aws-iam-ls 0.0.0

package/src/data/servicereference/services/s3express.json

@@ -0,0 +1 @@
+{"name":"s3express","actions":{"CreateAccessPoint":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:LocationName","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to create a new access point","accessLevel":"Write","resourceTypes":[{"name":"accesspoint","required":true}]},"CreateBucket":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","s3express:LocationName","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to create a new bucket","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"CreateSession":{"conditionKeys":["s3express:AllAccessRestrictedToLocalZoneGroup","s3express:Permissions","s3express:ResourceAccount","s3express:SessionMode","s3express:TlsVersion","s3express:authType","s3express:signatureAge","s3express:signatureversion","s3express:x-amz-content-sha256","s3express:x-amz-server-side-encryption","s3express:x-amz-server-side-encryption-aws-kms-key-id"],"resources":[{"name":"accesspoint"},{"name":"bucket"}],"description":"Grants permission to Create Session token which is used for object APIs such as PutObject, GetObject, etc","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true},{"name":"accesspoint","required":false}]},"DeleteAccessPoint":{"conditionKeys":["s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to delete the access point named in the URI","accessLevel":"Write","resourceTypes":[{"name":"accesspoint","required":true}]},"DeleteAccessPointPolicy":{"conditionKeys":["s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to delete the policy on a specified access point","accessLevel":"Permissions management","resourceTypes":[{"name":"accesspoint","required":true}]},"DeleteAccessPointScope":{"conditionKeys":["s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to delete the scope configuration on a specified access point","accessLevel":"Permissions management","resourceTypes":[{"name":"accesspoint","required":true}]},"DeleteBucket":{"conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to delete the bucket named in the URI","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"DeleteBucketPolicy":{"conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to delete the policy on a specified bucket","accessLevel":"Permissions management","resourceTypes":[{"name":"bucket","required":true}]},"GetAccessPoint":{"conditionKeys":["s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to return configuration information about the specified access point","accessLevel":"Read","resourceTypes":[{"name":"accesspoint","required":true}]},"GetAccessPointPolicy":{"conditionKeys":["s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to return the access point policy associated with the specified access point","accessLevel":"Read","resourceTypes":[{"name":"accesspoint","required":true}]},"GetAccessPointScope":{"conditionKeys":["s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to return the scope configuration associated with the specified access point","accessLevel":"Read","resourceTypes":[{"name":"accesspoint","required":true}]},"GetBucketPolicy":{"conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to return the policy of the specified bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"GetEncryptionConfiguration":{"conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to return the default encryption configuration for a directory bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"GetLifecycleConfiguration":{"conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to return the lifecycle configuration information set on a directory bucket","accessLevel":"Read","resourceTypes":[{"name":"bucket","required":true}]},"ListAccessPointsForDirectoryBuckets":{"conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[],"description":"Grants permission to list access points","accessLevel":"List","resourceTypes":[]},"ListAllMyDirectoryBuckets":{"conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[],"description":"Grants permission to list all directory buckets owned by the authenticated sender of the request","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"},{"name":"bucket"}],"description":"Grants permission to lists all of the tags for a specified resource","accessLevel":"List","resourceTypes":[{"name":"accesspoint","required":false},{"name":"bucket","required":false}]},"PutAccessPointPolicy":{"conditionKeys":["s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to associate an access policy with a specified access point","accessLevel":"Permissions management","resourceTypes":[{"name":"accesspoint","required":true}]},"PutAccessPointScope":{"conditionKeys":["s3express:AccessPointNetworkOrigin","s3express:DataAccessPointAccount","s3express:DataAccessPointArn","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"}],"description":"Grants permission to associate an access point with a specified access point scope configuration","accessLevel":"Permissions management","resourceTypes":[{"name":"accesspoint","required":true}]},"PutBucketPolicy":{"conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to add or replace a bucket policy on a bucket","accessLevel":"Permissions management","resourceTypes":[{"name":"bucket","required":true}]},"PutEncryptionConfiguration":{"conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to set the encryption configuration for a directory bucket","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"PutLifecycleConfiguration":{"conditionKeys":["s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"bucket"}],"description":"Grants permission to create a new lifecycle configuration for the directory bucket or replace an existing lifecycle configuration","accessLevel":"Write","resourceTypes":[{"name":"bucket","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"},{"name":"bucket"}],"description":"Grants permission to create a new user-defined tag or update an existing tag","accessLevel":"Tagging","resourceTypes":[{"name":"accesspoint","required":false},{"name":"bucket","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys","s3express:ResourceAccount","s3express:TlsVersion","s3express:authType","s3express:signatureversion","s3express:x-amz-content-sha256"],"resources":[{"name":"accesspoint"},{"name":"bucket"}],"description":"Grants