aws-iam-ls 0.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (522) hide show
  1. package/.direnv/bin/nix-direnv-reload +19 -0
  2. package/.direnv/flake-profile-a5d5b61aa8a61b7d9d765e1daf971a9a578f1cfa.rc +2156 -0
  3. package/.github/workflows/publish.yml +37 -0
  4. package/.github/workflows/test.yml +16 -0
  5. package/.vscodeignore +17 -0
  6. package/LICENSE +21 -0
  7. package/package.json +53 -0
  8. package/readme.md +25 -0
  9. package/src/data/condition-keys/global.json +362 -0
  10. package/src/data/servicereference/actions.json +1 -0
  11. package/src/data/servicereference/service-principals.json +1 -0
  12. package/src/data/servicereference/services/a2c.json +1 -0
  13. package/src/data/servicereference/services/a4b.json +1 -0
  14. package/src/data/servicereference/services/access-analyzer.json +1 -0
  15. package/src/data/servicereference/services/account.json +1 -0
  16. package/src/data/servicereference/services/acm-pca.json +1 -0
  17. package/src/data/servicereference/services/acm.json +1 -0
  18. package/src/data/servicereference/services/aco-automation.json +1 -0
  19. package/src/data/servicereference/services/action-recommendations.json +1 -0
  20. package/src/data/servicereference/services/activate.json +1 -0
  21. package/src/data/servicereference/services/aidevops.json +1 -0
  22. package/src/data/servicereference/services/aiops.json +1 -0
  23. package/src/data/servicereference/services/airflow-serverless.json +1 -0
  24. package/src/data/servicereference/services/airflow.json +1 -0
  25. package/src/data/servicereference/services/amplify.json +1 -0
  26. package/src/data/servicereference/services/amplifybackend.json +1 -0
  27. package/src/data/servicereference/services/amplifyuibuilder.json +1 -0
  28. package/src/data/servicereference/services/aoss.json +1 -0
  29. package/src/data/servicereference/services/apigateway.json +1 -0
  30. package/src/data/servicereference/services/app-integrations.json +1 -0
  31. package/src/data/servicereference/services/appconfig.json +1 -0
  32. package/src/data/servicereference/services/appfabric.json +1 -0
  33. package/src/data/servicereference/services/appflow.json +1 -0
  34. package/src/data/servicereference/services/application-autoscaling.json +1 -0
  35. package/src/data/servicereference/services/application-signals.json +1 -0
  36. package/src/data/servicereference/services/application-transformation.json +1 -0
  37. package/src/data/servicereference/services/applicationinsights.json +1 -0
  38. package/src/data/servicereference/services/appmesh-preview.json +1 -0
  39. package/src/data/servicereference/services/appmesh.json +1 -0
  40. package/src/data/servicereference/services/apprunner.json +1 -0
  41. package/src/data/servicereference/services/appstream.json +1 -0
  42. package/src/data/servicereference/services/appstudio.json +1 -0
  43. package/src/data/servicereference/services/appsync.json +1 -0
  44. package/src/data/servicereference/services/apptest.json +1 -0
  45. package/src/data/servicereference/services/aps.json +1 -0
  46. package/src/data/servicereference/services/arc-region-switch.json +1 -0
  47. package/src/data/servicereference/services/arc-zonal-shift.json +1 -0
  48. package/src/data/servicereference/services/arsenal.json +1 -0
  49. package/src/data/servicereference/services/artifact.json +1 -0
  50. package/src/data/servicereference/services/athena.json +1 -0
  51. package/src/data/servicereference/services/auditmanager.json +1 -0
  52. package/src/data/servicereference/services/autoscaling-plans.json +1 -0
  53. package/src/data/servicereference/services/autoscaling.json +1 -0
  54. package/src/data/servicereference/services/aws-marketplace-management.json +1 -0
  55. package/src/data/servicereference/services/aws-marketplace.json +1 -0
  56. package/src/data/servicereference/services/aws-mcp.json +1 -0
  57. package/src/data/servicereference/services/aws-portal.json +1 -0
  58. package/src/data/servicereference/services/awsconnector.json +1 -0
  59. package/src/data/servicereference/services/b2bi.json +1 -0
  60. package/src/data/servicereference/services/backup-gateway.json +1 -0
  61. package/src/data/servicereference/services/backup-search.json +1 -0
  62. package/src/data/servicereference/services/backup-storage.json +1 -0
  63. package/src/data/servicereference/services/backup.json +1 -0
  64. package/src/data/servicereference/services/batch.json +1 -0
  65. package/src/data/servicereference/services/bcm-dashboards.json +1 -0
  66. package/src/data/servicereference/services/bcm-data-exports.json +1 -0
  67. package/src/data/servicereference/services/bcm-pricing-calculator.json +1 -0
  68. package/src/data/servicereference/services/bcm-recommended-actions.json +1 -0
  69. package/src/data/servicereference/services/bedrock-agentcore.json +1 -0
  70. package/src/data/servicereference/services/bedrock-mantle.json +1 -0
  71. package/src/data/servicereference/services/bedrock.json +1 -0
  72. package/src/data/servicereference/services/billing.json +1 -0
  73. package/src/data/servicereference/services/billingconductor.json +1 -0
  74. package/src/data/servicereference/services/braket.json +1 -0
  75. package/src/data/servicereference/services/budgets.json +1 -0
  76. package/src/data/servicereference/services/bugbust.json +1 -0
  77. package/src/data/servicereference/services/cases.json +1 -0
  78. package/src/data/servicereference/services/cassandra.json +1 -0
  79. package/src/data/servicereference/services/ce.json +1 -0
  80. package/src/data/servicereference/services/chatbot.json +1 -0
  81. package/src/data/servicereference/services/chime.json +1 -0
  82. package/src/data/servicereference/services/cleanrooms-ml.json +1 -0
  83. package/src/data/servicereference/services/cleanrooms.json +1 -0
  84. package/src/data/servicereference/services/cloud9.json +1 -0
  85. package/src/data/servicereference/services/clouddirectory.json +1 -0
  86. package/src/data/servicereference/services/cloudformation.json +1 -0
  87. package/src/data/servicereference/services/cloudfront-keyvaluestore.json +1 -0
  88. package/src/data/servicereference/services/cloudfront.json +1 -0
  89. package/src/data/servicereference/services/cloudhsm.json +1 -0
  90. package/src/data/servicereference/services/cloudsearch.json +1 -0
  91. package/src/data/servicereference/services/cloudshell.json +1 -0
  92. package/src/data/servicereference/services/cloudtrail-data.json +1 -0
  93. package/src/data/servicereference/services/cloudtrail.json +1 -0
  94. package/src/data/servicereference/services/cloudwatch.json +1 -0
  95. package/src/data/servicereference/services/codeartifact.json +1 -0
  96. package/src/data/servicereference/services/codebuild.json +1 -0
  97. package/src/data/servicereference/services/codecatalyst.json +1 -0
  98. package/src/data/servicereference/services/codecommit.json +1 -0
  99. package/src/data/servicereference/services/codeconnections.json +1 -0
  100. package/src/data/servicereference/services/codedeploy-commands-secure.json +1 -0
  101. package/src/data/servicereference/services/codedeploy.json +1 -0
  102. package/src/data/servicereference/services/codeguru-profiler.json +1 -0
  103. package/src/data/servicereference/services/codeguru-reviewer.json +1 -0
  104. package/src/data/servicereference/services/codeguru-security.json +1 -0
  105. package/src/data/servicereference/services/codeguru.json +1 -0
  106. package/src/data/servicereference/services/codepipeline.json +1 -0
  107. package/src/data/servicereference/services/codestar-connections.json +1 -0
  108. package/src/data/servicereference/services/codestar-notifications.json +1 -0
  109. package/src/data/servicereference/services/codestar.json +1 -0
  110. package/src/data/servicereference/services/codewhisperer.json +1 -0
  111. package/src/data/servicereference/services/cognito-identity.json +1 -0
  112. package/src/data/servicereference/services/cognito-idp.json +1 -0
  113. package/src/data/servicereference/services/cognito-sync.json +1 -0
  114. package/src/data/servicereference/services/comprehend.json +1 -0
  115. package/src/data/servicereference/services/comprehendmedical.json +1 -0
  116. package/src/data/servicereference/services/compute-optimizer.json +1 -0
  117. package/src/data/servicereference/services/config.json +1 -0
  118. package/src/data/servicereference/services/connect-campaigns.json +1 -0
  119. package/src/data/servicereference/services/connect.json +1 -0
  120. package/src/data/servicereference/services/consoleapp.json +1 -0
  121. package/src/data/servicereference/services/consolidatedbilling.json +1 -0
  122. package/src/data/servicereference/services/controlcatalog.json +1 -0
  123. package/src/data/servicereference/services/controltower.json +1 -0
  124. package/src/data/servicereference/services/cost-optimization-hub.json +1 -0
  125. package/src/data/servicereference/services/cur.json +1 -0
  126. package/src/data/servicereference/services/customer-verification.json +1 -0
  127. package/src/data/servicereference/services/databrew.json +1 -0
  128. package/src/data/servicereference/services/dataexchange.json +1 -0
  129. package/src/data/servicereference/services/datapipeline.json +1 -0
  130. package/src/data/servicereference/services/datasync.json +1 -0
  131. package/src/data/servicereference/services/datazone.json +1 -0
  132. package/src/data/servicereference/services/dax.json +1 -0
  133. package/src/data/servicereference/services/dbqms.json +1 -0
  134. package/src/data/servicereference/services/deadline.json +1 -0
  135. package/src/data/servicereference/services/detective.json +1 -0
  136. package/src/data/servicereference/services/devicefarm.json +1 -0
  137. package/src/data/servicereference/services/devops-guru.json +1 -0
  138. package/src/data/servicereference/services/directconnect.json +1 -0
  139. package/src/data/servicereference/services/discovery.json +1 -0
  140. package/src/data/servicereference/services/dlm.json +1 -0
  141. package/src/data/servicereference/services/dms.json +1 -0
  142. package/src/data/servicereference/services/docdb-elastic.json +1 -0
  143. package/src/data/servicereference/services/drs.json +1 -0
  144. package/src/data/servicereference/services/ds-data.json +1 -0
  145. package/src/data/servicereference/services/ds.json +1 -0
  146. package/src/data/servicereference/services/dsql.json +1 -0
  147. package/src/data/servicereference/services/dynamodb.json +1 -0
  148. package/src/data/servicereference/services/ebs.json +1 -0
  149. package/src/data/servicereference/services/ec2-instance-connect.json +1 -0
  150. package/src/data/servicereference/services/ec2.json +1 -0
  151. package/src/data/servicereference/services/ec2messages.json +1 -0
  152. package/src/data/servicereference/services/ecr-public.json +1 -0
  153. package/src/data/servicereference/services/ecr.json +1 -0
  154. package/src/data/servicereference/services/ecs-mcp.json +1 -0
  155. package/src/data/servicereference/services/ecs.json +1 -0
  156. package/src/data/servicereference/services/eks-auth.json +1 -0
  157. package/src/data/servicereference/services/eks-mcp.json +1 -0
  158. package/src/data/servicereference/services/eks.json +1 -0
  159. package/src/data/servicereference/services/elasticache.json +1 -0
  160. package/src/data/servicereference/services/elasticbeanstalk.json +1 -0
  161. package/src/data/servicereference/services/elasticfilesystem.json +1 -0
  162. package/src/data/servicereference/services/elasticloadbalancing.json +1 -0
  163. package/src/data/servicereference/services/elasticmapreduce.json +1 -0
  164. package/src/data/servicereference/services/elastictranscoder.json +1 -0
  165. package/src/data/servicereference/services/elemental-activations.json +1 -0
  166. package/src/data/servicereference/services/elemental-appliances-software.json +1 -0
  167. package/src/data/servicereference/services/elemental-inference.json +1 -0
  168. package/src/data/servicereference/services/elemental-support-cases.json +1 -0
  169. package/src/data/servicereference/services/elemental-support-content.json +1 -0
  170. package/src/data/servicereference/services/emr-containers.json +1 -0
  171. package/src/data/servicereference/services/emr-serverless.json +1 -0
  172. package/src/data/servicereference/services/entityresolution.json +1 -0
  173. package/src/data/servicereference/services/es.json +1 -0
  174. package/src/data/servicereference/services/events.json +1 -0
  175. package/src/data/servicereference/services/evidently.json +1 -0
  176. package/src/data/servicereference/services/evs.json +1 -0
  177. package/src/data/servicereference/services/execute-api.json +1 -0
  178. package/src/data/servicereference/services/finspace-api.json +1 -0
  179. package/src/data/servicereference/services/finspace.json +1 -0
  180. package/src/data/servicereference/services/firehose.json +1 -0
  181. package/src/data/servicereference/services/fis.json +1 -0
  182. package/src/data/servicereference/services/fms.json +1 -0
  183. package/src/data/servicereference/services/forecast.json +1 -0
  184. package/src/data/servicereference/services/frauddetector.json +1 -0
  185. package/src/data/servicereference/services/freertos.json +1 -0
  186. package/src/data/servicereference/services/freetier.json +1 -0
  187. package/src/data/servicereference/services/fsx.json +1 -0
  188. package/src/data/servicereference/services/gamelift.json +1 -0
  189. package/src/data/servicereference/services/gameliftstreams.json +1 -0
  190. package/src/data/servicereference/services/geo-maps.json +1 -0
  191. package/src/data/servicereference/services/geo-places.json +1 -0
  192. package/src/data/servicereference/services/geo-routes.json +1 -0
  193. package/src/data/servicereference/services/geo.json +1 -0
  194. package/src/data/servicereference/services/glacier.json +1 -0
  195. package/src/data/servicereference/services/globalaccelerator.json +1 -0
  196. package/src/data/servicereference/services/glue.json +1 -0
  197. package/src/data/servicereference/services/grafana.json +1 -0
  198. package/src/data/servicereference/services/greengrass.json +1 -0
  199. package/src/data/servicereference/services/groundstation.json +1 -0
  200. package/src/data/servicereference/services/groundtruthlabeling.json +1 -0
  201. package/src/data/servicereference/services/guardduty.json +1 -0
  202. package/src/data/servicereference/services/health-agent.json +1 -0
  203. package/src/data/servicereference/services/health.json +1 -0
  204. package/src/data/servicereference/services/healthlake.json +1 -0
  205. package/src/data/servicereference/services/honeycode.json +1 -0
  206. package/src/data/servicereference/services/iam.json +1 -0
  207. package/src/data/servicereference/services/identity-sync.json +1 -0
  208. package/src/data/servicereference/services/identitystore-auth.json +1 -0
  209. package/src/data/servicereference/services/identitystore.json +1 -0
  210. package/src/data/servicereference/services/imagebuilder.json +1 -0
  211. package/src/data/servicereference/services/importexport.json +1 -0
  212. package/src/data/servicereference/services/inspector-scan.json +1 -0
  213. package/src/data/servicereference/services/inspector.json +1 -0
  214. package/src/data/servicereference/services/inspector2-telemetry.json +1 -0
  215. package/src/data/servicereference/services/inspector2.json +1 -0
  216. package/src/data/servicereference/services/interconnect.json +1 -0
  217. package/src/data/servicereference/services/internetmonitor.json +1 -0
  218. package/src/data/servicereference/services/invoicing.json +1 -0
  219. package/src/data/servicereference/services/iot-device-tester.json +1 -0
  220. package/src/data/servicereference/services/iot.json +1 -0
  221. package/src/data/servicereference/services/iotanalytics.json +1 -0
  222. package/src/data/servicereference/services/iotdeviceadvisor.json +1 -0
  223. package/src/data/servicereference/services/iotevents.json +1 -0
  224. package/src/data/servicereference/services/iotfleethub.json +1 -0
  225. package/src/data/servicereference/services/iotfleetwise.json +1 -0
  226. package/src/data/servicereference/services/iotjobsdata.json +1 -0
  227. package/src/data/servicereference/services/iotmanagedintegrations.json +1 -0
  228. package/src/data/servicereference/services/iotsitewise.json +1 -0
  229. package/src/data/servicereference/services/iottwinmaker.json +1 -0
  230. package/src/data/servicereference/services/iotwireless.json +1 -0
  231. package/src/data/servicereference/services/iq-permission.json +1 -0
  232. package/src/data/servicereference/services/iq.json +1 -0
  233. package/src/data/servicereference/services/ivs.json +1 -0
  234. package/src/data/servicereference/services/ivschat.json +1 -0
  235. package/src/data/servicereference/services/kafka-cluster.json +1 -0
  236. package/src/data/servicereference/services/kafka.json +1 -0
  237. package/src/data/servicereference/services/kafkaconnect.json +1 -0
  238. package/src/data/servicereference/services/kendra-ranking.json +1 -0
  239. package/src/data/servicereference/services/kendra.json +1 -0
  240. package/src/data/servicereference/services/kinesis.json +1 -0
  241. package/src/data/servicereference/services/kinesisanalytics.json +1 -0
  242. package/src/data/servicereference/services/kinesisvideo.json +1 -0
  243. package/src/data/servicereference/services/kms.json +1 -0
  244. package/src/data/servicereference/services/lakeformation.json +1 -0
  245. package/src/data/servicereference/services/lambda.json +1 -0
  246. package/src/data/servicereference/services/launchwizard.json +1 -0
  247. package/src/data/servicereference/services/lex.json +1 -0
  248. package/src/data/servicereference/services/license-manager-linux-subscriptions.json +1 -0
  249. package/src/data/servicereference/services/license-manager-user-subscriptions.json +1 -0
  250. package/src/data/servicereference/services/license-manager.json +1 -0
  251. package/src/data/servicereference/services/lightsail.json +1 -0
  252. package/src/data/servicereference/services/logs.json +1 -0
  253. package/src/data/servicereference/services/lookoutequipment.json +1 -0
  254. package/src/data/servicereference/services/lookoutmetrics.json +1 -0
  255. package/src/data/servicereference/services/lookoutvision.json +1 -0
  256. package/src/data/servicereference/services/m2.json +1 -0
  257. package/src/data/servicereference/services/machinelearning.json +1 -0
  258. package/src/data/servicereference/services/macie2.json +1 -0
  259. package/src/data/servicereference/services/managedblockchain-query.json +1 -0
  260. package/src/data/servicereference/services/managedblockchain.json +1 -0
  261. package/src/data/servicereference/services/mapcredits.json +1 -0
  262. package/src/data/servicereference/services/marketplacecommerceanalytics.json +1 -0
  263. package/src/data/servicereference/services/mechanicalturk.json +1 -0
  264. package/src/data/servicereference/services/mediaconnect.json +1 -0
  265. package/src/data/servicereference/services/mediaconvert.json +1 -0
  266. package/src/data/servicereference/services/mediaimport.json +1 -0
  267. package/src/data/servicereference/services/medialive.json +1 -0
  268. package/src/data/servicereference/services/mediapackage-vod.json +1 -0
  269. package/src/data/servicereference/services/mediapackage.json +1 -0
  270. package/src/data/servicereference/services/mediapackagev2.json +1 -0
  271. package/src/data/servicereference/services/mediastore.json +1 -0
  272. package/src/data/servicereference/services/mediatailor.json +1 -0
  273. package/src/data/servicereference/services/medical-imaging.json +1 -0
  274. package/src/data/servicereference/services/memorydb.json +1 -0
  275. package/src/data/servicereference/services/mgh.json +1 -0
  276. package/src/data/servicereference/services/mgn.json +1 -0
  277. package/src/data/servicereference/services/migrationhub-orchestrator.json +1 -0
  278. package/src/data/servicereference/services/migrationhub-strategy.json +1 -0
  279. package/src/data/servicereference/services/mobileanalytics.json +1 -0
  280. package/src/data/servicereference/services/mobiletargeting.json +1 -0
  281. package/src/data/servicereference/services/monitron.json +1 -0
  282. package/src/data/servicereference/services/mpa.json +1 -0
  283. package/src/data/servicereference/services/mq.json +1 -0
  284. package/src/data/servicereference/services/neptune-db.json +1 -0
  285. package/src/data/servicereference/services/neptune-graph.json +1 -0
  286. package/src/data/servicereference/services/network-firewall.json +1 -0
  287. package/src/data/servicereference/services/network-security-director.json +1 -0
  288. package/src/data/servicereference/services/networkflowmonitor.json +1 -0
  289. package/src/data/servicereference/services/networkmanager-chat.json +1 -0
  290. package/src/data/servicereference/services/networkmanager.json +1 -0
  291. package/src/data/servicereference/services/networkmonitor.json +1 -0
  292. package/src/data/servicereference/services/nimble.json +1 -0
  293. package/src/data/servicereference/services/notifications-contacts.json +1 -0
  294. package/src/data/servicereference/services/notifications.json +1 -0
  295. package/src/data/servicereference/services/nova-act.json +1 -0
  296. package/src/data/servicereference/services/oam.json +1 -0
