aws-iam-ls 0.0.0

package/src/data/servicereference/services/route53resolver.json

@@ -0,0 +1 @@
+{"name":"route53resolver","actions":{"AssociateFirewallRuleGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"firewall-rule-group-association"}],"description":"Grants permission to associate an Amazon VPC with a specified firewall rule group","accessLevel":"Write","resourceTypes":[{"name":"firewall-rule-group-association","required":true}],"dependentActions":["ec2:DescribeVpcs"]},"AssociateResolverEndpointIpAddress":{"conditionKeys":[],"resources":[{"name":"resolver-endpoint"}],"description":"Grants permission to associate a specified IP address with a Resolver endpoint. This is an IP address that DNS queries pass through on the way to your network (outbound) or your VPCs (inbound)","accessLevel":"Write","resourceTypes":[{"name":"resolver-endpoint","required":true}],"dependentActions":["ec2:CreateNetworkInterface","ec2:DescribeNetworkInterfaces","ec2:DescribeSubnets"]},"AssociateResolverQueryLogConfig":{"conditionKeys":[],"resources":[{"name":"resolver-query-log-config"}],"description":"Grants permission to associate an Amazon VPC with a specified query logging configuration","accessLevel":"Write","resourceTypes":[{"name":"resolver-query-log-config","required":true}],"dependentActions":["ec2:DescribeVpcs"]},"AssociateResolverRule":{"conditionKeys":[],"resources":[{"name":"resolver-rule"}],"description":"Grants permission to associate a specified Resolver rule with a specified VPC","accessLevel":"Write","resourceTypes":[{"name":"resolver-rule","required":true}],"dependentActions":["ec2:DescribeVpcs"]},"CreateFirewallDomainList":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"firewall-domain-list"}],"description":"Grants permission to create a Firewall domain list","accessLevel":"Write","resourceTypes":[{"name":"firewall-domain-list","required":true}]},"CreateFirewallRule":{"conditionKeys":[],"resources":[{"name":"firewall-domain-list"},{"name":"firewall-rule-group"}],"description":"Grants permission to create a Firewall rule within a Firewall rule group","accessLevel":"Write","resourceTypes":[{"name":"firewall-domain-list","required":true},{"name":"firewall-rule-group","required":true}]},"CreateFirewallRuleGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"firewall-rule-group"}],"description":"Grants permission to create a Firewall rule group","accessLevel":"Write","resourceTypes":[{"name":"firewall-rule-group","required":true}]},"CreateOutpostResolver":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"outpost-resolver"}],"description":"Grants permission to create a Route 53 Resolver on Outposts","accessLevel":"Write","resourceTypes":[{"name":"outpost-resolver","required":true}],"dependentActions":["outposts:GetOutpost"]},"CreateResolverEndpoint":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"resolver-endpoint"}],"description":"Grants permission to create a Resolver endpoint. There are two types of Resolver endpoints, inbound and outbound","accessLevel":"Write","resourceTypes":[{"name":"resolver-endpoint","required":true}],"dependentActions":["ec2:CreateNetworkInterface","ec2:DescribeNetworkInterfaces","ec2:DescribeSecurityGroups","ec2:DescribeSubnets","ec2:DescribeVpcs"]},"CreateResolverQueryLogConfig":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"resolver-query-log-config"}],"description":"Grants permission to create a Resolver query logging configuration, which defines where you want Resolver to save DNS query logs that originate in your VPCs","accessLevel":"Write","resourceTypes":[{"name":"resolver-query-log-config","required":true}]},"CreateResolverRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"resolver-rule"}],"description":"Grants permission to define how to route queries originating from your VPC out of the VPC","accessLevel":"Write","resourceTypes":[{"name":"resolver-rule","required":true}]},"DeleteFirewallDomainList":{"conditionKeys":[],"resources":[{"name":"firewall-domain-list"}],"description":"Grants permission to delete a Firewall domain list","accessLevel":"Write","resourceTypes":[{"name":"firewall-domain-list","required":true}]},"DeleteFirewallRule":{"conditionKeys":[],"resources":[{"name":"firewall-domain-list"},{"name":"firewall-rule-group"}],"description":"Grants permission to delete a Firewall rule within a Firewall rule group","accessLevel":"Write","resourceTypes":[{"name":"firewall-domain-list","required":true},{"name":"firewall-rule-group","required":true}]},"DeleteFirewallRuleGroup":{"conditionKeys":[],"resources":[{"name":"firewall-rule-group"}],"description":"Grants permission to delete a Firewall rule group","accessLevel":"Write","resourceTypes":[{"name":"firewall-rule-group","required":true}]},"DeleteOutpostResolver":{"conditionKeys":[],"resources":[{"name":"outpost-resolver"}],"description":"Grants permission to delete a Route 53 Resolver on Outposts","accessLevel":"Write","resourceTypes":[{"name":"outpost-resolver","required":true}]},"DeleteResolverEndpoint":{"conditionKeys":[],"resources":[{"name":"resolver-endpoint"}],"description":"Grants permission to delete a Resolver endpoint. The effect of deleting a Resolver endpoint depends on whether it's an inbound or an outbound endpoint","accessLevel":"Write","resourceTypes":[{"name":"resolver-endpoint","required":true}],"dependentActions":["ec2:DeleteNetworkInterface","ec2:DescribeNetworkInterfaces"]},"DeleteResolverQueryLogConfig":{"conditionKeys":[],"resources":[{"name":"resolver-query-log-config"}],"description":"Grants permission to delete a Resolver query logging configuration","accessLevel":"Write","resourceTypes":[{"name":"resolver-query-log-config","required":true}]},"DeleteResolverRule":{"conditionKeys":[],"resources":[{"name":"resolver-rule"}],"description":"Grants permission to delete a Resolver rule","accessLevel":"Write","resourceTypes":[{"name":"resolver-rule","required":true}]},"DisassociateFirewallRuleGroup":{"conditionKeys":[],"resources":[{"name":"firewall-rule-group-association"}],"description":"Grants permission to remove the association between a specified Firewall rule group and a specified VPC","accessLevel":"Write","resourceTypes":[{"name":"firewall-rule-group-association","required":true}]},"DisassociateResolverEndpointIpAddress":{"conditionKeys":[],"resources":[{"name":"resolver-endpoint"}],"description":"Grants permission to remove a specified IP address from a Resolver endpoint. This is an IP address that DNS queries pass through on the way to your network (outbound) or your VPCs (inbound)","accessLevel":"Write","resourceTypes":[{"name":"resolver-endpoint","required":true}],"dependentActions":["ec2:DeleteNetworkInterface","ec2:DescribeNetworkInterfaces"]},"DisassociateResolverQueryLogConfig":{"conditionKeys":[],"resources":[{"name":"resolver-query-log-config"}],"description":"Grants permission to remove the association between a specified Resolver query logging configuration and a specified VPC","accessLevel":"Write","resourceTypes":[{"name":"resolver-query-log-config","required":true}]},"DisassociateResolverRule":{"conditionKeys":[],"resources":[{"name":"resolver-rule"}],"description":"Grants permission to remove the association between a specified Resolver rule and a specified VPC","accessLevel":"Write","resourceTypes":[{"name":"resolver-rule","required":true}]},"GetFirewallConfig":{"conditionKeys":[],"resources":[{"name":"firewall-config"}],"description":"Grants permission to get information about a specified Firewall config","accessLevel":"Read","resourceTypes":[{"name":"firewall-config","required":true}],"dependentActions":["ec2:DescribeVpcs"]},"GetFirewallDomainList":{"conditionKeys":[],"resources":[{"name":"firewall-domain-list"}],"description":"Grants permission to get information about a specified Firewall domain list","accessLevel":"Read","resourceTypes":[{"name":"firewall-domain-list","required":true}]},"GetFirewallRuleGroup":{"conditionKeys":[],"resources":[{"name":"firewall-rule-group"}],"description":"Grants permission to get information about a specified Firewall rule group","accessLevel":"Read","resourceTypes":[{"name":"firewall-rule-group","required":true}]},"GetFirewallRuleGroupAssociation":{"conditionKeys":[],"resources":[{"name":"firewall-rule-group-association"}],"description":"Grants permission to get information about an association between a specified Firewall rule group and a VPC","accessLevel":"Read","resourceTypes":[{"name":"firewall-rule-group-association","required":true}]},"GetFirewallRuleGroupPolicy":{"conditionKeys":[],"resources":[{"name":"firewall-rule-group"}],"description":"Grants permission to get information about a specified Firewall rule group policy, which specifies the Firewall rule group operations and resources that you want to allow another AWS account to use","accessLevel":"Read","resourceTypes":[{"name":"firewall-rule-group","required":true}]},"GetOutpostResolver":{"conditionKeys":[],"resources":[{"name":"outpost-resolver"}],"description":"Grants permission to get information about a specified Route 53 Resolver on Outposts","accessLevel":"Read","resourceTypes":[{"name":"outpost-resolver","required":true}]},"GetResolverConfig":{"conditionKeys":[],"resources":[{"name":"resolver-config"}],"description":"Grants permission to get the Resolver Config status within the specified resource","accessLevel":"Read","resourceTypes":[{"name":"resolver-config","required":true}],"dependentActions":["ec2:DescribeVpcs"]},"GetResolverDnssecConfig":{"conditionKeys":[],"resources":[{"name":"resolver-dnssec-config"}],"description":"Grants permission to get the DNSSEC validation support status for DNS queries within the specified resource","accessLevel":"Read","resourceTypes":[{"name":"resolver-dnssec-config","required":true}]},"GetResolverEndpoint":{"conditionKeys":[],"resources":[{"name":"resolver-endpoint"}],"description":"Grants permission to get information about a specified Resolver endpoint, such as whether it's an inbound or an outbound endpoint, and the IP addresses in your VPC that DNS queries are forwarded to on the way into or out of your VPC","accessLevel":"Read","resourceTypes":[{"name":"resolver-endpoint","required":true}]},"GetResolverQueryLogConfig":{"conditionKeys":[],"resources":[{"name":"resolver-query-log-config"}],"description":"Grants permission to get information about a specified Resolver query logging configuration, such as the number of VPCs that the configuration is logging queries for and the location that logs are sent to","accessLevel":"Read","resourceTypes":[{"name":"resolver-query-log-config","required":true}],"dependentActions":["ec2:DescribeVpcs"]},"GetResolverQueryLogConfigAssociation":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about a specified association between a Resolver query logging configuration and an Amazon VPC. When you associate a VPC with a query logging configuration, Resolver logs DNS queries that originate in that VPC","accessLevel":"Read","resourceTypes":[]},"GetResolverQueryLogConfigPolicy":{"conditionKeys":[],"resources":[{"name":"resolver-query-log-config"}],"description":"Grants permission to get information about a specified Resolver query logging policy, which specifies the Resolver query logging operations and resources that you want to allow another AWS account to use","accessLevel":"Read","resourceTypes":[{"name":"resolver-query-log-config","required":true}]},"GetResolverRule":{"conditionKeys":[],"resources":[{"name":"autodefined-rule"},{"name":"resolver-rule"}],"description":"Grants permission to get information about a specified Resolver rule, such as the domain name that the rule forwards DNS queries for and the IP address that queries are forwarded to","accessLevel":"Read","resourceTypes":[{"name":"autodefined-rule","required":false},{"name":"resolver-rule","required":false}]},"GetResolverRuleAssociation":{"conditionKeys":[],"resources":[{"name":"autodefined-rule"},{"name":"resolver-rule"}],"description":"Grants permission to get information about an association between a specified Resolver rule and a VPC","accessLevel":"Read","resourceTypes":[{"name":"autodefined-rule","required":false},{"name":"resolver-rule","required":false}]},"GetResolverRulePolicy":{"conditionKeys":[],"resources":[{"name":"resolver-rule"}],"description":"Grants permission to get information about a Resolver rule policy, which specifies the Resolver operations and resources that you want to allow another AWS account to use","accessLevel":"Read","resourceTypes":[{"name":"resolver-rule","required":true}]},"ImportFirewallDomains":{"conditionKeys":[],"resources":[{"name":"firewall-domain-list"}],"description":"Grants permission to add, remove or replace Firewall domains in a Firewall domain list","accessLevel":"Write","resourceTypes":[{"name":"firewall-domain-list","required":true}]},"ListFirewallConfigs":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the Firewall config that current AWS account is able to check","accessLevel":"List","resourceTypes":[],"dependentActions":["ec2:DescribeVpcs"]},"ListFirewallDomainLists":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the Firewall domain list that current AWS account is able to use","accessLevel":"List","resourceTypes":[]},"ListFirewallDomains":{"conditionKeys":[],"resources":[{"name":"firewall-domain-list"}],"description":"Grants permission to list all the Firewall domain under a specified Firewall domain list","accessLevel":"List","resourceTypes":[{"name":"firewall-domain-list","required":true}]},"ListFirewallRuleGroupAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list information about associations between Amazon VPCs and Firewall rule group","accessLevel":"List","resourceTypes":[]},"ListFirewallRuleGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the Firewall rule group that current AWS account is able to use","accessLevel":"List","resourceTypes":[]},"ListFirewallRules":{"conditionKeys":[],"resources":[{"name":"firewall-rule-group"}],"description":"Grants permission to list all the Firewall rule under a specified Firewall rule group","accessLevel":"List","resourceTypes":[{"name":"firewall-rule-group","required":true}]},"ListOutpostResolvers":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all instances of Route 53 Resolver on Outposts that were created using the current AWS account","accessLevel":"List","resourceTypes":[]},"ListResolverConfigs":{"conditionKeys":[],"resources":[{"name":"resolver-config"}],"description":"Grants permission to list Resolver Config statuses","accessLevel":"List","resourceTypes":[{"name":"resolver-config","required":true}],"dependentActions":["ec2:DescribeVpcs"]},"ListResolverDnssecConfigs":{"conditionKeys":[],"resources":[{"name":"resolver-dnssec-config"}],"description":"Grants permission to list the DNSSEC validation support status for DNS queries","accessLevel":"List","resourceTypes":[{"name":"resolver-dnssec-config","required":true}]},"ListResolverEndpointIpAddresses":{"conditionKeys":[],"resources":[{"name":"resolver-endpoint"}],"description":"Grants permission to list the IP addresses that DNS queries pass through on the way to your network (outbound) or your VPCs (inbound) for a specified Resolver endpoint","accessLevel":"List","resourceTypes":[{"name":"resolver-endpoint","required":true}]},"ListResolverEndpoints":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the Resolver endpoints that were created using the current AWS account","accessLevel":"List","resourceTypes":[]},"ListResolverQueryLogConfigAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list information about associations between Amazon VPCs and query logging configurations","accessLevel":"List","resourceTypes":[],"dependentActions":["ec2:DescribeVpcs"]},"ListResolverQueryLogConfigs":{"conditionKeys":[],"resources":[],"description":"Grants permission to list information about the specified query logging configurations, which define where you want Resolver to save DNS query logs and specify the VPCs that you want to log queries for","accessLevel":"List","resourceTypes":[],"dependentActions":["ec2:DescribeVpcs"]},"ListResolverRuleAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the associations that were created between Resolver rules and VPCs using the current AWS account","accessLevel":"List","resourceTypes":[],"dependentActions":["ec2:DescribeVpcs"]},"ListResolverRules":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the