aws-iam-ls 0.0.0

package/src/data/servicereference/services/sso.json

@@ -0,0 +1 @@
+{"name":"sso","actions":{"AddRegion":{"conditionKeys":[],"resources":[{"name":"Instance"}],"description":"Grants permission to add a region to an IAM Identity Center instance","accessLevel":"Write","resourceTypes":[{"name":"Instance","required":true}],"dependentActions":["identitystore:AddRegion","kms:Decrypt"]},"AssociateDirectory":{"conditionKeys":[],"resources":[],"description":"Grants permission to connect a directory to be used by AWS IAM Identity Center","accessLevel":"Write","resourceTypes":[],"dependentActions":["ds:AuthorizeApplication","identitystore:CreateIdentityStore","kms:Decrypt"]},"AssociateProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an association between a directory user or group and a profile","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"AttachCustomerManagedPolicyReferenceToPermissionSet":{"conditionKeys":[],"resources":[{"name":"Instance"},{"name":"PermissionSet"}],"description":"Grants permission to attach a customer managed policy reference to a permission set","accessLevel":"Permissions management","resourceTypes":[{"name":"Instance","required":true},{"name":"PermissionSet","required":true}],"dependentActions":["kms:Decrypt"]},"AttachManagedPolicyToPermissionSet":{"conditionKeys":[],"resources":[{"name":"Instance"},{"name":"PermissionSet"}],"description":"Grants permission to attach an AWS managed policy to a permission set","accessLevel":"Permissions management","resourceTypes":[{"name":"Instance","required":true},{"name":"PermissionSet","required":true}],"dependentActions":["kms:Decrypt"]},"CreateAccountAssignment":{"conditionKeys":[],"resources":[{"name":"Account"},{"name":"Instance"},{"name":"PermissionSet"}],"description":"Grants permission to assign access to a Principal for a specified AWS account using a specified permission set","accessLevel":"Write","resourceTypes":[{"name":"Account","required":true},{"name":"Instance","required":true},{"name":"PermissionSet","required":true}],"dependentActions":["kms:Decrypt"]},"CreateApplication":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Application"},{"name":"ApplicationProvider"},{"name":"Instance"}],"description":"Grants permission to create an application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true},{"name":"ApplicationProvider","required":true},{"name":"Instance","required":true}],"dependentActions":["kms:Decrypt"]},"CreateApplicationAssignment":{"conditionKeys":["sso:ApplicationAccount"],"resources":[{"name":"Application"}],"description":"Grants permission to create an application assignment","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"]},"CreateApplicationInstance":{"conditionKeys":[],"resources":[],"description":"Grants permission to add an application instance to AWS IAM Identity Center","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"CreateApplicationInstanceCertificate":{"conditionKeys":[],"resources":[],"description":"Grants permission to add a new certificate for an application instance","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"CreateInstance":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Instance"}],"description":"Grants permission to create an identity center instance","accessLevel":"Write","resourceTypes":[{"name":"Instance","required":true}],"dependentActions":["iam:CreateServiceLinkedRole","identitystore:CreateIdentityStore","organizations:DescribeOrganization"]},"CreateInstanceAccessControlAttributeConfiguration":{"conditionKeys":[],"resources":[{"name":"Instance"}],"description":"Grants permission to enable the instance for ABAC and specify the attributes","accessLevel":"Write","resourceTypes":[{"name":"Instance","required":true}],"dependentActions":["iam:AttachRolePolicy","iam:CreateRole","iam:DeleteRole","iam:DeleteRolePolicy","iam:DetachRolePolicy","iam:GetRole","iam:ListAttachedRolePolicies","iam:ListRolePolicies","iam:PutRolePolicy","iam:UpdateAssumeRolePolicy","kms:Decrypt"]},"CreateManagedApplicationInstance":{"conditionKeys":[],"resources":[],"description":"Grants permission to add a managed application instance to AWS IAM Identity Center","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"CreatePermissionSet":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Instance"},{"name":"PermissionSet"}],"description":"Grants permission to create a permission set","accessLevel":"Write","resourceTypes":[{"name":"Instance","required":true},{"name":"PermissionSet","required":true}],"dependentActions":["kms:Decrypt"]},"CreateProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a profile for an application instance","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"CreateTrust":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a federation trust in a target account","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"CreateTrustedTokenIssuer":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Instance"},{"name":"TrustedTokenIssuer"}],"description":"Grants permission to create a trusted token issuer for an instance","accessLevel":"Write","resourceTypes":[{"name":"Instance","required":true},{"name":"TrustedTokenIssuer","required":true}],"dependentActions":["kms:Decrypt"]},"DeleteAccountAssignment":{"conditionKeys":[],"resources":[{"name":"Account"},{"name":"Instance"},{"name":"PermissionSet"}],"description":"Grants permission to delete a Principal's access from a specified AWS account using a specified permission set","accessLevel":"Write","resourceTypes":[{"name":"Account","required":true},{"name":"Instance","required":true},{"name":"PermissionSet","required":true}],"dependentActions":["kms:Decrypt"]},"DeleteApplication":{"conditionKeys":["sso:ApplicationAccount"],"resources":[{"name":"Application"}],"description":"Grants permission to delete an application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"]},"DeleteApplicationAccessScope":{"conditionKeys":["sso:ApplicationAccount"],"resources":[{"name":"Application"}],"description":"Grants permission to delete an access scope to an application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"]},"DeleteApplicationAssignment":{"conditionKeys":["sso:ApplicationAccount"],"resources":[{"name":"Application"}],"description":"Grants permission to delete an application assignment","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"]},"DeleteApplicationAuthenticationMethod":{"conditionKeys":["sso:ApplicationAccount"],"resources":[{"name":"Application"}],"description":"Grants permission to delete an authentication method to an application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"]},"DeleteApplicationGrant":{"conditionKeys":["sso:ApplicationAccount"],"resources":[{"name":"Application"}],"description":"Grants permission to delete a grant from an application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"]},"DeleteApplicationInstance":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the application instance","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"DeleteApplicationInstanceCertificate":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete an inactive or expired certificate from the application instance","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"DeleteInlinePolicyFromPermissionSet":{"conditionKeys":[],"resources":[{"name":"Instance"},{"name":"PermissionSet"}],"description":"Grants permission to delete the inline policy from a specified permission set","accessLevel":"Write","resourceTypes":[{"name":"Instance","required":true},{"name":"PermissionSet","required":true}],"dependentActions":["kms:Decrypt"]},"DeleteInstance":{"conditionKeys":[],"resources":[{"name":"Instance"}],"description":"Grants permission to delete an identity center instance","accessLevel":"Write","resourceTypes":[{"name":"Instance","required":true}],"dependentActions":["identitystore:DeleteIdentityStore"]},"DeleteInstanceAccessControlAttributeConfiguration":{"conditionKeys":[],"resources":[{"name":"Instance"}],"description":"Grants permission to disable ABAC and remove the attributes list for the instance","accessLevel":"Write","resourceTypes":[{"name":"Instance","required":true}],"dependentActions":["kms:Decrypt"]},"DeleteManagedApplicationInstance":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the managed application instance","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"DeletePermissionSet":{"conditionKeys":[],"resources":[{"name":"Instance"},{"name":"PermissionSet"}],"description":"Grants permission to delete a permission set","accessLevel":"Write","resourceTypes":[{"name":"Instance","required":true},{"name":"PermissionSet","required":true}],"dependentActions":["kms:Decrypt"]},"DeletePermissionsBoundaryFromPermissionSet":{"conditionKeys":[],"resources":[{"name":"Instance"},{"name":"PermissionSet"}],"description":"Grants permission to remove permissions boundary from a permission set","accessLevel":"Permissions management","resourceTypes":[{"name":"Instance","required":true},{"name":"PermissionSet","required":true}],"dependentActions":["kms:Decrypt"]},"DeleteProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the profile for an application instance","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"DeleteTrustedTokenIssuer":{"conditionKeys":[],"resources":[{"name":"TrustedTokenIssuer"}],"description":"Grants permission to delete a trusted token issuer for an instance","accessLevel":"Write","resourceTypes":[{"name":"TrustedTokenIssuer","required":true}],"dependentActions":["kms:Decrypt"]},"DescribeAccountAssignmentCreationStatus":{"conditionKeys":[],"resources":[{"name":"Instance"}],"description":"Grants permission to describe the status of the assignment creation request","accessLevel":"Read","resourceTypes":[{"name":"Instance","required":true}],"dependentActions":["kms:Decrypt"]},"DescribeAccountAssignmentDeletionStatus":{"conditionKeys":[],"resources":[{"name":"Instance"}],"description":"Grants permission to describe the status of an assignment deletion request","accessLevel":"Read","resourceTypes":[{"name":"Instance","required":true}],"dependentActions":["kms:Decrypt"]},"DescribeApplication":{"conditionKeys":["sso:ApplicationAccount"],"resources":[{"name":"Application"}],"description":"Grants permission to obtain information about an application","accessLevel":"Read","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"]},"DescribeApplicationAssignment":{"conditionKeys":["sso:ApplicationAccount"],"resources":[{"name":"Application"}],"description":"Grants permission to retrieve an application assignment","accessLevel":"Read","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"]},"DescribeApplicationProvider":{"conditionKeys":[],"resources":[{"name":"ApplicationProvider"}],"description":"Grants permission to describe an application provider","accessLevel":"Read","resourceTypes":[{"name":"ApplicationProvider","required":true}]},"DescribeInstance":{"conditionKeys":[],"resources":[{"name":"Instance"}],"description":"Grants permission to obtain information about an identity center instance","accessLevel":"Read","resourceTypes":[{"name":"Instance","required":true}]},"DescribeInstanceAccessControlAttributeConfiguration":{"conditionKeys":[],"resources":[{"name":"Instance"}],"description":"Grants permission to get the list of attributes used by the instance for ABAC","accessLevel":"Read","resourceTypes":[{"name":"Instance","required":true}],"dependentActions":["kms:Decrypt"]},"DescribePermissionSet":{"conditionKeys":[],"resources":[{"name":"Instance"},{"name":"PermissionSet"}],"description":"Grants permission to describe a permission set","accessLevel":"Read","resourceTypes":[{"name":"Instance","required":true},{"name":"PermissionSet","required":true}],"dependentActions":["kms:Decrypt"]},"DescribePermissionSetProvisioningStatus":{"conditionKeys":[],"resources":[{"name":"Instance"}],"description":"Grants permission to describe the status for the given Permission Set Provisioning request","accessLevel":"Read","resourceTypes":[{"name":"Instance","required":true}],"dependentActions":["kms:Decrypt"]},"DescribeRegion":{"conditionKeys":[],"resources":[{"name":"Instance"}],"description":"Grants permission to retrieve configuration details for a specific IAM Identity Center instance region","accessLevel":"Read","resourceTypes":[{"name":"Instance","required":true}],"dependentActions":["kms:Decrypt"]},"DescribeRegisteredRegions":{"conditionKeys":[],"resources":[],"description":"Grants permission to obtain the regions where your organization has enabled AWS IAM Identity Center","accessLevel":"Read","resourceTypes":[]},"DescribeTrustedTokenIssuer":{"conditionKeys":[],"resources":[{"name":"TrustedTokenIssuer"}],"description":"Grants permission to describe a trusted token issuer for an instance","accessLevel":"Read","resourceTypes":[{"name":"TrustedTokenIssuer","required":true}],"dependentActions":["kms:Decrypt"]},"DetachCustomerManagedPolicyReferenceFromPermissionSet":{"conditionKeys":[],"resources":[{"name":"Instance"},{"name":"PermissionSet"}],"description":"Grants permission to detach a customer managed policy reference from a permission set","accessLevel":"Permissions management","resourceTypes":[{"name":"Instance","required":true},{"name":"PermissionSet","required":true}],"dependentActions":["kms:Decrypt"]},"DetachManagedPolicyFromPermissionSet":{"conditionKeys":[],"resources":[{"name":"Instance"},{"name":"PermissionSet"}],"description":"Grants permission to detach the attached AWS managed policy from the specified permission set","accessLevel":"Permissions management","resourceTypes":[{"name":"Instance","required":true},{"name":"PermissionSet","required":true}],"dependentActions":["kms:Decrypt"]},"DisassociateDirectory":{"conditionKeys":[],"resources":[],"description":"Grants permission to disassociate a directory to be used by AWS IAM Identity Center","accessLevel":"Write","resourceTypes":[],"dependentActions":["ds:UnauthorizeApplication","identitystore:DeleteIdentityStore","kms:Decrypt"]},"DisassociateProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to disassociate a directory user or group from a profile","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"GetApplicationAccessScope":{"conditionKeys":["sso:ApplicationAccount"],"resources":[{"name":"Application"}],"description":"Grants permission to get an access scope to an application","accessLevel":"Read","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"]},"GetApplicationAssignmentConfiguration":{"conditionKeys":["sso:ApplicationAccount"],"resources":[{"name":"Application"}],"description":"Grants permission to read assignment configurations for an application","accessLevel":"Read","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"]},"GetApplicationAuthenticationMethod":{"conditionKeys":["sso:ApplicationAccount"],"resources":[{"name":"Application"}],"description":"Grants permission to get an authentication method to an application","accessLevel":"Read","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"]},"GetApplicationGrant":{"conditionKeys":["sso:ApplicationAccount"],"resources":[{"name":"Application"}],"description":"Grants permission to obtain details about a grant belonging to an application","accessLevel":"Read","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"]},"GetApplicationInstance":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve details for an application instance","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"GetApplicationSessionConfiguration":{"conditionKeys":["sso:ApplicationAccount"],"resources":[{"name":"Application"}],"description":"Grants permission to get session configuration for an application","accessLevel":"Read","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"]},"GetApplicationTemplate":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve application template details","accessLevel":"Read","resourceTypes":[]},"GetInlinePolicyForPermissionSet":{"conditionKeys":[],"resources":[{"name":"Instance"},{"name":"PermissionSet"}],"description":"Grants permission to obtain the inline policy assigned to the permission set","accessLevel":"Read","resourceTypes":[{"name":"Instance","required":true},{"name":"PermissionSet","required":true}],"dependentActions":["kms:Decrypt"]},"GetManagedApplicationInstance":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve details for an application instance","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"GetMfaDeviceManagementForDirectory":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve Mfa Device Management settings for the directory","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"GetPermissionSet":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve details of a permission set","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"GetPermissionsBoundaryForPermissionSet":{"conditionKeys":[],"resources":[{"name":"Instance"},{"name":"PermissionSet"}],"description":"Grants permission to get permissions boundary for a permission set","accessLevel":"Read","resourceTypes":[{"name":"Instance","required":true},{"name":"PermissionSet","required":true}],"dependentActions":["kms:Decrypt"]},"GetProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a profile for an application instance","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"GetSSOStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to check if AWS IAM Identity Center is enabled","accessLevel":"Read","resourceTypes":[]},"GetSharedSsoConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve shared configuration for the current SSO instance","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"GetSsoConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve configuration for the current SSO instance","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"GetTrust":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the federation trust in a target