permission to remove the specified user-defined tags from an S3 resource","accessLevel":"Tagging","resourceTypes":[{"name":"accesspoint","required":false},{"name":"bucket","required":false}]}},"resources":[{"name":"accesspoint","arnFormats":["arn:${Partition}:s3express:${Region}:${Account}:accesspoint/${AccessPointName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","s3express:AccessPointTag/${TagKey}"]},{"name":"bucket","arnFormats":["arn:${Partition}:s3express:${Region}:${Account}:bucket/${BucketName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","s3express:BucketTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"s3express:AccessPointNetworkOrigin":{"types":["String"],"description":"Filters access by the network origin (Internet or VPC)"},"s3express:AccessPointTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the access point"},"s3express:AllAccessRestrictedToLocalZoneGroup":{"types":["String"],"description":"Filters access by AWS Local Zone network border group(s) provided in this condition key"},"s3express:BucketTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the bucket"},"s3express:DataAccessPointAccount":{"types":["String"],"description":"Filters access by the AWS Account ID that owns the access point"},"s3express:DataAccessPointArn":{"types":["ARN"],"description":"Filters access by an access point Amazon Resource Name (ARN)"},"s3express:LocationName":{"types":["String"],"description":"Filters access by a specific Availability Zone or Local Zone ID"},"s3express:Permissions":{"types":["ArrayOfString"],"description":"Filters access by the permission requested by Access Point Scope configuration, such as GetObject, PutObject"},"s3express:ResourceAccount":{"types":["String"],"description":"Filters access by the resource owner AWS account ID"},"s3express:SessionMode":{"types":["String"],"description":"Filters access by the permission requested by CreateSession API, such as ReadOnly and ReadWrite"},"s3express:TlsVersion":{"types":["Numeric"],"description":"Filters access by the TLS version used by the client"},"s3express:authType":{"types":["String"],"description":"Filters access by authentication method"},"s3express:signatureAge":{"types":["Numeric"],"description":"Filters access by the age in milliseconds of the request signature"},"s3express:signatureversion":{"types":["String"],"description":"Filters access by the AWS Signature Version used on the request"},"s3express:x-amz-content-sha256":{"types":["String"],"description":"Filters access by unsigned content in your bucket"},"s3express:x-amz-server-side-encryption":{"types":["String"],"description":"Filters access by server-side encryption"},"s3express:x-amz-server-side-encryption-aws-kms-key-id":{"types":["ARN"],"description":"Filters access by AWS KMS customer managed key for server-side encryption"}}}

package/src/data/servicereference/services/s3tables.json

@@ -0,0 +1 @@
+{"name":"s3tables","actions":{"CreateNamespace":{"conditionKeys":[],"resources":[{"name":"TableBucket"}],"description":"Grants permission to create a namespace","accessLevel":"Write","resourceTypes":[{"name":"TableBucket","required":true}]},"CreateTable":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","s3tables:KMSKeyArn","s3tables:SSEAlgorithm","s3tables:TableBucketTag/${TagKey}","s3tables:namespace"],"resources":[{"name":"TableBucket"}],"description":"Grants permission to create a table","accessLevel":"Write","resourceTypes":[{"name":"TableBucket","required":true}]},"CreateTableBucket":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","s3tables:KMSKeyArn","s3tables:SSEAlgorithm","s3tables:TableBucketTag/${TagKey}"],"resources":[{"name":"TableBucket"}],"description":"Grants permission to create a table bucket","accessLevel":"Write","resourceTypes":[{"name":"TableBucket","required":true}]},"DeleteNamespace":{"conditionKeys":["s3tables:namespace"],"resources":[{"name":"TableBucket"}],"description":"Grants permission to delete a namespace","accessLevel":"Write","resourceTypes":[{"name":"TableBucket","required":true}]},"DeleteTable":{"conditionKeys":["s3tables:namespace","s3tables:tableName"],"resources":[{"name":"Table"}],"description":"Grants permission to delete a table","accessLevel":"Write","resourceTypes":[{"name":"Table","required":true}]},"DeleteTableBucket":{"conditionKeys":[],"resources":[{"name":"TableBucket"}],"description":"Grants permission to delete a table bucket","accessLevel":"Write","resourceTypes":[{"name":"TableBucket","required":true}]},"DeleteTableBucketEncryption":{"conditionKeys":[],"resources":[{"name":"TableBucket"}],"description":"Grants permission to delete encryption configuration on a table bucket","accessLevel":"Write","resourceTypes":[{"name":"TableBucket","required":true}]},"DeleteTableBucketMetricsConfiguration":{"conditionKeys":[],"resources":[{"name":"TableBucket"}],"description":"Grants permission to delete a metrics configuration on a table bucket","accessLevel":"Write","resourceTypes":[{"name":"TableBucket","required":true}]},"DeleteTableBucketPolicy":{"conditionKeys":[],"resources":[{"name":"TableBucket"}],"description":"Grants permission to delete a policy on a table bucket","accessLevel":"Permissions management","resourceTypes":[{"name":"TableBucket","required":true}]},"DeleteTableBucketReplication":{"conditionKeys":[],"resources":[{"name":"TableBucket"}],"description":"Grants permission to delete table bucket replication configuration on a bucket","accessLevel":"Write","resourceTypes":[{"name":"TableBucket","required":true}]},"DeleteTablePolicy":{"conditionKeys":["s3tables:namespace","s3tables:tableName"],"resources":[{"name":"Table"}],"description":"Grants permission to delete a policy on a table","accessLevel":"Permissions management","resourceTypes":[{"name":"Table","required":true}]},"DeleteTableReplication":{"conditionKeys":["s3tables:namespace","s3tables:tableName"],"resources":[{"name":"Table"}],"description":"Grants permission to delete table replication configuration on a table","accessLevel":"Write","resourceTypes":[{"name":"Table","required":true}]},"GetNamespace":{"conditionKeys":["s3tables:namespace"],"resources":[{"name":"TableBucket"}],"description":"Grants