aws-iam-ls 0.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.direnv/bin/nix-direnv-reload +19 -0
- package/.direnv/flake-profile-a5d5b61aa8a61b7d9d765e1daf971a9a578f1cfa.rc +2156 -0
- package/.github/workflows/publish.yml +37 -0
- package/.github/workflows/test.yml +16 -0
- package/.vscodeignore +17 -0
- package/LICENSE +21 -0
- package/package.json +53 -0
- package/readme.md +25 -0
- package/src/data/condition-keys/global.json +362 -0
- package/src/data/servicereference/actions.json +1 -0
- package/src/data/servicereference/service-principals.json +1 -0
- package/src/data/servicereference/services/a2c.json +1 -0
- package/src/data/servicereference/services/a4b.json +1 -0
- package/src/data/servicereference/services/access-analyzer.json +1 -0
- package/src/data/servicereference/services/account.json +1 -0
- package/src/data/servicereference/services/acm-pca.json +1 -0
- package/src/data/servicereference/services/acm.json +1 -0
- package/src/data/servicereference/services/aco-automation.json +1 -0
- package/src/data/servicereference/services/action-recommendations.json +1 -0
- package/src/data/servicereference/services/activate.json +1 -0
- package/src/data/servicereference/services/aidevops.json +1 -0
- package/src/data/servicereference/services/aiops.json +1 -0
- package/src/data/servicereference/services/airflow-serverless.json +1 -0
- package/src/data/servicereference/services/airflow.json +1 -0
- package/src/data/servicereference/services/amplify.json +1 -0
- package/src/data/servicereference/services/amplifybackend.json +1 -0
- package/src/data/servicereference/services/amplifyuibuilder.json +1 -0
- package/src/data/servicereference/services/aoss.json +1 -0
- package/src/data/servicereference/services/apigateway.json +1 -0
- package/src/data/servicereference/services/app-integrations.json +1 -0
- package/src/data/servicereference/services/appconfig.json +1 -0
- package/src/data/servicereference/services/appfabric.json +1 -0
- package/src/data/servicereference/services/appflow.json +1 -0
- package/src/data/servicereference/services/application-autoscaling.json +1 -0
- package/src/data/servicereference/services/application-signals.json +1 -0
- package/src/data/servicereference/services/application-transformation.json +1 -0
- package/src/data/servicereference/services/applicationinsights.json +1 -0
- package/src/data/servicereference/services/appmesh-preview.json +1 -0
- package/src/data/servicereference/services/appmesh.json +1 -0
- package/src/data/servicereference/services/apprunner.json +1 -0
- package/src/data/servicereference/services/appstream.json +1 -0
- package/src/data/servicereference/services/appstudio.json +1 -0
- package/src/data/servicereference/services/appsync.json +1 -0
- package/src/data/servicereference/services/apptest.json +1 -0
- package/src/data/servicereference/services/aps.json +1 -0
- package/src/data/servicereference/services/arc-region-switch.json +1 -0
- package/src/data/servicereference/services/arc-zonal-shift.json +1 -0
- package/src/data/servicereference/services/arsenal.json +1 -0
- package/src/data/servicereference/services/artifact.json +1 -0
- package/src/data/servicereference/services/athena.json +1 -0
- package/src/data/servicereference/services/auditmanager.json +1 -0
- package/src/data/servicereference/services/autoscaling-plans.json +1 -0
- package/src/data/servicereference/services/autoscaling.json +1 -0
- package/src/data/servicereference/services/aws-marketplace-management.json +1 -0
- package/src/data/servicereference/services/aws-marketplace.json +1 -0
- package/src/data/servicereference/services/aws-mcp.json +1 -0
- package/src/data/servicereference/services/aws-portal.json +1 -0
- package/src/data/servicereference/services/awsconnector.json +1 -0
- package/src/data/servicereference/services/b2bi.json +1 -0
- package/src/data/servicereference/services/backup-gateway.json +1 -0
- package/src/data/servicereference/services/backup-search.json +1 -0
- package/src/data/servicereference/services/backup-storage.json +1 -0
- package/src/data/servicereference/services/backup.json +1 -0
- package/src/data/servicereference/services/batch.json +1 -0
- package/src/data/servicereference/services/bcm-dashboards.json +1 -0
- package/src/data/servicereference/services/bcm-data-exports.json +1 -0
- package/src/data/servicereference/services/bcm-pricing-calculator.json +1 -0
- package/src/data/servicereference/services/bcm-recommended-actions.json +1 -0
- package/src/data/servicereference/services/bedrock-agentcore.json +1 -0
- package/src/data/servicereference/services/bedrock-mantle.json +1 -0
- package/src/data/servicereference/services/bedrock.json +1 -0
- package/src/data/servicereference/services/billing.json +1 -0
- package/src/data/servicereference/services/billingconductor.json +1 -0
- package/src/data/servicereference/services/braket.json +1 -0
- package/src/data/servicereference/services/budgets.json +1 -0
- package/src/data/servicereference/services/bugbust.json +1 -0
- package/src/data/servicereference/services/cases.json +1 -0
- package/src/data/servicereference/services/cassandra.json +1 -0
- package/src/data/servicereference/services/ce.json +1 -0
- package/src/data/servicereference/services/chatbot.json +1 -0
- package/src/data/servicereference/services/chime.json +1 -0
- package/src/data/servicereference/services/cleanrooms-ml.json +1 -0
- package/src/data/servicereference/services/cleanrooms.json +1 -0
- package/src/data/servicereference/services/cloud9.json +1 -0
- package/src/data/servicereference/services/clouddirectory.json +1 -0
- package/src/data/servicereference/services/cloudformation.json +1 -0
- package/src/data/servicereference/services/cloudfront-keyvaluestore.json +1 -0
- package/src/data/servicereference/services/cloudfront.json +1 -0
- package/src/data/servicereference/services/cloudhsm.json +1 -0
- package/src/data/servicereference/services/cloudsearch.json +1 -0
- package/src/data/servicereference/services/cloudshell.json +1 -0
- package/src/data/servicereference/services/cloudtrail-data.json +1 -0
- package/src/data/servicereference/services/cloudtrail.json +1 -0
- package/src/data/servicereference/services/cloudwatch.json +1 -0
- package/src/data/servicereference/services/codeartifact.json +1 -0
- package/src/data/servicereference/services/codebuild.json +1 -0
- package/src/data/servicereference/services/codecatalyst.json +1 -0
- package/src/data/servicereference/services/codecommit.json +1 -0
- package/src/data/servicereference/services/codeconnections.json +1 -0
- package/src/data/servicereference/services/codedeploy-commands-secure.json +1 -0
- package/src/data/servicereference/services/codedeploy.json +1 -0
- package/src/data/servicereference/services/codeguru-profiler.json +1 -0
- package/src/data/servicereference/services/codeguru-reviewer.json +1 -0
- package/src/data/servicereference/services/codeguru-security.json +1 -0
- package/src/data/servicereference/services/codeguru.json +1 -0
- package/src/data/servicereference/services/codepipeline.json +1 -0
- package/src/data/servicereference/services/codestar-connections.json +1 -0
- package/src/data/servicereference/services/codestar-notifications.json +1 -0
- package/src/data/servicereference/services/codestar.json +1 -0
- package/src/data/servicereference/services/codewhisperer.json +1 -0
- package/src/data/servicereference/services/cognito-identity.json +1 -0
- package/src/data/servicereference/services/cognito-idp.json +1 -0
- package/src/data/servicereference/services/cognito-sync.json +1 -0
- package/src/data/servicereference/services/comprehend.json +1 -0
- package/src/data/servicereference/services/comprehendmedical.json +1 -0
- package/src/data/servicereference/services/compute-optimizer.json +1 -0
- package/src/data/servicereference/services/config.json +1 -0
- package/src/data/servicereference/services/connect-campaigns.json +1 -0
- package/src/data/servicereference/services/connect.json +1 -0
- package/src/data/servicereference/services/consoleapp.json +1 -0
- package/src/data/servicereference/services/consolidatedbilling.json +1 -0
- package/src/data/servicereference/services/controlcatalog.json +1 -0
- package/src/data/servicereference/services/controltower.json +1 -0
- package/src/data/servicereference/services/cost-optimization-hub.json +1 -0
- package/src/data/servicereference/services/cur.json +1 -0
- package/src/data/servicereference/services/customer-verification.json +1 -0
- package/src/data/servicereference/services/databrew.json +1 -0
- package/src/data/servicereference/services/dataexchange.json +1 -0
- package/src/data/servicereference/services/datapipeline.json +1 -0
- package/src/data/servicereference/services/datasync.json +1 -0
- package/src/data/servicereference/services/datazone.json +1 -0
- package/src/data/servicereference/services/dax.json +1 -0
- package/src/data/servicereference/services/dbqms.json +1 -0
- package/src/data/servicereference/services/deadline.json +1 -0
- package/src/data/servicereference/services/detective.json +1 -0
- package/src/data/servicereference/services/devicefarm.json +1 -0
- package/src/data/servicereference/services/devops-guru.json +1 -0
- package/src/data/servicereference/services/directconnect.json +1 -0
- package/src/data/servicereference/services/discovery.json +1 -0
- package/src/data/servicereference/services/dlm.json +1 -0
- package/src/data/servicereference/services/dms.json +1 -0
- package/src/data/servicereference/services/docdb-elastic.json +1 -0
- package/src/data/servicereference/services/drs.json +1 -0
- package/src/data/servicereference/services/ds-data.json +1 -0
- package/src/data/servicereference/services/ds.json +1 -0
- package/src/data/servicereference/services/dsql.json +1 -0
- package/src/data/servicereference/services/dynamodb.json +1 -0
- package/src/data/servicereference/services/ebs.json +1 -0
- package/src/data/servicereference/services/ec2-instance-connect.json +1 -0
- package/src/data/servicereference/services/ec2.json +1 -0
- package/src/data/servicereference/services/ec2messages.json +1 -0
- package/src/data/servicereference/services/ecr-public.json +1 -0
- package/src/data/servicereference/services/ecr.json +1 -0
- package/src/data/servicereference/services/ecs-mcp.json +1 -0
- package/src/data/servicereference/services/ecs.json +1 -0
- package/src/data/servicereference/services/eks-auth.json +1 -0
- package/src/data/servicereference/services/eks-mcp.json +1 -0
- package/src/data/servicereference/services/eks.json +1 -0
- package/src/data/servicereference/services/elasticache.json +1 -0
- package/src/data/servicereference/services/elasticbeanstalk.json +1 -0
- package/src/data/servicereference/services/elasticfilesystem.json +1 -0
- package/src/data/servicereference/services/elasticloadbalancing.json +1 -0
- package/src/data/servicereference/services/elasticmapreduce.json +1 -0
- package/src/data/servicereference/services/elastictranscoder.json +1 -0
- package/src/data/servicereference/services/elemental-activations.json +1 -0
- package/src/data/servicereference/services/elemental-appliances-software.json +1 -0
- package/src/data/servicereference/services/elemental-inference.json +1 -0
- package/src/data/servicereference/services/elemental-support-cases.json +1 -0
- package/src/data/servicereference/services/elemental-support-content.json +1 -0
- package/src/data/servicereference/services/emr-containers.json +1 -0
- package/src/data/servicereference/services/emr-serverless.json +1 -0
- package/src/data/servicereference/services/entityresolution.json +1 -0
- package/src/data/servicereference/services/es.json +1 -0
- package/src/data/servicereference/services/events.json +1 -0
- package/src/data/servicereference/services/evidently.json +1 -0
- package/src/data/servicereference/services/evs.json +1 -0
- package/src/data/servicereference/services/execute-api.json +1 -0
- package/src/data/servicereference/services/finspace-api.json +1 -0
- package/src/data/servicereference/services/finspace.json +1 -0
- package/src/data/servicereference/services/firehose.json +1 -0
- package/src/data/servicereference/services/fis.json +1 -0
- package/src/data/servicereference/services/fms.json +1 -0
- package/src/data/servicereference/services/forecast.json +1 -0
- package/src/data/servicereference/services/frauddetector.json +1 -0
- package/src/data/servicereference/services/freertos.json +1 -0
- package/src/data/servicereference/services/freetier.json +1 -0
- package/src/data/servicereference/services/fsx.json +1 -0
- package/src/data/servicereference/services/gamelift.json +1 -0
- package/src/data/servicereference/services/gameliftstreams.json +1 -0
- package/src/data/servicereference/services/geo-maps.json +1 -0
- package/src/data/servicereference/services/geo-places.json +1 -0
- package/src/data/servicereference/services/geo-routes.json +1 -0
- package/src/data/servicereference/services/geo.json +1 -0
- package/src/data/servicereference/services/glacier.json +1 -0
- package/src/data/servicereference/services/globalaccelerator.json +1 -0
- package/src/data/servicereference/services/glue.json +1 -0
- package/src/data/servicereference/services/grafana.json +1 -0
- package/src/data/servicereference/services/greengrass.json +1 -0
- package/src/data/servicereference/services/groundstation.json +1 -0
- package/src/data/servicereference/services/groundtruthlabeling.json +1 -0
- package/src/data/servicereference/services/guardduty.json +1 -0
- package/src/data/servicereference/services/health-agent.json +1 -0
- package/src/data/servicereference/services/health.json +1 -0
- package/src/data/servicereference/services/healthlake.json +1 -0
- package/src/data/servicereference/services/honeycode.json +1 -0
- package/src/data/servicereference/services/iam.json +1 -0
- package/src/data/servicereference/services/identity-sync.json +1 -0
- package/src/data/servicereference/services/identitystore-auth.json +1 -0
- package/src/data/servicereference/services/identitystore.json +1 -0
- package/src/data/servicereference/services/imagebuilder.json +1 -0
- package/src/data/servicereference/services/importexport.json +1 -0
- package/src/data/servicereference/services/inspector-scan.json +1 -0
- package/src/data/servicereference/services/inspector.json +1 -0
- package/src/data/servicereference/services/inspector2-telemetry.json +1 -0
- package/src/data/servicereference/services/inspector2.json +1 -0
- package/src/data/servicereference/services/interconnect.json +1 -0
- package/src/data/servicereference/services/internetmonitor.json +1 -0
- package/src/data/servicereference/services/invoicing.json +1 -0
- package/src/data/servicereference/services/iot-device-tester.json +1 -0
- package/src/data/servicereference/services/iot.json +1 -0
- package/src/data/servicereference/services/iotanalytics.json +1 -0
- package/src/data/servicereference/services/iotdeviceadvisor.json +1 -0
- package/src/data/servicereference/services/iotevents.json +1 -0
- package/src/data/servicereference/services/iotfleethub.json +1 -0
- package/src/data/servicereference/services/iotfleetwise.json +1 -0
- package/src/data/servicereference/services/iotjobsdata.json +1 -0
- package/src/data/servicereference/services/iotmanagedintegrations.json +1 -0
- package/src/data/servicereference/services/iotsitewise.json +1 -0
- package/src/data/servicereference/services/iottwinmaker.json +1 -0
- package/src/data/servicereference/services/iotwireless.json +1 -0
- package/src/data/servicereference/services/iq-permission.json +1 -0
- package/src/data/servicereference/services/iq.json +1 -0
- package/src/data/servicereference/services/ivs.json +1 -0
- package/src/data/servicereference/services/ivschat.json +1 -0
- package/src/data/servicereference/services/kafka-cluster.json +1 -0
- package/src/data/servicereference/services/kafka.json +1 -0
- package/src/data/servicereference/services/kafkaconnect.json +1 -0
- package/src/data/servicereference/services/kendra-ranking.json +1 -0
- package/src/data/servicereference/services/kendra.json +1 -0
- package/src/data/servicereference/services/kinesis.json +1 -0
- package/src/data/servicereference/services/kinesisanalytics.json +1 -0
- package/src/data/servicereference/services/kinesisvideo.json +1 -0
- package/src/data/servicereference/services/kms.json +1 -0
- package/src/data/servicereference/services/lakeformation.json +1 -0
- package/src/data/servicereference/services/lambda.json +1 -0
- package/src/data/servicereference/services/launchwizard.json +1 -0
- package/src/data/servicereference/services/lex.json +1 -0
- package/src/data/servicereference/services/license-manager-linux-subscriptions.json +1 -0
- package/src/data/servicereference/services/license-manager-user-subscriptions.json +1 -0
- package/src/data/servicereference/services/license-manager.json +1 -0
- package/src/data/servicereference/services/lightsail.json +1 -0
- package/src/data/servicereference/services/logs.json +1 -0
- package/src/data/servicereference/services/lookoutequipment.json +1 -0
- package/src/data/servicereference/services/lookoutmetrics.json +1 -0
- package/src/data/servicereference/services/lookoutvision.json +1 -0
- package/src/data/servicereference/services/m2.json +1 -0
- package/src/data/servicereference/services/machinelearning.json +1 -0
- package/src/data/servicereference/services/macie2.json +1 -0
- package/src/data/servicereference/services/managedblockchain-query.json +1 -0
- package/src/data/servicereference/services/managedblockchain.json +1 -0
- package/src/data/servicereference/services/mapcredits.json +1 -0
- package/src/data/servicereference/services/marketplacecommerceanalytics.json +1 -0
- package/src/data/servicereference/services/mechanicalturk.json +1 -0
- package/src/data/servicereference/services/mediaconnect.json +1 -0
- package/src/data/servicereference/services/mediaconvert.json +1 -0
- package/src/data/servicereference/services/mediaimport.json +1 -0
- package/src/data/servicereference/services/medialive.json +1 -0
- package/src/data/servicereference/services/mediapackage-vod.json +1 -0
- package/src/data/servicereference/services/mediapackage.json +1 -0
- package/src/data/servicereference/services/mediapackagev2.json +1 -0
- package/src/data/servicereference/services/mediastore.json +1 -0
- package/src/data/servicereference/services/mediatailor.json +1 -0
- package/src/data/servicereference/services/medical-imaging.json +1 -0
- package/src/data/servicereference/services/memorydb.json +1 -0
- package/src/data/servicereference/services/mgh.json +1 -0
- package/src/data/servicereference/services/mgn.json +1 -0
- package/src/data/servicereference/services/migrationhub-orchestrator.json +1 -0
- package/src/data/servicereference/services/migrationhub-strategy.json +1 -0
- package/src/data/servicereference/services/mobileanalytics.json +1 -0
- package/src/data/servicereference/services/mobiletargeting.json +1 -0
- package/src/data/servicereference/services/monitron.json +1 -0
- package/src/data/servicereference/services/mpa.json +1 -0
- package/src/data/servicereference/services/mq.json +1 -0
- package/src/data/servicereference/services/neptune-db.json +1 -0
- package/src/data/servicereference/services/neptune-graph.json +1 -0
- package/src/data/servicereference/services/network-firewall.json +1 -0
- package/src/data/servicereference/services/network-security-director.json +1 -0
- package/src/data/servicereference/services/networkflowmonitor.json +1 -0
- package/src/data/servicereference/services/networkmanager-chat.json +1 -0
- package/src/data/servicereference/services/networkmanager.json +1 -0
- package/src/data/servicereference/services/networkmonitor.json +1 -0
- package/src/data/servicereference/services/nimble.json +1 -0
- package/src/data/servicereference/services/notifications-contacts.json +1 -0
- package/src/data/servicereference/services/notifications.json +1 -0
- package/src/data/servicereference/services/nova-act.json +1 -0
- package/src/data/servicereference/services/oam.json +1 -0
- package/src/data/servicereference/services/observabilityadmin.json +1 -0
- package/src/data/servicereference/services/odb.json +1 -0
- package/src/data/servicereference/services/omics.json +1 -0
- package/src/data/servicereference/services/one.json +1 -0
- package/src/data/servicereference/services/opensearch.json +1 -0
