/services/s3express.json +1 -0
  363. package/src/data/servicereference/services/s3tables.json +1 -0
  364. package/src/data/servicereference/services/s3vectors.json +1 -0
  365. package/src/data/servicereference/services/sagemaker-data-science-assistant.json +1 -0
  366. package/src/data/servicereference/services/sagemaker-geospatial.json +1 -0
  367. package/src/data/servicereference/services/sagemaker-mlflow.json +1 -0
  368. package/src/data/servicereference/services/sagemaker-unified-studio-mcp.json +1 -0
  369. package/src/data/servicereference/services/sagemaker.json +1 -0
  370. package/src/data/servicereference/services/savingsplans.json +1 -0
  371. package/src/data/servicereference/services/scheduler.json +1 -0
  372. package/src/data/servicereference/services/schemas.json +1 -0
  373. package/src/data/servicereference/services/scn.json +1 -0
  374. package/src/data/servicereference/services/sdb.json +1 -0
  375. package/src/data/servicereference/services/secretsmanager.json +1 -0
  376. package/src/data/servicereference/services/security-ir.json +1 -0
  377. package/src/data/servicereference/services/securityagent.json +1 -0
  378. package/src/data/servicereference/services/securityhub.json +1 -0
  379. package/src/data/servicereference/services/securitylake.json +1 -0
  380. package/src/data/servicereference/services/serverlessrepo.json +1 -0
  381. package/src/data/servicereference/services/servicecatalog.json +1 -0
  382. package/src/data/servicereference/services/servicediscovery.json +1 -0
  383. package/src/data/servicereference/services/serviceextract.json +1 -0
  384. package/src/data/servicereference/services/servicequotas.json +1 -0
  385. package/src/data/servicereference/services/ses.json +1 -0
  386. package/src/data/servicereference/services/shield.json +1 -0
  387. package/src/data/servicereference/services/signer.json +1 -0
  388. package/src/data/servicereference/services/signin.json +1 -0
  389. package/src/data/servicereference/services/simspaceweaver.json +1 -0
  390. package/src/data/servicereference/services/sms-voice.json +1 -0
  391. package/src/data/servicereference/services/sms.json +1 -0
  392. package/src/data/servicereference/services/snow-device-management.json +1 -0
  393. package/src/data/servicereference/services/snowball.json +1 -0
  394. package/src/data/servicereference/services/sns.json +1 -0
  395. package/src/data/servicereference/services/social-messaging.json +1 -0
  396. package/src/data/servicereference/services/sqlworkbench.json +1 -0
  397. package/src/data/servicereference/services/sqs.json +1 -0
  398. package/src/data/servicereference/services/ssm-contacts.json +1 -0
  399. package/src/data/servicereference/services/ssm-guiconnect.json +1 -0
  400. package/src/data/servicereference/services/ssm-incidents.json +1 -0
  401. package/src/data/servicereference/services/ssm-quicksetup.json +1 -0
  402. package/src/data/servicereference/services/ssm-sap.json +1 -0
  403. package/src/data/servicereference/services/ssm.json +1 -0
  404. package/src/data/servicereference/services/ssmmessages.json +1 -0
  405. package/src/data/servicereference/services/sso-directory.json +1 -0
  406. package/src/data/servicereference/services/sso-oauth.json +1 -0
  407. package/src/data/servicereference/services/sso.json +1 -0
  408. package/src/data/servicereference/services/states.json +1 -0
  409. package/src/data/servicereference/services/storagegateway.json +1 -0
  410. package/src/data/servicereference/services/sts.json +1 -0
  411. package/src/data/servicereference/services/support-console.json +1 -0
  412. package/src/data/servicereference/services/support.json +1 -0
  413. package/src/data/servicereference/services/supportapp.json +1 -0
  414. package/src/data/servicereference/services/supportplans.json +1 -0
  415. package/src/data/servicereference/services/sustainability.json +1 -0
  416. package/src/data/servicereference/services/swf.json +1 -0
  417. package/src/data/servicereference/services/synthetics.json +1 -0
  418. package/src/data/servicereference/services/tag.json +1 -0
  419. package/src/data/servicereference/services/tax.json +1 -0
  420. package/src/data/servicereference/services/textract.json +1 -0
  421. package/src/data/servicereference/services/thinclient.json +1 -0
  422. package/src/data/servicereference/services/timestream-influxdb.json +1 -0
  423. package/src/data/servicereference/services/timestream.json +1 -0
  424. package/src/data/servicereference/services/tiros.json +1 -0
  425. package/src/data/servicereference/services/tnb.json +1 -0
  426. package/src/data/servicereference/services/transcribe.json +1 -0
  427. package/src/data/servicereference/services/transfer.json +1 -0
  428. package/src/data/servicereference/services/transform-custom.json +1 -0
  429. package/src/data/servicereference/services/transform.json +1 -0
  430. package/src/data/servicereference/services/translate.json +1 -0
  431. package/src/data/servicereference/services/trustedadvisor.json +1 -0
  432. package/src/data/servicereference/services/ts.json +1 -0
  433. package/src/data/servicereference/services/user-subscriptions.json +1 -0
  434. package/src/data/servicereference/services/uxc.json +1 -0
  435. package/src/data/servicereference/services/vendor-insights.json +1 -0
  436. package/src/data/servicereference/services/verified-access.json +1 -0
  437. package/src/data/servicereference/services/verifiedpermissions.json +1 -0
  438. package/src/data/servicereference/services/voiceid.json +1 -0
  439. package/src/data/servicereference/services/vpc-lattice-svcs.json +1 -0
  440. package/src/data/servicereference/services/vpc-lattice.json +1 -0
  441. package/src/data/servicereference/services/vpce.json +1 -0
  442. package/src/data/servicereference/services/waf-regional.json +1 -0
  443. package/src/data/servicereference/services/waf.json +1 -0
  444. package/src/data/servicereference/services/wafv2.json +1 -0
  445. package/src/data/servicereference/services/wam.json +1 -0
  446. package/src/data/servicereference/services/wellarchitected.json +1 -0
  447. package/src/data/servicereference/services/wickr.json +1 -0
  448. package/src/data/servicereference/services/wisdom.json +1 -0
  449. package/src/data/servicereference/services/workdocs.json +1 -0
  450. package/src/data/servicereference/services/worklink.json +1 -0
  451. package/src/data/servicereference/services/workmail.json +1 -0
  452. package/src/data/servicereference/services/workmailmessageflow.json +1 -0
  453. package/src/data/servicereference/services/workspaces-instances.json +1 -0
  454. package/src/data/servicereference/services/workspaces-web.json +1 -0
  455. package/src/data/servicereference/services/workspaces.json +1 -0
  456. package/src/data/servicereference/services/xray.json +1 -0
  457. package/src/data/servicereference/services.json +1 -0
  458. package/src/extension.d.ts +3 -0
  459. package/src/extension.js +23 -0
  460. package/src/grammars/tree-sitter-hcl.wasm +0 -0
  461. package/src/grammars/tree-sitter-json.wasm +0 -0
  462. package/src/grammars/tree-sitter-yaml.wasm +0 -0
  463. package/src/handlers/completion/action-value.d.ts +4 -0
  464. package/src/handlers/completion/action-value.js +46 -0
  465. package/src/handlers/completion/condition-block.d.ts +4 -0
  466. package/src/handlers/completion/condition-block.js +31 -0
  467. package/src/handlers/completion/condition-key.d.ts +4 -0
  468. package/src/handlers/completion/condition-key.js +80 -0
  469. package/src/handlers/completion/condition-operator.d.ts +4 -0
  470. package/src/handlers/completion/condition-operator.js +22 -0
  471. package/src/handlers/completion/effect-value.d.ts +4 -0
  472. package/src/handlers/completion/effect-value.js +14 -0
  473. package/src/handlers/completion/index.d.ts +14 -0
  474. package/src/handlers/completion/index.js +96 -0
  475. package/src/handlers/completion/principal-block-identifier.d.ts +4 -0
  476. package/src/handlers/completion/principal-block-identifier.js +4 -0
  477. package/src/handlers/completion/principal-block-type.d.ts +4 -0
  478. package/src/handlers/completion/principal-block-type.js +24 -0
  479. package/src/handlers/completion/principal-block.d.ts +4 -0
  480. package/src/handlers/completion/principal-block.js +28 -0
  481. package/src/handlers/completion/principal-identifier-completions.d.ts +2 -0
  482. package/src/handlers/completion/principal-identifier-completions.js +131 -0
  483. package/src/handlers/completion/principal-type.d.ts +4 -0
  484. package/src/handlers/completion/principal-type.js +23 -0
  485. package/src/handlers/completion/principal-typed-value.d.ts +4 -0
  486. package/src/handlers/completion/principal-typed-value.js +4 -0
  487. package/src/handlers/completion/principal-value.d.ts +4 -0
  488. package/src/handlers/completion/principal-value.js +18 -0
  489. package/src/handlers/completion/resource-value.d.ts +4 -0
  490. package/src/handlers/completion/resource-value.js +144 -0
  491. package/src/handlers/completion/statement-block.d.ts +10 -0
  492. package/src/handlers/completion/statement-block.js +51 -0
  493. package/src/handlers/completion/statement-key.d.ts +4 -0
  494. package/src/handlers/completion/statement-key.js +41 -0
  495. package/src/lib/iam-policy/condition-operators.d.ts +317 -0
  496. package/src/lib/iam-policy/condition-operators.js +129 -0
  497. package/src/lib/iam-policy/location.d.ts +71 -0
  498. package/src/lib/iam-policy/location.js +82 -0
  499. package/src/lib/iam-policy/partitions.d.ts +116 -0
  500. package/src/lib/iam-policy/partitions.js +51 -0
  501. package/src/lib/iam-policy/principals.d.ts +21 -0
  502. package/src/lib/iam-policy/principals.js +37 -0
  503. package/src/lib/iam-policy/reference/services.d.ts +22 -0
  504. package/src/lib/iam-policy/reference/services.js +99 -0
  505. package/src/lib/iam-policy/reference/types.d.ts +71 -0
  506. package/src/lib/iam-policy/reference/types.js +1 -0
  507. package/src/lib/iam-policy/statement-keys.d.ts +8 -0
  508. package/src/lib/iam-policy/statement-keys.js +159 -0
  509. package/src/lib/iam-policy/wildcard.d.ts +2 -0
  510. package/src/lib/iam-policy/wildcard.js +14 -0
  511. package/src/lib/treesitter/base.d.ts +35 -0
  512. package/src/lib/treesitter/base.js +50 -0
  513. package/src/lib/treesitter/hcl.d.ts +9 -0
  514. package/src/lib/treesitter/hcl.js +888 -0
  515. package/src/lib/treesitter/json.d.ts +9 -0
  516. package/src/lib/treesitter/json.js +376 -0
  517. package/src/lib/treesitter/manager.d.ts +9 -0
  518. package/src/lib/treesitter/manager.js +66 -0
  519. package/src/lib/treesitter/yaml.d.ts +9 -0
  520. package/src/lib/treesitter/yaml.js +878 -0
  521. package/src/server.d.ts +2 -0
  522. package/src/server.js +26 -0
@@ -0,0 +1 @@
1
+ {"name":"omics","actions":{"AbortMultipartReadSetUpload":{"conditionKeys":[],"resources":[{"name":"sequenceStore"}],"description":"Grants permission to abort multipart read set uploads","accessLevel":"Write","resourceTypes":[{"name":"sequenceStore","required":true}]},"AcceptShare":{"conditionKeys":[],"resources":[],"description":"Grants permission to accept a share","accessLevel":"Write","resourceTypes":[]},"BatchDeleteReadSet":{"conditionKeys":[],"resources":[{"name":"sequenceStore"}],"description":"Grants permission to batch delete Read Sets in the given Sequence Store","accessLevel":"Write","resourceTypes":[{"name":"sequenceStore","required":true}]},"CancelAnnotationImportJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to cancel an Annotation Import Job","accessLevel":"Write","resourceTypes":[]},"CancelRun":{"conditionKeys":[],"resources":[{"name":"run"}],"description":"Grants permission to cancel a workflow run and stop all workflow tasks","accessLevel":"Write","resourceTypes":[{"name":"run","required":true}]},"CancelVariantImportJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to cancel a Variant Import Job","accessLevel":"Write","resourceTypes":[]},"CompleteMultipartReadSetUpload":{"conditionKeys":[],"resources":[{"name":"sequenceStore"}],"description":"Grants permission to complete a multipart read set upload","accessLevel":"Write","resourceTypes":[{"name":"sequenceStore","required":true}]},"CreateAnnotationStore":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an Annotation Store","accessLevel":"Write","resourceTypes":[]},"CreateAnnotationStoreVersion":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"AnnotationStore"}],"description":"Grants permission to create a Version in an Annotation Store","accessLevel":"Write","resourceTypes":[{"name":"AnnotationStore","required":true}]},"CreateMultipartReadSetUpload":{"conditionKeys":[],"resources":[{"name":"sequenceStore"}],"description":"Grants permission to create a multipart read set upload","accessLevel":"Write","resourceTypes":[{"name":"sequenceStore","required":true}]},"CreateReferenceStore":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a Reference Store","accessLevel":"Write","resourceTypes":[]},"CreateRunCache":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new workflow run cache","accessLevel":"Write","resourceTypes":[]},"CreateRunGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new workflow run group","accessLevel":"Write","resourceTypes":[]},"CreateSequenceStore":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a Sequence Store","accessLevel":"Write","resourceTypes":[]},"CreateShare":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a share","accessLevel":"Write","resourceTypes":[]},"CreateVariantStore":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a Variant Store","accessLevel":"Write","resourceTypes":[]},"CreateWorkflow":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new workflow with a workflow definition and template of workflow parameters","accessLevel":"Write","resourceTypes":[]},"CreateWorkflowVersion":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"workflow"}],"description":"Grants permission to create a new workflow version with a workflow definition and template of workflow parameters","accessLevel":"Write","resourceTypes":[{"name":"workflow","required":true}]},"DeleteAnnotationStore":{"conditionKeys":[],"resources":[{"name":"AnnotationStore"}],"description":"Grants permission to delete an Annotation Store","accessLevel":"Write","resourceTypes":[{"name":"AnnotationStore","required":true}]},"DeleteAnnotationStoreVersions":{"conditionKeys":[],"resources":[{"name":"AnnotationStore"},{"name":"AnnotationStoreVersion"}],"description":"Grants permission to delete Versions in an Annotation Store","accessLevel":"Write","resourceTypes":[{"name":"AnnotationStore","required":true},{"name":"AnnotationStoreVersion","required":true}]},"DeleteReference":{"conditionKeys":[],"resources":[{"name":"reference"},{"name":"referenceStore"}],"description":"Grants permission to delete a Reference in the given Reference Store","accessLevel":"Write","resourceTypes":[{"name":"reference","required":true},{"name":"referenceStore","required":true}]},"DeleteReferenceStore":{"conditionKeys":[],"resources":[{"name":"referenceStore"}],"description":"Grants permission to delete a Reference Store","accessLevel":"Write","resourceTypes":[{"name":"referenceStore","required":true}]},"DeleteRun":{"conditionKeys":[],"resources":[{"name":"run"}],"description":"Grants permission to delete a workflow run","accessLevel":"Write","resourceTypes":[{"name":"run","required":true}]},"DeleteRunCache":{"conditionKeys":[],"resources":[{"name":"runCache"}],"description":"Grants permission to delete a workflow run cache","accessLevel":"Write","resourceTypes":[{"name":"runCache","required":true}]},"DeleteRunGroup":{"conditionKeys":[],"resources":[{"name":"runGroup"}],"description":"Grants permission to delete a workflow run group","accessLevel":"Write","resourceTypes":[{"name":"runGroup","required":true}]},"DeleteS3AccessPolicy":{"conditionKeys":[],"resources":[{"name":"sequenceStore"}],"description":"Grants permission to delete an access policy on a given store","accessLevel":"Write","resourceTypes":[{"name":"sequenceStore","required":true}]},"DeleteSequenceStore":{"conditionKeys":[],"resources":[{"name":"sequenceStore"}],"description":"Grants permission to delete a Sequence Store","accessLevel":"Write","resourceTypes":[{"name":"sequenceStore","required":true}]},"DeleteShare":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a share","accessLevel":"Write","resourceTypes":[]},"DeleteVariantStore":{"conditionKeys":[],"resources":[{"name":"VariantStore"}],"description":"Grants permission to delete a Variant Store","accessLevel":"Write","resourceTypes":[{"name":"VariantStore","required":true}]},"DeleteWorkflow":{"conditionKeys":[],"resources":[{"name":"workflow"}],"description":"Grants permission to delete a workflow","accessLevel":"Write","resourceTypes":[{"name":"workflow","required":true}]},"DeleteWorkflowVersion":{"conditionKeys":[],"resources":[{"name":"WorkflowVersion"},{"name":"workflow"}],"description":"Grants permission to delete a workflow version","accessLevel":"Write","resourceTypes":[{"name":"WorkflowVersion","required":true},{"name":"workflow","required":true}]},"GetAnnotationImportJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the status of an Annotation Import Job","accessLevel":"Read","resourceTypes":[]},"GetAnnotationStore":{"conditionKeys":[],"resources":[{"name":"AnnotationStore"}],"description":"Grants permission to get detailed information about an Annotation Store","accessLevel":"Read","resourceTypes":[{"name":"AnnotationStore","required":true}]},"GetAnnotationStoreVersion":{"conditionKeys":[],"resources":[{"name":"AnnotationStoreVersion"}],"description":"Grants permission to get detailed information about a version in an Annotation Store","accessLevel":"Read","resourceTypes":[{"name":"AnnotationStoreVersion","required":true}]},"GetReadSet":{"conditionKeys":[],"resources":[{"name":"readSet"},{"name":"sequenceStore"}],"description":"Grants permission to get a Read Set in the given Sequence Store","accessLevel":"Read","resourceTypes":[{"name":"readSet","required":true},{"name":"sequenceStore","required":true}]},"GetReadSetActivationJob":{"conditionKeys":[],"resources":[{"name":"sequenceStore"}],"description":"Grants permission to get details about a Read Set activation job for the given Sequence Store","accessLevel":"Read","resourceTypes":[{"name":"sequenceStore","required":true}]},"GetReadSetExportJob":{"conditionKeys":[],"resources":[{"name":"sequenceStore"}],"description":"Grants permission to get details about a Read Set export job for the given Sequence Store","accessLevel":"Read","resourceTypes":[{"name":"sequenceStore","required":true}]},"GetReadSetImportJob":{"conditionKeys":[],"resources":[{"name":"sequenceStore"}],"description":"Grants permission to get details about a Read Set import job for the given Sequence Store","accessLevel":"Read","resourceTypes":[{"name":"sequenceStore","required":true}]},"GetReadSetMetadata":{"conditionKeys":[],"resources":[{"name":"readSet"},{"name":"sequenceStore"}],"description":"Grants permission to get details about a Read Set in the given Sequence Store","accessLevel":"Read","resourceTypes":[{"name":"readSet","required":true},{"name":"sequenceStore","required":true}]},"GetReference":{"conditionKeys":[],"resources":[{"name":"reference"},{"name":"referenceStore"}],"description":"Grants permission to get a Reference in the given Reference Store","accessLevel":"Read","resourceTypes":[{"name":"reference","required":true},{"name":"referenceStore","required":true}]},"GetReferenceImportJob":{"conditionKeys":[],"resources":[{"name":"referenceStore"}],"description":"Grants