permission to get a namespace","accessLevel":"Read","resourceTypes":[{"name":"TableBucket","required":true}]},"GetTable":{"conditionKeys":["s3tables:namespace","s3tables:tableName"],"resources":[{"name":"Table"}],"description":"Grants permission to retrieve a table","accessLevel":"Read","resourceTypes":[{"name":"Table","required":true}]},"GetTableBucket":{"conditionKeys":[],"resources":[{"name":"TableBucket"}],"description":"Grants permission to retrieve a table bucket","accessLevel":"Read","resourceTypes":[{"name":"TableBucket","required":true}]},"GetTableBucketEncryption":{"conditionKeys":[],"resources":[{"name":"TableBucket"}],"description":"Grants permission to retrieve encryption configuration on a table bucket","accessLevel":"Read","resourceTypes":[{"name":"TableBucket","required":true}]},"GetTableBucketMaintenanceConfiguration":{"conditionKeys":[],"resources":[{"name":"TableBucket"}],"description":"Grants permission to retrieve a maintenance configuration on a table bucket","accessLevel":"Read","resourceTypes":[{"name":"TableBucket","required":true}]},"GetTableBucketMetricsConfiguration":{"conditionKeys":[],"resources":[{"name":"TableBucket"}],"description":"Grants permission to retrieve a metrics configuration on a bucket","accessLevel":"Read","resourceTypes":[{"name":"TableBucket","required":true}]},"GetTableBucketPolicy":{"conditionKeys":[],"resources":[{"name":"TableBucket"}],"description":"Grants permission to retrieve a policy on a table bucket","accessLevel":"Read","resourceTypes":[{"name":"TableBucket","required":true}]},"GetTableBucketReplication":{"conditionKeys":[],"resources":[{"name":"TableBucket"}],"description":"Grants permission to retrieve a table bucket replication configuration on a bucket","accessLevel":"Read","resourceTypes":[{"name":"TableBucket","required":true}]},"GetTableBucketStorageClass":{"conditionKeys":[],"resources":[{"name":"TableBucket"}],"description":"Grants permission to retrieve the storage class configuration for a table bucket","accessLevel":"Read","resourceTypes":[{"name":"TableBucket","required":true}]},"GetTableData":{"conditionKeys":["s3tables:namespace","s3tables:tableName"],"resources":[{"name":"Table"}],"description":"Grants permission to read metadata and data objects from a table storage endpoint using S3 APIs","accessLevel":"Read","resourceTypes":[{"name":"Table","required":true}],"permissionOnly":true},"GetTableEncryption":{"conditionKeys":["s3tables:namespace","s3tables:tableName"],"resources":[{"name":"Table"}],"description":"Grants permission to retrieve encryption configuration on a table","accessLevel":"Read","resourceTypes":[{"name":"Table","required":true}]},"GetTableMaintenanceConfiguration":{"conditionKeys":["s3tables:namespace","s3tables:tableName"],"resources":[{"name":"Table"}],"description":"Grants permission to retrieve a maintenance configuration on a table","accessLevel":"Read","resourceTypes":[{"name":"Table","required":true}]},"GetTableMaintenanceJobStatus":{"conditionKeys":["s3tables:namespace","s3tables:tableName"],"resources":[{"name":"Table"}],"description":"Grants permission to retrieve the status of maintenance jobs on a table","accessLevel":"Read","resourceTypes":[{"name":"Table","required":true}]},"GetTableMetadataLocation":{"conditionKeys":["s3tables:namespace","s3tables:tableName"],"resources":[{"name":"Table"}],"description":"Grants permission to retrieve the metadata location of a table","accessLevel":"Read","resourceTypes":[{"name":"Table","required":true}]},"GetTablePolicy":{"conditionKeys":["s3tables:namespace","s3tables:tableName"],"resources":[{"name":"Table"}],"description":"Grants permission to retrieve a policy on a table","accessLevel":"Read","resourceTypes":[{"name":"Table","required":true}]},"GetTableRecordExpirationConfiguration":{"conditionKeys":["s3tables:namespace","s3tables:tableName"],"resources":[{"name":"Table"}],"description":"Grants permission to retrieve a table maintenance configuration on a system table","accessLevel":"Read","resourceTypes":[{"name":"Table","required":true}]},"GetTableRecordExpirationJobStatus":{"conditionKeys":["s3tables:namespace","s3tables:tableName"],"resources":[{"name":"Table"}],"description":"Grants permission to retrieve the status of table record expiration jobs on a system table","accessLevel":"Read","resourceTypes":[{"name":"Table","required":true}]},"GetTableReplication":{"conditionKeys":["s3tables:namespace","s3tables:tableName"],"resources":[{"name":"Table"}],"description":"Grants permission to retrieve a table replication configuration on a table","accessLevel":"Read","resourceTypes":[{"name":"Table","required":true}]},"GetTableReplicationStatus":{"conditionKeys":["s3tables:namespace","s3tables:tableName"],"resources":[{"name":"Table"}],"description":"Grants permission to retrieve a table replication status on a table","accessLevel":"Read","resourceTypes":[{"name":"Table","required":true}]},"GetTableStorageClass":{"conditionKeys":["s3tables:namespace","s3tables:tableName"],"resources":[{"name":"Table"}],"description":"Grants permission to retrieve the storage class configuration for a specific table","accessLevel":"Read","resourceTypes":[{"name":"Table","required":true}]},"ListNamespaces":{"conditionKeys":[],"resources":[{"name":"TableBucket"}],"description":"Grants permission to list namespaces","accessLevel":"List","resourceTypes":[{"name":"TableBucket","required":true}]},"ListTableBuckets":{"conditionKeys":[],"resources":[],"description":"Grants permission to list table buckets","accessLevel":"List","resourceTypes":[]},"ListTables":{"conditionKeys":["s3tables:namespace"],"resources":[{"name":"TableBucket"}],"description":"Grants permission to list tables","accessLevel":"List","resourceTypes":[{"name":"TableBucket","required":true}]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3tables:TableBucketTag/${TagKey}"],"resources":[{"name":"Table"},{"name":"TableBucket"}],"description":"Grants permission to list the tags for an S3 Tables resource","accessLevel":"List","resourceTypes":[{"name":"Table","required":false},{"name":"TableBucket","required":false}]},"PutTableBucketEncryption":{"conditionKeys":["s3tables:KMSKeyArn","s3tables:SSEAlgorithm"],"resources":[{"name":"TableBucket"}],"description":"Grants