account","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"ImportApplicationInstanceServiceProviderMetadata":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the application instance by uploading an application SAML metadata file provided by the service provider","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"ListAccountAssignmentCreationStatus":{"conditionKeys":[],"resources":[{"name":"Instance"}],"description":"Grants permission to list the status of the AWS account assignment creation requests for a specified SSO instance","accessLevel":"List","resourceTypes":[{"name":"Instance","required":true}],"dependentActions":["kms:Decrypt"]},"ListAccountAssignmentDeletionStatus":{"conditionKeys":[],"resources":[{"name":"Instance"}],"description":"Grants permission to list the status of the AWS account assignment deletion requests for a specified SSO instance","accessLevel":"List","resourceTypes":[{"name":"Instance","required":true}],"dependentActions":["kms:Decrypt"]},"ListAccountAssignments":{"conditionKeys":[],"resources":[{"name":"Account"},{"name":"Instance"},{"name":"PermissionSet"}],"description":"Grants permission to list the assignee of the specified AWS account with the specified permission set","accessLevel":"List","resourceTypes":[{"name":"Account","required":true},{"name":"Instance","required":true},{"name":"PermissionSet","required":true}],"dependentActions":["kms:Decrypt"]},"ListAccountAssignmentsForPrincipal":{"conditionKeys":[],"resources":[{"name":"Instance"}],"description":"Grants permission to list accounts assigned to user or group","accessLevel":"List","resourceTypes":[{"name":"Instance","required":true}],"dependentActions":["kms:Decrypt"]},"ListAccountsForProvisionedPermissionSet":{"conditionKeys":[],"resources":[{"name":"Instance"},{"name":"PermissionSet"}],"description":"Grants permission to list all the AWS accounts where the specified permission set is provisioned","accessLevel":"List","resourceTypes":[{"name":"Instance","required":true},{"name":"PermissionSet","required":true}],"dependentActions":["kms:Decrypt"]},"ListApplicationAccessScopes":{"conditionKeys":["sso:ApplicationAccount"],"resources":[{"name":"Application"}],"description":"Grants permission to list access scopes to an application","accessLevel":"List","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"]},"ListApplicationAssignments":{"conditionKeys":["sso:ApplicationAccount"],"resources":[{"name":"Application"}],"description":"Grants permission to list application assignments","accessLevel":"List","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"]},"ListApplicationAssignmentsForPrincipal":{"conditionKeys":["sso:ApplicationAccount"],"resources":[{"name":"Instance"}],"description":"Grants permission to list applications assigned to user or group","accessLevel":"List","resourceTypes":[{"name":"Instance","required":true}],"dependentActions":["kms:Decrypt"]},"ListApplicationAuthenticationMethods":{"conditionKeys":["sso:ApplicationAccount"],"resources":[{"name":"Application"}],"description":"Grants permission to list authentication methods to an application","accessLevel":"List","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"]},"ListApplicationGrants":{"conditionKeys":["sso:ApplicationAccount"],"resources":[{"name":"Application"}],"description":"Grants permission to list grants from an application","accessLevel":"List","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"]},"ListApplicationInstanceCertificates":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve all of the certificates for a given application instance","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"ListApplicationInstances":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve all application instances","accessLevel":"List","resourceTypes":[],"dependentActions":["kms:Decrypt","sso:GetApplicationInstance"]},"ListApplicationProviders":{"conditionKeys":[],"resources":[{"name":"ApplicationProvider"}],"description":"Grants permission to list application providers","accessLevel":"List","resourceTypes":[{"name":"ApplicationProvider","required":true}]},"ListApplicationTemplates":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve all supported application templates","accessLevel":"List","resourceTypes":[],"dependentActions":["sso:GetApplicationTemplate"]},"ListApplications":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve all applications associated with the instance of IAM Identity Center","accessLevel":"List","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"ListCustomerManagedPolicyReferencesInPermissionSet":{"conditionKeys":[],"resources":[{"name":"Instance"},{"name":"PermissionSet"}],"description":"Grants permission to list the customer managed policy references that are attached to a permission set","accessLevel":"List","resourceTypes":[{"name":"Instance","required":true},{"name":"PermissionSet","required":true}],"dependentActions":["kms:Decrypt"]},"ListDirectoryAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve details about the directory connected to AWS IAM Identity Center","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"ListInstances":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the SSO Instances that the caller has access to","accessLevel":"List","resourceTypes":[]},"ListManagedPoliciesInPermissionSet":{"conditionKeys":[],"resources":[{"name":"Instance"},{"name":"PermissionSet"}],"description":"Grants permission to list the AWS managed policies that are attached to a specified permission set","accessLevel":"List","resourceTypes":[{"name":"Instance","required":true},{"name":"PermissionSet","required":true}],"dependentActions":["kms:Decrypt"]},"ListPermissionSetProvisioningStatus":{"conditionKeys":[],"resources":[{"name":"Instance"}],"description":"Grants permission to list the status of the Permission Set Provisioning requests for a specified SSO instance","accessLevel":"List","resourceTypes":[{"name":"Instance","required":true}],"dependentActions":["kms:Decrypt"]},"ListPermissionSets":{"conditionKeys":[],"resources":[{"name":"Instance"}],"description":"Grants permission to retrieve all permission sets","accessLevel":"List","resourceTypes":[{"name":"Instance","required":true}],"dependentActions":["kms:Decrypt"]},"ListPermissionSetsProvisionedToAccount":{"conditionKeys":[],"resources":[{"name":"Account"},{"name":"Instance"}],"description":"Grants permission to list all the permission sets that are provisioned to a specified AWS account","accessLevel":"List","resourceTypes":[{"name":"Account","required":true},{"name":"Instance","required":true}],"dependentActions":["kms:Decrypt"]},"ListProfileAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the directory user or group associated with the profile","accessLevel":"Read","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"ListProfiles":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve all profiles for an application instance","accessLevel":"List","resourceTypes":[],"dependentActions":["kms:Decrypt","sso:GetProfile"]},"ListRegions":{"conditionKeys":[],"resources":[{"name":"Instance"}],"description":"Grants permission to list all regions configured for an IAM Identity Center instance","accessLevel":"List","resourceTypes":[{"name":"Instance","required":true}],"dependentActions":["kms:Decrypt"]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"Application"},{"name":"Instance"},{"name":"PermissionSet"},{"name":"TrustedTokenIssuer"}],"description":"Grants permission to list the tags that are attached to a specified resource","accessLevel":"Read","resourceTypes":[{"name":"Application","required":false},{"name":"Instance","required":false},{"name":"PermissionSet","required":false},{"name":"TrustedTokenIssuer","required":false}],"dependentActions":["kms:Decrypt"]},"ListTrustedTokenIssuers":{"conditionKeys":[],"resources":[{"name":"Instance"}],"description":"Grants permission to list trusted token issuers for an instance","accessLevel":"List","resourceTypes":[{"name":"Instance","required":true}],"dependentActions":["kms:Decrypt"]},"ProvisionPermissionSet":{"conditionKeys":[],"resources":[{"name":"Account"},{"name":"Instance"},{"name":"PermissionSet"}],"description":"Grants permission to provision a specified permission set to the specified target","accessLevel":"Write","resourceTypes":[{"name":"Account","required":true},{"name":"Instance","required":true},{"name":"PermissionSet","required":true}],"dependentActions":["kms:Decrypt"]},"PutApplicationAccessScope":{"conditionKeys":["sso:ApplicationAccount"],"resources":[{"name":"Application"}],"description":"Grants permission to create/update an access scope to an application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"]},"PutApplicationAssignmentConfiguration":{"conditionKeys":["sso:ApplicationAccount"],"resources":[{"name":"Application"}],"description":"Grants permission to add assignment configurations to an application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"]},"PutApplicationAuthenticationMethod":{"conditionKeys":["sso:ApplicationAccount"],"resources":[{"name":"Application"}],"description":"Grants permission to create/update an authentication method to an application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"]},"PutApplicationGrant":{"conditionKeys":["sso:ApplicationAccount"],"resources":[{"name":"Application"}],"description":"Grants permission to create/update a grant to an application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"]},"PutApplicationSessionConfiguration":{"conditionKeys":["sso:ApplicationAccount"],"resources":[{"name":"Application"}],"description":"Grants permission to put session configuration for an application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"]},"PutInlinePolicyToPermissionSet":{"conditionKeys":[],"resources":[{"name":"Instance"},{"name":"PermissionSet"}],"description":"Grants permission to attach an IAM inline policy to a permission set","accessLevel":"Write","resourceTypes":[{"name":"Instance","required":true},{"name":"PermissionSet","required":true}],"dependentActions":["kms:Decrypt"]},"PutMfaDeviceManagementForDirectory":{"conditionKeys":[],"resources":[],"description":"Grants permission to put Mfa Device Management settings for the directory","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"PutPermissionsBoundaryToPermissionSet":{"conditionKeys":[],"resources":[{"name":"Instance"},{"name":"PermissionSet"}],"description":"Grants permission to add permissions boundary to a permission set","accessLevel":"Permissions management","resourceTypes":[{"name":"Instance","required":true},{"name":"PermissionSet","required":true}],"dependentActions":["kms:Decrypt"]},"PutPermissionsPolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to add a policy to a permission set","accessLevel":"Permissions management","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"RemoveRegion":{"conditionKeys":[],"resources":[{"name":"Instance"}],"description":"Grants permission to remove a region from an IAM Identity Center instance","accessLevel":"Write","resourceTypes":[{"name":"Instance","required":true}],"dependentActions":["identitystore:RemoveRegion","kms:Decrypt"]},"SearchGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to search for groups within the associated directory","accessLevel":"Read","resourceTypes":[],"dependentActions":["ds:DescribeDirectories","kms:Decrypt"]},"SearchUsers":{"conditionKeys":[],"resources":[],"description":"Grants permission to search for users within the associated directory","accessLevel":"Read","resourceTypes":[],"dependentActions":["ds:DescribeDirectories","kms:Decrypt"]},"StartSSO":{"conditionKeys":[],"resources":[],"description":"Grants permission to initialize AWS IAM Identity Center","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt","kms:DescribeKey","kms:Encrypt","kms:GenerateDataKeyWithoutPlaintext","organizations:DescribeOrganization","organizations:EnableAWSServiceAccess"]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Application"},{"name":"Instance"},{"name":"PermissionSet"},{"name":"TrustedTokenIssuer"}],"description":"Grants permission to associate a set of tags with a specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"Application","required":false},{"name":"Instance","required":false},{"name":"PermissionSet","required":false},{"name":"TrustedTokenIssuer","required":false}],"dependentActions":["kms:Decrypt"]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"Application"},{"name":"Instance"},{"name":"PermissionSet"},{"name":"TrustedTokenIssuer"}],"description":"Grants permission to disassociate a set of tags from a specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"Application","required":false},{"name":"Instance","required":false},{"name":"PermissionSet","required":false},{"name":"TrustedTokenIssuer","required":false}],"dependentActions":["kms:Decrypt"]},"UpdateApplication":{"conditionKeys":["sso:ApplicationAccount"],"resources":[{"name":"Application"}],"description":"Grants permission to update an application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["kms:Decrypt"]},"UpdateApplicationInstanceActiveCertificate":{"conditionKeys":[],"resources":[],"description":"Grants permission to set a certificate as the active one for this application instance","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"UpdateApplicationInstanceDisplayData":{"conditionKeys":[],"resources":[],"description":"Grants permission to update display data of an application instance","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"UpdateApplicationInstanceResponseConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update federation response configuration for the application instance","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"UpdateApplicationInstanceResponseSchemaConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update federation response schema configuration for the application instance","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"UpdateApplicationInstanceSecurityConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update security details for the application instance","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"UpdateApplicationInstanceServiceProviderConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update service provider related configuration for the application instance","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"UpdateApplicationInstanceStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the status of an application instance","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"UpdateInstance":{"conditionKeys":[],"resources":[{"name":"Instance"}],"description":"Grants permission to update an identity center instance","accessLevel":"Write","resourceTypes":[{"name":"Instance","required":true}],"dependentActions":["identitystore:UpdateIdentityStore","kms:Decrypt","kms:DescribeKey","kms:Encrypt","kms:GenerateDataKeyWithoutPlaintext"]},"UpdateInstanceAccessControlAttributeConfiguration":{"conditionKeys":[],"resources":[{"name":"Instance"}],"description":"Grants permission to update the attributes to use with the instance for ABAC","accessLevel":"Write","resourceTypes":[{"name":"Instance","required":true}],"dependentActions":["kms:Decrypt"]},"UpdateManagedApplicationInstanceStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the status of a managed application instance","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"UpdatePermissionSet":{"conditionKeys":[],"resources":[{"name":"Instance"},{"name":"PermissionSet"}],"description":"Grants permission to update the permission set","accessLevel":"Permissions management","resourceTypes":[{"name":"Instance","required":true},{"name":"PermissionSet","required":true}],"dependentActions":["kms:Decrypt"]},"UpdateProfile":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the profile for an application instance","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"UpdateSSOConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the configuration for the current SSO instance","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"UpdateTrust":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the federation trust in a target account","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:Decrypt"]},"UpdateTrustedTokenIssuer":{"conditionKeys":[],"resources":[{"name":"TrustedTokenIssuer"}],"description":"Grants permission to update a trusted token issuer for an instance","accessLevel":"Write","resourceTypes":[{"name":"TrustedTokenIssuer","required":true}],"dependentActions":["kms:Decrypt"]}},"resources":[{"name":"Account","arnFormats":["arn:${Partition}:sso:::account/${AccountId}"],"conditionKeys":[]},{"name":"Application","arnFormats":["arn:${Partition}:sso::${AccountId}:application/${InstanceId}/${ApplicationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","sso:ApplicationAccount"]},{"name":"ApplicationProvider","arnFormats":["arn:${Partition}:sso::aws:applicationProvider/${ApplicationProviderId}"],"conditionKeys":[]},{"name":"Instance","arnFormats":["arn:${Partition}:sso:::instance/${InstanceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"PermissionSet","arnFormats":["arn:${Partition}:sso:::permissionSet/${InstanceId}/${PermissionSetId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"TrustedTokenIssuer","arnFormats":["arn:${Partition}:sso::${AccountId}:trustedTokenIssuer/${InstanceId}/${TrustedTokenIssuerId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"identitycenter:ApplicationArn":{"types":["ARN"],"description":"Filters access by the ARN of the IAM Identity Center application"},"identitycenter:InstanceArn":{"types":["ARN"],"description":"Filters access by the ARN of the IAM Identity Center instance"},"sso:ApplicationAccount":{"types":["String"],"description":"Filters access by the account which creates the application. This condition key is not supported for customer managed SAML applications"}}}