permission to get details about a Reference import job for the given Reference Store","accessLevel":"Read","resourceTypes":[{"name":"referenceStore","required":true}]},"GetReferenceMetadata":{"conditionKeys":[],"resources":[{"name":"reference"},{"name":"referenceStore"}],"description":"Grants permission to get details about a Reference in the given Reference Store","accessLevel":"Read","resourceTypes":[{"name":"reference","required":true},{"name":"referenceStore","required":true}]},"GetReferenceStore":{"conditionKeys":[],"resources":[{"name":"referenceStore"}],"description":"Grants permission to get details about a Reference Store","accessLevel":"Read","resourceTypes":[{"name":"referenceStore","required":true}]},"GetRun":{"conditionKeys":[],"resources":[{"name":"run"}],"description":"Grants permission to retrieve workflow run details","accessLevel":"Read","resourceTypes":[{"name":"run","required":true}]},"GetRunCache":{"conditionKeys":[],"resources":[{"name":"runCache"}],"description":"Grants permission to retrieve workflow run cache details","accessLevel":"Read","resourceTypes":[{"name":"runCache","required":true}]},"GetRunGroup":{"conditionKeys":[],"resources":[{"name":"runGroup"}],"description":"Grants permission to retrieve workflow run group details","accessLevel":"Read","resourceTypes":[{"name":"runGroup","required":true}]},"GetRunTask":{"conditionKeys":[],"resources":[{"name":"TaskResource"},{"name":"run"}],"description":"Grants permission to retrieve workflow task details","accessLevel":"Read","resourceTypes":[{"name":"TaskResource","required":true},{"name":"run","required":true}]},"GetS3AccessPolicy":{"conditionKeys":[],"resources":[{"name":"sequenceStore"}],"description":"Grants permission to get details about an access policy on a given store","accessLevel":"Read","resourceTypes":[{"name":"sequenceStore","required":true}]},"GetSequenceStore":{"conditionKeys":[],"resources":[{"name":"sequenceStore"}],"description":"Grants permission to get details about a Sequence Store","accessLevel":"Read","resourceTypes":[{"name":"sequenceStore","required":true}]},"GetShare":{"conditionKeys":[],"resources":[],"description":"Grants permission to get detailed information about a Share","accessLevel":"Read","resourceTypes":[]},"GetVariantImportJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the status of a Variant Import Job","accessLevel":"Read","resourceTypes":[]},"GetVariantStore":{"conditionKeys":[],"resources":[{"name":"VariantStore"}],"description":"Grants permission to get detailed information about a Variant Store","accessLevel":"Read","resourceTypes":[{"name":"VariantStore","required":true}]},"GetWorkflow":{"conditionKeys":[],"resources":[{"name":"workflow"}],"description":"Grants permission to retrieve workflow details","accessLevel":"Read","resourceTypes":[{"name":"workflow","required":true}]},"GetWorkflowVersion":{"conditionKeys":[],"resources":[{"name":"WorkflowVersion"},{"name":"workflow"}],"description":"Grants permission to retrieve workflow version details","accessLevel":"Read","resourceTypes":[{"name":"WorkflowVersion","required":true},{"name":"workflow","required":true}]},"ListAnnotationImportJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of Annotation Import Jobs","accessLevel":"List","resourceTypes":[]},"ListAnnotationStoreVersions":{"conditionKeys":[],"resources":[{"name":"AnnotationStore"}],"description":"Grants permission to retrieve a list of information about Versions in an Annotation Store","accessLevel":"List","resourceTypes":[{"name":"AnnotationStore","required":true}]},"ListAnnotationStores":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of information about Annotation Stores","accessLevel":"List","resourceTypes":[]},"ListMultipartReadSetUploads":{"conditionKeys":[],"resources":[{"name":"sequenceStore"}],"description":"Grants permission to list multipart read set uploads","accessLevel":"List","resourceTypes":[{"name":"sequenceStore","required":true}]},"ListReadSetActivationJobs":{"conditionKeys":[],"resources":[{"name":"sequenceStore"}],"description":"Grants permission to list Read Set activation jobs for the given Sequence Store","accessLevel":"List","resourceTypes":[{"name":"sequenceStore","required":true}]},"ListReadSetExportJobs":{"conditionKeys":[],"resources":[{"name":"sequenceStore"}],"description":"Grants permission to list Read Set export jobs for the given Sequence Store","accessLevel":"List","resourceTypes":[{"name":"sequenceStore","required":true}]},"ListReadSetImportJobs":{"conditionKeys":[],"resources":[{"name":"sequenceStore"}],"description":"Grants permission to list Read Set import jobs for the given Sequence Store","accessLevel":"List","resourceTypes":[{"name":"sequenceStore","required":true}]},"ListReadSetUploadParts":{"conditionKeys":[],"resources":[{"name":"sequenceStore"}],"description":"Grants permission to list read set upload parts","accessLevel":"List","resourceTypes":[{"name":"sequenceStore","required":true}]},"ListReadSets":{"conditionKeys":[],"resources":[{"name":"sequenceStore"}],"description":"Grants permission to list Read Sets in the given Sequence Store","accessLevel":"List","resourceTypes":[{"name":"sequenceStore","required":true}]},"ListReferenceImportJobs":{"conditionKeys":[],"resources":[{"name":"referenceStore"}],"description":"Grants permission to list Reference import jobs for the given Reference Store","accessLevel":"List","resourceTypes":[{"name":"referenceStore","required":true}]},"ListReferenceStores":{"conditionKeys":[],"resources":[],"description":"Grants permission to list Reference Stores","accessLevel":"List","resourceTypes":[]},"ListReferences":{"conditionKeys":[],"resources":[{"name":"referenceStore"}],"description":"Grants permission to list References in the given Reference Store","accessLevel":"List","resourceTypes":[{"name":"referenceStore","required":true}]},"ListRunCaches":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of workflow run caches","accessLevel":"List","resourceTypes":[]},"ListRunGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of workflow run groups","accessLevel":"List","resourceTypes":[]},"ListRunTasks":{"conditionKeys":[],"resources":[{"name":"run"}],"description":"Grants permission to retrieve a list of tasks for a workflow run","accessLevel":"List","resourceTypes":[{"name":"run","required":true}]},"ListRuns":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of workflow runs","accessLevel":"List","resourceTypes":[]},"ListSequenceStores":{"conditionKeys":[],"resources":[],"description":"Grants permission to list Sequence Stores","accessLevel":"List","resourceTypes":[]},"ListShares":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of information about shares","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of resource AWS tags","accessLevel":"List","resourceTypes":[]},"ListVariantImportJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of Variant Import Jobs","accessLevel":"List","resourceTypes":[]},"ListVariantStores":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of metadata for Variant Stores","accessLevel":"List","resourceTypes":[]},"ListWorkflowVersions":{"conditionKeys":[],"resources":[{"name":"workflow"}],"description":"Grants permission to retrieve a list of available versions for a workflow","accessLevel":"List","resourceTypes":[{"name":"workflow","required":true}]},"ListWorkflows":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of available workflows","accessLevel":"List","resourceTypes":[]},"PutS3AccessPolicy":{"conditionKeys":[],"resources":[{"name":"sequenceStore"}],"description":"Grants permission to put an access policy on a given store","accessLevel":"Write","resourceTypes":[{"name":"sequenceStore","required":true}]},"StartAnnotationImportJob":{"conditionKeys":[],"resources":[{"name":"AnnotationStore"},{"name":"AnnotationStoreVersion"}],"description":"Grants permission to import a list of Annotation files to an Annotation Store","accessLevel":"Write","resourceTypes":[{"name":"AnnotationStore","required":true},{"name":"AnnotationStoreVersion","required":true}]},"StartReadSetActivationJob":{"conditionKeys":[],"resources":[{"name":"sequenceStore"}],"description":"Grants permission to start a Read Set activation job from the given Sequence Store","accessLevel":"Write","resourceTypes":[{"name":"sequenceStore","required":true}]},"StartReadSetExportJob":{"conditionKeys":[],"resources":[{"name":"sequenceStore"}],"description":"Grants permission to start a Read Set export job from the given Sequence Store","accessLevel":"Write","resourceTypes":[{"name":"sequenceStore","required":true}]},"StartReadSetImportJob":{"conditionKeys":[],"resources":[{"name":"sequenceStore"}],"description":"Grants permission to start a Read Set import job into the given Sequence Store","accessLevel":"Write","resourceTypes":[{"name":"sequenceStore","required":true}]},"StartReferenceImportJob":{"conditionKeys":[],"resources":[{"name":"referenceStore"}],"description":"Grants permission to start a Reference import job into the given Reference Store","accessLevel":"Write","resourceTypes":[{"name":"referenceStore","required":true}]},"StartRun":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"run"},{"name":"runCache"},{"name":"runGroup"},{"name":"workflow"}],"description":"Grants permission to start a workflow run","accessLevel":"Write","resourceTypes":[{"name":"run","required":true},{"name":"runCache","required":false},{"name":"runGroup","required":false},{"name":"workflow","required":false}],"dependentActions":["iam:PassRole"]},"StartVariantImportJob":{"conditionKeys":[],"resources":[{"name":"VariantStore"}],"description":"Grants permission to import a list of variant files to an Variant Store","accessLevel":"Write","resourceTypes":[{"name":"VariantStore","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"AnnotationStore"},{"name":"AnnotationStoreVersion"},{"name":"VariantStore"},{"name":"WorkflowVersion"},{"name":"readSet"},{"name":"reference"},{"name":"referenceStore"},{"name":"run"},{"name":"runCache"},{"name":"runGroup"},{"name":"sequenceStore"},{"name":"workflow"}],"description":"Grants permission to add AWS tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"AnnotationStore","required":false},{"name":"AnnotationStoreVersion","required":false},{"name":"VariantStore","required":false},{"name":"WorkflowVersion","required":false},{"name":"readSet","required":false},{"name":"reference","required":false},{"name":"referenceStore","required":false},{"name":"run","required":false},{"name":"runCache","required":false},{"name":"runGroup","required":false},{"name":"sequenceStore","required":false},{"name":"workflow","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"AnnotationStore"},{"name":"AnnotationStoreVersion"},{"name":"VariantStore"},{"name":"WorkflowVersion"},{"name":"readSet"},{"name":"reference"},{"name":"referenceStore"},{"name":"run"},{"name":"runCache"},{"name":"runGroup"},{"name":"sequenceStore"},{"name":"workflow"}],"description":"Grants permission to remove resource AWS tags","accessLevel":"Tagging","resourceTypes":[{"name":"AnnotationStore","required":false},{"name":"AnnotationStoreVersion","required":false},{"name":"VariantStore","required":false},{"name":"WorkflowVersion","required":false},{"name":"readSet","required":false},{"name":"reference","required":false},{"name":"referenceStore","required":false},{"name":"run","required":false},{"name":"runCache","required":false},{"name":"runGroup","required":false},{"name":"sequenceStore","required":false},{"name":"workflow","required":false}]},"UpdateAnnotationStore":{"conditionKeys":[],"resources":[{"name":"AnnotationStore"}],"description":"Grants permission to update information about the Annotation Store","accessLevel":"Write","resourceTypes":[{"name":"AnnotationStore","required":true}]},"UpdateAnnotationStoreVersion":{"conditionKeys":[],"resources":[{"name":"AnnotationStoreVersion"}],"description":"Grants permission to update information about the Version in an Annotation Store","accessLevel":"Write","resourceTypes":[{"name":"AnnotationStoreVersion","required":true}]},"UpdateRunCache":{"conditionKeys":[],"resources":[{"name":"runCache"}],"description":"Grants permission to update a workflow run cache","accessLevel":"Write","resourceTypes":[{"name":"runCache","required":true}]},"UpdateRunGroup":{"conditionKeys":[],"resources":[{"name":"runGroup"}],"description":"Grants permission to update a workflow run group","accessLevel":"Write","resourceTypes":[{"name":"runGroup","required":true}]},"UpdateSequenceStore":{"conditionKeys":[],"resources":[{"name":"sequenceStore"}],"description":"Grants permission to update details about a Sequence Store","accessLevel":"Write","resourceTypes":[{"name":"sequenceStore","required":true}]},"UpdateVariantStore":{"conditionKeys":[],"resources":[{"name":"VariantStore"}],"description":"Grants permission to update metadata about the Variant Store","accessLevel":"Write","resourceTypes":[{"name":"VariantStore","required":true}]},"UpdateWorkflow":{"conditionKeys":[],"resources":[{"name":"workflow"}],"description":"Grants permission to update workflow details","accessLevel":"Write","resourceTypes":[{"name":"workflow","required":true}]},"UpdateWorkflowVersion":{"conditionKeys":[],"resources":[{"name":"WorkflowVersion"},{"name":"workflow"}],"description":"Grants permission to update workflow version details","accessLevel":"Write","resourceTypes":[{"name":"WorkflowVersion","required":true},{"name":"workflow","required":true}]},"UploadReadSetPart":{"conditionKeys":[],"resources":[{"name":"sequenceStore"}],"description":"Grants permission to upload read set parts","accessLevel":"Write","resourceTypes":[{"name":"sequenceStore","required":true}]}},"resources":[{"name":"AnnotationStore","arnFormats":["arn:${Partition}:omics:${Region}:${Account}:annotationStore/${AnnotationStoreName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"AnnotationStoreVersion","arnFormats":["arn:${Partition}:omics:${Region}:${Account}:annotationStore/${AnnotationStoreName}/version/${AnnotationStoreVersionName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"TaskResource","arnFormats":["arn:${Partition}:omics:${Region}:${Account}:task/${Id}"],"conditionKeys":[]},{"name":"VariantStore","arnFormats":["arn:${Partition}:omics:${Region}:${Account}:variantStore/${VariantStoreName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"WorkflowVersion","arnFormats":["arn:${Partition}:omics:${Region}:${Account}:workflow/${Id}/version/${VersionName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"readSet","arnFormats":["arn:${Partition}:omics:${Region}:${Account}:sequenceStore/${SequenceStoreId}/readSet/${ReadSetId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"reference","arnFormats":["arn:${Partition}:omics:${Region}:${Account}:referenceStore/${ReferenceStoreId}/reference/${ReferenceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"referenceStore","arnFormats":["arn:${Partition}:omics:${Region}:${Account}:referenceStore/${ReferenceStoreId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"run","arnFormats":["arn:${Partition}:omics:${Region}:${Account}:run/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"runCache","arnFormats":["arn:${Partition}:omics:${Region}:${Account}:runCache/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"runGroup","arnFormats":["arn:${Partition}:omics:${Region}:${Account}:runGroup/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"sequenceStore","arnFormats":["arn:${Partition}:omics:${Region}:${Account}:sequenceStore/${SequenceStoreId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"workflow","arnFormats":["arn:${Partition}:omics:${Region}:${Account}:workflow/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"one","actions":{"CreateDeviceActivationQrCode":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"device-instance"}],"description":"Grants permission to create a QR code for a Device Instance","accessLevel":"Write","resourceTypes":[{"name":"device-instance","required":true}]},"CreateDeviceConfigurationTemplate":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a Device Configuration Template","accessLevel":"Write","resourceTypes":[]},"CreateDeviceInstance":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a Device Instance","accessLevel":"Write","resourceTypes":[]},"CreateDeviceInstanceConfiguration":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"device-instance"}],"description":"Grants permission to create a Device Instance Configuration","accessLevel":"Write","resourceTypes":[{"name":"device-instance","required":true}]},"CreateSite":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a Site","accessLevel":"Write","resourceTypes":[]},"DeleteAssociatedDevice":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"device-instance"}],"description":"Grants permission to disassociate Device from a Device Instance","accessLevel":"Write","resourceTypes":[{"name":"device-instance","required":true}]},"DeleteDeviceConfigurationTemplate":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"device-configuration-template"}],"description":"Grants permission to delete a Device Configuration Template","accessLevel":"Write","resourceTypes":[{"name":"device-configuration-template","required":true}]},"DeleteDeviceInstance":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"device-instance"}],"description":"Grants permission to delete a Device Instance","accessLevel":"Write","resourceTypes":[{"name":"device-instance","required":true}]},"DeleteSite":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"site"}],"description":"Grants permission to delete a Site","accessLevel":"Write","resourceTypes":[{"name":"site","required":true}]},"DeleteUserV1":{"conditionKeys":[],"resources":[{"name":"user"}],"description":"Grants permission to delete a User","accessLevel":"Write","resourceTypes":[{"name":"user","required":true}]},"GetDeviceConfigurationTemplate":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"device-configuration-template"}],"description":"Grants permission to view a Device Configuration Template","accessLevel":"Read","resourceTypes":[{"name":"device-configuration-template","required":true}]},"GetDeviceInstance":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"device-instance"}],"description":"Grants permission to view a Device Instance","accessLevel":"Read","resourceTypes":[{"name":"device-instance","required":true}]},"GetDeviceInstanceConfiguration":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"configuration"}],"description":"Grants permission to view a Device Instance Configuration","accessLevel":"Read","resourceTypes":[{"name":"configuration","required":true}]},"GetSite":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"site"}],"description":"Grants permission to view a Site","accessLevel":"Read","resourceTypes":[{"name":"site","required":true}]},"GetSiteAddress":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"site"}],"description":"Grants permission to view address of a Site","accessLevel":"Read","resourceTypes":[{"name":"site","required":true}]},"ListDeviceConfigurationTemplates":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve list of Device Configuration Templates","accessLevel":"List","resourceTypes":[]},"ListDeviceInstances":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve list of Device Instances","accessLevel":"List","resourceTypes":[]},"ListSites":{"conditionKeys":[],"resources":[],"description":"Grants