Resolver rules that were created using the current AWS account","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"firewall-domain-list"},{"name":"firewall-rule-group"},{"name":"firewall-rule-group-association"},{"name":"outpost-resolver"},{"name":"resolver-endpoint"},{"name":"resolver-query-log-config"},{"name":"resolver-rule"}],"description":"Grants permission to list the tags that you associated with the specified resource","accessLevel":"Read","resourceTypes":[{"name":"firewall-domain-list","required":false},{"name":"firewall-rule-group","required":false},{"name":"firewall-rule-group-association","required":false},{"name":"outpost-resolver","required":false},{"name":"resolver-endpoint","required":false},{"name":"resolver-query-log-config","required":false},{"name":"resolver-rule","required":false}]},"PutFirewallRuleGroupPolicy":{"conditionKeys":[],"resources":[{"name":"firewall-rule-group"}],"description":"Grants permission to specify an AWS account that you want to share a Firewall rule group with, the Firewall rule group that you want to share, and the operations that you want the account to be able to perform on the configuration","accessLevel":"Permissions management","resourceTypes":[{"name":"firewall-rule-group","required":true}]},"PutResolverQueryLogConfigPolicy":{"conditionKeys":[],"resources":[{"name":"resolver-query-log-config"}],"description":"Grants permission to specify an AWS account that you want to share a query logging configuration with, the query logging configuration that you want to share, and the operations that you want the account to be able to perform on the configuration","accessLevel":"Permissions management","resourceTypes":[{"name":"resolver-query-log-config","required":true}]},"PutResolverRulePolicy":{"conditionKeys":[],"resources":[{"name":"resolver-rule"}],"description":"Grants permission to specify an AWS account that you want to share rules with, the Resolver rules that you want to share, and the operations that you want the account to be able to perform on those rules","accessLevel":"Permissions management","resourceTypes":[{"name":"resolver-rule","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"firewall-config"},{"name":"firewall-domain-list"},{"name":"firewall-rule-group"},{"name":"firewall-rule-group-association"},{"name":"outpost-resolver"},{"name":"resolver-dnssec-config"},{"name":"resolver-endpoint"},{"name":"resolver-query-log-config"},{"name":"resolver-rule"}],"description":"Grants permission to add one or more tags to a specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"firewall-config","required":false},{"name":"firewall-domain-list","required":false},{"name":"firewall-rule-group","required":false},{"name":"firewall-rule-group-association","required":false},{"name":"outpost-resolver","required":false},{"name":"resolver-dnssec-config","required":false},{"name":"resolver-endpoint","required":false},{"name":"resolver-query-log-config","required":false},{"name":"resolver-rule","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"firewall-config"},{"name":"firewall-domain-list"},{"name":"firewall-rule-group"},{"name":"firewall-rule-group-association"},{"name":"outpost-resolver"},{"name":"resolver-dnssec-config"},{"name":"resolver-endpoint"},{"name":"resolver-query-log-config"},{"name":"resolver-rule"}],"description":"Grants permission to remove one or more tags from a specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"firewall-config","required":false},{"name":"firewall-domain-list","required":false},{"name":"firewall-rule-group","required":false},{"name":"firewall-rule-group-association","required":false},{"name":"outpost-resolver","required":false},{"name":"resolver-dnssec-config","required":false},{"name":"resolver-endpoint","required":false},{"name":"resolver-query-log-config","required":false},{"name":"resolver-rule","required":false}]},"UpdateFirewallConfig":{"conditionKeys":[],"resources":[{"name":"firewall-config"}],"description":"Grants permission to update selected settings for an Firewall config","accessLevel":"Write","resourceTypes":[{"name":"firewall-config","required":true}],"dependentActions":["ec2:DescribeVpcs"]},"UpdateFirewallDomains":{"conditionKeys":[],"resources":[{"name":"firewall-domain-list"}],"description":"Grants permission to add, remove or replace Firewall domains in a Firewall domain list","accessLevel":"Write","resourceTypes":[{"name":"firewall-domain-list","required":true}]},"UpdateFirewallRule":{"conditionKeys":[],"resources":[{"name":"firewall-domain-list"},{"name":"firewall-rule-group"}],"description":"Grants permission to update selected settings for an Firewall rule in a Firewall rule group","accessLevel":"Write","resourceTypes":[{"name":"firewall-domain-list","required":true},{"name":"firewall-rule-group","required":true}]},"UpdateFirewallRuleGroupAssociation":{"conditionKeys":[],"resources":[{"name":"firewall-rule-group-association"}],"description":"Grants permission to update selected settings for an Firewall rule group association","accessLevel":"Write","resourceTypes":[{"name":"firewall-rule-group-association","required":true}]},"UpdateOutpostResolver":{"conditionKeys":[],"resources":[{"name":"outpost-resolver"}],"description":"Grants permission to update seletected settings for a specified Route 53 Resolver on Outposts","accessLevel":"Write","resourceTypes":[{"name":"outpost-resolver","required":true}]},"UpdateResolverConfig":{"conditionKeys":[],"resources":[{"name":"resolver-config"}],"description":"Grants permission to update the Resolver Config status within the specified resource","accessLevel":"Write","resourceTypes":[{"name":"resolver-config","required":true}],"dependentActions":["ec2:DescribeVpcs"]},"UpdateResolverDnssecConfig":{"conditionKeys":[],"resources":[{"name":"resolver-dnssec-config"}],"description":"Grants permission to update the DNSSEC validation support status for DNS queries within the specified resource","accessLevel":"Write","resourceTypes":[{"name":"resolver-dnssec-config","required":true}]},"UpdateResolverEndpoint":{"conditionKeys":[],"resources":[{"name":"resolver-endpoint"}],"description":"Grants permission to update selected settings for an inbound or an outbound Resolver endpoint","accessLevel":"Write","resourceTypes":[{"name":"resolver-endpoint","required":true}],"dependentActions":["ec2:AssignIpv6Addresses","ec2:DescribeNetworkInterfaces","ec2:DescribeSubnets","ec2:ModifyNetworkInterfaceAttribute","ec2:UnassignIpv6Addresses"]},"UpdateResolverRule":{"conditionKeys":[],"resources":[{"name":"resolver-rule"}],"description":"Grants permission to update settings for a specified Resolver rule","accessLevel":"Write","resourceTypes":[{"name":"resolver-rule","required":true}]}},"resources":[{"name":"autodefined-rule","arnFormats":["arn:${Partition}:route53resolver:${Region}:${Account}:autodefined-rule/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"firewall-config","arnFormats":["arn:${Partition}:route53resolver:${Region}:${Account}:firewall-config/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"firewall-domain-list","arnFormats":["arn:${Partition}:route53resolver:${Region}:${Account}:firewall-domain-list/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"firewall-rule-group","arnFormats":["arn:${Partition}:route53resolver:${Region}:${Account}:firewall-rule-group/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"firewall-rule-group-association","arnFormats":["arn:${Partition}:route53resolver:${Region}:${Account}:firewall-rule-group-association/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"outpost-resolver","arnFormats":["arn:${Partition}:route53resolver:${Region}:${Account}:outpost-resolver/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"resolver-config","arnFormats":["arn:${Partition}:route53resolver:${Region}:${Account}:resolver-config/${ResourceId}"],"conditionKeys":[]},{"name":"resolver-dnssec-config","arnFormats":["arn:${Partition}:route53resolver:${Region}:${Account}:resolver-dnssec-config/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"resolver-endpoint","arnFormats":["arn:${Partition}:route53resolver:${Region}:${Account}:resolver-endpoint/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"resolver-query-log-config","arnFormats":["arn:${Partition}:route53resolver:${Region}:${Account}:resolver-query-log-config/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"resolver-rule","arnFormats":["arn:${Partition}:route53resolver:${Region}:${Account}:resolver-rule/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"}}}

package/src/data/servicereference/services/rtbfabric.json

@@ -0,0 +1 @@
+{"name":"rtbfabric","actions":{"AcceptLink":{"conditionKeys":[],"resources":[{"name":"Link"}],"description":"Grants permission to accept a link invitation from another Gateway","accessLevel":"Write","resourceTypes":[{"name":"Link","required":true}]},"CreateInboundExternalLink":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ResponderGateway"}],"description":"Grants permission to create an inbound external link for a responder gateway","accessLevel":"Write","resourceTypes":[{"name":"ResponderGateway","required":true}]},"CreateLink":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new link between RTB applications","accessLevel":"Write","resourceTypes":[]},"CreateOutboundExternalLink":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"RequesterGateway"}],"description":"Grants permission to create an outbound external link for a requester gateway to connect to external public responder endpoints","accessLevel":"Write","resourceTypes":[{"name":"RequesterGateway","required":true}]},"CreateRequesterGateway":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a requester gateway","accessLevel":"Write","resourceTypes":[]},"CreateResponderGateway":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a responder gateway","accessLevel":"Write","resourceTypes":[]},"DeleteInboundExternalLink":{"conditionKeys":[],"resources":[{"name":"InboundExternalLink"},{"name":"ResponderGateway"}],"description":"Grants permission to delete an inbound external link","accessLevel":"Write","resourceTypes":[{"name":"InboundExternalLink","required":true},{"name":"ResponderGateway","required":true}]},"DeleteLink":{"conditionKeys":[],"resources":[{"name":"Link"}],"description":"Grants permission to delete a link between RTB applications","accessLevel":"Write","resourceTypes":[{"name":"Link","required":true}]},"DeleteOutboundExternalLink":{"conditionKeys":[],"resources":[{"name":"OutboundExternalLink"},{"name":"RequesterGateway"}],"description":"Grants permission to delete an outbound external link","accessLevel":"Write","resourceTypes":[{"name":"OutboundExternalLink","required":true},{"name":"RequesterGateway","required":true}]},"DeleteRequesterGateway":{"conditionKeys":[],"resources":[{"name":"RequesterGateway"}],"description":"Grants permission to delete a requester gateway","accessLevel":"Write","resourceTypes":[{"name":"RequesterGateway","required":true}]},"DeleteResponderGateway":{"conditionKeys":[],"resources":[{"name":"ResponderGateway"}],"description":"Grants permission to delete a responder gateway","accessLevel":"Write","resourceTypes":[{"name":"ResponderGateway","required":true}]},"GetInboundExternalLink":{"conditionKeys":[],"resources":[{"name":"InboundExternalLink"},{"name":"ResponderGateway"}],"description":"Grants permission to retrieve information about an inbound external link","accessLevel":"Read","resourceTypes":[{"name":"InboundExternalLink","required":true},{"name":"ResponderGateway","required":true}]},"GetLink":{"conditionKeys":[],"resources":[{"name":"Link"}],"description":"Grants permission to retrieve information about a link between RTB applications","accessLevel":"Read","resourceTypes":[{"name":"Link","required":true}]},"GetOutboundExternalLink":{"conditionKeys":[],"resources":[{"name":"OutboundExternalLink"},{"name":"RequesterGateway"}],"description":"Grants permission to retrieve information about an outbound external link","accessLevel":"Read","resourceTypes":[{"name":"OutboundExternalLink","required":true},{"name":"RequesterGateway","required":true}]},"GetRequesterGateway":{"conditionKeys":[],"resources":[{"name":"RequesterGateway"}],"description":"Grants permission to retrieve information about a requester gateway","accessLevel":"Read","resourceTypes":[{"name":"RequesterGateway","required":true}]},"GetResponderGateway":{"conditionKeys":[],"resources":[{"name":"ResponderGateway"}],"description":"Grants permission to retrieve information about a responder gateway","accessLevel":"Read","resourceTypes":[{"name":"ResponderGateway","required":true}]},"ListLinks":{"conditionKeys":[],"resources":[],"description":"Grants permission to list links associated with an RTB application","accessLevel":"List","resourceTypes":[]},"ListRequesterGateways":{"conditionKeys":[],"resources":[],"description":"Grants permission to list requester gateways with optional filtering and pagination","accessLevel":"List","resourceTypes":[]},"ListResponderGateways":{"conditionKeys":[],"resources":[],"description":"Grants permission to list responder gateways with optional filtering and pagination","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"InboundExternalLink"},{"name":"Link"},{"name":"OutboundExternalLink"},{"name":"RequesterGateway"},{"name":"ResponderGateway"}],"description":"Grants permission to list tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"InboundExternalLink","required":false},{"name":"Link","required":false},{"name":"OutboundExternalLink","required":false},{"name":"RequesterGateway","required":false},{"name":"ResponderGateway","required":false}]},"RejectLink":{"conditionKeys":[],"resources":[{"name":"Link"}],"description":"Grants permission to reject a link request between RTB applications","accessLevel":"Write","resourceTypes":[{"name":"Link","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"InboundExternalLink"},{"name":"Link"},{"name":"OutboundExternalLink"},{"name":"RequesterGateway"},{"name":"ResponderGateway"}],"description":"Grants permission to assign one or more tags (key-value pairs) to the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"InboundExternalLink","required":false},{"name":"Link","required":false},{"name":"OutboundExternalLink","required":false},{"name":"RequesterGateway","required":false},{"name":"ResponderGateway","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"InboundExternalLink"},{"name":"Link"},{"name":"OutboundExternalLink"},{"name":"RequesterGateway"},{"name":"ResponderGateway"}],"description":"Grants permission to remove a tag or tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"InboundExternalLink","required":false},{"name":"Link","required":false},{"name":"OutboundExternalLink","required":false},{"name":"RequesterGateway","required":false},{"name":"ResponderGateway","required":false}]},"UpdateLink":{"conditionKeys":[],"resources":[{"name":"Link"}],"description":"Grants permission to update configuration settings for an existing link","accessLevel":"Write","resourceTypes":[{"name":"Link","required":true}]},"UpdateLinkModuleFlow":{"conditionKeys":[],"resources":[{"name":"Link"}],"description":"Grants permission to update a link module flow","accessLevel":"Write","resourceTypes":[{"name":"Link","required":true}]},"UpdateRequesterGateway":{"conditionKeys":[],"resources":[{"name":"RequesterGateway"}],"description":"Grants permission to update a requester gateway","accessLevel":"Write","resourceTypes":[{"name":"RequesterGateway","required":true}]},"UpdateResponderGateway":{"conditionKeys":[],"resources":[{"name":"ResponderGateway"}],"description":"Grants permission to update a responder gateway","accessLevel":"Write","resourceTypes":[{"name":"ResponderGateway","required":true}]}},"resources":[{"name":"InboundExternalLink","arnFormats":["arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/${GatewayId}/link/${LinkId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","rtbfabric:InboundExternalLinkLinkId","rtbfabric:ResponderGatewayGatewayId"]},{"name":"Link","arnFormats":["arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/${GatewayId}/link/${LinkId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","rtbfabric:LinkLinkId","rtbfabric:RequesterGatewayGatewayId","rtbfabric:ResponderGatewayGatewayId"]},{"name":"OutboundExternalLink","arnFormats":["arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/${GatewayId}/link/${LinkId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","rtbfabric:OutboundExternalLinkLinkId","rtbfabric:RequesterGatewayGatewayId"]},{"name":"RequesterGateway","arnFormats":["arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/${GatewayId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","rtbfabric:RequesterGatewayGatewayId"]},{"name":"ResponderGateway","arnFormats":["arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/${GatewayId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","rtbfabric:ResponderGatewayGatewayId"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair that is allowed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair of a resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by a list of tag keys that are allowed in the request"},"rtbfabric:InboundExternalLinkGatewayId":{"types":["String"],"description":"Filters access by gateway identifier supporting rtb-gw-* formats"},"rtbfabric:InboundExternalLinkLinkId":{"types":["String"],"description":"Filters access by InboundExternalLink resource linkId identifier"},"rtbfabric:LinkLinkId":{"types":["String"],"description":"Filters access by Link resource linkId identifier"},"rtbfabric:OutboundExternalLinkLinkId":{"types":["String"],"description":"Filters access by OutboundExternalLink resource linkId identifier"},"rtbfabric:RequesterGatewayGatewayId":{"types":["String"],"description":"Filters access by gateway identifier supporting rtb-gw-* formats"},"rtbfabric:ResponderGatewayGatewayId":{"types":["String"],"description":"Filters access by gateway identifier supporting rtb-gw-* formats"}}}