package/src/data/servicereference/services/states.json

@@ -0,0 +1 @@
+{"name":"states","actions":{"CreateActivity":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"activity"}],"description":"Grants permission to create an activity","accessLevel":"Write","resourceTypes":[{"name":"activity","required":true}]},"CreateStateMachine":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"statemachine"}],"description":"Grants permission to create a state machine","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}],"dependentActions":["iam:PassRole","states:PublishStateMachineVersion"]},"CreateStateMachineAlias":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to create a state machine alias","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}]},"DeleteActivity":{"conditionKeys":[],"resources":[{"name":"activity"}],"description":"Grants permission to delete an activity","accessLevel":"Write","resourceTypes":[{"name":"activity","required":true}]},"DeleteStateMachine":{"conditionKeys":[],"resources":[{"name":"statemachine"}],"description":"Grants permission to delete a state machine","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}]},"DeleteStateMachineAlias":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to delete a state machine alias","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}]},"DeleteStateMachineVersion":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to delete a state machine version","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}]},"DescribeActivity":{"conditionKeys":[],"resources":[{"name":"activity"}],"description":"Grants permission to describe an activity","accessLevel":"Read","resourceTypes":[{"name":"activity","required":true}]},"DescribeExecution":{"conditionKeys":[],"resources":[{"name":"execution"},{"name":"express"}],"description":"Grants permission to describe an execution","accessLevel":"Read","resourceTypes":[{"name":"execution","required":true},{"name":"express","required":true}]},"DescribeMapRun":{"conditionKeys":[],"resources":[{"name":"maprun"}],"description":"Grants permission to describe a map run","accessLevel":"Read","resourceTypes":[{"name":"maprun","required":true}]},"DescribeStateMachine":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to describe a state machine","accessLevel":"Read","resourceTypes":[{"name":"statemachine","required":true}]},"DescribeStateMachineAlias":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to describe a state machine alias","accessLevel":"Read","resourceTypes":[{"name":"statemachine","required":true}]},"DescribeStateMachineForExecution":{"conditionKeys":[],"resources":[{"name":"execution"}],"description":"Grants permission to describe the state machine for an execution","accessLevel":"Read","resourceTypes":[{"name":"execution","required":true}]},"GetActivityTask":{"conditionKeys":[],"resources":[{"name":"activity"}],"description":"Grants permission to be used by workers to retrieve a task (with the specified activity ARN) which has been scheduled for execution by a running state machine","accessLevel":"Write","resourceTypes":[{"name":"activity","required":true}]},"GetExecutionHistory":{"conditionKeys":[],"resources":[{"name":"execution"}],"description":"Grants permission to return the history of the specified execution as a list of events","accessLevel":"Read","resourceTypes":[{"name":"execution","required":true}]},"InvokeHTTPEndpoint":{"conditionKeys":[],"resources":[],"description":"Grants permission to invoke the HTTP Task state","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"ListActivities":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the existing activities","accessLevel":"List","resourceTypes":[]},"ListExecutions":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"maprun"},{"name":"statemachine"}],"description":"Grants permission to list the executions of a state machine","accessLevel":"List","resourceTypes":[{"name":"maprun","required":true},{"name":"statemachine","required":true}]},"ListMapRuns":{"conditionKeys":[],"resources":[{"name":"execution"}],"description":"Grants permission to list the map runs of an execution","accessLevel":"List","resourceTypes":[{"name":"execution","required":true}]},"ListStateMachineAliases":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to list the aliases of a state machine","accessLevel":"List","resourceTypes":[{"name":"statemachine","required":true}]},"ListStateMachineVersions":{"conditionKeys":[],"resources":[{"name":"statemachine"}],"description":"Grants permission to list the versions of a state machine","accessLevel":"List","resourceTypes":[{"name":"statemachine","required":true}]},"ListStateMachines":{"conditionKeys":[],"resources":[],"description":"Grants permission to lists the existing state machines","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"activity"},{"name":"statemachine"}],"description":"Grants permission to list tags for an AWS Step Functions resource","accessLevel":"List","resourceTypes":[{"name":"activity","required":false},{"name":"statemachine","required":false}]},"PublishStateMachineVersion":{"conditionKeys":[],"resources":[{"name":"statemachine"}],"description":"Grants permission to publish a state machine version","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}]},"RedriveExecution":{"conditionKeys":[],"resources":[{"name":"execution"}],"description":"Grants permission to redrive an execution","accessLevel":"Write","resourceTypes":[{"name":"execution","required":true}]},"RevealSecrets":{"conditionKeys":[],"resources":[],"description":"Grants permission to reveal sensitive data from an execution","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"SendTaskFailure":{"conditionKeys":[],"resources":[],"description":"Grants permission to report that the task identified by the taskToken failed","accessLevel":"Write","resourceTypes":[]},"SendTaskHeartbeat":{"conditionKeys":[],"resources":[],"description":"Grants permission to report to the service that the task represented by the specified taskToken is still making progress","accessLevel":"Write","resourceTypes":[]},"SendTaskSuccess":{"conditionKeys":[],"resources":[],"description":"Grants permission to report that the task identified by the taskToken completed successfully","accessLevel":"Write","resourceTypes":[]},"StartExecution":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to start a state machine execution","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}]},"StartSyncExecution":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to start a Synchronous Express state machine execution","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}]},"StopExecution":{"conditionKeys":[],"resources":[{"name":"execution"}],"description":"Grants permission to stop an execution","accessLevel":"Write","resourceTypes":[{"name":"execution","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"activity"},{"name":"statemachine"}],"description":"Grants permission to tag an AWS Step Functions resource","accessLevel":"Tagging","resourceTypes":[{"name":"activity","required":false},{"name":"statemachine","required":false}]},"TestState":{"conditionKeys":[],"resources":[],"description":"Grants permission to test a state machine definition","accessLevel":"Write","resourceTypes":[],"dependentActions":["states:RevealSecrets"]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"activity"},{"name":"statemachine"}],"description":"Grants permission to remove a tag from an AWS Step Functions resource","accessLevel":"Tagging","resourceTypes":[{"name":"activity","required":false},{"name":"statemachine","required":false}]},"UpdateMapRun":{"conditionKeys":[],"resources":[{"name":"maprun"}],"description":"Grants permission to update a map run","accessLevel":"Write","resourceTypes":[{"name":"maprun","required":true}]},"UpdateStateMachine":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"statemachine"}],"description":"Grants permission to update a state machine","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}],"dependentActions":["iam:PassRole","states:PublishStateMachineVersion"]},"UpdateStateMachineAlias":{"conditionKeys":["states:StateMachineQualifier"],"resources":[{"name":"statemachine"}],"description":"Grants permission to update a state machine alias","accessLevel":"Write","resourceTypes":[{"name":"statemachine","required":true}]},"ValidateStateMachineDefinition":{"conditionKeys":[],"resources":[],"description":"Grants permission to validate a state machine definition","accessLevel":"Read","resourceTypes":[]}},"resources":[{"name":"activity","arnFormats":["arn:${Partition}:states:${Region}:${Account}:activity:${ActivityName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"execution","arnFormats":["arn:${Partition}:states:${Region}:${Account}:execution:${StateMachineName}:${ExecutionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"express","arnFormats":["arn:${Partition}:states:${Region}:${Account}:express:${StateMachineName}:${ExecutionId}:${ExpressId}"],"conditionKeys":[]},{"name":"labelled execution","arnFormats":["arn:${Partition}:states:${Region}:${Account}:execution:${StateMachineName}/${MapRunLabel}:${ExecutionId}"],"conditionKeys":[]},{"name":"labelled express","arnFormats":["arn:${Partition}:states:${Region}:${Account}:express:${StateMachineName}/${MapRunLabel}:${ExecutionId}:${ExpressId}"],"conditionKeys":[]},{"name":"maprun","arnFormats":["arn:${Partition}:states:${Region}:${Account}:mapRun:${StateMachineName}/${MapRunLabel}:${MapRunId}"],"conditionKeys":[]},{"name":"statemachine","arnFormats":["arn:${Partition}:states:${Region}:${Account}:stateMachine:${StateMachineName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"statemachinealias","arnFormats":["arn:${Partition}:states:${Region}:${Account}:stateMachine:${StateMachineName}:${StateMachineAliasName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"statemachineversion","arnFormats":["arn:${Partition}:states:${Region}:${Account}:stateMachine:${StateMachineName}:${StateMachineVersionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair that is allowed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair of a resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by a list of tag keys that are allowed in the request"},"states:HTTPEndpoint":{"types":["String"],"description":"Filters access by the endpoint that the HTTP Task state allows in the request"},"states:HTTPMethod":{"types":["String"],"description":"Filters access by the method that the HTTP Task state allows in the request"},"states:StateMachineQualifier":{"types":["ArrayOfString"],"description":"Filters access by the qualifier of a state machine ARN"}}}

