aws-iam-ls 0.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (522) hide show
  1. package/.direnv/bin/nix-direnv-reload +19 -0
  2. package/.direnv/flake-profile-a5d5b61aa8a61b7d9d765e1daf971a9a578f1cfa.rc +2156 -0
  3. package/.github/workflows/publish.yml +37 -0
  4. package/.github/workflows/test.yml +16 -0
  5. package/.vscodeignore +17 -0
  6. package/LICENSE +21 -0
  7. package/package.json +53 -0
  8. package/readme.md +25 -0
  9. package/src/data/condition-keys/global.json +362 -0
  10. package/src/data/servicereference/actions.json +1 -0
  11. package/src/data/servicereference/service-principals.json +1 -0
  12. package/src/data/servicereference/services/a2c.json +1 -0
  13. package/src/data/servicereference/services/a4b.json +1 -0
  14. package/src/data/servicereference/services/access-analyzer.json +1 -0
  15. package/src/data/servicereference/services/account.json +1 -0
  16. package/src/data/servicereference/services/acm-pca.json +1 -0
  17. package/src/data/servicereference/services/acm.json +1 -0
  18. package/src/data/servicereference/services/aco-automation.json +1 -0
  19. package/src/data/servicereference/services/action-recommendations.json +1 -0
  20. package/src/data/servicereference/services/activate.json +1 -0
  21. package/src/data/servicereference/services/aidevops.json +1 -0
  22. package/src/data/servicereference/services/aiops.json +1 -0
  23. package/src/data/servicereference/services/airflow-serverless.json +1 -0
  24. package/src/data/servicereference/services/airflow.json +1 -0
  25. package/src/data/servicereference/services/amplify.json +1 -0
  26. package/src/data/servicereference/services/amplifybackend.json +1 -0
  27. package/src/data/servicereference/services/amplifyuibuilder.json +1 -0
  28. package/src/data/servicereference/services/aoss.json +1 -0
  29. package/src/data/servicereference/services/apigateway.json +1 -0
  30. package/src/data/servicereference/services/app-integrations.json +1 -0
  31. package/src/data/servicereference/services/appconfig.json +1 -0
  32. package/src/data/servicereference/services/appfabric.json +1 -0
  33. package/src/data/servicereference/services/appflow.json +1 -0
  34. package/src/data/servicereference/services/application-autoscaling.json +1 -0
  35. package/src/data/servicereference/services/application-signals.json +1 -0
  36. package/src/data/servicereference/services/application-transformation.json +1 -0
  37. package/src/data/servicereference/services/applicationinsights.json +1 -0
  38. package/src/data/servicereference/services/appmesh-preview.json +1 -0
  39. package/src/data/servicereference/services/appmesh.json +1 -0
  40. package/src/data/servicereference/services/apprunner.json +1 -0
  41. package/src/data/servicereference/services/appstream.json +1 -0
  42. package/src/data/servicereference/services/appstudio.json +1 -0
  43. package/src/data/servicereference/services/appsync.json +1 -0
  44. package/src/data/servicereference/services/apptest.json +1 -0
  45. package/src/data/servicereference/services/aps.json +1 -0
  46. package/src/data/servicereference/services/arc-region-switch.json +1 -0
  47. package/src/data/servicereference/services/arc-zonal-shift.json +1 -0
  48. package/src/data/servicereference/services/arsenal.json +1 -0
  49. package/src/data/servicereference/services/artifact.json +1 -0
  50. package/src/data/servicereference/services/athena.json +1 -0
  51. package/src/data/servicereference/services/auditmanager.json +1 -0
  52. package/src/data/servicereference/services/autoscaling-plans.json +1 -0
  53. package/src/data/servicereference/services/autoscaling.json +1 -0
  54. package/src/data/servicereference/services/aws-marketplace-management.json +1 -0
  55. package/src/data/servicereference/services/aws-marketplace.json +1 -0
  56. package/src/data/servicereference/services/aws-mcp.json +1 -0
  57. package/src/data/servicereference/services/aws-portal.json +1 -0