package/src/data/servicereference/services/rum.json

@@ -0,0 +1 @@
+{"name":"rum","actions":{"BatchCreateRumMetricDefinitions":{"conditionKeys":[],"resources":[{"name":"AppMonitorResource"}],"description":"Grants permission to create rum metric definitions","accessLevel":"Write","resourceTypes":[{"name":"AppMonitorResource","required":true}]},"BatchDeleteRumMetricDefinitions":{"conditionKeys":[],"resources":[{"name":"AppMonitorResource"}],"description":"Grants permission to remove rum metric definitions","accessLevel":"Write","resourceTypes":[{"name":"AppMonitorResource","required":true}]},"BatchGetRumMetricDefinitions":{"conditionKeys":[],"resources":[{"name":"AppMonitorResource"}],"description":"Grants permission to get rum metric definitions","accessLevel":"Read","resourceTypes":[{"name":"AppMonitorResource","required":true}]},"CreateAppMonitor":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"AppMonitorResource"}],"description":"Grants permission to create appMonitor metadata","accessLevel":"Write","resourceTypes":[{"name":"AppMonitorResource","required":true}],"dependentActions":["iam:CreateServiceLinkedRole","iam:GetRole"]},"DeleteAppMonitor":{"conditionKeys":[],"resources":[{"name":"AppMonitorResource"}],"description":"Grants permission to delete appMonitor metadata","accessLevel":"Write","resourceTypes":[{"name":"AppMonitorResource","required":true}]},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[{"name":"AppMonitorResource"}],"description":"Grants permission to delete a resource policy attached to an app monitor","accessLevel":"Write","resourceTypes":[{"name":"AppMonitorResource","required":true}]},"DeleteRumMetricsDestination":{"conditionKeys":[],"resources":[{"name":"AppMonitorResource"}],"description":"Grants permission to delete rum metrics destinations","accessLevel":"Write","resourceTypes":[{"name":"AppMonitorResource","required":true}]},"GetAppMonitor":{"conditionKeys":[],"resources":[{"name":"AppMonitorResource"}],"description":"Grants permission to get appMonitor metadata","accessLevel":"Read","resourceTypes":[{"name":"AppMonitorResource","required":true}]},"GetAppMonitorData":{"conditionKeys":[],"resources":[{"name":"AppMonitorResource"}],"description":"Grants permission to get appMonitor data","accessLevel":"Read","resourceTypes":[{"name":"AppMonitorResource","required":true}]},"GetResourcePolicy":{"conditionKeys":[],"resources":[{"name":"AppMonitorResource"}],"description":"Grants permission to retrieve a resource policy attached to an app monitor","accessLevel":"Read","resourceTypes":[{"name":"AppMonitorResource","required":true}]},"ListAppMonitors":{"conditionKeys":[],"resources":[],"description":"Grants permission to list appMonitors metadata","accessLevel":"List","resourceTypes":[]},"ListRumMetricsDestinations":{"conditionKeys":[],"resources":[{"name":"AppMonitorResource"}],"description":"Grants permission to list rum metrics destinations","accessLevel":"Read","resourceTypes":[{"name":"AppMonitorResource","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to list tags for resources","accessLevel":"Read","resourceTypes":[]},"PutResourcePolicy":{"conditionKeys":[],"resources":[{"name":"AppMonitorResource"}],"description":"Grants permission to attach a resource policy to an app monitor","accessLevel":"Write","resourceTypes":[{"name":"AppMonitorResource","required":true}]},"PutRumEvents":{"conditionKeys":[],"resources":[{"name":"AppMonitorResource"}],"description":"Grants permission to put RUM events for appmonitor","accessLevel":"Write","resourceTypes":[{"name":"AppMonitorResource","required":true}]},"PutRumMetricsDestination":{"conditionKeys":[],"resources":[{"name":"AppMonitorResource"}],"description":"Grants permission to put rum metrics destinations","accessLevel":"Write","resourceTypes":[{"name":"AppMonitorResource","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"AppMonitorResource"}],"description":"Grants permission to tag resources","accessLevel":"Tagging","resourceTypes":[{"name":"AppMonitorResource","required":true}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"AppMonitorResource"}],"description":"Grants permission to untag resources","accessLevel":"Tagging","resourceTypes":[{"name":"AppMonitorResource","required":true}]},"UpdateAppMonitor":{"conditionKeys":[],"resources":[{"name":"AppMonitorResource"}],"description":"Grants permission to update appmonitor metadata","accessLevel":"Write","resourceTypes":[{"name":"AppMonitorResource","required":true}],"dependentActions":["iam:CreateServiceLinkedRole","iam:GetRole"]},"UpdateRumMetricDefinition":{"conditionKeys":[],"resources":[{"name":"AppMonitorResource"}],"description":"Grants permission to update rum metric definition","accessLevel":"Write","resourceTypes":[{"name":"AppMonitorResource","required":true}]}},"resources":[{"name":"AppMonitorResource","arnFormats":["arn:${Partition}:rum:${Region}:${Account}:appmonitor/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed the request on behalf of the IAM principal"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource that make the request on behalf of the IAM principal"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request on behalf of the IAM principal"}}}

package/src/data/servicereference/services/s3-object-lambda.json

@@ -0,0 +1 @@
+{"name":"s3-object-lambda","actions":{"AbortMultipartUpload":{"conditionKeys":["s3-object-lambda:TlsVersion","s3-object-lambda:authType","s3-object-lambda:signatureAge"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to abort a multipart upload","accessLevel":"Write","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"DeleteObject":{"conditionKeys":["s3-object-lambda:TlsVersion","s3-object-lambda:authType","s3-object-lambda:signatureAge"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to remove the null version of an object and insert a delete marker, which becomes the current version of the object","accessLevel":"Write","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"DeleteObjectTagging":{"conditionKeys":["s3-object-lambda:TlsVersion","s3-object-lambda:authType","s3-object-lambda:signatureAge"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to use the tagging subresource to remove the entire tag set from the specified object","accessLevel":"Tagging","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"DeleteObjectVersion":{"conditionKeys":["s3-object-lambda:TlsVersion","s3-object-lambda:authType","s3-object-lambda:signatureAge","s3-object-lambda:versionid"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to remove a specific version of an object","accessLevel":"Write","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"DeleteObjectVersionTagging":{"conditionKeys":["s3-object-lambda:TlsVersion","s3-object-lambda:authType","s3-object-lambda:signatureAge","s3-object-lambda:versionid"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to remove the entire tag set for a specific version of the object","accessLevel":"Tagging","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"GetObject":{"conditionKeys":["s3-object-lambda:TlsVersion","s3-object-lambda:authType","s3-object-lambda:signatureAge"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to retrieve objects from Amazon S3","accessLevel":"Read","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"GetObjectAcl":{"conditionKeys":["s3-object-lambda:TlsVersion","s3-object-lambda:authType","s3-object-lambda:signatureAge"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to return the access control list (ACL) of an object","accessLevel":"Read","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"GetObjectLegalHold":{"conditionKeys":["s3-object-lambda:TlsVersion","s3-object-lambda:authType","s3-object-lambda:signatureAge"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to get an object's current Legal Hold status","accessLevel":"Read","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"GetObjectRetention":{"conditionKeys":["s3-object-lambda:TlsVersion","s3-object-lambda:authType","s3-object-lambda:signatureAge"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to retrieve the retention settings for an object","accessLevel":"Read","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"GetObjectTagging":{"conditionKeys":["s3-object-lambda:TlsVersion","s3-object-lambda:authType","s3-object-lambda:signatureAge"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to return the tag set of an object","accessLevel":"Read","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"GetObjectVersion":{"conditionKeys":["s3-object-lambda:TlsVersion","s3-object-lambda:authType","s3-object-lambda:signatureAge","s3-object-lambda:versionid"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to retrieve a specific version of an object","accessLevel":"Read","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"GetObjectVersionAcl":{"conditionKeys":["s3-object-lambda:TlsVersion","s3-object-lambda:authType","s3-object-lambda:signatureAge","s3-object-lambda:versionid"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to return the access control list (ACL) of a specific object version","accessLevel":"Read","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"GetObjectVersionTagging":{"conditionKeys":["s3-object-lambda:TlsVersion","s3-object-lambda:authType","s3-object-lambda:signatureAge","s3-object-lambda:versionid"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to return the tag set for a specific version of the object","accessLevel":"Read","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"ListBucket":{"conditionKeys":["s3-object-lambda:TlsVersion","s3-object-lambda:authType","s3-object-lambda:signatureAge"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to list some or all of the objects in an Amazon S3 bucket (up to 1000)","accessLevel":"List","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"ListBucketMultipartUploads":{"conditionKeys":["s3-object-lambda:TlsVersion","s3-object-lambda:authType","s3-object-lambda:signatureAge"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to list in-progress multipart uploads","accessLevel":"List","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"ListBucketVersions":{"conditionKeys":["s3-object-lambda:TlsVersion","s3-object-lambda:authType","s3-object-lambda:signatureAge"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to list metadata about all the versions of objects in an Amazon S3 bucket","accessLevel":"List","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"ListMultipartUploadParts":{"conditionKeys":["s3-object-lambda:TlsVersion","s3-object-lambda:authType","s3-object-lambda:signatureAge"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to list the parts that have been uploaded for a specific multipart upload","accessLevel":"List","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"PutObject":{"conditionKeys":["s3-object-lambda:TlsVersion","s3-object-lambda:authType","s3-object-lambda:signatureAge"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to add an object to a bucket","accessLevel":"Write","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"PutObjectAcl":{"conditionKeys":["s3-object-lambda:TlsVersion","s3-object-lambda:authType","s3-object-lambda:signatureAge"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to set the access control list (ACL) permissions for new or existing objects in an S3 bucket","accessLevel":"Permissions management","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"PutObjectLegalHold":{"conditionKeys":["s3-object-lambda:TlsVersion","s3-object-lambda:authType","s3-object-lambda:signatureAge"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to apply a Legal Hold configuration to the specified object","accessLevel":"Write","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"PutObjectRetention":{"conditionKeys":["s3-object-lambda:TlsVersion","s3-object-lambda:authType","s3-object-lambda:signatureAge"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to place an Object Retention configuration on an object","accessLevel":"Write","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"PutObjectTagging":{"conditionKeys":["s3-object-lambda:TlsVersion","s3-object-lambda:authType","s3-object-lambda:signatureAge"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to set the supplied tag-set to an object that already exists in a bucket","accessLevel":"Tagging","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"PutObjectVersionAcl":{"conditionKeys":["s3-object-lambda:TlsVersion","s3-object-lambda:authType","s3-object-lambda:signatureAge","s3-object-lambda:versionid"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to use the acl subresource to set the access control list (ACL) permissions for an object that already exists in a bucket","accessLevel":"Permissions management","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"PutObjectVersionTagging":{"conditionKeys":["s3-object-lambda:TlsVersion","s3-object-lambda:authType","s3-object-lambda:signatureAge","s3-object-lambda:versionid"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to set the supplied tag-set for a specific version of an object","accessLevel":"Tagging","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"RestoreObject":{"conditionKeys":["s3-object-lambda:TlsVersion","s3-object-lambda:authType","s3-object-lambda:signatureAge"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to restore an archived copy of an object back into Amazon S3","accessLevel":"Write","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"WriteGetObjectResponse":{"conditionKeys":["s3-object-lambda:TlsVersion","s3-object-lambda:authType","s3-object-lambda:signatureAge"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to provide data for GetObject requests send to S3 Object Lambda","accessLevel":"Write","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]}},"resources":[{"name":"objectlambdaaccesspoint","arnFormats":["arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/${AccessPointName}"],"conditionKeys":[]}],"conditionKeys":{"s3-object-lambda:TlsVersion":{"types":["Numeric"],"description":"Filters access by the TLS version used by the client"},"s3-object-lambda:authType":{"types":["String"],"description":"Filters access by authentication method"},"s3-object-lambda:signatureAge":{"types":["Numeric"],"description":"Filters access by the age in milliseconds of the request signature"},"s3-object-lambda:versionid":{"types":["String"],"description":"Filters access by a specific object version"}}}

package/src/data/servicereference/services/s3-outposts.json

@@ -0,0 +1 @@