- package/src/data/servicereference/services/opsworks-cm.json +1 -0
- package/src/data/servicereference/services/opsworks.json +1 -0
- package/src/data/servicereference/services/organizations.json +1 -0
- package/src/data/servicereference/services/osis.json +1 -0
- package/src/data/servicereference/services/outposts.json +1 -0
- package/src/data/servicereference/services/panorama.json +1 -0
- package/src/data/servicereference/services/partnercentral-account-management.json +1 -0
- package/src/data/servicereference/services/partnercentral.json +1 -0
- package/src/data/servicereference/services/payment-cryptography.json +1 -0
- package/src/data/servicereference/services/payments.json +1 -0
- package/src/data/servicereference/services/pca-connector-ad.json +1 -0
- package/src/data/servicereference/services/pca-connector-scep.json +1 -0
- package/src/data/servicereference/services/pcs.json +1 -0
- package/src/data/servicereference/services/personalize.json +1 -0
- package/src/data/servicereference/services/pi.json +1 -0
- package/src/data/servicereference/services/pipes.json +1 -0
- package/src/data/servicereference/services/polly.json +1 -0
- package/src/data/servicereference/services/pricing.json +1 -0
- package/src/data/servicereference/services/pricingplanmanager.json +1 -0
- package/src/data/servicereference/services/private-networks.json +1 -0
- package/src/data/servicereference/services/profile.json +1 -0
- package/src/data/servicereference/services/proton.json +1 -0
- package/src/data/servicereference/services/purchase-orders.json +1 -0
- package/src/data/servicereference/services/q.json +1 -0
- package/src/data/servicereference/services/qapps.json +1 -0
- package/src/data/servicereference/services/qbusiness.json +1 -0
- package/src/data/servicereference/services/qdeveloper.json +1 -0
- package/src/data/servicereference/services/qldb.json +1 -0
- package/src/data/servicereference/services/quicksight.json +1 -0
- package/src/data/servicereference/services/ram.json +1 -0
- package/src/data/servicereference/services/rbin.json +1 -0
- package/src/data/servicereference/services/rds-data.json +1 -0
- package/src/data/servicereference/services/rds-db.json +1 -0
- package/src/data/servicereference/services/rds.json +1 -0
- package/src/data/servicereference/services/redshift-data.json +1 -0
- package/src/data/servicereference/services/redshift-serverless.json +1 -0
- package/src/data/servicereference/services/redshift.json +1 -0
- package/src/data/servicereference/services/refactor-spaces.json +1 -0
- package/src/data/servicereference/services/rekognition.json +1 -0
- package/src/data/servicereference/services/repostspace.json +1 -0
- package/src/data/servicereference/services/resiliencehub.json +1 -0
- package/src/data/servicereference/services/resource-explorer-2.json +1 -0
- package/src/data/servicereference/services/resource-explorer.json +1 -0
- package/src/data/servicereference/services/resource-groups.json +1 -0
- package/src/data/servicereference/services/rhelkb.json +1 -0
- package/src/data/servicereference/services/robomaker.json +1 -0
- package/src/data/servicereference/services/rolesanywhere.json +1 -0
- package/src/data/servicereference/services/route53-recovery-cluster.json +1 -0
- package/src/data/servicereference/services/route53-recovery-control-config.json +1 -0
- package/src/data/servicereference/services/route53-recovery-readiness.json +1 -0
- package/src/data/servicereference/services/route53.json +1 -0
- package/src/data/servicereference/services/route53domains.json +1 -0
- package/src/data/servicereference/services/route53globalresolver.json +1 -0
- package/src/data/servicereference/services/route53profiles.json +1 -0
- package/src/data/servicereference/services/route53resolver.json +1 -0
- package/src/data/servicereference/services/rtbfabric.json +1 -0
- package/src/data/servicereference/services/rum.json +1 -0
- package/src/data/servicereference/services/s3-object-lambda.json +1 -0
- package/src/data/servicereference/services/s3-outposts.json +1 -0
- package/src/data/servicereference/services/s3.json +1 -0
- package/src/data/servicereference/services/s3express.json +1 -0
- package/src/data/servicereference/services/s3tables.json +1 -0
- package/src/data/servicereference/services/s3vectors.json +1 -0
- package/src/data/servicereference/services/sagemaker-data-science-assistant.json +1 -0
- package/src/data/servicereference/services/sagemaker-geospatial.json +1 -0
- package/src/data/servicereference/services/sagemaker-mlflow.json +1 -0
- package/src/data/servicereference/services/sagemaker-unified-studio-mcp.json +1 -0
- package/src/data/servicereference/services/sagemaker.json +1 -0
- package/src/data/servicereference/services/savingsplans.json +1 -0
- package/src/data/servicereference/services/scheduler.json +1 -0
- package/src/data/servicereference/services/schemas.json +1 -0
- package/src/data/servicereference/services/scn.json +1 -0
- package/src/data/servicereference/services/sdb.json +1 -0
- package/src/data/servicereference/services/secretsmanager.json +1 -0
- package/src/data/servicereference/services/security-ir.json +1 -0
- package/src/data/servicereference/services/securityagent.json +1 -0
- package/src/data/servicereference/services/securityhub.json +1 -0
- package/src/data/servicereference/services/securitylake.json +1 -0
- package/src/data/servicereference/services/serverlessrepo.json +1 -0
- package/src/data/servicereference/services/servicecatalog.json +1 -0
- package/src/data/servicereference/services/servicediscovery.json +1 -0
- package/src/data/servicereference/services/serviceextract.json +1 -0
- package/src/data/servicereference/services/servicequotas.json +1 -0
- package/src/data/servicereference/services/ses.json +1 -0
- package/src/data/servicereference/services/shield.json +1 -0
- package/src/data/servicereference/services/signer.json +1 -0
- package/src/data/servicereference/services/signin.json +1 -0
- package/src/data/servicereference/services/simspaceweaver.json +1 -0
- package/src/data/servicereference/services/sms-voice.json +1 -0
- package/src/data/servicereference/services/sms.json +1 -0
- package/src/data/servicereference/services/snow-device-management.json +1 -0
- package/src/data/servicereference/services/snowball.json +1 -0
- package/src/data/servicereference/services/sns.json +1 -0
- package/src/data/servicereference/services/social-messaging.json +1 -0
- package/src/data/servicereference/services/sqlworkbench.json +1 -0
- package/src/data/servicereference/services/sqs.json +1 -0
- package/src/data/servicereference/services/ssm-contacts.json +1 -0
- package/src/data/servicereference/services/ssm-guiconnect.json +1 -0
- package/src/data/servicereference/services/ssm-incidents.json +1 -0
- package/src/data/servicereference/services/ssm-quicksetup.json +1 -0
- package/src/data/servicereference/services/ssm-sap.json +1 -0
- package/src/data/servicereference/services/ssm.json +1 -0
- package/src/data/servicereference/services/ssmmessages.json +1 -0
- package/src/data/servicereference/services/sso-directory.json +1 -0
- package/src/data/servicereference/services/sso-oauth.json +1 -0
- package/src/data/servicereference/services/sso.json +1 -0
- package/src/data/servicereference/services/states.json +1 -0
- package/src/data/servicereference/services/storagegateway.json +1 -0
- package/src/data/servicereference/services/sts.json +1 -0
- package/src/data/servicereference/services/support-console.json +1 -0
- package/src/data/servicereference/services/support.json +1 -0
- package/src/data/servicereference/services/supportapp.json +1 -0
- package/src/data/servicereference/services/supportplans.json +1 -0
- package/src/data/servicereference/services/sustainability.json +1 -0
- package/src/data/servicereference/services/swf.json +1 -0
- package/src/data/servicereference/services/synthetics.json +1 -0
- package/src/data/servicereference/services/tag.json +1 -0
- package/src/data/servicereference/services/tax.json +1 -0
- package/src/data/servicereference/services/textract.json +1 -0
- package/src/data/servicereference/services/thinclient.json +1 -0
- package/src/data/servicereference/services/timestream-influxdb.json +1 -0
- package/src/data/servicereference/services/timestream.json +1 -0
- package/src/data/servicereference/services/tiros.json +1 -0
- package/src/data/servicereference/services/tnb.json +1 -0
- package/src/data/servicereference/services/transcribe.json +1 -0
- package/src/data/servicereference/services/transfer.json +1 -0
- package/src/data/servicereference/services/transform-custom.json +1 -0
- package/src/data/servicereference/services/transform.json +1 -0
- package/src/data/servicereference/services/translate.json +1 -0
- package/src/data/servicereference/services/trustedadvisor.json +1 -0
- package/src/data/servicereference/services/ts.json +1 -0
- package/src/data/servicereference/services/user-subscriptions.json +1 -0
- package/src/data/servicereference/services/uxc.json +1 -0
- package/src/data/servicereference/services/vendor-insights.json +1 -0
- package/src/data/servicereference/services/verified-access.json +1 -0
- package/src/data/servicereference/services/verifiedpermissions.json +1 -0
- package/src/data/servicereference/services/voiceid.json +1 -0
- package/src/data/servicereference/services/vpc-lattice-svcs.json +1 -0
- package/src/data/servicereference/services/vpc-lattice.json +1 -0
- package/src/data/servicereference/services/vpce.json +1 -0
- package/src/data/servicereference/services/waf-regional.json +1 -0
- package/src/data/servicereference/services/waf.json +1 -0
- package/src/data/servicereference/services/wafv2.json +1 -0
- package/src/data/servicereference/services/wam.json +1 -0
- package/src/data/servicereference/services/wellarchitected.json +1 -0
- package/src/data/servicereference/services/wickr.json +1 -0
- package/src/data/servicereference/services/wisdom.json +1 -0
- package/src/data/servicereference/services/workdocs.json +1 -0
- package/src/data/servicereference/services/worklink.json +1 -0
- package/src/data/servicereference/services/workmail.json +1 -0
- package/src/data/servicereference/services/workmailmessageflow.json +1 -0
- package/src/data/servicereference/services/workspaces-instances.json +1 -0
- package/src/data/servicereference/services/workspaces-web.json +1 -0
- package/src/data/servicereference/services/workspaces.json +1 -0
- package/src/data/servicereference/services/xray.json +1 -0
- package/src/data/servicereference/services.json +1 -0
- package/src/extension.d.ts +3 -0
- package/src/extension.js +23 -0
- package/src/grammars/tree-sitter-hcl.wasm +0 -0
- package/src/grammars/tree-sitter-json.wasm +0 -0
- package/src/grammars/tree-sitter-yaml.wasm +0 -0
- package/src/handlers/completion/action-value.d.ts +4 -0
- package/src/handlers/completion/action-value.js +46 -0
- package/src/handlers/completion/condition-block.d.ts +4 -0
- package/src/handlers/completion/condition-block.js +31 -0
- package/src/handlers/completion/condition-key.d.ts +4 -0
- package/src/handlers/completion/condition-key.js +80 -0
- package/src/handlers/completion/condition-operator.d.ts +4 -0
- package/src/handlers/completion/condition-operator.js +22 -0
- package/src/handlers/completion/effect-value.d.ts +4 -0
- package/src/handlers/completion/effect-value.js +14 -0
- package/src/handlers/completion/index.d.ts +14 -0
- package/src/handlers/completion/index.js +96 -0
- package/src/handlers/completion/principal-block-identifier.d.ts +4 -0
- package/src/handlers/completion/principal-block-identifier.js +4 -0
- package/src/handlers/completion/principal-block-type.d.ts +4 -0
- package/src/handlers/completion/principal-block-type.js +24 -0
- package/src/handlers/completion/principal-block.d.ts +4 -0
- package/src/handlers/completion/principal-block.js +28 -0
- package/src/handlers/completion/principal-identifier-completions.d.ts +2 -0
- package/src/handlers/completion/principal-identifier-completions.js +131 -0
- package/src/handlers/completion/principal-type.d.ts +4 -0
- package/src/handlers/completion/principal-type.js +23 -0
- package/src/handlers/completion/principal-typed-value.d.ts +4 -0
- package/src/handlers/completion/principal-typed-value.js +4 -0
- package/src/handlers/completion/principal-value.d.ts +4 -0
- package/src/handlers/completion/principal-value.js +18 -0
- package/src/handlers/completion/resource-value.d.ts +4 -0
- package/src/handlers/completion/resource-value.js +144 -0
- package/src/handlers/completion/statement-block.d.ts +10 -0
- package/src/handlers/completion/statement-block.js +51 -0
- package/src/handlers/completion/statement-key.d.ts +4 -0
- package/src/handlers/completion/statement-key.js +41 -0
- package/src/lib/iam-policy/condition-operators.d.ts +317 -0
- package/src/lib/iam-policy/condition-operators.js +129 -0
- package/src/lib/iam-policy/location.d.ts +71 -0
- package/src/lib/iam-policy/location.js +82 -0
- package/src/lib/iam-policy/partitions.d.ts +116 -0
- package/src/lib/iam-policy/partitions.js +51 -0
- package/src/lib/iam-policy/principals.d.ts +21 -0
- package/src/lib/iam-policy/principals.js +37 -0
- package/src/lib/iam-policy/reference/services.d.ts +22 -0
- package/src/lib/iam-policy/reference/services.js +99 -0
- package/src/lib/iam-policy/reference/types.d.ts +71 -0
- package/src/lib/iam-policy/reference/types.js +1 -0
- package/src/lib/iam-policy/statement-keys.d.ts +8 -0
- package/src/lib/iam-policy/statement-keys.js +159 -0
- package/src/lib/iam-policy/wildcard.d.ts +2 -0
- package/src/lib/iam-policy/wildcard.js +14 -0
- package/src/lib/treesitter/base.d.ts +35 -0
- package/src/lib/treesitter/base.js +50 -0
- package/src/lib/treesitter/hcl.d.ts +9 -0
- package/src/lib/treesitter/hcl.js +888 -0
- package/src/lib/treesitter/json.d.ts +9 -0
- package/src/lib/treesitter/json.js +376 -0
- package/src/lib/treesitter/manager.d.ts +9 -0
- package/src/lib/treesitter/manager.js +66 -0
- package/src/lib/treesitter/yaml.d.ts +9 -0
- package/src/lib/treesitter/yaml.js +878 -0
- package/src/server.d.ts +2 -0
- package/src/server.js +26 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"waf-regional","actions":{"AssociateWebACL":{"conditionKeys":[],"resources":[{"name":"loadbalancer/app/"},{"name":"webacl"}],"description":"Grants permission to associate a web ACL with a resource","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer/app/","required":true},{"name":"webacl","required":true}]},"CreateByteMatchSet":{"conditionKeys":[],"resources":[{"name":"bytematchset"}],"description":"Grants permission to create a ByteMatchSet","accessLevel":"Write","resourceTypes":[{"name":"bytematchset","required":true}]},"CreateGeoMatchSet":{"conditionKeys":[],"resources":[{"name":"geomatchset"}],"description":"Grants permission to create a GeoMatchSet","accessLevel":"Write","resourceTypes":[{"name":"geomatchset","required":true}]},"CreateIPSet":{"conditionKeys":[],"resources":[{"name":"ipset"}],"description":"Grants permission to create an IPSet","accessLevel":"Write","resourceTypes":[{"name":"ipset","required":true}]},"CreateRateBasedRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ratebasedrule"}],"description":"Grants permission to create a RateBasedRule","accessLevel":"Write","resourceTypes":[{"name":"ratebasedrule","required":true}]},"CreateRegexMatchSet":{"conditionKeys":[],"resources":[{"name":"regexmatchset"}],"description":"Grants permission to create a RegexMatchSet","accessLevel":"Write","resourceTypes":[{"name":"regexmatchset","required":true}]},"CreateRegexPatternSet":{"conditionKeys":[],"resources":[{"name":"regexpatternset"}],"description":"Grants permission to create a RegexPatternSet","accessLevel":"Write","resourceTypes":[{"name":"regexpatternset","required":true}]},"CreateRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"rule"}],"description":"Grants permission to create a Rule","accessLevel":"Write","resourceTypes":[{"name":"rule","required":true}]},"CreateRuleGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"rulegroup"}],"description":"Grants permission to create a RuleGroup","accessLevel":"Write","resourceTypes":[{"name":"rulegroup","required":true}]},"CreateSizeConstraintSet":{"conditionKeys":[],"resources":[{"name":"sizeconstraintset"}],"description":"Grants permission to create a SizeConstraintSet","accessLevel":"Write","resourceTypes":[{"name":"sizeconstraintset","required":true}]},"CreateSqlInjectionMatchSet":{"conditionKeys":[],"resources":[{"name":"sqlinjectionmatchset"}],"description":"Grants permission to create an SqlInjectionMatchSet","accessLevel":"Write","resourceTypes":[{"name":"sqlinjectionmatchset","required":true}]},"CreateWebACL":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"webacl"}],"description":"Grants permission to create a WebACL","accessLevel":"Permissions management","resourceTypes":[{"name":"webacl","required":true}]},"CreateWebACLMigrationStack":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to create a CloudFormation web ACL template in an S3 bucket for the purposes of migrating the web ACL from AWS WAF Classic to AWS WAF v2","accessLevel":"Write","resourceTypes":[{"name":"webacl","required":true}],"dependentActions":["s3:PutObject"]},"CreateXssMatchSet":{"conditionKeys":[],"resources":[{"name":"xssmatchset"}],"description":"Grants permission to create an XssMatchSet","accessLevel":"Write","resourceTypes":[{"name":"xssmatchset","required":true}]},"DeleteByteMatchSet":{"conditionKeys":[],"resources":[{"name":"bytematchset"}],"description":"Grants permission to delete a ByteMatchSet","accessLevel":"Write","resourceTypes":[{"name":"bytematchset","required":true}]},"DeleteGeoMatchSet":{"conditionKeys":[],"resources":[{"name":"geomatchset"}],"description":"Grants permission to delete a GeoMatchSet","accessLevel":"Write","resourceTypes":[{"name":"geomatchset","required":true}]},"DeleteIPSet":{"conditionKeys":[],"resources":[{"name":"ipset"}],"description":"Grants permission to delete an IPSet","accessLevel":"Write","resourceTypes":[{"name":"ipset","required":true}]},"DeleteLoggingConfiguration":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to delete a LoggingConfiguration from a web ACL","accessLevel":"Write","resourceTypes":[{"name":"webacl","required":true}]},"DeletePermissionPolicy":{"conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to delete an IAM policy from a rule group","accessLevel":"Permissions management","resourceTypes":[{"name":"rulegroup","required":true}]},"DeleteRateBasedRule":{"conditionKeys":[],"resources":[{"name":"ratebasedrule"}],"description":"Grants permission to delete a RateBasedRule","accessLevel":"Write","resourceTypes":[{"name":"ratebasedrule","required":true}]},"DeleteRegexMatchSet":{"conditionKeys":[],"resources":[{"name":"regexmatchset"}],"description":"Grants permission to delete a RegexMatchSet","accessLevel":"Write","resourceTypes":[{"name":"regexmatchset","required":true}]},"DeleteRegexPatternSet":{"conditionKeys":[],"resources":[{"name":"regexpatternset"}],"description":"Grants permission to delete a RegexPatternSet","accessLevel":"Write","resourceTypes":[{"name":"regexpatternset","required":true}]},"DeleteRule":{"conditionKeys":[],"resources":[{"name":"rule"}],"description":"Grants permission to delete a Rule","accessLevel":"Write","resourceTypes":[{"name":"rule","required":true}]},"DeleteRuleGroup":{"conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to delete a RuleGroup","accessLevel":"Write","resourceTypes":[{"name":"rulegroup","required":true}]},"DeleteSizeConstraintSet":{"conditionKeys":[],"resources":[{"name":"sizeconstraintset"}],"description":"Grants permission to delete a SizeConstraintSet","accessLevel":"Write","resourceTypes":[{"name":"sizeconstraintset","required":true}]},"DeleteSqlInjectionMatchSet":{"conditionKeys":[],"resources":[{"name":"sqlinjectionmatchset"}],"description":"Grants permission to delete an SqlInjectionMatchSet","accessLevel":"Write","resourceTypes":[{"name":"sqlinjectionmatchset","required":true}]},"DeleteWebACL":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to delete a WebACL","accessLevel":"Permissions management","resourceTypes":[{"name":"webacl","required":true}]},"DeleteXssMatchSet":{"conditionKeys":[],"resources":[{"name":"xssmatchset"}],"description":"Grants permission to delete an