permission to put or overwrite encryption configuration on a table bucket","accessLevel":"Write","resourceTypes":[{"name":"TableBucket","required":true}]},"PutTableBucketMaintenanceConfiguration":{"conditionKeys":[],"resources":[{"name":"TableBucket"}],"description":"Grants permission to put a maintenance configuration on a table bucket","accessLevel":"Write","resourceTypes":[{"name":"TableBucket","required":true}]},"PutTableBucketMetricsConfiguration":{"conditionKeys":[],"resources":[{"name":"TableBucket"}],"description":"Grants permission to create or overwrite a metrics configuration on a table bucket","accessLevel":"Write","resourceTypes":[{"name":"TableBucket","required":true}]},"PutTableBucketPolicy":{"conditionKeys":[],"resources":[{"name":"TableBucket"}],"description":"Grants permission to create or overwrite a policy on a table bucket","accessLevel":"Permissions management","resourceTypes":[{"name":"TableBucket","required":true}]},"PutTableBucketReplication":{"conditionKeys":[],"resources":[{"name":"TableBucket"}],"description":"Grants permission to put table bucket replication configuration on a bucket","accessLevel":"Write","resourceTypes":[{"name":"TableBucket","required":true}]},"PutTableBucketStorageClass":{"conditionKeys":["s3tables:StorageClass"],"resources":[{"name":"TableBucket"}],"description":"Grants permission to set or update the storage class configuration for a table bucket","accessLevel":"Write","resourceTypes":[{"name":"TableBucket","required":true}]},"PutTableData":{"conditionKeys":["s3tables:namespace","s3tables:tableName"],"resources":[{"name":"Table"}],"description":"Grants permission to write metadata and data objects to a table storage endpoint using S3 APIs","accessLevel":"Write","resourceTypes":[{"name":"Table","required":true}],"permissionOnly":true},"PutTableEncryption":{"conditionKeys":["s3tables:KMSKeyArn","s3tables:SSEAlgorithm","s3tables:namespace"],"resources":[{"name":"Table"}],"description":"Grants permission to put encryption configuration on a table","accessLevel":"Write","resourceTypes":[{"name":"Table","required":true}],"permissionOnly":true},"PutTableMaintenanceConfiguration":{"conditionKeys":["s3tables:namespace","s3tables:tableName"],"resources":[{"name":"Table"}],"description":"Grants permission to put a maintenance configuration on a table","accessLevel":"Write","resourceTypes":[{"name":"Table","required":true}]},"PutTablePolicy":{"conditionKeys":["s3tables:namespace","s3tables:tableName"],"resources":[{"name":"Table"}],"description":"Grants permission to create or overwrite a policy on a table","accessLevel":"Permissions management","resourceTypes":[{"name":"Table","required":true}]},"PutTableRecordExpirationConfiguration":{"conditionKeys":["s3tables:namespace","s3tables:tableName"],"resources":[{"name":"Table"}],"description":"Grants permission to put a table record expiration configuration on a system table","accessLevel":"Write","resourceTypes":[{"name":"Table","required":true}]},"PutTableReplication":{"conditionKeys":["s3tables:namespace","s3tables:tableName"],"resources":[{"name":"Table"}],"description":"Grants permission to put table replication configuration on a table","accessLevel":"Write","resourceTypes":[{"name":"Table","required":true}]},"PutTableStorageClass":{"conditionKeys":["s3tables:StorageClass","s3tables:namespace","s3tables:tableName"],"resources":[{"name":"Table"}],"description":"Grants permission to set or update the storage class configuration for a table","accessLevel":"Write","resourceTypes":[{"name":"Table","required":true}]},"RenameTable":{"conditionKeys":["s3tables:namespace","s3tables:tableName"],"resources":[{"name":"Table"}],"description":"Grants permission to rename a table or move a table across namespaces","accessLevel":"Write","resourceTypes":[{"name":"Table","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","s3tables:TableBucketTag/${TagKey}"],"resources":[{"name":"Table"},{"name":"TableBucket"}],"description":"Grants permission to tag a S3 Tables resource","accessLevel":"Tagging","resourceTypes":[{"name":"Table","required":false},{"name":"TableBucket","required":false}]},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys","s3tables:TableBucketTag/${TagKey}"],"resources":[{"name":"Table"},{"name":"TableBucket"}],"description":"Grants permission to untag a S3 Tables resource","accessLevel":"Tagging","resourceTypes":[{"name":"Table","required":false},{"name":"TableBucket","required":false}]},"UpdateTableMetadataLocation":{"conditionKeys":["s3tables:namespace","s3tables:tableName"],"resources":[{"name":"Table"}],"description":"Grants permission to update the metadata location of a table","accessLevel":"Write","resourceTypes":[{"name":"Table","required":true}]}},"resources":[{"name":"Table","arnFormats":["arn:${Partition}:s3tables:${Region}:${Account}:bucket/${TableBucketName}/table/${TableID}"],"conditionKeys":["aws:ResourceTag/${TagKey}","s3tables:TableBucketTag/${TagKey}","s3tables:namespace","s3tables:tableName"]},{"name":"TableBucket","arnFormats":["arn:${Partition}:s3tables:${Region}:${Account}:bucket/${TableBucketName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","s3tables:TableBucketTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"s3tables:KMSKeyArn":{"types":["ARN"],"description":"Filters access by the AWS KMS key ARN for the key used to encrypt a table"},"s3tables:SSEAlgorithm":{"types":["String"],"description":"Filters access by the server-side encryption algorithm used to encrypt a table"},"s3tables:StorageClass":{"types":["String"],"description":"Filters access by the storage class that can be set on tables under a table bucket"},"s3tables:TableBucketTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the table bucket"},"s3tables:namespace":{"types":["String"],"description":"Filters access by the namespaces created in the table bucket"},"s3tables:tableName":{"types":["String"],"description":"Filters access by the name of the tables in the table bucket"}}}

package/src/data/servicereference/services/s3vectors.json

@@ -0,0 +1 @@