  297. package/src/data/servicereference/services/observabilityadmin.json +1 -0
  298. package/src/data/servicereference/services/odb.json +1 -0
  299. package/src/data/servicereference/services/omics.json +1 -0
  300. package/src/data/servicereference/services/one.json +1 -0
  301. package/src/data/servicereference/services/opensearch.json +1 -0
  302. package/src/data/servicereference/services/opsworks-cm.json +1 -0
  303. package/src/data/servicereference/services/opsworks.json +1 -0
  304. package/src/data/servicereference/services/organizations.json +1 -0
  305. package/src/data/servicereference/services/osis.json +1 -0
  306. package/src/data/servicereference/services/outposts.json +1 -0
  307. package/src/data/servicereference/services/panorama.json +1 -0
  308. package/src/data/servicereference/services/partnercentral-account-management.json +1 -0
  309. package/src/data/servicereference/services/partnercentral.json +1 -0
  310. package/src/data/servicereference/services/payment-cryptography.json +1 -0
  311. package/src/data/servicereference/services/payments.json +1 -0
  312. package/src/data/servicereference/services/pca-connector-ad.json +1 -0
  313. package/src/data/servicereference/services/pca-connector-scep.json +1 -0
  314. package/src/data/servicereference/services/pcs.json +1 -0
  315. package/src/data/servicereference/services/personalize.json +1 -0
  316. package/src/data/servicereference/services/pi.json +1 -0
  317. package/src/data/servicereference/services/pipes.json +1 -0
  318. package/src/data/servicereference/services/polly.json +1 -0
  319. package/src/data/servicereference/services/pricing.json +1 -0
  320. package/src/data/servicereference/services/pricingplanmanager.json +1 -0
  321. package/src/data/servicereference/services/private-networks.json +1 -0
  322. package/src/data/servicereference/services/profile.json +1 -0
  323. package/src/data/servicereference/services/proton.json +1 -0
  324. package/src/data/servicereference/services/purchase-orders.json +1 -0
  325. package/src/data/servicereference/services/q.json +1 -0
  326. package/src/data/servicereference/services/qapps.json +1 -0
  327. package/src/data/servicereference/services/qbusiness.json +1 -0
  328. package/src/data/servicereference/services/qdeveloper.json +1 -0
  329. package/src/data/servicereference/services/qldb.json +1 -0
  330. package/src/data/servicereference/services/quicksight.json +1 -0
  331. package/src/data/servicereference/services/ram.json +1 -0
  332. package/src/data/servicereference/services/rbin.json +1 -0
  333. package/src/data/servicereference/services/rds-data.json +1 -0
  334. package/src/data/servicereference/services/rds-db.json +1 -0
  335. package/src/data/servicereference/services/rds.json +1 -0
  336. package/src/data/servicereference/services/redshift-data.json +1 -0
  337. package/src/data/servicereference/services/redshift-serverless.json +1 -0
  338. package/src/data/servicereference/services/redshift.json +1 -0
  339. package/src/data/servicereference/services/refactor-spaces.json +1 -0
  340. package/src/data/servicereference/services/rekognition.json +1 -0
  341. package/src/data/servicereference/services/repostspace.json +1 -0
  342. package/src/data/servicereference/services/resiliencehub.json +1 -0
  343. package/src/data/servicereference/services/resource-explorer-2.json +1 -0
  344. package/src/data/servicereference/services/resource-explorer.json +1 -0
  345. package/src/data/servicereference/services/resource-groups.json +1 -0
  346. package/src/data/servicereference/services/rhelkb.json +1 -0
  347. package/src/data/servicereference/services/robomaker.json +1 -0
  348. package/src/data/servicereference/services/rolesanywhere.json +1 -0
  349. package/src/data/servicereference/services/route53-recovery-cluster.json +1 -0
  350. package/src/data/servicereference/services/route53-recovery-control-config.json +1 -0
  351. package/src/data/servicereference/services/route53-recovery-readiness.json +1 -0
  352. package/src/data/servicereference/services/route53.json +1 -0
  353. package/src/data/servicereference/services/route53domains.json +1 -0
  354. package/src/data/servicereference/services/route53globalresolver.json +1 -0
  355. package/src/data/servicereference/services/route53profiles.json +1 -0
  356. package/src/data/servicereference/services/route53resolver.json +1 -0
  357. package/src/data/servicereference/services/rtbfabric.json +1 -0
  358. package/src/data/servicereference/services/rum.json +1 -0
  359. package/src/data/servicereference/services/s3-object-lambda.json +1 -0
  360. package/src/data/servicereference/services/s3-outposts.json +1 -0
  361. package/src/data/servicereference/services/s3.json +1 -0
  362. package/src/data/servicereference/services/s3express.json +1 -0
  363. package/src/data/servicereference/services/s3tables.json +1 -0
  364. package/src/data/servicereference/services/s3vectors.json +1 -0
  365. package/src/data/servicereference/services/sagemaker-data-science-assistant.json +1 -0
  366. package/src/data/servicereference/services/sagemaker-geospatial.json +1 -0
  367. package/src/data/servicereference/services/sagemaker-mlflow.json +1 -0
  368. package/src/data/servicereference/services/sagemaker-unified-studio-mcp.json +1 -0
  369. package/src/data/servicereference/services/sagemaker.json +1 -0
  370. package/src/data/servicereference/services/savingsplans.json +1 -0
  371. package/src/data/servicereference/services/scheduler.json +1 -0
  372. package/src/data/servicereference/services/schemas.json +1 -0
  373. package/src/data/servicereference/services/scn.json +1 -0
  374. package/src/data/servicereference/services/sdb.json +1 -0
  375. package/src/data/servicereference/services/secretsmanager.json +1 -0
  376. package/src/data/servicereference/services/security-ir.json +1 -0
  377. package/src/data/servicereference/services/securityagent.json +1 -0
  378. package/src/data/servicereference/services/securityhub.json +1 -0
  379. package/src/data/servicereference/services/securitylake.json +1 -0
  380. package/src/data/servicereference/services/serverlessrepo.json +1 -0
  381. package/src/data/servicereference/services/servicecatalog.json +1 -0
  382. package/src/data/servicereference/services/servicediscovery.json +1 -0
  383. package/src/data/servicereference/services/serviceextract.json +1 -0
  384. package/src/data/servicereference/services/servicequotas.json +1 -0
  385. package/src/data/servicereference/services/ses.json +1 -0
  386. package/src/data/servicereference/services/shield.json +1 -0
  387. package/src/data/servicereference/services/signer.json +1 -0
  388. package/src/data/servicereference/services/signin.json +1 -0
  389. package/src/data/servicereference/services/simspaceweaver.json +1 -0
  390. package/src/data/servicereference/services/sms-voice.json +1 -0
  391. package/src/data/servicereference/services/sms.json +1 -0
  392. package/src/data/servicereference/services/snow-device-management.json +1 -0
  393. package/src/data/servicereference/services/snowball.json +1 -0
  394. package/src/data/servicereference/services/sns.json +1 -0
  395. package/src/data/servicereference/services/social-messaging.json +1 -0
  396. package/src/data/servicereference/services/sqlworkbench.json +1 -0
  397. package/src/data/servicereference/services/sqs.json +1 -0
  398. package/src/data/servicereference/services/ssm-contacts.json +1 -0
  399. package/src/data/servicereference/services/ssm-guiconnect.json +1 -0
  400. package/src/data/servicereference/services/ssm-incidents.json +1 -0
  401. package/src/data/servicereference/services/ssm-quicksetup.json +1 -0
  402. package/src/data/servicereference/services/ssm-sap.json +1 -0
  403. package/src/data/servicereference/services/ssm.json +1 -0
  404. package/src/data/servicereference/services/ssmmessages.json +1 -0
  405. package/src/data/servicereference/services/sso-directory.json +1 -0
  406. package/src/data/servicereference/services/sso-oauth.json +1 -0
  407. package/src/data/servicereference/services/sso.json +1 -0
  408. package/src/data/servicereference/services/states.json +1 -0
  409. package/src/data/servicereference/services/storagegateway.json +1 -0
  410. package/src/data/servicereference/services/sts.json +1 -0
  411. package/src/data/servicereference/services/support-console.json +1 -0
  412. package/src/data/servicereference/services/support.json +1 -0
  413. package/src/data/servicereference/services/supportapp.json +1 -0
  414. package/src/data/servicereference/services/supportplans.json +1 -0
  415. package/src/data/servicereference/services/sustainability.json +1 -0
  416. package/src/data/servicereference/services/swf.json +1 -0
  417. package/src/data/servicereference/services/synthetics.json +1 -0
  418. package/src/data/servicereference/services/tag.json +1 -0
  419. package/src/data/servicereference/services/tax.json +1 -0
  420. package/src/data/servicereference/services/textract.json +1 -0
  421. package/src/data/servicereference/services/thinclient.json +1 -0
  422. package/src/data/servicereference/services/timestream-influxdb.json +1 -0
  423. package/src/data/servicereference/services/timestream.json +1 -0
  424. package/src/data/servicereference/services/tiros.json +1 -0
  425. package/src/data/servicereference/services/tnb.json +1 -0
  426. package/src/data/servicereference/services/transcribe.json +1 -0
  427. package/src/data/servicereference/services/transfer.json +1 -0
  428. package/src/data/servicereference/services/transform-custom.json +1 -0
  429. package/src/data/servicereference/services/transform.json +1 -0
  430. package/src/data/servicereference/services/translate.json +1 -0
  431. package/src/data/servicereference/services/trustedadvisor.json +1 -0
  432. package/src/data/servicereference/services/ts.json +1 -0
  433. package/src/data/servicereference/services/user-subscriptions.json +1 -0
  434. package/src/data/servicereference/services/uxc.json +1 -0
  435. package/src/data/servicereference/services/vendor-insights.json +1 -0
  436. package/src/data/servicereference/services/verified-access.json +1 -0
  437. package/src/data/servicereference/services/verifiedpermissions.json +1 -0
  438. package/src/data/servicereference/services/voiceid.json +1 -0
  439. package/src/data/servicereference/services/vpc-lattice-svcs.json +1 -0
  440. package/src/data/servicereference/services/vpc-lattice.json +1 -0
  441. package/src/data/servicereference/services/vpce.json +1 -0
  442. package/src/data/servicereference/services/waf-regional.json +1 -0
  443. package/src/data/servicereference/services/waf.json +1 -0
  444. package/src/data/servicereference/services/wafv2.json +1 -0
  445. package/src/data/servicereference/services/wam.json +1 -0
  446. package/src/data/servicereference/services/wellarchitected.json +1 -0
  447. package/src/data/servicereference/services/wickr.json +1 -0
  448. package/src/data/servicereference/services/wisdom.json +1 -0
  449. package/src/data/servicereference/services/workdocs.json +1 -0
  450. package/src/data/servicereference/services/worklink.json +1 -0
  451. package/src/data/servicereference/services/workmail.json +1 -0
  452. package/src/data/servicereference/services/workmailmessageflow.json +1 -0
  453. package/src/data/servicereference/services/workspaces-instances.json +1 -0
  454. package/src/data/servicereference/services/workspaces-web.json +1 -0
  455. package/src/data/servicereference/services/workspaces.json +1 -0
  456. package/src/data/servicereference/services/xray.json +1 -0
  457. package/src/data/servicereference/services.json +1 -0
  458. package/src/extension.d.ts +3 -0
  459. package/src/extension.js +23 -0
  460. package/src/grammars/tree-sitter-hcl.wasm +0 -0
  461. package/src/grammars/tree-sitter-json.wasm +0 -0
  462. package/src/grammars/tree-sitter-yaml.wasm +0 -0
  463. package/src/handlers/completion/action-value.d.ts +4 -0
  464. package/src/handlers/completion/action-value.js +46 -0
  465. package/src/handlers/completion/condition-block.d.ts +4 -0
  466. package/src/handlers/completion/condition-block.js +31 -0
  467. package/src/handlers/completion/condition-key.d.ts +4 -0
  468. package/src/handlers/completion/condition-key.js +80 -0
  469. package/src/handlers/completion/condition-operator.d.ts +4 -0
  470. package/src/handlers/completion/condition-operator.js +22 -0
  471. package/src/handlers/completion/effect-value.d.ts +4 -0
  472. package/src/handlers/completion/effect-value.js +14 -0
  473. package/src/handlers/completion/index.d.ts +14 -0
  474. package/src/handlers/completion/index.js +96 -0
  475. package/src/handlers/completion/principal-block-identifier.d.ts +4 -0
  476. package/src/handlers/completion/principal-block-identifier.js +4 -0
  477. package/src/handlers/completion/principal-block-type.d.ts +4 -0
  478. package/src/handlers/completion/principal-block-type.js +24 -0
  479. package/src/handlers/completion/principal-block.d.ts +4 -0
  480. package/src/handlers/completion/principal-block.js +28 -0
  481. package/src/handlers/completion/principal-identifier-completions.d.ts +2 -0
  482. package/src/handlers/completion/principal-identifier-completions.js +131 -0
  483. package/src/handlers/completion/principal-type.d.ts +4 -0
  484. package/src/handlers/completion/principal-type.js +23 -0
  485. package/src/handlers/completion/principal-typed-value.d.ts +4 -0
  486. package/src/handlers/completion/principal-typed-value.js +4 -0
  487. package/src/handlers/completion/principal-value.d.ts +4 -0
  488. package/src/handlers/completion/principal-value.js +18 -0
  489. package/src/handlers/completion/resource-value.d.ts +4 -0
  490. package/src/handlers/completion/resource-value.js +144 -0
  491. package/src/handlers/completion/statement-block.d.ts +10 -0
  492. package/src/handlers/completion/statement-block.js +51 -0
  493. package/src/handlers/completion/statement-key.d.ts +4 -0
  494. package/src/handlers/completion/statement-key.js +41 -0
  495. package/src/lib/iam-policy/condition-operators.d.ts +317 -0
  496. package/src/lib/iam-policy/condition-operators.js +129 -0
  497. package/src/lib/iam-policy/location.d.ts +71 -0
  498. package/src/lib/iam-policy/location.js +82 -0
  499. package/src/lib/iam-policy/partitions.d.ts +116 -0
  500. package/src/lib/iam-policy/partitions.js +51 -0
  501. package/src/lib/iam-policy/principals.d.ts +21 -0
  502. package/src/lib/iam-policy/principals.js +37 -0
  503. package/src/lib/iam-policy/reference/services.d.ts +22 -0
  504. package/src/lib/iam-policy/reference/services.js +99 -0
  505. package/src/lib/iam-policy/reference/types.d.ts +71 -0
  506. package/src/lib/iam-policy/reference/types.js +1 -0
  507. package/src/lib/iam-policy/statement-keys.d.ts +8 -0
  508. package/src/lib/iam-policy/statement-keys.js +159 -0
  509. package/src/lib/iam-policy/wildcard.d.ts +2 -0
  510. package/src/lib/iam-policy/wildcard.js +14 -0
  511. package/src/lib/treesitter/base.d.ts +35 -0
  512. package/src/lib/treesitter/base.js +50 -0
  513. package/src/lib/treesitter/hcl.d.ts +9 -0
  514. package/src/lib/treesitter/hcl.js +888 -0
  515. package/src/lib/treesitter/json.d.ts +9 -0
  516. package/src/lib/treesitter/json.js +376 -0
  517. package/src/lib/treesitter/manager.d.ts +9 -0
  518. package/src/lib/treesitter/manager.js +66 -0
  519. package/src/lib/treesitter/yaml.d.ts +9 -0
  520. package/src/lib/treesitter/yaml.js +878 -0
  521. package/src/server.d.ts +2 -0
  522. package/src/server.js +26 -0
@@ -0,0 +1 @@
1
+ {"name":"qapps","actions":{"AssociateLibraryItemReview":{"conditionKeys":["qapps:AppIsPublished","qapps:UserIsAppOwner"],"resources":[{"name":"qapp"}],"description":"Grants permission to associate a library item review in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"qapp","required":true}]},"AssociateQAppWithUser":{"conditionKeys":["qapps:AppIsPublished","qapps:UserIsAppOwner"],"resources":[{"name":"application"},{"name":"qapp"}],"description":"Grants permission to associate Q App with a user in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"application","required":false},{"name":"qapp","required":false}]},"BatchCreateCategory":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to create the categories of a library in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"BatchDeleteCategory":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to delete the categories of a library in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"BatchUpdateCategory":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to update the categories of a library in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"CopyQApp":{"conditionKeys":["qapps:AppIsPublished","qapps:UserIsAppOwner"],"resources":[{"name":"application"},{"name":"qapp"}],"description":"Grants permission to copy Q App in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"application","required":false},{"name":"qapp","required":false}],"permissionOnly":true},"CreateLibraryItem":{"conditionKeys":["qapps:AppIsPublished","qapps:UserIsAppOwner"],"resources":[{"name":"application"},{"name":"qapp"}],"description":"Grants permission to create a library item in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"application","required":false},{"name":"qapp","required":false}]},"CreateLibraryItemReview":{"conditionKeys":["qapps:AppIsPublished","qapps:UserIsAppOwner"],"resources":[{"name":"application"},{"name":"qapp"}],"description":"Grants permission to create a library item review in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"application","required":false},{"name":"qapp","required":false}],"permissionOnly":true},"CreateQApp":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"application"}],"description":"Grants permission to create Q App in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"CreateSubscriptionToken":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to subscribe to a Q App event bus topic in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}],"permissionOnly":true},"DeleteLibraryItem":{"conditionKeys":["qapps:AppIsPublished","qapps:UserIsAppOwner"],"resources":[{"name":"application"},{"name":"qapp"}],"description":"Grants permission to delete a library item in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"application","required":false},{"name":"qapp","required":false}]},"DeleteQApp":{"conditionKeys":["qapps:AppIsPublished","qapps:UserIsAppOwner"],"resources":[{"name":"application"},{"name":"qapp"}],"description":"Grants permission to delete Q App in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"application","required":false},{"name":"qapp","required":false}]},"DescribeQAppPermissions":{"conditionKeys":["qapps:AppIsPublished","qapps:UserIsAppOwner"],"resources":[{"name":"application"},{"name":"qapp"}],"description":"Grants permission to get Q App sharing permissions in the Q Business application environment","accessLevel":"Read","resourceTypes":[{"name":"application","required":false},{"name":"qapp","required":false}]},"DisassociateLibraryItemReview":{"conditionKeys":["qapps:AppIsPublished","qapps:UserIsAppOwner"],"resources":[{"name":"qapp"}],"description":"Grants permission to disassociate a library item review in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"qapp","required":true}]},"DisassociateQAppFromUser":{"conditionKeys":["qapps:AppIsPublished","qapps:UserIsAppOwner"],"resources":[{"name":"application"},{"name":"qapp"}],"description":"Grants permission to disassociate Q App with a user in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"application","required":false},{"name":"qapp","required":false}]},"ExportQAppSessionData":{"conditionKeys":[],"resources":[{"name":"qapp-session"}],"description":"Grants permission to export Q App session data in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"qapp-session","required":true}]},"GetLibraryItem":{"conditionKeys":["qapps:AppIsPublished","qapps:UserIsAppOwner"],"resources":[{"name":"application"},{"name":"qapp"}],"description":"Grants permission to get a library item in the Q Business application environment","accessLevel":"Read","resourceTypes":[{"name":"application","required":false},{"name":"qapp","required":false}]},"GetQApp":{"conditionKeys":["qapps:AppIsPublished","qapps:UserIsAppOwner"],"resources":[{"name":"application"},{"name":"qapp"}],"description":"Grants permission to get Q App in the Q Business application environment","accessLevel":"Read","resourceTypes":[{"name":"application","required":false},{"name":"qapp","required":false}]},"GetQAppSession":{"conditionKeys":["qapps:AppIsPublished","qapps:SessionIsShared","qapps:UserIsAppOwner","qapps:UserIsSessionModerator"],"resources":[{"name":"qapp-session"}],"description":"Grants permission to get Q App session in the Q Business application environment","accessLevel":"Read","resourceTypes":[{"name":"qapp-session","required":true}]},"GetQAppSessionMetadata":{"conditionKeys":[],"resources":[{"name":"qapp-session"}],"description":"Grants permission to get Q App session metadata in the Q Business application environment","accessLevel":"Read","resourceTypes":[{"name":"qapp-session","required":true}]},"ImportDocument":{"conditionKeys":["qapps:AppIsPublished","qapps:SessionIsShared","qapps:UserIsAppOwner","qapps:UserIsSessionModerator"],"resources":[{"name":"qapp"},{"name":"qapp-session"}],"description":"Grants