package/src/data/servicereference/services/storagegateway.json

@@ -0,0 +1 @@
+{"name":"storagegateway","actions":{"ActivateGateway":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to activate the gateway you previously deployed on your host","accessLevel":"Write","resourceTypes":[]},"AddCache":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to configure one or more gateway local disks as cache for a cached-volume gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"AddTagsToResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"cache-report"},{"name":"fs-association"},{"name":"gateway"},{"name":"share"},{"name":"tape"},{"name":"tapepool"},{"name":"volume"}],"description":"Grants permission to add one or more tags to the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"cache-report","required":false},{"name":"fs-association","required":false},{"name":"gateway","required":false},{"name":"share","required":false},{"name":"tape","required":false},{"name":"tapepool","required":false},{"name":"volume","required":false}]},"AddUploadBuffer":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to configure one or more gateway local disks as upload buffer for a specified gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"AddWorkingStorage":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to configure one or more gateway local disks as working storage for a gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"AssignTapePool":{"conditionKeys":[],"resources":[{"name":"tape"},{"name":"tapepool"}],"description":"Grants permission to move a tape to the target pool specified","accessLevel":"Write","resourceTypes":[{"name":"tape","required":true},{"name":"tapepool","required":true}]},"AssociateFileSystem":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"gateway"}],"description":"Grants permission to associate an Amazon FSx file system with the Amazon FSx file gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"dependentActions":["ds:DescribeDirectories","ec2:DescribeNetworkInterfaces","fsx:DescribeFileSystems","iam:CreateServiceLinkedRole","logs:CreateLogDelivery","logs:GetLogDelivery","logs:ListLogDeliveries","logs:UpdateLogDelivery"]},"AttachVolume":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"volume"}],"description":"Grants permission to connect a volume to an iSCSI connection and then attaches the volume to the specified gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"volume","required":true}]},"BypassGovernanceRetention":{"conditionKeys":[],"resources":[{"name":"tapepool"}],"description":"Grants permission to allow the governance retention lock on a pool to be bypassed","accessLevel":"Write","resourceTypes":[{"name":"tapepool","required":true}]},"CancelArchival":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"tape"}],"description":"Grants permission to cancel archiving of a virtual tape to the virtual tape shelf (VTS) after the archiving process is initiated","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"tape","required":true}]},"CancelCacheReport":{"conditionKeys":[],"resources":[{"name":"cache-report"}],"description":"Grants permission to cancel a cache report","accessLevel":"Write","resourceTypes":[{"name":"cache-report","required":true}]},"CancelRetrieval":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"tape"}],"description":"Grants permission to cancel retrieval of a virtual tape from the virtual tape shelf (VTS) to a gateway after the retrieval process is initiated","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"tape","required":true}]},"CreateCachediSCSIVolume":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"gateway"},{"name":"volume"}],"description":"Grants permission to create a cached volume on a specified cached gateway. This operation is supported only for the gateway-cached volume architecture","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"volume","required":true}]},"CreateNFSFileShare":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"gateway"}],"description":"Grants permission to create a NFS file share on an existing file gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"CreateSMBFileShare":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"gateway"}],"description":"Grants permission to create a SMB file share on an existing file gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"CreateSnapshot":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"volume"}],"description":"Grants permission to initiate a snapshot of a volume","accessLevel":"Write","resourceTypes":[{"name":"volume","required":true}]},"CreateSnapshotFromVolumeRecoveryPoint":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"volume"}],"description":"Grants permission to initiate a snapshot of a gateway from a volume recovery point","accessLevel":"Write","resourceTypes":[{"name":"volume","required":true}]},"CreateStorediSCSIVolume":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"gateway"}],"description":"Grants permission to create a volume on a specified gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"CreateTapePool":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a tape pool","accessLevel":"Write","resourceTypes":[]},"CreateTapeWithBarcode":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"gateway"},{"name":"tapepool"}],"description":"Grants permission to create a virtual tape by using your own barcode","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"tapepool","required":true}]},"CreateTapes":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"gateway"},{"name":"tapepool"}],"description":"Grants permission to create one or more virtual tapes. You write data to the virtual tapes and then archive the tapes","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"tapepool","required":true}]},"DeleteAutomaticTapeCreationPolicy":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to delete the automatic tape creation policy configured on a gateway-VTL","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"DeleteBandwidthRateLimit":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to delete the bandwidth rate limits of a gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"DeleteCacheReport":{"conditionKeys":[],"resources":[{"name":"cache-report"}],"description":"Grants permission to delete the metadata associated with a cache report","accessLevel":"Write","resourceTypes":[{"name":"cache-report","required":true}]},"DeleteChapCredentials":{"conditionKeys":[],"resources":[{"name":"target"}],"description":"Grants permission to delete Challenge-Handshake Authentication Protocol (CHAP) credentials for a specified iSCSI target and initiator pair","accessLevel":"Write","resourceTypes":[{"name":"target","required":true}]},"DeleteFileShare":{"conditionKeys":[],"resources":[{"name":"share"}],"description":"Grants permission to delete a file share from a file gateway","accessLevel":"Write","resourceTypes":[{"name":"share","required":true}]},"DeleteGateway":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to delete a gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"DeleteSnapshotSchedule":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to delete a snapshot of a volume","accessLevel":"Write","resourceTypes":[{"name":"volume","required":true}]},"DeleteTape":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"tape"}],"description":"Grants permission to delete the specified virtual tape","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"tape","required":true}]},"DeleteTapeArchive":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the specified virtual tape from the virtual tape shelf (VTS)","accessLevel":"Write","resourceTypes":[]},"DeleteTapePool":{"conditionKeys":[],"resources":[{"name":"tapepool"}],"description":"Grants permission to delete the specified tape pool","accessLevel":"Write","resourceTypes":[{"name":"tapepool","required":true}]},"DeleteVolume":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to delete the specified gateway volume that you previously created using the CreateCachediSCSIVolume or CreateStorediSCSIVolume API","accessLevel":"Write","resourceTypes":[{"name":"volume","required":true}]},"DescribeAvailabilityMonitorTest":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get the information about the most recent high availability monitoring test that was performed on the gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}]},"DescribeBandwidthRateLimit":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get the bandwidth rate limits of a gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}]},"DescribeBandwidthRateLimitSchedule":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get the bandwidth rate limit schedule of a gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}]},"DescribeCache":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get information about the cache of a gateway. This operation is supported only for the gateway-cached volume architecture","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}]},"DescribeCacheReport":{"conditionKeys":[],"resources":[{"name":"cache-report"}],"description":"Grants permission to get a description of a cache report","accessLevel":"Read","resourceTypes":[{"name":"cache-report","required":true}]},"DescribeCachediSCSIVolumes":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to get a description of the gateway volumes specified in the request. This operation is supported only for the gateway-cached volume architecture","accessLevel":"Read","resourceTypes":[{"name":"volume","required":true}]},"DescribeChapCredentials":{"conditionKeys":[],"resources":[{"name":"target"}],"description":"Grants permission to get an array of Challenge-Handshake Authentication Protocol (CHAP) credentials information for a specified iSCSI target, one for each target-initiator pair","accessLevel":"Read","resourceTypes":[{"name":"target","required":true}]},"DescribeFileSystemAssociations":{"conditionKeys":[],"resources":[{"name":"fs-association"}],"description":"Grants permission to get a description for one or more file system associations","accessLevel":"Read","resourceTypes":[{"name":"fs-association","required":true}]},"DescribeGatewayInformation":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get metadata about a gateway such as its name, network interfaces, configured time zone, and the state (whether the gateway is running or not)","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}]},"DescribeMaintenanceStartTime":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get your gateway's weekly maintenance start time including the day and time of the week","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}]},"DescribeNFSFileShares":{"conditionKeys":[],"resources":[{"name":"share"}],"description":"Grants permission to get a description for one or more file shares from a file gateway","accessLevel":"Read","resourceTypes":[{"name":"share","required":true}]},"DescribeSMBFileShares":{"conditionKeys":[],"resources":[{"name":"share"}],"description":"Grants permission to get a description for one or more file shares from a file gateway","accessLevel":"Read","resourceTypes":[{"name":"share","required":true}]},"DescribeSMBSettings":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get a description of a Server Message Block (SMB) file share settings from a file gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}]},"DescribeSnapshotSchedule":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to describe the snapshot schedule for the specified gateway volume","accessLevel":"Read","resourceTypes":[{"name":"volume","required":true}]},"DescribeStorediSCSIVolumes":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to get the description of the gateway volumes specified in the request","accessLevel":"Read","resourceTypes":[{"name":"volume","required":true}]},"DescribeTapeArchives":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a description of specified virtual tapes in the virtual tape shelf (VTS)","accessLevel":"Read","resourceTypes":[]},"DescribeTapeRecoveryPoints":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get a list of virtual tape recovery points that are available for the specified gateway-VTL","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}]},"DescribeTapes":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get a description of the specified Amazon Resource Name (ARN) of virtual tapes","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}]},"DescribeUploadBuffer":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get information about the upload buffer of a gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}]},"DescribeVTLDevices":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get a description of virtual tape library (VTL) devices for the specified gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}]},"DescribeWorkingStorage":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get information about the working storage of a gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}]},"DetachVolume":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to disconnect a volume from an iSCSI connection and then detaches the volume from the specified gateway","accessLevel":"Write","resourceTypes":[{"name":"volume","required":true}]},"DisableGateway":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to disable a gateway when the gateway is no longer functioning","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"DisassociateFileSystem":{"conditionKeys":[],"resources":[{"name":"fs-association"}],"description":"Grants permission to disassociate an Amazon FSx file system from an Amazon FSx file gateway","accessLevel":"Write","resourceTypes":[{"name":"fs-association","required":true}]},"EvictFilesFailingUpload":{"conditionKeys":[],"resources":[{"name":"share"}],"description":"Grants permission to clean a share's cache of file entries that are failing upload to Amazon S3","accessLevel":"Write","resourceTypes":[{"name":"share","required":true}]},"JoinDomain":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to enable you to join an Active Directory Domain","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"ListAutomaticTapeCreationPolicies":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the automatic tape creation policies configured on the specified gateway-VTL or all gateway-VTLs owned by your AWS account","accessLevel":"List","resourceTypes":[]},"ListCacheReports":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of the cache reports owned by your AWS account","accessLevel":"List","resourceTypes":[]},"ListFileShares":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of the file shares for a specific file gateway, or the list of file shares owned by your AWS account","accessLevel":"List","resourceTypes":[]},"ListFileSystemAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of the file system associations for the specified gateway","accessLevel":"List","resourceTypes":[]},"ListGateways":{"conditionKeys":[],"resources":[],"description":"Grants permission to list gateways owned by an AWS account in a region specified in the request. The returned list is ordered by gateway Amazon Resource Name (ARN)","accessLevel":"List","resourceTypes":[]},"ListLocalDisks":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to get a list of the gateway's local disks","accessLevel":"List","resourceTypes":[{"name":"gateway","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"share"},{"name":"tape"},{"name":"volume"}],"description":"Grants permission to get the tags that have been added to the specified resource","accessLevel":"List","resourceTypes":[{"name":"gateway","required":false},{"name":"share","required":false},{"name":"tape","required":false},{"name":"volume","required":false}]},"ListTapePools":{"conditionKeys":[],"resources":[],"description":"Grants permission to list tape pools owned by your AWS account","accessLevel":"List","resourceTypes":[]},"ListTapes":{"conditionKeys":[],"resources":[],"description":"Grants permission to list virtual tapes in your virtual tape library (VTL) and your virtual tape shelf (VTS)","accessLevel":"List","resourceTypes":[]},"ListVolumeInitiators":{"conditionKeys":[],"resources":[{"name":"volume"}],"description":"Grants permission to list iSCSI initiators that are connected to a volume","accessLevel":"List","resourceTypes":[{"name":"volume","required":true}]},"ListVolumeRecoveryPoints":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to list the recovery points for a specified gateway","accessLevel":"List","resourceTypes":[{"name":"gateway","required":true}]},"ListVolumes":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the iSCSI stored volumes of a gateway","accessLevel":"List","resourceTypes":[]},"NotifyWhenUploaded":{"conditionKeys":[],"resources":[{"name":"share"}],"description":"Grants permission to send you a notification through CloudWatch Events when all files written to your NFS file share have been uploaded to Amazon S3","accessLevel":"Write","resourceTypes":[{"name":"share","required":true}]},"RefreshCache":{"conditionKeys":[],"resources":[{"name":"share"}],"description":"Grants permission to refresh the cache for the specified file share","accessLevel":"Write","resourceTypes":[{"name":"share","required":true}]},"RemoveTagsFromResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"cache-report"},{"name":"fs-association"},{"name":"gateway"},{"name":"share"},{"name":"tape"},{"name":"tapepool"},{"name":"volume"}],"description":"Grants permission to remove one or more tags from the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"cache-report","required":false},{"name":"fs-association","required":false},{"name":"gateway","required":false},{"name":"share","required":false},{"name":"tape","required":false},{"name":"tapepool","required":false},{"name":"volume","required":false}]},"ResetCache":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to reset all cache disks that have encountered a error and makes the disks available for reconfiguration as cache storage","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"RetrieveTapeArchive":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"tape"}],"description":"Grants permission to retrieve an archived virtual tape from the virtual tape shelf (VTS) to a gateway-VTL","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"tape","required":true}]},"RetrieveTapeRecoveryPoint":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"tape"}],"description":"Grants permission to retrieve the recovery point for the specified virtual tape","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"tape","required":true}]},"SetLocalConsolePassword":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to set the password for your VM local console","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"SetSMBGuestPassword":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to set the password for SMB Guest user","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"ShutdownGateway":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to shut down a gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"StartAvailabilityMonitorTest":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to start a test that verifies that the specified gateway is configured for High Availability monitoring in your host environment","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"StartCacheReport":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"share"}],"description":"Grants permission to start a cache report for an existing file share","accessLevel":"Write","resourceTypes":[{"name":"share","required":true}]},"StartGateway":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to start a gateway that you previously shut down","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"UpdateAutomaticTapeCreationPolicy":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"tapepool"}],"description":"Grants permission to update the automatic tape creation policy configured on a gateway-VTL","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true},{"name":"tapepool","required":true}]},"UpdateBandwidthRateLimit":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update the bandwidth rate limits of a gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"UpdateBandwidthRateLimitSchedule":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update the bandwidth rate limit schedule of a gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"UpdateChapCredentials":{"conditionKeys":[],"resources":[{"name":"target"}],"description":"Grants permission to update the Challenge-Handshake Authentication Protocol (CHAP) credentials for a specified iSCSI target","accessLevel":"Write","resourceTypes":[{"name":"target","required":true}]},"UpdateFileSystemAssociation":{"conditionKeys":[],"resources":[{"name":"fs-association"}],"description":"Grants permission to update a file system association","accessLevel":"Write","resourceTypes":[{"name":"fs-association","required":true}],"dependentActions":["logs:CreateLogDelivery","logs:DeleteLogDelivery","logs:GetLogDelivery","logs:ListLogDeliveries","logs:UpdateLogDelivery"]},"UpdateGatewayInformation":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update a gateway's metadata, which includes the gateway's name and time zone","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"UpdateGatewaySoftwareNow":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update the gateway virtual machine (VM) software","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"UpdateMaintenanceStartTime":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update a gateway's weekly maintenance start time information, including day and time of the week. The maintenance time is the time in your gateway's time zone","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"UpdateNFSFileShare":{"conditionKeys":[],"resources":[{"name":"share"}],"description":"Grants permission to update a NFS file share","accessLevel":"Write","resourceTypes":[{"name":"share","required":true}]},"UpdateSMBFileShare":{"conditionKeys":[],"resources":[{"name":"share"}],"description":"Grants permission to update a SMB file share","accessLevel":"Write","resourceTypes":[{"name":"share","required":true}]},"UpdateSMBFileShareVisibility":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update whether the shares on a gateway are visible in a net view or browse list","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"UpdateSMBLocalGroups":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update the list of Active Directory users and groups that have special permissions for SMB file shares on the gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"UpdateSMBSecurityStrategy":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update the SMB security strategy on a file gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"UpdateSnapshotSchedule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"volume"}],"description":"Grants permission to update a snapshot schedule configured for a gateway volume","accessLevel":"Write","resourceTypes":[{"name":"volume","required":true}]},"UpdateVTLDeviceType":{"conditionKeys":[],"resources":[{"name":"device"}],"description":"Grants permission to update the type of medium changer in a gateway-VTL","accessLevel":"Write","resourceTypes":[{"name":"device","required":true}]}},"resources":[{"name":"cache-report","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:share/${ShareId}/cache-report/${CacheReportId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"device","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:gateway/${GatewayId}/device/${Vtldevice}"],"conditionKeys":[]},{"name":"fs-association","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:fs-association/${FsaId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"gateway","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:gateway/${GatewayId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"share","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:share/${ShareId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"tape","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:tape/${TapeBarcode}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"tapepool","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:tapepool/${PoolId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"target","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:gateway/${GatewayId}/target/${IscsiTarget}"],"conditionKeys":[]},{"name":"volume","arnFormats":["arn:${Partition}:storagegateway:${Region}:${Account}:gateway/${GatewayId}/volume/${VolumeId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the allowed set of values for each of the tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag-value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of mandatory tags in the request"}}}