permission to view list of Sites","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"device-configuration-template"},{"name":"device-instance"},{"name":"site"}],"description":"Grants permission to list tags for an Amazon One Enterprise resource","accessLevel":"Read","resourceTypes":[{"name":"device-configuration-template","required":false},{"name":"device-instance","required":false},{"name":"site","required":false}]},"ListUsers":{"conditionKeys":[],"resources":[],"description":"Grants permission to view list of Users","accessLevel":"List","resourceTypes":[]},"ListUsersV1":{"conditionKeys":[],"resources":[],"description":"Grants permission to view list of Users","accessLevel":"List","resourceTypes":[]},"RebootDevice":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"device-instance"}],"description":"Grants permission to reboot Device associated with a Device Instance","accessLevel":"Write","resourceTypes":[{"name":"device-instance","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"device-configuration-template"},{"name":"device-instance"},{"name":"site"}],"description":"Grants permission to add tags to an Amazon One Enterprise resource","accessLevel":"Tagging","resourceTypes":[{"name":"device-configuration-template","required":false},{"name":"device-instance","required":false},{"name":"site","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"device-configuration-template"},{"name":"device-instance"},{"name":"site"}],"description":"Grants permission to remove tags from an Amazon One Enterprise resource","accessLevel":"Tagging","resourceTypes":[{"name":"device-configuration-template","required":false},{"name":"device-instance","required":false},{"name":"site","required":false}]},"UpdateDeviceConfigurationTemplate":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"device-configuration-template"}],"description":"Grants permission to update a Device Configuration Template","accessLevel":"Write","resourceTypes":[{"name":"device-configuration-template","required":true}]},"UpdateDeviceInstance":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"device-instance"}],"description":"Grants permission to update a Device Instance","accessLevel":"Write","resourceTypes":[{"name":"device-instance","required":true}]},"UpdateSite":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"site"}],"description":"Grants permission to update a Site","accessLevel":"Write","resourceTypes":[{"name":"site","required":true}]},"UpdateSiteAddress":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"site"}],"description":"Grants permission to update address of a Site","accessLevel":"Write","resourceTypes":[{"name":"site","required":true}]}},"resources":[{"name":"configuration","arnFormats":["arn:${Partition}:one:${Region}:${Account}:device-instance/${DeviceInstanceId}/configuration/${Version}"],"conditionKeys":[]},{"name":"device-configuration-template","arnFormats":["arn:${Partition}:one:${Region}:${Account}:device-configuration-template/${TemplateId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"device-instance","arnFormats":["arn:${Partition}:one:${Region}:${Account}:device-instance/${DeviceInstanceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"site","arnFormats":["arn:${Partition}:one:${Region}:${Account}:site/${SiteId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"user","arnFormats":["arn:${Partition}:one:${Region}:${Account}:user/${UserId}"],"conditionKeys":[]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by using tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by using tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"opensearch","actions":{"ApplicationAccessAll":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to access OpenSearch Application","accessLevel":"Permissions management","resourceTypes":[{"name":"application","required":true}],"permissionOnly":true},"CancelAutoOptimizeJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to cancel submitted Auto Optimize Job","accessLevel":"Write","resourceTypes":[]},"CancelDirectQuery":{"conditionKeys":[],"resources":[{"name":"datasource"}],"description":"Grants permission to cancel the query that is submitted on the OpenSearch DataSource resource","accessLevel":"Write","resourceTypes":[{"name":"datasource","required":true}]},"DeleteAutoOptimizeJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete Auto Optimize Job","accessLevel":"Write","resourceTypes":[]},"GetAutoOptimizeJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the Auto Optimize Job details","accessLevel":"Read","resourceTypes":[]},"GetDirectQuery":{"conditionKeys":[],"resources":[{"name":"datasource"}],"description":"Grants permission to get the query status that are performed on the OpenSearch DataSource resource","accessLevel":"Read","resourceTypes":[{"name":"datasource","required":true}]},"GetDirectQueryResult":{"conditionKeys":[],"resources":[{"name":"datasource"}],"description":"Grants permission to get the results of a query that is performed on the OpenSearch DataSource resource","accessLevel":"Read","resourceTypes":[{"name":"datasource","required":true}]},"ListAutoOptimizeJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of Auto Optimize Jobs","accessLevel":"List","resourceTypes":[]},"StartDirectQuery":{"conditionKeys":[],"resources":[{"name":"datasource"}],"description":"Grants permission to start a direct query on the provided OpenSearch DataSource arns","accessLevel":"Write","resourceTypes":[{"name":"datasource","required":true}]},"SubmitAutoOptimizeJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to create new Auto Optimize Job","accessLevel":"Write","resourceTypes":[]}},"resources":[{"name":"application","arnFormats":["arn:${Partition}:opensearch:${Region}:${Account}:application/${AppId}"],"conditionKeys":[]},{"name":"datasource","arnFormats":["arn:${Partition}:opensearch:${Region}:${Account}:datasource/${DataSourceName}"],"conditionKeys":[]}],"conditionKeys":{}}
@@ -0,0 +1 @@
1
+ {"name":"opsworks-cm","actions":{"AssociateNode":{"conditionKeys":[],"resources":[],"description":"Grants permission to associate a node to a configuration management server","accessLevel":"Write","resourceTypes":[]},"CreateBackup":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a backup for the specified server","accessLevel":"Write","resourceTypes":[]},"CreateServer":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new server","accessLevel":"Write","resourceTypes":[]},"DeleteBackup":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the specified backup and possibly its S3 bucket","accessLevel":"Write","resourceTypes":[]},"DeleteServer":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the specified server with its corresponding CloudFormation stack and possibly the S3 bucket","accessLevel":"Write","resourceTypes":[]},"DescribeAccountAttributes":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the service limits for the user's account","accessLevel":"List","resourceTypes":[]},"DescribeBackups":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe a single backup, all backups of a specified server or all backups of the user's account","accessLevel":"List","resourceTypes":[]},"DescribeEvents":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe all events of the specified server","accessLevel":"List","resourceTypes":[]},"DescribeNodeAssociationStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the association status for the specified node token and the specified server","accessLevel":"List","resourceTypes":[]},"DescribeServers":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the specified server or all servers of the user's account","accessLevel":"List","resourceTypes":[]},"DisassociateNode":{"conditionKeys":[],"resources":[],"description":"Grants permission to disassociate a specified node from a server","accessLevel":"Write","resourceTypes":[]},"ExportServerEngineAttribute":{"conditionKeys":[],"resources":[],"description":"Grants permission to export an engine attribute from a server","accessLevel":"Read","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the tags that are applied to the specified server or backup","accessLevel":"Read","resourceTypes":[]},"RestoreServer":{"conditionKeys":[],"resources":[],"description":"Grants permission to apply a backup to specified server. Possibly swaps out the ec2-instance if specified","accessLevel":"Write","resourceTypes":[]},"StartMaintenance":{"conditionKeys":[],"resources":[],"description":"Grants permission to start the server maintenance immediately","accessLevel":"Write","resourceTypes":[]},"TagResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to apply tags to the specified server or backup","accessLevel":"Tagging","resourceTypes":[]},"UntagResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to remove tags from the specified server or backup","accessLevel":"Tagging","resourceTypes":[]},"UpdateServer":{"conditionKeys":[],"resources":[],"description":"Grants permission to update general server settings","accessLevel":"Write","resourceTypes":[]},"UpdateServerEngineAttributes":{"conditionKeys":[],"resources":[],"description":"Grants permission to update server settings specific to the configuration management type","accessLevel":"Write","resourceTypes":[]}},"resources":[{"name":"backup","arnFormats":["arn:${Partition}:opsworks-cm::${Account}:backup/${ServerName}-{Date-and-Time-Stamp-of-Backup}"],"conditionKeys":[]},{"name":"server","arnFormats":["arn:${Partition}:opsworks-cm::${Account}:server/${ServerName}/${UniqueId}"],"conditionKeys":[]}],"conditionKeys":{}}
@@ -0,0 +1 @@
1
+ {"name":"opsworks","actions":{"AssignInstance":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to assign a registered instance to a layer","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"AssignVolume":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to assign one of the stack's registered Amazon EBS volumes to a specified instance","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"AssociateElasticIp":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to associate one of the stack's registered Elastic IP addresses with a specified instance","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"AttachElasticLoadBalancer":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to attach an Elastic Load Balancing load balancer to a specified layer","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"CloneStack":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to create a clone of a specified stack","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"CreateApp":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to create an app for a specified stack","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"CreateDeployment":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to run deployment or stack commands","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"CreateInstance":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to create an instance in a specified stack","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"CreateLayer":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to create a layer","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"CreateStack":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new stack","accessLevel":"Write","resourceTypes":[]},"CreateUserProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new user profile","accessLevel":"Write","resourceTypes":[]},"DeleteApp":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to delete a specified app","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"DeleteInstance":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to delete a specified instance, which terminates the associated Amazon EC2 instance","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"DeleteLayer":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to delete a specified layer","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"DeleteStack":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to delete a specified stack","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"DeleteUserProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a user profile","accessLevel":"Write","resourceTypes":[]},"DeregisterEcsCluster":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to delete a user profile","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"DeregisterElasticIp":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to deregister a specified Elastic IP address","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"DeregisterInstance":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to deregister a registered Amazon EC2 or on-premises instance","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"DeregisterRdsDbInstance":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to deregister an Amazon RDS instance","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"DeregisterVolume":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to deregister an Amazon EBS volume","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"DescribeAgentVersions":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to describe the available AWS OpsWorks agent versions","accessLevel":"List","resourceTypes":[{"name":"stack","required":false}]},"DescribeApps":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to request a description of a specified set of apps","accessLevel":"List","resourceTypes":[{"name":"stack","required":false}]},"DescribeCommands":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to describe the results of specified commands","accessLevel":"List","resourceTypes":[{"name":"stack","required":false}]},"DescribeDeployments":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to request a description of a specified set of deployments","accessLevel":"List","resourceTypes":[{"name":"stack","required":false}]},"DescribeEcsClusters":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to describe Amazon ECS clusters that are registered with a stack","accessLevel":"List","resourceTypes":[{"name":"stack","required":false}]},"DescribeElasticIps":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to describe Elastic IP addresses","accessLevel":"List","resourceTypes":[{"name":"stack","required":false}]},"DescribeElasticLoadBalancers":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to describe a stack's Elastic Load Balancing instances","accessLevel":"List","resourceTypes":[{"name":"stack","required":false}]},"DescribeInstances":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to request a description of a set of instances","accessLevel":"List","resourceTypes":[{"name":"stack","required":false}]},"DescribeLayers":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to request a description of one or more layers in a specified stack","accessLevel":"List","resourceTypes":[{"name":"stack","required":false}]},"DescribeLoadBasedAutoScaling":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to describe load-based auto scaling configurations for specified layers","accessLevel":"List","resourceTypes":[{"name":"stack","required":false}]},"DescribeMyUserProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe a user's SSH information","accessLevel":"List","resourceTypes":[]},"DescribeOperatingSystems":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the operating systems that are supported by AWS OpsWorks Stacks","accessLevel":"List","resourceTypes":[]},"DescribePermissions":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to describe the permissions for a specified stack","accessLevel":"List","resourceTypes":[{"name":"stack","required":false}]},"DescribeRaidArrays":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to describe an instance's RAID arrays","accessLevel":"List","resourceTypes":[{"name":"stack","required":false}]},"DescribeRdsDbInstances":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to describe Amazon RDS instances","accessLevel":"List","resourceTypes":[{"name":"stack","required":false}]},"DescribeServiceErrors":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to describe AWS OpsWorks service errors","accessLevel":"List","resourceTypes":[{"name":"stack","required":false}]},"DescribeStackProvisioningParameters":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to request a description of a stack's provisioning parameters","accessLevel":"List","resourceTypes":[{"name":"stack","required":false}]},"DescribeStackSummary":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to describe the number of layers and apps in a specified stack, and the number of instances in each state, such as running_setup or online","accessLevel":"List","resourceTypes":[{"name":"stack","required":false}]},"DescribeStacks":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to request a description of one or more stacks","accessLevel":"List","resourceTypes":[{"name":"stack","required":false}]},"DescribeTimeBasedAutoScaling":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to describe time-based auto scaling configurations for specified instances","accessLevel":"List","resourceTypes":[{"name":"stack","required":false}]},"DescribeUserProfiles":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe specified users","accessLevel":"List","resourceTypes":[]},"DescribeVolumes":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to describe an instance's Amazon EBS volumes","accessLevel":"List","resourceTypes":[{"name":"stack","required":false}]},"DetachElasticLoadBalancer":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to detache a specified Elastic Load Balancing instance from its layer","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"DisassociateElasticIp":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to disassociate an Elastic IP address from its instance","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"GetHostnameSuggestion":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to get a generated host name for the specified layer, based on the current host name theme","accessLevel":"Read","resourceTypes":[{"name":"stack","required":false}]},"GrantAccess":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to grant RDP access to a Windows instance for a specified time period","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"ListTags":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to return a list of tags that are applied to the specified stack or layer","accessLevel":"List","resourceTypes":[{"name":"stack","required":false}]},"RebootInstance":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to reboot a specified instance","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"RegisterEcsCluster":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to register a specified Amazon ECS cluster with a stack","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"RegisterElasticIp":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to register an Elastic IP address with a specified stack","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"RegisterInstance":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to register instances with a specified stack that were created outside of AWS OpsWorks","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"RegisterRdsDbInstance":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to register an Amazon RDS instance with a stack","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"RegisterVolume":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to