  58. package/src/data/servicereference/services/awsconnector.json +1 -0
  59. package/src/data/servicereference/services/b2bi.json +1 -0
  60. package/src/data/servicereference/services/backup-gateway.json +1 -0
  61. package/src/data/servicereference/services/backup-search.json +1 -0
  62. package/src/data/servicereference/services/backup-storage.json +1 -0
  63. package/src/data/servicereference/services/backup.json +1 -0
  64. package/src/data/servicereference/services/batch.json +1 -0
  65. package/src/data/servicereference/services/bcm-dashboards.json +1 -0
  66. package/src/data/servicereference/services/bcm-data-exports.json +1 -0
  67. package/src/data/servicereference/services/bcm-pricing-calculator.json +1 -0
  68. package/src/data/servicereference/services/bcm-recommended-actions.json +1 -0
  69. package/src/data/servicereference/services/bedrock-agentcore.json +1 -0
  70. package/src/data/servicereference/services/bedrock-mantle.json +1 -0
  71. package/src/data/servicereference/services/bedrock.json +1 -0
  72. package/src/data/servicereference/services/billing.json +1 -0
  73. package/src/data/servicereference/services/billingconductor.json +1 -0
  74. package/src/data/servicereference/services/braket.json +1 -0
  75. package/src/data/servicereference/services/budgets.json +1 -0
  76. package/src/data/servicereference/services/bugbust.json +1 -0
  77. package/src/data/servicereference/services/cases.json +1 -0
  78. package/src/data/servicereference/services/cassandra.json +1 -0
  79. package/src/data/servicereference/services/ce.json +1 -0
  80. package/src/data/servicereference/services/chatbot.json +1 -0
  81. package/src/data/servicereference/services/chime.json +1 -0
  82. package/src/data/servicereference/services/cleanrooms-ml.json +1 -0
  83. package/src/data/servicereference/services/cleanrooms.json +1 -0
  84. package/src/data/servicereference/services/cloud9.json +1 -0
  85. package/src/data/servicereference/services/clouddirectory.json +1 -0
  86. package/src/data/servicereference/services/cloudformation.json +1 -0
  87. package/src/data/servicereference/services/cloudfront-keyvaluestore.json +1 -0
  88. package/src/data/servicereference/services/cloudfront.json +1 -0
  89. package/src/data/servicereference/services/cloudhsm.json +1 -0
  90. package/src/data/servicereference/services/cloudsearch.json +1 -0
  91. package/src/data/servicereference/services/cloudshell.json +1 -0
  92. package/src/data/servicereference/services/cloudtrail-data.json +1 -0
  93. package/src/data/servicereference/services/cloudtrail.json +1 -0
  94. package/src/data/servicereference/services/cloudwatch.json +1 -0
  95. package/src/data/servicereference/services/codeartifact.json +1 -0
  96. package/src/data/servicereference/services/codebuild.json +1 -0
  97. package/src/data/servicereference/services/codecatalyst.json +1 -0
  98. package/src/data/servicereference/services/codecommit.json +1 -0
  99. package/src/data/servicereference/services/codeconnections.json +1 -0
  100. package/src/data/servicereference/services/codedeploy-commands-secure.json +1 -0
  101. package/src/data/servicereference/services/codedeploy.json +1 -0
  102. package/src/data/servicereference/services/codeguru-profiler.json +1 -0
  103. package/src/data/servicereference/services/codeguru-reviewer.json +1 -0
  104. package/src/data/servicereference/services/codeguru-security.json +1 -0
  105. package/src/data/servicereference/services/codeguru.json +1 -0
  106. package/src/data/servicereference/services/codepipeline.json +1 -0
  107. package/src/data/servicereference/services/codestar-connections.json +1 -0
  108. package/src/data/servicereference/services/codestar-notifications.json +1 -0
  109. package/src/data/servicereference/services/codestar.json +1 -0
  110. package/src/data/servicereference/services/codewhisperer.json +1 -0
  111. package/src/data/servicereference/services/cognito-identity.json +1 -0