+{"name":"s3vectors","actions":{"CreateIndex":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","s3vectors:VectorBucketTag/${TagKey}","s3vectors:kmsKeyArn","s3vectors:sseType"],"resources":[{"name":"Index"}],"description":"Grants permission to create a new vector index within a specified vector bucket","accessLevel":"Write","resourceTypes":[{"name":"Index","required":true}]},"CreateVectorBucket":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","s3vectors:VectorBucketTag/${TagKey}","s3vectors:kmsKeyArn","s3vectors:sseType"],"resources":[{"name":"VectorBucket"}],"description":"Grants permission to create a new vector bucket","accessLevel":"Write","resourceTypes":[{"name":"VectorBucket","required":true}]},"DeleteIndex":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3vectors:VectorBucketTag/${TagKey}"],"resources":[{"name":"Index"}],"description":"Grants permission to delete a specified vector index","accessLevel":"Write","resourceTypes":[{"name":"Index","required":true}]},"DeleteVectorBucket":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3vectors:VectorBucketTag/${TagKey}"],"resources":[{"name":"VectorBucket"}],"description":"Grants permission to delete a specified vector bucket","accessLevel":"Write","resourceTypes":[{"name":"VectorBucket","required":true}]},"DeleteVectorBucketPolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3vectors:VectorBucketTag/${TagKey}"],"resources":[{"name":"VectorBucket"}],"description":"Grants permission to delete the IAM resource policy from a specified vector bucket","accessLevel":"Permissions management","resourceTypes":[{"name":"VectorBucket","required":true}]},"DeleteVectors":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3vectors:VectorBucketTag/${TagKey}"],"resources":[{"name":"Index"}],"description":"Grants permission to delete a batch of vectors from a specified vector index","accessLevel":"Write","resourceTypes":[{"name":"Index","required":true}]},"GetIndex":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3vectors:VectorBucketTag/${TagKey}"],"resources":[{"name":"Index"}],"description":"Grants permission to get the attributes of a specified vector index","accessLevel":"Read","resourceTypes":[{"name":"Index","required":true}]},"GetVectorBucket":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3vectors:VectorBucketTag/${TagKey}"],"resources":[{"name":"VectorBucket"}],"description":"Grants permission to get the attributes of a specified vector bucket","accessLevel":"Read","resourceTypes":[{"name":"VectorBucket","required":true}]},"GetVectorBucketPolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3vectors:VectorBucketTag/${TagKey}"],"resources":[{"name":"VectorBucket"}],"description":"Grants permission to get the IAM resource policy for a specific vector bucket","accessLevel":"Read","resourceTypes":[{"name":"VectorBucket","required":true}]},"GetVectors":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3vectors:VectorBucketTag/${TagKey}"],"resources":[{"name":"Index"}],"description":"Grants permission to get a batch of vectors by their vector keys","accessLevel":"Read","resourceTypes":[{"name":"Index","required":true}]},"ListIndexes":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3vectors:VectorBucketTag/${TagKey}"],"resources":[{"name":"VectorBucket"}],"description":"Grants permission to get a paginated list of all indexes in a specified vector bucket","accessLevel":"List","resourceTypes":[{"name":"VectorBucket","required":true}]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3vectors:VectorBucketTag/${TagKey}"],"resources":[{"name":"Index"},{"name":"VectorBucket"}],"description":"Grants permission to list tags for specified S3Vector resource","accessLevel":"List","resourceTypes":[{"name":"Index","required":false},{"name":"VectorBucket","required":false}]},"ListVectorBuckets":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a paginated list of all vector buckets in the account","accessLevel":"List","resourceTypes":[]},"ListVectors":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3vectors:VectorBucketTag/${TagKey}"],"resources":[{"name":"Index"}],"description":"Grants permission to get a paginated list of all vectors in a specified vector index","accessLevel":"List","resourceTypes":[{"name":"Index","required":true}],"dependentActions":["s3vectors:GetVectors"]},"PutVectorBucketPolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3vectors:VectorBucketTag/${TagKey}"],"resources":[{"name":"VectorBucket"}],"description":"Grants permission to add an IAM resource policy to a specified vector bucket","accessLevel":"Permissions management","resourceTypes":[{"name":"VectorBucket","required":true}]},"PutVectors":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3vectors:VectorBucketTag/${TagKey}"],"resources":[{"name":"Index"}],"description":"Grants permission to add a batch of vectors to a specified vector index","accessLevel":"Write","resourceTypes":[{"name":"Index","required":true}]},"QueryVectors":{"conditionKeys":["aws:ResourceTag/${TagKey}","s3vectors:VectorBucketTag/${TagKey}"],"resources":[{"name":"Index"}],"description":"Grants permission to find approximate nearest neighbors within a specified search vector index for a given query vector","accessLevel":"Read","resourceTypes":[{"name":"Index","required":true}],"dependentActions":["s3vectors:GetVectors"]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","s3vectors:VectorBucketTag/${TagKey}"],"resources":[{"name":"Index"},{"name":"VectorBucket"}],"description":"Grants permission to tag a S3Vector resource","accessLevel":"Tagging","resourceTypes":[{"name":"Index","required":false},{"name":"VectorBucket","required":false}]},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys","s3vectors:VectorBucketTag/${TagKey}"],"resources":[{"name":"Index"},{"name":"VectorBucket"}],"description":"Grants permission to untag a S3Vector resource","accessLevel":"Tagging","resourceTypes":[{"name":"Index","required":false},{"name":"VectorBucket","required":false}]}},"resources":[{"name":"Index","arnFormats":["arn:${Partition}:s3vectors:${Region}:${Account}:bucket/${BucketName}/index/${IndexName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","s3vectors:VectorBucketTag/${TagKey}"]},{"name":"VectorBucket","arnFormats":["arn:${Partition}:s3vectors:${Region}:${Account}:bucket/${BucketName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","s3vectors:VectorBucketTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"s3vectors:VectorBucketTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the vector bucket"},"s3vectors:kmsKeyArn":{"types":["ARN"],"description":"Filters access by the AWS KMS key ARN for the key used to encrypt a vector bucket"},"s3vectors:sseType":{"types":["String"],"description":"Filters access by server-side encryption type"}}}