register an Amazon EBS volume with a specified stack","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"SetLoadBasedAutoScaling":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to specify the load-based auto scaling configuration for a specified layer","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"SetPermission":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to specify a user's permissions","accessLevel":"Permissions management","resourceTypes":[{"name":"stack","required":false}]},"SetTimeBasedAutoScaling":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to specify the time-based auto scaling configuration for a specified instance","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"StartInstance":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to start a specified instance","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"StartStack":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to start a stack's instances","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"StopInstance":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to stop a specified instance","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"StopStack":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to stop a specified stack","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"TagResource":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to apply tags to a specified stack or layer","accessLevel":"Tagging","resourceTypes":[{"name":"stack","required":false}]},"UnassignInstance":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to unassign a registered instance from all of it's layers","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"UnassignVolume":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to unassign an assigned Amazon EBS volume","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"UntagResource":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to remove tags from a specified stack or layer","accessLevel":"Tagging","resourceTypes":[{"name":"stack","required":false}]},"UpdateApp":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to update a specified app","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"UpdateElasticIp":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to update a registered Elastic IP address's name","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"UpdateInstance":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to update a specified instance","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"UpdateLayer":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to update a specified layer","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"UpdateMyUserProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a user's SSH public key","accessLevel":"Write","resourceTypes":[]},"UpdateRdsDbInstance":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to update an Amazon RDS instance","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"UpdateStack":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to update a specified stack","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]},"UpdateUserProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a specified user profile","accessLevel":"Permissions management","resourceTypes":[]},"UpdateVolume":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to update an Amazon EBS volume's name or mount point","accessLevel":"Write","resourceTypes":[{"name":"stack","required":false}]}},"resources":[{"name":"stack","arnFormats":["arn:${Partition}:opsworks:${Region}:${Account}:stack/${StackId}/"],"conditionKeys":[]}],"conditionKeys":{}}
@@ -0,0 +1 @@
1
+ {"name":"organizations","actions":{"AcceptHandshake":{"conditionKeys":[],"resources":[{"name":"handshake"}],"description":"Grants permission to send a response to the originator of a handshake agreeing to the action proposed by the handshake request","accessLevel":"Write","resourceTypes":[{"name":"handshake","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"]},"AttachPolicy":{"conditionKeys":["organizations:PolicyType"],"resources":[{"name":"account"},{"name":"organizationalunit"},{"name":"policy"},{"name":"root"}],"description":"Grants permission to attach a policy to a root, an organizational unit, or an individual account","accessLevel":"Write","resourceTypes":[{"name":"policy","required":true},{"name":"account","required":false},{"name":"organizationalunit","required":false},{"name":"root","required":false}]},"CancelHandshake":{"conditionKeys":[],"resources":[{"name":"handshake"}],"description":"Grants permission to cancel a handshake","accessLevel":"Write","resourceTypes":[{"name":"handshake","required":true}]},"CloseAccount":{"conditionKeys":[],"resources":[{"name":"account"}],"description":"Grants permission to close an AWS account that is now a part of an Organizations, either created within the organization, or invited to join the organization","accessLevel":"Write","resourceTypes":[{"name":"account","required":true}]},"CreateAccount":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an AWS account that is automatically a member of the organization with the credentials that made the request","accessLevel":"Write","resourceTypes":[]},"CreateGovCloudAccount":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an AWS GovCloud (US) account","accessLevel":"Write","resourceTypes":[]},"CreateOrganization":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an organization. The account with the credentials that calls the CreateOrganization operation automatically becomes the management account of the new organization","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:CreateServiceLinkedRole"]},"CreateOrganizationalUnit":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"organizationalunit"},{"name":"root"}],"description":"Grants permission to create an organizational unit (OU) within a root or parent OU","accessLevel":"Write","resourceTypes":[{"name":"organizationalunit","required":false},{"name":"root","required":false}]},"CreatePolicy":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","organizations:PolicyType"],"resources":[],"description":"Grants permission to create a policy that you can attach to a root, an organizational unit (OU), or an individual AWS account","accessLevel":"Write","resourceTypes":[]},"DeclineHandshake":{"conditionKeys":[],"resources":[{"name":"handshake"}],"description":"Grants permission to decline a handshake request. This sets the handshake state to DECLINED and effectively deactivates the request","accessLevel":"Write","resourceTypes":[{"name":"handshake","required":true}]},"DeleteOrganization":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the organization","accessLevel":"Write","resourceTypes":[]},"DeleteOrganizationalUnit":{"conditionKeys":[],"resources":[{"name":"organizationalunit"}],"description":"Grants permission to delete an organizational unit from a root or another OU","accessLevel":"Write","resourceTypes":[{"name":"organizationalunit","required":true}]},"DeletePolicy":{"conditionKeys":["organizations:PolicyType"],"resources":[{"name":"policy"}],"description":"Grants permission to delete a policy from your organization","accessLevel":"Write","resourceTypes":[{"name":"policy","required":true}]},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a resource policy from your organization","accessLevel":"Write","resourceTypes":[]},"DeregisterDelegatedAdministrator":{"conditionKeys":["organizations:ServicePrincipal"],"resources":[{"name":"account"}],"description":"Grants permission to deregister the specified member AWS account as a delegated administrator for the AWS service that is specified by ServicePrincipal","accessLevel":"Write","resourceTypes":[{"name":"account","required":true}]},"DescribeAccount":{"conditionKeys":[],"resources":[{"name":"account"}],"description":"Grants permission to retrieve Organizations-related details about the specified account","accessLevel":"Read","resourceTypes":[{"name":"account","required":true}]},"DescribeCreateAccountStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the current status of an asynchronous request to create an account","accessLevel":"Read","resourceTypes":[]},"DescribeEffectivePolicy":{"conditionKeys":["organizations:PolicyType"],"resources":[{"name":"account"}],"description":"Grants permission to retrieve the effective policy for an account","accessLevel":"Read","resourceTypes":[{"name":"account","required":true}]},"DescribeHandshake":{"conditionKeys":[],"resources":[{"name":"handshake"}],"description":"Grants permission to retrieve details about a previously requested handshake","accessLevel":"Read","resourceTypes":[{"name":"handshake","required":true}]},"DescribeOrganization":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve details about the organization that the calling credentials belong to","accessLevel":"Read","resourceTypes":[]},"DescribeOrganizationalUnit":{"conditionKeys":[],"resources":[{"name":"organizationalunit"}],"description":"Grants permission to retrieve details about an organizational unit (OU)","accessLevel":"Read","resourceTypes":[{"name":"organizationalunit","required":true}]},"DescribePolicy":{"conditionKeys":["organizations:PolicyType"],"resources":[{"name":"policy"}],"description":"Grants permission to retrieve details about a policy","accessLevel":"Read","resourceTypes":[{"name":"policy","required":true}]},"DescribeResourcePolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about a resource policy","accessLevel":"Read","resourceTypes":[]},"DescribeResponsibilityTransfer":{"conditionKeys":["organizations:TransferDirection","organizations:TransferType"],"resources":[{"name":"responsibilitytransfer"}],"description":"Grants permission to retrieve details about a previously responsibility transfer","accessLevel":"Read","resourceTypes":[{"name":"responsibilitytransfer","required":true}]},"DetachPolicy":{"conditionKeys":["organizations:PolicyType"],"resources":[{"name":"account"},{"name":"organizationalunit"},{"name":"policy"},{"name":"root"}],"description":"Grants permission to detach a policy from a target root, organizational unit, or account","accessLevel":"Write","resourceTypes":[{"name":"policy","required":true},{"name":"account","required":false},{"name":"organizationalunit","required":false},{"name":"root","required":false}]},"DisableAWSServiceAccess":{"conditionKeys":["organizations:ServicePrincipal"],"resources":[],"description":"Grants permission to disable integration of an AWS service (the service that is specified by ServicePrincipal) with AWS Organizations","accessLevel":"Write","resourceTypes":[]},"DisablePolicyType":{"conditionKeys":["organizations:PolicyType"],"resources":[{"name":"root"}],"description":"Grants permission to disable an organization policy type in a root","accessLevel":"Write","resourceTypes":[{"name":"root","required":true}]},"EnableAWSServiceAccess":{"conditionKeys":["organizations:ServicePrincipal"],"resources":[],"description":"Grants permission to enable integration of an AWS service (the service that is specified by ServicePrincipal) with AWS Organizations","accessLevel":"Write","resourceTypes":[]},"EnableAllFeatures":{"conditionKeys":[],"resources":[],"description":"Grants permission to start the process to enable all features in an organization, upgrading it from supporting only Consolidated Billing features","accessLevel":"Write","resourceTypes":[]},"EnablePolicyType":{"conditionKeys":["organizations:PolicyType"],"resources":[{"name":"root"}],"description":"Grants permission to enable a policy type in a root","accessLevel":"Write","resourceTypes":[{"name":"root","required":true}]},"InviteAccountToOrganization":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"account"}],"description":"Grants permission to send an invitation to another AWS account, asking it to join your organization as a member account","accessLevel":"Write","resourceTypes":[{"name":"account","required":false}]},"InviteOrganizationToTransferResponsibility":{"conditionKeys":["organizations:TransferDirection","organizations:TransferType"],"resources":[{"name":"account"}],"description":"Grants permission to send an invitation to another AWS account, asking it to transfer a particular responsibility to your organization","accessLevel":"Write","resourceTypes":[{"name":"account","required":false}]},"LeaveOrganization":{"conditionKeys":[],"resources":[],"description":"Grants permission to remove a member account from its parent organization","accessLevel":"Write","resourceTypes":[]},"ListAWSServiceAccessForOrganization":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the list of the AWS services for which you enabled integration with your organization","accessLevel":"List","resourceTypes":[]},"ListAccounts":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all of the accounts in the organization","accessLevel":"List","resourceTypes":[]},"ListAccountsForParent":{"conditionKeys":[],"resources":[{"name":"organizationalunit"},{"name":"root"}],"description":"Grants permission to list the accounts in an organization that are contained by a root or organizational unit (OU)","accessLevel":"List","resourceTypes":[{"name":"organizationalunit","required":false},{"name":"root","required":false}]},"ListAccountsWithInvalidEffectivePolicy":{"conditionKeys":["organizations:PolicyType"],"resources":[],"description":"Grants permission to list accounts that have invalid effective policies for a specified policy type","accessLevel":"List","resourceTypes":[]},"ListChildren":{"conditionKeys":[],"resources":[{"name":"organizationalunit"},{"name":"root"}],"description":"Grants permission to list all of the OUs or accounts that are contained in a parent OU or root","accessLevel":"List","resourceTypes":[{"name":"organizationalunit","required":false},{"name":"root","required":false}]},"ListCreateAccountStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the asynchronous account creation requests that are currently being tracked for the organization","accessLevel":"List","resourceTypes":[]},"ListDelegatedAdministrators":{"conditionKeys":["organizations:ServicePrincipal"],"resources":[],"description":"Grants permission to list the AWS accounts that are designated as delegated administrators in this organization","accessLevel":"List","resourceTypes":[]},"ListDelegatedServicesForAccount":{"conditionKeys":[],"resources":[{"name":"account"}],"description":"Grants permission to list the AWS services for which the specified account is a delegated administrator in this organization","accessLevel":"List","resourceTypes":[{"name":"account","required":true}]},"ListEffectivePolicyValidationErrors":{"conditionKeys":["organizations:PolicyType"],"resources":[{"name":"account"}],"description":"Grants permission to list validation errors found in the effective policy for a specific account and policy type","accessLevel":"List","resourceTypes":[{"name":"account","required":true}]},"ListHandshakesForAccount":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all of the handshakes that are associated with an account","accessLevel":"List","resourceTypes":[]},"ListHandshakesForOrganization":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the handshakes that are associated with the organization","accessLevel":"List","resourceTypes":[]},"ListInboundResponsibilityTransfers":{"conditionKeys":["organizations:TransferDirection","organizations:TransferType"],"resources":[],"description":"Grants permission to list all responsibilities of a particular type transfered to your organization","accessLevel":"List","resourceTypes":[]},"ListOrganizationalUnitsForParent":{"conditionKeys":[],"resources":[{"name":"organizationalunit"},{"name":"root"}],"description":"Grants permission to list all of the organizational units (OUs) in a parent organizational unit or root","accessLevel":"List","resourceTypes":[{"name":"organizationalunit","required":false},{"name":"root","required":false}]},"ListOutboundResponsibilityTransfers":{"conditionKeys":["organizations:TransferDirection","organizations:TransferType"],"resources":[],"description":"Grants permission to list all responsibilities of a particular type transfered to another organization","accessLevel":"List","resourceTypes":[]},"ListParents":{"conditionKeys":[],"resources":[{"name":"account"},{"name":"organizationalunit"}],"description":"Grants permission to list the root or organizational units (OUs) that serve as the immediate parent of a child OU or account","accessLevel":"List","resourceTypes":[{"name":"account","required":false},{"name":"organizationalunit","required":false}]},"ListPolicies":{"conditionKeys":["organizations:PolicyType"],"resources":[],"description":"Grants permission to list all of the policies in an organization","accessLevel":"List","resourceTypes":[]},"ListPoliciesForTarget":{"conditionKeys":["organizations:PolicyType"],"resources":[{"name":"account"},{"name":"organizationalunit"},{"name":"root"}],"description":"Grants permission to list all of the policies that are directly attached to a root, organizational unit (OU), or account","accessLevel":"List","resourceTypes":[{"name":"account","required":false},{"name":"organizationalunit","required":false},{"name":"root","required":false}]},"ListRoots":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all of the roots that are defined in the organization","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["organizations:PolicyType"],"resources":[{"name":"account"},{"name":"organizationalunit"},{"name":"policy"},{"name":"resourcepolicy"},{"name":"responsibilitytransfer"},{"name":"root"}],"description":"Grants permission to list all tags for the specified resource","accessLevel":"List","resourceTypes":[{"name":"account","required":false},{"name":"organizationalunit","required":false},{"name":"policy","required":false},{"name":"resourcepolicy","required":false},{"name":"responsibilitytransfer","required":false},{"name":"root","required":false}]},"ListTargetsForPolicy":{"conditionKeys":["organizations:PolicyType"],"resources":[{"name":"policy"}],"description":"Grants permission to list all the roots, OUs, and accounts to which a policy is attached","accessLevel":"List","resourceTypes":[{"name":"policy","required":true}]},"MoveAccount":{"conditionKeys":[],"resources":[{"name":"account"},{"name":"organizationalunit"},{"name":"root"}],"description":"Grants permission to move an account from its current root or OU to another parent root or OU","accessLevel":"Write","resourceTypes":[{"name":"account","required":true},{"name":"organizationalunit","required":true},{"name":"root","required":true}]},"PutResourcePolicy":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"resourcepolicy"}],"description":"Grants permission to create or update a resource policy","accessLevel":"Write","resourceTypes":[{"name":"resourcepolicy","required":true}]},"RegisterDelegatedAdministrator":{"conditionKeys":["organizations:ServicePrincipal"],"resources":[{"name":"account"}],"description":"Grants permission to register the specified member account to administer the Organizations features of the AWS service that is specified by ServicePrincipal","accessLevel":"Write","resourceTypes":[{"name":"account","required":true}]},"RemoveAccountFromOrganization":{"conditionKeys":[],"resources":[{"name":"account"}],"description":"Grants permission to remove the specified account from the