permission to import a document to Q App or Q App Session in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"qapp","required":false},{"name":"qapp-session","required":false}]},"ListCategories":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to list categories in the Q Business application environment","accessLevel":"List","resourceTypes":[{"name":"application","required":true}]},"ListLibraryItems":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to list library items in the Q Business application environment","accessLevel":"List","resourceTypes":[{"name":"application","required":true}]},"ListQAppSessionData":{"conditionKeys":[],"resources":[{"name":"qapp-session"}],"description":"Grants permission to get Q App session data in the Q Business application environment","accessLevel":"Read","resourceTypes":[{"name":"qapp-session","required":true}]},"ListQApps":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to list Q Apps in the Q Business application environment","accessLevel":"List","resourceTypes":[{"name":"application","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"qapp"},{"name":"qapp-session"}],"description":"Grants permission to list tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"qapp","required":false},{"name":"qapp-session","required":false}]},"PredictProblemStatementFromConversation":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to predict problem statement from conversation log in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}],"permissionOnly":true},"PredictQApp":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to predict Q App from conversation log or problem statement in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"PredictQAppFromProblemStatement":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to predict Q App metadata from problem statement in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}],"permissionOnly":true},"StartQAppSession":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","qapps:AppIsPublished","qapps:UserIsAppOwner"],"resources":[{"name":"application"},{"name":"qapp"}],"description":"Grants permission to start Q App session in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"application","required":false},{"name":"qapp","required":false}]},"StopQAppSession":{"conditionKeys":["qapps:AppIsPublished","qapps:SessionIsShared","qapps:UserIsAppOwner","qapps:UserIsSessionModerator"],"resources":[{"name":"application"},{"name":"qapp-session"}],"description":"Grants permission to stop Q App session in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"application","required":false},{"name":"qapp-session","required":false}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"qapp"},{"name":"qapp-session"}],"description":"Grants permission to tag a resource with given key value pairs","accessLevel":"Tagging","resourceTypes":[{"name":"qapp","required":false},{"name":"qapp-session","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"qapp"},{"name":"qapp-session"}],"description":"Grants permission to remove the tag with the given key from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"qapp","required":false},{"name":"qapp-session","required":false}]},"UpdateLibraryItem":{"conditionKeys":["qapps:AppIsPublished","qapps:UserIsAppOwner"],"resources":[{"name":"application"},{"name":"qapp"}],"description":"Grants permission to update a library item in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"application","required":false},{"name":"qapp","required":false}]},"UpdateLibraryItemMetadata":{"conditionKeys":["qapps:AppIsPublished"],"resources":[{"name":"qapp"}],"description":"Grants permission to update the metadata of a library item in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"qapp","required":true}]},"UpdateQApp":{"conditionKeys":["qapps:AppIsPublished","qapps:UserIsAppOwner"],"resources":[{"name":"application"},{"name":"qapp"}],"description":"Grants permission to update Q App in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"application","required":false},{"name":"qapp","required":false}]},"UpdateQAppPermissions":{"conditionKeys":["qapps:AppIsPublished","qapps:UserIsAppOwner"],"resources":[{"name":"application"},{"name":"qapp"}],"description":"Grants permission to update Q App sharing permissions in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"application","required":false},{"name":"qapp","required":false}]},"UpdateQAppSession":{"conditionKeys":["qapps:AppIsPublished","qapps:SessionIsShared","qapps:UserIsAppOwner","qapps:UserIsSessionModerator"],"resources":[{"name":"qapp-session"}],"description":"Grants permission to update Q App session in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"qapp-session","required":true}]},"UpdateQAppSessionMetadata":{"conditionKeys":[],"resources":[{"name":"qapp-session"}],"description":"Grants permission to update Q App session metadata in the Q Business application environment","accessLevel":"Write","resourceTypes":[{"name":"qapp-session","required":true}]}},"resources":[{"name":"application","arnFormats":["arn:${Partition}:qbusiness:${Region}:${Account}:application/${ApplicationId}"],"conditionKeys":[]},{"name":"qapp","arnFormats":["arn:${Partition}:qapps:${Region}:${Account}:application/${ApplicationId}/qapp/${AppId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"qapp-session","arnFormats":["arn:${Partition}:qapps:${Region}:${Account}:application/${ApplicationId}/qapp/${AppId}/session/${SessionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"qapps:AppIsPublished":{"types":["String"],"description":"Filters access by whether Q App is published"},"qapps:SessionIsShared":{"types":["String"],"description":"Filters access by whether Q App Session is shared"},"qapps:UserIsAppOwner":{"types":["String"],"description":"Filters access by whether requester is Q App owner"},"qapps:UserIsSessionModerator":{"types":["String"],"description":"Filters access by whether requester is Q App Session moderator"}}}
@@ -0,0 +1 @@
1
+ {"name":"qbusiness","actions":{"AllowVendedLogDeliveryForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"application"}],"description":"Grants permission to configure vended log delivery for Amazon Q Business application resource","accessLevel":"Permissions management","resourceTypes":[{"name":"application","required":true}],"permissionOnly":true},"AssociatePermission":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to associate resource based policy statement to the application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}],"dependentActions":["qbusiness:PutResourcePolicy"]},"BatchDeleteDocument":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"index"}],"description":"Grants permission to batch delete document","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"index","required":true}]},"BatchPutDocument":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"index"}],"description":"Grants permission to batch put document","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"index","required":true}]},"CancelSubscription":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"subscription"}],"description":"Grants permission to cancel a subscription","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"subscription","required":true}]},"Chat":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to chat using an application","accessLevel":"Read","resourceTypes":[{"name":"application","required":true}]},"ChatSync":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to chat synchronously using an application","accessLevel":"Read","resourceTypes":[{"name":"application","required":true}]},"CheckDocumentAccess":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"index"}],"description":"Grants permission to check if a user has access to a document","accessLevel":"Read","resourceTypes":[{"name":"application","required":true},{"name":"index","required":true}]},"CreateAnonymousWebExperienceUrl":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"web-experience"}],"description":"Grants permission to create a unique URL for anonymous Amazon Q Business web experience","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"web-experience","required":true}]},"CreateApplication":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an application","accessLevel":"Write","resourceTypes":[]},"CreateChatResponseConfiguration":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"application"}],"description":"Grants permission to create a chat response configuration to the application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"CreateDataAccessor":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"application"}],"description":"Grants permission to create DataAccessor to the application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}],"dependentActions":["qbusiness:CreateDataAccessorWithTti"]},"CreateDataAccessorWithTti":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to create AWS IAM Identity center Trusted Token Issuer based DataAccessor to the application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}],"permissionOnly":true},"CreateDataSource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"application"},{"name":"index"}],"description":"Grants permission to create a data source for a given application and index","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"index","required":true}]},"CreateIndex":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"application"}],"description":"Grants permission to create an index for a given application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"CreateIntegration":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"application"}],"description":"Grants permission to create a new integration for a Q Business application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"CreatePlugin":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"application"}],"description":"Grants permission to create a plugin for a given application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"CreateRetriever":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"application"}],"description":"Grants permission to create a retriever for a given application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"CreateSubscription":{"conditionKeys":["identitystore:GroupId","identitystore:UserId"],"resources":[{"name":"application"}],"description":"Grants permission to create a subscription","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"CreateUser":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to create a user","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"CreateWebExperience":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"application"}],"description":"Grants permission to create a web experience for a given application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"DeleteApplication":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to delete an application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"DeleteAttachment":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to delete an attachment in the current chat context","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"DeleteChatControlsConfiguration":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to delete chat controls configuration for an application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"DeleteChatResponseConfiguration":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"chat-response-configuration"}],"description":"Grants permission to delete a chat response configuration","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"chat-response-configuration","required":true}]},"DeleteConversation":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to delete a conversation","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"DeleteDataAccessor":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"data-accessor"}],"description":"Grants permission to delete DataAccessor","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"data-accessor","required":true}]},"DeleteDataSource":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"data-source"},{"name":"index"}],"description":"Grants permission to delete a DataSource","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"data-source","required":true},{"name":"index","required":true}]},"DeleteGroup":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"index"}],"description":"Grants permission to delete a group","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"index","required":true}]},"DeleteIndex":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"index"}],"description":"Grants permission to delete an index","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"index","required":true}]},"DeleteIntegration":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"integration"}],"description":"Grants permission to delete an integration for a Q Business application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"integration","required":true}]},"DeletePlugin":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"plugin"}],"description":"Grants permission to delete a plugin","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"plugin","required":true}]},"DeleteRetriever":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"retriever"}],"description":"Grants permission to delete a retriever","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"retriever","required":true}]},"DeleteUser":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to delete a user","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"DeleteWebExperience":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"web-experience"}],"description":"Grants permission to delete a web-experience","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"web-experience","required":true}]},"DisableAclOnDataSource":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to disable the ACL crawl while creating the Amazon Q Business data source resource","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}],"permissionOnly":true},"DisassociatePermission":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to disassociate resource based policy statement to the application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}],"dependentActions":["qbusiness:PutResourcePolicy"]},"GetApplication":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to get an application","accessLevel":"Read","resourceTypes":[{"name":"application","required":true}]},"GetChatControlsConfiguration":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to get chat controls configuration for an application","accessLevel":"List","resourceTypes":[{"name":"application","required":true}]},"GetChatResponseConfiguration":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"chat-response-configuration"}],"description":"Grants permission to get a chat response configuration","accessLevel":"Read","resourceTypes":[{"name":"application","required":true},{"name":"chat-response-configuration","required":true}]},"GetDataAccessor":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"data-accessor"}],"description":"Grants permission to get DataAccessor","accessLevel":"Read","resourceTypes":[{"name":"application","required":true},{"name":"data-accessor","required":true}]},"GetDataSource":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"data-source"},{"name":"index"}],"description":"Grants permission to get a data source","accessLevel":"Read","resourceTypes":[{"name":"application","required":true},{"name":"data-source","required":true},{"name":"index","required":true}]},"GetDocumentContent":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"index"}],"description":"Grants permission to get a document content","accessLevel":"Read","resourceTypes":[{"name":"application","required":true},{"name":"index","required":true}]},"GetGroup":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"index"}],"description":"Grants permission to get a group","accessLevel":"Read","resourceTypes":[{"name":"application","required":true},{"name":"index","required":true}]},"GetIndex":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"index"}],"description":"Grants permission to get an index","accessLevel":"Read","resourceTypes":[{"name":"application","required":true},{"name":"index","required":true}]},"GetIntegration":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"integration"}],"description":"Grants permission to get an integration for a Q Business application","accessLevel":"Read","resourceTypes":[{"name":"application","required":true},{"name":"integration","required":true}]},"GetMedia":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to get the media associated to a system message","accessLevel":"Read","resourceTypes":[{"name":"application","required":true}]},"GetPlugin":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"plugin"}],"description":"Grants permission to get a plugin","accessLevel":"Read","resourceTypes":[{"name":"application","required":true},{"name":"plugin","required":true}]},"GetPolicy":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to get resource based policy of the application","accessLevel":"Read","resourceTypes":[{"name":"application","required":true}]},"GetRetriever":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"retriever"}],"description":"Grants permission to get a retriever","accessLevel":"Read","resourceTypes":[{"name":"application","required":true},{"name":"retriever","required":true}]},"GetUser":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to get a user","accessLevel":"Read","resourceTypes":[{"name":"application","required":true}]},"GetWebExperience":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"web-experience"}],"description":"Grants permission to get a web-experience","accessLevel":"Read","resourceTypes":[{"name":"application","required":true},{"name":"web-experience","required":true}]},"ListApplications":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the applications","accessLevel":"List","resourceTypes":[]},"ListAttachments":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to list attachments in the current chat context","accessLevel":"List","resourceTypes":[{"name":"application","required":true}]},"ListChatResponseConfigurations":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to list chat response configurations for an application","accessLevel":"List","resourceTypes":[{"name":"application","required":true}]},"ListConversations":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to list all conversations for an application","accessLevel":"List","resourceTypes":[{"name":"application","required":true}]},"ListDataAccessors":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to list DataAccessors for the application","accessLevel":"List","resourceTypes":[{"name":"application","required":true}]},"ListDataSourceSyncJobs":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"data-source"},{"name":"index"}],"description":"Grants permission to get Data Source sync job history","accessLevel":"List","resourceTypes":[{"name":"application","required":true},{"name":"data-source","required":true},{"name":"index","required":true}]},"ListDataSources":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"index"}],"description":"Grants permission to list the data sources of an application and an index","accessLevel":"List","resourceTypes":[{"name":"application","required":true},{"name":"index","required":true}]},"ListDocuments":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"index"}],"description":"Grants permission to list all documents","accessLevel":"List","resourceTypes":[{"name":"application","required":true},{"name":"index","required":true}]},"ListGroups":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"index"}],"description":"Grants permission to list groups","accessLevel":"List","resourceTypes":[{"name":"application","required":true},{"name":"index","required":true}]},"ListIndices":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to list the indices of an application","accessLevel":"List","resourceTypes":[{"name":"application","required":true}]},"ListIntegrations":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to list all integrations for a Q Business application","accessLevel":"List","resourceTypes":[{"name":"application","required":true}]},"ListMessages":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to list all messages","accessLevel":"List","resourceTypes":[{"name":"application","required":true}]},"ListPluginActions":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"plugin"}],"description":"Grants permission to list the plugins actions of a plugin within application","accessLevel":"Read","resourceTypes":[{"name":"application","required":true},{"name":"plugin","required":true}]},"ListPluginTypeActions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the actions for a plugin type","accessLevel":"Read","resourceTypes":[]},"ListPluginTypeMetadata":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the plugin type metadata","accessLevel":"Read","resourceTypes":[]},"ListPlugins":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to list the plugins of an application","accessLevel":"List","resourceTypes":[{"name":"application","required":true}]},"ListRetrievers":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to list the retrievers of an