XssMatchSet","accessLevel":"Write","resourceTypes":[{"name":"xssmatchset","required":true}]},"DisassociateWebACL":{"conditionKeys":[],"resources":[{"name":"loadbalancer/app/"}],"description":"Grants permission to delete an association between a web ACL and a resource","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer/app/","required":true}]},"GetByteMatchSet":{"conditionKeys":[],"resources":[{"name":"bytematchset"}],"description":"Grants permission to retrieve a ByteMatchSet","accessLevel":"Read","resourceTypes":[{"name":"bytematchset","required":true}]},"GetChangeToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a change token to use in create, update, and delete requests","accessLevel":"Read","resourceTypes":[]},"GetChangeTokenStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the status of a change token","accessLevel":"Read","resourceTypes":[]},"GetGeoMatchSet":{"conditionKeys":[],"resources":[{"name":"geomatchset"}],"description":"Grants permission to retrieve a GeoMatchSet","accessLevel":"Read","resourceTypes":[{"name":"geomatchset","required":true}]},"GetIPSet":{"conditionKeys":[],"resources":[{"name":"ipset"}],"description":"Grants permission to retrieve an IPSet","accessLevel":"Read","resourceTypes":[{"name":"ipset","required":true}]},"GetLoggingConfiguration":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to retrieve a LoggingConfiguration","accessLevel":"Read","resourceTypes":[{"name":"webacl","required":true}]},"GetPermissionPolicy":{"conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to retrieve an IAM policy attached to a RuleGroup","accessLevel":"Read","resourceTypes":[{"name":"rulegroup","required":true}]},"GetRateBasedRule":{"conditionKeys":[],"resources":[{"name":"ratebasedrule"}],"description":"Grants permission to retrieve a RateBasedRule","accessLevel":"Read","resourceTypes":[{"name":"ratebasedrule","required":true}]},"GetRateBasedRuleManagedKeys":{"conditionKeys":[],"resources":[{"name":"ratebasedrule"}],"description":"Grants permission to retrieve the array of IP addresses that are currently being blocked by a RateBasedRule","accessLevel":"Read","resourceTypes":[{"name":"ratebasedrule","required":true}]},"GetRegexMatchSet":{"conditionKeys":[],"resources":[{"name":"regexmatchset"}],"description":"Grants permission to retrieve a RegexMatchSet","accessLevel":"Read","resourceTypes":[{"name":"regexmatchset","required":true}]},"GetRegexPatternSet":{"conditionKeys":[],"resources":[{"name":"regexpatternset"}],"description":"Grants permission to retrieve a RegexPatternSet","accessLevel":"Read","resourceTypes":[{"name":"regexpatternset","required":true}]},"GetRule":{"conditionKeys":[],"resources":[{"name":"rule"}],"description":"Grants permission to retrieve a Rule","accessLevel":"Read","resourceTypes":[{"name":"rule","required":true}]},"GetRuleGroup":{"conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to retrieve a RuleGroup","accessLevel":"Read","resourceTypes":[{"name":"rulegroup","required":true}]},"GetSampledRequests":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to retrieve detailed information for a sample set of web requests","accessLevel":"Read","resourceTypes":[{"name":"webacl","required":false}]},"GetSizeConstraintSet":{"conditionKeys":[],"resources":[{"name":"sizeconstraintset"}],"description":"Grants permission to retrieve a SizeConstraintSet","accessLevel":"Read","resourceTypes":[{"name":"sizeconstraintset","required":true}]},"GetSqlInjectionMatchSet":{"conditionKeys":[],"resources":[{"name":"sqlinjectionmatchset"}],"description":"Grants permission to retrieve an SqlInjectionMatchSet","accessLevel":"Read","resourceTypes":[{"name":"sqlinjectionmatchset","required":true}]},"GetWebACL":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to retrieve a WebACL","accessLevel":"Read","resourceTypes":[{"name":"webacl","required":true}]},"GetWebACLForResource":{"conditionKeys":[],"resources":[{"name":"loadbalancer/app/"}],"description":"Grants permission to retrieve a WebACL that's associated with a specified resource","accessLevel":"Read","resourceTypes":[{"name":"loadbalancer/app/","required":true}]},"GetXssMatchSet":{"conditionKeys":[],"resources":[{"name":"xssmatchset"}],"description":"Grants permission to retrieve an XssMatchSet","accessLevel":"Read","resourceTypes":[{"name":"xssmatchset","required":true}]},"ListActivatedRulesInRuleGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of ActivatedRule objects","accessLevel":"List","resourceTypes":[]},"ListByteMatchSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of ByteMatchSetSummary objects","accessLevel":"List","resourceTypes":[]},"ListGeoMatchSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of GeoMatchSetSummary objects","accessLevel":"List","resourceTypes":[]},"ListIPSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of IPSetSummary objects","accessLevel":"List","resourceTypes":[]},"ListLoggingConfigurations":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of LoggingConfiguration objects","accessLevel":"List","resourceTypes":[]},"ListRateBasedRules":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of RuleSummary objects","accessLevel":"List","resourceTypes":[]},"ListRegexMatchSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of RegexMatchSetSummary objects","accessLevel":"List","resourceTypes":[]},"ListRegexPatternSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of RegexPatternSetSummary objects","accessLevel":"List","resourceTypes":[]},"ListResourcesForWebACL":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to retrieve an array of resources associated with a specified WebACL","accessLevel":"List","resourceTypes":[{"name":"webacl","required":true}]},"ListRuleGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of RuleGroup objects","accessLevel":"List","resourceTypes":[]},"ListRules":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of RuleSummary objects","accessLevel":"List","resourceTypes":[]},"ListSizeConstraintSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of SizeConstraintSetSummary objects","accessLevel":"List","resourceTypes":[]},"ListSqlInjectionMatchSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of SqlInjectionMatchSet objects","accessLevel":"List","resourceTypes":[]},"ListSubscribedRuleGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of RuleGroup objects that you are subscribed to","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"ratebasedrule"},{"name":"rule"},{"name":"rulegroup"},{"name":"webacl"}],"description":"Grants permission to lists the Tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"ratebasedrule","required":false},{"name":"rule","required":false},{"name":"rulegroup","required":false},{"name":"webacl","required":false}]},"ListWebACLs":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of WebACLSummary objects","accessLevel":"List","resourceTypes":[]},"ListXssMatchSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of XssMatchSet objects","accessLevel":"List","resourceTypes":[]},"PutLoggingConfiguration":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to associates a LoggingConfiguration with a web ACL","accessLevel":"Write","resourceTypes":[{"name":"webacl","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"]},"PutPermissionPolicy":{"conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to attach an IAM policy to a specified rule group, to support rule group sharing between accounts","accessLevel":"Permissions management","resourceTypes":[{"name":"rulegroup","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ratebasedrule"},{"name":"rule"},{"name":"rulegroup"},{"name":"webacl"}],"description":"Grants permission to add a Tag to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"ratebasedrule","required":false},{"name":"rule","required":false},{"name":"rulegroup","required":false},{"name":"webacl","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"ratebasedrule"},{"name":"rule"},{"name":"rulegroup"},{"name":"webacl"}],"description":"Grants permission to remove a Tag from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"ratebasedrule","required":false},{"name":"rule","required":false},{"name":"rulegroup","required":false},{"name":"webacl","required":false}]},"UpdateByteMatchSet":{"conditionKeys":[],"resources":[{"name":"bytematchset"}],"description":"Grants permission to insert or delete ByteMatchTuple objects in a ByteMatchSet","accessLevel":"Write","resourceTypes":[{"name":"bytematchset","required":true}]},"UpdateGeoMatchSet":{"conditionKeys":[],"resources":[{"name":"geomatchset"}],"description":"Grants permission to insert or delete GeoMatchConstraint objects in a GeoMatchSet","accessLevel":"Write","resourceTypes":[{"name":"geomatchset","required":true}]},"UpdateIPSet":{"conditionKeys":[],"resources":[{"name":"ipset"}],"description":"Grants permission to insert or delete IPSetDescriptor objects in an IPSet","accessLevel":"Write","resourceTypes":[{"name":"ipset","required":true}]},"UpdateRateBasedRule":{"conditionKeys":[],"resources":[{"name":"ratebasedrule"}],"description":"Grants permission to insert or delete predicate objects in a rate based rule and update the RateLimit in the rule","accessLevel":"Write","resourceTypes":[{"name":"ratebasedrule","required":true}]},"UpdateRegexMatchSet":{"conditionKeys":[],"resources":[{"name":"regexmatchset"}],"description":"Grants permission to insert or delete RegexMatchTuple objects in a RegexMatchSet","accessLevel":"Write","resourceTypes":[{"name":"regexmatchset","required":true}]},"UpdateRegexPatternSet":{"conditionKeys":[],"resources":[{"name":"regexpatternset"}],"description":"Grants permission to insert or delete RegexPatternStrings in a RegexPatternSet","accessLevel":"Write","resourceTypes":[{"name":"regexpatternset","required":true}]},"UpdateRule":{"conditionKeys":[],"resources":[{"name":"rule"}],"description":"Grants permission to insert or delete predicate objects in a Rule","accessLevel":"Write","resourceTypes":[{"name":"rule","required":true}]},"UpdateRuleGroup":{"conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to insert or delete ActivatedRule objects in a RuleGroup","accessLevel":"Write","resourceTypes":[{"name":"rulegroup","required":true}]},"UpdateSizeConstraintSet":{"conditionKeys":[],"resources":[{"name":"sizeconstraintset"}],"description":"Grants permission to insert or delete SizeConstraint objects in a SizeConstraintSet","accessLevel":"Write","resourceTypes":[{"name":"sizeconstraintset","required":true}]},"UpdateSqlInjectionMatchSet":{"conditionKeys":[],"resources":[{"name":"sqlinjectionmatchset"}],"description":"Grants permission to insert or delete SqlInjectionMatchTuple objects in an SqlInjectionMatchSet","accessLevel":"Write","resourceTypes":[{"name":"sqlinjectionmatchset","required":true}]},"UpdateWebACL":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to insert or delete ActivatedRule objects in a WebACL","accessLevel":"Permissions management","resourceTypes":[{"name":"webacl","required":true}]},"UpdateXssMatchSet":{"conditionKeys":[],"resources":[{"name":"xssmatchset"}],"description":"Grants permission to insert or delete XssMatchTuple objects in an XssMatchSet","accessLevel":"Write","resourceTypes":[{"name":"xssmatchset","required":true}]}},"resources":[{"name":"bytematchset","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:bytematchset/${Id}"],"conditionKeys":[]},{"name":"geomatchset","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:geomatchset/${Id}"],"conditionKeys":[]},{"name":"ipset","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:ipset/${Id}"],"conditionKeys":[]},{"name":"loadbalancer/app/","arnFormats":["arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/${LoadBalancerName}/${LoadBalancerId}"],"conditionKeys":[]},{"name":"ratebasedrule","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:ratebasedrule/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"regexmatchset","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:regexmatch/${Id}"],"conditionKeys":[]},{"name":"regexpatternset","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:regexpatternset/${Id}"],"conditionKeys":[]},{"name":"rule","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:rule/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"rulegroup","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:rulegroup/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"sizeconstraintset","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:sizeconstraintset/${Id}"],"conditionKeys":[]},{"name":"sqlinjectionmatchset","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:sqlinjectionset/${Id}"],"conditionKeys":[]},{"name":"webacl","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:webacl/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"xssmatchset","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:xssmatchset/${Id}"],"conditionKeys":[]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters actions based on the allowed set of values for each of the tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters actions based on tag-value assoicated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters actions based on the presence of mandatory tags in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"waf","actions":{"CreateByteMatchSet":{"conditionKeys":[],"resources":[{"name":"bytematchset"}],"description":"Grants permission to create a ByteMatchSet","accessLevel":"Write","resourceTypes":[{"name":"bytematchset","required":true}]},"CreateGeoMatchSet":{"conditionKeys":[],"resources":[{"name":"geomatchset"}],"description":"Grants permission to create a GeoMatchSet","accessLevel":"Write","resourceTypes":[{"name":"geomatchset","required":true}]},"CreateIPSet":{"conditionKeys":[],"resources":[{"name":"ipset"}],"description":"Grants permission to create an IPSet","accessLevel":"Write","resourceTypes":[{"name":"ipset","required":true}]},"CreateRateBasedRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ratebasedrule"}],"description":"Grants permission to create a RateBasedRule for limiting the volume of requests from a single IP address","accessLevel":"Write","resourceTypes":[{"name":"ratebasedrule","required":true}]},"CreateRegexMatchSet":{"conditionKeys":[],"resources":[{"name":"regexmatchset"}],"description":"Grants permission to create a RegexMatchSet","accessLevel":"Write","resourceTypes":[{"name":"regexmatchset","required":true}]},"CreateRegexPatternSet":{"conditionKeys":[],"resources":[{"name":"regexpatternset"}],"description":"Grants permission to create a RegexPatternSet","accessLevel":"Write","resourceTypes":[{"name":"regexpatternset","required":true}]},"CreateRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"rule"}],"description":"Grants permission to create a Rule for filtering web requests","accessLevel":"Write","resourceTypes":[{"name":"rule","required":true}]},"CreateRuleGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"rulegroup"}],"description":"Grants permission to create a RuleGroup, which is a collection of predefined rules that you can use in a WebACL","accessLevel":"Write","resourceTypes":[{"name":"rulegroup","required":true}]},"CreateSizeConstraintSet":{"conditionKeys":[],"resources":[{"name":"sizeconstraintset"}],"description":"Grants permission to create a SizeConstraintSet","accessLevel":"Write","resourceTypes":[{"name":"sizeconstraintset","required":true}]},"CreateSqlInjectionMatchSet":{"conditionKeys":[],"resources":[{"name":"sqlinjectionmatchset"}],"description":"Grants permission to create an SqlInjectionMatchSet","accessLevel":"Write","resourceTypes":[{"name":"sqlinjectionmatchset","required":true}]},"CreateWebACL":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"webacl"}],"description":"Grants permission to create a WebACL, which contains rules for filtering web requests","accessLevel":"Permissions management","resourceTypes":[{"name":"webacl","required":true}]},"CreateWebACLMigrationStack":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to create a CloudFormation web ACL template in an S3 bucket for the purposes of migrating the web ACL from AWS WAF Classic to AWS WAF v2","accessLevel":"Write","resourceTypes":[{"name":"webacl","required":true}],"dependentActions":["s3:PutObject"]},"CreateXssMatchSet":{"conditionKeys":[],"resources":[{"name":"xssmatchset"}],"description":"Grants permission to create an XssMatchSet, which you use to detect requests that contain cross-site scripting attacks","accessLevel":"Write","resourceTypes":[{"name":"xssmatchset","required":true}]},"DeleteByteMatchSet":{"conditionKeys":[],"resources":[{"name":"bytematchset"}],"description":"Grants permission to delete a ByteMatchSet","accessLevel":"Write","resourceTypes":[{"name":"bytematchset","required":true}]},"DeleteGeoMatchSet":{"conditionKeys":[],"resources":[{"name":"geomatchset"}],"description":"Grants permission to delete a GeoMatchSet","accessLevel":"Write","resourceTypes":[{"name":"geomatchset","required":true}]},"DeleteIPSet":{"conditionKeys":[],"resources":[{"name":"ipset"}],"description":"Grants permission to delete an IPSet","accessLevel":"Write","resourceTypes":[{"name":"ipset","required":true}]},"DeleteLoggingConfiguration":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to delete the LoggingConfiguration from a web ACL","accessLevel":"Write","resourceTypes":[{"name":"webacl","required":true}]},"DeletePermissionPolicy":{"conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to delete an IAM policy from a rule group","accessLevel":"Permissions management","resourceTypes":[{"name":"rulegroup","required":true}]},"DeleteRateBasedRule":{"conditionKeys":[],"resources":[{"name":"ratebasedrule"}],"description":"Grants permission to delete a RateBasedRule","accessLevel":"Write","resourceTypes":[{"name":"ratebasedrule","required":true}]},"DeleteRegexMatchSet":{"conditionKeys":[],"resources":[{"name":"regexmatchset"}],"description":"Grants permission to delete a RegexMatchSet","accessLevel":"Write","resourceTypes":[{"name":"regexmatchset","required":true}]},"DeleteRegexPatternSet":{"conditionKeys":[],"resources":[{"name":"regexpatternset"}],"description":"Grants permission to delete a RegexPatternSet","accessLevel":"Write","resourceTypes":[{"name":"regexpatternset","required":true}]},"DeleteRule":{"conditionKeys":[],"resources":[{"name":"rule"}],"description":"Grants permission to delete a Rule","accessLevel":"Write","resourceTypes":[{"name":"rule","required":true}]},"DeleteRuleGroup":{"conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to delete a RuleGroup","accessLevel":"Write","resourceTypes":[{"name":"rulegroup","required":true}]},"DeleteSizeConstraintSet":{"conditionKeys":[],"resources":[{"name":"sizeconstraintset"}],"description":"Grants permission to delete a SizeConstraintSet","accessLevel":"Write","resourceTypes":[{"name":"sizeconstraintset","required":true}]},"DeleteSqlInjectionMatchSet":{"conditionKeys":[],"resources":[{"name":"sqlinjectionmatchset"}],"description":"Grants permission to delete an SqlInjectionMatchSet","accessLevel":"Write","resourceTypes":[{"name":"sqlinjectionmatchset","required":true}]},"DeleteWebACL":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to delete a WebACL","accessLevel":"Permissions management","resourceTypes":[{"name":"webacl","required":true}]},"DeleteXssMatchSet":{"conditionKeys":[],"resources":[{"name":"xssmatchset"}],"description":"Grants permission to delete an XssMatchSet","accessLevel":"Write","resourceTypes":[{"name":"xssmatchset","required":true}]},"GetByteMatchSet":{"conditionKeys":[],"resources":[{"name":"bytematchset"}],"description":"Grants permission to retrieve a ByteMatchSet","accessLevel":"Read","resourceTypes":[{"name":"bytematchset","required":true}]},"GetChangeToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a change token to use in create, update, and delete requests","accessLevel":"Read","resourceTypes":[]},"GetChangeTokenStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the status of a change token","accessLevel":"Read","resourceTypes":[]},"GetGeoMatchSet":{"conditionKeys":[],"resources":[{"name":"geomatchset"}],"description":"Grants permission to retrieve a GeoMatchSet","accessLevel":"Read","resourceTypes":[{"name":"geomatchset","required":true}]},"GetIPSet":{"conditionKeys":[],"resources":[{"name":"ipset"}],"description":"Grants permission to retrieve an