organization","accessLevel":"Write","resourceTypes":[{"name":"account","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","organizations:PolicyType"],"resources":[{"name":"account"},{"name":"organizationalunit"},{"name":"policy"},{"name":"resourcepolicy"},{"name":"responsibilitytransfer"},{"name":"root"}],"description":"Grants permission to add one or more tags to the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"account","required":false},{"name":"organizationalunit","required":false},{"name":"policy","required":false},{"name":"resourcepolicy","required":false},{"name":"responsibilitytransfer","required":false},{"name":"root","required":false}]},"TerminateResponsibilityTransfer":{"conditionKeys":["organizations:TransferDirection","organizations:TransferType"],"resources":[{"name":"responsibilitytransfer"}],"description":"Grants permission to end the transfer for a responsibility to or from your organization","accessLevel":"Write","resourceTypes":[{"name":"responsibilitytransfer","required":true}]},"UntagResource":{"conditionKeys":["aws:TagKeys","organizations:PolicyType"],"resources":[{"name":"account"},{"name":"organizationalunit"},{"name":"policy"},{"name":"resourcepolicy"},{"name":"responsibilitytransfer"},{"name":"root"}],"description":"Grants permission to remove one or more tags from the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"account","required":false},{"name":"organizationalunit","required":false},{"name":"policy","required":false},{"name":"resourcepolicy","required":false},{"name":"responsibilitytransfer","required":false},{"name":"root","required":false}]},"UpdateOrganizationalUnit":{"conditionKeys":[],"resources":[{"name":"organizationalunit"}],"description":"Grants permission to rename an organizational unit (OU)","accessLevel":"Write","resourceTypes":[{"name":"organizationalunit","required":true}]},"UpdatePolicy":{"conditionKeys":["organizations:PolicyType"],"resources":[{"name":"policy"}],"description":"Grants permission to update an existing policy with a new name, description, or content","accessLevel":"Write","resourceTypes":[{"name":"policy","required":true}]},"UpdateResponsibilityTransfer":{"conditionKeys":["organizations:TransferDirection","organizations:TransferType"],"resources":[{"name":"responsibilitytransfer"}],"description":"Grants permission to rename a responsibility transfer to or from your organization","accessLevel":"Write","resourceTypes":[{"name":"responsibilitytransfer","required":true}]}},"resources":[{"name":"account","arnFormats":["arn:${Partition}:organizations::${Account}:account/o-${OrganizationId}/${AccountId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"awspolicy","arnFormats":["arn:${Partition}:organizations::aws:policy/${PolicyType}/p-${PolicyId}"],"conditionKeys":[]},{"name":"handshake","arnFormats":["arn:${Partition}:organizations::${Account}:handshake/o-${OrganizationId}/${HandshakeType}/h-${HandshakeId}"],"conditionKeys":[]},{"name":"organization","arnFormats":["arn:${Partition}:organizations::${Account}:organization/o-${OrganizationId}"],"conditionKeys":[]},{"name":"organizationalunit","arnFormats":["arn:${Partition}:organizations::${Account}:ou/o-${OrganizationId}/ou-${OrganizationalUnitId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"policy","arnFormats":["arn:${Partition}:organizations::${Account}:policy/o-${OrganizationId}/${PolicyType}/p-${PolicyId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"resourcepolicy","arnFormats":["arn:${Partition}:organizations::${Account}:resourcepolicy/o-${OrganizationId}/rp-${ResourcePolicyId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"responsibilitytransfer","arnFormats":["arn:${Partition}:organizations::${Account}:transfer/o-${OrganizationId}/${TransferType}/${TransferDirection}/rt-${ResponsibilityTransferId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"root","arnFormats":["arn:${Partition}:organizations::${Account}:root/o-${OrganizationId}/r-${RootId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"organizations:PolicyType":{"types":["String"],"description":"Filters access by the specified policy type names"},"organizations:ServicePrincipal":{"types":["String"],"description":"Filters access by the specified service principal names"},"organizations:TransferDirection":{"types":["String"],"description":"Filters access by the specified responsibility transfer by the direction"},"organizations:TransferType":{"types":["String"],"description":"Filters access by the specified responsibility transfer type names"}}}
@@ -0,0 +1 @@
1
+ {"name":"osis","actions":{"CreatePipeline":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an OpenSearch Ingestion pipeline","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:CreateServiceLinkedRole","iam:PassRole","kms:DescribeKey","kms:GenerateDataKeyWithoutPlaintext","logs:CreateLogDelivery"]},"CreatePipelineEndpoint":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"pipeline"}],"description":"Grants permission to create an OpenSearch Ingestion pipeline endpoint","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"]},"DeletePipeline":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Grants permission to delete an OpenSearch Ingestion pipeline","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}],"dependentActions":["logs:DeleteLogDelivery","logs:GetLogDelivery","logs:ListLogDeliveries"]},"DeletePipelineEndpoint":{"conditionKeys":[],"resources":[{"name":"pipeline-endpoint"}],"description":"Grants permission to delete an OpenSearch Ingestion pipeline endpoint in the current account","accessLevel":"Write","resourceTypes":[{"name":"pipeline-endpoint","required":true}]},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Grants permission to delete a resource policy for an OpenSearch Ingestion resource","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]},"GetPipeline":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Grants permission to retrieve configuration information for an OpenSearch Ingestion pipeline","accessLevel":"Read","resourceTypes":[{"name":"pipeline","required":true}]},"GetPipelineBlueprint":{"conditionKeys":[],"resources":[{"name":"pipeline-blueprint"}],"description":"Grants permission to get the contents of an OpenSearch Ingestion pipeline blueprint","accessLevel":"Read","resourceTypes":[{"name":"pipeline-blueprint","required":true}]},"GetPipelineChangeProgress":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Grants permission to get granular information about the status of an OpenSearch Ingestion pipeline","accessLevel":"Read","resourceTypes":[{"name":"pipeline","required":true}]},"GetResourcePolicy":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Grants permission to get a resource policy for an OpenSearch Ingestion resource","accessLevel":"Read","resourceTypes":[{"name":"pipeline","required":true}]},"Ingest":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Grants permission to ingest data through an OpenSearch Ingestion pipeline","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]},"ListPipelineBlueprints":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the names of available blueprints for an OpenSearch Ingestion pipeline configuration","accessLevel":"List","resourceTypes":[]},"ListPipelineEndpointConnections":{"conditionKeys":[],"resources":[],"description":"Grants permission to list OpenSearch Ingestion pipeline endpoint connections to pipelines in the current account","accessLevel":"List","resourceTypes":[]},"ListPipelineEndpoints":{"conditionKeys":[],"resources":[],"description":"Grants permission to list OpenSearch Ingestion pipeline endpoints in the current account","accessLevel":"List","resourceTypes":[]},"ListPipelines":{"conditionKeys":[],"resources":[],"description":"Grants permission to list basic configuration for each OpenSearch Ingestion pipeline in the current account and Region","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Grants permission to list all resource tags associated with an OpenSearch Ingestion pipeline","accessLevel":"Read","resourceTypes":[{"name":"pipeline","required":true}]},"PutResourcePolicy":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Grants permission to put a resource policy for an OpenSearch Ingestion resource","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]},"RevokePipelineEndpointConnections":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Grants permission to revoke an OpenSearch Ingestion pipeline endpoint connection from a pipeline in the current account","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]},"StartPipeline":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Grants permission to start an OpenSearch Ingestion pipeline","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]},"StopPipeline":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Grants permission to stop an OpenSearch Ingestion pipeline","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"pipeline"}],"description":"Grants permission to attach resource tags to an OpenSearch Ingestion pipeline","accessLevel":"Tagging","resourceTypes":[{"name":"pipeline","required":true}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"pipeline"}],"description":"Grants permission to remove resource tags from an OpenSearch Ingestion Service pipeline","accessLevel":"Tagging","resourceTypes":[{"name":"pipeline","required":true}]},"UpdatePipeline":{"conditionKeys":[],"resources":[{"name":"pipeline"}],"description":"Grants permission to modify the configuration of an OpenSearch Ingestion pipeline","accessLevel":"Write","resourceTypes":[{"name":"pipeline","required":true}],"dependentActions":["iam:PassRole","kms:DescribeKey","kms:GenerateDataKeyWithoutPlaintext","logs:GetLogDelivery","logs:ListLogDeliveries","logs:UpdateLogDelivery"]},"ValidatePipeline":{"conditionKeys":[],"resources":[],"description":"Grants permission to validate the configuration of an OpenSearch Ingestion pipeline","accessLevel":"Read","resourceTypes":[]}},"resources":[{"name":"pipeline","arnFormats":["arn:${Partition}:osis:${Region}:${Account}:pipeline/${PipelineName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"pipeline-blueprint","arnFormats":["arn:${Partition}:osis:${Region}:${Account}:blueprint/${BlueprintName}"],"conditionKeys":[]},{"name":"pipeline-endpoint","arnFormats":["arn:${Partition}:osis:${Region}:${Account}:endpoint/${EndpointId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"outposts","actions":{"CancelCapacityTask":{"conditionKeys":[],"resources":[{"name":"outpost"}],"description":"Grants permission to cancel a capacity task","accessLevel":"Write","resourceTypes":[{"name":"outpost","required":true}]},"CancelOrder":{"conditionKeys":[],"resources":[],"description":"Grants permission to cancel an order","accessLevel":"Write","resourceTypes":[]},"CreateOrder":{"conditionKeys":[],"resources":[{"name":"outpost"}],"description":"Grants permission to create an order","accessLevel":"Write","resourceTypes":[{"name":"outpost","required":true}]},"CreateOutpost":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"site"}],"description":"Grants permission to create an Outpost","accessLevel":"Write","resourceTypes":[{"name":"site","required":true}]},"CreatePrivateConnectivityConfig":{"conditionKeys":[],"resources":[{"name":"outpost"}],"description":"Grants permission to create a private connectivity configuration","accessLevel":"Write","resourceTypes":[{"name":"outpost","required":true}]},"CreateSite":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a site","accessLevel":"Write","resourceTypes":[]},"DeleteOutpost":{"conditionKeys":[],"resources":[{"name":"outpost"}],"description":"Grants permission to delete an Outpost","accessLevel":"Write","resourceTypes":[{"name":"outpost","required":true}]},"DeleteSite":{"conditionKeys":[],"resources":[{"name":"site"}],"description":"Grants permission to delete a site","accessLevel":"Write","resourceTypes":[{"name":"site","required":true}]},"GetCapacityTask":{"conditionKeys":[],"resources":[{"name":"outpost"}],"description":"Grants permission to get information about the specified capacity task","accessLevel":"Read","resourceTypes":[{"name":"outpost","required":true}]},"GetCatalogItem":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a catalog item","accessLevel":"Read","resourceTypes":[]},"GetConnection":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about the connection for your Outpost server","accessLevel":"Read","resourceTypes":[]},"GetOrder":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about an order","accessLevel":"Read","resourceTypes":[]},"GetOutpost":{"conditionKeys":[],"resources":[{"name":"outpost"}],"description":"Grants permission to get information about the specified Outpost","accessLevel":"Read","resourceTypes":[{"name":"outpost","required":true}]},"GetOutpostBillingInformation":{"conditionKeys":[],"resources":[{"name":"outpost"}],"description":"Grants permission to get Outpost billing information for the specified Outpost","accessLevel":"Read","resourceTypes":[{"name":"outpost","required":true}]},"GetOutpostInstanceTypes":{"conditionKeys":[],"resources":[{"name":"outpost"}],"description":"Grants permission to get the instance types for the specified Outpost","accessLevel":"Read","resourceTypes":[{"name":"outpost","required":true}]},"GetOutpostSupportedInstanceTypes":{"conditionKeys":[],"resources":[{"name":"outpost"}],"description":"Grants permission to get the supported instance types for the specified Outpost","accessLevel":"Read","resourceTypes":[{"name":"outpost","required":true}]},"GetPrivateConnectivityConfig":{"conditionKeys":[],"resources":[{"name":"outpost"}],"description":"Grants permission to get a private connectivity configuration","accessLevel":"Read","resourceTypes":[{"name":"outpost","required":true}]},"GetSite":{"conditionKeys":[],"resources":[{"name":"site"}],"description":"Grants permission to get a site","accessLevel":"Read","resourceTypes":[{"name":"site","required":true}]},"GetSiteAddress":{"conditionKeys":[],"resources":[{"name":"site"}],"description":"Grants permission to get a site address","accessLevel":"Read","resourceTypes":[{"name":"site","required":true}]},"ListAssetInstances":{"conditionKeys":[],"resources":[{"name":"outpost"}],"description":"Grants permission to list all running instances for the specified Outpost","accessLevel":"List","resourceTypes":[{"name":"outpost","required":true}]},"ListAssets":{"conditionKeys":[],"resources":[{"name":"outpost"}],"description":"Grants permission to list the assets for your Outpost","accessLevel":"List","resourceTypes":[{"name":"outpost","required":true}]},"ListBlockingInstancesForCapacityTask":{"conditionKeys":[],"resources":[{"name":"outpost"}],"description":"Grants permission to list all running instances that are blocking the capacity task from running for the specified Outpost","accessLevel":"List","resourceTypes":[{"name":"outpost","required":true}]},"ListCapacityTasks":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the capacity tasks for your AWS account","accessLevel":"List","resourceTypes":[]},"ListCatalogItems":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all catalog items","accessLevel":"List","resourceTypes":[]},"ListOrders":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the orders for your AWS account","accessLevel":"List","resourceTypes":[]},"ListOutposts":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the Outposts for your AWS account","accessLevel":"List","resourceTypes":[]},"ListSites":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the sites for your AWS account","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to list tags for a resource","accessLevel":"Read","resourceTypes":[]},"StartCapacityTask":{"conditionKeys":[],"resources":[{"name":"outpost"}],"description":"Grants permission to create a capacity task","accessLevel":"Write","resourceTypes":[{"name":"outpost","required":true}]},"StartConnection":{"conditionKeys":[],"resources":[],"description":"Grants permission to start a connection for your Outpost server","accessLevel":"Write","resourceTypes":[]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"outpost"},{"name":"site"}],"description":"Grants permission to tag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"outpost","required":false},{"name":"site","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"outpost"},{"name":"site"}],"description":"Grants permission to untag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"outpost","required":false},{"name":"site","required":false}]},"UpdateOutpost":{"conditionKeys":[],"resources":[{"name":"outpost"}],"description":"Grants permission to update an Outpost","accessLevel":"Write","resourceTypes":[{"name":"outpost","required":true}]},"UpdateSite":{"conditionKeys":[],"resources":[{"name":"site"}],"description":"Grants permission to update a site","accessLevel":"Write","resourceTypes":[{"name":"site","required":true}]},"UpdateSiteAddress":{"conditionKeys":[],"resources":[{"name":"site"}],"description":"Grants permission to update the site address","accessLevel":"Write","resourceTypes":[{"name":"site","required":true}]},"UpdateSiteRackPhysicalProperties":{"conditionKeys":[],"resources":[{"name":"site"}],"description":"Grants permission to update the physical properties of a rack at a site","accessLevel":"Write","resourceTypes":[{"name":"site","required":true}]}},"resources":[{"name":"outpost","arnFormats":["arn:${Partition}:outposts:${Region}:${Account}:outpost/${OutpostId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"site","arnFormats":["arn:${Partition}:outposts:${Region}:${Account}:site/${SiteId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"panorama","actions":{"CreateApplicationInstance":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an AWS Panorama Application Instance","accessLevel":"Write","resourceTypes":[]},"CreateJobForDevices":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a job for an AWS Panorama Appliance","accessLevel":"Write","resourceTypes":[]},"CreateNodeFromTemplateJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an AWS Panorama Node","accessLevel":"Write","resourceTypes":[]},"CreatePackage":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an AWS Panorama Package","accessLevel":"Write","resourceTypes":[]},"CreatePackageImportJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an AWS Panorama Package","accessLevel":"Write","resourceTypes":[]},"DeleteDevice":{"conditionKeys":[],"resources":[{"name":"device"}],"description":"Grants permission to deregister an AWS Panorama Appliance","accessLevel":"Write","resourceTypes":[{"name":"device","required":true}]},"DeletePackage":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to delete an AWS Panorama Package","accessLevel":"Write","resourceTypes":[{"name":"package","required":true}]},"DeregisterPackageVersion":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to deregister an AWS Panorama package version","accessLevel":"Write","resourceTypes":[{"name":"package","required":true}]},"DescribeApplicationInstance":{"conditionKeys":[],"resources":[{"name":"applicationInstance"}],"description":"Grants permission to view details about an AWS Panorama application instance","accessLevel":"Read","resourceTypes":[{"name":"applicationInstance","required":true}]},"DescribeApplicationInstanceDetails":{"conditionKeys":[],"resources":[{"name":"applicationInstance"}],"description":"Grants permission to view details about an AWS Panorama application instance","accessLevel":"Read","resourceTypes":[{"name":"applicationInstance","required":true}]},"DescribeDevice":{"conditionKeys":[],"resources":[{"name":"device"}],"description":"Grants