application","accessLevel":"List","resourceTypes":[{"name":"application","required":true}]},"ListSubscriptions":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to list subscriptions","accessLevel":"List","resourceTypes":[{"name":"application","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"chat-response-configuration"},{"name":"data-accessor"},{"name":"data-source"},{"name":"index"},{"name":"integration"},{"name":"plugin"},{"name":"retriever"},{"name":"web-experience"}],"description":"Grants permission to list tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"application","required":false},{"name":"chat-response-configuration","required":false},{"name":"data-accessor","required":false},{"name":"data-source","required":false},{"name":"index","required":false},{"name":"integration","required":false},{"name":"plugin","required":false},{"name":"retriever","required":false},{"name":"web-experience","required":false}]},"ListWebExperiences":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to list the web experiences of an application","accessLevel":"List","resourceTypes":[{"name":"application","required":true}]},"PutFeedback":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to put feedback about a conversation message","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"PutGroup":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"index"}],"description":"Grants permission to put a group of users","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"index","required":true}]},"PutResourcePolicy":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to put resource based policy statement to the application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}],"permissionOnly":true},"SearchRelevantContent":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to search relevant content from the Amazon Q Business Application","accessLevel":"Read","resourceTypes":[{"name":"application","required":true}]},"StartDataSourceSyncJob":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"data-source"},{"name":"index"}],"description":"Grants permission to start Data Source sync job","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"data-source","required":true},{"name":"index","required":true}]},"StartDeployment":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"integration"}],"description":"Grants permission to start deployment for an integration","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"integration","required":true}]},"StopDataSourceSyncJob":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"data-source"},{"name":"index"}],"description":"Grants permission to stop Data Source sync job","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"data-source","required":true},{"name":"index","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"application"},{"name":"chat-response-configuration"},{"name":"data-accessor"},{"name":"data-source"},{"name":"index"},{"name":"integration"},{"name":"plugin"},{"name":"retriever"},{"name":"web-experience"}],"description":"Grants permission to tag a resource with given key value pairs","accessLevel":"Tagging","resourceTypes":[{"name":"application","required":false},{"name":"chat-response-configuration","required":false},{"name":"data-accessor","required":false},{"name":"data-source","required":false},{"name":"index","required":false},{"name":"integration","required":false},{"name":"plugin","required":false},{"name":"retriever","required":false},{"name":"web-experience","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"application"},{"name":"chat-response-configuration"},{"name":"data-accessor"},{"name":"data-source"},{"name":"index"},{"name":"integration"},{"name":"plugin"},{"name":"retriever"},{"name":"web-experience"}],"description":"Grants permission to remove the tag with the given key from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"application","required":false},{"name":"chat-response-configuration","required":false},{"name":"data-accessor","required":false},{"name":"data-source","required":false},{"name":"index","required":false},{"name":"integration","required":false},{"name":"plugin","required":false},{"name":"retriever","required":false},{"name":"web-experience","required":false}]},"UpdateApplication":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to update an Application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"UpdateChatControlsConfiguration":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to update chat controls configuration for an application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"UpdateChatResponseConfiguration":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"chat-response-configuration"}],"description":"Grants permission to update a chat response configuration","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"chat-response-configuration","required":true}]},"UpdateDataAccessor":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"data-accessor"}],"description":"Grants permission to update DataAccessor","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"data-accessor","required":true}]},"UpdateDataSource":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"data-source"},{"name":"index"}],"description":"Grants permission to update a DataSource","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"data-source","required":true},{"name":"index","required":true}]},"UpdateIndex":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"index"}],"description":"Grants permission to update an index","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"index","required":true}]},"UpdateIntegration":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"integration"}],"description":"Grants permission to update an integration for a Q Business application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"integration","required":true}]},"UpdatePlugin":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"plugin"}],"description":"Grants permission to update a plugin","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"plugin","required":true}]},"UpdateRetriever":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"retriever"}],"description":"Grants permission to update a Retriever","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"retriever","required":true}]},"UpdateSubscription":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"subscription"}],"description":"Grants permission to update a subscription","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"subscription","required":true}]},"UpdateUser":{"conditionKeys":[],"resources":[{"name":"application"}],"description":"Grants permission to update a user","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"UpdateWebExperience":{"conditionKeys":[],"resources":[{"name":"application"},{"name":"web-experience"}],"description":"Grants permission to update a WebExperience","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"web-experience","required":true}]}},"resources":[{"name":"application","arnFormats":["arn:${Partition}:qbusiness:${Region}:${Account}:application/${ApplicationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"chat-response-configuration","arnFormats":["arn:${Partition}:qbusiness:${Region}:${Account}:application/${ApplicationId}/chat-response-configuration/${ChatResponseConfigurationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"data-accessor","arnFormats":["arn:${Partition}:qbusiness:${Region}:${Account}:application/${ApplicationId}/data-accessor/${DataAccessorId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"data-source","arnFormats":["arn:${Partition}:qbusiness:${Region}:${Account}:application/${ApplicationId}/index/${IndexId}/data-source/${DataSourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"index","arnFormats":["arn:${Partition}:qbusiness:${Region}:${Account}:application/${ApplicationId}/index/${IndexId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"integration","arnFormats":["arn:${Partition}:qbusiness:${Region}:${Account}:application/${ApplicationId}/integration/${IntegrationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"plugin","arnFormats":["arn:${Partition}:qbusiness:${Region}:${Account}:application/${ApplicationId}/plugin/${PluginId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"retriever","arnFormats":["arn:${Partition}:qbusiness:${Region}:${Account}:application/${ApplicationId}/retriever/${RetrieverId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"subscription","arnFormats":["arn:${Partition}:qbusiness:${Region}:${Account}:application/${ApplicationId}/subscription/${SubscriptionId}"],"conditionKeys":[]},{"name":"web-experience","arnFormats":["arn:${Partition}:qbusiness:${Region}:${Account}:application/${ApplicationId}/web-experience/${WebExperienceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"identitystore:GroupId":{"types":["ArrayOfString"],"description":"Filters access by IAM Identity Center Group ID"},"identitystore:UserId":{"types":["ArrayOfString"],"description":"Filters access by IAM Identity Center User ID"}}}
@@ -0,0 +1 @@
1
+ {"name":"qdeveloper","actions":{"ExportArtifact":{"conditionKeys":[],"resources":[{"name":"codeTransformation"}],"description":"Grants permission to export artifacts from Amazon Q Developer","accessLevel":"Write","resourceTypes":[{"name":"codeTransformation","required":false}]},"ImportArtifact":{"conditionKeys":[],"resources":[{"name":"codeTransformation"}],"description":"Grants permission to import artifacts to Amazon Q Developer","accessLevel":"Write","resourceTypes":[{"name":"codeTransformation","required":false}]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"codeTransformation"}],"description":"Grants permission to list all tags associated with an Amazon Q Developer resource","accessLevel":"List","resourceTypes":[{"name":"codeTransformation","required":false}],"permissionOnly":true},"StartAgentSession":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to start an agent session with Amazon Q Developer","accessLevel":"Write","resourceTypes":[]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"codeTransformation"}],"description":"Grants permission to associate tags with an Amazon Q Developer resource","accessLevel":"Tagging","resourceTypes":[{"name":"codeTransformation","required":false}],"permissionOnly":true},"TransformCode":{"conditionKeys":[],"resources":[{"name":"codeTransformation"}],"description":"Grants permission to transform code with Amazon Q Developer Transform Agent","accessLevel":"Write","resourceTypes":[{"name":"codeTransformation","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"codeTransformation"}],"description":"Grants permission to remove tags associated with an Amazon Q Developer resource","accessLevel":"Tagging","resourceTypes":[{"name":"codeTransformation","required":false}],"permissionOnly":true}},"resources":[{"name":"codeTransformation","arnFormats":["arn:${Partition}:qdeveloper:${Region}:${Account}:codeTransformation/${Identifier}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the Amazon Q Developer resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"qldb","actions":{"CancelJournalKinesisStream":{"conditionKeys":[],"resources":[{"name":"stream"}],"description":"Grants permission to cancel a journal kinesis stream","accessLevel":"Write","resourceTypes":[{"name":"stream","required":true}]},"CreateLedger":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ledger"}],"description":"Grants permission to create a ledger","accessLevel":"Write","resourceTypes":[{"name":"ledger","required":true}]},"DeleteLedger":{"conditionKeys":[],"resources":[{"name":"ledger"}],"description":"Grants permission to delete a ledger","accessLevel":"Write","resourceTypes":[{"name":"ledger","required":true}]},"DescribeJournalKinesisStream":{"conditionKeys":[],"resources":[{"name":"stream"}],"description":"Grants permission to describe information about a journal kinesis stream","accessLevel":"Read","resourceTypes":[{"name":"stream","required":true}]},"DescribeJournalS3Export":{"conditionKeys":[],"resources":[{"name":"ledger"}],"description":"Grants permission to describe information about a journal export job","accessLevel":"Read","resourceTypes":[{"name":"ledger","required":true}]},"DescribeLedger":{"conditionKeys":[],"resources":[{"name":"ledger"}],"description":"Grants permission to describe a ledger","accessLevel":"Read","resourceTypes":[{"name":"ledger","required":true}]},"ExecuteStatement":{"conditionKeys":[],"resources":[{"name":"ledger"}],"description":"Grants permission to send commands to a ledger via the console","accessLevel":"Write","resourceTypes":[{"name":"ledger","required":true}],"permissionOnly":true},"ExportJournalToS3":{"conditionKeys":[],"resources":[{"name":"ledger"}],"description":"Grants permission to export journal contents to an Amazon S3 bucket","accessLevel":"Write","resourceTypes":[{"name":"ledger","required":true}]},"GetBlock":{"conditionKeys":[],"resources":[{"name":"ledger"}],"description":"Grants permission to retrieve a block from a ledger for a given BlockAddress","accessLevel":"Read","resourceTypes":[{"name":"ledger","required":true}]},"GetDigest":{"conditionKeys":[],"resources":[{"name":"ledger"}],"description":"Grants permission to retrieve a digest from a ledger for a given BlockAddress","accessLevel":"Read","resourceTypes":[{"name":"ledger","required":true}]},"GetRevision":{"conditionKeys":[],"resources":[{"name":"ledger"}],"description":"Grants permission to retrieve a revision for a given document ID and a given BlockAddress","accessLevel":"Read","resourceTypes":[{"name":"ledger","required":true}]},"InsertSampleData":{"conditionKeys":[],"resources":[{"name":"ledger"}],"description":"Grants permission to insert sample application data via the console","accessLevel":"Write","resourceTypes":[{"name":"ledger","required":true}],"permissionOnly":true},"ListJournalKinesisStreamsForLedger":{"conditionKeys":[],"resources":[{"name":"stream"}],"description":"Grants permission to list journal kinesis streams for a specified ledger","accessLevel":"List","resourceTypes":[{"name":"stream","required":true}]},"ListJournalS3Exports":{"conditionKeys":[],"resources":[],"description":"Grants permission to list journal export jobs for all ledgers","accessLevel":"List","resourceTypes":[]},"ListJournalS3ExportsForLedger":{"conditionKeys":[],"resources":[{"name":"ledger"}],"description":"Grants permission to list journal export jobs for a specified ledger","accessLevel":"List","resourceTypes":[{"name":"ledger","required":true}]},"ListLedgers":{"conditionKeys":[],"resources":[],"description":"Grants permission to list existing ledgers","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"catalog"},{"name":"ledger"},{"name":"stream"},{"name":"table"}],"description":"Grants permission to list tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"catalog","required":false},{"name":"ledger","required":false},{"name":"stream","required":false},{"name":"table","required":false}]},"PartiQLCreateIndex":{"conditionKeys":[],"resources":[{"name":"table"}],"description":"Grants permission to create an index on a table","accessLevel":"Write","resourceTypes":[{"name":"table","required":true}]},"PartiQLCreateTable":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"table"}],"description":"Grants permission to create a table","accessLevel":"Write","resourceTypes":[{"name":"table","required":true}]},"PartiQLDelete":{"conditionKeys":[],"resources":[{"name":"table"}],"description":"Grants permission to delete documents from a table","accessLevel":"Write","resourceTypes":[{"name":"table","required":true}]},"PartiQLDropIndex":{"conditionKeys":["qldb:Purge"],"resources":[{"name":"table"}],"description":"Grants permission to drop an index from a table","accessLevel":"Write","resourceTypes":[{"name":"table","required":true}]},"PartiQLDropTable":{"conditionKeys":["qldb:Purge"],"resources":[{"name":"table"}],"description":"Grants permission to drop a table","accessLevel":"Write","resourceTypes":[{"name":"table","required":true}]},"PartiQLHistoryFunction":{"conditionKeys":[],"resources":[{"name":"table"}],"description":"Grants permission to use the history function on a table","accessLevel":"Read","resourceTypes":[{"name":"table","required":true}]},"PartiQLInsert":{"conditionKeys":[],"resources":[{"name":"table"}],"description":"Grants permission to insert documents into a table","accessLevel":"Write","resourceTypes":[{"name":"table","required":true}]},"PartiQLRedact":{"conditionKeys":[],"resources":[{"name":"table"}],"description":"Grants permission to redact historic revisions","accessLevel":"Write","resourceTypes":[{"name":"table","required":true}]},"PartiQLSelect":{"conditionKeys":[],"resources":[{"name":"catalog"},{"name":"table"}],"description":"Grants permission to select documents from a table","accessLevel":"Read","resourceTypes":[{"name":"catalog","required":false},{"name":"table","required":false}]},"PartiQLUndropTable":{"conditionKeys":[],"resources":[{"name":"table"}],"description":"Grants permission to undrop a table","accessLevel":"Write","resourceTypes":[{"name":"table","required":true}]},"PartiQLUpdate":{"conditionKeys":[],"resources":[{"name":"table"}],"description":"Grants permission to update existing documents in a table","accessLevel":"Write","resourceTypes":[{"name":"table","required":true}]},"SendCommand":{"conditionKeys":[],"resources":[{"name":"ledger"}],"description":"Grants permission to send commands to a ledger","accessLevel":"Write","resourceTypes":[{"name":"ledger","required":true}]},"ShowCatalog":{"conditionKeys":[],"resources":[{"name":"ledger"}],"description":"Grants permission to view a ledger's catalog via the console","accessLevel":"Write","resourceTypes":[{"name":"ledger","required":true}],"permissionOnly":true},"StreamJournalToKinesis":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"stream"}],"description":"Grants permission to stream journal contents to a Kinesis Data Stream","accessLevel":"Write","resourceTypes":[{"name":"stream","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"catalog"},{"name":"ledger"},{"name":"stream"},{"name":"table"}],"description":"Grants permission to add one or more tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"catalog","required":false},{"name":"ledger","required":false},{"name":"stream","required":false},{"name":"table","required":false}]},"UntagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"catalog"},{"name":"ledger"},{"name":"stream"},{"name":"table"}],"description":"Grants permission to remove one or more tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"catalog","required":false},{"name":"ledger","required":false},{"name":"stream","required":false},{"name":"table","required":false}]},"UpdateLedger":{"conditionKeys":[],"resources":[{"name":"ledger"}],"description":"Grants permission to update properties on a ledger","accessLevel":"Write","resourceTypes":[{"name":"ledger","required":true}]},"UpdateLedgerPermissionsMode":{"conditionKeys":[],"resources":[{"name":"ledger"}],"description":"Grants permission to update the permissions mode on a ledger","accessLevel":"Write","resourceTypes":[{"name":"ledger","required":true}]}},"resources":[{"name":"catalog","arnFormats":["arn:${Partition}:qldb:${Region}:${Account}:ledger/${LedgerName}/information_schema/user_tables"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"ledger","arnFormats":["arn:${Partition}:qldb:${Region}:${Account}:ledger/${LedgerName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"stream","arnFormats":["arn:${Partition}:qldb:${Region}:${Account}:stream/${LedgerName}/${StreamId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"table","arnFormats":["arn:${Partition}:qldb:${Region}:${Account}:ledger/${LedgerName}/table/${TableId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair that is allowed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair of a resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by a list of tag keys that are allowed in the request"},"qldb:Purge":{"types":["String"],"description":"Filters access by the value of purge that is specified in a PartiQL DROP statement"}}}
@@ -0,0 +1 @@
1