  112. package/src/data/servicereference/services/cognito-idp.json +1 -0
  113. package/src/data/servicereference/services/cognito-sync.json +1 -0
  114. package/src/data/servicereference/services/comprehend.json +1 -0
  115. package/src/data/servicereference/services/comprehendmedical.json +1 -0
  116. package/src/data/servicereference/services/compute-optimizer.json +1 -0
  117. package/src/data/servicereference/services/config.json +1 -0
  118. package/src/data/servicereference/services/connect-campaigns.json +1 -0
  119. package/src/data/servicereference/services/connect.json +1 -0
  120. package/src/data/servicereference/services/consoleapp.json +1 -0
  121. package/src/data/servicereference/services/consolidatedbilling.json +1 -0
  122. package/src/data/servicereference/services/controlcatalog.json +1 -0
  123. package/src/data/servicereference/services/controltower.json +1 -0
  124. package/src/data/servicereference/services/cost-optimization-hub.json +1 -0
  125. package/src/data/servicereference/services/cur.json +1 -0
  126. package/src/data/servicereference/services/customer-verification.json +1 -0
  127. package/src/data/servicereference/services/databrew.json +1 -0
  128. package/src/data/servicereference/services/dataexchange.json +1 -0
  129. package/src/data/servicereference/services/datapipeline.json +1 -0
  130. package/src/data/servicereference/services/datasync.json +1 -0
  131. package/src/data/servicereference/services/datazone.json +1 -0
  132. package/src/data/servicereference/services/dax.json +1 -0
  133. package/src/data/servicereference/services/dbqms.json +1 -0
  134. package/src/data/servicereference/services/deadline.json +1 -0
  135. package/src/data/servicereference/services/detective.json +1 -0
  136. package/src/data/servicereference/services/devicefarm.json +1 -0
  137. package/src/data/servicereference/services/devops-guru.json +1 -0
  138. package/src/data/servicereference/services/directconnect.json +1 -0
  139. package/src/data/servicereference/services/discovery.json +1 -0
  140. package/src/data/servicereference/services/dlm.json +1 -0
  141. package/src/data/servicereference/services/dms.json +1 -0
  142. package/src/data/servicereference/services/docdb-elastic.json +1 -0
  143. package/src/data/servicereference/services/drs.json +1 -0
  144. package/src/data/servicereference/services/ds-data.json +1 -0
  145. package/src/data/servicereference/services/ds.json +1 -0
  146. package/src/data/servicereference/services/dsql.json +1 -0
  147. package/src/data/servicereference/services/dynamodb.json +1 -0
  148. package/src/data/servicereference/services/ebs.json +1 -0
  149. package/src/data/servicereference/services/ec2-instance-connect.json +1 -0
  150. package/src/data/servicereference/services/ec2.json +1 -0
  151. package/src/data/servicereference/services/ec2messages.json +1 -0
  152. package/src/data/servicereference/services/ecr-public.json +1 -0
  153. package/src/data/servicereference/services/ecr.json +1 -0
  154. package/src/data/servicereference/services/ecs-mcp.json +1 -0
  155. package/src/data/servicereference/services/ecs.json +1 -0
  156. package/src/data/servicereference/services/eks-auth.json +1 -0
  157. package/src/data/servicereference/services/eks-mcp.json +1 -0
  158. package/src/data/servicereference/services/eks.json +1 -0
  159. package/src/data/servicereference/services/elasticache.json +1 -0
  160. package/src/data/servicereference/services/elasticbeanstalk.json +1 -0
  161. package/src/data/servicereference/services/elasticfilesystem.json +1 -0
  162. package/src/data/servicereference/services/elasticloadbalancing.json +1 -0
  163. package/src/data/servicereference/services/elasticmapreduce.json +1 -0
  164. package/src/data/servicereference/services/elastictranscoder.json +1 -0
  165. package/src/data/servicereference/services/elemental-activations.json +1 -0
  166. package/src/data/servicereference/services/elemental-appliances-software.json +1 -0