permission to view details about an AWS Panorama Appliance","accessLevel":"Read","resourceTypes":[{"name":"device","required":true}]},"DescribeDeviceJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to view job details for an AWS Panorama Appliance","accessLevel":"Read","resourceTypes":[]},"DescribeNode":{"conditionKeys":[],"resources":[],"description":"Grants permission to view details about an AWS Panorama application node","accessLevel":"Read","resourceTypes":[]},"DescribeNodeFromTemplateJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to view details about AWS Panorama application node","accessLevel":"Read","resourceTypes":[]},"DescribePackage":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to view details about an AWS Panorama package","accessLevel":"Read","resourceTypes":[{"name":"package","required":true}]},"DescribePackageImportJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to view details about an AWS Panorama package","accessLevel":"Read","resourceTypes":[]},"DescribePackageVersion":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to view details about an AWS Panorama package version","accessLevel":"Read","resourceTypes":[{"name":"package","required":true}]},"DescribeSoftware":{"conditionKeys":[],"resources":[],"description":"Grants permission to view details about a software version for the AWS Panorama Appliance","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetWebSocketURL":{"conditionKeys":[],"resources":[],"description":"Grants permission to generate a WebSocket endpoint for communication with AWS Panorama","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"ListApplicationInstanceDependencies":{"conditionKeys":[],"resources":[{"name":"applicationInstance"}],"description":"Grants permission to retrieve a list of application instance dependencies in AWS Panorama","accessLevel":"List","resourceTypes":[{"name":"applicationInstance","required":true}]},"ListApplicationInstanceNodeInstances":{"conditionKeys":[],"resources":[{"name":"applicationInstance"}],"description":"Grants permission to retrieve a list of node instances of application instances in AWS Panorama","accessLevel":"List","resourceTypes":[{"name":"applicationInstance","required":true}]},"ListApplicationInstances":{"conditionKeys":[],"resources":[{"name":"device"}],"description":"Grants permission to retrieve a list of application instances in AWS Panorama","accessLevel":"List","resourceTypes":[{"name":"device","required":false}]},"ListDevices":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of appliances in AWS Panorama","accessLevel":"List","resourceTypes":[]},"ListDevicesJobs":{"conditionKeys":[],"resources":[{"name":"device"}],"description":"Grants permission to retrieve a list of jobs for an AWS Panorama Appliance","accessLevel":"List","resourceTypes":[{"name":"device","required":false}]},"ListNodeFromTemplateJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of Nodes for an AWS Panorama Appliance","accessLevel":"List","resourceTypes":[]},"ListNodes":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of nodes in AWS Panorama","accessLevel":"List","resourceTypes":[]},"ListPackageImportJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of packages in AWS Panorama","accessLevel":"List","resourceTypes":[]},"ListPackages":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of packages in AWS Panorama","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"applicationInstance"},{"name":"device"},{"name":"package"}],"description":"Grants permission to retrieve a list of tags for a resource in AWS Panorama","accessLevel":"Read","resourceTypes":[{"name":"applicationInstance","required":false},{"name":"device","required":false},{"name":"package","required":false}]},"ProvisionDevice":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to register an AWS Panorama Appliance","accessLevel":"Write","resourceTypes":[]},"RegisterPackageVersion":{"conditionKeys":[],"resources":[{"name":"package"}],"description":"Grants permission to register an AWS Panorama package version","accessLevel":"Write","resourceTypes":[{"name":"package","required":true}]},"RemoveApplicationInstance":{"conditionKeys":[],"resources":[{"name":"applicationInstance"}],"description":"Grants permission to remove an AWS Panorama application instance","accessLevel":"Write","resourceTypes":[{"name":"applicationInstance","required":true}]},"SignalApplicationInstanceNodeInstances":{"conditionKeys":[],"resources":[{"name":"applicationInstance"}],"description":"Grants permission to signal camera nodes in an application instance to pause or resume","accessLevel":"Write","resourceTypes":[{"name":"applicationInstance","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"applicationInstance"},{"name":"device"},{"name":"package"}],"description":"Grants permission to add tags to a resource in AWS Panorama","accessLevel":"Tagging","resourceTypes":[{"name":"applicationInstance","required":false},{"name":"device","required":false},{"name":"package","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"applicationInstance"},{"name":"device"},{"name":"package"}],"description":"Grants permission to remove tags from a resource in AWS Panorama","accessLevel":"Tagging","resourceTypes":[{"name":"applicationInstance","required":false},{"name":"device","required":false},{"name":"package","required":false}]},"UpdateDeviceMetadata":{"conditionKeys":[],"resources":[{"name":"device"}],"description":"Grants permission to modify basic settings for an AWS Panorama Appliance","accessLevel":"Write","resourceTypes":[{"name":"device","required":true}]}},"resources":[{"name":"applicationInstance","arnFormats":["arn:${Partition}:panorama:${Region}:${Account}:applicationInstance/${ApplicationInstanceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"device","arnFormats":["arn:${Partition}:panorama:${Region}:${Account}:device/${DeviceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"package","arnFormats":["arn:${Partition}:panorama:${Region}:${Account}:package/${PackageId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"partnercentral-account-management","actions":{"AccessLegacyPartnerCentral":{"conditionKeys":["partnercentral-account-management:LegacyPartnerCentralRole"],"resources":[],"description":"Grants permission to Single Sign-On from AWS Partner Central into Legacy Partner Central","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"AccessMarketingCentral":{"conditionKeys":["partnercentral-account-management:MarketingCentralRole"],"resources":[],"description":"Grants permission to Single Sign-On from AWS Partner Central into Marketing Central","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"AccessProServeTools":{"conditionKeys":["partnercentral-account-management:ProServeRole"],"resources":[],"description":"Grants permission to Single Sign-On from AWS Partner Central into ProServe Tools","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"AssociatePartnerAccount":{"conditionKeys":[],"resources":[],"description":"Grants permission to associate Partner account to AWS account","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"AssociatePartnerUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to associate Partner user to IAM role","accessLevel":"Write","resourceTypes":[]},"DisassociatePartnerUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to disassociate Partner user to IAM role","accessLevel":"Write","resourceTypes":[]}},"resources":[],"conditionKeys":{"partnercentral-account-management:LegacyPartnerCentralRole":{"types":["ArrayOfString"],"description":"Filters access by the Legacy Partner Central role"},"partnercentral-account-management:MarketingCentralRole":{"types":["ArrayOfString"],"description":"Filters access by Marketing Central role"},"partnercentral-account-management:ProServeRole":{"types":["ArrayOfString"],"description":"Filters access by ProServe Tools role"}}}
@@ -0,0 +1 @@
1
+ {"name":"partnercentral","actions":{"AcceptChannelHandshake":{"conditionKeys":["partnercentral:Catalog","partnercentral:ChannelHandshakeType"],"resources":[{"name":"ChannelHandshake"}],"description":"Grants permission to accept channel handshakes in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"ChannelHandshake","required":true}]},"AcceptConnectionInvitation":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"ConnectionInvitation"}],"description":"Grants permission to accept connection invitations in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"ConnectionInvitation","required":true}]},"AcceptEngagementInvitation":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"engagement-invitation"}],"description":"Grants permission to accept Engagement Invitations on AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"engagement-invitation","required":true}]},"AmendBenefitApplication":{"conditionKeys":["aws:ResourceTag/${TagKey}","partnercentral:Catalog","partnercentral:FulfillmentTypes","partnercentral:Programs"],"resources":[{"name":"BenefitApplication"}],"description":"Grants permission to amend benefit applications in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"BenefitApplication","required":true}]},"AssignOpportunity":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"Opportunity"}],"description":"Grants permission to assign Opportunities on AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"Opportunity","required":true}]},"AssociateAwsTrainingCertificationEmailDomain":{"conditionKeys":["aws:ResourceTag/${TagKey}","partnercentral:Catalog"],"resources":[{"name":"Partner"}],"description":"Grants permission to associate AWS Training and Certification email domains in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"Partner","required":true}]},"AssociateBenefitApplicationResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","partnercentral:Catalog","partnercentral:FulfillmentTypes","partnercentral:Programs"],"resources":[{"name":"BenefitAllocation"},{"name":"BenefitApplication"},{"name":"Opportunity"}],"description":"Grants permission to associate benefit application resources in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"BenefitAllocation","required":true},{"name":"BenefitApplication","required":true},{"name":"Opportunity","required":true}]},"AssociateOpportunity":{"conditionKeys":["partnercentral:Catalog","partnercentral:RelatedEntityType"],"resources":[{"name":"Opportunity"}],"description":"Grants permission to associate Opportunities on AWS Partner Central with other entities","accessLevel":"Write","resourceTypes":[{"name":"Opportunity","required":true}]},"CancelBenefitApplication":{"conditionKeys":["aws:ResourceTag/${TagKey}","partnercentral:Catalog","partnercentral:FulfillmentTypes","partnercentral:Programs"],"resources":[{"name":"BenefitApplication"}],"description":"Grants permission to cancel benefit applications in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"BenefitApplication","required":true}]},"CancelChannelHandshake":{"conditionKeys":["aws:ResourceTag/${TagKey}","partnercentral:Catalog","partnercentral:ChannelHandshakeType"],"resources":[{"name":"ChannelHandshake"}],"description":"Grants permission to cancel channel handshakes in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"ChannelHandshake","required":true}]},"CancelConnection":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"Connection"}],"description":"Grants permission to cancel connections in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"Connection","required":true}]},"CancelConnectionInvitation":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"ConnectionInvitation"}],"description":"Grants permission to cancel connection invitations in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"ConnectionInvitation","required":true}]},"CancelProfileUpdateTask":{"conditionKeys":["aws:ResourceTag/${TagKey}","partnercentral:Catalog"],"resources":[{"name":"Partner"}],"description":"Grants permission to cancel profile update tasks in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"Partner","required":true}]},"CreateBenefitApplication":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","partnercentral:Catalog","partnercentral:FulfillmentTypes","partnercentral:Programs"],"resources":[],"description":"Grants permission to create benefit applications in AWS Partner Central","accessLevel":"Write","resourceTypes":[]},"CreateBusinessPlan":{"conditionKeys":[],"resources":[],"description":"Grants permission to create business plans in AWS Partner Central","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CreateChannelHandshake":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","partnercentral:Catalog","partnercentral:ChannelHandshakeType"],"resources":[{"name":"ProgramManagementAccount"},{"name":"Relationship"}],"description":"Grants permission to create channel handshakes in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"ProgramManagementAccount","required":false},{"name":"Relationship","required":false}]},"CreateCollaborationChannelMembers":{"conditionKeys":[],"resources":[],"description":"Grants permission to create collaboration channel members in AWS Partner Central","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CreateCollaborationChannelRequest":{"conditionKeys":[],"resources":[],"description":"Grants permission to create collaboration channel requests in AWS Partner Central","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CreateConnectionInvitation":{"conditionKeys":["partnercentral:Catalog"],"resources":[],"description":"Grants permission to create connection invitations in AWS Partner Central","accessLevel":"Write","resourceTypes":[]},"CreateEngagement":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"Engagement"}],"description":"Grants permission to creating engagements in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"Engagement","required":true}]},"CreateEngagementContext":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"Engagement"}],"description":"Grants permission to create engagement contexts in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"Engagement","required":true}]},"CreateEngagementInvitation":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"engagement-invitation"}],"description":"Grants permission to creating engagement invitations in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"engagement-invitation","required":true}]},"CreateOpportunity":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","partnercentral:Catalog"],"resources":[{"name":"Opportunity"}],"description":"Grants permission to create new Opportunities on AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"Opportunity","required":true}]},"CreatePartner":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","partnercentral:Catalog"],"resources":[],"description":"Grants permission to create partners in AWS Partner Central","accessLevel":"Write","resourceTypes":[]},"CreateProgramManagementAccount":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","partnercentral:Catalog"],"resources":[],"description":"Grants permission to create program management accounts in AWS Partner Central","accessLevel":"Write","resourceTypes":[]},"CreateRelationship":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","partnercentral:Catalog"],"resources":[{"name":"ProgramManagementAccount"}],"description":"Grants permission to create relationships in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"ProgramManagementAccount","required":true}]},"CreateResourceSnapshot":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"ResourceSnapshot"}],"description":"Grants permission to creating resource snapshots in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"ResourceSnapshot","required":true}]},"CreateResourceSnapshotJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","partnercentral:Catalog"],"resources":[{"name":"resource-snapshot-job"}],"description":"Grants permission to creating resource snapshot jobs in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"resource-snapshot-job","required":true}]},"DeleteProgramManagementAccount":{"conditionKeys":["aws:ResourceTag/${TagKey}","partnercentral:Catalog"],"resources":[{"name":"ProgramManagementAccount"}],"description":"Grants permission to delete program management accounts in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"ProgramManagementAccount","required":true}]},"DeleteRelationship":{"conditionKeys":["aws:ResourceTag/${TagKey}","partnercentral:Catalog"],"resources":[{"name":"Relationship"}],"description":"Grants permission to delete relationships in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"Relationship","required":true}]},"DeleteResourceSnapshotJob":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"resource-snapshot-job"}],"description":"Grants permission to deleting resource snapshot jobs on AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"resource-snapshot-job","required":true}]},"DisassociateAwsTrainingCertificationEmailDomain":{"conditionKeys":["aws:ResourceTag/${TagKey}","partnercentral:Catalog"],"resources":[{"name":"Partner"}],"description":"Grants permission to disassociate AWS Training and Certification email domains in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"Partner","required":true}]},"DisassociateBenefitApplicationResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","partnercentral:Catalog","partnercentral:FulfillmentTypes","partnercentral:Programs"],"resources":[{"name":"BenefitAllocation"},{"name":"BenefitApplication"},{"name":"Opportunity"}],"description":"Grants permission to disassociate benefit application resources in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"BenefitAllocation","required":true},{"name":"BenefitApplication","required":true},{"name":"Opportunity","required":true}]},"DisassociateOpportunity":{"conditionKeys":["partnercentral:Catalog","partnercentral:RelatedEntityType"],"resources":[{"name":"Opportunity"}],"description":"Grants permission to disassociate Opportunities on AWS Partner Central from other entities","accessLevel":"Write","resourceTypes":[{"name":"Opportunity","required":true}]},"EnrollInPartnerPath":{"conditionKeys":[],"resources":[],"description":"Grants permission to enroll in partner paths in AWS Partner Central","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"GetAllianceLeadContact":{"conditionKeys":["aws:ResourceTag/${TagKey}","partnercentral:Catalog"],"resources":[{"name":"Partner"}],"description":"Grants permission to retrieve alliance lead contact information in AWS Partner Central","accessLevel":"Read","resourceTypes":[{"name":"Partner","required":true}]},"GetAwsOpportunitySummary":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"Opportunity"}],"description":"Grants permission to retrieve AWS Opportunity Summaries for Opportunities on AWS Partner Central","accessLevel":"Read","resourceTypes":[{"name":"Opportunity","required":true}]},"GetBenefit":{"conditionKeys":["aws:ResourceTag/${TagKey}","partnercentral:Catalog","partnercentral:FulfillmentTypes","partnercentral:Programs"],"resources":[{"name":"Benefit"}],"description":"Grants permission to retrieve benefit details in AWS Partner Central","accessLevel":"Read","resourceTypes":[{"name":"Benefit","required":true}]},"GetBenefitAllocation":{"conditionKeys":["aws:ResourceTag/${TagKey}","partnercentral:Catalog","partnercentral:FulfillmentTypes"],"resources":[{"name":"BenefitAllocation"}],"description":"Grants permission to retrieve benefit allocation details in AWS Partner