+ {"name":"quicksight","actions":{"AccountConfigurations":{"conditionKeys":[],"resources":[],"description":"Grants permission to enable setting default access to AWS resources","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"AllowVendedLogDeliveryForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to configure log delivery for QuickSuite instance","accessLevel":"Permissions management","resourceTypes":[],"permissionOnly":true},"BatchCreateTopicReviewedAnswer":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"topic"}],"description":"Grants permission to create reviewed answers for a topic","accessLevel":"Write","resourceTypes":[{"name":"topic","required":true}]},"BatchDeleteTopicReviewedAnswer":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"topic"}],"description":"Grants permission to delete reviewed answers for a topic","accessLevel":"Write","resourceTypes":[{"name":"topic","required":true}]},"BatchGetPreferences":{"conditionKeys":[],"resources":[],"description":"Grants permission to get user preferences","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"BatchUpdatePreferences":{"conditionKeys":[],"resources":[],"description":"Grants permission to update user preferences","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CancelIngestion":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ingestion"}],"description":"Grants permission to cancel a SPICE ingestions on a dataset","accessLevel":"Write","resourceTypes":[{"name":"ingestion","required":true}]},"CreateAccountCustomization":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an account customization for QuickSight account or namespace","accessLevel":"Write","resourceTypes":[]},"CreateAccountSubscription":{"conditionKeys":["quicksight:DirectoryType","quicksight:Edition"],"resources":[],"description":"Grants permission to subscribe to QuickSight","accessLevel":"Write","resourceTypes":[]},"CreateActionConnector":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"actionconnector"}],"description":"Grants permission to create an action connector","accessLevel":"Write","resourceTypes":[{"name":"actionconnector","required":true}]},"CreateAdmin":{"conditionKeys":[],"resources":[{"name":"user"}],"description":"Grants permission to provision Amazon QuickSight administrators, authors, and readers","accessLevel":"Write","resourceTypes":[{"name":"user","required":true}],"permissionOnly":true},"CreateAnalysis":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"analysis"}],"description":"Grants permission to create an analysis from a template","accessLevel":"Write","resourceTypes":[{"name":"analysis","required":true}]},"CreateBrand":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"brand"}],"description":"Grants permission to create an Amazon QuickSight brand","accessLevel":"Write","resourceTypes":[{"name":"brand","required":true}]},"CreateCustomPermissions":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"custompermissions"}],"description":"Grants permission to create a QuickSight custom permissions resource","accessLevel":"Write","resourceTypes":[{"name":"custompermissions","required":true}]},"CreateDashboard":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"dashboard"}],"description":"Grants permission to create a QuickSight Dashboard","accessLevel":"Write","resourceTypes":[{"name":"dashboard","required":true}]},"CreateDataSet":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"datasource"}],"description":"Grants permission to create a dataset","accessLevel":"Write","resourceTypes":[{"name":"datasource","required":true}],"dependentActions":["quicksight:PassDataSource"]},"CreateDataSource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a data source","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"]},"CreateEmailCustomizationTemplate":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"emailCustomizationTemplate"}],"description":"Grants permission to create a QuickSight email customization template","accessLevel":"Write","resourceTypes":[{"name":"emailCustomizationTemplate","required":true}],"permissionOnly":true},"CreateExtensionAccess":{"conditionKeys":[],"resources":[{"name":"extensionaccess"}],"description":"Grants permission to create an extension access","accessLevel":"Write","resourceTypes":[{"name":"extensionaccess","required":true}],"permissionOnly":true},"CreateFolder":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"folder"}],"description":"Grants permission to create a QuickSight folder","accessLevel":"Write","resourceTypes":[{"name":"folder","required":true}]},"CreateFolderMembership":{"conditionKeys":[],"resources":[{"name":"analysis"},{"name":"dashboard"},{"name":"dataset"},{"name":"folder"}],"description":"Grants permission to add a QuickSight Dashboard, Analysis or Dataset to a QuickSight Folder","accessLevel":"Write","resourceTypes":[{"name":"folder","required":true},{"name":"analysis","required":false},{"name":"dashboard","required":false},{"name":"dataset","required":false}]},"CreateGroup":{"conditionKeys":[],"resources":[{"name":"group"}],"description":"Grants permission to create a QuickSight group","accessLevel":"Write","resourceTypes":[{"name":"group","required":true}]},"CreateGroupMembership":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"group"}],"description":"Grants permission to add a QuickSight user to a QuickSight group","accessLevel":"Write","resourceTypes":[{"name":"group","required":true}]},"CreateIAMPolicyAssignment":{"conditionKeys":[],"resources":[{"name":"assignment"}],"description":"Grants permission to create an assignment with one specified IAM Policy ARN that will be assigned to specified groups or users of QuickSight","accessLevel":"Write","resourceTypes":[{"name":"assignment","required":true}]},"CreateIngestion":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ingestion"}],"description":"Grants permission to start a SPICE ingestion on a dataset","accessLevel":"Write","resourceTypes":[{"name":"ingestion","required":true}]},"CreateNamespace":{"conditionKeys":[],"resources":[{"name":"namespace"}],"description":"Grants permission to create an QuickSight namespace","accessLevel":"Write","resourceTypes":[{"name":"namespace","required":true}],"dependentActions":["ds:CreateIdentityPoolDirectory"]},"CreateReader":{"conditionKeys":[],"resources":[{"name":"user"}],"description":"Grants permission to provision Amazon QuickSight readers","accessLevel":"Write","resourceTypes":[{"name":"user","required":true}],"permissionOnly":true},"CreateRefreshSchedule":{"conditionKeys":[],"resources":[{"name":"refreshschedule"}],"description":"Grants permission to create a refresh schedule for a dataset","accessLevel":"Write","resourceTypes":[{"name":"refreshschedule","required":true}]},"CreateRoleMembership":{"conditionKeys":["quicksight:Group"],"resources":[],"description":"Grants permission to add a group member to a role","accessLevel":"Write","resourceTypes":[]},"CreateTemplate":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"template"}],"description":"Grants permission to create a template","accessLevel":"Write","resourceTypes":[{"name":"template","required":true}]},"CreateTemplateAlias":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"template"}],"description":"Grants permission to create a template alias","accessLevel":"Write","resourceTypes":[{"name":"template","required":true}]},"CreateTheme":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"theme"}],"description":"Grants permission to create a theme","accessLevel":"Write","resourceTypes":[{"name":"theme","required":true}]},"CreateThemeAlias":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"theme"}],"description":"Grants permission to create an alias for a theme version","accessLevel":"Write","resourceTypes":[{"name":"theme","required":true}]},"CreateTopic":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"dataset"}],"description":"Grants permission to create a topic","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}],"dependentActions":["quicksight:PassDataSet"]},"CreateTopicRefreshSchedule":{"conditionKeys":[],"resources":[{"name":"topic"}],"description":"Grants permission to create a refresh schedule for a topic","accessLevel":"Write","resourceTypes":[{"name":"topic","required":true}]},"CreateUser":{"conditionKeys":[],"resources":[{"name":"user"}],"description":"Grants permission to provision Amazon QuickSight authors and readers","accessLevel":"Write","resourceTypes":[{"name":"user","required":true}],"permissionOnly":true},"CreateVPCConnection":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a vpc connection","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"]},"DeleteAccountCustomPermission":{"conditionKeys":[],"resources":[],"description":"Grants permission to remove the custom permission associated with an account","accessLevel":"Write","resourceTypes":[]},"DeleteAccountCustomization":{"conditionKeys":[],"resources":[{"name":"customization"}],"description":"Grants permission to delete an account customization for QuickSight account or namespace","accessLevel":"Write","resourceTypes":[{"name":"customization","required":true}]},"DeleteAccountSubscription":{"conditionKeys":[],"resources":[{"name":"account"}],"description":"Grants permission to delete a QuickSight account","accessLevel":"Write","resourceTypes":[{"name":"account","required":true}]},"DeleteActionConnector":{"conditionKeys":[],"resources":[{"name":"actionconnector"}],"description":"Grants permission to delete an action connector","accessLevel":"Write","resourceTypes":[{"name":"actionconnector","required":true}]},"DeleteAnalysis":{"conditionKeys":[],"resources":[{"name":"analysis"}],"description":"Grants permission to delete an analysis","accessLevel":"Write","resourceTypes":[{"name":"analysis","required":true}]},"DeleteBrand":{"conditionKeys":[],"resources":[{"name":"brand"}],"description":"Grants permission to delete an Amazon QuickSight brand","accessLevel":"Write","resourceTypes":[{"name":"brand","required":true}]},"DeleteBrandAssignment":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a brand assignment","accessLevel":"Write","resourceTypes":[]},"DeleteCustomPermissions":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a QuickSight custom permissions resource","accessLevel":"Write","resourceTypes":[]},"DeleteDashboard":{"conditionKeys":[],"resources":[{"name":"dashboard"}],"description":"Grants permission to delete a QuickSight Dashboard","accessLevel":"Write","resourceTypes":[{"name":"dashboard","required":true}]},"DeleteDataSet":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"dataset"}],"description":"Grants permission to delete a dataset","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}]},"DeleteDataSetRefreshProperties":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to delete dataset refresh properties for a dataset","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}]},"DeleteDataSource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"datasource"}],"description":"Grants permission to delete a data source","accessLevel":"Write","resourceTypes":[{"name":"datasource","required":true}]},"DeleteDefaultQBusinessApplication":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete linked QBusiness application for QuickSight account","accessLevel":"Write","resourceTypes":[]},"DeleteEmailCustomizationTemplate":{"conditionKeys":[],"resources":[{"name":"emailCustomizationTemplate"}],"description":"Grants permission to delete a QuickSight email customization template","accessLevel":"Write","resourceTypes":[{"name":"emailCustomizationTemplate","required":true}],"permissionOnly":true},"DeleteExtensionAccess":{"conditionKeys":[],"resources":[{"name":"extensionaccess"}],"description":"Grants permission to delete an extension access","accessLevel":"Write","resourceTypes":[{"name":"extensionaccess","required":true}],"permissionOnly":true},"DeleteFolder":{"conditionKeys":[],"resources":[{"name":"folder"}],"description":"Grants permission to delete a QuickSight Folder","accessLevel":"Write","resourceTypes":[{"name":"folder","required":true}]},"DeleteFolderMembership":{"conditionKeys":[],"resources":[{"name":"analysis"},{"name":"dashboard"},{"name":"dataset"},{"name":"folder"}],"description":"Grants permission to remove a QuickSight Dashboard, Analysis or Dataset from a QuickSight Folder","accessLevel":"Write","resourceTypes":[{"name":"folder","required":true},{"name":"analysis","required":false},{"name":"dashboard","required":false},{"name":"dataset","required":false}]},"DeleteGroup":{"conditionKeys":[],"resources":[{"name":"group"}],"description":"Grants permission to remove a user group from QuickSight","accessLevel":"Write","resourceTypes":[{"name":"group","required":true}]},"DeleteGroupMembership":{"conditionKeys":[],"resources":[{"name":"group"}],"description":"Grants permission to remove a user from a group so that he/she is no longer a member of the group","accessLevel":"Write","resourceTypes":[{"name":"group","required":true}]},"DeleteIAMPolicyAssignment":{"conditionKeys":[],"resources":[{"name":"assignment"}],"description":"Grants permission to update an existing assignment","accessLevel":"Write","resourceTypes":[{"name":"assignment","required":true}]},"DeleteIdentityPropagationConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to remove AWS services for trusted identity propagation in QuickSight","accessLevel":"Write","resourceTypes":[]},"DeleteNamespace":{"conditionKeys":[],"resources":[{"name":"namespace"}],"description":"Grants permission to delete a QuickSight namespace","accessLevel":"Write","resourceTypes":[{"name":"namespace","required":true}],"dependentActions":["ds:DeleteDirectory"]},"DeleteRefreshSchedule":{"conditionKeys":[],"resources":[{"name":"refreshschedule"}],"description":"Grants permission to delete a refresh schedule for a dataset","accessLevel":"Write","resourceTypes":[{"name":"refreshschedule","required":true}]},"DeleteRoleCustomPermission":{"conditionKeys":[],"resources":[],"description":"Grants permission to remove the custom permission associated with a role","accessLevel":"Write","resourceTypes":[]},"DeleteRoleMembership":{"conditionKeys":["quicksight:Group"],"resources":[],"description":"Grants permission to remove a group member from a role","accessLevel":"Write","resourceTypes":[]},"DeleteTemplate":{"conditionKeys":[],"resources":[{"name":"template"}],"description":"Grants permission to delete a template","accessLevel":"Write","resourceTypes":[{"name":"template","required":true}]},"DeleteTemplateAlias":{"conditionKeys":[],"resources":[{"name":"template"}],"description":"Grants permission to delete a template alias","accessLevel":"Write","resourceTypes":[{"name":"template","required":true}]},"DeleteTheme":{"conditionKeys":[],"resources":[{"name":"theme"}],"description":"Grants permission to delete a theme","accessLevel":"Write","resourceTypes":[{"name":"theme","required":true}]},"DeleteThemeAlias":{"conditionKeys":[],"resources":[{"name":"theme"}],"description":"Grants permission to delete the alias of a theme","accessLevel":"Write","resourceTypes":[{"name":"theme","required":true}]},"DeleteTopic":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"topic"}],"description":"Grants permission to delete a topic","accessLevel":"Write","resourceTypes":[{"name":"topic","required":true}]},"DeleteTopicRefreshSchedule":{"conditionKeys":[],"resources":[{"name":"topic"}],"description":"Grants permission to delete a refresh schedule for a topic","accessLevel":"Write","resourceTypes":[{"name":"topic","required":true}]},"DeleteUser":{"conditionKeys":[],"resources":[{"name":"user"}],"description":"Grants permission to delete a QuickSight user, given the user name","accessLevel":"Write","resourceTypes":[{"name":"user","required":true}]},"DeleteUserByPrincipalId":{"conditionKeys":[],"resources":[{"name":"user"}],"description":"Grants permission to delete a user identified by its principal ID","accessLevel":"Write","resourceTypes":[{"name":"user","required":true}]},"DeleteUserCustomPermission":{"conditionKeys":[],"resources":[{"name":"user"}],"description":"Grants permission to remove the custom permission associated with a user","accessLevel":"Write","resourceTypes":[{"name":"user","required":true}]},"DeleteVPCConnection":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"vpcconnection"}],"description":"Grants permission to delete a vpc connection","accessLevel":"Write","resourceTypes":[{"name":"vpcconnection","required":true}]},"DescribeAccountCustomPermission":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the custom permission associated with an account","accessLevel":"Read","resourceTypes":[]},"DescribeAccountCustomization":{"conditionKeys":[],"resources":[{"name":"customization"}],"description":"Grants permission to describe an account customization for QuickSight account or namespace","accessLevel":"Read","resourceTypes":[{"name":"customization","required":true}]},"DescribeAccountSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the administrative account settings for QuickSight account","accessLevel":"Read","resourceTypes":[]},"DescribeAccountSubscription":{"conditionKeys":[],"resources":[{"name":"account"}],"description":"Grants permission to describe a QuickSight account","accessLevel":"Read","resourceTypes":[{"name":"account","required":true}]},"DescribeActionConnector":{"conditionKeys":[],"resources":[{"name":"actionconnector"}],"description":"Grants permission to describe an action connector","accessLevel":"Read","resourceTypes":[{"name":"actionconnector","required":true}]},"DescribeActionConnectorPermissions":{"conditionKeys":[],"resources":[{"name":"actionconnector"}],"description":"Grants permission to describe permissions for an action connector","accessLevel":"Read","resourceTypes":[{"name":"actionconnector","required":true}]},"DescribeAgent":{"conditionKeys":[],"resources":[{"name":"agent"}],"description":"Grants permission to describe an agent","accessLevel":"Read","resourceTypes":[{"name":"agent","required":true}],"permissionOnly":true},"DescribeAgentPermissions":{"conditionKeys":[],"resources":[{"name":"agent"}],"description":"Grants permission to describe agent's permissions","accessLevel":"Read","resourceTypes":[{"name":"agent","required":true}],"permissionOnly":true},"DescribeAnalysis":{"conditionKeys":[],"resources":[{"name":"analysis"}],"description":"Grants permission to describe an analysis","accessLevel":"Read","resourceTypes":[{"name":"analysis","required":true}]},"DescribeAnalysisPermissions":{"conditionKeys":[],"resources":[{"name":"analysis"}],"description":"Grants permission to describe permissions for an analysis","accessLevel":"Read","resourceTypes":[{"name":"analysis","required":true}]},"DescribeAssetBundleExportJob":{"conditionKeys":[],"resources":[{"name":"assetBundleExportJob"}],"description":"Grants permission to describe an asset bundle export job","accessLevel":"Read","resourceTypes":[{"name":"assetBundleExportJob","required":true}]},"DescribeAssetBundleImportJob":{"conditionKeys":[],"resources":[{"name":"assetBundleImportJob"}],"description":"Grants permission to describe an asset bundle import job","accessLevel":"Read","resourceTypes":[{"name":"assetBundleImportJob","required":true}]},"DescribeBrand":{"conditionKeys":[],"resources":[{"name":"brand"}],"description":"Grants permission to describe a brand","accessLevel":"Read","resourceTypes":[{"name":"brand","required":true}]},"DescribeBrandAssignment":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe a brand assignment","accessLevel":"Read","resourceTypes":[]},"DescribeBrandPublishedVersion":{"conditionKeys":[],"resources":[{"name":"brand"}],"description":"Grants permission to describes the published version of the brand","accessLevel":"Read","resourceTypes":[{"name":"brand","required":true}]},"DescribeChatConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe chat configuration","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"DescribeCustomPermissions":{"conditionKeys":[],"resources":[{"name":"custompermissions"}],"description":"Grants permission to describe a custom permissions resource in a QuickSight account","accessLevel":"Read","resourceTypes":[{"name":"custompermissions","required":true}]},"DescribeDashboard":{"conditionKeys":[],"resources":[{"name":"dashboard"}],"description":"Grants permission to describe a QuickSight Dashboard","accessLevel":"Read","resourceTypes":[{"name":"dashboard","required":true}]},"DescribeDashboardPermissions":{"conditionKeys":[],"resources":[{"name":"dashboard"}],"description":"Grants permission to describe permissions for a QuickSight Dashboard","accessLevel":"Read","resourceTypes":[{"name":"dashboard","required":true}]},"DescribeDashboardSnapshotJob":{"conditionKeys":[],"resources":[{"name":"dashboardSnapshotJob"}],"description":"Grants permission to describe a dashboard snapshot job","accessLevel":"Read","resourceTypes":[{"name":"dashboardSnapshotJob","required":true}]},"DescribeDashboardSnapshotJobResult":{"conditionKeys":[],"resources":[{"name":"dashboardSnapshotJob"}],"description":"Grants permission to describe result of a dashboard snapshot job","accessLevel":"Read","resourceTypes":[{"name":"dashboardSnapshotJob","required":true}]},"DescribeDashboardsQAConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe dashboards qa configuration","accessLevel":"Read","resourceTypes":[]},"DescribeDataSet":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"dataset"}],"description":"Grants permission to describe a dataset","accessLevel":"Read","resourceTypes":[{"name":"dataset","required":true}]},"DescribeDataSetPermissions":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"dataset"}],"description":"Grants permission to describe the resource policy of a dataset","accessLevel":"Permissions management","resourceTypes":[{"name":"dataset","required":true}]},"DescribeDataSetRefreshProperties":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to describe refresh properties for a dataset","accessLevel":"Read","resourceTypes":[{"name":"dataset","required":true}]},"DescribeDataSource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"datasource"}],"description":"Grants permission to describe a data source","accessLevel":"Read","resourceTypes":[{"name":"datasource","required":true}]},"DescribeDataSourcePermissions":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"datasource"}],"description":"Grants permission to describe the resource policy of a data source","accessLevel":"Permissions management","resourceTypes":[{"name":"datasource","required":true}]},"DescribeDefaultQBusinessApplication":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe linked QBusiness