  167. package/src/data/servicereference/services/elemental-inference.json +1 -0
  168. package/src/data/servicereference/services/elemental-support-cases.json +1 -0
  169. package/src/data/servicereference/services/elemental-support-content.json +1 -0
  170. package/src/data/servicereference/services/emr-containers.json +1 -0
  171. package/src/data/servicereference/services/emr-serverless.json +1 -0
  172. package/src/data/servicereference/services/entityresolution.json +1 -0
  173. package/src/data/servicereference/services/es.json +1 -0
  174. package/src/data/servicereference/services/events.json +1 -0
  175. package/src/data/servicereference/services/evidently.json +1 -0
  176. package/src/data/servicereference/services/evs.json +1 -0
  177. package/src/data/servicereference/services/execute-api.json +1 -0
  178. package/src/data/servicereference/services/finspace-api.json +1 -0
  179. package/src/data/servicereference/services/finspace.json +1 -0
  180. package/src/data/servicereference/services/firehose.json +1 -0
  181. package/src/data/servicereference/services/fis.json +1 -0
  182. package/src/data/servicereference/services/fms.json +1 -0
  183. package/src/data/servicereference/services/forecast.json +1 -0
  184. package/src/data/servicereference/services/frauddetector.json +1 -0
  185. package/src/data/servicereference/services/freertos.json +1 -0
  186. package/src/data/servicereference/services/freetier.json +1 -0
  187. package/src/data/servicereference/services/fsx.json +1 -0
  188. package/src/data/servicereference/services/gamelift.json +1 -0
  189. package/src/data/servicereference/services/gameliftstreams.json +1 -0
  190. package/src/data/servicereference/services/geo-maps.json +1 -0
  191. package/src/data/servicereference/services/geo-places.json +1 -0
  192. package/src/data/servicereference/services/geo-routes.json +1 -0
  193. package/src/data/servicereference/services/geo.json +1 -0
  194. package/src/data/servicereference/services/glacier.json +1 -0
  195. package/src/data/servicereference/services/globalaccelerator.json +1 -0
  196. package/src/data/servicereference/services/glue.json +1 -0
  197. package/src/data/servicereference/services/grafana.json +1 -0
  198. package/src/data/servicereference/services/greengrass.json +1 -0
  199. package/src/data/servicereference/services/groundstation.json +1 -0
  200. package/src/data/servicereference/services/groundtruthlabeling.json +1 -0
  201. package/src/data/servicereference/services/guardduty.json +1 -0
  202. package/src/data/servicereference/services/health-agent.json +1 -0
  203. package/src/data/servicereference/services/health.json +1 -0
  204. package/src/data/servicereference/services/healthlake.json +1 -0
  205. package/src/data/servicereference/services/honeycode.json +1 -0
  206. package/src/data/servicereference/services/iam.json +1 -0
  207. package/src/data/servicereference/services/identity-sync.json +1 -0
  208. package/src/data/servicereference/services/identitystore-auth.json +1 -0
  209. package/src/data/servicereference/services/identitystore.json +1 -0
  210. package/src/data/servicereference/services/imagebuilder.json +1 -0
  211. package/src/data/servicereference/services/importexport.json +1 -0
  212. package/src/data/servicereference/services/inspector-scan.json +1 -0
  213. package/src/data/servicereference/services/inspector.json +1 -0
  214. package/src/data/servicereference/services/inspector2-telemetry.json +1 -0
  215. package/src/data/servicereference/services/inspector2.json +1 -0
  216. package/src/data/servicereference/services/interconnect.json +1 -0
  217. package/src/data/servicereference/services/internetmonitor.json +1 -0
  218. package/src/data/servicereference/services/invoicing.json +1 -0
  219. package/src/data/servicereference/services/iot-device-tester.json +1 -0
  220. package/src/data/servicereference/services/iot.json +1 -0
  221. package/src/data/servicereference/services/iotanalytics.json +1 -0