package/src/data/servicereference/services/sts.json

@@ -0,0 +1 @@
+{"name":"sts","actions":{"AssumeRole":{"conditionKeys":["accounts.google.com:aud","accounts.google.com:sub","aws:RequestTag/${TagKey}","aws:TagKeys","cognito-identity.amazonaws.com:amr","cognito-identity.amazonaws.com:aud","cognito-identity.amazonaws.com:sub","graph.facebook.com:app_id","graph.facebook.com:id","iam:ResourceTag/${TagKey}","saml:namequalifier","saml:sub","saml:sub_type","sts:ExternalId","sts:RoleSessionName","sts:SourceIdentity","sts:TransitiveTagKeys","www.amazon.com:app_id","www.amazon.com:user_id"],"resources":[{"name":"role"}],"description":"Grants permission to obtain a set of temporary security credentials that you can use to access AWS resources that you might not normally have access to","accessLevel":"Write","resourceTypes":[{"name":"role","required":true}]},"AssumeRoleWithSAML":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","saml:aud","saml:cn","saml:commonName","saml:doc","saml:eduorghomepageuri","saml:eduorgidentityauthnpolicyuri","saml:eduorglegalname","saml:eduorgsuperioruri","saml:eduorgwhitepagesuri","saml:edupersonaffiliation","saml:edupersonassurance","saml:edupersonentitlement","saml:edupersonnickname","saml:edupersonorgdn","saml:edupersonorgunitdn","saml:edupersonprimaryaffiliation","saml:edupersonprimaryorgunitdn","saml:edupersonprincipalname","saml:edupersonscopedaffiliation","saml:edupersontargetedid","saml:givenName","saml:iss","saml:mail","saml:name","saml:namequalifier","saml:organizationStatus","saml:primaryGroupSID","saml:sub","saml:sub_type","saml:surname","saml:uid","saml:x500UniqueIdentifier","sts:RoleSessionName","sts:SourceIdentity","sts:TransitiveTagKeys"],"resources":[{"name":"role"}],"description":"Grants permission to obtain a set of temporary security credentials for users who have been authenticated via a SAML authentication response","accessLevel":"Write","resourceTypes":[{"name":"role","required":true}]},"AssumeRoleWithWebIdentity":{"conditionKeys":["accounts.google.com:aud","accounts.google.com:oaud","accounts.google.com:sub","aws:RequestTag/${TagKey}","aws:TagKeys","cognito-identity.amazonaws.com:amr","cognito-identity.amazonaws.com:aud","cognito-identity.amazonaws.com:sub","graph.facebook.com:app_id","graph.facebook.com:id","sts:RoleSessionName","sts:SourceIdentity","sts:TransitiveTagKeys","www.amazon.com:app_id","www.amazon.com:user_id"],"resources":[{"name":"role"}],"description":"Grants permission to obtain a set of temporary security credentials for users who have been authenticated in a mobile or web application with a web identity provider","accessLevel":"Write","resourceTypes":[{"name":"role","required":true}]},"AssumeRoot":{"conditionKeys":["sts:TaskPolicyArn"],"resources":[{"name":"root-user"}],"description":"Grants permission to obtain a set of temporary security credentials that you can use to perform privileged tasks in member accounts in your organization","accessLevel":"Write","resourceTypes":[{"name":"root-user","required":true}]},"DecodeAuthorizationMessage":{"conditionKeys":[],"resources":[],"description":"Grants permission to decode additional information about the authorization status of a request from an encoded message returned in response to an AWS request","accessLevel":"Write","resourceTypes":[]},"GetAccessKeyInfo":{"conditionKeys":[],"resources":[],"description":"Grants permission to obtain details about the access key id passed as a parameter to the request","accessLevel":"Read","resourceTypes":[]},"GetCallerIdentity":{"conditionKeys":[],"resources":[],"description":"Grants permission to obtain details about the IAM identity whose credentials are used to call the API","accessLevel":"Read","resourceTypes":[]},"GetDelegatedAccessToken":{"conditionKeys":[],"resources":[],"description":"Returns temporary security credentials for accessing an AWS account after temporary delegation request approval. This API requires the tradeInToken provided upon request delegation approval and is intended to be used only by Amazon or AWS Partners","accessLevel":"Write","resourceTypes":[]},"GetFederationToken":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"federated-user"},{"name":"user"}],"description":"Grants permission to obtain a set of temporary security credentials (consisting of an access key ID, a secret access key, and a security token) for a federated user","accessLevel":"Read","resourceTypes":[{"name":"federated-user","required":false},{"name":"user","required":false}]},"GetServiceBearerToken":{"conditionKeys":["sts:AWSServiceName","sts:DurationSeconds"],"resources":[],"description":"Grants permission to obtain a STS bearer token for an AWS root user, IAM role, or an IAM user","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetSessionToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to obtain a set of temporary security credentials (consisting of an access key ID, a secret access key, and a security token) for an AWS account or IAM user","accessLevel":"Read","resourceTypes":[]},"GetWebIdentityToken":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","sts:DurationSeconds","sts:IdentityTokenAudience","sts:SigningAlgorithm"],"resources":[],"description":"Grants permission to obtain a short-lived, publicly verifiable JSON Web Token (JWT) that represents the calling IAM principal's identity","accessLevel":"Write","resourceTypes":[]},"SetContext":{"conditionKeys":["sts:RequestContext/${ContextKey}","sts:RequestContextProviders"],"resources":[{"name":"role"},{"name":"self-session"}],"description":"Grants permission to set context keys on a STS session","accessLevel":"Write","resourceTypes":[{"name":"role","required":false},{"name":"self-session","required":false}],"permissionOnly":true},"SetSourceIdentity":{"conditionKeys":["sts:SourceIdentity"],"resources":[{"name":"role"},{"name":"user"}],"description":"Grants permission to set a source identity on a STS session","accessLevel":"Write","resourceTypes":[{"name":"role","required":false},{"name":"user","required":false}],"permissionOnly":true},"TagGetWebIdentityToken":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to add tags to the JSON Web Token (JWT) generated by the GetWebIdentityToken API","accessLevel":"Tagging","resourceTypes":[],"permissionOnly":true},"TagSession":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","saml:aud","sts:TransitiveTagKeys"],"resources":[{"name":"role"},{"name":"user"}],"description":"Grants permission to add tags to a STS session","accessLevel":"Tagging","resourceTypes":[{"name":"role","required":false},{"name":"user","required":false}],"permissionOnly":true}},"resources":[{"name":"context-provider","arnFormats":["arn:${Partition}:iam::aws:contextProvider/${ContextProviderName}"],"conditionKeys":[]},{"name":"federated-user","arnFormats":["arn:${Partition}:sts::${Account}:federated-user/${FederatedUserName}"],"conditionKeys":[]},{"name":"role","arnFormats":["arn:${Partition}:iam::${Account}:role/${RoleNameWithPath}"],"conditionKeys":["aws:ResourceTag/${TagKey}","iam:ResourceTag/${TagKey}"]},{"name":"root-user","arnFormats":["arn:${Partition}:iam::${Account}:root"],"conditionKeys":[]},{"name":"self-session","arnFormats":["arn:${Partition}:sts::${Account}:self"],"conditionKeys":[]},{"name":"user","arnFormats":["arn:${Partition}:iam::${Account}:user/${UserNameWithPath}"],"conditionKeys":[]}],"conditionKeys":{"accounts.google.com:aud":{"types":["String"],"description":"Filters access by the Google application ID"},"accounts.google.com:oaud":{"types":["String"],"description":"Filters access by the Google audience"},"accounts.google.com:sub":{"types":["String"],"description":"Filters access by the subject of the claim (the Google user ID)"},"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"cognito-identity.amazonaws.com:amr":{"types":["String"],"description":"Filters access by the login information for Amazon Cognito"},"cognito-identity.amazonaws.com:aud":{"types":["String"],"description":"Filters access by the Amazon Cognito identity pool ID"},"cognito-identity.amazonaws.com:sub":{"types":["String"],"description":"Filters access by the subject of the claim (the Amazon Cognito user ID)"},"graph.facebook.com:app_id":{"types":["String"],"description":"Filters access by the Facebook application ID"},"graph.facebook.com:id":{"types":["String"],"description":"Filters access by the Facebook user ID"},"iam:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are attached to the role that is being assumed"},"saml:aud":{"types":["String"],"description":"Filters access by the endpoint URL to which SAML assertions are presented"},"saml:cn":{"types":["ArrayOfString"],"description":"Filters access by the eduOrg attribute"},"saml:commonName":{"types":["String"],"description":"Filters access by the commonName attribute"},"saml:doc":{"types":["String"],"description":"Filters access by on the principal that was used to assume the role"},"saml:eduorghomepageuri":{"types":["ArrayOfString"],"description":"Filters access by the eduOrg attribute"},"saml:eduorgidentityauthnpolicyuri":{"types":["ArrayOfString"],"description":"Filters access by the eduOrg attribute"},"saml:eduorglegalname":{"types":["ArrayOfString"],"description":"Filters access by the eduOrg attribute"},"saml:eduorgsuperioruri":{"types":["ArrayOfString"],"description":"Filters access by the eduOrg attribute"},"saml:eduorgwhitepagesuri":{"types":["ArrayOfString"],"description":"Filters access by the eduOrg attribute"},"saml:edupersonaffiliation":{"types":["ArrayOfString"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonassurance":{"types":["ArrayOfString"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonentitlement":{"types":["ArrayOfString"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonnickname":{"types":["ArrayOfString"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonorgdn":{"types":["String"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonorgunitdn":{"types":["ArrayOfString"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonprimaryaffiliation":{"types":["String"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonprimaryorgunitdn":{"types":["String"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonprincipalname":{"types":["String"],"description":"Filters access by the eduPerson attribute"},"saml:edupersonscopedaffiliation":{"types":["ArrayOfString"],"description":"Filters access by the eduPerson attribute"},"saml:edupersontargetedid":{"types":["ArrayOfString"],"description":"Filters access by the eduPerson attribute"},"saml:givenName":{"types":["String"],"description":"Filters access by the givenName attribute"},"saml:iss":{"types":["String"],"description":"Filters access by on the issuer, which is represented by a URN"},"saml:mail":{"types":["String"],"description":"Filters access by the mail attribute"},"saml:name":{"types":["String"],"description":"Filters access by the name attribute"},"saml:namequalifier":{"types":["String"],"description":"Filters access by the hash value of the issuer, account ID, and friendly name"},"saml:organizationStatus":{"types":["String"],"description":"Filters access by the organizationStatus attribute"},"saml:primaryGroupSID":{"types":["String"],"description":"Filters access by the primaryGroupSID attribute"},"saml:sub":{"types":["String"],"description":"Filters access by the subject of the claim (the SAML user ID)"},"saml:sub_type":{"types":["String"],"description":"Filters access by the value persistent, transient, or the full Format URI"},"saml:surname":{"types":["String"],"description":"Filters access by the surname attribute"},"saml:uid":{"types":["String"],"description":"Filters access by the uid attribute"},"saml:x500UniqueIdentifier":{"types":["String"],"description":"Filters access by the uid attribute"},"sts:AWSServiceName":{"types":["String"],"description":"Filters access by the service that is obtaining a bearer token"},"sts:DurationSeconds":{"types":["Numeric"],"description":"Filters access by the duration in seconds when getting a bearer token or a JSON Web Token (JWT) from the GetWebIdentityToken API"},"sts:ExternalId":{"types":["String"],"description":"Filters access by the unique identifier required when you assume a role in another account"},"sts:IdentityTokenAudience":{"types":["ArrayOfString"],"description":"Filters access by the audience that is passed in the request"},"sts:RequestContext/${ContextKey}":{"types":["String"],"description":"Filters access by the session context key-value pairs embedded in the signed context assertion retrieved from a trusted context provider"},"sts:RequestContextProviders":{"types":["ArrayOfARN"],"description":"Filters access by the context provider ARNs"},"sts:RoleSessionName":{"types":["String"],"description":"Filters access by the role session name required when you assume a role"},"sts:SigningAlgorithm":{"types":["String"],"description":"Filters access by the signing algorithm that is passed in the request"},"sts:SourceIdentity":{"types":["String"],"description":"Filters access by the source identity that is passed in the request"},"sts:TaskPolicyArn":{"types":["String"],"description":"Filters access by TaskPolicyARN"},"sts:TransitiveTagKeys":{"types":["ArrayOfString"],"description":"Filters access by the transitive tag keys that are passed in the request"},"www.amazon.com:app_id":{"types":["String"],"description":"Filters access by the Login with Amazon application ID"},"www.amazon.com:user_id":{"types":["String"],"description":"Filters access by the Login with Amazon user ID"}}}

package/src/data/servicereference/services/support-console.json

@@ -0,0 +1 @@
+{"name":"support-console","actions":{"CheckSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to check whether the account has access to given product","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"CreateCaseDraft":{"conditionKeys":[],"resources":[],"description":"Grants permission to create or update case draft for the given case type","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CreateContact":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an authenticated contact for the given contact type","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"DeleteCaseDraft":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a case draft for the given case type","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"DescribeDynamicHelp":{"conditionKeys":[],"resources":[],"description":"Grants permission to get dynamic help resources for given service and category","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetAccountGovCloudEnabled":{"conditionKeys":[],"resources":[],"description":"Grants permission to determines whether the calling account is GovCloud enabled","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetAccountState":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the state of the calling account","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetBanner":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the support banner information","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetCaseDraft":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a case draft for given case type","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetIssueClassificationPredictions":{"conditionKeys":[],"resources":[],"description":"Grants permission to get classification predictions of an issue","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetIssueTextSummary":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a generated text summary of an issue","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetQuestionnaire":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a feedback questionnaire","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"SaveFeedback":{"conditionKeys":[],"resources":[],"description":"Grants permission to save questionnaire feedback","accessLevel":"Write","resourceTypes":[],"permissionOnly":true}},"resources":[],"conditionKeys":{}}