Central","accessLevel":"Read","resourceTypes":[{"name":"BenefitAllocation","required":true}]},"GetBenefitApplication":{"conditionKeys":["aws:ResourceTag/${TagKey}","partnercentral:Catalog","partnercentral:FulfillmentTypes","partnercentral:Programs"],"resources":[{"name":"BenefitApplication"}],"description":"Grants permission to retrieve benefit application details in AWS Partner Central","accessLevel":"Read","resourceTypes":[{"name":"BenefitApplication","required":true}]},"GetBusinessPlan":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve business plan details in AWS Partner Central","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetCollaborationChannel":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve collaboration channel details in AWS Partner Central","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetConnection":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"Connection"}],"description":"Grants permission to retrieve connection details in AWS Partner Central","accessLevel":"Read","resourceTypes":[{"name":"Connection","required":true}]},"GetConnectionInvitation":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"ConnectionInvitation"}],"description":"Grants permission to retrieve connection invitation details in AWS Partner Central","accessLevel":"Read","resourceTypes":[{"name":"ConnectionInvitation","required":true}]},"GetConnectionPreferences":{"conditionKeys":["partnercentral:Catalog"],"resources":[],"description":"Grants permission to retrieve connection preferences in AWS Partner Central","accessLevel":"Read","resourceTypes":[]},"GetEngagement":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"Engagement"}],"description":"Grants permission to retrieval of engagement details in AWS Partner Central","accessLevel":"Read","resourceTypes":[{"name":"Engagement","required":true}]},"GetEngagementInvitation":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"engagement-invitation"}],"description":"Grants permission to retrieve details of Engagement Invitations on AWS Partner Central","accessLevel":"Read","resourceTypes":[{"name":"engagement-invitation","required":true}]},"GetOpportunity":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"Opportunity"}],"description":"Grants permission to retrieve details of Opportunities on AWS Partner Central","accessLevel":"Read","resourceTypes":[{"name":"Opportunity","required":true}]},"GetPartner":{"conditionKeys":["aws:ResourceTag/${TagKey}","partnercentral:Catalog"],"resources":[{"name":"Partner"}],"description":"Grants permission to retrieve partner details in AWS Partner Central","accessLevel":"Read","resourceTypes":[{"name":"Partner","required":true}]},"GetPartnerDashboard":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"Dashboard"}],"description":"Grants permission to retrieve partner dashboard information in AWS Partner Central","accessLevel":"Read","resourceTypes":[{"name":"Dashboard","required":true}]},"GetPartnerProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve public partner profile details in AWS Partner Central","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetProfileUpdateTask":{"conditionKeys":["aws:ResourceTag/${TagKey}","partnercentral:Catalog"],"resources":[{"name":"Partner"}],"description":"Grants permission to retrieve profile update task details in AWS Partner Central","accessLevel":"Read","resourceTypes":[{"name":"Partner","required":true}]},"GetProfileVisibility":{"conditionKeys":["aws:ResourceTag/${TagKey}","partnercentral:Catalog"],"resources":[{"name":"Partner"}],"description":"Grants permission to retrieve profile visibility settings in AWS Partner Central","accessLevel":"Read","resourceTypes":[{"name":"Partner","required":true}]},"GetProgramManagementAccount":{"conditionKeys":["partnercentral:Catalog"],"resources":[],"description":"Grants permission to retrieve program management account details in AWS Partner Central","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetRelationship":{"conditionKeys":["aws:ResourceTag/${TagKey}","partnercentral:Catalog"],"resources":[{"name":"Relationship"}],"description":"Grants permission to retrieve relationship details in AWS Partner Central","accessLevel":"Read","resourceTypes":[{"name":"Relationship","required":true}]},"GetResourceSnapshot":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"ResourceSnapshot"}],"description":"Grants permission to retrieving resource snapshot details in AWS Partner Central","accessLevel":"Read","resourceTypes":[{"name":"ResourceSnapshot","required":true}]},"GetResourceSnapshotJob":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"resource-snapshot-job"}],"description":"Grants permission to retrieving resource snapshot job details in AWS Partner Central","accessLevel":"Read","resourceTypes":[{"name":"resource-snapshot-job","required":true}]},"GetSellingSystemSettings":{"conditionKeys":["partnercentral:Catalog"],"resources":[],"description":"Grants permission to retrieving selling system settings in AWS Partner Central","accessLevel":"Read","resourceTypes":[]},"GetVerification":{"conditionKeys":["partnercentral:Catalog","partnercentral:VerificationType"],"resources":[],"description":"Grants permission to retrieve verification details in AWS Partner Central","accessLevel":"Read","resourceTypes":[]},"ListBenefitAllocations":{"conditionKeys":["partnercentral:Catalog","partnercentral:FulfillmentTypes"],"resources":[{"name":"BenefitAllocation"}],"description":"Grants permission to list benefit allocations in AWS Partner Central","accessLevel":"List","resourceTypes":[{"name":"BenefitAllocation","required":true}]},"ListBenefitApplications":{"conditionKeys":["partnercentral:Catalog","partnercentral:FulfillmentTypes","partnercentral:Programs"],"resources":[{"name":"BenefitApplication"}],"description":"Grants permission to list benefit applications in AWS Partner Central","accessLevel":"List","resourceTypes":[{"name":"BenefitApplication","required":true}]},"ListBenefits":{"conditionKeys":["partnercentral:Catalog","partnercentral:FulfillmentTypes","partnercentral:Programs"],"resources":[{"name":"Benefit"}],"description":"Grants permission to list benefits in AWS Partner Central","accessLevel":"List","resourceTypes":[{"name":"Benefit","required":true}]},"ListBusinessPlans":{"conditionKeys":[],"resources":[],"description":"Grants permission to list business plans in AWS Partner Central","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListChannelHandshakes":{"conditionKeys":["partnercentral:Catalog","partnercentral:ChannelHandshakeType"],"resources":[{"name":"ChannelHandshake"}],"description":"Grants permission to list channel handshakes in AWS Partner Central","accessLevel":"List","resourceTypes":[{"name":"ChannelHandshake","required":true}]},"ListCollaborationChannels":{"conditionKeys":[],"resources":[],"description":"Grants permission to list collaboration channels in AWS Partner Central","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListConnectionInvitations":{"conditionKeys":["partnercentral:Catalog"],"resources":[],"description":"Grants permission to list connection invitations in AWS Partner Central","accessLevel":"List","resourceTypes":[]},"ListConnections":{"conditionKeys":["partnercentral:Catalog"],"resources":[],"description":"Grants permission to list connections in AWS Partner Central","accessLevel":"List","resourceTypes":[]},"ListEngagementByAcceptingInvitationTasks":{"conditionKeys":["partnercentral:Catalog"],"resources":[],"description":"Grants permission to listing engagements by accepting invitation tasks in AWS Partner\nCentral","accessLevel":"List","resourceTypes":[]},"ListEngagementFromOpportunityTasks":{"conditionKeys":["partnercentral:Catalog"],"resources":[],"description":"Grants permission to listing engagements from opportunity tasks in AWS Partner Central","accessLevel":"List","resourceTypes":[]},"ListEngagementInvitations":{"conditionKeys":["partnercentral:Catalog"],"resources":[],"description":"Grants permission to list Engagement Invitations on AWS Partner Central","accessLevel":"List","resourceTypes":[]},"ListEngagementMembers":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"Engagement"}],"description":"Grants permission to listing engagement members in AWS Partner Central","accessLevel":"Read","resourceTypes":[{"name":"Engagement","required":true}]},"ListEngagementResourceAssociations":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"ResourceSnapshot"}],"description":"Grants permission to listing engagement resource associations in AWS Partner Central","accessLevel":"Read","resourceTypes":[{"name":"ResourceSnapshot","required":true}]},"ListEngagements":{"conditionKeys":["partnercentral:Catalog"],"resources":[],"description":"Grants permission to listing engagements in AWS Partner Central","accessLevel":"List","resourceTypes":[]},"ListOpportunities":{"conditionKeys":["partnercentral:Catalog"],"resources":[],"description":"Grants permission to list Opportunities on AWS Partner Central","accessLevel":"List","resourceTypes":[]},"ListOpportunityFromEngagementTasks":{"conditionKeys":["partnercentral:Catalog"],"resources":[],"description":"Grants permission to list opportunity from engagement tasks in AWS Partner Central","accessLevel":"List","resourceTypes":[]},"ListPartnerPaths":{"conditionKeys":[],"resources":[],"description":"Grants permission to list partner paths in AWS Partner Central","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListPartners":{"conditionKeys":["partnercentral:Catalog"],"resources":[],"description":"Grants permission to list partners in AWS Partner Central","accessLevel":"List","resourceTypes":[]},"ListProgramManagementAccounts":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"ProgramManagementAccount"}],"description":"Grants permission to list program management accounts in AWS Partner Central","accessLevel":"List","resourceTypes":[{"name":"ProgramManagementAccount","required":true}]},"ListRelationships":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"Relationship"}],"description":"Grants permission to list relationships in AWS Partner Central","accessLevel":"List","resourceTypes":[{"name":"Relationship","required":true}]},"ListResourceSnapshotJobs":{"conditionKeys":["partnercentral:Catalog"],"resources":[],"description":"Grants permission to listing resource snapshot jobs in AWS Partner Central","accessLevel":"List","resourceTypes":[]},"ListResourceSnapshots":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"ResourceSnapshot"}],"description":"Grants permission to listing resource snapshots in AWS Partner Central","accessLevel":"List","resourceTypes":[{"name":"ResourceSnapshot","required":true}]},"ListSolutions":{"conditionKeys":["partnercentral:Catalog"],"resources":[],"description":"Grants permission to list Solutions on AWS Partner Central","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys","partnercentral:Catalog","partnercentral:FulfillmentTypes","partnercentral:Programs"],"resources":[],"description":"Grants permission to add lists tags to a resource. Supported resource: ResourceSnapshotJob","accessLevel":"Read","resourceTypes":[]},"PutAllianceLeadContact":{"conditionKeys":["aws:ResourceTag/${TagKey}","partnercentral:Catalog"],"resources":[{"name":"Partner"}],"description":"Grants permission to set alliance lead contact information in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"Partner","required":true}]},"PutBusinessPlan":{"conditionKeys":[],"resources":[],"description":"Grants permission to update business plans in AWS Partner Central","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"PutProfileVisibility":{"conditionKeys":["aws:ResourceTag/${TagKey}","partnercentral:Catalog"],"resources":[{"name":"Partner"}],"description":"Grants permission to set profile visibility in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"Partner","required":true}]},"PutSellingSystemSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to put selling system settings in AWS Partner Central","accessLevel":"Write","resourceTypes":[]},"RecallBenefitApplication":{"conditionKeys":["aws:ResourceTag/${TagKey}","partnercentral:Catalog","partnercentral:FulfillmentTypes","partnercentral:Programs"],"resources":[{"name":"BenefitApplication"}],"description":"Grants permission to recall benefit applications in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"BenefitApplication","required":true}]},"RejectChannelHandshake":{"conditionKeys":["partnercentral:Catalog","partnercentral:ChannelHandshakeType"],"resources":[{"name":"ChannelHandshake"}],"description":"Grants permission to reject channel handshakes in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"ChannelHandshake","required":true}]},"RejectConnectionInvitation":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"ConnectionInvitation"}],"description":"Grants permission to reject connection invitations in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"ConnectionInvitation","required":true}]},"RejectEngagementInvitation":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"engagement-invitation"}],"description":"Grants permission to reject Engagement Invitations on AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"engagement-invitation","required":true}]},"SearchPartnerProfiles":{"conditionKeys":[],"resources":[],"description":"Grants permission to search public partner profiles in AWS Partner Central","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"SendEmailVerificationCode":{"conditionKeys":["partnercentral:Catalog"],"resources":[],"description":"Grants permission to send email verification codes in AWS Partner Central","accessLevel":"Write","resourceTypes":[]},"StartEngagementByAcceptingInvitationTask":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","partnercentral:Catalog"],"resources":[{"name":"engagement-by-accepting-invitation-task"}],"description":"Grants permission to initiate tasks that start Engagements on AWS Partner Central by accepting an Engagement Invitation","accessLevel":"Write","resourceTypes":[{"name":"engagement-by-accepting-invitation-task","required":true}],"dependentActions":["partnercentral:AcceptEngagementInvitation","partnercentral:CreateOpportunity","partnercentral:CreateResourceSnapshotJob","partnercentral:GetEngagementInvitation","partnercentral:StartResourceSnapshotJob","partnercentral:SubmitOpportunity"]},"StartEngagementFromOpportunityTask":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","partnercentral:Catalog"],"resources":[{"name":"engagement-from-opportunity-task"}],"description":"Grants permission to initiate tasks that start Engagements from Opportunities on AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"engagement-from-opportunity-task","required":true}],"dependentActions":["partnercentral:CreateEngagement","partnercentral:CreateEngagementInvitation","partnercentral:CreateResourceSnapshotJob","partnercentral:GetOpportunity","partnercentral:StartResourceSnapshotJob","partnercentral:SubmitOpportunity"]},"StartOpportunityFromEngagementTask":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","partnercentral:Catalog"],"resources":[{"name":"OpportunityFromEngagementTask"}],"description":"Grants permission to initiate tasks that start Opportunities from Engagements on AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"OpportunityFromEngagementTask","required":true}],"dependentActions":["partnercentral:CreateEngagementContext","partnercentral:CreateOpportunity","partnercentral:CreateResourceSnapshot","partnercentral:CreateResourceSnapshotJob","partnercentral:GetEngagement","partnercentral:StartResourceSnapshotJob"]},"StartProfileUpdateTask":{"conditionKeys":["aws:ResourceTag/${TagKey}","partnercentral:Catalog"],"resources":[{"name":"Partner"}],"description":"Grants permission to start profile update tasks in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"Partner","required":true}]},"StartResourceSnapshotJob":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"resource-snapshot-job"}],"description":"Grants permission to starting resource snapshot jobs in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"resource-snapshot-job","required":true}]},"StartVerification":{"conditionKeys":["partnercentral:Catalog","partnercentral:VerificationType"],"resources":[],"description":"Grants permission to start verification processes in AWS Partner Central","accessLevel":"Write","resourceTypes":[]},"StopResourceSnapshotJob":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"resource-snapshot-job"}],"description":"Grants permission to stopping resource snapshot jobs in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"resource-snapshot-job","required":true}]},"SubmitBenefitApplication":{"conditionKeys":["aws:ResourceTag/${TagKey}","partnercentral:Catalog","partnercentral:FulfillmentTypes","partnercentral:Programs"],"resources":[{"name":"BenefitApplication"}],"description":"Grants permission to submit benefit applications in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"BenefitApplication","required":true}]},"SubmitOpportunity":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"Opportunity"}],"description":"Grants permission to submit Opportunities on AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"Opportunity","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","partnercentral:Catalog","partnercentral:FulfillmentTypes","partnercentral:Programs"],"resources":[{"name":"BenefitApplication"},{"name":"ChannelHandshake"},{"name":"Opportunity"},{"name":"Partner"},{"name":"ProgramManagementAccount"},{"name":"Relationship"},{"name":"resource-snapshot-job"}],"description":"Grants permission to add new tags to a resource. Supported resource: ResourceSnapshotJob","accessLevel":"Tagging","resourceTypes":[{"name":"BenefitApplication","required":false},{"name":"ChannelHandshake","required":false},{"name":"Opportunity","required":false},{"name":"Partner","required":false},{"name":"ProgramManagementAccount","required":false},{"name":"Relationship","required":false},{"name":"resource-snapshot-job","required":false}]},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys","partnercentral:Catalog","partnercentral:FulfillmentTypes","partnercentral:Programs"],"resources":[{"name":"BenefitApplication"},{"name":"ChannelHandshake"},{"name":"Opportunity"},{"name":"Partner"},{"name":"ProgramManagementAccount"},{"name":"Relationship"},{"name":"resource-snapshot-job"}],"description":"Grants permission to remove tags from a resource. Supported resource: ResourceSnapshotJob","accessLevel":"Tagging","resourceTypes":[{"name":"BenefitApplication","required":false},{"name":"ChannelHandshake","required":false},{"name":"Opportunity","required":false},{"name":"Partner","required":false},{"name":"ProgramManagementAccount","required":false},{"name":"Relationship","required":false},{"name":"resource-snapshot-job","required":false}]},"UpdateBenefitApplication":{"conditionKeys":["aws:ResourceTag/${TagKey}","partnercentral:Catalog","partnercentral:FulfillmentTypes","partnercentral:Programs"],"resources":[{"name":"BenefitApplication"}],"description":"Grants permission to update benefit applications in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"BenefitApplication","required":true}]},"UpdateConnectionPreferences":{"conditionKeys":["partnercentral:Catalog"],"resources":[],"description":"Grants permission to update connection preferences in AWS Partner Central","accessLevel":"Write","resourceTypes":[]},"UpdateEngagementContext":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"Engagement"}],"description":"Grants