+{"name":"s3-outposts","actions":{"AbortMultipartUpload":{"conditionKeys":["s3-outposts:AccessPointNetworkOrigin","s3-outposts:DataAccessPointAccount","s3-outposts:DataAccessPointArn","s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"object"}],"description":"Grants permission to abort a multipart upload","accessLevel":"Write","resourceTypes":[{"name":"object","required":true}]},"CreateAccessPoint":{"conditionKeys":["s3-outposts:AccessPointNetworkOrigin","s3-outposts:DataAccessPointAccount","s3-outposts:DataAccessPointArn","s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to create a new access point","accessLevel":"Write","resourceTypes":[{"name":"accesspoint","required":true}]},"CreateBucket":{"conditionKeys":["s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to create a new bucket","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"CreateEndpoint":{"conditionKeys":[],"resources":[{"name":"endpoint"}],"description":"Grants permission to create a new endpoint","accessLevel":"Write","resourceTypes":[{"name":"endpoint","required":true}]},"DeleteAccessPoint":{"conditionKeys":["s3-outposts:AccessPointNetworkOrigin","s3-outposts:DataAccessPointAccount","s3-outposts:DataAccessPointArn","s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to delete the access point named in the URI","accessLevel":"Write","resourceTypes":[{"name":"accesspoint","required":true}]},"DeleteAccessPointPolicy":{"conditionKeys":["s3-outposts:AccessPointNetworkOrigin","s3-outposts:DataAccessPointAccount","s3-outposts:DataAccessPointArn","s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to delete the policy on a specified access point","accessLevel":"Permissions management","resourceTypes":[{"name":"accesspoint","required":true}]},"DeleteBucket":{"conditionKeys":["s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to delete the bucket named in the URI","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"DeleteBucketPolicy":{"conditionKeys":["s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to delete the policy on a specified bucket","accessLevel":"Permissions management","resourceTypes":[{"name":"bucket","required":true}]},"DeleteEndpoint":{"conditionKeys":[],"resources":[{"name":"endpoint"}],"description":"Grants permission to delete the endpoint named in the URI","accessLevel":"Write","resourceTypes":[{"name":"endpoint","required":true}]},"DeleteObject":{"conditionKeys":["s3-outposts:AccessPointNetworkOrigin","s3-outposts:DataAccessPointAccount","s3-outposts:DataAccessPointArn","s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"object"}],"description":"Grants permission to remove the null version of an object and insert a delete marker, which becomes the current version of the object","accessLevel":"Write","resourceTypes":[{"name":"object","required":true}]},"DeleteObjectTagging":{"conditionKeys":["s3-outposts:AccessPointNetworkOrigin","s3-outposts:DataAccessPointAccount","s3-outposts:DataAccessPointArn","s3-outposts:ExistingObjectTag/<key>","s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"object"}],"description":"Grants permission to use the tagging subresource to remove the entire tag set from the specified object","accessLevel":"Tagging","resourceTypes":[{"name":"object","required":true}]},"DeleteObjectVersion":{"conditionKeys":["s3-outposts:AccessPointNetworkOrigin","s3-outposts:DataAccessPointAccount","s3-outposts:DataAccessPointArn","s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:versionid","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"object"}],"description":"Grants permission to remove a specific version of an object","accessLevel":"Write","resourceTypes":[{"name":"object","required":true}]},"DeleteObjectVersionTagging":{"conditionKeys":["s3-outposts:AccessPointNetworkOrigin","s3-outposts:DataAccessPointAccount","s3-outposts:DataAccessPointArn","s3-outposts:ExistingObjectTag/<key>","s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:versionid","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"object"}],"description":"Grants permission to remove the entire tag set for a specific version of the object","accessLevel":"Tagging","resourceTypes":[{"name":"object","required":true}]},"GetAccessPoint":{"conditionKeys":["s3-outposts:AccessPointNetworkOrigin","s3-outposts:DataAccessPointAccount","s3-outposts:DataAccessPointArn","s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[],"description":"Grants permission to return configuration information about the specified access point","accessLevel":"Read","resourceTypes":[]},"GetAccessPointPolicy":{"conditionKeys":["s3-outposts:AccessPointNetworkOrigin","s3-outposts:DataAccessPointAccount","s3-outposts:DataAccessPointArn","s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to returns the access point policy associated with the specified access point","accessLevel":"Read","resourceTypes":[{"name":"accesspoint","required":true}]},"GetBucket":{"conditionKeys":["s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to return the bucket configuration associated with an Amazon S3 bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"GetBucketPolicy":{"conditionKeys":["s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to return the policy of the specified bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"GetBucketTagging":{"conditionKeys":["s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to return the tag set associated with an Amazon S3 bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"GetBucketVersioning":{"conditionKeys":["s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to return the versioning state of an Amazon S3 bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"GetLifecycleConfiguration":{"conditionKeys":["s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to return the lifecycle configuration information set on an Amazon S3 bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"GetObject":{"conditionKeys":["s3-outposts:AccessPointNetworkOrigin","s3-outposts:DataAccessPointAccount","s3-outposts:DataAccessPointArn","s3-outposts:ExistingObjectTag/<key>","s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"object"}],"description":"Grants permission to retrieve objects from Amazon S3","accessLevel":"Read","resourceTypes":[{"name":"object","required":true}]},"GetObjectTagging":{"conditionKeys":["s3-outposts:AccessPointNetworkOrigin","s3-outposts:DataAccessPointAccount","s3-outposts:DataAccessPointArn","s3-outposts:ExistingObjectTag/<key>","s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"object"}],"description":"Grants permission to return the tag set of an object","accessLevel":"Read","resourceTypes":[{"name":"object","required":true}]},"GetObjectVersion":{"conditionKeys":["s3-outposts:AccessPointNetworkOrigin","s3-outposts:DataAccessPointAccount","s3-outposts:DataAccessPointArn","s3-outposts:ExistingObjectTag/<key>","s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:versionid","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"object"}],"description":"Grants permission to retrieve a specific version of an object","accessLevel":"Read","resourceTypes":[{"name":"object","required":true}]},"GetObjectVersionForReplication":{"conditionKeys":["s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"object"}],"description":"Grants permission to replicate both unencrypted objects and objects encrypted with SSE-KMS","accessLevel":"Read","resourceTypes":[{"name":"object","required":true}]},"GetObjectVersionTagging":{"conditionKeys":["s3-outposts:AccessPointNetworkOrigin","s3-outposts:DataAccessPointAccount","s3-outposts:DataAccessPointArn","s3-outposts:ExistingObjectTag/<key>","s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:versionid","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"object"}],"description":"Grants permission to return the tag set for a specific version of the object","accessLevel":"Read","resourceTypes":[{"name":"object","required":true}]},"GetReplicationConfiguration":{"conditionKeys":["s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to get the replication configuration information set on an Amazon S3 bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"ListAccessPoints":{"conditionKeys":["s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[],"description":"Grants permission to list access points","accessLevel":"List","resourceTypes":[]},"ListBucket":{"conditionKeys":["s3-outposts:AccessPointNetworkOrigin","s3-outposts:DataAccessPointAccount","s3-outposts:DataAccessPointArn","s3-outposts:authType","s3-outposts:delimiter","s3-outposts:max-keys","s3-outposts:prefix","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"accesspoint"},{"name":"bucket"}],"description":"Grants permission to list some or all of the objects in an Amazon S3 bucket (up to 1000)","accessLevel":"List","resourceTypes":[{"name":"accesspoint","required":true},{"name":"bucket","required":true}]},"ListBucketMultipartUploads":{"conditionKeys":["s3-outposts:AccessPointNetworkOrigin","s3-outposts:DataAccessPointAccount","s3-outposts:DataAccessPointArn","s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"accesspoint"},{"name":"bucket"}],"description":"Grants permission to list in-progress multipart uploads","accessLevel":"List","resourceTypes":[{"name":"accesspoint","required":true},{"name":"bucket","required":true}]},"ListBucketVersions":{"conditionKeys":["s3-outposts:AccessPointNetworkOrigin","s3-outposts:DataAccessPointAccount","s3-outposts:DataAccessPointArn","s3-outposts:authType","s3-outposts:delimiter","s3-outposts:max-keys","s3-outposts:prefix","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to list metadata about all the versions of objects in an Amazon S3 bucket","accessLevel":"List","resourceTypes":[{"name":"bucket","required":true}]},"ListEndpoints":{"conditionKeys":[],"resources":[],"description":"Grants permission to list endpoints","accessLevel":"List","resourceTypes":[]},"ListMultipartUploadParts":{"conditionKeys":["s3-outposts:AccessPointNetworkOrigin","s3-outposts:DataAccessPointAccount","s3-outposts:DataAccessPointArn","s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"object"}],"description":"Grants permission to list the parts that have been uploaded for a specific multipart upload","accessLevel":"List","resourceTypes":[{"name":"object","required":true}]},"ListOutpostsWithS3":{"conditionKeys":[],"resources":[],"description":"Grants permission to list outposts with S3 capacity","accessLevel":"List","resourceTypes":[]},"ListRegionalBuckets":{"conditionKeys":["s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[],"description":"Grants permission to list all buckets owned by the authenticated sender of the request","accessLevel":"List","resourceTypes":[]},"ListSharedEndpoints":{"conditionKeys":[],"resources":[],"description":"Grants permission to list shared endpoints","accessLevel":"List","resourceTypes":[]},"PutAccessPointPolicy":{"conditionKeys":["s3-outposts:AccessPointNetworkOrigin","s3-outposts:DataAccessPointAccount","s3-outposts:DataAccessPointArn","s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to associate an access policy with a specified access point","accessLevel":"Permissions management","resourceTypes":[{"name":"accesspoint","required":true}]},"PutBucketPolicy":{"conditionKeys":["s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to add or replace a bucket policy on a bucket","accessLevel":"Permissions management","resourceTypes":[{"name":"bucket","required":true}]},"PutBucketTagging":{"conditionKeys":["s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to add a set of tags to an existing Amazon S3 bucket","accessLevel":"Tagging","resourceTypes":[{"name":"bucket","required":true}]},"PutBucketVersioning":{"conditionKeys":["s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to set the versioning state of an existing Amazon S3 bucket","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"PutLifecycleConfiguration":{"conditionKeys":["s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to create a new lifecycle configuration for the bucket or replace an existing lifecycle configuration","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"PutObject":{"conditionKeys":["s3-outposts:AccessPointNetworkOrigin","s3-outposts:DataAccessPointAccount","s3-outposts:DataAccessPointArn","s3-outposts:RequestObjectTag/<key>","s3-outposts:RequestObjectTagKeys","s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-acl","s3-outposts:x-amz-content-sha256","s3-outposts:x-amz-copy-source","s3-outposts:x-amz-metadata-directive","s3-outposts:x-amz-server-side-encryption","s3-outposts:x-amz-storage-class"],"resources":[{"name":"object"}],"description":"Grants permission to add an object to a bucket","accessLevel":"Write","resourceTypes":[{"name":"object","required":true}]},"PutObjectAcl":{"conditionKeys":["s3-outposts:AccessPointNetworkOrigin","s3-outposts:DataAccessPointAccount","s3-outposts:DataAccessPointArn","s3-outposts:ExistingObjectTag/<key>","s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-acl","s3-outposts:x-amz-content-sha256","s3-outposts:x-amz-storage-class"],"resources":[{"name":"object"}],"description":"Grants permission to set the access control list (ACL) permissions for an object that already exists in a bucket","accessLevel":"Permissions management","resourceTypes":[{"name":"object","required":true}]},"PutObjectTagging":{"conditionKeys":["s3-outposts:AccessPointNetworkOrigin","s3-outposts:DataAccessPointAccount","s3-outposts:DataAccessPointArn","s3-outposts:ExistingObjectTag/<key>","s3-outposts:RequestObjectTag/<key>","s3-outposts:RequestObjectTagKeys","s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"object"}],"description":"Grants permission to set the supplied tag-set to an object that already exists in a bucket","accessLevel":"Tagging","resourceTypes":[{"name":"object","required":true}]},"PutObjectVersionTagging":{"conditionKeys":["s3-outposts:AccessPointNetworkOrigin","s3-outposts:DataAccessPointAccount","s3-outposts:DataAccessPointArn","s3-outposts:ExistingObjectTag/<key>","s3-outposts:RequestObjectTag/<key>","s3-outposts:RequestObjectTagKeys","s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:versionid","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"object"}],"description":"Grants permission to set the supplied tag-set for a specific version of an object","accessLevel":"Tagging","resourceTypes":[{"name":"object","required":true}]},"PutReplicationConfiguration":{"conditionKeys":["s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to create a new replication configuration or replace an existing one","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}],"dependentActions":["iam:PassRole"]},"ReplicateDelete":{"conditionKeys":["s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"object"}],"description":"Grants permission to replicate delete markers to the destination bucket","accessLevel":"Write","resourceTypes":[{"name":"object","required":true}]},"ReplicateObject":{"conditionKeys":["s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256","s3-outposts:x-amz-server-side-encryption"],"resources":[{"name":"object"}],"description":"Grants permission to replicate objects and object tags to the destination bucket","accessLevel":"Write","resourceTypes":[{"name":"object","required":true}]},"ReplicateTags":{"conditionKeys":["s3-outposts:authType","s3-outposts:signatureAge","s3-outposts:signatureversion","s3-outposts:x-amz-content-sha256"],"resources":[{"name":"object"}],"description":"Grants permission to replicate object tags to the destination bucket","accessLevel":"Tagging","resourceTypes":[{"name":"object","required":true}]}},"resources":[{"name":"accesspoint","arnFormats":["arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/${OutpostId}/accesspoint/${AccessPointName}"],"conditionKeys":[]},{"name":"bucket","arnFormats":["arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/${OutpostId}/bucket/${BucketName}"],"conditionKeys":[]},{"name":"endpoint","arnFormats":["arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/${OutpostId}/endpoint/${EndpointId}"],"conditionKeys":[]},{"name":"object","arnFormats":["arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/${OutpostId}/bucket/${BucketName}/object/${ObjectName}"],"conditionKeys":[]}],"conditionKeys":{"s3-outposts:AccessPointNetworkOrigin":{"types":["String"],"description":"Filters access by the network origin (Internet or