IPSet","accessLevel":"Read","resourceTypes":[{"name":"ipset","required":true}]},"GetLoggingConfiguration":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to retrieve a LoggingConfiguration for a web ACL","accessLevel":"Read","resourceTypes":[{"name":"webacl","required":true}]},"GetPermissionPolicy":{"conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to retrieve an IAM policy for a rule group","accessLevel":"Read","resourceTypes":[{"name":"rulegroup","required":true}]},"GetRateBasedRule":{"conditionKeys":[],"resources":[{"name":"ratebasedrule"}],"description":"Grants permission to retrieve a RateBasedRule","accessLevel":"Read","resourceTypes":[{"name":"ratebasedrule","required":true}]},"GetRateBasedRuleManagedKeys":{"conditionKeys":[],"resources":[{"name":"ratebasedrule"}],"description":"Grants permission to retrieve the array of IP addresses that are currently being blocked by a RateBasedRule","accessLevel":"Read","resourceTypes":[{"name":"ratebasedrule","required":true}]},"GetRegexMatchSet":{"conditionKeys":[],"resources":[{"name":"regexmatchset"}],"description":"Grants permission to retrieve a RegexMatchSet","accessLevel":"Read","resourceTypes":[{"name":"regexmatchset","required":true}]},"GetRegexPatternSet":{"conditionKeys":[],"resources":[{"name":"regexpatternset"}],"description":"Grants permission to retrieve a RegexPatternSet","accessLevel":"Read","resourceTypes":[{"name":"regexpatternset","required":true}]},"GetRule":{"conditionKeys":[],"resources":[{"name":"rule"}],"description":"Grants permission to retrieve a Rule","accessLevel":"Read","resourceTypes":[{"name":"rule","required":true}]},"GetRuleGroup":{"conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to retrieve a RuleGroup","accessLevel":"Read","resourceTypes":[{"name":"rulegroup","required":true}]},"GetSampledRequests":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to retrieve detailed information about a sample set of web requests","accessLevel":"Read","resourceTypes":[{"name":"webacl","required":false}]},"GetSizeConstraintSet":{"conditionKeys":[],"resources":[{"name":"sizeconstraintset"}],"description":"Grants permission to retrieve a SizeConstraintSet","accessLevel":"Read","resourceTypes":[{"name":"sizeconstraintset","required":true}]},"GetSqlInjectionMatchSet":{"conditionKeys":[],"resources":[{"name":"sqlinjectionmatchset"}],"description":"Grants permission to retrieve an SqlInjectionMatchSet","accessLevel":"Read","resourceTypes":[{"name":"sqlinjectionmatchset","required":true}]},"GetWebACL":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to retrieve a WebACL","accessLevel":"Read","resourceTypes":[{"name":"webacl","required":true}]},"GetXssMatchSet":{"conditionKeys":[],"resources":[{"name":"xssmatchset"}],"description":"Grants permission to retrieve an XssMatchSet","accessLevel":"Read","resourceTypes":[{"name":"xssmatchset","required":true}]},"ListActivatedRulesInRuleGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of ActivatedRule objects","accessLevel":"List","resourceTypes":[]},"ListByteMatchSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of ByteMatchSetSummary objects","accessLevel":"List","resourceTypes":[]},"ListGeoMatchSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of GeoMatchSetSummary objects","accessLevel":"List","resourceTypes":[]},"ListIPSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of IPSetSummary objects","accessLevel":"List","resourceTypes":[]},"ListLoggingConfigurations":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of LoggingConfiguration objects","accessLevel":"List","resourceTypes":[]},"ListRateBasedRules":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of RuleSummary objects","accessLevel":"List","resourceTypes":[]},"ListRegexMatchSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of RegexMatchSetSummary objects","accessLevel":"List","resourceTypes":[]},"ListRegexPatternSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of RegexPatternSetSummary objects","accessLevel":"List","resourceTypes":[]},"ListRuleGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of RuleGroup objects","accessLevel":"List","resourceTypes":[]},"ListRules":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of RuleSummary objects","accessLevel":"List","resourceTypes":[]},"ListSizeConstraintSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of SizeConstraintSetSummary objects","accessLevel":"List","resourceTypes":[]},"ListSqlInjectionMatchSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of SqlInjectionMatchSet objects","accessLevel":"List","resourceTypes":[]},"ListSubscribedRuleGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of RuleGroup objects that you are subscribed to","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"ratebasedrule"},{"name":"rule"},{"name":"rulegroup"},{"name":"webacl"}],"description":"Grants permission to retrieve the tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"ratebasedrule","required":false},{"name":"rule","required":false},{"name":"rulegroup","required":false},{"name":"webacl","required":false}]},"ListWebACLs":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of WebACLSummary objects","accessLevel":"List","resourceTypes":[]},"ListXssMatchSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of XssMatchSet objects","accessLevel":"List","resourceTypes":[]},"PutLoggingConfiguration":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to associate a LoggingConfiguration with a specified web ACL","accessLevel":"Write","resourceTypes":[{"name":"webacl","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"]},"PutPermissionPolicy":{"conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to attach an IAM policy to a rule group, to share the rule group between accounts","accessLevel":"Permissions management","resourceTypes":[{"name":"rulegroup","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ratebasedrule"},{"name":"rule"},{"name":"rulegroup"},{"name":"webacl"}],"description":"Grants permission to add a Tag to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"ratebasedrule","required":false},{"name":"rule","required":false},{"name":"rulegroup","required":false},{"name":"webacl","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"ratebasedrule"},{"name":"rule"},{"name":"rulegroup"},{"name":"webacl"}],"description":"Grants permission to remove a Tag from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"ratebasedrule","required":false},{"name":"rule","required":false},{"name":"rulegroup","required":false},{"name":"webacl","required":false}]},"UpdateByteMatchSet":{"conditionKeys":[],"resources":[{"name":"bytematchset"}],"description":"Grants permission to insert or delete ByteMatchTuple objects in a ByteMatchSet","accessLevel":"Write","resourceTypes":[{"name":"bytematchset","required":true}]},"UpdateGeoMatchSet":{"conditionKeys":[],"resources":[{"name":"geomatchset"}],"description":"Grants permission to insert or delete GeoMatchConstraint objects in a GeoMatchSet","accessLevel":"Write","resourceTypes":[{"name":"geomatchset","required":true}]},"UpdateIPSet":{"conditionKeys":[],"resources":[{"name":"ipset"}],"description":"Grants permission to insert or delete IPSetDescriptor objects in an IPSet","accessLevel":"Write","resourceTypes":[{"name":"ipset","required":true}]},"UpdateRateBasedRule":{"conditionKeys":[],"resources":[{"name":"ratebasedrule"}],"description":"Grants permission to modify a rate based rule","accessLevel":"Write","resourceTypes":[{"name":"ratebasedrule","required":true}]},"UpdateRegexMatchSet":{"conditionKeys":[],"resources":[{"name":"regexmatchset"}],"description":"Grants permission to insert or delete RegexMatchTuple objects in a RegexMatchSet","accessLevel":"Write","resourceTypes":[{"name":"regexmatchset","required":true}]},"UpdateRegexPatternSet":{"conditionKeys":[],"resources":[{"name":"regexpatternset"}],"description":"Grants permission to insert or delete RegexPatternStrings in a RegexPatternSet","accessLevel":"Write","resourceTypes":[{"name":"regexpatternset","required":true}]},"UpdateRule":{"conditionKeys":[],"resources":[{"name":"rule"}],"description":"Grants permission to modify a Rule","accessLevel":"Write","resourceTypes":[{"name":"rule","required":true}]},"UpdateRuleGroup":{"conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to insert or delete ActivatedRule objects in a RuleGroup","accessLevel":"Write","resourceTypes":[{"name":"rulegroup","required":true}]},"UpdateSizeConstraintSet":{"conditionKeys":[],"resources":[{"name":"sizeconstraintset"}],"description":"Grants permission to insert or delete SizeConstraint objects in a SizeConstraintSet","accessLevel":"Write","resourceTypes":[{"name":"sizeconstraintset","required":true}]},"UpdateSqlInjectionMatchSet":{"conditionKeys":[],"resources":[{"name":"sqlinjectionmatchset"}],"description":"Grants permission to insert or delete SqlInjectionMatchTuple objects in an SqlInjectionMatchSet","accessLevel":"Write","resourceTypes":[{"name":"sqlinjectionmatchset","required":true}]},"UpdateWebACL":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to insert or delete ActivatedRule objects in a WebACL","accessLevel":"Permissions management","resourceTypes":[{"name":"webacl","required":true}]},"UpdateXssMatchSet":{"conditionKeys":[],"resources":[{"name":"xssmatchset"}],"description":"Grants permission to insert or delete XssMatchTuple objects in an XssMatchSet","accessLevel":"Write","resourceTypes":[{"name":"xssmatchset","required":true}]}},"resources":[{"name":"bytematchset","arnFormats":["arn:${Partition}:waf::${Account}:bytematchset/${Id}"],"conditionKeys":[]},{"name":"geomatchset","arnFormats":["arn:${Partition}:waf::${Account}:geomatchset/${Id}"],"conditionKeys":[]},{"name":"ipset","arnFormats":["arn:${Partition}:waf::${Account}:ipset/${Id}"],"conditionKeys":[]},{"name":"ratebasedrule","arnFormats":["arn:${Partition}:waf::${Account}:ratebasedrule/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"regexmatchset","arnFormats":["arn:${Partition}:waf::${Account}:regexmatch/${Id}"],"conditionKeys":[]},{"name":"regexpatternset","arnFormats":["arn:${Partition}:waf::${Account}:regexpatternset/${Id}"],"conditionKeys":[]},{"name":"rule","arnFormats":["arn:${Partition}:waf::${Account}:rule/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"rulegroup","arnFormats":["arn:${Partition}:waf::${Account}:rulegroup/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"sizeconstraintset","arnFormats":["arn:${Partition}:waf::${Account}:sizeconstraintset/${Id}"],"conditionKeys":[]},{"name":"sqlinjectionmatchset","arnFormats":["arn:${Partition}:waf::${Account}:sqlinjectionset/${Id}"],"conditionKeys":[]},{"name":"webacl","arnFormats":["arn:${Partition}:waf::${Account}:webacl/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"xssmatchset","arnFormats":["arn:${Partition}:waf::${Account}:xssmatchset/${Id}"],"conditionKeys":[]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters actions based on the allowed set of values for each of the tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters actions based on tag-value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters actions based on the presence of mandatory tags in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"wafv2","actions":{"AssociateWebACL":{"conditionKeys":[],"resources":[{"name":"amplify-app"},{"name":"apigateway"},{"name":"apprunner"},{"name":"appsync"},{"name":"loadbalancer/app/"},{"name":"userpool"},{"name":"verified-access-instance"},{"name":"webacl"}],"description":"Grants permission to associate a WebACL with a resource","accessLevel":"Write","resourceTypes":[{"name":"webacl","required":true},{"name":"amplify-app","required":false},{"name":"apigateway","required":false},{"name":"apprunner","required":false},{"name":"appsync","required":false},{"name":"loadbalancer/app/","required":false},{"name":"userpool","required":false},{"name":"verified-access-instance","required":false}],"dependentActions":["amplify:AssociateWebACL","apigateway:SetWebACL","apprunner:AssociateWebAcl","appsync:AssociateWebACL","appsync:SetWebACL","cognito-idp:AssociateWebACL","ec2:AssociateVerifiedAccessInstanceWebAcl","elasticloadbalancing:CreateWebACLAssociation","elasticloadbalancing:SetWebAcl","wafv2:GetPermissionPolicy","wafv2:PutPermissionPolicy"]},"CheckCapacity":{"conditionKeys":[],"resources":[],"description":"Grants permission to calculate web ACL capacity unit (WCU) requirements for a specified scope and set of rules","accessLevel":"Read","resourceTypes":[]},"CreateAPIKey":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an API key for use in the integration of the CAPTCHA API in your JavaScript client applications","accessLevel":"Write","resourceTypes":[]},"CreateIPSet":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ipset"}],"description":"Grants permission to create an IPSet","accessLevel":"Write","resourceTypes":[{"name":"ipset","required":true}],"dependentActions":["wafv2:TagResource"]},"CreateRegexPatternSet":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"regexpatternset"}],"description":"Grants permission to create a RegexPatternSet","accessLevel":"Write","resourceTypes":[{"name":"regexpatternset","required":true}],"dependentActions":["wafv2:TagResource"]},"CreateRuleGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ipset"},{"name":"regexpatternset"},{"name":"rulegroup"}],"description":"Grants permission to create a RuleGroup","accessLevel":"Write","resourceTypes":[{"name":"rulegroup","required":true},{"name":"ipset","required":false},{"name":"regexpatternset","required":false}],"dependentActions":["wafv2:TagResource"]},"CreateWebACL":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ipset"},{"name":"managedruleset"},{"name":"regexpatternset"},{"name":"rulegroup"},{"name":"webacl"}],"description":"Grants permission to create a WebACL","accessLevel":"Write","resourceTypes":[{"name":"webacl","required":true},{"name":"ipset","required":false},{"name":"managedruleset","required":false},{"name":"regexpatternset","required":false},{"name":"rulegroup","required":false}],"dependentActions":["wafv2:TagResource"]},"DeleteAPIKey":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete an API key","accessLevel":"Write","resourceTypes":[]},"DeleteFirewallManagerRuleGroups":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to delete FirewallManagedRulesGroups from a WebACL if not managed by Firewall Manager anymore","accessLevel":"Write","resourceTypes":[{"name":"webacl","required":true}]},"DeleteIPSet":{"conditionKeys":[],"resources":[{"name":"ipset"}],"description":"Grants permission to delete an IPSet","accessLevel":"Write","resourceTypes":[{"name":"ipset","required":true}]},"DeleteLoggingConfiguration":{"conditionKeys":["wafv2:LogScope"],"resources":[{"name":"webacl"}],"description":"Grants permission to delete the LoggingConfiguration from a WebACL","accessLevel":"Write","resourceTypes":[{"name":"webacl","required":true}]},"DeletePermissionPolicy":{"conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to delete the PermissionPolicy on a RuleGroup","accessLevel":"Permissions management","resourceTypes":[{"name":"rulegroup","required":true}]},"DeleteRegexPatternSet":{"conditionKeys":[],"resources":[{"name":"regexpatternset"}],"description":"Grants permission to delete a RegexPatternSet","accessLevel":"Write","resourceTypes":[{"name":"regexpatternset","required":true}]},"DeleteRuleGroup":{"conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to delete a RuleGroup","accessLevel":"Write","resourceTypes":[{"name":"rulegroup","required":true}]},"DeleteWebACL":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to delete a WebACL","accessLevel":"Write","resourceTypes":[{"name":"webacl","required":true}]},"DescribeAllManagedProducts":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve product information for a managed rule group","accessLevel":"Read","resourceTypes":[]},"DescribeManagedProductsByVendor":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve product information for a managed rule group by a given vendor","accessLevel":"Read","resourceTypes":[]},"DescribeManagedRuleGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve high-level information for a managed rule group","accessLevel":"Read","resourceTypes":[]},"DisassociateFirewallManager":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to disassociate Firewall Manager from a WebACL","accessLevel":"Write","resourceTypes":[{"name":"webacl","required":true}],"permissionOnly":true},"DisassociateWebACL":{"conditionKeys":[],"resources":[{"name":"amplify-app"},{"name":"apigateway"},{"name":"apprunner"},{"name":"appsync"},{"name":"loadbalancer/app/"},{"name":"userpool"},{"name":"verified-access-instance"}],"description":"Grants permission to disassociate a WebACL from an application resource","accessLevel":"Write","resourceTypes":[{"name":"amplify-app","required":false},{"name":"apigateway","required":false},{"name":"apprunner","required":false},{"name":"appsync","required":false},{"name":"loadbalancer/app/","required":false},{"name":"userpool","required":false},{"name":"verified-access-instance","required":false}],"dependentActions":["amplify:DisassociateWebACL","apigateway:SetWebACL","apprunner:DisassociateWebAcl","appsync:DisassociateWebACL","appsync:SetWebACL","cognito-idp:DisassociateWebACL","ec2:DisassociateVerifiedAccessInstanceWebAcl","elasticloadbalancing:DeleteWebACLAssociation","elasticloadbalancing:SetWebAcl","wafv2:PutPermissionPolicy"]},"GenerateMobileSdkReleaseUrl":{"conditionKeys":[],"resources":[],"description":"Grants permission to generate a presigned download URL for the specified release of the mobile SDK","accessLevel":"Read","resourceTypes":[]},"GetDecryptedAPIKey":{"conditionKeys":[],"resources":[],"description":"Grants permission to return your API key in decrypted form. Use this to check the token domains that you have defined for the key","accessLevel":"Read","resourceTypes":[]},"GetIPSet":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ipset"}],"description":"Grants permission to retrieve details about an IPSet","accessLevel":"Read","resourceTypes":[{"name":"ipset","required":true}]},"GetLoggingConfiguration":{"conditionKeys":["aws:ResourceTag/${TagKey}","wafv2:LogScope"],"resources":[{"name":"webacl"}],"description":"Grants permission to retrieve LoggingConfiguration for a WebACL","accessLevel":"Read","resourceTypes":[{"name":"webacl","required":true}]},"GetManagedRuleSet":{"conditionKeys":[],"resources":[{"name":"managedruleset"}],"description":"Grants permission to retrieve details about a ManagedRuleSet","accessLevel":"Read","resourceTypes":[{"name":"managedruleset","required":true}]},"GetMobileSdkRelease":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information for the specified mobile SDK release, including release notes and tags","accessLevel":"Read","resourceTypes":[]},"GetPermissionPolicy":{"conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to retrieve a PermissionPolicy for a RuleGroup","accessLevel":"Read","resourceTypes":[{"name":"rulegroup","required":true}]},"GetRateBasedStatementManagedKeys":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"webacl"}],"description":"Grants permission to retrieve the keys that are currently blocked by a rate-based rule","accessLevel":"Read","resourceTypes":[{"name":"webacl","required":true}]},"GetRegexPatternSet":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"regexpatternset"}],"description":"Grants permission to retrieve details about a RegexPatternSet","accessLevel":"Read","resourceTypes":[{"name":"regexpatternset","required":true}]},"GetRuleGroup":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"rulegroup"}],"description":"Grants permission to retrieve details about a RuleGroup","accessLevel":"Read","resourceTypes":[{"name":"rulegroup","required":true}]},"GetSampledRequests":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to retrieve detailed information about a sampling of web requests","accessLevel":"Read","resourceTypes":[{"name":"webacl","required":true}]},"GetTopPathStatisticsByTraffic":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to retrieve aggregated path statistics with bot traffic analysis for a WebACL within a specified time window","accessLevel":"Read","resourceTypes":[{"name":"webacl","required":true}]},"GetWebACL":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"webacl"}],"description":"Grants permission to retrieve details about a