package/src/data/servicereference/services/sagemaker-data-science-assistant.json

@@ -0,0 +1 @@
+{"name":"sagemaker-data-science-assistant","actions":{"SendConversation":{"conditionKeys":[],"resources":[],"description":"Grants permission to start a conversation with SageMaker data science assistant","accessLevel":"Write","resourceTypes":[],"permissionOnly":true}},"resources":[],"conditionKeys":{}}

package/src/data/servicereference/services/sagemaker-geospatial.json

@@ -0,0 +1 @@
+{"name":"sagemaker-geospatial","actions":{"DeleteEarthObservationJob":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"EarthObservationJob"}],"description":"Grants permission to the DeleteEarthObservationJob operation which deletes an existing earth observation job","accessLevel":"Write","resourceTypes":[{"name":"EarthObservationJob","required":true}]},"DeleteVectorEnrichmentJob":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"VectorEnrichmentJob"}],"description":"Grants permission to the DeleteVectorEnrichmentJob operation which deletes an existing vector enrichment job","accessLevel":"Write","resourceTypes":[{"name":"VectorEnrichmentJob","required":true}]},"ExportEarthObservationJob":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"EarthObservationJob"}],"description":"Grants permission to copy results of an earth observation job to an S3 location","accessLevel":"Write","resourceTypes":[{"name":"EarthObservationJob","required":true}],"dependentActions":["iam:PassRole"]},"ExportVectorEnrichmentJob":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"VectorEnrichmentJob"}],"description":"Grants permission to copy results of an VectorEnrichmentJob to an S3 location","accessLevel":"Write","resourceTypes":[{"name":"VectorEnrichmentJob","required":true}],"dependentActions":["iam:PassRole"]},"GetEarthObservationJob":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"EarthObservationJob"}],"description":"Grants permission to return details about the earth observation job","accessLevel":"Read","resourceTypes":[{"name":"EarthObservationJob","required":true}]},"GetRasterDataCollection":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"RasterDataCollection"}],"description":"Grants permission to return details about the raster data collection","accessLevel":"Read","resourceTypes":[{"name":"RasterDataCollection","required":true}]},"GetTile":{"conditionKeys":[],"resources":[{"name":"EarthObservationJob"}],"description":"Grants permission to get the tile of an earth observation job","accessLevel":"Read","resourceTypes":[{"name":"EarthObservationJob","required":true}],"dependentActions":["iam:PassRole"]},"GetVectorEnrichmentJob":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"VectorEnrichmentJob"}],"description":"Grants permission to return details about the vector enrichment job","accessLevel":"Read","resourceTypes":[{"name":"VectorEnrichmentJob","required":true}]},"ListEarthObservationJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to return an array of earth observation jobs associated with the current account","accessLevel":"List","resourceTypes":[]},"ListRasterDataCollections":{"conditionKeys":[],"resources":[],"description":"Grants permission to return an array of aster data collections associated with the given model name","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"EarthObservationJob"},{"name":"RasterDataCollection"},{"name":"VectorEnrichmentJob"}],"description":"Grants permission to lists tag for an SageMaker Geospatial resource","accessLevel":"List","resourceTypes":[{"name":"EarthObservationJob","required":false},{"name":"RasterDataCollection","required":false},{"name":"VectorEnrichmentJob","required":false}]},"ListVectorEnrichmentJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to return an array of vector enrichment jobs associated with the current account","accessLevel":"List","resourceTypes":[]},"SearchRasterDataCollection":{"conditionKeys":[],"resources":[],"description":"Grants permission to query raster data collections","accessLevel":"Read","resourceTypes":[]},"StartEarthObservationJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"EarthObservationJob"}],"description":"Grants permission to the StartEarthObservationJob operation which starts a new earth observation job to your account","accessLevel":"Write","resourceTypes":[{"name":"EarthObservationJob","required":true}],"dependentActions":["iam:PassRole","sagemaker-geospatial:TagResource"]},"StartVectorEnrichmentJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"VectorEnrichmentJob"}],"description":"Grants permission to the StartVectorEnrichmentJob operation which starts a new vector enrichment job to your account","accessLevel":"Write","resourceTypes":[{"name":"VectorEnrichmentJob","required":true}],"dependentActions":["iam:PassRole","sagemaker-geospatial:TagResource"]},"StopEarthObservationJob":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"EarthObservationJob"}],"description":"Grants permission to the StopEarthObservationJob operation which stops an existing earth observation job","accessLevel":"Write","resourceTypes":[{"name":"EarthObservationJob","required":true}]},"StopVectorEnrichmentJob":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"VectorEnrichmentJob"}],"description":"Grants permission to the StopVectorEnrichmentJob operation which stops an existing vector enrichment job","accessLevel":"Write","resourceTypes":[{"name":"VectorEnrichmentJob","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"EarthObservationJob"},{"name":"RasterDataCollection"},{"name":"VectorEnrichmentJob"}],"description":"Grants permission to tag an SageMaker Geospatial resource","accessLevel":"Tagging","resourceTypes":[{"name":"EarthObservationJob","required":false},{"name":"RasterDataCollection","required":false},{"name":"VectorEnrichmentJob","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"EarthObservationJob"},{"name":"RasterDataCollection"},{"name":"VectorEnrichmentJob"}],"description":"Grants