  222. package/src/data/servicereference/services/iotdeviceadvisor.json +1 -0
  223. package/src/data/servicereference/services/iotevents.json +1 -0
  224. package/src/data/servicereference/services/iotfleethub.json +1 -0
  225. package/src/data/servicereference/services/iotfleetwise.json +1 -0
  226. package/src/data/servicereference/services/iotjobsdata.json +1 -0
  227. package/src/data/servicereference/services/iotmanagedintegrations.json +1 -0
  228. package/src/data/servicereference/services/iotsitewise.json +1 -0
  229. package/src/data/servicereference/services/iottwinmaker.json +1 -0
  230. package/src/data/servicereference/services/iotwireless.json +1 -0
  231. package/src/data/servicereference/services/iq-permission.json +1 -0
  232. package/src/data/servicereference/services/iq.json +1 -0
  233. package/src/data/servicereference/services/ivs.json +1 -0
  234. package/src/data/servicereference/services/ivschat.json +1 -0
  235. package/src/data/servicereference/services/kafka-cluster.json +1 -0
  236. package/src/data/servicereference/services/kafka.json +1 -0
  237. package/src/data/servicereference/services/kafkaconnect.json +1 -0
  238. package/src/data/servicereference/services/kendra-ranking.json +1 -0
  239. package/src/data/servicereference/services/kendra.json +1 -0
  240. package/src/data/servicereference/services/kinesis.json +1 -0
  241. package/src/data/servicereference/services/kinesisanalytics.json +1 -0
  242. package/src/data/servicereference/services/kinesisvideo.json +1 -0
  243. package/src/data/servicereference/services/kms.json +1 -0
  244. package/src/data/servicereference/services/lakeformation.json +1 -0
  245. package/src/data/servicereference/services/lambda.json +1 -0
  246. package/src/data/servicereference/services/launchwizard.json +1 -0
  247. package/src/data/servicereference/services/lex.json +1 -0
  248. package/src/data/servicereference/services/license-manager-linux-subscriptions.json +1 -0
  249. package/src/data/servicereference/services/license-manager-user-subscriptions.json +1 -0
  250. package/src/data/servicereference/services/license-manager.json +1 -0
  251. package/src/data/servicereference/services/lightsail.json +1 -0
  252. package/src/data/servicereference/services/logs.json +1 -0
  253. package/src/data/servicereference/services/lookoutequipment.json +1 -0
  254. package/src/data/servicereference/services/lookoutmetrics.json +1 -0
  255. package/src/data/servicereference/services/lookoutvision.json +1 -0
  256. package/src/data/servicereference/services/m2.json +1 -0
  257. package/src/data/servicereference/services/machinelearning.json +1 -0
  258. package/src/data/servicereference/services/macie2.json +1 -0
  259. package/src/data/servicereference/services/managedblockchain-query.json +1 -0
  260. package/src/data/servicereference/services/managedblockchain.json +1 -0
  261. package/src/data/servicereference/services/mapcredits.json +1 -0
  262. package/src/data/servicereference/services/marketplacecommerceanalytics.json +1 -0
  263. package/src/data/servicereference/services/mechanicalturk.json +1 -0
  264. package/src/data/servicereference/services/mediaconnect.json +1 -0
  265. package/src/data/servicereference/services/mediaconvert.json +1 -0
  266. package/src/data/servicereference/services/mediaimport.json +1 -0
  267. package/src/data/servicereference/services/medialive.json +1 -0
  268. package/src/data/servicereference/services/mediapackage-vod.json +1 -0
  269. package/src/data/servicereference/services/mediapackage.json +1 -0
  270. package/src/data/servicereference/services/mediapackagev2.json +1 -0
  271. package/src/data/servicereference/services/mediastore.json +1 -0
  272. package/src/data/servicereference/services/mediatailor.json +1 -0
  273. package/src/data/servicereference/services/medical-imaging.json +1 -0
  274. package/src/data/servicereference/services/memorydb.json +1 -0