WebACL","accessLevel":"Read","resourceTypes":[{"name":"webacl","required":true}]},"GetWebACLForResource":{"conditionKeys":[],"resources":[{"name":"amplify-app"},{"name":"apigateway"},{"name":"apprunner"},{"name":"appsync"},{"name":"loadbalancer/app/"},{"name":"userpool"},{"name":"verified-access-instance"},{"name":"webacl"}],"description":"Grants permission to retrieve the WebACL that's associated with a resource","accessLevel":"Read","resourceTypes":[{"name":"webacl","required":true},{"name":"amplify-app","required":false},{"name":"apigateway","required":false},{"name":"apprunner","required":false},{"name":"appsync","required":false},{"name":"loadbalancer/app/","required":false},{"name":"userpool","required":false},{"name":"verified-access-instance","required":false}],"dependentActions":["amplify:GetWebACLForResource","apprunner:DescribeWebAclForService","appsync:GetWebACLForResource","cognito-idp:GetWebACLForResource","ec2:GetVerifiedAccessInstanceWebAcl","elasticloadbalancing:GetLoadBalancerWebACL","wafv2:GetWebACL"]},"ListAPIKeys":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of the API keys that you've defined for the specified scope","accessLevel":"List","resourceTypes":[]},"ListAvailableManagedRuleGroupVersions":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of managed rule group versions that are available for you to use","accessLevel":"List","resourceTypes":[]},"ListAvailableManagedRuleGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of managed rule groups that are available for you to use","accessLevel":"List","resourceTypes":[]},"ListIPSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of IPSetSummary objects for the IP sets that you manage","accessLevel":"List","resourceTypes":[]},"ListLoggingConfigurations":{"conditionKeys":["wafv2:LogScope"],"resources":[],"description":"Grants permission to retrieve an array of your LoggingConfiguration objects","accessLevel":"List","resourceTypes":[]},"ListManagedRuleSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of your ManagedRuleSet objects","accessLevel":"List","resourceTypes":[]},"ListMobileSdkReleases":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of the available releases for the mobile SDK and the specified device platform","accessLevel":"List","resourceTypes":[]},"ListRegexPatternSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of RegexPatternSetSummary objects for the regex pattern sets that you manage","accessLevel":"List","resourceTypes":[]},"ListResourcesForWebACL":{"conditionKeys":[],"resources":[{"name":"amplify-app"},{"name":"apprunner"},{"name":"userpool"},{"name":"verified-access-instance"},{"name":"webacl"}],"description":"Grants permission to retrieve an array of the Amazon Resource Names (ARNs) for the resources that are associated with a web ACL","accessLevel":"List","resourceTypes":[{"name":"webacl","required":true},{"name":"amplify-app","required":false},{"name":"apprunner","required":false},{"name":"userpool","required":false},{"name":"verified-access-instance","required":false}],"dependentActions":["amplify:ListResourcesForWebACL","apprunner:ListAssociatedServicesForWebAcl","appsync:ListResourcesForWebACL","cognito-idp:ListResourcesForWebACL","ec2:DescribeVerifiedAccessInstanceWebAclAssociations","elasticloadbalancing:DescribeWebACLAssociation"]},"ListRuleGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of RuleGroupSummary objects for the rule groups that you manage","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ipset"},{"name":"regexpatternset"},{"name":"rulegroup"},{"name":"webacl"}],"description":"Grants permission to list tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"ipset","required":false},{"name":"regexpatternset","required":false},{"name":"rulegroup","required":false},{"name":"webacl","required":false}]},"ListWebACLs":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of WebACLSummary objects for the web ACLs that you manage","accessLevel":"List","resourceTypes":[]},"PutFirewallManagerRuleGroups":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to create FirewallManagedRulesGroups in a WebACL","accessLevel":"Write","resourceTypes":[{"name":"webacl","required":true}],"permissionOnly":true},"PutLoggingConfiguration":{"conditionKeys":["wafv2:LogDestinationResource","wafv2:LogScope"],"resources":[{"name":"webacl"}],"description":"Grants permission to enable a LoggingConfiguration, to start logging for a web ACL","accessLevel":"Write","resourceTypes":[{"name":"webacl","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"]},"PutManagedRuleSetVersions":{"conditionKeys":[],"resources":[{"name":"managedruleset"},{"name":"rulegroup"}],"description":"Grants permission to enable create a new or update an existing version of a ManagedRuleSet","accessLevel":"Write","resourceTypes":[{"name":"managedruleset","required":true},{"name":"rulegroup","required":true}]},"PutPermissionPolicy":{"conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to attach an IAM policy to a resource, used to share rule groups between accounts","accessLevel":"Permissions management","resourceTypes":[{"name":"rulegroup","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ipset"},{"name":"regexpatternset"},{"name":"rulegroup"},{"name":"webacl"}],"description":"Grants permission to associate tags with a AWS resource","accessLevel":"Tagging","resourceTypes":[{"name":"ipset","required":false},{"name":"regexpatternset","required":false},{"name":"rulegroup","required":false},{"name":"webacl","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"ipset"},{"name":"regexpatternset"},{"name":"rulegroup"},{"name":"webacl"}],"description":"Grants permission to disassociate tags from an AWS resource","accessLevel":"Tagging","resourceTypes":[{"name":"ipset","required":false},{"name":"regexpatternset","required":false},{"name":"rulegroup","required":false},{"name":"webacl","required":false}]},"UpdateIPSet":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ipset"}],"description":"Grants permission to update an IPSet","accessLevel":"Write","resourceTypes":[{"name":"ipset","required":true}]},"UpdateManagedRuleSetVersionExpiryDate":{"conditionKeys":[],"resources":[{"name":"managedruleset"}],"description":"Grants permission to update the expiry date of a version in ManagedRuleSet","accessLevel":"Write","resourceTypes":[{"name":"managedruleset","required":true}]},"UpdateRegexPatternSet":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"regexpatternset"}],"description":"Grants permission to update a RegexPatternSet","accessLevel":"Write","resourceTypes":[{"name":"regexpatternset","required":true}]},"UpdateRuleGroup":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ipset"},{"name":"regexpatternset"},{"name":"rulegroup"}],"description":"Grants permission to update a RuleGroup","accessLevel":"Write","resourceTypes":[{"name":"rulegroup","required":true},{"name":"ipset","required":false},{"name":"regexpatternset","required":false}]},"UpdateWebACL":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ipset"},{"name":"managedruleset"},{"name":"regexpatternset"},{"name":"rulegroup"},{"name":"webacl"}],"description":"Grants permission to update a WebACL","accessLevel":"Write","resourceTypes":[{"name":"webacl","required":true},{"name":"ipset","required":false},{"name":"managedruleset","required":false},{"name":"regexpatternset","required":false},{"name":"rulegroup","required":false}]}},"resources":[{"name":"amplify-app","arnFormats":["arn:${Partition}:amplify:${Region}:${Account}:apps/${AppId}"],"conditionKeys":[]},{"name":"apigateway","arnFormats":["arn:${Partition}:apigateway:${Region}::/restapis/${ApiId}/stages/${StageName}"],"conditionKeys":[]},{"name":"apprunner","arnFormats":["arn:${Partition}:apprunner:${Region}:${Account}:service/${ServiceName}/${ServiceId}"],"conditionKeys":[]},{"name":"appsync","arnFormats":["arn:${Partition}:appsync:${Region}:${Account}:apis/${GraphQLAPIId}"],"conditionKeys":[]},{"name":"ipset","arnFormats":["arn:${Partition}:wafv2:${Region}:${Account}:${Scope}/ipset/${Name}/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"loadbalancer/app/","arnFormats":["arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/${LoadBalancerName}/${LoadBalancerId}"],"conditionKeys":[]},{"name":"managedruleset","arnFormats":["arn:${Partition}:wafv2:${Region}:${Account}:${Scope}/managedruleset/${Name}/${Id}"],"conditionKeys":[]},{"name":"regexpatternset","arnFormats":["arn:${Partition}:wafv2:${Region}:${Account}:${Scope}/regexpatternset/${Name}/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"rulegroup","arnFormats":["arn:${Partition}:wafv2:${Region}:${Account}:${Scope}/rulegroup/${Name}/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"userpool","arnFormats":["arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/${UserPoolId}"],"conditionKeys":[]},{"name":"verified-access-instance","arnFormats":["arn:${Partition}:ec2:${Region}:${Account}:verified-access-instance/${VerifiedAccessInstanceId}"],"conditionKeys":[]},{"name":"webacl","arnFormats":["arn:${Partition}:wafv2:${Region}:${Account}:${Scope}/webacl/${Name}/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the allowed set of values for each of the tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag-value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of mandatory tags in the request"},"wafv2:LogDestinationResource":{"types":["ARN"],"description":"Filters access by log destination ARN for PutLoggingConfiguration API"},"wafv2:LogScope":{"types":["String"],"description":"Filters access by log scope for Logging Configuration API"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"wam","actions":{"AuthenticatePackager":{"conditionKeys":[],"resources":[],"description":"Allows the Amazon WAM packaging instance to access your application package catalog.","accessLevel":"Write","resourceTypes":[],"permissionOnly":true}},"resources":[],"conditionKeys":{}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"wellarchitected","actions":{"AssociateLenses":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workload"}],"description":"Grants permission to associate a lens to the specified workload","accessLevel":"Write","resourceTypes":[{"name":"workload","required":true}]},"AssociateProfiles":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workload"}],"description":"Grants permission to associate a profile to the specified workload","accessLevel":"Write","resourceTypes":[{"name":"workload","required":true}]},"ConfigureIntegration":{"conditionKeys":[],"resources":[],"description":"Grants permission to configure the integration","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CreateLensShare":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"lens"}],"description":"Grants permission to an owner of a lens to share with other AWS accounts and IAM users","accessLevel":"Write","resourceTypes":[{"name":"lens","required":true}]},"CreateLensVersion":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"lens"}],"description":"Grants permission to create a new lens version","accessLevel":"Write","resourceTypes":[{"name":"lens","required":true}]},"CreateMilestone":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workload"}],"description":"Grants permission to create a new milestone for the specified workload","accessLevel":"Write","resourceTypes":[{"name":"workload","required":true}]},"CreateProfile":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new profile","accessLevel":"Write","resourceTypes":[]},"CreateProfileShare":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"profile"}],"description":"Grants permission to an owner of a profile to share with other AWS accounts and IAM users","accessLevel":"Write","resourceTypes":[{"name":"profile","required":true}]},"CreateReviewTemplate":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new review template","accessLevel":"Write","resourceTypes":[]},"CreateTemplateShare":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"review-template"}],"description":"Grants permission to an owner of a review template to share with other AWS accounts and IAM users","accessLevel":"Write","resourceTypes":[{"name":"review-template","required":true}]},"CreateWorkload":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","wellarchitected:JiraProjectKey"],"resources":[],"description":"Grants permission to create a new workload","accessLevel":"Write","resourceTypes":[]},"CreateWorkloadShare":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workload"}],"description":"Grants permission to share a workload with another account","accessLevel":"Write","resourceTypes":[{"name":"workload","required":true}]},"DeleteLens":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"lens"}],"description":"Grants permission to delete a lens","accessLevel":"Write","resourceTypes":[{"name":"lens","required":true}]},"DeleteLensShare":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"lens"}],"description":"Grants permission to delete an existing lens share","accessLevel":"Write","resourceTypes":[{"name":"lens","required":true}]},"DeleteProfile":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"profile"}],"description":"Grants permission to delete a profile","accessLevel":"Write","resourceTypes":[{"name":"profile","required":true}]},"DeleteProfileShare":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"profile"}],"description":"Grants permission to delete an existing profile share","accessLevel":"Write","resourceTypes":[{"name":"profile","required":true}]},"DeleteReviewTemplate":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"review-template"}],"description":"Grants permission to delete an existing review template","accessLevel":"Write","resourceTypes":[{"name":"review-template","required":true}]},"DeleteTemplateShare":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"review-template"}],"description":"Grants permission to delete an existing review template share","accessLevel":"Write","resourceTypes":[{"name":"review-template","required":true}]},"DeleteWorkload":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workload"}],"description":"Grants permission to delete an existing workload","accessLevel":"Write","resourceTypes":[{"name":"workload","required":true}]},"DeleteWorkloadShare":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workload"}],"description":"Grants permission to delete an existing workload share","accessLevel":"Write","resourceTypes":[{"name":"workload","required":true}]},"DisassociateLenses":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workload"}],"description":"Grants permission to disassociate a lens from the specified workload","accessLevel":"Write","resourceTypes":[{"name":"workload","required":true}]},"DisassociateProfiles":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workload"}],"description":"Grants permission to disassociate a profile from the specified workload","accessLevel":"Write","resourceTypes":[{"name":"workload","required":true}]},"ExportLens":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"lens"}],"description":"Grants permission to export an existing lens","accessLevel":"Read","resourceTypes":[{"name":"lens","required":true}]},"GetAnswer":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workload"}],"description":"Grants permission to retrieve the specified answer from the specified lens review","accessLevel":"Read","resourceTypes":[{"name":"workload","required":true}]},"GetConsolidatedReport":{"conditionKeys":[],"resources":[],"description":"Grants permission to get consolidated report metrics or to generate the consolidated report PDF in this account","accessLevel":"Read","resourceTypes":[]},"GetGlobalSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to get all settings for the account","accessLevel":"Read","resourceTypes":[]},"GetLens":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"lens"}],"description":"Grants permission to get an existing lens","accessLevel":"Read","resourceTypes":[{"name":"lens","required":true}]},"GetLensReview":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workload"}],"description":"Grants permission to retrieve the specified lens review of the specified workload","accessLevel":"Read","resourceTypes":[{"name":"workload","required":true}]},"GetLensReviewReport":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workload"}],"description":"Grants permission to retrieve the report for the specified lens review","accessLevel":"Read","resourceTypes":[{"name":"workload","required":true}]},"GetLensVersionDifference":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"lens"}],"description":"Grants permission to get the difference between the specified lens version and latest available lens version","accessLevel":"Read","resourceTypes":[{"name":"lens","required":true}]},"GetMilestone":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workload"}],"description":"Grants permission to retrieve the specified milestone of the specified workload","accessLevel":"Read","resourceTypes":[{"name":"workload","required":true}]},"GetProfile":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"profile"}],"description":"Grants permission to retrieve the specified profile","accessLevel":"Read","resourceTypes":[{"name":"profile","required":true}]},"GetProfileTemplate":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the specified profile template","accessLevel":"Read","resourceTypes":[]},"GetReviewTemplate":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"review-template"}],"description":"Grants permission to retrieve the specified review template","accessLevel":"Read","resourceTypes":[{"name":"review-template","required":true}]},"GetReviewTemplateAnswer":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"review-template"}],"description":"Grants permission to retrieve the specified answer from the specified review template lens review","accessLevel":"Read","resourceTypes":[{"name":"review-template","required":true}]},"GetReviewTemplateLensReview":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"review-template"}],"description":"Grants permission to retrieve the specified lens review of the specified review template","accessLevel":"Read","resourceTypes":[{"name":"review-template","required":true}]},"GetWorkload":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workload"}],"description":"Grants permission to retrieve the specified workload","accessLevel":"Read","resourceTypes":[{"name":"workload","required":true}]},"ImportLens":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to import a new lens","accessLevel":"Write","resourceTypes":[]},"ListAnswers":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workload"}],"description":"Grants permission to list the answers from the specified lens review","accessLevel":"List","resourceTypes":[{"name":"workload","required":true}]},"ListCheckDetails":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workload"}],"description":"Grants permission to list the check-details for the workload","accessLevel":"List","resourceTypes":[{"name":"workload","required":true}]},"ListCheckSummaries":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workload"}],"description":"Grants permission to list the check-summaries for the workload","accessLevel":"List","resourceTypes":[{"name":"workload","required":true}]},"ListLensReviewImprovements":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workload"}],"description":"Grants permission to list the improvements of the specified lens review","accessLevel":"List","resourceTypes":[{"name":"workload","required":true}]},"ListLensReviews":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workload"}],"description":"Grants permission to list the lens reviews of the specified workload","accessLevel":"List","resourceTypes":[{"name":"workload","required":true}]},"ListLensShares":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"lens"}],"description":"Grants permission to list all shares created for a lens","accessLevel":"List","resourceTypes":[{"name":"lens","required":true}]},"ListLenses":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the lenses available to this account","accessLevel":"List","resourceTypes":[]},"ListMilestones":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workload"}],"description":"Grants permission to list the milestones of the specified