permission to untag an SageMaker Geospatial resource","accessLevel":"Tagging","resourceTypes":[{"name":"EarthObservationJob","required":false},{"name":"RasterDataCollection","required":false},{"name":"VectorEnrichmentJob","required":false}]}},"resources":[{"name":"EarthObservationJob","arnFormats":["arn:${Partition}:sagemaker-geospatial:${Region}:${Account}:earth-observation-job/${JobID}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"RasterDataCollection","arnFormats":["arn:${Partition}:sagemaker-geospatial:${Region}:${Account}:raster-data-collection/${CollectionID}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"VectorEnrichmentJob","arnFormats":["arn:${Partition}:sagemaker-geospatial:${Region}:${Account}:vector-enrichment-job/${JobID}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"}}}

package/src/data/servicereference/services/sagemaker-mlflow.json

@@ -0,0 +1 @@
+{"name":"sagemaker-mlflow","actions":{"AccessUI":{"conditionKeys":[],"resources":[],"description":"Grants permission to access the MLflow UI","accessLevel":"Read","resourceTypes":[]},"CreateExperiment":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to create an MLflow experiment","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"CreateModelVersion":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to create a new model version","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"CreateRegisteredModel":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to create a registered model","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"CreateRun":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to create a new run within an experiment","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"DeleteExperiment":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to mark an MLflow experiment for deletion","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"DeleteLoggedModel":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to delete a logged model in MLflow","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"DeleteLoggedModelTag":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to delete a tag for a logged model in MLflow","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"DeleteModelVersion":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to delete a model version","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"DeleteModelVersionTag":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to delete a model version tag","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"DeleteRegisteredModel":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to delete a registered model","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"DeleteRegisteredModelAlias":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to delete a registered model alias","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"DeleteRegisteredModelTag":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to delete a registered model tag","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"DeleteRun":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to mark a run for deletion","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"DeleteTag":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to delete a tag on a run","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"DeleteTraceTag":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to delete a trace tag in MLflow","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"DeleteTraces":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to delete traces in MLflow","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"EndTrace":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to end a trace in MLflow","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"FinalizeLoggedModel":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to set status for a logged model in MLflow","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"GetDownloadURIForModelVersionArtifacts":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to get a URI to download model artifacts for a specific model version","accessLevel":"Read","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"GetExperiment":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to get metadata for an MLflow experiment","accessLevel":"Read","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"GetExperimentByName":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to get metadata for an MLflow experiment by name","accessLevel":"Read","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"GetLatestModelVersions":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to get the latest model versions","accessLevel":"List","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"GetLoggedModel":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to get a logged model in MLflow","accessLevel":"Read","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"GetMetricHistory":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to get a list of all values for the specified metric for a given run","accessLevel":"Read","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"GetModelVersion":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to get a model version by model name and version","accessLevel":"Read","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"GetModelVersionByAlias":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to get model version by alias in MLflow","accessLevel":"Read","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"GetRegisteredModel":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to get a registered model","accessLevel":"Read","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"GetRun":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to get metadata, metrics, parameters, and tags for a run","accessLevel":"Read","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"GetTraceInfo":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to get information about a trace in