VPC)"},"s3-outposts:DataAccessPointAccount":{"types":["String"],"description":"Filters access by the AWS Account ID that owns the access point"},"s3-outposts:DataAccessPointArn":{"types":["ARN"],"description":"Filters access by an access point Amazon Resource Name (ARN)"},"s3-outposts:ExistingObjectTag/<key>":{"types":["String"],"description":"Filters access by requiring that an existing object tag has a specific tag key and value"},"s3-outposts:RequestObjectTag/<key>":{"types":["String"],"description":"Filters access by restricting the tag keys and values allowed on objects"},"s3-outposts:RequestObjectTagKeys":{"types":["String"],"description":"Filters access by restricting the tag keys allowed on objects"},"s3-outposts:authType":{"types":["String"],"description":"Filters access by restricting incoming requests to a specific authentication method"},"s3-outposts:delimiter":{"types":["String"],"description":"Filters access by requiring the delimiter parameter"},"s3-outposts:max-keys":{"types":["Numeric"],"description":"Filters access by limiting the maximum number of keys returned in a ListBucket request"},"s3-outposts:prefix":{"types":["String"],"description":"Filters access by key name prefix"},"s3-outposts:signatureAge":{"types":["Numeric"],"description":"Filters access by identifying the length of time, in milliseconds, that a signature is valid in an authenticated request"},"s3-outposts:signatureversion":{"types":["String"],"description":"Filters access by identifying the version of AWS Signature that is supported for authenticated requests"},"s3-outposts:versionid":{"types":["String"],"description":"Filters access by a specific object version"},"s3-outposts:x-amz-acl":{"types":["String"],"description":"Filters access by requiring the x-amz-acl header with a specific canned ACL in a request"},"s3-outposts:x-amz-content-sha256":{"types":["String"],"description":"Filters access by disallowing unsigned content in your bucket"},"s3-outposts:x-amz-copy-source":{"types":["String"],"description":"Filters access by restricting the copy source to a specific bucket, prefix, or object"},"s3-outposts:x-amz-metadata-directive":{"types":["String"],"description":"Filters access by enabling enforcement of object metadata behavior (COPY or REPLACE) when objects are copied"},"s3-outposts:x-amz-server-side-encryption":{"types":["String"],"description":"Filters access by requiring server-side encryption"},"s3-outposts:x-amz-storage-class":{"types":["String"],"description":"Filters access by storage class"}}}

package/src/data/servicereference/services/s3.json

@@ -0,0 +1 @@
+{"name":"s3","actions":{"AbortMultipartUpload":{"conditionKeys":["s3:AccessGrantsInstanceArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accesspointobject"},{"name":"object"}],"description":"Grants permission to abort a multipart upload","accessLevel":"Write","resourceTypes":[{"name":"accesspointobject","required":false},{"name":"object","required":false}]},"AssociateAccessGrantsIdentityCenter":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accessgrantsinstance"}],"description":"Grants permission to associate Access Grants identity center","accessLevel":"Permissions management","resourceTypes":[{"name":"accessgrantsinstance","required":true}]},"BypassGovernanceRetention":{"conditionKeys":["s3:RequestObjectTag/<key>","s3:RequestObjectTagKeys","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-acl","s3:x-amz-content-sha256","s3:x-amz-copy-source","s3:x-amz-grant-full-control","s3:x-amz-grant-read","s3:x-amz-grant-read-acp","s3:x-amz-grant-write","s3:x-amz-grant-write-acp","s3:x-amz-metadata-directive","s3:x-amz-server-side-encryption","s3:x-amz-server-side-encryption-aws-kms-key-id","s3:x-amz-server-side-encryption-customer-algorithm","s3:x-amz-storage-class","s3:x-amz-website-redirect-location"],"resources":[{"name":"accesspointobject"},{"name":"object"}],"description":"Grants permission to allow circumvention of governance-mode object retention settings","accessLevel":"Permissions management","resourceTypes":[{"name":"accesspointobject","required":false},{"name":"object","required":false}]},"CreateAccessGrant":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","s3:AccessGrantScope","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accessgrantslocation"}],"description":"Grants permission to create Access Grant","accessLevel":"Permissions management","resourceTypes":[{"name":"accessgrantslocation","required":true}]},"CreateAccessGrantsInstance":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accessgrantsinstance"}],"description":"Grants permission to Create Access Grants Instance","accessLevel":"Permissions management","resourceTypes":[{"name":"accessgrantsinstance","required":true}]},"CreateAccessGrantsLocation":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","s3:AccessGrantsLocationScope","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accessgrantsinstance"}],"description":"Grants permission to create Access Grants location","accessLevel":"Permissions management","resourceTypes":[{"name":"accessgrantsinstance","required":true}]},"CreateAccessPoint":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","s3:AccessPointNetworkOrigin","s3:AccessPointTag/${TagKey}","s3:DataAccessPointAccount","s3:DataAccessPointArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:locationconstraint","s3:signatureAge","s3:signatureversion","s3:x-amz-acl","s3:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to create a new access point","accessLevel":"Write","resourceTypes":[{"name":"accesspoint","required":true}]},"CreateAccessPointForObjectLambda":{"conditionKeys":["s3:AccessPointNetworkOrigin","s3:DataAccessPointAccount","s3:DataAccessPointArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to create an object lambda enabled accesspoint","accessLevel":"Write","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"CreateBucket":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:locationconstraint","s3:signatureAge","s3:signatureversion","s3:x-amz-acl","s3:x-amz-bucket-namespace","s3:x-amz-content-sha256","s3:x-amz-grant-full-control","s3:x-amz-grant-read","s3:x-amz-grant-read-acp","s3:x-amz-grant-write","s3:x-amz-grant-write-acp","s3:x-amz-object-ownership"],"resources":[{"name":"bucket"}],"description":"Grants permission to create a new bucket","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"CreateBucketMetadataTableConfiguration":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to create a new S3 Metadata configuration for a specified general purpose bucket","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}],"dependentActions":["kms:DescribeKey","s3tables:CreateNamespace","s3tables:CreateTable","s3tables:CreateTableBucket","s3tables:GetTable","s3tables:PutTableBucketPolicy","s3tables:PutTableEncryption","s3tables:PutTablePolicy"]},"CreateJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","s3:RequestJobOperation","s3:RequestJobPriority","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[],"description":"Grants permission to create a new Amazon S3 Batch Operations job","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"]},"CreateMultiRegionAccessPoint":{"conditionKeys":["s3:AccessPointNetworkOrigin","s3:DataAccessPointAccount","s3:DataAccessPointArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion"],"resources":[{"name":"multiregionaccesspoint"}],"description":"Grants permission to create a new Multi-Region Access Point","accessLevel":"Write","resourceTypes":[{"name":"multiregionaccesspoint","required":true}]},"CreateStorageLensGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[],"description":"Grants permission to create an Amazon S3 Storage Lens group","accessLevel":"Write","resourceTypes":[]},"DeleteAccessGrant":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3:AccessGrantScope","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accessgrant"}],"description":"Grants permission to delete Access Grant","accessLevel":"Permissions management","resourceTypes":[{"name":"accessgrant","required":true}]},"DeleteAccessGrantsInstance":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accessgrantsinstance"}],"description":"Grants permission to Delete Access Grants Instance","accessLevel":"Permissions management","resourceTypes":[{"name":"accessgrantsinstance","required":true}]},"DeleteAccessGrantsInstanceResourcePolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accessgrantsinstance"}],"description":"Grants permission to read Access grants instance resource policy","accessLevel":"Permissions management","resourceTypes":[{"name":"accessgrantsinstance","required":true}]},"DeleteAccessGrantsLocation":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3:AccessGrantsLocationScope","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accessgrantslocation"}],"description":"Grants permission to delete Access Grants location","accessLevel":"Permissions management","resourceTypes":[{"name":"accessgrantslocation","required":true}]},"DeleteAccessPoint":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3:AccessPointNetworkOrigin","s3:AccessPointTag/${TagKey}","s3:DataAccessPointAccount","s3:DataAccessPointArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to delete the access point named in the URI","accessLevel":"Write","resourceTypes":[{"name":"accesspoint","required":true}]},"DeleteAccessPointForObjectLambda":{"conditionKeys":["s3:AccessPointNetworkOrigin","s3:DataAccessPointAccount","s3:DataAccessPointArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to delete the object lambda enabled access point named in the URI","accessLevel":"Write","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"DeleteAccessPointPolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3:AccessPointNetworkOrigin","s3:AccessPointTag/${TagKey}","s3:DataAccessPointAccount","s3:DataAccessPointArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to delete the policy on a specified access point","accessLevel":"Permissions management","resourceTypes":[{"name":"accesspoint","required":true}]},"DeleteAccessPointPolicyForObjectLambda":{"conditionKeys":["s3:AccessPointNetworkOrigin","s3:DataAccessPointAccount","s3:DataAccessPointArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to delete the policy on a specified object lambda enabled access point","accessLevel":"Permissions management","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"DeleteBucket":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to delete the bucket named in the URI","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"DeleteBucketMetadataTableConfiguration":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to delete the S3 Metadata configuration for a specified general purpose bucket","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"DeleteBucketPolicy":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to delete the policy on a specified bucket","accessLevel":"Permissions management","resourceTypes":[{"name":"bucket","required":true}]},"DeleteBucketWebsite":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to remove the website configuration for a bucket","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"DeleteJobTagging":{"conditionKeys":["s3:ExistingJobOperation","s3:ExistingJobPriority","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"job"}],"description":"Grants permission to remove tags from an existing Amazon S3 Batch Operations job","accessLevel":"Tagging","resourceTypes":[{"name":"job","required":true}]},"DeleteMultiRegionAccessPoint":{"conditionKeys":["s3:AccessPointNetworkOrigin","s3:DataAccessPointAccount","s3:DataAccessPointArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion"],"resources":[{"name":"multiregionaccesspoint"}],"description":"Grants permission to delete the Multi-Region Access Point named in the URI","accessLevel":"Write","resourceTypes":[{"name":"multiregionaccesspoint","required":true}]},"DeleteObject":{"conditionKeys":["s3:AccessGrantsInstanceArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:if-match","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accesspointobject"},{"name":"object"}],"description":"Grants permission to remove the null version of an object and insert a delete marker, which becomes the current version of the object","accessLevel":"Write","resourceTypes":[{"name":"accesspointobject","required":false},{"name":"object","required":false}]},"DeleteObjectTagging":{"conditionKeys":["s3:ExistingObjectTag/<key>","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accesspointobject"},{"name":"object"}],"description":"Grants permission to use the tagging subresource to remove the entire tag set from the specified object","accessLevel":"Tagging","resourceTypes":[{"name":"accesspointobject","required":false},{"name":"object","required":false}]},"DeleteObjectVersion":{"conditionKeys":["s3:AccessGrantsInstanceArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:versionid","s3:x-amz-content-sha256"],"resources":[{"name":"accesspointobject"},{"name":"object"}],"description":"Grants permission to remove a specific version of an object","accessLevel":"Write","resourceTypes":[{"name":"accesspointobject","required":false},{"name":"object","required":false}]},"DeleteObjectVersionTagging":{"conditionKeys":["s3:ExistingObjectTag/<key>","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:versionid","s3:x-amz-content-sha256"],"resources":[{"name":"accesspointobject"},{"name":"object"}],"description":"Grants permission to remove the entire tag set for a specific version of the object","accessLevel":"Tagging","resourceTypes":[{"name":"accesspointobject","required":false},{"name":"object","required":false}]},"DeleteStorageLensConfiguration":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"storagelensconfiguration"}],"description":"Grants permission to delete an existing Amazon S3 Storage Lens configuration","accessLevel":"Write","resourceTypes":[{"name":"storagelensconfiguration","required":true}]},"DeleteStorageLensConfigurationTagging":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"storagelensconfiguration"}],"description":"Grants permission to remove tags from an existing Amazon S3 Storage Lens configuration","accessLevel":"Tagging","resourceTypes":[{"name":"storagelensconfiguration","required":true}]},"DeleteStorageLensGroup":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"storagelensgroup"}],"description":"Grants permission to delete an existing S3 Storage Lens group","accessLevel":"Write","resourceTypes":[{"name":"storagelensgroup","required":true}]},"DescribeJob":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"job"}],"description":"Grants permission to retrieve the configuration parameters and status for a batch operations job","accessLevel":"Read","resourceTypes":[{"name":"job","required":true}]},"DescribeMultiRegionAccessPointOperation":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion"],"resources":[{"name":"multiregionaccesspointrequestarn"}],"description":"Grants permission to retrieve the configurations for a Multi-Region Access Point","accessLevel":"Read","resourceTypes":[{"name":"multiregionaccesspointrequestarn","required":true}]},"DissociateAccessGrantsIdentityCenter":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accessgrantsinstance"}],"description":"Grants permission to disassociate Access Grants identity center","accessLevel":"Permissions management","resourceTypes":[{"name":"accessgrantsinstance","required":true}]},"GetAccelerateConfiguration":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to uses the accelerate subresource to return the Transfer Acceleration state of a bucket, which is either Enabled or Suspended","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"GetAccessGrant":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3:AccessGrantScope","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accessgrant"}],"description":"Grants permission to read Access Grant","accessLevel":"Read","resourceTypes":[{"name":"accessgrant","required":true}]},"GetAccessGrantsInstance":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accessgrantsinstance"}],"description":"Grants permission to Read Access Grants Instance","accessLevel":"Read","resourceTypes":[{"name":"accessgrantsinstance","required":true}]},"GetAccessGrantsInstanceForPrefix":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accessgrantsinstance"}],"description":"Grants