workload","accessLevel":"List","resourceTypes":[{"name":"workload","required":true}]},"ListNotifications":{"conditionKeys":[],"resources":[],"description":"Grants permission to list notifications related to the account or specified resource","accessLevel":"List","resourceTypes":[]},"ListProfileNotifications":{"conditionKeys":[],"resources":[],"description":"Grants permission to list profile notifications related to specified resource","accessLevel":"List","resourceTypes":[]},"ListProfileShares":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"profile"}],"description":"Grants permission to list all shares created for a profile","accessLevel":"List","resourceTypes":[{"name":"profile","required":true}]},"ListProfiles":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the profiles available to this account","accessLevel":"List","resourceTypes":[]},"ListReviewTemplateAnswers":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"review-template"}],"description":"Grants permission to list the answers from the specified review template lens review","accessLevel":"List","resourceTypes":[{"name":"review-template","required":true}]},"ListReviewTemplates":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the review templates available to this account","accessLevel":"List","resourceTypes":[]},"ListShareInvitations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the workload share invitations of the specified account or user","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"lens"},{"name":"profile"},{"name":"review-template"},{"name":"workload"}],"description":"Grants permission to list tags for a Well-Architected resource","accessLevel":"Read","resourceTypes":[{"name":"lens","required":false},{"name":"profile","required":false},{"name":"review-template","required":false},{"name":"workload","required":false}]},"ListTemplateShares":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"review-template"}],"description":"Grants permission to list all shares created for a review template","accessLevel":"List","resourceTypes":[{"name":"review-template","required":true}]},"ListWorkloadShares":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workload"}],"description":"Grants permission to list the workload shares of the specified workload","accessLevel":"List","resourceTypes":[{"name":"workload","required":true}]},"ListWorkloads":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the workloads in this account","accessLevel":"List","resourceTypes":[]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"lens"},{"name":"profile"},{"name":"review-template"},{"name":"workload"}],"description":"Grants permission to tag a Well-Architected resource","accessLevel":"Tagging","resourceTypes":[{"name":"lens","required":false},{"name":"profile","required":false},{"name":"review-template","required":false},{"name":"workload","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"lens"},{"name":"profile"},{"name":"review-template"},{"name":"workload"}],"description":"Grants permission to untag a Well-Architected resource","accessLevel":"Tagging","resourceTypes":[{"name":"lens","required":false},{"name":"profile","required":false},{"name":"review-template","required":false},{"name":"workload","required":false}]},"UpdateAnswer":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workload"}],"description":"Grants permission to update properties of the specified answer","accessLevel":"Write","resourceTypes":[{"name":"workload","required":true}]},"UpdateGlobalSettings":{"conditionKeys":["wellarchitected:JiraProjectKey"],"resources":[],"description":"Grants permission to manage all settings for the account","accessLevel":"Write","resourceTypes":[]},"UpdateIntegration":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workload"}],"description":"Grants permission to update properties of the integration","accessLevel":"Write","resourceTypes":[{"name":"workload","required":true}]},"UpdateLensReview":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workload"}],"description":"Grants permission to update properties of the specified lens review","accessLevel":"Write","resourceTypes":[{"name":"workload","required":true}]},"UpdateProfile":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"profile"}],"description":"Grants permission to update properties of the specified profile","accessLevel":"Write","resourceTypes":[{"name":"profile","required":true}]},"UpdateReviewTemplate":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"review-template"}],"description":"Grants permission to update properties of the specified review template","accessLevel":"Write","resourceTypes":[{"name":"review-template","required":true}]},"UpdateReviewTemplateAnswer":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"review-template"}],"description":"Grants permission to update properties of the specified review template answer","accessLevel":"Write","resourceTypes":[{"name":"review-template","required":true}]},"UpdateReviewTemplateLensReview":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"review-template"}],"description":"Grants permission to update properties of the specified review template lens review","accessLevel":"Write","resourceTypes":[{"name":"review-template","required":true}]},"UpdateShareInvitation":{"conditionKeys":[],"resources":[],"description":"Grants permission to update status of the specified workload share invitation","accessLevel":"Write","resourceTypes":[]},"UpdateWorkload":{"conditionKeys":["aws:ResourceTag/${TagKey}","wellarchitected:JiraProjectKey"],"resources":[{"name":"workload"}],"description":"Grants permission to update properties of the specified workload","accessLevel":"Write","resourceTypes":[{"name":"workload","required":true}]},"UpdateWorkloadShare":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workload"}],"description":"Grants permission to update properties of the specified workload share","accessLevel":"Write","resourceTypes":[{"name":"workload","required":true}]},"UpgradeLensReview":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workload"}],"description":"Grants permission to upgrade the specified lens review to use the latest version of the associated lens","accessLevel":"Write","resourceTypes":[{"name":"workload","required":true}]},"UpgradeProfileVersion":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"profile"},{"name":"workload"}],"description":"Grants permission to upgrade the specified workload to use the latest version of the associated profile","accessLevel":"Write","resourceTypes":[{"name":"profile","required":true},{"name":"workload","required":true}]},"UpgradeReviewTemplateLensReview":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"review-template"}],"description":"Grants permission to upgrade the specified lens review of the specified review template","accessLevel":"Write","resourceTypes":[{"name":"review-template","required":true}]}},"resources":[{"name":"lens","arnFormats":["arn:${Partition}:wellarchitected:${Region}:${Account}:lens/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"profile","arnFormats":["arn:${Partition}:wellarchitected:${Region}:${Account}:profile/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"review-template","arnFormats":["arn:${Partition}:wellarchitected:${Region}:${Account}:review-template/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"workload","arnFormats":["arn:${Partition}:wellarchitected:${Region}:${Account}:workload/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by tag keys in the request"},"wellarchitected:JiraProjectKey":{"types":["String"],"description":"Filters access by project key"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"wickr","actions":{"BatchCreateUser":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to batch create users in a Wickr network","accessLevel":"Write","resourceTypes":[{"name":"network","required":true}]},"BatchDeleteUser":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to batch delete users from a Wickr network","accessLevel":"Write","resourceTypes":[{"name":"network","required":true}]},"BatchLookupUserUname":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to batch lookup user unames in a Wickr network","accessLevel":"Read","resourceTypes":[{"name":"network","required":true}]},"BatchReinviteUser":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to batch reinvite users in a Wickr network","accessLevel":"Write","resourceTypes":[{"name":"network","required":true}]},"BatchResetDevicesForUser":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to batch reset devices for a user in a Wickr network","accessLevel":"Write","resourceTypes":[{"name":"network","required":true}]},"BatchToggleUserSuspendStatus":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to batch toggle user suspend status in a Wickr network","accessLevel":"Write","resourceTypes":[{"name":"network","required":true}]},"CreateAdminSession":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to create and manage Wickr networks","accessLevel":"Write","resourceTypes":[{"name":"network","required":true}]},"CreateBot":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to create a bot in a Wickr network","accessLevel":"Write","resourceTypes":[{"name":"network","required":true}]},"CreateDataRetentionBot":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to create a data retention bot in a Wickr network","accessLevel":"Write","resourceTypes":[{"name":"network","required":true}]},"CreateDataRetentionBotChallenge":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to create a data retention bot challenge in a Wickr network","accessLevel":"Write","resourceTypes":[{"name":"network","required":true}]},"CreateNetwork":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"network"}],"description":"Grants permission to create a new Wickr network","accessLevel":"Write","resourceTypes":[{"name":"network","required":true}]},"CreateSecurityGroup":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to create a security group in a Wickr network","accessLevel":"Write","resourceTypes":[{"name":"network","required":true}]},"DeleteBot":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to delete a bot from a Wickr network","accessLevel":"Write","resourceTypes":[{"name":"network","required":true}]},"DeleteDataRetentionBot":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to delete a data retention bot from a Wickr network","accessLevel":"Write","resourceTypes":[{"name":"network","required":true}]},"DeleteNetwork":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to delete Wickr networks","accessLevel":"Write","resourceTypes":[{"name":"network","required":true}]},"DeleteSecurityGroup":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to delete a security group from a Wickr network","accessLevel":"Write","resourceTypes":[{"name":"network","required":true}]},"GetBot":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to get bot information in a Wickr network","accessLevel":"Read","resourceTypes":[{"name":"network","required":true}]},"GetBotsCount":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to get bot count for a Wickr network","accessLevel":"Read","resourceTypes":[{"name":"network","required":true}]},"GetDataRetentionBot":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to get data retention bot information in a Wickr network","accessLevel":"Read","resourceTypes":[{"name":"network","required":true}]},"GetGuestUserHistoryCount":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to get guest user history count for a Wickr network","accessLevel":"Read","resourceTypes":[{"name":"network","required":true}]},"GetNetwork":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to get details of a Wickr network","accessLevel":"Read","resourceTypes":[{"name":"network","required":true}]},"GetNetworkSettings":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to get network settings for a Wickr network","accessLevel":"Read","resourceTypes":[{"name":"network","required":true}]},"GetOidcInfo":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to get OIDC information for a Wickr network","accessLevel":"Read","resourceTypes":[{"name":"network","required":true}]},"GetSecurityGroup":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to get security group information in a Wickr network","accessLevel":"Read","resourceTypes":[{"name":"network","required":true}]},"GetUser":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to get information about a user in a Wickr network","accessLevel":"Read","resourceTypes":[{"name":"network","required":true}]},"GetUsersCount":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to get user count for a Wickr network","accessLevel":"Read","resourceTypes":[{"name":"network","required":true}]},"ListBlockedGuestUsers":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to list blocked guest users in a Wickr network","accessLevel":"Read","resourceTypes":[{"name":"network","required":true}]},"ListBots":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to list bots in a Wickr network","accessLevel":"Read","resourceTypes":[{"name":"network","required":true}]},"ListDevicesForUser":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to list devices for a user in a Wickr network","accessLevel":"Read","resourceTypes":[{"name":"network","required":true}]},"ListGuestUsers":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to list guest users in a Wickr network","accessLevel":"Read","resourceTypes":[{"name":"network","required":true}]},"ListNetworks":{"conditionKeys":[],"resources":[],"description":"Grants permission to list Wickr networks","accessLevel":"Read","resourceTypes":[]},"ListSecurityGroupUsers":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to list users in a security group in a Wickr network","accessLevel":"Read","resourceTypes":[{"name":"network","required":true}]},"ListSecurityGroups":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to list security groups in a Wickr network","accessLevel":"Read","resourceTypes":[{"name":"network","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to list the tags applied to a Wickr resource","accessLevel":"Read","resourceTypes":[{"name":"network","required":true}]},"ListUsers":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to list users in a Wickr network","accessLevel":"Read","resourceTypes":[{"name":"network","required":true}]},"RegisterOidcConfig":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to register OIDC configuration for a Wickr network","accessLevel":"Write","resourceTypes":[{"name":"network","required":true}]},"RegisterOidcConfigTest":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to test OIDC configuration for a Wickr network","accessLevel":"Write","resourceTypes":[{"name":"network","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"network"}],"description":"Grants permission to add tags to a specified Wickr resource","accessLevel":"Tagging","resourceTypes":[{"name":"network","required":true}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"network"}],"description":"Grants permission to untag the specified tags from the specified Wickr resource","accessLevel":"Tagging","resourceTypes":[{"name":"network","required":true}]},"UpdateBot":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to update a bot in a Wickr network","accessLevel":"Write","resourceTypes":[{"name":"network","required":true}]},"UpdateDataRetention":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to update data retention settings in a Wickr network","accessLevel":"Write","resourceTypes":[{"name":"network","required":true}]},"UpdateGuestUser":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to update guest user status in a Wickr network","accessLevel":"Write","resourceTypes":[{"name":"network","required":true}]},"UpdateNetworkDetails":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to update Wickr network details","accessLevel":"Write","resourceTypes":[{"name":"network","required":true}]},"UpdateNetworkSettings":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to update network settings for a Wickr network","accessLevel":"Write","resourceTypes":[{"name":"network","required":true}]},"UpdateSecurityGroup":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to update a security group in a Wickr network","accessLevel":"Write","resourceTypes":[{"name":"network","required":true}]},"UpdateUser":{"conditionKeys":[],"resources":[{"name":"network"}],"description":"Grants permission to update user information in a Wickr network","accessLevel":"Write","resourceTypes":[{"name":"network","required":true}]}},"resources":[{"name":"network","arnFormats":["arn:${Partition}:wickr:${Region}:${Account}:network/${NetworkId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag's key and value in a request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys in a request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"wisdom","actions":{"ActivateMessageTemplate":{"conditionKeys":[],"resources":[{"name":"KnowledgeBase"},{"name":"MessageTemplate"}],"description":"Grants permission to activate a message template","accessLevel":"Write","resourceTypes":[{"name":"KnowledgeBase","required":true},{"name":"MessageTemplate","required":true}]},"AllowVendedLogDeliveryForResource":{"conditionKeys":[],"resources":[{"name":"Assistant"}],"description":"Grants permission to configure vended log delivery for an assistant","accessLevel":"Permissions management","resourceTypes":[{"name":"Assistant","required":false}],"permissionOnly":true},"CreateAIAgent":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an ai agent","accessLevel":"Write","resourceTypes":[]},"CreateAIAgentVersion":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"AIAgent"}],"description":"Grants permission to create an ai agent version","accessLevel":"Write","resourceTypes":[{"name":"AIAgent","required":true}]},"CreateAIGuardrail":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an ai guardrail","accessLevel":"Write","resourceTypes":[]},"CreateAIGuardrailVersion":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"AIGuardrail"}],"description":"Grants permission to create an ai guardrail version","accessLevel":"Write","resourceTypes":[{"name":"AIGuardrail","required":true}]},"CreateAIPrompt":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an ai prompt","accessLevel":"Write","resourceTypes":[]},"CreateAIPromptVersion":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"AIPrompt"}],"description":"Grants permission to create an ai prompt version","accessLevel":"Write","resourceTypes":[{"name":"AIPrompt","required":true}]},"CreateAssistant":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an assistant","accessLevel":"Write","resourceTypes":[]},"CreateAssistantAssociation":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an association between an assistant and another resource","accessLevel":"Write","resourceTypes":[]},"CreateContent":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"KnowledgeBase"}],"description":"Grants permission to create content","accessLevel":"Write","resourceTypes":[{"name":"KnowledgeBase","required":true}]},"CreateContentAssociation":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Content"},{"name":"KnowledgeBase"}],"description":"Grants permission to create a content association","accessLevel":"Write","resourceTypes":[{"name":"Content","required":true},{"name":"KnowledgeBase","required":true}]},"CreateKnowledgeBase":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a knowledge base","accessLevel":"Write","resourceTypes":[]},"CreateMessageTemplate":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"KnowledgeBase"}],"description":"Grants permission to create a message template","accessLevel":"Write","resourceTypes":[{"name":"KnowledgeBase","required":true}]},"CreateMessageTemplateAttachment":{"conditionKeys":[],"resources":[{"name":"KnowledgeBase"},{"name":"MessageTemplate"}],"description":"Grants permission to create an attachment to a message template","accessLevel":"Write","resourceTypes":[{"name":"KnowledgeBase","required":true},{"name":"MessageTemplate","required":true}]},"CreateMessageTemplateVersion":{"conditionKeys":[],"resources":[{"name":"KnowledgeBase"},{"name":"MessageTemplate"}],"description":"Grants permission to create a version of a message