MLflow","accessLevel":"Read","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"ListArtifacts":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to list artifacts for a run","accessLevel":"List","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"ListLoggedModelArtifacts":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to list artifacts for a logged model in MLflow","accessLevel":"List","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"LogBatch":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to log a batch of metrics, parameters, and tags for a run","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"LogInputs":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to log inputs for a run","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"LogLoggedModelParams":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to log params for a logged model in MLflow","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"LogMetric":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to log a metric for a run","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"LogModel":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to log the model associated with a run","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"LogOutputs":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to log outputs, such as models, for a run in MLflow","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"LogParam":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to log a parameter tracked during a run","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"RenameRegisteredModel":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to rename a registered model","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"RestoreExperiment":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to restore an experiment marked for deletion","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"RestoreRun":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to restore a deleted run","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"SearchExperiments":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to search for MLflow experiments","accessLevel":"Read","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"SearchLoggedModels":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to search for logged models in MLflow","accessLevel":"Read","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"SearchModelVersions":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to search for a model version","accessLevel":"Read","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"SearchRegisteredModels":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to search for registered models in MLflow","accessLevel":"Read","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"SearchRuns":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to search for runs that satisfy expressions","accessLevel":"Read","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"SearchTraces":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to search for traces in MLflow","accessLevel":"Read","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"SetExperimentTag":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to set a tag on an experiment","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"SetLoggedModelTags":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to set tags for a logged model in MLflow","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"SetModelVersionTag":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to set a tag for the model version","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"SetRegisteredModelAlias":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to set a registered model alias","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"SetRegisteredModelTag":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to set a tag for a registered model","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"SetTag":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to set a tag on a run","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"SetTraceTag":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to set a trace tag in MLflow","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"StartTrace":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to start a trace in MLflow","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"TransitionModelVersionStage":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to transition a model version to a particular stage","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"UpdateExperiment":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to update the metadata for an MLflow experiment","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"UpdateModelVersion":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to update the model version","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"UpdateRegisteredModel":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to update a registered model","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]},"UpdateRun":{"conditionKeys":[],"resources":[{"name":"mlflow-tracking-server"}],"description":"Grants permission to update run metadata","accessLevel":"Write","resourceTypes":[{"name":"mlflow-tracking-server","required":true}]}},"resources":[{"name":"mlflow-tracking-server","arnFormats":["arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/${MlflowTrackingServerName}"],"conditionKeys":[]}],"conditionKeys":{"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair"}}}

package/src/data/servicereference/services/sagemaker-unified-studio-mcp.json

@@ -0,0 +1 @@
+{"name":"sagemaker-unified-studio-mcp","actions":{"CallPrivilegedTool":{"conditionKeys":[],"resources":[],"description":"Grants permission to call privileged tools in MCP service","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CallReadOnlyTool":{"conditionKeys":[],"resources":[],"description":"Grants permission to call read-only tools in MCP service","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"InvokeMcp":{"conditionKeys":[],"resources":[],"description":"Grants permission to use MCP service","accessLevel":"Read","resourceTypes":[],"permissionOnly":true}},"resources":[],"conditionKeys":{}}