permission to Read Access Grants Instance by prefix","accessLevel":"Read","resourceTypes":[{"name":"accessgrantsinstance","required":true}]},"GetAccessGrantsInstanceResourcePolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accessgrantsinstance"}],"description":"Grants permission to read Access grants instance resource policy","accessLevel":"Read","resourceTypes":[{"name":"accessgrantsinstance","required":true}]},"GetAccessGrantsLocation":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3:AccessGrantsLocationScope","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accessgrantslocation"}],"description":"Grants permission to read Access Grants location","accessLevel":"Read","resourceTypes":[{"name":"accessgrantslocation","required":true}]},"GetAccessPoint":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3:AccessPointNetworkOrigin","s3:AccessPointTag/${TagKey}","s3:DataAccessPointAccount","s3:DataAccessPointArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[],"description":"Grants permission to return configuration information about the specified access point","accessLevel":"Read","resourceTypes":[]},"GetAccessPointConfigurationForObjectLambda":{"conditionKeys":["s3:AccessPointNetworkOrigin","s3:DataAccessPointAccount","s3:DataAccessPointArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to retrieve the configuration of the object lambda enabled access point","accessLevel":"Read","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"GetAccessPointForObjectLambda":{"conditionKeys":["s3:AccessPointNetworkOrigin","s3:DataAccessPointAccount","s3:DataAccessPointArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to create an object lambda enabled accesspoint","accessLevel":"Read","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"GetAccessPointPolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3:AccessPointNetworkOrigin","s3:AccessPointTag/${TagKey}","s3:DataAccessPointAccount","s3:DataAccessPointArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to return the access point policy associated with the specified access point","accessLevel":"Read","resourceTypes":[{"name":"accesspoint","required":true}]},"GetAccessPointPolicyForObjectLambda":{"conditionKeys":["s3:AccessPointNetworkOrigin","s3:DataAccessPointAccount","s3:DataAccessPointArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to return the access point policy associated with the specified object lambda enabled access point","accessLevel":"Read","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"GetAccessPointPolicyStatus":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3:AccessPointNetworkOrigin","s3:AccessPointTag/${TagKey}","s3:DataAccessPointAccount","s3:DataAccessPointArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to return the policy status for a specific access point policy","accessLevel":"Read","resourceTypes":[{"name":"accesspoint","required":true}]},"GetAccessPointPolicyStatusForObjectLambda":{"conditionKeys":["s3:AccessPointNetworkOrigin","s3:DataAccessPointAccount","s3:DataAccessPointArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to return the policy status for a specific object lambda access point policy","accessLevel":"Read","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"GetAccountPublicAccessBlock":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[],"description":"Grants permission to retrieve the PublicAccessBlock configuration for an AWS account","accessLevel":"Read","resourceTypes":[]},"GetAnalyticsConfiguration":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to get an analytics configuration from an Amazon S3 bucket, identified by the analytics configuration ID","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"GetBucketAbac":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to retrieve ABAC configuration for a general purpose bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"GetBucketAcl":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accesspoint"},{"name":"bucket"}],"description":"Grants permission to use the acl subresource to return the access control list (ACL) of an Amazon S3 bucket","accessLevel":"Read","resourceTypes":[{"name":"accesspoint","required":false},{"name":"bucket","required":false}]},"GetBucketCORS":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accesspoint"},{"name":"bucket"}],"description":"Grants permission to return the CORS configuration information set for an Amazon S3 bucket","accessLevel":"Read","resourceTypes":[{"name":"accesspoint","required":false},{"name":"bucket","required":false}]},"GetBucketLocation":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accesspoint"},{"name":"bucket"}],"description":"Grants permission to return the Region that an Amazon S3 bucket resides in","accessLevel":"Read","resourceTypes":[{"name":"accesspoint","required":false},{"name":"bucket","required":false}]},"GetBucketLogging":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to return the logging status of an Amazon S3 bucket and the permissions users have to view or modify that status","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"GetBucketMetadataTableConfiguration":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to return the S3 Metadata configuration for a specified general purpose bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"GetBucketNotification":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accesspoint"},{"name":"bucket"}],"description":"Grants permission to get the notification configuration of an Amazon S3 bucket","accessLevel":"Read","resourceTypes":[{"name":"accesspoint","required":false},{"name":"bucket","required":false}]},"GetBucketObjectLockConfiguration":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:signatureversion"],"resources":[{"name":"bucket"}],"description":"Grants permission to get the Object Lock configuration of an Amazon S3 bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"GetBucketOwnershipControls":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to retrieve ownership controls on a bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"GetBucketPolicy":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accesspoint"},{"name":"bucket"}],"description":"Grants permission to return the policy of the specified bucket","accessLevel":"Read","resourceTypes":[{"name":"accesspoint","required":false},{"name":"bucket","required":false}]},"GetBucketPolicyStatus":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to retrieve the policy status for a specific Amazon S3 bucket, which indicates whether the bucket is public","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"GetBucketPublicAccessBlock":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to retrieve the PublicAccessBlock configuration for an Amazon S3 bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"GetBucketRequestPayment":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to return the request payment configuration for an Amazon S3 bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"GetBucketTagging":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to return the tag set associated with an Amazon S3 bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"GetBucketVersioning":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to return the versioning state of an Amazon S3 bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"GetBucketWebsite":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to return the website configuration for an Amazon S3 bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"GetDataAccess":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accessgrantsinstance"}],"description":"Grants permission to get Access","accessLevel":"Read","resourceTypes":[{"name":"accessgrantsinstance","required":true}]},"GetEncryptionConfiguration":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to return the default encryption configuration an Amazon S3 bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"GetIntelligentTieringConfiguration":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to get an or list all Amazon S3 Intelligent Tiering configuration in a S3 Bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"GetInventoryConfiguration":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to return an inventory configuration from an Amazon S3 bucket, identified by the inventory configuration ID","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"GetJobTagging":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"job"}],"description":"Grants permission to return the tag set of an existing Amazon S3 Batch Operations job","accessLevel":"Read","resourceTypes":[{"name":"job","required":true}]},"GetLifecycleConfiguration":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to return the lifecycle configuration information set on an Amazon S3 bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"GetMetricsConfiguration":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to get a metrics configuration from an Amazon S3 bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"GetMultiRegionAccessPoint":{"conditionKeys":["s3:AccessPointNetworkOrigin","s3:DataAccessPointAccount","s3:DataAccessPointArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion"],"resources":[{"name":"multiregionaccesspoint"}],"description":"Grants permission to return configuration information about the specified Multi-Region Access Point","accessLevel":"Read","resourceTypes":[{"name":"multiregionaccesspoint","required":true}]},"GetMultiRegionAccessPointPolicy":{"conditionKeys":["s3:AccessPointNetworkOrigin","s3:DataAccessPointAccount","s3:DataAccessPointArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion"],"resources":[{"name":"multiregionaccesspoint"}],"description":"Grants permission to return the access point policy associated with the specified Multi-Region Access Point","accessLevel":"Read","resourceTypes":[{"name":"multiregionaccesspoint","required":true}]},"GetMultiRegionAccessPointPolicyStatus":{"conditionKeys":["s3:AccessPointNetworkOrigin","s3:DataAccessPointAccount","s3:DataAccessPointArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion"],"resources":[{"name":"multiregionaccesspoint"}],"description":"Grants permission to return the policy status for a specific Multi-Region Access Point policy","accessLevel":"Read","resourceTypes":[{"name":"multiregionaccesspoint","required":true}]},"GetMultiRegionAccessPointRoutes":{"conditionKeys":["s3:AccessPointNetworkOrigin","s3:DataAccessPointAccount","s3:DataAccessPointArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion"],"resources":[{"name":"multiregionaccesspoint"}],"description":"Grants permission to return the route configuration for a Multi-Region Access Point","accessLevel":"Read","resourceTypes":[{"name":"multiregionaccesspoint","required":true}]},"GetObject":{"conditionKeys":["s3:AccessGrantsInstanceArn","s3:ExistingObjectTag/<key>","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accesspointobject"},{"name":"object"}],"description":"Grants permission to retrieve objects from Amazon S3","accessLevel":"Read","resourceTypes":[{"name":"accesspointobject","required":false},{"name":"object","required":false}]},"GetObjectAcl":{"conditionKeys":["s3:AccessGrantsInstanceArn","s3:ExistingObjectTag/<key>","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accesspointobject"},{"name":"object"}],"description":"Grants permission to return the access control list (ACL) of an object","accessLevel":"Read","resourceTypes":[{"name":"accesspointobject","required":false},{"name":"object","required":false}]},"GetObjectAttributes":{"conditionKeys":["s3:ExistingObjectTag/<key>","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accesspointobject"},{"name":"object"}],"description":"Grants permission to retrieve attributes related to a specific object","accessLevel":"Read","resourceTypes":[{"name":"accesspointobject","required":false},{"name":"object","required":false}]},"GetObjectLegalHold":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accesspointobject"},{"name":"object"}],"description":"Grants permission to get an object's current Legal Hold status","accessLevel":"Read","resourceTypes":[{"name":"accesspointobject","required":false},{"name":"object","required":false}]},"GetObjectRetention":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accesspointobject"},{"name":"object"}],"description":"Grants permission to retrieve the retention settings for an object","accessLevel":"Read","resourceTypes":[{"name":"accesspointobject","required":false},{"name":"object","required":false}]},"GetObjectTagging":{"conditionKeys":["s3:ExistingObjectTag/<key>","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accesspointobject"},{"name":"object"}],"description":"Grants permission to return the tag set of an object","accessLevel":"Read","resourceTypes":[{"name":"accesspointobject","required":false},{"name":"object","required":false}]},"GetObjectTorrent":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"object"}],"description":"Grants permission to return torrent files from an Amazon S3 bucket","accessLevel":"Read","resourceTypes":[{"name":"object","required":true}]},"GetObjectVersion":{"conditionKeys":["s3:AccessGrantsInstanceArn","s3:ExistingObjectTag/<key>","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:versionid","s3:x-amz-content-sha256"],"resources":[{"name":"accesspointobject"},{"name":"object"}],"description":"Grants permission to retrieve a specific version of an object","accessLevel":"Read","resourceTypes":[{"name":"accesspointobject","required":false},{"name":"object","required":false}]},"GetObjectVersionAcl":{"conditionKeys":["s3:AccessGrantsInstanceArn","s3:ExistingObjectTag/<key>","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:versionid","s3:x-amz-content-sha256"],"resources":[{"name":"accesspointobject"},{"name":"object"}],"description":"Grants permission to return the access control list (ACL) of a specific object version","accessLevel":"Read","resourceTypes":[{"name":"accesspointobject","required":false},{"name":"object","required":false}]},"GetObjectVersionAttributes":{"conditionKeys":["s3:ExistingObjectTag/<key>","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:versionid","s3:x-amz-content-sha256"],"resources":[{"name":"accesspointobject"},{"name":"object"}],"description":"Grants permission to retrieve attributes related to a specific version of an object","accessLevel":"Read","resourceTypes":[{"name":"accesspointobject","required":false},{"name":"object","required":false}]},"GetObjectVersionForReplication":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"object"}],"description":"Grants permission to replicate both unencrypted objects and objects encrypted with SSE-S3 or SSE-KMS","accessLevel":"Read","resourceTypes":[{"name":"object","required":true}]},"GetObjectVersionTagging":{"conditionKeys":["s3:ExistingObjectTag/<key>","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:versionid","s3:x-amz-content-sha256"],"resources":[{"name":"accesspointobject"},{"name":"object"}],"description":"Grants permission to return the tag set for a specific version of the object","accessLevel":"Read","resourceTypes":[{"name":"accesspointobject","required":false},{"name":"object","required":false}]},"GetObjectVersionTorrent":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:versionid","s3:x-amz-content-sha256"],"resources":[{"name":"object"}],"description":"Grants permission to get Torrent files about a different version using the versionId subresource","accessLevel":"Read","resourceTypes":[{"name":"object","required":true}]},"GetReplicationConfiguration":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to get the replication configuration information set on an Amazon S3 bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"GetStorageLensConfiguration":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"storagelensconfiguration"}],"description":"Grants permission to get an Amazon S3 Storage Lens configuration","accessLevel":"Read","resourceTypes":[{"name":"storagelensconfiguration","required":true}]},"GetStorageLensConfigurationTagging":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"storagelensconfiguration"}],"description":"Grants permission to get the tag set of an existing