application Id for QuickSight account","accessLevel":"Read","resourceTypes":[]},"DescribeEmailCustomizationTemplate":{"conditionKeys":[],"resources":[{"name":"emailCustomizationTemplate"}],"description":"Grants permission to describe a QuickSight email customization template","accessLevel":"Read","resourceTypes":[{"name":"emailCustomizationTemplate","required":true}],"permissionOnly":true},"DescribeExtensionAccess":{"conditionKeys":[],"resources":[{"name":"extensionaccess"}],"description":"Grants permission to describe an extension access","accessLevel":"Read","resourceTypes":[{"name":"extensionaccess","required":true}],"permissionOnly":true},"DescribeFolder":{"conditionKeys":[],"resources":[{"name":"folder"}],"description":"Grants permission to describe a QuickSight Folder","accessLevel":"Read","resourceTypes":[{"name":"folder","required":true}]},"DescribeFolderPermissions":{"conditionKeys":[],"resources":[{"name":"folder"}],"description":"Grants permission to describe permissions for a QuickSight Folder","accessLevel":"Read","resourceTypes":[{"name":"folder","required":true}]},"DescribeFolderResolvedPermissions":{"conditionKeys":[],"resources":[{"name":"folder"}],"description":"Grants permission to describe resolved permissions for a QuickSight Folder","accessLevel":"Read","resourceTypes":[{"name":"folder","required":true}]},"DescribeGroup":{"conditionKeys":[],"resources":[{"name":"group"}],"description":"Grants permission to describe a QuickSight group","accessLevel":"Read","resourceTypes":[{"name":"group","required":true}]},"DescribeGroupMembership":{"conditionKeys":[],"resources":[{"name":"group"}],"description":"Grants permission to describe a QuickSight group member","accessLevel":"Read","resourceTypes":[{"name":"group","required":true}]},"DescribeIAMPolicyAssignment":{"conditionKeys":[],"resources":[{"name":"assignment"}],"description":"Grants permission to describe an existing assignment","accessLevel":"Read","resourceTypes":[{"name":"assignment","required":true}]},"DescribeIngestion":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ingestion"}],"description":"Grants permission to describe a SPICE ingestion on a dataset","accessLevel":"Read","resourceTypes":[{"name":"ingestion","required":true}]},"DescribeIpRestriction":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the IP restrictions for QuickSight account","accessLevel":"Read","resourceTypes":[]},"DescribeKeyRegistration":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe QuickSight key registration","accessLevel":"Read","resourceTypes":[]},"DescribeNamespace":{"conditionKeys":[],"resources":[{"name":"namespace"}],"description":"Grants permission to describe a QuickSight namespace","accessLevel":"Read","resourceTypes":[{"name":"namespace","required":true}]},"DescribeQPersonalizationConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe a personalization configuration","accessLevel":"Read","resourceTypes":[]},"DescribeQuickIndexCapacity":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe index capacity","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"DescribeQuickSightQSearchConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe QuickSight Q Search configuration","accessLevel":"Read","resourceTypes":[]},"DescribeRefreshSchedule":{"conditionKeys":[],"resources":[{"name":"refreshschedule"}],"description":"Grants permission to describe a refresh schedule for a dataset","accessLevel":"Read","resourceTypes":[{"name":"refreshschedule","required":true}]},"DescribeRoleCustomPermission":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the custom permission associated with a role","accessLevel":"Read","resourceTypes":[]},"DescribeSelfUpgradeConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the administrative self upgrade configuration associated with an account","accessLevel":"Read","resourceTypes":[]},"DescribeTemplate":{"conditionKeys":[],"resources":[{"name":"template"}],"description":"Grants permission to describe a template","accessLevel":"Read","resourceTypes":[{"name":"template","required":true}]},"DescribeTemplateAlias":{"conditionKeys":[],"resources":[{"name":"template"}],"description":"Grants permission to describe a template alias","accessLevel":"Read","resourceTypes":[{"name":"template","required":true}]},"DescribeTemplatePermissions":{"conditionKeys":[],"resources":[{"name":"template"}],"description":"Grants permission to describe permissions for a template","accessLevel":"Read","resourceTypes":[{"name":"template","required":true}]},"DescribeTheme":{"conditionKeys":[],"resources":[{"name":"theme"}],"description":"Grants permission to describe a theme","accessLevel":"Read","resourceTypes":[{"name":"theme","required":true}]},"DescribeThemeAlias":{"conditionKeys":[],"resources":[{"name":"theme"}],"description":"Grants permission to describe a theme alias","accessLevel":"Read","resourceTypes":[{"name":"theme","required":true}]},"DescribeThemePermissions":{"conditionKeys":[],"resources":[{"name":"theme"}],"description":"Grants permission to describe permissions for a theme","accessLevel":"Read","resourceTypes":[{"name":"theme","required":true}]},"DescribeTopic":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"topic"}],"description":"Grants permission to describe a topic","accessLevel":"Read","resourceTypes":[{"name":"topic","required":true}]},"DescribeTopicPermissions":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"topic"}],"description":"Grants permission to describe the resource policy of a topic","accessLevel":"Permissions management","resourceTypes":[{"name":"topic","required":true}]},"DescribeTopicRefresh":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"topic"}],"description":"Grants permission to describe the refresh status of a topic","accessLevel":"Read","resourceTypes":[{"name":"topic","required":true}]},"DescribeTopicRefreshSchedule":{"conditionKeys":[],"resources":[{"name":"topic"}],"description":"Grants permission to describe a refresh schedule for a topic","accessLevel":"Read","resourceTypes":[{"name":"topic","required":true}]},"DescribeUser":{"conditionKeys":[],"resources":[{"name":"user"}],"description":"Grants permission to describe a QuickSight user given the user name","accessLevel":"Read","resourceTypes":[{"name":"user","required":true}]},"DescribeVPCConnection":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"vpcconnection"}],"description":"Grants permission to describe a vpc connection","accessLevel":"Read","resourceTypes":[{"name":"vpcconnection","required":true}]},"GenerateEmbedUrlForAnonymousUser":{"conditionKeys":["quicksight:AllowedEmbeddingDomains"],"resources":[{"name":"dashboard"},{"name":"namespace"},{"name":"theme"},{"name":"topic"}],"description":"Grants permission to generate a URL used to embed a QuickSight Dashboard or Q Topic for a user not registered with QuickSight","accessLevel":"Write","resourceTypes":[{"name":"namespace","required":true},{"name":"dashboard","required":false},{"name":"theme","required":false},{"name":"topic","required":false}]},"GenerateEmbedUrlForRegisteredUser":{"conditionKeys":["quicksight:AllowedEmbeddingDomains"],"resources":[{"name":"user"}],"description":"Grants permission to generate a URL used to embed a QuickSight Dashboard for a user registered with QuickSight","accessLevel":"Write","resourceTypes":[{"name":"user","required":true}]},"GenerateEmbedUrlForRegisteredUserWithIdentity":{"conditionKeys":["quicksight:AllowedEmbeddingDomains"],"resources":[],"description":"Grants permission to generate a URL used to embed a QuickSight Experience for a user registered with QuickSight using Identity-enhanced role session","accessLevel":"Write","resourceTypes":[]},"GetAnonymousUserEmbedUrl":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a URL used to embed a QuickSight Dashboard for a user not registered with QuickSight","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetAuthCode":{"conditionKeys":[],"resources":[{"name":"user"}],"description":"Grants permission to get an auth code representing a QuickSight user","accessLevel":"Read","resourceTypes":[{"name":"user","required":true}],"permissionOnly":true},"GetCustomPermissionsSummary":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about the custom permissions in an account","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetDashboardEmbedUrl":{"conditionKeys":[],"resources":[{"name":"dashboard"}],"description":"Grants permission to get a URL used to embed a QuickSight Dashboard","accessLevel":"Read","resourceTypes":[{"name":"dashboard","required":true}]},"GetFlowMetadata":{"conditionKeys":[],"resources":[{"name":"flow"}],"description":"Grants permission to get metadata for a flow","accessLevel":"Read","resourceTypes":[{"name":"flow","required":true}]},"GetFlowPermissions":{"conditionKeys":[],"resources":[{"name":"flow"}],"description":"Grants permission to get permissions for a flow","accessLevel":"Read","resourceTypes":[{"name":"flow","required":true}]},"GetGroupMapping":{"conditionKeys":[],"resources":[],"description":"Grants permission to use Amazon QuickSight, in Enterprise edition, to identify and display the Microsoft Active Directory (Microsoft Active Directory) directory groups that are mapped to roles in Amazon QuickSight","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetIdentityContext":{"conditionKeys":[],"resources":[{"name":"user"}],"description":"Grants permission to get identity context for a user","accessLevel":"Read","resourceTypes":[{"name":"user","required":true}]},"GetSessionEmbedUrl":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a URL to embed QuickSight console experience","accessLevel":"Read","resourceTypes":[]},"ListActionConnectors":{"conditionKeys":[],"resources":[],"description":"Grants permission to list action connectors","accessLevel":"List","resourceTypes":[]},"ListAgents":{"conditionKeys":[],"resources":[{"name":"agent"}],"description":"Grants permission to list agents","accessLevel":"List","resourceTypes":[{"name":"agent","required":true}],"permissionOnly":true},"ListAnalyses":{"conditionKeys":[],"resources":[{"name":"analysis"}],"description":"Grants permission to list all analyses in an account","accessLevel":"List","resourceTypes":[{"name":"analysis","required":true}]},"ListAssetBundleExportJobs":{"conditionKeys":[],"resources":[{"name":"assetBundleExportJob"}],"description":"Grants permission to list all asset bundle export jobs","accessLevel":"List","resourceTypes":[{"name":"assetBundleExportJob","required":true}]},"ListAssetBundleImportJobs":{"conditionKeys":[],"resources":[{"name":"assetBundleImportJob"}],"description":"Grants permission to list all asset bundle import jobs","accessLevel":"List","resourceTypes":[{"name":"assetBundleImportJob","required":true}]},"ListBrands":{"conditionKeys":[],"resources":[],"description":"Grants permission to lists all brands in an Amazon QuickSight account","accessLevel":"List","resourceTypes":[]},"ListCustomPermissions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list custom permissions resources in QuickSight account","accessLevel":"List","resourceTypes":[]},"ListCustomerManagedKeys":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all registered customer managed keys","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListDashboardVersions":{"conditionKeys":[],"resources":[{"name":"dashboard"}],"description":"Grants permission to list all versions of a QuickSight Dashboard","accessLevel":"List","resourceTypes":[{"name":"dashboard","required":true}]},"ListDashboards":{"conditionKeys":[],"resources":[{"name":"dashboard"}],"description":"Grants permission to list all Dashboards in a QuickSight Account","accessLevel":"List","resourceTypes":[{"name":"dashboard","required":true}]},"ListDataSets":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to list all datasets","accessLevel":"List","resourceTypes":[]},"ListDataSources":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to list all data sources","accessLevel":"List","resourceTypes":[]},"ListExtensionAccesses":{"conditionKeys":[],"resources":[],"description":"Grants permission to list extension accesses","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListFlows":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all flows in an Amazon QuickSight account","accessLevel":"List","resourceTypes":[]},"ListFolderMembers":{"conditionKeys":[],"resources":[{"name":"folder"}],"description":"Grants permission to list all members in a folder","accessLevel":"Read","resourceTypes":[{"name":"folder","required":true}]},"ListFolders":{"conditionKeys":[],"resources":[{"name":"folder"}],"description":"Grants permission to list all Folders in a QuickSight Account","accessLevel":"List","resourceTypes":[{"name":"folder","required":true}]},"ListFoldersForResource":{"conditionKeys":[],"resources":[{"name":"analysis"},{"name":"dashboard"},{"name":"dataset"},{"name":"datasource"},{"name":"topic"}],"description":"Grants permission to list all Folders in which a QuickSight resource is a member","accessLevel":"List","resourceTypes":[{"name":"analysis","required":false},{"name":"dashboard","required":false},{"name":"dataset","required":false},{"name":"datasource","required":false},{"name":"topic","required":false}]},"ListGroupMemberships":{"conditionKeys":[],"resources":[{"name":"group"}],"description":"Grants permission to list member users in a group","accessLevel":"List","resourceTypes":[{"name":"group","required":true}]},"ListGroups":{"conditionKeys":[],"resources":[{"name":"group"}],"description":"Grants permission to list all user groups in QuickSight","accessLevel":"List","resourceTypes":[{"name":"group","required":true}]},"ListIAMPolicyAssignments":{"conditionKeys":[],"resources":[{"name":"assignment"}],"description":"Grants permission to list all assignments in the current Amazon QuickSight account","accessLevel":"List","resourceTypes":[{"name":"assignment","required":true}]},"ListIAMPolicyAssignmentsForUser":{"conditionKeys":[],"resources":[{"name":"assignment"}],"description":"Grants permission to list all assignments assigned to a user and the groups it belongs","accessLevel":"List","resourceTypes":[{"name":"assignment","required":true}]},"ListIdentityPropagationConfigs":{"conditionKeys":[],"resources":[],"description":"Grants permission to list AWS services enabled for trusted identity propagation in QuickSight","accessLevel":"List","resourceTypes":[]},"ListIngestions":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to list all SPICE ingestions on a dataset","accessLevel":"List","resourceTypes":[]},"ListKMSKeysForUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to list a user's KMS keys","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListNamespaces":{"conditionKeys":[],"resources":[],"description":"Grants permission to lists all namespaces in a QuickSight account","accessLevel":"List","resourceTypes":[]},"ListRefreshSchedules":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all refresh schedules on a dataset","accessLevel":"List","resourceTypes":[]},"ListRoleMemberships":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the members of a role","accessLevel":"List","resourceTypes":[]},"ListSelfUpgrades":{"conditionKeys":[],"resources":[{"name":"user"}],"description":"Grants permission to list all of the pending self upgrade requests associated with an account","accessLevel":"List","resourceTypes":[{"name":"user","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"actionconnector"},{"name":"analysis"},{"name":"brand"},{"name":"customization"},{"name":"custompermissions"},{"name":"dashboard"},{"name":"dataset"},{"name":"datasource"},{"name":"emailCustomizationTemplate"},{"name":"flow"},{"name":"folder"},{"name":"template"},{"name":"theme"},{"name":"topic"},{"name":"vpcconnection"}],"description":"Grants permission to list tags of a QuickSight resource","accessLevel":"Read","resourceTypes":[{"name":"actionconnector","required":false},{"name":"analysis","required":false},{"name":"brand","required":false},{"name":"customization","required":false},{"name":"custompermissions","required":false},{"name":"dashboard","required":false},{"name":"dataset","required":false},{"name":"datasource","required":false},{"name":"emailCustomizationTemplate","required":false},{"name":"flow","required":false},{"name":"folder","required":false},{"name":"template","required":false},{"name":"theme","required":false},{"name":"topic","required":false},{"name":"vpcconnection","required":false}]},"ListTemplateAliases":{"conditionKeys":[],"resources":[{"name":"template"}],"description":"Grants permission to list all aliases for a template","accessLevel":"List","resourceTypes":[{"name":"template","required":true}]},"ListTemplateVersions":{"conditionKeys":[],"resources":[{"name":"template"}],"description":"Grants permission to list all versions of a template","accessLevel":"List","resourceTypes":[{"name":"template","required":true}]},"ListTemplates":{"conditionKeys":[],"resources":[{"name":"template"}],"description":"Grants permission to list all templates in a QuickSight account","accessLevel":"List","resourceTypes":[{"name":"template","required":true}]},"ListThemeAliases":{"conditionKeys":[],"resources":[{"name":"theme"}],"description":"Grants permission to list all aliases of a theme","accessLevel":"List","resourceTypes":[{"name":"theme","required":true}]},"ListThemeVersions":{"conditionKeys":[],"resources":[{"name":"theme"}],"description":"Grants permission to list all versions of a theme","accessLevel":"List","resourceTypes":[{"name":"theme","required":true}]},"ListThemes":{"conditionKeys":[],"resources":[{"name":"theme"}],"description":"Grants permission to list all themes in an account","accessLevel":"List","resourceTypes":[{"name":"theme","required":true}]},"ListTopicRefreshSchedules":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all refresh schedules on a topic","accessLevel":"List","resourceTypes":[]},"ListTopicReviewedAnswers":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to list all reviewed answers for topic","accessLevel":"List","resourceTypes":[]},"ListTopics":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to list all topics","accessLevel":"List","resourceTypes":[]},"ListUserGroups":{"conditionKeys":[],"resources":[{"name":"user"}],"description":"Grants permission to list groups that a given user is a member of","accessLevel":"List","resourceTypes":[{"name":"user","required":true}]},"ListUsers":{"conditionKeys":[],"resources":[{"name":"user"}],"description":"Grants permission to list all of the QuickSight users belonging to this account","accessLevel":"List","resourceTypes":[{"name":"user","required":true}]},"ListVPCConnections":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to list all vpc connections","accessLevel":"List","resourceTypes":[]},"PassDataSet":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"dataset"}],"description":"Grants permission to use a dataset for a template","accessLevel":"Read","resourceTypes":[{"name":"dataset","required":true}],"permissionOnly":true},"PassDataSource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"datasource"}],"description":"Grants permission to use a data source for a data set","accessLevel":"Read","resourceTypes":[{"name":"datasource","required":true}],"permissionOnly":true},"PredictQAResults":{"conditionKeys":[],"resources":[{"name":"dashboard"},{"name":"topic"}],"description":"Grants permission to predict QA results","accessLevel":"Read","resourceTypes":[{"name":"dashboard","required":false},{"name":"topic","required":false}]},"PutDataSetRefreshProperties":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to put dataset refresh properties for a dataset","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true}]},"QuickSuiteUsageMetrics":{"conditionKeys":[],"resources":[],"description":"Grants permission to get QuickSuite usage metrics","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"RegisterCustomerManagedKey":{"conditionKeys":[],"resources":[],"description":"Grants permission to register a customer managed key","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"RegisterUser":{"conditionKeys":[],"resources":[{"name":"user"}],"description":"Grants permission to create a QuickSight user, whose identity is associated with the IAM identity/role specified in the request","accessLevel":"Write","resourceTypes":[{"name":"user","required":true}]},"RemoveCustomerManagedKey":{"conditionKeys":[],"resources":[],"description":"Grants permission to remove a customer managed key","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"RestoreAnalysis":{"conditionKeys":[],"resources":[{"name":"analysis"}],"description":"Grants permission to restore a deleted analysis","accessLevel":"Write","resourceTypes":[{"name":"analysis","required":true}]},"ScopeDownPolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to manage scoping policies for permissions to AWS resources","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"SearchActionConnectors":{"conditionKeys":[],"resources":[{"name":"actionconnector"}],"description":"Grants permission to search action connectors","accessLevel":"List","resourceTypes":[{"name":"actionconnector","required":true}]},"SearchAgents":{"conditionKeys":[],"resources":[{"name":"agent"}],"description":"Grants permission to search agents","accessLevel":"List","resourceTypes":[{"name":"agent","required":true}],"permissionOnly":true},"SearchAnalyses":{"conditionKeys":[],"resources":[{"name":"analysis"}],"description":"Grants