permission to update engagement contexts in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"Engagement","required":true}]},"UpdateOpportunity":{"conditionKeys":["partnercentral:Catalog"],"resources":[{"name":"Opportunity"}],"description":"Grants permission to update Opportunities on AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"Opportunity","required":true}]},"UpdateProgramManagementAccount":{"conditionKeys":["aws:ResourceTag/${TagKey}","partnercentral:Catalog"],"resources":[{"name":"ProgramManagementAccount"}],"description":"Grants permission to update program management accounts in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"ProgramManagementAccount","required":true}]},"UpdateRelationship":{"conditionKeys":["aws:ResourceTag/${TagKey}","partnercentral:Catalog"],"resources":[{"name":"Relationship"}],"description":"Grants permission to update relationships in AWS Partner Central","accessLevel":"Write","resourceTypes":[{"name":"Relationship","required":true}]},"UseSession":{"conditionKeys":["partnercentral:Catalog"],"resources":[],"description":"Grants permission to use Partner Central Agents sessions in AWS Partner Central","accessLevel":"Write","resourceTypes":[],"permissionOnly":true}},"resources":[{"name":"Benefit","arnFormats":["arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/benefit/${Identifier}"],"conditionKeys":[]},{"name":"BenefitAllocation","arnFormats":["arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/benefit-allocation/${Identifier}"],"conditionKeys":[]},{"name":"BenefitApplication","arnFormats":["arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/benefit-application/${Identifier}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"ChannelHandshake","arnFormats":["arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/channel-handshake/${Identifier}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Connection","arnFormats":["arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/connection/${Identifier}"],"conditionKeys":[]},{"name":"ConnectionInvitation","arnFormats":["arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/connection-invitation/${Identifier}"],"conditionKeys":[]},{"name":"ConnectionPreferences","arnFormats":["arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/connection-preferences"],"conditionKeys":[]},{"name":"Dashboard","arnFormats":["arn:${Partition}:partnercentral::${Account}:catalog/${Catalog}/ReportingData/${TableId}/Dashboard/${DashboardId}"],"conditionKeys":[]},{"name":"Engagement","arnFormats":["arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/engagement/${Identifier}"],"conditionKeys":[]},{"name":"Opportunity","arnFormats":["arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/opportunity/${Identifier}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"OpportunityFromEngagementTask","arnFormats":["arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/opportunity-from-engagement-task/${TaskId}"],"conditionKeys":[]},{"name":"Partner","arnFormats":["arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/partner/${Identifier}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"ProgramManagementAccount","arnFormats":["arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/program-management-account/${Identifier}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Relationship","arnFormats":["arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/program-management-account/${ProgramManagementAccountId}/relationship/${RelationshipId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"ResourceSnapshot","arnFormats":["arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/engagement/${EngagementIdentifier}/resource/${ResourceType}/${ResourceIdentifier}/template/${TemplateIdentifier}/resource-snapshot/${SnapshotRevision}"],"conditionKeys":[]},{"name":"Solution","arnFormats":["arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/solution/${Identifier}"],"conditionKeys":[]},{"name":"engagement-by-accepting-invitation-task","arnFormats":["arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/engagement-by-accepting-invitation-task/${TaskId}"],"conditionKeys":[]},{"name":"engagement-from-opportunity-task","arnFormats":["arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/engagement-from-opportunity-task/${TaskId}"],"conditionKeys":[]},{"name":"engagement-invitation","arnFormats":["arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/engagement-invitation/${Identifier}"],"conditionKeys":[]},{"name":"resource-snapshot-job","arnFormats":["arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/resource-snapshot-job/${Identifier}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"partnercentral:Catalog":{"types":["String"],"description":"Filters access by a specific Catalog"},"partnercentral:ChannelHandshakeType":{"types":["String"],"description":"Filters access by channel handshake types"},"partnercentral:FulfillmentTypes":{"types":["ArrayOfString"],"description":"Filters access by benefit fulfillment types"},"partnercentral:Programs":{"types":["ArrayOfString"],"description":"Filters access by program"},"partnercentral:RelatedEntityType":{"types":["String"],"description":"Filters access by entity types for Opportunity association"},"partnercentral:VerificationType":{"types":["String"],"description":"Filters access by the type of verification being performed"}}}
@@ -0,0 +1 @@
1
+ {"name":"payment-cryptography","actions":{"AddKeyReplicationRegions":{"conditionKeys":["payment-cryptography:RequestAlias"],"resources":[{"name":"alias"},{"name":"key"}],"description":"Grants permission to add replication regions to an existing AWS Payment Cryptography key","accessLevel":"Write","resourceTypes":[{"name":"alias","required":true},{"name":"key","required":true}]},"CreateAlias":{"conditionKeys":[],"resources":[{"name":"alias"},{"name":"key"}],"description":"Grants permission to create a user-friendly name for a Key","accessLevel":"Write","resourceTypes":[{"name":"alias","required":true},{"name":"key","required":true}]},"CreateKey":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","payment-cryptography:KeyAlgorithm","payment-cryptography:KeyClass","payment-cryptography:KeyUsage"],"resources":[],"description":"Grants permission to create a unique customer managed key in the caller's AWS account and region","accessLevel":"Write","resourceTypes":[],"dependentActions":["payment-cryptography:TagResource"]},"DecryptData":{"conditionKeys":["payment-cryptography:RequestAlias"],"resources":[{"name":"alias"},{"name":"key"}],"description":"Grants permission to decrypt ciphertext data to plaintext using symmetric, asymmetric or DUKPT data encryption key","accessLevel":"Write","resourceTypes":[{"name":"alias","required":true},{"name":"key","required":true}]},"DeleteAlias":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"alias"}],"description":"Grants permission to delete the specified alias","accessLevel":"Write","resourceTypes":[{"name":"alias","required":true}]},"DeleteKey":{"conditionKeys":["payment-cryptography:RequestAlias"],"resources":[{"name":"key"}],"description":"Grants permission to schedule the deletion of a Key","accessLevel":"Write","resourceTypes":[{"name":"key","required":true}]},"DisableDefaultKeyReplicationRegions":{"conditionKeys":[],"resources":[],"description":"Grants permission to disable default key replication regions for account-level replication","accessLevel":"Write","resourceTypes":[]},"EnableDefaultKeyReplicationRegions":{"conditionKeys":[],"resources":[],"description":"Grants permission to enable default key replication regions for account-level replication","accessLevel":"Write","resourceTypes":[]},"EncryptData":{"conditionKeys":["payment-cryptography:RequestAlias"],"resources":[{"name":"alias"},{"name":"key"}],"description":"Grants permission to encrypt plaintext data to ciphertext using symmetric, asymmetric or DUKPT data encryption key","accessLevel":"Write","resourceTypes":[{"name":"alias","required":true},{"name":"key","required":true}]},"ExportKey":{"conditionKeys":["payment-cryptography:CertificateAuthorityPublicKeyIdentifier","payment-cryptography:RequestAlias","payment-cryptography:WrappingKeyIdentifier"],"resources":[{"name":"key"}],"description":"Grants permission to export a key from the service","accessLevel":"Write","resourceTypes":[{"name":"key","required":true}]},"GenerateAs2805KekValidation":{"conditionKeys":["payment-cryptography:RequestAlias"],"resources":[{"name":"alias"},{"name":"key"}],"description":"Grants permission to generate a KekValidationRequest or a KekValidationResponse for node-to-node initialization between payment processing nodes using Australian Standard 2805 (AS2805)","accessLevel":"Write","resourceTypes":[{"name":"alias","required":true},{"name":"key","required":true}]},"GenerateCardValidationData":{"conditionKeys":["payment-cryptography:RequestAlias"],"resources":[{"name":"alias"},{"name":"key"}],"description":"Grants permission to generate card-related data using algorithms such as Card Verification Values (CVV/CVV2), Dynamic Card Verification Values (dCVV/dCVV2) or Card Security Codes (CSC) that check the validity of a magnetic stripe card","accessLevel":"Write","resourceTypes":[{"name":"alias","required":true},{"name":"key","required":true}]},"GenerateMac":{"conditionKeys":["payment-cryptography:RequestAlias"],"resources":[{"name":"alias"},{"name":"key"}],"description":"Grants permission to generate a MAC (Message Authentication Code) cryptogram","accessLevel":"Write","resourceTypes":[{"name":"alias","required":true},{"name":"key","required":true}]},"GenerateMacEmvPinChange":{"conditionKeys":["payment-cryptography:RequestAlias"],"resources":[{"name":"alias"},{"name":"key"}],"description":"Grants permission to generate a MAC (Message Authentication Code) cryptogram","accessLevel":"Write","resourceTypes":[{"name":"alias","required":true},{"name":"key","required":true}]},"GeneratePinData":{"conditionKeys":["payment-cryptography:RequestAlias"],"resources":[{"name":"alias"},{"name":"key"}],"description":"Grants permission to generate pin-related data such as PIN, PIN Verification Value (PVV), PIN Block and PIN Offset during new card issuance or card re-issuance","accessLevel":"Write","resourceTypes":[{"name":"alias","required":true},{"name":"key","required":true}]},"GetAlias":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"alias"},{"name":"key"}],"description":"Grants permission to return the keyArn associated with an aliasName","accessLevel":"Read","resourceTypes":[{"name":"alias","required":true},{"name":"key","required":true}]},"GetCertificateSigningRequest":{"conditionKeys":["payment-cryptography:RequestAlias"],"resources":[{"name":"alias"},{"name":"key"}],"description":"Grants permission to return the Certificate Signing Request for a public key from a key of class PUBLIC_KEY","accessLevel":"Read","resourceTypes":[{"name":"alias","required":true},{"name":"key","required":true}]},"GetDefaultKeyReplicationRegions":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the default key replication regions configured at the account level","accessLevel":"Read","resourceTypes":[]},"GetKey":{"conditionKeys":["payment-cryptography:RequestAlias"],"resources":[{"name":"key"}],"description":"Grants permission to return the detailed information about the specified key","accessLevel":"Read","resourceTypes":[{"name":"key","required":true}]},"GetParametersForExport":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the export token and the signing key certificate to initiate a TR-34 key export","accessLevel":"Read","resourceTypes":[]},"GetParametersForImport":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the import token and the wrapping key certificate to initiate a TR-34 key import","accessLevel":"Read","resourceTypes":[]},"GetPublicKeyCertificate":{"conditionKeys":["payment-cryptography:RequestAlias"],"resources":[{"name":"key"}],"description":"Grants permission to return the public key from a key of class PUBLIC_KEY","accessLevel":"Read","resourceTypes":[{"name":"key","required":true}]},"ImportKey":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","payment-cryptography:CertificateAuthorityPublicKeyIdentifier","payment-cryptography:ImportKeyMaterial","payment-cryptography:WrappingKeyIdentifier"],"resources":[],"description":"Grants permission to imports keys and public key certificates","accessLevel":"Write","resourceTypes":[],"dependentActions":["payment-cryptography:TagResource"]},"ListAliases":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of aliases created for all keys in the caller's AWS account and Region","accessLevel":"List","resourceTypes":[]},"ListKeys":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of keys created in the caller's AWS account and Region","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"key"}],"description":"Grants permission to return a list of tags created in the caller's AWS account and Region","accessLevel":"Read","resourceTypes":[{"name":"key","required":false}]},"ReEncryptData":{"conditionKeys":["payment-cryptography:RequestAlias"],"resources":[{"name":"alias"},{"name":"key"}],"description":"Grants permission to re-encrypt ciphertext using DUKPT, Symmetric and Asymmetric Data Encryption Keys","accessLevel":"Write","resourceTypes":[{"name":"alias","required":true},{"name":"key","required":true}]},"RemoveKeyReplicationRegions":{"conditionKeys":["payment-cryptography:RequestAlias"],"resources":[{"name":"alias"},{"name":"key"}],"description":"Grants permission to remove replication regions from an existing AWS Payment Cryptography key","accessLevel":"Write","resourceTypes":[{"name":"alias","required":true},{"name":"key","required":true}]},"RestoreKey":{"conditionKeys":["payment-cryptography:RequestAlias"],"resources":[{"name":"key"}],"description":"Grants permission to cancel a scheduled key deletion if at any point during the waiting period a Key needs to be revived","accessLevel":"Write","resourceTypes":[{"name":"key","required":true}]},"StartKeyUsage":{"conditionKeys":["payment-cryptography:RequestAlias"],"resources":[{"name":"key"}],"description":"Grants permission to enable a disabled Key","accessLevel":"Write","resourceTypes":[{"name":"key","required":true}]},"StopKeyUsage":{"conditionKeys":["payment-cryptography:RequestAlias"],"resources":[{"name":"key"}],"description":"Grants permission to disable an enabled Key","accessLevel":"Write","resourceTypes":[{"name":"key","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"key"}],"description":"Grants permission to add or overwrites one or more tags for the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"key","required":true}]},"TranslateKeyMaterial":{"conditionKeys":["payment-cryptography:RequestAlias"],"resources":[{"name":"alias"},{"name":"key"}],"description":"Grants permission to translate wrapping key type for a wrapped key","accessLevel":"Write","resourceTypes":[{"name":"alias","required":true},{"name":"key","required":true}]},"TranslatePinData":{"conditionKeys":["payment-cryptography:RequestAlias"],"resources":[{"name":"alias"},{"name":"key"}],"description":"Grants permission to translate encrypted PIN block from and to ISO 9564 formats 0,1,3,4","accessLevel":"Write","resourceTypes":[{"name":"alias","required":true},{"name":"key","required":true}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"key"}],"description":"Grants permission to remove the specified tag or tags from the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"key","required":true}]},"UpdateAlias":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"alias"},{"name":"key"}],"description":"Grants permission to change the key to which an alias is assigned, or unassign it from its current key","accessLevel":"Write","resourceTypes":[{"name":"alias","required":true},{"name":"key","required":true}]},"VerifyAuthRequestCryptogram":{"conditionKeys":["payment-cryptography:RequestAlias"],"resources":[{"name":"alias"},{"name":"key"}],"description":"Grants permission to verify Authorization Request Cryptogram (ARQC) for a EMV chip payment card authorization","accessLevel":"Write","resourceTypes":[{"name":"alias","required":true},{"name":"key","required":true}]},"VerifyCardValidationData":{"conditionKeys":["payment-cryptography:RequestAlias"],"resources":[{"name":"alias"},{"name":"key"}],"description":"Grants permission to verify card-related validation data using algorithms such as Card Verification Values (CVV/CVV2), Dynamic Card Verification Values (dCVV/dCVV2) and Card Security Codes (CSC)","accessLevel":"Write","resourceTypes":[{"name":"alias","required":true},{"name":"key","required":true}]},"VerifyMac":{"conditionKeys":["payment-cryptography:RequestAlias"],"resources":[{"name":"alias"},{"name":"key"}],"description":"Grants permission to verify MAC (Message Authentication Code) of input data against a provided MAC","accessLevel":"Write","resourceTypes":[{"name":"alias","required":true},{"name":"key","required":true}]},"VerifyPinData":{"conditionKeys":["payment-cryptography:RequestAlias"],"resources":[{"name":"alias"},{"name":"key"}],"description":"Grants permission to verify pin-related data such as PIN and PIN Offset using algorithms including VISA PVV and IBM3624","accessLevel":"Write","resourceTypes":[{"name":"alias","required":true},{"name":"key","required":true}]}},"resources":[{"name":"alias","arnFormats":["arn:${Partition}:payment-cryptography:${Region}:${Account}:alias/${Alias}"],"conditionKeys":["payment-cryptography:ResourceAliases"]},{"name":"key","arnFormats":["arn:${Partition}:payment-cryptography:${Region}:${Account}:key/${KeyId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","payment-cryptography:ResourceAliases"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by both the key and value of the tag in the request for the specified operation"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tags assigned to a key for the specified operation"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys in the request for the specified operation"},"payment-cryptography:CertificateAuthorityPublicKeyIdentifier":{"types":["String"],"description":"Filters access by the CertificateAuthorityPublicKeyIdentifier specified in the request or the ImportKey, and ExportKey operations"},"payment-cryptography:ImportKeyMaterial":{"types":["String"],"description":"Filters access by the type of key material being imported [RootCertificatePublicKey, TrustedCertificatePublicKey, Tr34KeyBlock, Tr31KeyBlock, DiffieHellmanTr31KeyBlock, As2805KeyCryptogram] for the ImportKey operation"},"payment-cryptography:KeyAlgorithm":{"types":["String"],"description":"Filters access by KeyAlgorithm specified in the request for the CreateKey operation"},"payment-cryptography:KeyClass":{"types":["String"],"description":"Filters access by KeyClass specified in the request for the CreateKey operation"},"payment-cryptography:KeyUsage":{"types":["String"],"description":"Filters access by KeyClass specified in the request or associated with a key for the CreateKey operation"},"payment-cryptography:RequestAlias":{"types":["String"],"description":"Filters access by aliases in the request for the specified operation"},"payment-cryptography:ResourceAliases":{"types":["ArrayOfString"],"description":"Filters access by aliases associated with a key for the specified operation"},"payment-cryptography:WrappingKeyIdentifier":{"types":["String"],"description":"Filters access by the WrappingKeyIdentifier specified in the request for the ImportKey, and ExportKey operations"}}}