Amazon S3 Storage Lens configuration","accessLevel":"Read","resourceTypes":[{"name":"storagelensconfiguration","required":true}]},"GetStorageLensDashboard":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"storagelensconfiguration"}],"description":"Grants permission to get an Amazon S3 Storage Lens dashboard","accessLevel":"Read","resourceTypes":[{"name":"storagelensconfiguration","required":true}]},"GetStorageLensGroup":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"storagelensgroup"}],"description":"Grants permission to get an Amazon S3 Storage Lens group","accessLevel":"Read","resourceTypes":[{"name":"storagelensgroup","required":true}]},"InitiateReplication":{"conditionKeys":["s3:ResourceAccount"],"resources":[{"name":"object"}],"description":"Grants permission to initiate the replication process by setting replication status of an object to pending","accessLevel":"Write","resourceTypes":[{"name":"object","required":true}],"permissionOnly":true},"ListAccessGrants":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accessgrantsinstance"}],"description":"Grants permission to list Access Grant","accessLevel":"List","resourceTypes":[{"name":"accessgrantsinstance","required":true}]},"ListAccessGrantsInstances":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[],"description":"Grants permission to List Access Grants Instances","accessLevel":"List","resourceTypes":[]},"ListAccessGrantsLocations":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accessgrantsinstance"}],"description":"Grants permission to list Access Grants locations","accessLevel":"List","resourceTypes":[{"name":"accessgrantsinstance","required":true}]},"ListAccessPoints":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[],"description":"Grants permission to list access points","accessLevel":"List","resourceTypes":[]},"ListAccessPointsForObjectLambda":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[],"description":"Grants permission to list object lambda enabled accesspoints","accessLevel":"List","resourceTypes":[]},"ListAllMyBuckets":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[],"description":"Grants permission to list all buckets owned by the authenticated sender of the request","accessLevel":"List","resourceTypes":[]},"ListBucket":{"conditionKeys":["s3:AccessGrantsInstanceArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:delimiter","s3:max-keys","s3:prefix","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accesspoint"},{"name":"bucket"}],"description":"Grants permission to list some or all of the objects in an Amazon S3 bucket (up to 1000)","accessLevel":"List","resourceTypes":[{"name":"accesspoint","required":false},{"name":"bucket","required":false}]},"ListBucketMultipartUploads":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3:AccessGrantsInstanceArn","s3:AccessPointNetworkOrigin","s3:AccessPointTag/${TagKey}","s3:DataAccessPointAccount","s3:DataAccessPointArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to list in-progress multipart uploads","accessLevel":"List","resourceTypes":[{"name":"bucket","required":true}]},"ListBucketVersions":{"conditionKeys":["s3:AccessGrantsInstanceArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:delimiter","s3:max-keys","s3:prefix","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accesspoint"},{"name":"bucket"}],"description":"Grants permission to list metadata about all the versions of objects in an Amazon S3 bucket","accessLevel":"List","resourceTypes":[{"name":"accesspoint","required":false},{"name":"bucket","required":false}]},"ListCallerAccessGrants":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accessgrantsinstance"}],"description":"Grants permission to list caller's Access Grant","accessLevel":"List","resourceTypes":[{"name":"accessgrantsinstance","required":true}]},"ListJobs":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[],"description":"Grants permission to list current jobs and jobs that have ended recently","accessLevel":"List","resourceTypes":[]},"ListMultiRegionAccessPoints":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion"],"resources":[],"description":"Grants permission to list Multi-Region Access Points","accessLevel":"List","resourceTypes":[]},"ListMultipartUploadParts":{"conditionKeys":["s3:AccessGrantsInstanceArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accesspointobject"},{"name":"object"}],"description":"Grants permission to list the parts that have been uploaded for a specific multipart upload","accessLevel":"List","resourceTypes":[{"name":"accesspointobject","required":false},{"name":"object","required":false}]},"ListStorageLensConfigurations":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[],"description":"Grants permission to list Amazon S3 Storage Lens configurations","accessLevel":"List","resourceTypes":[]},"ListStorageLensGroups":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[],"description":"Grants permission to list S3 Storage Lens groups","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accessgrant"},{"name":"accessgrantsinstance"},{"name":"accessgrantslocation"},{"name":"accesspoint"},{"name":"bucket"},{"name":"storagelensgroup"}],"description":"Grants permission to list the tags attached to the specified resource","accessLevel":"List","resourceTypes":[{"name":"accessgrant","required":false},{"name":"accessgrantsinstance","required":false},{"name":"accessgrantslocation","required":false},{"name":"accesspoint","required":false},{"name":"bucket","required":false},{"name":"storagelensgroup","required":false}]},"ObjectOwnerOverrideToBucketOwner":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"object"}],"description":"Grants permission to change replica ownership","accessLevel":"Permissions management","resourceTypes":[{"name":"object","required":true}]},"PauseReplication":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:destinationRegion","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to pause S3 Replication from target source buckets to destination buckets","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}],"dependentActions":["s3:GetReplicationConfiguration","s3:PutReplicationConfiguration"],"permissionOnly":true},"PutAccelerateConfiguration":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to use the accelerate subresource to set the Transfer Acceleration state of an existing S3 bucket","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"PutAccessGrantsInstanceResourcePolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accessgrantsinstance"}],"description":"Grants permission to put Access grants instance resource policy","accessLevel":"Permissions management","resourceTypes":[{"name":"accessgrantsinstance","required":true}]},"PutAccessPointConfigurationForObjectLambda":{"conditionKeys":["s3:AccessPointNetworkOrigin","s3:DataAccessPointAccount","s3:DataAccessPointArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to set the configuration of the object lambda enabled access point","accessLevel":"Write","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"PutAccessPointPolicy":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to associate an access policy with a specified access point","accessLevel":"Permissions management","resourceTypes":[{"name":"accesspoint","required":true}]},"PutAccessPointPolicyForObjectLambda":{"conditionKeys":["s3:AccessPointNetworkOrigin","s3:DataAccessPointAccount","s3:DataAccessPointArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"objectlambdaaccesspoint"}],"description":"Grants permission to associate an access policy with a specified object lambda enabled access point","accessLevel":"Permissions management","resourceTypes":[{"name":"objectlambdaaccesspoint","required":true}]},"PutAccessPointPublicAccessBlock":{"conditionKeys":[],"resources":[],"description":"Grants permission to associate public access block configurations with a specified access point, while creating a access point","accessLevel":"Permissions management","resourceTypes":[]},"PutAccountPublicAccessBlock":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[],"description":"Grants permission to create or modify the PublicAccessBlock configuration for an AWS account","accessLevel":"Permissions management","resourceTypes":[]},"PutAnalyticsConfiguration":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to set an analytics configuration for the bucket, specified by the analytics configuration ID","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"PutBucketAbac":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to set ABAC configuration for a general purpose bucket","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"PutBucketAcl":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-acl","s3:x-amz-content-sha256","s3:x-amz-grant-full-control","s3:x-amz-grant-read","s3:x-amz-grant-read-acp","s3:x-amz-grant-write","s3:x-amz-grant-write-acp"],"resources":[{"name":"bucket"}],"description":"Grants permission to set the permissions on an existing bucket using access control lists (ACLs)","accessLevel":"Permissions management","resourceTypes":[{"name":"bucket","required":true}]},"PutBucketCORS":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to set the CORS configuration for an Amazon S3 bucket","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"PutBucketLogging":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to set the logging parameters for an Amazon S3 bucket","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"PutBucketNotification":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to receive notifications when certain events happen in an Amazon S3 bucket","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"PutBucketObjectLockConfiguration":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion"],"resources":[{"name":"bucket"}],"description":"Grants permission to put Object Lock configuration on a specific bucket","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"PutBucketOwnershipControls":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to add, replace or delete ownership controls on a bucket","accessLevel":"Permissions management","resourceTypes":[{"name":"bucket","required":true}]},"PutBucketPolicy":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to add or replace a bucket policy on a bucket","accessLevel":"Permissions management","resourceTypes":[{"name":"bucket","required":true}]},"PutBucketPublicAccessBlock":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to create or modify the PublicAccessBlock configuration for a specific Amazon S3 bucket","accessLevel":"Permissions management","resourceTypes":[{"name":"bucket","required":true}]},"PutBucketRequestPayment":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to set the request payment configuration of a bucket","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"PutBucketTagging":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to add a set of tags to an existing Amazon S3 bucket","accessLevel":"Tagging","resourceTypes":[{"name":"bucket","required":true}]},"PutBucketVersioning":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to set the versioning state of an existing Amazon S3 bucket","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"PutBucketWebsite":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to set the configuration of the website that is specified in the website subresource","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"PutEncryptionConfiguration":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to set the encryption configuration for an Amazon S3 bucket","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"PutIntelligentTieringConfiguration":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to create new or update or delete an existing Amazon S3 Intelligent Tiering configuration","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"PutInventoryConfiguration":{"conditionKeys":["s3:InventoryAccessibleOptionalFields","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to add an inventory configuration to the bucket, identified by the inventory ID","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"PutJobTagging":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","s3:ExistingJobOperation","s3:ExistingJobPriority","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"job"}],"description":"Grants permission to replace tags on an existing Amazon S3 Batch Operations job","accessLevel":"Tagging","resourceTypes":[{"name":"job","required":true}]},"PutLifecycleConfiguration":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to create a new lifecycle configuration for the bucket or replace an existing lifecycle configuration","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"PutMetricsConfiguration":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to set or update a metrics configuration for the CloudWatch request metrics from an Amazon S3 bucket","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"PutMultiRegionAccessPointPolicy":{"conditionKeys":["s3:AccessPointNetworkOrigin","s3:DataAccessPointAccount","s3:DataAccessPointArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion"],"resources":[{"name":"multiregionaccesspoint"}],"description":"Grants permission to associate an access policy with a specified Multi-Region Access Point","accessLevel":"Permissions management","resourceTypes":[{"name":"multiregionaccesspoint","required":true}]},"PutObject":{"conditionKeys":["s3:AccessGrantsInstanceArn","s3:ObjectCreationOperation","s3:RequestObjectTag/<key>","s3:RequestObjectTagKeys","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:if-match","s3:if-none-match","s3:object-lock-legal-hold","s3:object-lock-mode","s3:object-lock-remaining-retention-days","s3:object-lock-retain-until-date","s3:signatureAge","s3:signatureversion","s3:x-amz-acl","s3:x-amz-content-sha256","s3:x-amz-copy-source","s3:x-amz-grant-full-control","s3:x-amz-grant-read","s3:x-amz-grant-read-acp","s3:x-amz-grant-write","s3:x-amz-grant-write-acp","s3:x-amz-metadata-directive","s3:x-amz-server-side-encryption","s3:x-amz-server-side-encryption-aws-kms-key-id","s3:x-amz-server-side-encryption-customer-algorithm","s3:x-amz-storage-class","s3:x-amz-website-redirect-location"],"resources":[{"name":"accesspointobject"},{"name":"object"}],"description":"Grants permission to add an object to a bucket","accessLevel":"Write","resourceTypes":[{"name":"accesspointobject","required":false},{"name":"object","required":false}]},"PutObjectAcl":{"conditionKeys":["s3:AccessGrantsInstanceArn","s3:ExistingObjectTag/<key>","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-acl","s3:x-amz-content-sha256","s3:x-amz-grant-full-control","s3:x-amz-grant-read","s3:x-amz-grant-read-acp","s3:x-amz-grant-write","s3:x-amz-grant-write-acp","s3:x-amz-storage-class"],"resources":[{"name":"accesspointobject"},{"name":"object"}],"description":"Grants permission to set the access control list (ACL) permissions for new or existing objects in an S3 bucket","accessLevel":"Permissions management","resourceTypes":[{"name":"accesspointobject","required":false},{"name":"object","required":false}]},"PutObjectLegalHold":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:object-lock-legal-hold","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accesspointobject"},{"name":"object"}],"description":"Grants permission to apply a Legal Hold configuration to the specified object","accessLevel":"Write","resourceTypes":[{"name":"accesspointobject","required":false},{"name":"object","required":false}]},"PutObjectRetention":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:object-lock-mode","s3:object-lock-remaining-retention-days","s3:object-lock-retain-until-date","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accesspointobject"},{"name":"object"}],"description":"Grants permission to place an Object Retention configuration on an object","accessLevel":"Write","resourceTypes":[{"name":"accesspointobject","required":false},{"name":"object","required":false}]},"PutObjectTagging":{"conditionKeys":["s3:ExistingObjectTag/<key>","s3:RequestObjectTag/<key>","s3:RequestObjectTagKeys","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accesspointobject"},{"name":"object"}],"description":"Grants permission to set the supplied tag-set to an object that already exists in a