package/src/data/servicereference/services/support.json

@@ -0,0 +1 @@
+{"name":"support","actions":{"AddAttachmentsToSet":{"conditionKeys":[],"resources":[],"description":"Grants permission to add one or more attachments to an AWS Support case","accessLevel":"Write","resourceTypes":[]},"AddCommunicationToCase":{"conditionKeys":[],"resources":[],"description":"Grants permission to add a customer communication to an AWS Support case","accessLevel":"Write","resourceTypes":[]},"CreateCase":{"conditionKeys":[],"resources":[],"description":"Grants permission to creates a new AWS Support case","accessLevel":"Write","resourceTypes":[]},"DescribeAttachment":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe attachment detail","accessLevel":"Read","resourceTypes":[]},"DescribeCaseAttributes":{"conditionKeys":[],"resources":[],"description":"Grants permission to allow secondary services to read AWS Support case attributes.This is an internally managed function","accessLevel":"Read","resourceTypes":[]},"DescribeCaseOptions":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the available options for a single AWS Support case. This is an internally managed function","accessLevel":"Read","resourceTypes":[]},"DescribeCases":{"conditionKeys":[],"resources":[],"description":"Grants permission to list AWS Support cases that matches the given inputs","accessLevel":"Read","resourceTypes":[]},"DescribeCommunication":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a single communication and attachments for a single AWS Support case","accessLevel":"Read","resourceTypes":[]},"DescribeCommunications":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the communications and attachments for one or more AWS Support cases","accessLevel":"Read","resourceTypes":[]},"DescribeCreateCaseOptions":{"conditionKeys":[],"resources":[],"description":"Grants permission to describes the available options for creating a support case","accessLevel":"Read","resourceTypes":[]},"DescribeIssueTypes":{"conditionKeys":[],"resources":[],"description":"Grants permission to return issue types for AWS Support cases","accessLevel":"Read","resourceTypes":[]},"DescribeServices":{"conditionKeys":[],"resources":[],"description":"Grants permission to list AWS services and categories that applies to each service","accessLevel":"Read","resourceTypes":[]},"DescribeSeverityLevels":{"conditionKeys":[],"resources":[],"description":"Grants permission to list severity levels that can be assigned to an AWS Support case","accessLevel":"Read","resourceTypes":[]},"DescribeSupportLevel":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the support level for an AWS Account identifier","accessLevel":"Read","resourceTypes":[]},"DescribeSupportedLanguages":{"conditionKeys":[],"resources":[],"description":"Grants permission to describes the available support languages for a given category code, service code and issue type","accessLevel":"Read","resourceTypes":[]},"DescribeTrustedAdvisorCheckRefreshStatuses":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the status of a Trusted Advisor refresh check based on a list of check identifiers","accessLevel":"Read","resourceTypes":[]},"DescribeTrustedAdvisorCheckResult":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the results of the Trusted Advisor check that has the specified check identifier","accessLevel":"Read","resourceTypes":[]},"DescribeTrustedAdvisorCheckSummaries":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the summaries of the results of the Trusted Advisor checks that have the specified check identifiers","accessLevel":"Read","resourceTypes":[]},"DescribeTrustedAdvisorChecks":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of all available Trusted Advisor checks, including name, identifier, category and description","accessLevel":"Read","resourceTypes":[]},"GetInteraction":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve personalized troubleshooting assistance for account and technical issues for a specific interaction","accessLevel":"Read","resourceTypes":[]},"InitiateCallForCase":{"conditionKeys":[],"resources":[],"description":"Grants permission to initiate a call on AWS Support Center. This is an internally managed function","accessLevel":"Write","resourceTypes":[]},"InitiateChatForCase":{"conditionKeys":[],"resources":[],"description":"Grants permission to initiate a chat on AWS Support Center.This is an internally managed function","accessLevel":"Write","resourceTypes":[]},"InitiateLiveContactForCase":{"conditionKeys":[],"resources":[],"description":"Grants permission to initiate a live contact on AWS Support Center. This is an internally managed function","accessLevel":"Write","resourceTypes":[]},"ListInteractionEntries":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of entries within a specific interaction, including messages, status updates, or other relevant data points","accessLevel":"Read","resourceTypes":[]},"ListInteractions":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of interactions, potentially with filters or pagination","accessLevel":"Read","resourceTypes":[]},"PutCaseAttributes":{"conditionKeys":[],"resources":[],"description":"Grants permission to allow secondary services to attach attributes to AWS Support cases. This is an internally managed function","accessLevel":"Write","resourceTypes":[]},"RateCaseCommunication":{"conditionKeys":[],"resources":[],"description":"Grants permission to rate an AWS Support case communication","accessLevel":"Write","resourceTypes":[]},"RefreshTrustedAdvisorCheck":{"conditionKeys":[],"resources":[],"description":"Grants permission to requests a refresh of the Trusted Advisor check that has the specified check identifier","accessLevel":"Write","resourceTypes":[]},"ResolveCase":{"conditionKeys":[],"resources":[],"description":"Grants permission to resolve an AWS Support case","accessLevel":"Write","resourceTypes":[]},"ResolveInteraction":{"conditionKeys":[],"resources":[],"description":"Grants permission to mark a specific interaction as resolved by its unique identifier, indicating that the issue has been addressed and no further action is needed","accessLevel":"Write","resourceTypes":[]},"SearchForCases":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of AWS Support cases that matches the given inputs","accessLevel":"Read","resourceTypes":[]},"StartInteraction":{"conditionKeys":[],"resources":[],"description":"Grants permission to start a specific interaction to receive personalized troubleshooting assistance for account and technical issues","accessLevel":"Write","resourceTypes":[],"dependentActions":["support:DescribeSupportLevel"]},"UpdateCaseSeverity":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the severity for a single AWS Support case. This is an internally managed function","accessLevel":"Write","resourceTypes":[]},"UpdateInteraction":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a specific interaction to receive personalized troubleshooting assistance for account and technical issues","accessLevel":"Write","resourceTypes":[]}},"resources":[],"conditionKeys":{}}

package/src/data/servicereference/services/supportapp.json

@@ -0,0 +1 @@
+{"name":"supportapp","actions":{"CreateSlackChannelConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a Slack channel configuration for your account","accessLevel":"Write","resourceTypes":[]},"DeleteAccountAlias":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete an alias from your account","accessLevel":"Write","resourceTypes":[]},"DeleteSlackChannelConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a Slack channel configuration from your account","accessLevel":"Write","resourceTypes":[]},"DeleteSlackWorkspaceConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a Slack workspace configuration from your account","accessLevel":"Write","resourceTypes":[]},"DescribeSlackChannels":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all public Slack channels in a workspace that have invited the AWS Support App","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetAccountAlias":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the alias for your account","accessLevel":"Read","resourceTypes":[]},"GetSlackOauthParameters":{"conditionKeys":[],"resources":[],"description":"Grants permission to get parameters for the Slack OAuth code, which the AWS Support App uses to authorize the workspace","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"ListSlackChannelConfigurations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all Slack channel configurations for your account","accessLevel":"Read","resourceTypes":[]},"ListSlackWorkspaceConfigurations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all Slack workspace configurations for your account","accessLevel":"Read","resourceTypes":[]},"PutAccountAlias":{"conditionKeys":[],"resources":[],"description":"Grants permission to create or update an alias for your account","accessLevel":"Write","resourceTypes":[]},"RedeemSlackOauthCode":{"conditionKeys":[],"resources":[],"description":"Grants permission to redeem the Slack OAuth code, which the AWS Support App uses to authorize the workspace","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"RegisterSlackWorkspaceForOrganization":{"conditionKeys":[],"resources":[],"description":"Grants permission to register a Slack workspace for an AWS account that is part of an organization","accessLevel":"Write","resourceTypes":[]},"UpdateSlackChannelConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a Slack channel configuration for your account","accessLevel":"Write","resourceTypes":[]}},"resources":[],"conditionKeys":{}}

package/src/data/servicereference/services/supportplans.json

@@ -0,0 +1 @@
+{"name":"supportplans","actions":{"CreateSupportPlanSchedule":{"conditionKeys":[],"resources":[],"description":"Grants permission to create support plan schedules for this AWS account","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"GetSupportPlan":{"conditionKeys":[],"resources":[],"description":"Grants permission to view details about the current support plan for this AWS account","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetSupportPlanUpdateStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to view details about the status for a request to update a support plan","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"ListSupportPlanModifiers":{"conditionKeys":[],"resources":[],"description":"Grants permission to view a list of all support plan modifiers for this AWS account","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"StartSupportPlanUpdate":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the support plan for this AWS account","accessLevel":"Write","resourceTypes":[],"permissionOnly":true}},"resources":[],"conditionKeys":{}}

package/src/data/servicereference/services/sustainability.json

@@ -0,0 +1 @@
+{"name":"sustainability","actions":{"GetCarbonFootprintSummary":{"conditionKeys":[],"resources":[],"description":"Grants permission to view the carbon footprint tool","accessLevel":"Read","resourceTypes":[]}},"resources":[],"conditionKeys":{}}

package/src/data/servicereference/services/swf.json

@@ -0,0 +1 @@
+{"name":"swf","actions":{"CancelTimer":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to cancel a previously started timer and record a TimerCanceled event in the history","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"permissionOnly":true},"CancelWorkflowExecution":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to close the workflow execution and record a WorkflowExecutionCanceled event in the history","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"permissionOnly":true},"CompleteWorkflowExecution":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to close the workflow execution and record a WorkflowExecutionCompleted event in the history","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"permissionOnly":true},"ContinueAsNewWorkflowExecution":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to close the workflow execution and start a new workflow execution of the same type using the same workflow ID and a unique run Id","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"permissionOnly":true},"CountClosedWorkflowExecutions":{"conditionKeys":["swf:tagFilter.tag","swf:typeFilter.name","swf:typeFilter.version"],"resources":[{"name":"domain"}],"description":"Grants permission to return the number of closed workflow executions within the given domain that meet the specified filtering criteria","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"CountOpenWorkflowExecutions":{"conditionKeys":["swf:tagFilter.tag","swf:typeFilter.name","swf:typeFilter.version"],"resources":[{"name":"domain"}],"description":"Grants permission to return the number of open workflow executions within the given domain that meet the specified filtering criteria","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"CountPendingActivityTasks":{"conditionKeys":["swf:taskList.name"],"resources":[{"name":"domain"}],"description":"Grants permission to return the estimated number of activity tasks in the specified task list","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"CountPendingDecisionTasks":{"conditionKeys":["swf:taskList.name"],"resources":[{"name":"domain"}],"description":"Grants permission to return the estimated number of decision tasks in the specified task list","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"DeleteActivityType":{"conditionKeys":["swf:activityType.name","swf:activityType.version"],"resources":[{"name":"domain"}],"description":"Grants permission to delete the specified activity type","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DeleteWorkflowType":{"conditionKeys":["swf:workflowType.name","swf:workflowType.version"],"resources":[{"name":"domain"}],"description":"Grants permission to delete the specified workflow type","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DeprecateActivityType":{"conditionKeys":["swf:activityType.name","swf:activityType.version"],"resources":[{"name":"domain"}],"description":"Grants permission to deprecate the specified activity type","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DeprecateDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to deprecate the specified domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DeprecateWorkflowType":{"conditionKeys":["swf:workflowType.name","swf:workflowType.version"],"resources":[{"name":"domain"}],"description":"Grants permission to deprecate the specified workflow type","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DescribeActivityType":{"conditionKeys":["swf:activityType.name","swf:activityType.version"],"resources":[{"name":"domain"}],"description":"Grants permission to return information about the specified activity type","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"DescribeDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to return information about the specified domain, including its description and status","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"DescribeWorkflowExecution":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to return information about the specified workflow execution including its type and some statistics","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"DescribeWorkflowType":{"conditionKeys":["swf:workflowType.name","swf:workflowType.version"],"resources":[{"name":"domain"}],"description":"Grants permission to return information about the specified workflow type","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"FailWorkflowExecution":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to close the workflow execution and record a WorkflowExecutionFailed event in the history","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"permissionOnly":true},"GetWorkflowExecutionHistory":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to return the history of the specified workflow execution","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"ListActivityTypes":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to return information about all activities registered in the specified domain that match the specified name and registration status","accessLevel":"List","resourceTypes":[{"name":"domain","required":true}]},"ListClosedWorkflowExecutions":{"conditionKeys":["swf:tagFilter.tag","swf:typeFilter.name","swf:typeFilter.version"],"resources":[{"name":"domain"}],"description":"Grants permission to return a list of closed workflow executions in the specified domain that meet the filtering criteria","accessLevel":"List","resourceTypes":[{"name":"domain","required":true}]},"ListDomains":{"conditionKeys":[],"resources":[],"description":"Grants permission to return the list of domains registered in the account","accessLevel":"List","resourceTypes":[]},"ListOpenWorkflowExecutions":{"conditionKeys":["swf:tagFilter.tag","swf:typeFilter.name","swf:typeFilter.version"],"resources":[{"name":"domain"}],"description":"Grants permission to return a list of open workflow executions in the specified domain that meet the filtering criteria","accessLevel":"List","resourceTypes":[{"name":"domain","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to list tags for an AWS SWF resource","accessLevel":"List","resourceTypes":[{"name":"domain","required":false}]},"ListWorkflowTypes":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to return information about workflow types in the specified domain","accessLevel":"List","resourceTypes":[{"name":"domain","required":true}]},"PollForActivityTask":{"conditionKeys":["swf:taskList.name"],"resources":[{"name":"domain"}],"description":"Grants permission to workers to get an ActivityTask from the specified activity taskList","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"PollForDecisionTask":{"conditionKeys":["swf:taskList.name"],"resources":[{"name":"domain"}],"description":"Grants permission to deciders to get a DecisionTask from the specified decision taskList","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"RecordActivityTaskHeartbeat":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to workers to report to the service that the ActivityTask represented by the specified taskToken is still making progress","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"RecordMarker":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to record a MarkerRecorded event in the history","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"permissionOnly":true},"RegisterActivityType":{"conditionKeys":["swf:defaultTaskList.name","swf:name","swf:version"],"resources":[{"name":"domain"}],"description":"Grants permission to register a new activity type along with its configuration settings in the specified domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"RegisterDomain":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to register a new domain","accessLevel":"Write","resourceTypes":[]},"RegisterWorkflowType":{"conditionKeys":["swf:defaultTaskList.name","swf:name","swf:version"],"resources":[{"name":"domain"}],"description":"Grants permission to register a new workflow type and its configuration settings in the specified domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"RequestCancelActivityTask":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to attempt to cancel a previously scheduled activity task","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"permissionOnly":true},"RequestCancelExternalWorkflowExecution":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to request that a request be made to cancel the specified external workflow execution","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"permissionOnly":true},"RequestCancelWorkflowExecution":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to record a WorkflowExecutionCancelRequested event in the currently running workflow execution identified by the given domain, workflowId, and runId","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"RespondActivityTaskCanceled":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to workers to tell the service that the ActivityTask identified by the taskToken was successfully canceled","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"RespondActivityTaskCompleted":{"conditionKeys":["swf:activityType.name","swf:activityType.version","swf:tagList.member.0","swf:tagList.member.1","swf:tagList.member.2","swf:tagList.member.3","swf:tagList.member.4","swf:taskList.name","swf:workflowType.name","swf:workflowType.version"],"resources":[{"name":"domain"}],"description":"Grants permission to workers to tell the service that the ActivityTask identified by the taskToken completed successfully with a result (if provided)","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"RespondActivityTaskFailed":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to workers to tell the service that the ActivityTask identified by the taskToken has failed with reason (if specified)","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"RespondDecisionTaskCompleted":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to deciders to tell the service that the DecisionTask identified by the taskToken has successfully completed","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"ScheduleActivityTask":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to schedule an activity task","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"permissionOnly":true},"SignalExternalWorkflowExecution":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to request a signal to be delivered to the specified external workflow execution and records","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"permissionOnly":true},"SignalWorkflowExecution":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to record a WorkflowExecutionSignaled event in the workflow execution history and create a decision task for the workflow execution identified by the given domain, workflowId and runId","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"StartChildWorkflowExecution":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to request that a child workflow execution be started","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"permissionOnly":true},"StartTimer":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to start a timer for a workflow execution","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}],"permissionOnly":true},"StartWorkflowExecution":{"conditionKeys":["swf:tagList.member.0","swf:tagList.member.1","swf:tagList.member.2","swf:tagList.member.3","swf:tagList.member.4","swf:taskList.name","swf:workflowType.name","swf:workflowType.version"],"resources":[{"name":"domain"}],"description":"Grants permission to start an execution of the workflow type in the specified domain using the provided workflowId and input data","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"domain"}],"description":"Grants permission to tag an AWS SWF resource","accessLevel":"Tagging","resourceTypes":[{"name":"domain","required":false}]},"TerminateWorkflowExecution":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to record a WorkflowExecutionTerminated event and force closure of the workflow execution identified by the given domain, runId, and workflowId","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"UndeprecateActivityType":{"conditionKeys":["swf:activityType.name","swf:activityType.version"],"resources":[{"name":"domain"}],"description":"Grants permission to undeprecate a previously deprecated activity type","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"UndeprecateDomain":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to undeprecate a previously deprecated domain","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"UndeprecateWorkflowType":{"conditionKeys":["swf:workflowType.name","swf:workflowType.version"],"resources":[{"name":"domain"}],"description":"Grants permission to undeprecate a previously deprecated workflow type","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"domain"}],"description":"Grants permission to remove a tag from an AWS SWF resource","accessLevel":"Tagging","resourceTypes":[{"name":"domain","required":false}]}},"resources":[{"name":"domain","arnFormats":["arn:${Partition}:swf::${Account}:/domain/${DomainName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by tag of the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag of the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by tag of the key"},"swf:activityType.name":{"types":["String"],"description":"Filters access by the name of the activity type"},"swf:activityType.version":{"types":["String"],"description":"Filters access by the version of the activity type"},"swf:defaultTaskList.name":{"types":["String"],"description":"Filters access by the name of the default task list"},"swf:name":{"types":["String"],"description":"Filters access by the name of activities or workflows"},"swf:tagFilter.tag":{"types":["String"],"description":"Filters access by the value of tagFilter.tag"},"swf:tagList.member.0":{"types":["String"],"description":"Filters access by the specified tag"},"swf:tagList.member.1":{"types":["String"],"description":"Filters access by the specified tag"},"swf:tagList.member.2":{"types":["String"],"description":"Filters access by the specified tag"},"swf:tagList.member.3":{"types":["String"],"description":"Filters access by the specified tag"},"swf:tagList.member.4":{"types":["String"],"description":"Filters access by the specified tag"},"swf:taskList.name":{"types":["String"],"description":"Filters access by the name of the tasklist"},"swf:typeFilter.name":{"types":["String"],"description":"Filters access by the name of the type filter"},"swf:typeFilter.version":{"types":["String"],"description":"Filters access by the version of the type filter"},"swf:version":{"types":["String"],"description":"Filters access by the version of activities or workflows"},"swf:workflowType.name":{"types":["String"],"description":"Filters access by the name of the workflow type"},"swf:workflowType.version":{"types":["String"],"description":"Filters access by the version of the workflow type"}}}