template","accessLevel":"Write","resourceTypes":[{"name":"KnowledgeBase","required":true},{"name":"MessageTemplate","required":true}]},"CreateQuickResponse":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create quick response","accessLevel":"Write","resourceTypes":[]},"CreateSession":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a session","accessLevel":"Write","resourceTypes":[]},"DeactivateMessageTemplate":{"conditionKeys":[],"resources":[{"name":"KnowledgeBase"},{"name":"MessageTemplate"}],"description":"Grants permission to deactivate a message template","accessLevel":"Write","resourceTypes":[{"name":"KnowledgeBase","required":true},{"name":"MessageTemplate","required":true}]},"DeleteAIAgent":{"conditionKeys":[],"resources":[{"name":"AIAgent"}],"description":"Grants permission to delete an ai agent","accessLevel":"Write","resourceTypes":[{"name":"AIAgent","required":true}]},"DeleteAIAgentVersion":{"conditionKeys":[],"resources":[{"name":"AIAgent"}],"description":"Grants permission to delete an ai agent version","accessLevel":"Write","resourceTypes":[{"name":"AIAgent","required":true}]},"DeleteAIGuardrail":{"conditionKeys":[],"resources":[{"name":"AIGuardrail"}],"description":"Grants permission to delete an ai guardrail","accessLevel":"Write","resourceTypes":[{"name":"AIGuardrail","required":true}]},"DeleteAIGuardrailVersion":{"conditionKeys":[],"resources":[{"name":"AIGuardrail"}],"description":"Grants permission to delete an ai guardrail version","accessLevel":"Write","resourceTypes":[{"name":"AIGuardrail","required":true}]},"DeleteAIPrompt":{"conditionKeys":[],"resources":[{"name":"AIPrompt"}],"description":"Grants permission to delete an ai prompt","accessLevel":"Write","resourceTypes":[{"name":"AIPrompt","required":true}]},"DeleteAIPromptVersion":{"conditionKeys":[],"resources":[{"name":"AIPrompt"}],"description":"Grants permission to delete an ai prompt version","accessLevel":"Write","resourceTypes":[{"name":"AIPrompt","required":true}]},"DeleteAssistant":{"conditionKeys":[],"resources":[{"name":"Assistant"}],"description":"Grants permission to delete an assistant","accessLevel":"Write","resourceTypes":[{"name":"Assistant","required":true}]},"DeleteAssistantAssociation":{"conditionKeys":[],"resources":[{"name":"AssistantAssociation"}],"description":"Grants permission to delete an assistant association","accessLevel":"Write","resourceTypes":[{"name":"AssistantAssociation","required":true}]},"DeleteContent":{"conditionKeys":[],"resources":[{"name":"Content"},{"name":"KnowledgeBase"}],"description":"Grants permission to delete content","accessLevel":"Write","resourceTypes":[{"name":"Content","required":true},{"name":"KnowledgeBase","required":true}]},"DeleteContentAssociation":{"conditionKeys":[],"resources":[{"name":"Content"},{"name":"ContentAssociation"},{"name":"KnowledgeBase"}],"description":"Grants permission to delete a content association","accessLevel":"Write","resourceTypes":[{"name":"Content","required":true},{"name":"ContentAssociation","required":true},{"name":"KnowledgeBase","required":true}]},"DeleteImportJob":{"conditionKeys":[],"resources":[{"name":"KnowledgeBase"}],"description":"Grants permission to delete a import job of a knowledge base","accessLevel":"Write","resourceTypes":[{"name":"KnowledgeBase","required":true}]},"DeleteKnowledgeBase":{"conditionKeys":[],"resources":[{"name":"KnowledgeBase"}],"description":"Grants permission to delete a knowledge base","accessLevel":"Write","resourceTypes":[{"name":"KnowledgeBase","required":true}]},"DeleteMessageTemplate":{"conditionKeys":[],"resources":[{"name":"KnowledgeBase"},{"name":"MessageTemplate"}],"description":"Grants permission to delete a message template","accessLevel":"Write","resourceTypes":[{"name":"KnowledgeBase","required":true},{"name":"MessageTemplate","required":true}]},"DeleteMessageTemplateAttachment":{"conditionKeys":[],"resources":[{"name":"KnowledgeBase"},{"name":"MessageTemplate"}],"description":"Grants permission to delete an attachment from a message template","accessLevel":"Write","resourceTypes":[{"name":"KnowledgeBase","required":true},{"name":"MessageTemplate","required":true}]},"DeleteQuickResponse":{"conditionKeys":[],"resources":[{"name":"KnowledgeBase"},{"name":"QuickResponse"}],"description":"Grants permission to delete quick response","accessLevel":"Write","resourceTypes":[{"name":"KnowledgeBase","required":true},{"name":"QuickResponse","required":true}]},"GetAIAgent":{"conditionKeys":[],"resources":[{"name":"AIAgent"}],"description":"Grants permission to retrieve information about an ai agent","accessLevel":"Read","resourceTypes":[{"name":"AIAgent","required":true}]},"GetAIGuardrail":{"conditionKeys":[],"resources":[{"name":"AIGuardrail"}],"description":"Grants permission to retrieve information about an ai guardrail","accessLevel":"Read","resourceTypes":[{"name":"AIGuardrail","required":true}]},"GetAIPrompt":{"conditionKeys":[],"resources":[{"name":"AIPrompt"}],"description":"Grants permission to retrieve information about an ai prompt","accessLevel":"Read","resourceTypes":[{"name":"AIPrompt","required":true}]},"GetAssistant":{"conditionKeys":[],"resources":[{"name":"Assistant"}],"description":"Grants permission to retrieve information about an assistant","accessLevel":"Read","resourceTypes":[{"name":"Assistant","required":true}]},"GetAssistantAssociation":{"conditionKeys":[],"resources":[{"name":"AssistantAssociation"}],"description":"Grants permission to retrieve information about an assistant association","accessLevel":"Read","resourceTypes":[{"name":"AssistantAssociation","required":true}]},"GetContent":{"conditionKeys":[],"resources":[{"name":"Content"},{"name":"KnowledgeBase"}],"description":"Grants permission to retrieve content, including a pre-signed URL to download the content","accessLevel":"Read","resourceTypes":[{"name":"Content","required":true},{"name":"KnowledgeBase","required":true}]},"GetContentAssociation":{"conditionKeys":[],"resources":[{"name":"Content"},{"name":"ContentAssociation"},{"name":"KnowledgeBase"}],"description":"Grants permission to retrieve information about a content association","accessLevel":"Read","resourceTypes":[{"name":"Content","required":true},{"name":"ContentAssociation","required":true},{"name":"KnowledgeBase","required":true}]},"GetContentSummary":{"conditionKeys":[],"resources":[{"name":"Content"},{"name":"KnowledgeBase"}],"description":"Grants permission to retrieve summary information about the content","accessLevel":"Read","resourceTypes":[{"name":"Content","required":true},{"name":"KnowledgeBase","required":true}]},"GetImportJob":{"conditionKeys":[],"resources":[{"name":"KnowledgeBase"}],"description":"Grants permission to retrieve information about the import job","accessLevel":"Read","resourceTypes":[{"name":"KnowledgeBase","required":true}]},"GetKnowledgeBase":{"conditionKeys":[],"resources":[{"name":"KnowledgeBase"}],"description":"Grants permission to retrieve information about the knowledge base","accessLevel":"Read","resourceTypes":[{"name":"KnowledgeBase","required":true}]},"GetMessageTemplate":{"conditionKeys":["wisdom:MessageTemplate/RoutingProfileArn"],"resources":[{"name":"KnowledgeBase"},{"name":"MessageTemplate"}],"description":"Grants permission to retrieve a message template","accessLevel":"Read","resourceTypes":[{"name":"KnowledgeBase","required":true},{"name":"MessageTemplate","required":true}]},"GetNextMessage":{"conditionKeys":[],"resources":[{"name":"Session"}],"description":"Grants permission to retrieve for next message in a session","accessLevel":"Read","resourceTypes":[{"name":"Session","required":true}]},"GetQuickResponse":{"conditionKeys":[],"resources":[{"name":"KnowledgeBase"},{"name":"QuickResponse"}],"description":"Grants permission to retrieve content","accessLevel":"Read","resourceTypes":[{"name":"KnowledgeBase","required":true},{"name":"QuickResponse","required":true}]},"GetRecommendations":{"conditionKeys":[],"resources":[{"name":"Session"}],"description":"Grants permission to retrieve recommendations for the specified session","accessLevel":"Read","resourceTypes":[{"name":"Session","required":true}]},"GetSession":{"conditionKeys":[],"resources":[{"name":"Session"}],"description":"Grants permission to retrieve information for a specified session","accessLevel":"Read","resourceTypes":[{"name":"Session","required":true}]},"ListAIAgentVersions":{"conditionKeys":[],"resources":[{"name":"AIAgent"}],"description":"Grants permission to list information about ai agent versions","accessLevel":"List","resourceTypes":[{"name":"AIAgent","required":true}]},"ListAIAgents":{"conditionKeys":[],"resources":[],"description":"Grants permission to list information about ai agents","accessLevel":"List","resourceTypes":[]},"ListAIGuardrailVersions":{"conditionKeys":[],"resources":[{"name":"AIGuardrail"}],"description":"Grants permission to list information about ai guardrail versions","accessLevel":"List","resourceTypes":[{"name":"AIGuardrail","required":true}]},"ListAIGuardrails":{"conditionKeys":[],"resources":[],"description":"Grants permission to list information about ai guardrails","accessLevel":"List","resourceTypes":[]},"ListAIPromptVersions":{"conditionKeys":[],"resources":[{"name":"AIPrompt"}],"description":"Grants permission to list information about ai prompt versions","accessLevel":"List","resourceTypes":[{"name":"AIPrompt","required":true}]},"ListAIPrompts":{"conditionKeys":[],"resources":[],"description":"Grants permission to list information about ai prompts","accessLevel":"List","resourceTypes":[]},"ListAssistantAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list information about assistant associations","accessLevel":"List","resourceTypes":[]},"ListAssistants":{"conditionKeys":[],"resources":[],"description":"Grants permission to list information about assistants","accessLevel":"List","resourceTypes":[]},"ListContentAssociations":{"conditionKeys":[],"resources":[{"name":"Content"},{"name":"KnowledgeBase"}],"description":"Grants permission to list information about content associations","accessLevel":"List","resourceTypes":[{"name":"Content","required":true},{"name":"KnowledgeBase","required":true}]},"ListContents":{"conditionKeys":[],"resources":[{"name":"KnowledgeBase"}],"description":"Grants permission to list the content with a knowledge base","accessLevel":"List","resourceTypes":[{"name":"KnowledgeBase","required":true}]},"ListImportJobs":{"conditionKeys":[],"resources":[{"name":"KnowledgeBase"}],"description":"Grants permission to list information about knowledge bases","accessLevel":"List","resourceTypes":[{"name":"KnowledgeBase","required":true}]},"ListKnowledgeBases":{"conditionKeys":[],"resources":[],"description":"Grants permission to list information about knowledge bases","accessLevel":"List","resourceTypes":[]},"ListMessageTemplateVersions":{"conditionKeys":[],"resources":[{"name":"KnowledgeBase"},{"name":"MessageTemplate"}],"description":"Grants permission to list message template versions for the specified message template","accessLevel":"List","resourceTypes":[{"name":"KnowledgeBase","required":true},{"name":"MessageTemplate","required":true}]},"ListMessageTemplates":{"conditionKeys":[],"resources":[{"name":"KnowledgeBase"}],"description":"Grants permission to list the message templates for a knowledge base","accessLevel":"List","resourceTypes":[{"name":"KnowledgeBase","required":true}]},"ListMessages":{"conditionKeys":[],"resources":[{"name":"Session"}],"description":"Grants permission to list messages in a session","accessLevel":"List","resourceTypes":[{"name":"Session","required":true}]},"ListQuickResponses":{"conditionKeys":[],"resources":[{"name":"KnowledgeBase"}],"description":"Grants permission to list the quick response with a knowledge base","accessLevel":"List","resourceTypes":[{"name":"KnowledgeBase","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the tags for the specified resource","accessLevel":"Read","resourceTypes":[]},"NotifyRecommendationsReceived":{"conditionKeys":[],"resources":[{"name":"Session"}],"description":"Grants permission to remove the specified recommendations from the specified assistant's queue of newly available recommendations","accessLevel":"Write","resourceTypes":[{"name":"Session","required":true}]},"PutFeedback":{"conditionKeys":[],"resources":[{"name":"Assistant"}],"description":"Grants permission to submit feedback","accessLevel":"Write","resourceTypes":[{"name":"Assistant","required":true}]},"QueryAssistant":{"conditionKeys":[],"resources":[{"name":"Assistant"}],"description":"Grants permission to perform a manual search against the specified assistant","accessLevel":"Read","resourceTypes":[{"name":"Assistant","required":true}]},"RemoveAssistantAIAgent":{"conditionKeys":[],"resources":[{"name":"Assistant"}],"description":"Grants permission to remove an ai agent from an assistant","accessLevel":"Write","resourceTypes":[{"name":"Assistant","required":true}]},"RemoveKnowledgeBaseTemplateUri":{"conditionKeys":[],"resources":[{"name":"KnowledgeBase"}],"description":"Grants permission to remove a URI template from a knowledge base","accessLevel":"Write","resourceTypes":[{"name":"KnowledgeBase","required":true}]},"RenderMessageTemplate":{"conditionKeys":["wisdom:MessageTemplate/RoutingProfileArn"],"resources":[{"name":"KnowledgeBase"},{"name":"MessageTemplate"}],"description":"Grants permission to render a message template","accessLevel":"Read","resourceTypes":[{"name":"KnowledgeBase","required":true},{"name":"MessageTemplate","required":true}],"dependentActions":["wisdom:GetMessageTemplate"]},"Retrieve":{"conditionKeys":[],"resources":[{"name":"Assistant"}],"description":"Grants permission to retrieve knowledge content from specified assistant associations","accessLevel":"Read","resourceTypes":[{"name":"Assistant","required":true}]},"SearchContent":{"conditionKeys":[],"resources":[{"name":"KnowledgeBase"}],"description":"Grants permission to search for content referencing a specified knowledge base. Can be used to get a specific content resource by its name","accessLevel":"Read","resourceTypes":[{"name":"KnowledgeBase","required":true}]},"SearchMessageTemplates":{"conditionKeys":["wisdom:SearchFilter/Qualifier","wisdom:SearchFilter/RoutingProfileArn"],"resources":[{"name":"KnowledgeBase"}],"description":"Grants permission to search for message templates referencing a specified knowledge base","accessLevel":"Read","resourceTypes":[{"name":"KnowledgeBase","required":true}]},"SearchQuickResponses":{"conditionKeys":["wisdom:SearchFilter/RoutingProfileArn"],"resources":[{"name":"KnowledgeBase"}],"description":"Grants permission to search for quick response referencing a specified knowledge base","accessLevel":"Read","resourceTypes":[{"name":"KnowledgeBase","required":true}],"dependentActions":["wisdom:GetQuickResponse"]},"SearchSessions":{"conditionKeys":[],"resources":[],"description":"Grants permission to search for sessions referencing a specified assistant. Can be used to et a specific session resource by its name","accessLevel":"Read","resourceTypes":[]},"SendMessage":{"conditionKeys":[],"resources":[{"name":"Session"}],"description":"Grants permission to send a message","accessLevel":"Write","resourceTypes":[{"name":"Session","required":true}]},"StartContentUpload":{"conditionKeys":[],"resources":[{"name":"KnowledgeBase"}],"description":"Grants permission to get a URL to upload content to a knowledge base","accessLevel":"Write","resourceTypes":[{"name":"KnowledgeBase","required":true}]},"StartImportJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"KnowledgeBase"}],"description":"Grants permission to create multiple quick responses","accessLevel":"Write","resourceTypes":[{"name":"KnowledgeBase","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Assistant"},{"name":"AssistantAssociation"},{"name":"Content"},{"name":"ContentAssociation"},{"name":"KnowledgeBase"},{"name":"MessageTemplate"},{"name":"QuickResponse"},{"name":"Session"}],"description":"Grants permission to add the specified tags to the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"Assistant","required":false},{"name":"AssistantAssociation","required":false},{"name":"Content","required":false},{"name":"ContentAssociation","required":false},{"name":"KnowledgeBase","required":false},{"name":"MessageTemplate","required":false},{"name":"QuickResponse","required":false},{"name":"Session","required":false}]},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Assistant"},{"name":"AssistantAssociation"},{"name":"Content"},{"name":"ContentAssociation"},{"name":"KnowledgeBase"},{"name":"MessageTemplate"},{"name":"QuickResponse"},{"name":"Session"}],"description":"Grants permission to remove the specified tags from the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"Assistant","required":false},{"name":"AssistantAssociation","required":false},{"name":"Content","required":false},{"name":"ContentAssociation","required":false},{"name":"KnowledgeBase","required":false},{"name":"MessageTemplate","required":false},{"name":"QuickResponse","required":false},{"name":"Session","required":false}]},"UpdateAIAgent":{"conditionKeys":[],"resources":[{"name":"AIAgent"}],"description":"Grants permission to update information about an ai agent","accessLevel":"Write","resourceTypes":[{"name":"AIAgent","required":true}]},"UpdateAIGuardrail":{"conditionKeys":[],"resources":[{"name":"AIGuardrail"}],"description":"Grants permission to update information about an ai guardrail","accessLevel":"Write","resourceTypes":[{"name":"AIGuardrail","required":true}]},"UpdateAIPrompt":{"conditionKeys":[],"resources":[{"name":"AIPrompt"}],"description":"Grants permission to update information about an ai prompt","accessLevel":"Write","resourceTypes":[{"name":"AIPrompt","required":true}]},"UpdateAssistantAIAgent":{"conditionKeys":[],"resources":[{"name":"Assistant"}],"description":"Grants permission to update assistant information about an ai agent","accessLevel":"Write","resourceTypes":[{"name":"Assistant","required":true}]},"UpdateContent":{"conditionKeys":[],"resources":[{"name":"Content"},{"name":"KnowledgeBase"}],"description":"Grants permission to update information about the content","accessLevel":"Write","resourceTypes":[{"name":"Content","required":true},{"name":"KnowledgeBase","required":true}]},"UpdateKnowledgeBaseTemplateUri":{"conditionKeys":[],"resources":[{"name":"KnowledgeBase"}],"description":"Grants permission to update the template URI of a knowledge base","accessLevel":"Write","resourceTypes":[{"name":"KnowledgeBase","required":true}]},"UpdateMessageTemplate":{"conditionKeys":[],"resources":[{"name":"KnowledgeBase"},{"name":"MessageTemplate"}],"description":"Grants permission to update content of the message template","accessLevel":"Write","resourceTypes":[{"name":"KnowledgeBase","required":true},{"name":"MessageTemplate","required":true}]},"UpdateMessageTemplateMetadata":{"conditionKeys":[],"resources":[{"name":"KnowledgeBase"},{"name":"MessageTemplate"}],"description":"Grants permission to update metadata of the message template","accessLevel":"Write","resourceTypes":[{"name":"KnowledgeBase","required":true},{"name":"MessageTemplate","required":true}]},"UpdateQuickResponse":{"conditionKeys":[],"resources":[{"name":"KnowledgeBase"},{"name":"QuickResponse"}],"description":"Grants permission to update information or content of the quick response","accessLevel":"Write","resourceTypes":[{"name":"KnowledgeBase","required":true},{"name":"QuickResponse","required":true}]},"UpdateSession":{"conditionKeys":[],"resources":[{"name":"Session"}],"description":"Grants permission to update a session","accessLevel":"Write","resourceTypes":[{"name":"Session","required":true}]},"UpdateSessionData":{"conditionKeys":[],"resources":[{"name":"Session"}],"description":"Grants permission to update data stored in a