bucket","accessLevel":"Tagging","resourceTypes":[{"name":"accesspointobject","required":false},{"name":"object","required":false}]},"PutObjectVersionAcl":{"conditionKeys":["s3:AccessGrantsInstanceArn","s3:ExistingObjectTag/<key>","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:versionid","s3:x-amz-acl","s3:x-amz-content-sha256","s3:x-amz-grant-full-control","s3:x-amz-grant-read","s3:x-amz-grant-read-acp","s3:x-amz-grant-write","s3:x-amz-grant-write-acp","s3:x-amz-storage-class"],"resources":[{"name":"accesspointobject"},{"name":"object"}],"description":"Grants permission to use the acl subresource to set the access control list (ACL) permissions for an object that already exists in a bucket","accessLevel":"Permissions management","resourceTypes":[{"name":"accesspointobject","required":false},{"name":"object","required":false}]},"PutObjectVersionTagging":{"conditionKeys":["s3:ExistingObjectTag/<key>","s3:RequestObjectTag/<key>","s3:RequestObjectTagKeys","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:versionid","s3:x-amz-content-sha256"],"resources":[{"name":"accesspointobject"},{"name":"object"}],"description":"Grants permission to set the supplied tag-set for a specific version of an object","accessLevel":"Tagging","resourceTypes":[{"name":"accesspointobject","required":false},{"name":"object","required":false}]},"PutReplicationConfiguration":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:isReplicationPauseRequest","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to create a new replication configuration or replace an existing one","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}],"dependentActions":["iam:PassRole"]},"PutStorageLensConfiguration":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[],"description":"Grants permission to create or update an Amazon S3 Storage Lens configuration","accessLevel":"Write","resourceTypes":[]},"PutStorageLensConfigurationTagging":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"storagelensconfiguration"}],"description":"Grants permission to put or replace tags on an existing Amazon S3 Storage Lens configuration","accessLevel":"Tagging","resourceTypes":[{"name":"storagelensconfiguration","required":true}]},"ReplicateDelete":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"object"}],"description":"Grants permission to replicate delete markers to the destination bucket","accessLevel":"Write","resourceTypes":[{"name":"object","required":true}]},"ReplicateObject":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256","s3:x-amz-server-side-encryption","s3:x-amz-server-side-encryption-aws-kms-key-id","s3:x-amz-server-side-encryption-customer-algorithm"],"resources":[{"name":"object"}],"description":"Grants permission to replicate objects and object tags to the destination bucket","accessLevel":"Write","resourceTypes":[{"name":"object","required":true}]},"ReplicateTags":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"object"}],"description":"Grants permission to replicate object tags to the destination bucket","accessLevel":"Tagging","resourceTypes":[{"name":"object","required":true}]},"RestoreObject":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accesspointobject"},{"name":"object"}],"description":"Grants permission to restore an archived copy of an object back into Amazon S3","accessLevel":"Write","resourceTypes":[{"name":"accesspointobject","required":false},{"name":"object","required":false}]},"SubmitMultiRegionAccessPointRoutes":{"conditionKeys":["s3:AccessPointNetworkOrigin","s3:DataAccessPointAccount","s3:DataAccessPointArn","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion"],"resources":[{"name":"multiregionaccesspoint"}],"description":"Grants permission to submit a route configuration update for a Multi-Region Access Point","accessLevel":"Write","resourceTypes":[{"name":"multiregionaccesspoint","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accessgrant"},{"name":"accessgrantsinstance"},{"name":"accessgrantslocation"},{"name":"accesspoint"},{"name":"bucket"},{"name":"storagelensgroup"}],"description":"Grants permission to add tags to the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"accessgrant","required":false},{"name":"accessgrantsinstance","required":false},{"name":"accessgrantslocation","required":false},{"name":"accesspoint","required":false},{"name":"bucket","required":false},{"name":"storagelensgroup","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accessgrant"},{"name":"accessgrantsinstance"},{"name":"accessgrantslocation"},{"name":"accesspoint"},{"name":"bucket"},{"name":"storagelensgroup"}],"description":"Grants permission to remove tags from the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"accessgrant","required":false},{"name":"accessgrantsinstance","required":false},{"name":"accessgrantslocation","required":false},{"name":"accesspoint","required":false},{"name":"bucket","required":false},{"name":"storagelensgroup","required":false}]},"UpdateAccessGrantsLocation":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3:AccessGrantsLocationScope","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"accessgrantslocation"}],"description":"Grants permission to update Access Grants location","accessLevel":"Permissions management","resourceTypes":[{"name":"accessgrantslocation","required":true}]},"UpdateBucketMetadataInventoryTableConfiguration":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to update the inventory table configuration on an existing S3 Metadata configuration for a specified general purpose bucket","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}],"dependentActions":["kms:DescribeKey","s3tables:CreateNamespace","s3tables:CreateTable","s3tables:CreateTableBucket","s3tables:GetTable","s3tables:PutTableEncryption","s3tables:PutTablePolicy"]},"UpdateBucketMetadataJournalTableConfiguration":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to update the journal table configuration on an existing S3 Metadata configuration for a specified general purpose bucket","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"UpdateJobPriority":{"conditionKeys":["s3:ExistingJobOperation","s3:ExistingJobPriority","s3:RequestJobPriority","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"job"}],"description":"Grants permission to update the priority of an existing job","accessLevel":"Write","resourceTypes":[{"name":"job","required":true}]},"UpdateJobStatus":{"conditionKeys":["s3:ExistingJobOperation","s3:ExistingJobPriority","s3:JobSuspendedCause","s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"job"}],"description":"Grants permission to update the status for the specified job","accessLevel":"Write","resourceTypes":[{"name":"job","required":true}]},"UpdateObjectEncryption":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256","s3:x-amz-server-side-encryption","s3:x-amz-server-side-encryption-aws-kms-key-id"],"resources":[{"name":"accesspointobject"},{"name":"object"}],"description":"Grants permission to update the server-side encryption type of an existing object in a general purpose bucket","accessLevel":"Write","resourceTypes":[{"name":"accesspointobject","required":false},{"name":"object","required":false}]},"UpdateStorageLensGroup":{"conditionKeys":["s3:ResourceAccount","s3:TlsVersion","s3:authType","s3:signatureAge","s3:signatureversion","s3:x-amz-content-sha256"],"resources":[{"name":"storagelensgroup"}],"description":"Grants permission to update an existing S3 Storage Lens group","accessLevel":"Write","resourceTypes":[{"name":"storagelensgroup","required":true}]}},"resources":[{"name":"accessgrant","arnFormats":["arn:${Partition}:s3:${Region}:${Account}:access-grants/default/grant/${Token}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"]},{"name":"accessgrantsinstance","arnFormats":["arn:${Partition}:s3:${Region}:${Account}:access-grants/default"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"]},{"name":"accessgrantslocation","arnFormats":["arn:${Partition}:s3:${Region}:${Account}:access-grants/default/location/${Token}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"]},{"name":"accesspoint","arnFormats":["arn:${Partition}:s3:${Region}:${Account}:accesspoint/${AccessPointName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","s3:AccessPointNetworkOrigin","s3:AccessPointTag/${TagKey}","s3:DataAccessPointAccount","s3:DataAccessPointArn"]},{"name":"accesspointobject","arnFormats":["arn:${Partition}:s3:${Region}:${Account}:accesspoint/${AccessPointName}/object/${ObjectName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","s3:AccessPointNetworkOrigin","s3:AccessPointTag/${TagKey}","s3:BucketTag/${TagKey}","s3:DataAccessPointAccount","s3:DataAccessPointArn"]},{"name":"bucket","arnFormats":["arn:${Partition}:s3:::${BucketName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","s3:BucketTag/${TagKey}"]},{"name":"job","arnFormats":["arn:${Partition}:s3:${Region}:${Account}:job/${JobId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"]},{"name":"multiregionaccesspoint","arnFormats":["arn:${Partition}:s3::${Account}:accesspoint/${AccessPointAlias}"],"conditionKeys":[]},{"name":"multiregionaccesspointrequestarn","arnFormats":["arn:${Partition}:s3:us-west-2:${Account}:async-request/mrap/${Operation}/${Token}"],"conditionKeys":[]},{"name":"object","arnFormats":["arn:${Partition}:s3:::${BucketName}/${ObjectName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","s3:BucketTag/${TagKey}"]},{"name":"objectlambdaaccesspoint","arnFormats":["arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/${AccessPointName}"],"conditionKeys":[]},{"name":"storagelensconfiguration","arnFormats":["arn:${Partition}:s3:${Region}:${Account}:storage-lens/${ConfigId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"]},{"name":"storagelensgroup","arnFormats":["arn:${Partition}:s3:${Region}:${Account}:storage-lens-group/${Name}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"s3:AccessGrantScope":{"types":["String"],"description":"Filters access by the grant scope of access grants grant"},"s3:AccessGrantsInstanceArn":{"types":["ARN"],"description":"Filters access by access grants instance ARN"},"s3:AccessGrantsLocationScope":{"types":["String"],"description":"Filters access by the location scope of access grants location"},"s3:AccessPointNetworkOrigin":{"types":["String"],"description":"Filters access by the network origin (Internet or VPC)"},"s3:AccessPointTag/${TagKey}":{"types":["String"],"description":"Filters access by existing access point tag key and value"},"s3:BucketTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the bucket"},"s3:DataAccessPointAccount":{"types":["String"],"description":"Filters access by the AWS Account ID that owns the access point"},"s3:DataAccessPointArn":{"types":["ARN"],"description":"Filters access by an access point Amazon Resource Name (ARN)"},"s3:ExistingJobOperation":{"types":["String"],"description":"Filters access by operation to updating the job priority"},"s3:ExistingJobPriority":{"types":["Numeric"],"description":"Filters access by priority range to cancelling existing jobs"},"s3:ExistingObjectTag/<key>":{"types":["String"],"description":"Filters access by existing object tag key and value"},"s3:InventoryAccessibleOptionalFields":{"types":["ArrayOfString"],"description":"Filters access by restricting which optional metadata fields a user can add when configuring S3 Inventory reports"},"s3:JobSuspendedCause":{"types":["String"],"description":"Filters access by a specific job suspended cause (for example, AWAITING_CONFIRMATION) to cancelling suspended jobs"},"s3:ObjectCreationOperation":{"types":["Bool"],"description":"Filters access by whether or not the operation creates an object"},"s3:RequestJobOperation":{"types":["String"],"description":"Filters access by operation to creating jobs"},"s3:RequestJobPriority":{"types":["Numeric"],"description":"Filters access by priority range to creating new jobs"},"s3:RequestObjectTag/<key>":{"types":["String"],"description":"Filters access by the tag keys and values to be added to objects"},"s3:RequestObjectTagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys to be added to objects"},"s3:ResourceAccount":{"types":["String"],"description":"Filters access by the resource owner AWS account ID"},"s3:TlsVersion":{"types":["Numeric"],"description":"Filters access by the TLS version used by the client"},"s3:authType":{"types":["String"],"description":"Filters access by authentication method"},"s3:delimiter":{"types":["String"],"description":"Filters access by delimiter parameter"},"s3:destinationRegion":{"types":["String"],"description":"Filters access by a specific replication destination region for targeted buckets of the AWS FIS action aws:s3:bucket-pause-replication"},"s3:if-match":{"types":["String"],"description":"Filters access by the request's 'If-Match' conditional header"},"s3:if-none-match":{"types":["String"],"description":"Filters access by the request's 'If-None-Match' conditional header"},"s3:isReplicationPauseRequest":{"types":["Bool"],"description":"Filters access by request made via AWS FIS action aws:s3:bucket-pause-replication"},"s3:locationconstraint":{"types":["String"],"description":"Filters access by a specific Region"},"s3:max-keys":{"types":["Numeric"],"description":"Filters access by maximum number of keys returned in a ListBucket request"},"s3:object-lock-legal-hold":{"types":["String"],"description":"Filters access by object legal hold status"},"s3:object-lock-mode":{"types":["String"],"description":"Filters access by object retention mode (COMPLIANCE or GOVERNANCE)"},"s3:object-lock-remaining-retention-days":{"types":["Numeric"],"description":"Filters access by remaining object retention days"},"s3:object-lock-retain-until-date":{"types":["Date"],"description":"Filters access by object retain-until date"},"s3:prefix":{"types":["String"],"description":"Filters access by key name prefix"},"s3:signatureAge":{"types":["Numeric"],"description":"Filters access by the age in milliseconds of the request signature"},"s3:signatureversion":{"types":["String"],"description":"Filters access by the version of AWS Signature used on the request"},"s3:versionid":{"types":["String"],"description":"Filters access by a specific object version"},"s3:x-amz-acl":{"types":["String"],"description":"Filters access by canned ACL in the request's x-amz-acl header"},"s3:x-amz-bucket-namespace":{"types":["String"],"description":"Filters access by general purpose bucket namespace type"},"s3:x-amz-content-sha256":{"types":["String"],"description":"Filters access by unsigned content in your bucket"},"s3:x-amz-copy-source":{"types":["String"],"description":"Filters access by copy source bucket, prefix, or object in the copy object requests"},"s3:x-amz-grant-full-control":{"types":["String"],"description":"Filters access by x-amz-grant-full-control (full control) header"},"s3:x-amz-grant-read":{"types":["String"],"description":"Filters access by x-amz-grant-read (read access) header"},"s3:x-amz-grant-read-acp":{"types":["String"],"description":"Filters access by the x-amz-grant-read-acp (read permissions for the ACL) header"},"s3:x-amz-grant-write":{"types":["String"],"description":"Filters access by the x-amz-grant-write (write access) header"},"s3:x-amz-grant-write-acp":{"types":["String"],"description":"Filters access by the x-amz-grant-write-acp (write permissions for the ACL) header"},"s3:x-amz-metadata-directive":{"types":["String"],"description":"Filters access by object metadata behavior (COPY or REPLACE) when objects are copied"},"s3:x-amz-object-ownership":{"types":["String"],"description":"Filters access by Object Ownership"},"s3:x-amz-server-side-encryption":{"types":["String"],"description":"Filters access by server-side encryption"},"s3:x-amz-server-side-encryption-aws-kms-key-id":{"types":["ARN"],"description":"Filters access by AWS KMS customer managed CMK for server-side encryption"},"s3:x-amz-server-side-encryption-customer-algorithm":{"types":["String"],"description":"Filters access by customer specified algorithm for server-side encryption"},"s3:x-amz-storage-class":{"types":["String"],"description":"Filters access by storage class"},"s3:x-amz-website-redirect-location":{"types":["String"],"description":"Filters access by a specific website redirect location for buckets that are configured as static websites"}}}