permission to search for a sub-set of analyses","accessLevel":"List","resourceTypes":[{"name":"analysis","required":true}]},"SearchDashboards":{"conditionKeys":[],"resources":[{"name":"dashboard"}],"description":"Grants permission to search for a sub-set of QuickSight Dashboards","accessLevel":"List","resourceTypes":[{"name":"dashboard","required":true}]},"SearchDataSets":{"conditionKeys":[],"resources":[{"name":"dataset"}],"description":"Grants permission to search for a sub-set of QuickSight DatSets","accessLevel":"List","resourceTypes":[{"name":"dataset","required":true}]},"SearchDataSources":{"conditionKeys":[],"resources":[{"name":"datasource"}],"description":"Grants permission to search for a sub-set of QuickSight Data Sources","accessLevel":"List","resourceTypes":[{"name":"datasource","required":true}]},"SearchDirectoryGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to use Amazon QuickSight, in Enterprise edition, to display your Microsoft Active Directory directory groups so that you can choose which ones to map to roles in Amazon QuickSight","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"SearchFlows":{"conditionKeys":[],"resources":[],"description":"Grants permission to search flows in an Amazon QuickSight account","accessLevel":"List","resourceTypes":[]},"SearchFolders":{"conditionKeys":[],"resources":[{"name":"folder"}],"description":"Grants permission to search for a sub-set of QuickSight Folders","accessLevel":"Read","resourceTypes":[{"name":"folder","required":true}]},"SearchGroups":{"conditionKeys":[],"resources":[{"name":"group"}],"description":"Grants permission to search for a sub-set of QuickSight groups","accessLevel":"List","resourceTypes":[{"name":"group","required":true}]},"SearchTopics":{"conditionKeys":[],"resources":[{"name":"topic"}],"description":"Grants permission to search for a sub-set of topics","accessLevel":"List","resourceTypes":[{"name":"topic","required":true}]},"SearchUsers":{"conditionKeys":[],"resources":[{"name":"user"}],"description":"Grants permission to search the QuickSight users belonging to this account","accessLevel":"List","resourceTypes":[{"name":"user","required":true}],"permissionOnly":true},"SetGroupMapping":{"conditionKeys":[],"resources":[],"description":"Grants permission to use Amazon QuickSight, in Enterprise edition, to display your Microsoft Active Directory directory groups so that you can choose which ones to map to roles in Amazon QuickSight","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"StartAssetBundleExportJob":{"conditionKeys":[],"resources":[{"name":"assetBundleExportJob"}],"description":"Grants permission to start an asset bundle export job","accessLevel":"Write","resourceTypes":[{"name":"assetBundleExportJob","required":true}]},"StartAssetBundleImportJob":{"conditionKeys":[],"resources":[{"name":"assetBundleImportJob"}],"description":"Grants permission to start an asset bundle import job","accessLevel":"Write","resourceTypes":[{"name":"assetBundleImportJob","required":true}]},"StartDashboardSnapshotJob":{"conditionKeys":[],"resources":[{"name":"dashboardSnapshotJob"}],"description":"Grants permission to start a dashboard snapshot job","accessLevel":"Write","resourceTypes":[{"name":"dashboardSnapshotJob","required":true}]},"StartDashboardSnapshotJobSchedule":{"conditionKeys":[],"resources":[],"description":"Grants permission to start a dashboard snapshot job schedule","accessLevel":"Write","resourceTypes":[]},"Subscribe":{"conditionKeys":["quicksight:DirectoryType","quicksight:Edition"],"resources":[],"description":"Grants permission to subscribe to Amazon QuickSight, and also to allow the user to upgrade the subscription to Enterprise edition","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"actionconnector"},{"name":"analysis"},{"name":"brand"},{"name":"customization"},{"name":"custompermissions"},{"name":"dashboard"},{"name":"dataset"},{"name":"datasource"},{"name":"emailCustomizationTemplate"},{"name":"flow"},{"name":"folder"},{"name":"ingestion"},{"name":"template"},{"name":"theme"},{"name":"topic"},{"name":"vpcconnection"}],"description":"Grants permission to add tags to a QuickSight resource","accessLevel":"Tagging","resourceTypes":[{"name":"actionconnector","required":false},{"name":"analysis","required":false},{"name":"brand","required":false},{"name":"customization","required":false},{"name":"custompermissions","required":false},{"name":"dashboard","required":false},{"name":"dataset","required":false},{"name":"datasource","required":false},{"name":"emailCustomizationTemplate","required":false},{"name":"flow","required":false},{"name":"folder","required":false},{"name":"ingestion","required":false},{"name":"template","required":false},{"name":"theme","required":false},{"name":"topic","required":false},{"name":"vpcconnection","required":false}]},"UnpublishFlow":{"conditionKeys":[],"resources":[{"name":"flow"}],"description":"Grants permission to unpublish a flow","accessLevel":"Write","resourceTypes":[{"name":"flow","required":true}],"permissionOnly":true},"Unsubscribe":{"conditionKeys":[],"resources":[],"description":"Grants permission to unsubscribe from Amazon QuickSight, which permanently deletes all users and their resources from Amazon QuickSight","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"actionconnector"},{"name":"analysis"},{"name":"brand"},{"name":"customization"},{"name":"custompermissions"},{"name":"dashboard"},{"name":"dataset"},{"name":"datasource"},{"name":"emailCustomizationTemplate"},{"name":"flow"},{"name":"folder"},{"name":"ingestion"},{"name":"template"},{"name":"theme"},{"name":"topic"},{"name":"vpcconnection"}],"description":"Grants permission to remove tags from a QuickSight resource","accessLevel":"Tagging","resourceTypes":[{"name":"actionconnector","required":false},{"name":"analysis","required":false},{"name":"brand","required":false},{"name":"customization","required":false},{"name":"custompermissions","required":false},{"name":"dashboard","required":false},{"name":"dataset","required":false},{"name":"datasource","required":false},{"name":"emailCustomizationTemplate","required":false},{"name":"flow","required":false},{"name":"folder","required":false},{"name":"ingestion","required":false},{"name":"template","required":false},{"name":"theme","required":false},{"name":"topic","required":false},{"name":"vpcconnection","required":false}]},"UpdateAccountCustomPermission":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the custom permission associated with an account","accessLevel":"Write","resourceTypes":[]},"UpdateAccountCustomization":{"conditionKeys":[],"resources":[{"name":"customization"}],"description":"Grants permission to update an account customization for QuickSight account or namespace","accessLevel":"Write","resourceTypes":[{"name":"customization","required":true}]},"UpdateAccountSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the administrative account settings for QuickSight account","accessLevel":"Write","resourceTypes":[]},"UpdateActionConnector":{"conditionKeys":[],"resources":[{"name":"actionconnector"}],"description":"Grants permission to update an action connector","accessLevel":"Write","resourceTypes":[{"name":"actionconnector","required":true}]},"UpdateActionConnectorPermissions":{"conditionKeys":[],"resources":[{"name":"actionconnector"}],"description":"Grants permission to update permissions for an action connector","accessLevel":"Permissions management","resourceTypes":[{"name":"actionconnector","required":true}]},"UpdateAgentPermissions":{"conditionKeys":[],"resources":[{"name":"agent"}],"description":"Grants permission to update agent permissions","accessLevel":"Permissions management","resourceTypes":[{"name":"agent","required":true}],"permissionOnly":true},"UpdateAnalysis":{"conditionKeys":[],"resources":[{"name":"analysis"}],"description":"Grants permission to update an analysis","accessLevel":"Write","resourceTypes":[{"name":"analysis","required":true}]},"UpdateAnalysisPermissions":{"conditionKeys":[],"resources":[{"name":"analysis"}],"description":"Grants permission to update permissions for an analysis","accessLevel":"Permissions management","resourceTypes":[{"name":"analysis","required":true}]},"UpdateApplicationWithTokenExchangeGrant":{"conditionKeys":[],"resources":[],"description":"Grants permission to update QuickSight IAM Identity Center application with Token Exchange grant","accessLevel":"Write","resourceTypes":[]},"UpdateBrand":{"conditionKeys":[],"resources":[{"name":"brand"}],"description":"Grants permission to update a brand","accessLevel":"Write","resourceTypes":[{"name":"brand","required":true}]},"UpdateBrandAssignment":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a brand assignment","accessLevel":"Write","resourceTypes":[]},"UpdateBrandPublishedVersion":{"conditionKeys":[],"resources":[{"name":"brand"}],"description":"Grants permission to update the published version of a brand","accessLevel":"Write","resourceTypes":[{"name":"brand","required":true}]},"UpdateChatConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update chat configuration","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"UpdateCustomPermissions":{"conditionKeys":[],"resources":[{"name":"custompermissions"}],"description":"Grants permission to update a QuickSight custom permissions resource","accessLevel":"Write","resourceTypes":[{"name":"custompermissions","required":true}]},"UpdateDashboard":{"conditionKeys":[],"resources":[{"name":"dashboard"}],"description":"Grants permission to update a QuickSight Dashboard","accessLevel":"Write","resourceTypes":[{"name":"dashboard","required":true}]},"UpdateDashboardLinks":{"conditionKeys":[],"resources":[{"name":"dashboard"}],"description":"Grants permission to update a QuickSight Dashboard's links","accessLevel":"Write","resourceTypes":[{"name":"dashboard","required":true}]},"UpdateDashboardPermissions":{"conditionKeys":[],"resources":[{"name":"dashboard"}],"description":"Grants permission to update permissions for a QuickSight Dashboard","accessLevel":"Permissions management","resourceTypes":[{"name":"dashboard","required":true}]},"UpdateDashboardPublishedVersion":{"conditionKeys":[],"resources":[{"name":"dashboard"}],"description":"Grants permission to update a QuickSight Dashboard's Published Version","accessLevel":"Write","resourceTypes":[{"name":"dashboard","required":true}]},"UpdateDashboardsQAConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update dashboards qa configuration","accessLevel":"Write","resourceTypes":[]},"UpdateDataSet":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"dataset"},{"name":"datasource"}],"description":"Grants permission to update a dataset","accessLevel":"Write","resourceTypes":[{"name":"dataset","required":true},{"name":"datasource","required":false}],"dependentActions":["quicksight:PassDataSource"]},"UpdateDataSetPermissions":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"dataset"}],"description":"Grants permission to update the resource policy of a dataset","accessLevel":"Permissions management","resourceTypes":[{"name":"dataset","required":true}]},"UpdateDataSource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"datasource"}],"description":"Grants permission to update a data source","accessLevel":"Write","resourceTypes":[{"name":"datasource","required":true}],"dependentActions":["iam:PassRole"]},"UpdateDataSourcePermissions":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"datasource"}],"description":"Grants permission to update the resource policy of a data source","accessLevel":"Permissions management","resourceTypes":[{"name":"datasource","required":true}]},"UpdateDefaultQBusinessApplication":{"conditionKeys":[],"resources":[],"description":"Grants permission to update linked QBusiness application Id for QuickSight account","accessLevel":"Write","resourceTypes":[]},"UpdateEmailCustomizationTemplate":{"conditionKeys":[],"resources":[{"name":"emailCustomizationTemplate"}],"description":"Grants permission to update a QuickSight email customization template","accessLevel":"Write","resourceTypes":[{"name":"emailCustomizationTemplate","required":true}],"permissionOnly":true},"UpdateExtensionAccess":{"conditionKeys":[],"resources":[{"name":"extensionaccess"}],"description":"Grants permission to update an extension access","accessLevel":"Write","resourceTypes":[{"name":"extensionaccess","required":true}],"permissionOnly":true},"UpdateFlowPermissions":{"conditionKeys":[],"resources":[{"name":"flow"}],"description":"Grants permission to update permissions for a flow","accessLevel":"Permissions management","resourceTypes":[{"name":"flow","required":true}]},"UpdateFolder":{"conditionKeys":[],"resources":[{"name":"folder"}],"description":"Grants permission to update a QuickSight Folder","accessLevel":"Write","resourceTypes":[{"name":"folder","required":true}]},"UpdateFolderPermissions":{"conditionKeys":[],"resources":[{"name":"folder"}],"description":"Grants permission to update permissions for a QuickSight Folder","accessLevel":"Permissions management","resourceTypes":[{"name":"folder","required":true}]},"UpdateGroup":{"conditionKeys":[],"resources":[{"name":"group"}],"description":"Grants permission to change group description","accessLevel":"Write","resourceTypes":[{"name":"group","required":true}]},"UpdateIAMPolicyAssignment":{"conditionKeys":[],"resources":[{"name":"assignment"}],"description":"Grants permission to update an existing assignment","accessLevel":"Write","resourceTypes":[{"name":"assignment","required":true}]},"UpdateIdentityPropagationConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to add and update AWS services for trusted identity propagation in QuickSight","accessLevel":"Write","resourceTypes":[]},"UpdateIpRestriction":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the IP restrictions for QuickSight account","accessLevel":"Write","resourceTypes":[]},"UpdateKeyRegistration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update QuickSight key registration","accessLevel":"Write","resourceTypes":[]},"UpdatePublicSharingSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to enable or disable public sharing on an account","accessLevel":"Write","resourceTypes":[]},"UpdateQPersonalizationConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a personalization configuration","accessLevel":"Write","resourceTypes":[]},"UpdateQuickIndexCapacity":{"conditionKeys":[],"resources":[],"description":"Grants permission to update index capacity","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"UpdateQuickSightQSearchConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update QuickSight Q Search configuration","accessLevel":"Write","resourceTypes":[]},"UpdateRefreshSchedule":{"conditionKeys":[],"resources":[{"name":"refreshschedule"}],"description":"Grants permission to update a refresh schedule for a dataset","accessLevel":"Write","resourceTypes":[{"name":"refreshschedule","required":true}]},"UpdateResourcePermissions":{"conditionKeys":[],"resources":[],"description":"Grants permission to update resource-level permissions in QuickSight","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"UpdateRoleCustomPermission":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the custom permission associated with a role","accessLevel":"Write","resourceTypes":[]},"UpdateSPICECapacityConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update QuickSight SPICE capacity configuration","accessLevel":"Write","resourceTypes":[]},"UpdateSelfUpgrade":{"conditionKeys":[],"resources":[{"name":"user"}],"description":"Grants permission to take action on pending self upgrade requests associated with an account","accessLevel":"Write","resourceTypes":[{"name":"user","required":true}]},"UpdateSelfUpgradeConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the administrative self upgrade configuration associated with an account","accessLevel":"Write","resourceTypes":[]},"UpdateTemplate":{"conditionKeys":[],"resources":[{"name":"template"}],"description":"Grants permission to update a template","accessLevel":"Write","resourceTypes":[{"name":"template","required":true}]},"UpdateTemplateAlias":{"conditionKeys":[],"resources":[{"name":"template"}],"description":"Grants permission to update a template alias","accessLevel":"Write","resourceTypes":[{"name":"template","required":true}]},"UpdateTemplatePermissions":{"conditionKeys":[],"resources":[{"name":"template"}],"description":"Grants permission to update permissions for a template","accessLevel":"Permissions management","resourceTypes":[{"name":"template","required":true}]},"UpdateTheme":{"conditionKeys":[],"resources":[{"name":"theme"}],"description":"Grants permission to update a theme","accessLevel":"Write","resourceTypes":[{"name":"theme","required":true}]},"UpdateThemeAlias":{"conditionKeys":[],"resources":[{"name":"theme"}],"description":"Grants permission to update the alias of a theme","accessLevel":"Write","resourceTypes":[{"name":"theme","required":true}]},"UpdateThemePermissions":{"conditionKeys":[],"resources":[{"name":"theme"}],"description":"Grants permission to update permissions for a theme","accessLevel":"Permissions management","resourceTypes":[{"name":"theme","required":true}]},"UpdateTopic":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"dataset"},{"name":"topic"}],"description":"Grants permission to update a topic","accessLevel":"Write","resourceTypes":[{"name":"topic","required":true},{"name":"dataset","required":false}],"dependentActions":["quicksight:PassDataSet"]},"UpdateTopicPermissions":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"topic"}],"description":"Grants permission to update the resource policy of a topic","accessLevel":"Permissions management","resourceTypes":[{"name":"topic","required":true}]},"UpdateTopicRefreshSchedule":{"conditionKeys":[],"resources":[{"name":"topic"}],"description":"Grants permission to update a refresh schedule for a topic","accessLevel":"Write","resourceTypes":[{"name":"topic","required":true}]},"UpdateUser":{"conditionKeys":[],"resources":[{"name":"user"}],"description":"Grants permission to update an Amazon QuickSight user","accessLevel":"Write","resourceTypes":[{"name":"user","required":true}]},"UpdateUserCustomPermission":{"conditionKeys":[],"resources":[{"name":"user"}],"description":"Grants permission to update the custom permission associated with a user","accessLevel":"Write","resourceTypes":[{"name":"user","required":true}]},"UpdateVPCConnection":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"vpcconnection"}],"description":"Grants permission to update a vpc connection","accessLevel":"Write","resourceTypes":[{"name":"vpcconnection","required":true}],"dependentActions":["iam:PassRole"]}},"resources":[{"name":"account","arnFormats":["arn:${Partition}:quicksight:${Region}:${Account}:account/${ResourceId}"],"conditionKeys":[]},{"name":"actionconnector","arnFormats":["arn:${Partition}:quicksight:${Region}:${Account}:action-connector/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"agent","arnFormats":["arn:${Partition}:quicksight:${Region}:${Account}:agent/${ResourceId}"],"conditionKeys":[]},{"name":"analysis","arnFormats":["arn:${Partition}:quicksight:${Region}:${Account}:analysis/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"assetBundleExportJob","arnFormats":["arn:${Partition}:quicksight:${Region}:${Account}:asset-bundle-export-job/${ResourceId}"],"conditionKeys":[]},{"name":"assetBundleImportJob","arnFormats":["arn:${Partition}:quicksight:${Region}:${Account}:asset-bundle-import-job/${ResourceId}"],"conditionKeys":[]},{"name":"assignment","arnFormats":["arn:${Partition}:quicksight::${Account}:assignment/${ResourceId}"],"conditionKeys":[]},{"name":"brand","arnFormats":["arn:${Partition}:quicksight:${Region}:${Account}:brand/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"customization","arnFormats":["arn:${Partition}:quicksight:${Region}:${Account}:customization/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"custompermissions","arnFormats":["arn:${Partition}:quicksight:${Region}:${Account}:custompermissions/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"dashboard","arnFormats":["arn:${Partition}:quicksight:${Region}:${Account}:dashboard/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"dashboardSnapshotJob","arnFormats":["arn:${Partition}:quicksight:${Region}:${Account}:dashboard/${DashboardId}/snapshot-job/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"dataset","arnFormats":["arn:${Partition}:quicksight:${Region}:${Account}:dataset/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"datasource","arnFormats":["arn:${Partition}:quicksight:${Region}:${Account}:datasource/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"emailCustomizationTemplate","arnFormats":["arn:${Partition}:quicksight:${Region}:${Account}:email-customization-template/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"extensionaccess","arnFormats":["arn:${Partition}:quicksight:${Region}:${Account}:extension-access/${ResourceId}"],"conditionKeys":[]},{"name":"flow","arnFormats":["arn:${Partition}:quicksight:${Region}:${Account}:flow/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"folder","arnFormats":["arn:${Partition}:quicksight:${Region}:${Account}:folder/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"group","arnFormats":["arn:${Partition}:quicksight:${Region}:${Account}:group/${ResourceId}"],"conditionKeys":[]},{"name":"ingestion","arnFormats":["arn:${Partition}:quicksight:${Region}:${Account}:dataset/${DatasetId}/ingestion/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"namespace","arnFormats":["arn:${Partition}:quicksight:${Region}:${Account}:namespace/${ResourceId}"],"conditionKeys":[]},{"name":"refreshschedule","arnFormats":["arn:${Partition}:quicksight:${Region}:${Account}:dataset/${DatasetId}/refresh-schedule/${ResourceId}"],"conditionKeys":[]},{"name":"template","arnFormats":["arn:${Partition}:quicksight:${Region}:${Account}:template/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"theme","arnFormats":["arn:${Partition}:quicksight:${Region}:${Account}:theme/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"topic","arnFormats":["arn:${Partition}:quicksight:${Region}:${Account}:topic/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"user","arnFormats":["arn:${Partition}:quicksight:${Region}:${Account}:user/${ResourceId}"],"conditionKeys":[]},{"name":"vpcconnection","arnFormats":["arn:${Partition}:quicksight:${Region}:${Account}:vpcConnection/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by tag keys"},"quicksight:AllowedEmbeddingDomains":{"types":["ArrayOfString"],"description":"Filters access by the allowed embedding domains"},"quicksight:DirectoryType":{"types":["String"],"description":"Filters access by the user management options"},"quicksight:Edition":{"types":["String"],"description":"Filters access by the edition of QuickSight"},"quicksight:Group":{"types":["ARN"],"description":"Filters access by QuickSight group ARN"},"quicksight:IamArn":{"types":["ARN"],"description":"Filters access by IAM user or role ARN"},"quicksight:KmsKeyArns":{"types":["ArrayOfARN"],"description":"Filters access by KMS key ARNs"},"quicksight:SessionName":{"types":["String"],"description":"Filters access by session name"},"quicksight:UserName":{"types":["String"],"description":"Filters access by user name"}}}