package/src/data/servicereference/services/synthetics.json

@@ -0,0 +1 @@
+{"name":"synthetics","actions":{"AssociateResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"group"}],"description":"Grants permission to associate a resource with a group","accessLevel":"Write","resourceTypes":[{"name":"group","required":true}]},"CreateCanary":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a canary","accessLevel":"Write","resourceTypes":[]},"CreateGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a group","accessLevel":"Write","resourceTypes":[]},"DeleteCanary":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"canary"}],"description":"Grants permission to delete a canary. Amazon Synthetics deletes all the resources except for the Lambda function and the CloudWatch Alarms if you created one","accessLevel":"Write","resourceTypes":[{"name":"canary","required":true}]},"DeleteGroup":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"group"}],"description":"Grants permission to delete a group","accessLevel":"Write","resourceTypes":[{"name":"group","required":true}]},"DescribeCanaries":{"conditionKeys":["synthetics:Names"],"resources":[],"description":"Grants permission to list information of all canaries","accessLevel":"Read","resourceTypes":[]},"DescribeCanariesLastRun":{"conditionKeys":["synthetics:Names"],"resources":[],"description":"Grants permission to list information about the last test run associated with all canaries","accessLevel":"Read","resourceTypes":[]},"DescribeRuntimeVersions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list information about Synthetics canary runtime versions","accessLevel":"Read","resourceTypes":[]},"DisassociateResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"group"}],"description":"Grants permission to disassociate a resource from a group","accessLevel":"Write","resourceTypes":[{"name":"group","required":true}]},"GetCanary":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"canary"}],"description":"Grants permission to view the details of a canary","accessLevel":"Read","resourceTypes":[{"name":"canary","required":true}]},"GetCanaryRuns":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"canary"}],"description":"Grants permission to list information about all the test runs associated with a canary","accessLevel":"Read","resourceTypes":[{"name":"canary","required":true}]},"GetGroup":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"group"}],"description":"Grants permission to view the details of a group","accessLevel":"Read","resourceTypes":[{"name":"group","required":true}]},"ListAssociatedGroups":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"canary"}],"description":"Grants permission to list information about the associated groups of a canary","accessLevel":"List","resourceTypes":[{"name":"canary","required":true}]},"ListGroupResources":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"group"}],"description":"Grants permission to list information about canaries in a group","accessLevel":"List","resourceTypes":[{"name":"group","required":true}]},"ListGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to list information of all groups","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"canary"},{"name":"group"}],"description":"Grants permission to list all tags and values associated with a resource","accessLevel":"Read","resourceTypes":[{"name":"canary","required":false},{"name":"group","required":false}]},"StartCanary":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"canary"}],"description":"Grants permission to start a canary, so that Amazon CloudWatch Synthetics starts monitoring a website","accessLevel":"Write","resourceTypes":[{"name":"canary","required":true}]},"StartCanaryDryRun":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"canary"}],"description":"Grants permission to start a canary dry run, so that Amazon CloudWatch Synthetics can execute a test execution of a canary with provided parameters","accessLevel":"Write","resourceTypes":[{"name":"canary","required":true}]},"StopCanary":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"canary"}],"description":"Grants permission to stop a canary","accessLevel":"Write","resourceTypes":[{"name":"canary","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"canary"},{"name":"group"}],"description":"Grants permission to add one or more tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"canary","required":false},{"name":"group","required":false}]},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"canary"},{"name":"group"}],"description":"Grants permission to remove one or more tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"canary","required":false},{"name":"group","required":false}]},"UpdateCanary":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"canary"}],"description":"Grants permission to update a canary","accessLevel":"Write","resourceTypes":[{"name":"canary","required":true}]}},"resources":[{"name":"canary","arnFormats":["arn:${Partition}:synthetics:${Region}:${Account}:canary:${CanaryName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"group","arnFormats":["arn:${Partition}:synthetics:${Region}:${Account}:group:${GroupId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access based on the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access based on the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access based on the tag keys that are passed in the request"},"synthetics:Names":{"types":["ArrayOfString"],"description":"Filters access based on the name of the canary"}}}

package/src/data/servicereference/services/tag.json

@@ -0,0 +1 @@
+{"name":"tag","actions":{"DescribeReportCreation":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the status of the StartReportCreation operation","accessLevel":"Read","resourceTypes":[]},"GetComplianceSummary":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a summary of how many resources are noncompliant with their effective tag policies","accessLevel":"Read","resourceTypes":[]},"GetResources":{"conditionKeys":[],"resources":[],"description":"Grants permission to return tagged or previously tagged resources in the specified AWS Region for the calling account","accessLevel":"Read","resourceTypes":[]},"GetTagKeys":{"conditionKeys":[],"resources":[],"description":"Grants permission to returns tag keys currently in use in the specified AWS Region for the calling account","accessLevel":"Read","resourceTypes":[]},"GetTagValues":{"conditionKeys":[],"resources":[],"description":"Grants permission to return tag values for the specified key that are used in the specified AWS Region for the calling account","accessLevel":"Read","resourceTypes":[]},"ListRequiredTags":{"conditionKeys":[],"resources":[],"description":"Grants permission to list required tags for supported resource types in the calling account","accessLevel":"List","resourceTypes":[]},"StartReportCreation":{"conditionKeys":[],"resources":[],"description":"Grants permission to start generating a report listing all tagged resources in accounts across your organization, and whether each resource is compliant with the effective tag policy","accessLevel":"Write","resourceTypes":[]},"TagResources":{"conditionKeys":[],"resources":[],"description":"Grants permission to apply one or more tags to the specified resources","accessLevel":"Tagging","resourceTypes":[]},"UntagResources":{"conditionKeys":[],"resources":[],"description":"Grants permission to remove the specified tags from the specified resources","accessLevel":"Tagging","resourceTypes":[]}},"resources":[],"conditionKeys":{}}

package/src/data/servicereference/services/tax.json

@@ -0,0 +1 @@
+{"name":"tax","actions":{"BatchDeleteTaxRegistration":{"conditionKeys":[],"resources":[],"description":"Grants permission to batch delete tax registration data","accessLevel":"Write","resourceTypes":[]},"BatchPutTaxRegistration":{"conditionKeys":[],"resources":[],"description":"Grants permission to batch update tax registrations","accessLevel":"Write","resourceTypes":[]},"CancelDocument":{"conditionKeys":[],"resources":[],"description":"Grants permission to cancel documents such as withholding slips","accessLevel":"Write","resourceTypes":[]},"CreateDocument":{"conditionKeys":[],"resources":[],"description":"Grants permission to upload new documents such as withholding slips","accessLevel":"Write","resourceTypes":[]},"DeleteSupplementalTaxRegistration":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete supplemental tax registration data","accessLevel":"Write","resourceTypes":[]},"DeleteTaxRegistration":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete tax registration data","accessLevel":"Write","resourceTypes":[]},"GetDocument":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve documents such as withholding slips","accessLevel":"Read","resourceTypes":[]},"GetDocumentUploadUrl":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a generated URL to upload documents","accessLevel":"Read","resourceTypes":[]},"GetExemptions":{"conditionKeys":[],"resources":[],"description":"Grants permission to view tax exemptions data","accessLevel":"Read","resourceTypes":[]},"GetTaxInfoReportingDocument":{"conditionKeys":[],"resources":[],"description":"Grants permission to view/download tax documents/forms","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetTaxInheritance":{"conditionKeys":[],"resources":[],"description":"Grants permission to view tax inheritance status","accessLevel":"Read","resourceTypes":[]},"GetTaxInterview":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve tax interview data","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetTaxRegistration":{"conditionKeys":[],"resources":[],"description":"Grants permission to view tax registrations data","accessLevel":"Read","resourceTypes":[]},"GetTaxRegistrationDocument":{"conditionKeys":[],"resources":[],"description":"Grants permission to download tax registration documents","accessLevel":"Read","resourceTypes":[]},"ListDocuments":{"conditionKeys":[],"resources":[],"description":"Grants permission to view documents such as withholding slips","accessLevel":"Read","resourceTypes":[]},"ListSupplementalTaxRegistrations":{"conditionKeys":[],"resources":[],"description":"Grants permission to view supplemental tax registrations","accessLevel":"Read","resourceTypes":[]},"ListTaxRegistrations":{"conditionKeys":[],"resources":[],"description":"Grants permission to view tax registrations","accessLevel":"Read","resourceTypes":[]},"ListWithholdingEligibleInvoices":{"conditionKeys":[],"resources":[],"description":"Grants permission to view eligible withholding invoices","accessLevel":"Read","resourceTypes":[]},"PutSupplementalTaxRegistration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update supplemental tax registrations data","accessLevel":"Write","resourceTypes":[]},"PutTaxInheritance":{"conditionKeys":[],"resources":[],"description":"Grants permission to set tax inheritance","accessLevel":"Write","resourceTypes":[]},"PutTaxInterview":{"conditionKeys":[],"resources":[],"description":"Grants permission to update tax interview data","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"PutTaxRegistration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update tax registrations data","accessLevel":"Write","resourceTypes":[]},"UpdateExemptions":{"conditionKeys":[],"resources":[],"description":"Grants permission to update tax exemptions data","accessLevel":"Write","resourceTypes":[]}},"resources":[],"conditionKeys":{}}