session","accessLevel":"Write","resourceTypes":[{"name":"Session","required":true}]}},"resources":[{"name":"AIAgent","arnFormats":["arn:${Partition}:wisdom:${Region}:${Account}:ai-agent/${AssistantId}/${AIAgentId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"AIGuardrail","arnFormats":["arn:${Partition}:wisdom:${Region}:${Account}:ai-guardrail/${AssistantId}/${AIGuardrailId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"AIPrompt","arnFormats":["arn:${Partition}:wisdom:${Region}:${Account}:ai-prompt/${AssistantId}/${AIPromptId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Assistant","arnFormats":["arn:${Partition}:wisdom:${Region}:${Account}:assistant/${AssistantId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"AssistantAssociation","arnFormats":["arn:${Partition}:wisdom:${Region}:${Account}:association/${AssistantId}/${AssistantAssociationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Content","arnFormats":["arn:${Partition}:wisdom:${Region}:${Account}:content/${KnowledgeBaseId}/${ContentId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"ContentAssociation","arnFormats":["arn:${Partition}:wisdom:${Region}:${Account}:content-association/${KnowledgeBaseId}/${ContentId}/${ContentAssociationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"KnowledgeBase","arnFormats":["arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/${KnowledgeBaseId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"MessageTemplate","arnFormats":["arn:${Partition}:wisdom:${Region}:${Account}:message-template/${KnowledgeBaseId}/${MessageTemplateId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","wisdom:MessageTemplate/RoutingProfileArn"]},{"name":"QuickResponse","arnFormats":["arn:${Partition}:wisdom:${Region}:${Account}:quick-response/${KnowledgeBaseId}/${QuickResponseId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Session","arnFormats":["arn:${Partition}:wisdom:${Region}:${Account}:session/${AssistantId}/${SessionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"wisdom:MessageTemplate/RoutingProfileArn":{"types":["ArrayOfARN"],"description":"Filters access by the connect routing profile arns associated with the resource"},"wisdom:SearchFilter/Qualifier":{"types":["ArrayOfString"],"description":"Filters access by the qualifiers that are passed in the request"},"wisdom:SearchFilter/RoutingProfileArn":{"types":["ARN"],"description":"Filters access by the connect routing profile arn that is passed in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"workdocs","actions":{"AbortDocumentVersionUpload":{"conditionKeys":[],"resources":[],"description":"Grants permission to abort the upload of the specified document version that was previously initiated by InitiateDocumentVersionUpload","accessLevel":"Write","resourceTypes":[]},"ActivateUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to activate the specified user. Only active users can access Amazon WorkDocs","accessLevel":"Write","resourceTypes":[]},"AddNotificationPermissions":{"conditionKeys":[],"resources":[],"description":"Grants permission to add principals that are allowed to call notification subscription APIs for a given WorkDocs site","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"AddResourcePermissions":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a set of permissions for the specified folder or document","accessLevel":"Write","resourceTypes":[]},"AddUserToGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to add a user to a group","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CheckAlias":{"conditionKeys":[],"resources":[],"description":"Grants permission to check an alias","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"CreateComment":{"conditionKeys":[],"resources":[],"description":"Grants permission to add a new comment to the specified document version","accessLevel":"Write","resourceTypes":[]},"CreateCustomMetadata":{"conditionKeys":[],"resources":[],"description":"Grants permission to add one or more custom properties to the specified resource","accessLevel":"Write","resourceTypes":[]},"CreateFolder":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a folder with the specified name and parent folder","accessLevel":"Write","resourceTypes":[]},"CreateInstance":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an instance","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CreateLabels":{"conditionKeys":[],"resources":[],"description":"Grants permission to add labels to the given resource","accessLevel":"Write","resourceTypes":[]},"CreateNotificationSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to configure WorkDocs to use Amazon SNS notifications","accessLevel":"Write","resourceTypes":[]},"CreateUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a user in a Simple AD or Microsoft AD directory","accessLevel":"Write","resourceTypes":[]},"DeactivateUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to deactivate the specified user, which revokes the user's access to Amazon WorkDocs","accessLevel":"Write","resourceTypes":[]},"DeleteComment":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the specified comment from the document version","accessLevel":"Write","resourceTypes":[]},"DeleteCustomMetadata":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete custom metadata from the specified resource","accessLevel":"Write","resourceTypes":[]},"DeleteDocument":{"conditionKeys":[],"resources":[],"description":"Grants permission to permanently delete the specified document and its associated metadata","accessLevel":"Write","resourceTypes":[]},"DeleteDocumentVersion":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete versions of a specified document","accessLevel":"Write","resourceTypes":[]},"DeleteFolder":{"conditionKeys":[],"resources":[],"description":"Grants permission to permanently delete the specified folder and its contents","accessLevel":"Write","resourceTypes":[]},"DeleteFolderContents":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the contents of the specified folder","accessLevel":"Write","resourceTypes":[]},"DeleteInstance":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete an instance","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"DeleteLabels":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete one or more labels from a resource","accessLevel":"Write","resourceTypes":[]},"DeleteNotificationPermissions":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete principals that are allowed to call notification subscription APIs for a given WorkDocs site","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"DeleteNotificationSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the specified subscription from the specified organization","accessLevel":"Write","resourceTypes":[]},"DeleteUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the specified user from a Simple AD or Microsoft AD directory","accessLevel":"Write","resourceTypes":[]},"DeregisterDirectory":{"conditionKeys":[],"resources":[],"description":"Grants permission to deregister a directory","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"DescribeActivities":{"conditionKeys":[],"resources":[],"description":"Grants permission to fetch user activities in a specified time period","accessLevel":"List","resourceTypes":[]},"DescribeAvailableDirectories":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe available directories","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"DescribeComments":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the comments for the specified document version","accessLevel":"List","resourceTypes":[]},"DescribeDocumentVersions":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the document versions for the specified document","accessLevel":"List","resourceTypes":[]},"DescribeFolderContents":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the contents of the specified folder, including its documents and sub-folders","accessLevel":"List","resourceTypes":[]},"DescribeGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the user groups","accessLevel":"List","resourceTypes":[]},"DescribeInstanceExports":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the export history for an instance","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"DescribeInstances":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe instances","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"DescribeNotificationPermissions":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe principals that are allowed to call notification subscription APIs for a given WorkDocs site","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"DescribeNotificationSubscriptions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the specified notification subscriptions","accessLevel":"List","resourceTypes":[]},"DescribeResourcePermissions":{"conditionKeys":[],"resources":[],"description":"Grants permission to view a description of a specified resource's permissions","accessLevel":"List","resourceTypes":[]},"DescribeRootFolders":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the root folders","accessLevel":"List","resourceTypes":[]},"DescribeUsers":{"conditionKeys":[],"resources":[],"description":"Grants permission to view a description of the specified users. You can describe all users or filter the results (for example, by status or organization)","accessLevel":"List","resourceTypes":[]},"DownloadDocumentVersion":{"conditionKeys":[],"resources":[],"description":"Grants permission to download a specified document version","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetCurrentUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the details of the current user","accessLevel":"Read","resourceTypes":[]},"GetDocument":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the specified document object","accessLevel":"Read","resourceTypes":[]},"GetDocumentPath":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the path information (the hierarchy from the root folder) for the requested document","accessLevel":"Read","resourceTypes":[]},"GetDocumentVersion":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve version metadata for the specified document","accessLevel":"Read","resourceTypes":[]},"GetFolder":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the metadata of the specified folder","accessLevel":"Read","resourceTypes":[]},"GetFolderPath":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the path information (the hierarchy from the root folder) for the specified folder","accessLevel":"Read","resourceTypes":[]},"GetGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve details for the specified group","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetResources":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a collection of resources","accessLevel":"Read","resourceTypes":[]},"InitiateDocumentVersionUpload":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new document object and version object","accessLevel":"Write","resourceTypes":[]},"RegisterDirectory":{"conditionKeys":[],"resources":[],"description":"Grants permission to register a directory","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"RemoveAllResourcePermissions":{"conditionKeys":[],"resources":[],"description":"Grants permission to remove all the permissions from the specified resource","accessLevel":"Write","resourceTypes":[]},"RemoveResourcePermission":{"conditionKeys":[],"resources":[],"description":"Grants permission to remove the permission for the specified principal from the specified resource","accessLevel":"Write","resourceTypes":[]},"RestoreDocumentVersions":{"conditionKeys":[],"resources":[],"description":"Grants permission to restore versions of a specified document","accessLevel":"Write","resourceTypes":[]},"SearchResources":{"conditionKeys":[],"resources":[],"description":"Grants permission to search metadata and the content of resources","accessLevel":"List","resourceTypes":[]},"StartInstanceExport":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to start an export for an instance","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true},"UpdateDocument":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the specified attributes of the specified document","accessLevel":"Write","resourceTypes":[]},"UpdateDocumentVersion":{"conditionKeys":[],"resources":[],"description":"Grants permission to change the status of the document version to ACTIVE","accessLevel":"Write","resourceTypes":[]},"UpdateFolder":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the specified attributes of the specified folder","accessLevel":"Write","resourceTypes":[]},"UpdateInstanceAlias":{"conditionKeys":[],"resources":[],"description":"Grants permission to update an instance alias","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"UpdateUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the specified attributes of the specified user, and grants or revokes administrative privileges to the Amazon WorkDocs site","accessLevel":"Write","resourceTypes":[]},"UpdateUserAdministrativeSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the administrative settings for a user","accessLevel":"Write","resourceTypes":[],"permissionOnly":true}},"resources":[{"name":"organization","arnFormats":["arn:${Partition}:workdocs:${Region}:${Account}:organization/${ResourceId}"],"conditionKeys":[]}],"conditionKeys":{}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"worklink","actions":{"AssociateDomain":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to associate a domain with an Amazon WorkLink fleet","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true}]},"AssociateWebsiteAuthorizationProvider":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to associate a website authorization provider with an Amazon WorkLink fleet","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true}]},"AssociateWebsiteCertificateAuthority":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to associate a website certificate authority with an Amazon WorkLink fleet","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true}]},"CreateFleet":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an Amazon WorkLink fleet","accessLevel":"Write","resourceTypes":[]},"DeleteFleet":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"fleet"}],"description":"Grants permission to delete an Amazon WorkLink fleet","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true}]},"DescribeAuditStreamConfiguration":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to describe the audit stream configuration for an Amazon WorkLink fleet","accessLevel":"Read","resourceTypes":[{"name":"fleet","required":true}]},"DescribeCompanyNetworkConfiguration":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to describe the company network configuration for an Amazon WorkLink fleet","accessLevel":"Read","resourceTypes":[{"name":"fleet","required":true}]},"DescribeDevice":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to describe details of a device associated with an Amazon WorkLink fleet","accessLevel":"Read","resourceTypes":[{"name":"fleet","required":true}]},"DescribeDevicePolicyConfiguration":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to describe the device policy configuration for an Amazon WorkLink fleet","accessLevel":"Read","resourceTypes":[{"name":"fleet","required":true}]},"DescribeDomain":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to describe details about a domain associated with an Amazon WorkLink fleet","accessLevel":"Read","resourceTypes":[{"name":"fleet","required":true}]},"DescribeFleetMetadata":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"fleet"}],"description":"Grants permission to describe metadata of an Amazon WorkLink fleet","accessLevel":"Read","resourceTypes":[{"name":"fleet","required":true}]},"DescribeIdentityProviderConfiguration":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to describe the identity provider configuration for an Amazon WorkLink fleet","accessLevel":"Read","resourceTypes":[{"name":"fleet","required":true}]},"DescribeWebsiteCertificateAuthority":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to describe a website certificate authority associated with an Amazon WorkLink fleet","accessLevel":"Read","resourceTypes":[{"name":"fleet","required":true}]},"DisassociateDomain":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to disassociate a domain from an Amazon WorkLink fleet","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true}]},"DisassociateWebsiteAuthorizationProvider":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to disassociate a website authorization provider from an Amazon WorkLink fleet","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true}]},"DisassociateWebsiteCertificateAuthority":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to disassociate a website certificate authority from an Amazon WorkLink fleet","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true}]},"ListDevices":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to list the devices associated with an Amazon WorkLink fleet","accessLevel":"List","resourceTypes":[{"name":"fleet","required":true}]},"ListDomains":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to list the associated domains for an Amazon WorkLink fleet","accessLevel":"List","resourceTypes":[{"name":"fleet","required":true}]},"ListFleets":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the Amazon WorkLink fleets associated with the account","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to list tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"fleet","required":true}]},"ListWebsiteAuthorizationProviders":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to list the website authorization providers for an Amazon WorkLink fleet","accessLevel":"List","resourceTypes":[{"name":"fleet","required":true}]},"ListWebsiteCertificateAuthorities":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to list the website certificate authorities associated with an Amazon WorkLink fleet","accessLevel":"List","resourceTypes":[{"name":"fleet","required":true}]},"RestoreDomainAccess":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to restore access to a domain associated with an Amazon WorkLink fleet","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true}]},"RevokeDomainAccess":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to revoke access to a domain associated with an Amazon WorkLink fleet","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true}]},"SearchEntity":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to list devices for an Amazon WorkLink fleet","accessLevel":"List","resourceTypes":[{"name":"fleet","required":true}],"permissionOnly":true},"SignOutUser":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to sign out a user from an Amazon WorkLink fleet","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"fleet"}],"description":"Grants permission to add one or more tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"fleet","required":true}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"fleet"}],"description":"Grants permission to remove one or more tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"fleet","required":true}]},"UpdateAuditStreamConfiguration":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to update the audit stream configuration for an Amazon WorkLink fleet","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true}]},"UpdateCompanyNetworkConfiguration":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to update the company network configuration for an Amazon WorkLink fleet","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true}]},"UpdateDevicePolicyConfiguration":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to update the device policy configuration for an Amazon WorkLink fleet","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true}]},"UpdateDomainMetadata":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to update the metadata for a domain associated with an Amazon WorkLink fleet","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true}]},"UpdateFleetMetadata":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to update the metadata of an Amazon WorkLink fleet","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true}]},"UpdateIdentityProviderConfiguration":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to update the identity provider configuration for an Amazon WorkLink fleet","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true}]}},"resources":[{"name":"fleet","arnFormats":["arn:${Partition}:worklink::${Account}:fleet/${FleetName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters actions based on the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters actions based on tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters actions based on the presence of tag keys in the request"}}}
|