@@ -0,0 +1 @@
1
+ {"name":"ram","actions":{"AcceptResourceShareInvitation":{"conditionKeys":["ram:ResourceShareName","ram:ShareOwnerAccountId"],"resources":[{"name":"resource-share-invitation"}],"description":"Grants permission to accept the specified resource share invitation","accessLevel":"Write","resourceTypes":[{"name":"resource-share-invitation","required":true}]},"AssociateResourceShare":{"conditionKeys":["aws:ResourceTag/${TagKey}","ram:AllowsExternalPrincipals","ram:Principal","ram:RequestedResourceType","ram:ResourceArn","ram:ResourceShareName","ram:ResourceTag/${TagKey}","ram:RetainSharingOnAccountLeaveOrganization"],"resources":[{"name":"resource-share"}],"description":"Grants permission to associate resource(s) and/or principal(s) to a resource share","accessLevel":"Write","resourceTypes":[{"name":"resource-share","required":true}]},"AssociateResourceSharePermission":{"conditionKeys":[],"resources":[{"name":"customer-managed-permission"},{"name":"permission"},{"name":"resource-share"}],"description":"Grants permission to associate a Permission with a Resource Share","accessLevel":"Write","resourceTypes":[{"name":"customer-managed-permission","required":true},{"name":"permission","required":true},{"name":"resource-share","required":true}]},"CreatePermission":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","ram:PermissionArn","ram:PermissionResourceType"],"resources":[],"description":"Grants permission to create a Permission that can be associated to a Resource Share","accessLevel":"Write","resourceTypes":[],"dependentActions":["ram:TagResource"]},"CreatePermissionVersion":{"conditionKeys":["ram:PermissionArn","ram:PermissionResourceType"],"resources":[{"name":"customer-managed-permission"}],"description":"Grants permission to create a new version of a Permission that can be associated to a Resource Share","accessLevel":"Write","resourceTypes":[{"name":"customer-managed-permission","required":true}]},"CreateResourceShare":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","ram:AllowsExternalPrincipals","ram:Principal","ram:RequestedAllowsExternalPrincipals","ram:RequestedResourceType","ram:ResourceArn","ram:RetainSharingOnAccountLeaveOrganization"],"resources":[],"description":"Grants permission to create a resource share with provided resource(s) and/or principal(s)","accessLevel":"Write","resourceTypes":[]},"DeletePermission":{"conditionKeys":["aws:ResourceTag/${TagKey}","ram:PermissionArn","ram:PermissionResourceType"],"resources":[{"name":"customer-managed-permission"}],"description":"Grants permission to delete a specified Permission","accessLevel":"Write","resourceTypes":[{"name":"customer-managed-permission","required":true}]},"DeletePermissionVersion":{"conditionKeys":["ram:PermissionArn","ram:PermissionResourceType"],"resources":[{"name":"customer-managed-permission"}],"description":"Grants permission to delete a specified version of a permission","accessLevel":"Write","resourceTypes":[{"name":"customer-managed-permission","required":true}]},"DeleteResourceShare":{"conditionKeys":["aws:ResourceTag/${TagKey}","ram:AllowsExternalPrincipals","ram:ResourceShareName","ram:ResourceTag/${TagKey}","ram:RetainSharingOnAccountLeaveOrganization"],"resources":[{"name":"resource-share"}],"description":"Grants permission to delete resource share","accessLevel":"Write","resourceTypes":[{"name":"resource-share","required":true}]},"DisassociateResourceShare":{"conditionKeys":["aws:ResourceTag/${TagKey}","ram:AllowsExternalPrincipals","ram:Principal","ram:RequestedResourceType","ram:ResourceArn","ram:ResourceShareName","ram:ResourceTag/${TagKey}","ram:RetainSharingOnAccountLeaveOrganization"],"resources":[{"name":"resource-share"}],"description":"Grants permission to disassociate resource(s) and/or principal(s) from a resource share","accessLevel":"Write","resourceTypes":[{"name":"resource-share","required":true}]},"DisassociateResourceSharePermission":{"conditionKeys":[],"resources":[{"name":"customer-managed-permission"},{"name":"permission"},{"name":"resource-share"}],"description":"Grants permission to disassociate a Permission from a Resource Share","accessLevel":"Write","resourceTypes":[{"name":"customer-managed-permission","required":true},{"name":"permission","required":true},{"name":"resource-share","required":true}]},"EnableSharingWithAwsOrganization":{"conditionKeys":[],"resources":[],"description":"Grants permission to access customer's organization and create a SLR in the customer's account","accessLevel":"Permissions management","resourceTypes":[],"dependentActions":["iam:CreateServiceLinkedRole","organizations:DescribeOrganization","organizations:EnableAWSServiceAccess"]},"GetPermission":{"conditionKeys":["ram:PermissionArn"],"resources":[{"name":"customer-managed-permission"},{"name":"permission"}],"description":"Grants permission to get the contents of an AWS RAM permission","accessLevel":"Read","resourceTypes":[{"name":"customer-managed-permission","required":true},{"name":"permission","required":true}]},"GetResourcePolicies":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the policies for the specified resources that you own and have shared","accessLevel":"Read","resourceTypes":[]},"GetResourceShareAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a set of resource share associations from a provided list or with a specified status of the specified type","accessLevel":"Read","resourceTypes":[]},"GetResourceShareInvitations":{"conditionKeys":[],"resources":[],"description":"Grants permission to get resource share invitations by the specified invitation arn or those for the resource share","accessLevel":"Read","resourceTypes":[]},"GetResourceShares":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to get a set of resource shares from a provided list or with a specified status","accessLevel":"Read","resourceTypes":[]},"ListPendingInvitationResources":{"conditionKeys":["ram:ResourceShareName"],"resources":[{"name":"resource-share-invitation"}],"description":"Grants permission to list the resources in a resource share that is shared with you but that the invitation is still pending for","accessLevel":"Read","resourceTypes":[{"name":"resource-share-invitation","required":true}]},"ListPermissionAssociations":{"conditionKeys":["ram:PermissionArn","ram:PermissionResourceType"],"resources":[{"name":"customer-managed-permission"},{"name":"permission"}],"description":"Grants permission to list information about the permission and any associations","accessLevel":"List","resourceTypes":[{"name":"customer-managed-permission","required":true},{"name":"permission","required":true}]},"ListPermissionVersions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the versions of an AWS RAM permission","accessLevel":"List","resourceTypes":[]},"ListPermissions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the AWS RAM permissions","accessLevel":"List","resourceTypes":[]},"ListPrincipals":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the principals that you have shared resources with or that have shared resources with you","accessLevel":"List","resourceTypes":[]},"ListReplacePermissionAssociationsWork":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the status of the asynchronous permission replacement","accessLevel":"List","resourceTypes":[]},"ListResourceSharePermissions":{"conditionKeys":["aws:ResourceTag/${TagKey}","ram:AllowsExternalPrincipals","ram:ResourceShareName","ram:RetainSharingOnAccountLeaveOrganization"],"resources":[{"name":"resource-share"}],"description":"Grants permission to list the Permissions associated with a Resource Share","accessLevel":"List","resourceTypes":[{"name":"resource-share","required":true}]},"ListResourceTypes":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the shareable resource types supported by AWS RAM","accessLevel":"List","resourceTypes":[]},"ListResources":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the resources that you added to resource shares or the resources that are shared with you","accessLevel":"List","resourceTypes":[]},"ListSourceAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list source associations for resource shares","accessLevel":"List","resourceTypes":[]},"PromotePermissionCreatedFromPolicy":{"conditionKeys":["ram:PermissionArn","ram:PermissionResourceType"],"resources":[{"name":"customer-managed-permission"}],"description":"Grants permission to create a separate, fully manageable customer managed permission","accessLevel":"Write","resourceTypes":[{"name":"customer-managed-permission","required":true}]},"PromoteResourceShareCreatedFromPolicy":{"conditionKeys":[],"resources":[{"name":"resource-share"}],"description":"Grants permission to promote the specified resource share","accessLevel":"Write","resourceTypes":[{"name":"resource-share","required":true}]},"RejectResourceShareInvitation":{"conditionKeys":["ram:ResourceShareName","ram:ShareOwnerAccountId"],"resources":[{"name":"resource-share-invitation"}],"description":"Grants permission to reject the specified resource share invitation","accessLevel":"Write","resourceTypes":[{"name":"resource-share-invitation","required":true}]},"ReplacePermissionAssociations":{"conditionKeys":["ram:PermissionArn","ram:PermissionResourceType"],"resources":[{"name":"customer-managed-permission"},{"name":"permission"}],"description":"Grants permission to update all resource shares to a new permission","accessLevel":"Write","resourceTypes":[{"name":"customer-managed-permission","required":true},{"name":"permission","required":true}]},"SetDefaultPermissionVersion":{"conditionKeys":["ram:PermissionArn","ram:PermissionResourceType"],"resources":[{"name":"customer-managed-permission"}],"description":"Grants permission to specify a version number as the default version for the respective customer managed permission","accessLevel":"Write","resourceTypes":[{"name":"customer-managed-permission","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"customer-managed-permission"},{"name":"resource-share"}],"description":"Grants permission to tag the specified resource share or permission","accessLevel":"Tagging","resourceTypes":[{"name":"customer-managed-permission","required":false},{"name":"resource-share","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"customer-managed-permission"},{"name":"resource-share"}],"description":"Grants permission to untag the specified resource share or permission","accessLevel":"Tagging","resourceTypes":[{"name":"customer-managed-permission","required":false},{"name":"resource-share","required":false}]},"UpdateResourceShare":{"conditionKeys":["aws:ResourceTag/${TagKey}","ram:AllowsExternalPrincipals","ram:RequestedAllowsExternalPrincipals","ram:ResourceShareName","ram:ResourceTag/${TagKey}","ram:RetainSharingOnAccountLeaveOrganization"],"resources":[{"name":"resource-share"}],"description":"Grants permission to update attributes of the resource share","accessLevel":"Write","resourceTypes":[{"name":"resource-share","required":true}]}},"resources":[{"name":"customer-managed-permission","arnFormats":["arn:${Partition}:ram:${Region}:${Account}:permission/${ResourcePath}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ram:PermissionArn","ram:PermissionResourceType"]},{"name":"permission","arnFormats":["arn:${Partition}:ram::${Account}:permission/${ResourcePath}"],"conditionKeys":["ram:PermissionArn","ram:PermissionResourceType"]},{"name":"resource-share","arnFormats":["arn:${Partition}:ram:${Region}:${Account}:resource-share/${ResourcePath}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ram:AllowsExternalPrincipals","ram:ResourceShareName"]},{"name":"resource-share-invitation","arnFormats":["arn:${Partition}:ram:${Region}:${Account}:resource-share-invitation/${ResourcePath}"],"conditionKeys":["ram:ShareOwnerAccountId"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request when creating or tagging a resource share. If users don't pass these specific tags, or if they don't specify tags at all, the request fails"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed when creating or tagging a resource share"},"ram:AllowsExternalPrincipals":{"types":["Bool"],"description":"Filters access by resource shares that allow or deny sharing with external principals. For example, specify true if the action can only be performed on resource shares that allow sharing with external principals. External principals are AWS accounts that are outside of its AWS organization"},"ram:PermissionArn":{"types":["ARN"],"description":"Filters access by the specified Permission ARN"},"ram:PermissionResourceType":{"types":["String"],"description":"Filters access by permissions of specified resource type"},"ram:Principal":{"types":["String"],"description":"Filters access by format of the specified principal"},"ram:RequestedAllowsExternalPrincipals":{"types":["Bool"],"description":"Filters access by the specified value for 'allowExternalPrincipals'. External principals are AWS accounts that are outside of its AWS Organization"},"ram:RequestedResourceType":{"types":["String"],"description":"Filters access by the specified resource type"},"ram:ResourceArn":{"types":["ARN"],"description":"Filters access by the specified ARN"},"ram:ResourceShareName":{"types":["String"],"description":"Filters access by a resource share with the specified name"},"ram:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"ram:RetainSharingOnAccountLeaveOrganization":{"types":["Bool"],"description":"Filters access by RetainSharingOnAccountLeaveOrganization value within ResourceShareConfiguration that is set on resource share"},"ram:ShareOwnerAccountId":{"types":["String"],"description":"Filters access by resource shares owned by a specific account. For example, you can use this condition key to specify which resource share invitations can be accepted or rejected based on the resource share owner's account ID"}}}
@@ -0,0 +1 @@
1
+ {"name":"rbin","actions":{"CreateRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","rbin:Request/ResourceType"],"resources":[{"name":"rule"}],"description":"Grants permission to create a Recycle Bin retention rule","accessLevel":"Write","resourceTypes":[{"name":"rule","required":true}]},"DeleteRule":{"conditionKeys":["aws:ResourceTag/${TagKey}","rbin:Attribute/ResourceType"],"resources":[{"name":"rule"}],"description":"Grants permission to delete a Recycle Bin retention rule","accessLevel":"Write","resourceTypes":[{"name":"rule","required":true}]},"GetRule":{"conditionKeys":["aws:ResourceTag/${TagKey}","rbin:Attribute/ResourceType"],"resources":[{"name":"rule"}],"description":"Grants permission to get detailed information about a Recycle Bin retention rule","accessLevel":"Read","resourceTypes":[{"name":"rule","required":true}]},"ListRules":{"conditionKeys":["rbin:Request/ResourceType"],"resources":[],"description":"Grants permission to list the Recycle Bin retention rules in the Region","accessLevel":"Read","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","rbin:Attribute/ResourceType"],"resources":[{"name":"rule"}],"description":"Grants permission to list the tags associated with a resource","accessLevel":"Read","resourceTypes":[{"name":"rule","required":true}]},"LockRule":{"conditionKeys":["aws:ResourceTag/${TagKey}","rbin:Attribute/ResourceType"],"resources":[{"name":"rule"}],"description":"Grants permission to lock an existing Recycle Bin retention rule","accessLevel":"Write","resourceTypes":[{"name":"rule","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","rbin:Attribute/ResourceType"],"resources":[{"name":"rule"}],"description":"Grants permission to add or update tags of a resource","accessLevel":"Tagging","resourceTypes":[{"name":"rule","required":true}]},"UnlockRule":{"conditionKeys":["aws:ResourceTag/${TagKey}","rbin:Attribute/ResourceType"],"resources":[{"name":"rule"}],"description":"Grants permission to unlock an existing Recycle Bin retention rule","accessLevel":"Write","resourceTypes":[{"name":"rule","required":true}]},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys","rbin:Attribute/ResourceType"],"resources":[{"name":"rule"}],"description":"Grants permission to remove tags associated with a resource","accessLevel":"Tagging","resourceTypes":[{"name":"rule","required":true}]},"UpdateRule":{"conditionKeys":["aws:ResourceTag/${TagKey}","rbin:Attribute/ResourceType"],"resources":[{"name":"rule"}],"description":"Grants permission to update an existing Recycle Bin retention rule","accessLevel":"Write","resourceTypes":[{"name":"rule","required":true}]}},"resources":[{"name":"rule","arnFormats":["arn:${Partition}:rbin:${Region}:${Account}:rule/${ResourceName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag's key and value in a request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys in a request"},"rbin:Attribute/ResourceType":{"types":["String"],"description":"Filters access by the resource type of the existing rule"},"rbin:Request/ResourceType":{"types":["String"],"description":"Filters access by the resource type in a request"}}}
@@ -0,0 +1 @@
1
+ {"name":"rds-data","actions":{"BatchExecuteStatement":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"cluster"}],"description":"Grants permission to run a batch SQL statement over an array of data","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"BeginTransaction":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"cluster"}],"description":"Grants permission to start a SQL transaction","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"CommitTransaction":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"cluster"}],"description":"Grants permission to end a SQL transaction started with the BeginTransaction operation and commits the changes","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}],"dependentActions":["rds-data:BeginTransaction"]},"ExecuteSql":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"cluster"}],"description":"Grants permission to run one or more SQL statements. This operation is deprecated. Use the BatchExecuteStatement or ExecuteStatement operation","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"ExecuteStatement":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"cluster"}],"description":"Grants permission to run a SQL statement against a database","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}]},"RollbackTransaction":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"cluster"}],"description":"Grants permission to perform a rollback of a transaction. Rolling back a transaction cancels its changes","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true}],"dependentActions":["rds-data:BeginTransaction"]}},"resources":[{"name":"cluster","arnFormats":["arn:${Partition}:rds:${Region}:${Account}:cluster:${DbClusterInstanceName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"]}],"conditionKeys":{"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys associated with the resource"}}}
@@ -0,0 +1 @@
1
+ {"name":"rds-db","actions":{"connect":{"conditionKeys":[],"resources":[{"name":"db-user"}],"description":"Allows IAM role or user to connect to RDS database","accessLevel":"Permissions management","resourceTypes":[{"name":"db-user","required":true}]}},"resources":[{"name":"db-user","arnFormats":["arn:${Partition}:rds-db:${Region}:${Account}:dbuser:${DbiResourceId}/${DbUserName}"],"conditionKeys":[]}],"conditionKeys":{}}