package/src/data/servicereference/services/textract.json

@@ -0,0 +1 @@
+{"name":"textract","actions":{"AnalyzeDocument":{"conditionKeys":[],"resources":[],"description":"Grants permission to detect instances of real-world document entities within an image provided as input","accessLevel":"Read","resourceTypes":[],"dependentActions":["s3:GetObject"]},"AnalyzeExpense":{"conditionKeys":[],"resources":[],"description":"Grants permission to detect instances of real-world document entities within an image provided as input","accessLevel":"Read","resourceTypes":[],"dependentActions":["s3:GetObject"]},"AnalyzeID":{"conditionKeys":[],"resources":[],"description":"Grants permission to detect relevant information from identity documents provided as input","accessLevel":"Read","resourceTypes":[],"dependentActions":["s3:GetObject"]},"CreateAdapter":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an Amazon Textract adapter","accessLevel":"Write","resourceTypes":[]},"CreateAdapterVersion":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"adapter"}],"description":"Grants permission to create an Amazon Textract adapter version","accessLevel":"Write","resourceTypes":[{"name":"adapter","required":true}]},"DeleteAdapter":{"conditionKeys":[],"resources":[{"name":"adapter"}],"description":"Grants permission to delete an Amazon Textract adapter","accessLevel":"Write","resourceTypes":[{"name":"adapter","required":true}]},"DeleteAdapterVersion":{"conditionKeys":[],"resources":[{"name":"adapterversion"}],"description":"Grants permission to delete an Amazon Textract adapter version","accessLevel":"Write","resourceTypes":[{"name":"adapterversion","required":true}]},"DetectDocumentText":{"conditionKeys":[],"resources":[],"description":"Grants permission to detect text in document images","accessLevel":"Read","resourceTypes":[],"dependentActions":["s3:GetObject"]},"GetAdapter":{"conditionKeys":[],"resources":[{"name":"adapter"}],"description":"Grants permission to get an Amazon Textract adapter","accessLevel":"Read","resourceTypes":[{"name":"adapter","required":true}]},"GetAdapterVersion":{"conditionKeys":[],"resources":[{"name":"adapterversion"}],"description":"Grants permission to get an Amazon Textract adapter version","accessLevel":"Read","resourceTypes":[{"name":"adapterversion","required":true}]},"GetDocumentAnalysis":{"conditionKeys":[],"resources":[],"description":"Grants permission to return information about a document analysis job","accessLevel":"Read","resourceTypes":[]},"GetDocumentTextDetection":{"conditionKeys":[],"resources":[],"description":"Grants permission to return information about a document text detection job","accessLevel":"Read","resourceTypes":[]},"GetExpenseAnalysis":{"conditionKeys":[],"resources":[],"description":"Grants permission to return information about an expense analysis job","accessLevel":"Read","resourceTypes":[]},"GetLendingAnalysis":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve page-level information regarding a lending analysis job","accessLevel":"Read","resourceTypes":[]},"GetLendingAnalysisSummary":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve summarized information regarding a lending analysis job","accessLevel":"Read","resourceTypes":[]},"ListAdapterVersions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list Amazon Textract adapter versions","accessLevel":"Read","resourceTypes":[]},"ListAdapters":{"conditionKeys":[],"resources":[],"description":"Grants permission to list Amazon Textract adapters","accessLevel":"Read","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"adapter"},{"name":"adapterversion"}],"description":"Grants permission to return a list of tags associated with a resource","accessLevel":"Read","resourceTypes":[{"name":"adapter","required":false},{"name":"adapterversion","required":false}]},"StartDocumentAnalysis":{"conditionKeys":[],"resources":[],"description":"Grants permission to start an asynchronous job to detect instances of real-world document entities within an image or pdf provided as input","accessLevel":"Write","resourceTypes":[],"dependentActions":["s3:GetObject"]},"StartDocumentTextDetection":{"conditionKeys":[],"resources":[],"description":"Grants permission to start an asynchronous job to detect text in document images or pdfs","accessLevel":"Write","resourceTypes":[],"dependentActions":["s3:GetObject"]},"StartExpenseAnalysis":{"conditionKeys":[],"resources":[],"description":"Grants permission to start an asynchronous job to detect instances of invoices or receipts within an image or pdf provided as input","accessLevel":"Write","resourceTypes":[],"dependentActions":["s3:GetObject"]},"StartLendingAnalysis":{"conditionKeys":[],"resources":[],"description":"Grants permission to start an asynchronous job for detection of entities in a lending document, takes a provided image or PDF as input","accessLevel":"Write","resourceTypes":[],"dependentActions":["s3:GetObject"]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"adapter"},{"name":"adapterversion"}],"description":"Grants permission to add one or more tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"adapter","required":false},{"name":"adapterversion","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"adapter"},{"name":"adapterversion"}],"description":"Grants permission to remove one or more tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"adapter","required":false},{"name":"adapterversion","required":false}]},"UpdateAdapter":{"conditionKeys":[],"resources":[{"name":"adapter"}],"description":"Grants permission to update Amazon Textract adapter","accessLevel":"Write","resourceTypes":[{"name":"adapter","required":true}]}},"resources":[{"name":"adapter","arnFormats":["arn:${Partition}:textract:${Region}:${Account}:/adapters/${AdapterId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"adapterversion","arnFormats":["arn:${Partition}:textract:${Region}:${Account}:/adapters/${AdapterId}/versions/${AdapterVersion}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by tag keys that are passed in the request"}}}

package/src/data/servicereference/services/thinclient.json

@@ -0,0 +1 @@
+{"name":"thinclient","actions":{"CreateEnvironment":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create environments","accessLevel":"Write","resourceTypes":[],"dependentActions":["appstream:DescribeStacks","iam:CreateServiceLinkedRole","workspaces-web:GetPortal","workspaces-web:GetUserSettings","workspaces:DescribeWorkspaceDirectories"]},"DeleteDevice":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"device"}],"description":"Grants permission to delete devices","accessLevel":"Write","resourceTypes":[{"name":"device","required":true}]},"DeleteEnvironment":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"environment"}],"description":"Grants permission to delete environments","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}]},"DeregisterDevice":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"device"}],"description":"Grants permission to deregister devices","accessLevel":"Write","resourceTypes":[{"name":"device","required":true}]},"GetDevice":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"device"}],"description":"Grants permission to get devices","accessLevel":"Read","resourceTypes":[{"name":"device","required":true}]},"GetDeviceDetails":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"device"}],"description":"Grants permission to get details of devices","accessLevel":"Read","resourceTypes":[{"name":"device","required":true}],"permissionOnly":true},"GetEnvironment":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"environment"}],"description":"Grants permission to get details of environments","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true}]},"GetSoftwareSet":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"softwareset"}],"description":"Grants permission to get details of software sets","accessLevel":"Read","resourceTypes":[{"name":"softwareset","required":true}]},"ListDeviceSessions":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"device"}],"description":"Grants permission to list device sessions","accessLevel":"List","resourceTypes":[{"name":"device","required":true}],"permissionOnly":true},"ListDevices":{"conditionKeys":[],"resources":[],"description":"Grants permission to list devices","accessLevel":"List","resourceTypes":[]},"ListEnvironments":{"conditionKeys":[],"resources":[],"description":"Grants permission to list environments","accessLevel":"List","resourceTypes":[]},"ListSoftwareSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to list software sets","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"device"},{"name":"environment"},{"name":"softwareset"}],"description":"Grants permission to list tags for a resource","accessLevel":"List","resourceTypes":[{"name":"device","required":false},{"name":"environment","required":false},{"name":"softwareset","required":false}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"device"},{"name":"environment"},{"name":"softwareset"}],"description":"Grants permission to add one or more tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"device","required":false},{"name":"environment","required":false},{"name":"softwareset","required":false}]},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"device"},{"name":"environment"},{"name":"softwareset"}],"description":"Grants permission to remove one or more tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"device","required":false},{"name":"environment","required":false},{"name":"softwareset","required":false}]},"UpdateDevice":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"device"}],"description":"Grants permission to update devices","accessLevel":"Write","resourceTypes":[{"name":"device","required":true}]},"UpdateEnvironment":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"environment"}],"description":"Grants permission to update environments","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}],"dependentActions":["appstream:DescribeStacks","workspaces-web:GetPortal","workspaces-web:GetUserSettings","workspaces:DescribeWorkspaceDirectories"]},"UpdateSoftwareSet":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"softwareset"}],"description":"Grants permission to update software set","accessLevel":"Write","resourceTypes":[{"name":"softwareset","required":true}]}},"resources":[{"name":"device","arnFormats":["arn:${Partition}:thinclient:${Region}:${Account}:device/${DeviceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"environment","arnFormats":["arn:${Partition}:thinclient:${Region}:${Account}:environment/${EnvironmentId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"softwareset","arnFormats":["arn:${Partition}:thinclient:${Region}:${Account}:softwareset/${SoftwareSetId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}}}

package/src/data/servicereference/services/timestream-influxdb.json

@@ -0,0 +1 @@
+{"name":"timestream-influxdb","actions":{"CreateDbCluster":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"db-parameter-group"}],"description":"Grants permission to create a new Timestream InfluxDB Cluster","accessLevel":"Write","resourceTypes":[{"name":"db-parameter-group","required":false}],"dependentActions":["timestream-influxdb:CreateDbInstance"]},"CreateDbInstance":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"db-parameter-group"}],"description":"Grants permission to create a new Timestream InfluxDB instance","accessLevel":"Write","resourceTypes":[{"name":"db-parameter-group","required":false}]},"CreateDbParameterGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new Timestream InfluxDB parameter group","accessLevel":"Write","resourceTypes":[]},"DeleteDbCluster":{"conditionKeys":[],"resources":[{"name":"db-cluster"}],"description":"Grants permission to delete a Timestream InfluxDB Cluster","accessLevel":"Write","resourceTypes":[{"name":"db-cluster","required":true}],"dependentActions":["timestream-influxdb:DeleteDbInstance"]},"DeleteDbInstance":{"conditionKeys":[],"resources":[{"name":"db-instance"}],"description":"Grants permission to delete a Timestream InfluxDB instance","accessLevel":"Write","resourceTypes":[{"name":"db-instance","required":true}]},"GetDbCluster":{"conditionKeys":[],"resources":[{"name":"db-cluster"}],"description":"Grants permission to get information about a Timestream InfluxDB Cluster","accessLevel":"Read","resourceTypes":[{"name":"db-cluster","required":true}]},"GetDbInstance":{"conditionKeys":[],"resources":[{"name":"db-instance"}],"description":"Grants permission to get information about a Timestream InfluxDB instance","accessLevel":"Read","resourceTypes":[{"name":"db-instance","required":true}]},"GetDbParameterGroup":{"conditionKeys":[],"resources":[{"name":"db-parameter-group"}],"description":"Grants permission to get information about a Timestream InfluxDB parameter group","accessLevel":"Read","resourceTypes":[{"name":"db-parameter-group","required":true}]},"ListDbClusters":{"conditionKeys":[],"resources":[],"description":"Grants permission to list information about all Timestream InfluxDB clusters in the account","accessLevel":"List","resourceTypes":[]},"ListDbInstances":{"conditionKeys":[],"resources":[],"description":"Grants permission to list information about all Timestream InfluxDB instances in the account","accessLevel":"List","resourceTypes":[]},"ListDbInstancesForCluster":{"conditionKeys":[],"resources":[{"name":"db-cluster"}],"description":"Grants permission to list information about all Timestream InfluxDB Instances belonging to a cluster","accessLevel":"Read","resourceTypes":[{"name":"db-cluster","required":true}]},"ListDbParameterGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to list information about all Timestream InfluxDB parameter groups","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"db-cluster"},{"name":"db-instance"},{"name":"db-parameter-group"}],"description":"Grants permission to list tags for a Timestream InfluxDB resource","accessLevel":"Read","resourceTypes":[{"name":"db-cluster","required":false},{"name":"db-instance","required":false},{"name":"db-parameter-group","required":false}]},"RebootDbCluster":{"conditionKeys":[],"resources":[{"name":"db-cluster"},{"name":"db-instance"}],"description":"Grants permission to reboot a Timestream InfluxDB Cluster","accessLevel":"Write","resourceTypes":[{"name":"db-cluster","required":true},{"name":"db-instance","required":false}],"dependentActions":["timestream-influxdb:RebootDbInstance"]},"RebootDbInstance":{"conditionKeys":[],"resources":[{"name":"db-instance"}],"description":"Grants permission to reboot a Timestream InfluxDB instance","accessLevel":"Write","resourceTypes":[{"name":"db-instance","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"db-cluster"},{"name":"db-instance"},{"name":"db-parameter-group"}],"description":"Grants permission to tag a Timestream InfluxDB resource","accessLevel":"Tagging","resourceTypes":[{"name":"db-cluster","required":false},{"name":"db-instance","required":false},{"name":"db-parameter-group","required":false}]},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"db-cluster"},{"name":"db-instance"},{"name":"db-parameter-group"}],"description":"Grants permission to untag a Timestream InfluxDB resource","accessLevel":"Tagging","resourceTypes":[{"name":"db-cluster","required":false},{"name":"db-instance","required":false},{"name":"db-parameter-group","required":false}]},"UpdateDbCluster":{"conditionKeys":[],"resources":[{"name":"db-cluster"},{"name":"db-parameter-group"}],"description":"Grants permission to update a Timestream InfluxDB Cluster","accessLevel":"Write","resourceTypes":[{"name":"db-cluster","required":true},{"name":"db-parameter-group","required":false}],"dependentActions":["timestream-influxdb:UpdateDbInstance"]},"UpdateDbInstance":{"conditionKeys":[],"resources":[{"name":"db-instance"},{"name":"db-parameter-group"}],"description":"Grants permission to update a Timestream InfluxDB instance","accessLevel":"Write","resourceTypes":[{"name":"db-instance","required":true},{"name":"db-parameter-group","required":false}]}},"resources":[{"name":"db-cluster","arnFormats":["arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-cluster/${DbClusterId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"db-instance","arnFormats":["arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-instance/${DbInstanceIdentifier}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"db-parameter-group","arnFormats":["arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-parameter-group/${DbParameterGroupIdentifier}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair that is allowed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair of a resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by a list of tag keys that are allowed in the request"}}}