  275. package/src/data/servicereference/services/mgh.json +1 -0
  276. package/src/data/servicereference/services/mgn.json +1 -0
  277. package/src/data/servicereference/services/migrationhub-orchestrator.json +1 -0
  278. package/src/data/servicereference/services/migrationhub-strategy.json +1 -0
  279. package/src/data/servicereference/services/mobileanalytics.json +1 -0
  280. package/src/data/servicereference/services/mobiletargeting.json +1 -0
  281. package/src/data/servicereference/services/monitron.json +1 -0
  282. package/src/data/servicereference/services/mpa.json +1 -0
  283. package/src/data/servicereference/services/mq.json +1 -0
  284. package/src/data/servicereference/services/neptune-db.json +1 -0
  285. package/src/data/servicereference/services/neptune-graph.json +1 -0
  286. package/src/data/servicereference/services/network-firewall.json +1 -0
  287. package/src/data/servicereference/services/network-security-director.json +1 -0
  288. package/src/data/servicereference/services/networkflowmonitor.json +1 -0
  289. package/src/data/servicereference/services/networkmanager-chat.json +1 -0
  290. package/src/data/servicereference/services/networkmanager.json +1 -0
  291. package/src/data/servicereference/services/networkmonitor.json +1 -0
  292. package/src/data/servicereference/services/nimble.json +1 -0
  293. package/src/data/servicereference/services/notifications-contacts.json +1 -0
  294. package/src/data/servicereference/services/notifications.json +1 -0
  295. package/src/data/servicereference/services/nova-act.json +1 -0
  296. package/src/data/servicereference/services/oam.json +1 -0
  297. package/src/data/servicereference/services/observabilityadmin.json +1 -0
  298. package/src/data/servicereference/services/odb.json +1 -0
  299. package/src/data/servicereference/services/omics.json +1 -0
  300. package/src/data/servicereference/services/one.json +1 -0
  301. package/src/data/servicereference/services/opensearch.json +1 -0
  302. package/src/data/servicereference/services/opsworks-cm.json +1 -0
  303. package/src/data/servicereference/services/opsworks.json +1 -0
  304. package/src/data/servicereference/services/organizations.json +1 -0
  305. package/src/data/servicereference/services/osis.json +1 -0
  306. package/src/data/servicereference/services/outposts.json +1 -0
  307. package/src/data/servicereference/services/panorama.json +1 -0
  308. package/src/data/servicereference/services/partnercentral-account-management.json +1 -0
  309. package/src/data/servicereference/services/partnercentral.json +1 -0
  310. package/src/data/servicereference/services/payment-cryptography.json +1 -0
  311. package/src/data/servicereference/services/payments.json +1 -0
  312. package/src/data/servicereference/services/pca-connector-ad.json +1 -0
  313. package/src/data/servicereference/services/pca-connector-scep.json +1 -0
  314. package/src/data/servicereference/services/pcs.json +1 -0
  315. package/src/data/servicereference/services/personalize.json +1 -0
  316. package/src/data/servicereference/services/pi.json +1 -0
  317. package/src/data/servicereference/services/pipes.json +1 -0
  318. package/src/data/servicereference/services/polly.json +1 -0
  319. package/src/data/servicereference/services/pricing.json +1 -0
  320. package/src/data/servicereference/services/pricingplanmanager.json +1 -0
  321. package/src/data/servicereference/services/private-networks.json +1 -0
  322. package/src/data/servicereference/services/profile.json +1 -0
  323. package/src/data/servicereference/services/proton.json +1 -0
  324. package/src/data/servicereference/services/purchase-orders.json +1 -0
  325. package/src/data/servicereference/services/q.json +1 -0
  326. package/src/data/servicereference/services/qapps.json +1 -0
  327. package/src/data/servicereference/services/qbusiness.json +1 -0
  328. package/src/data/servicereference/services/qdeveloper.json +1 -0
  329. package/src/data/servicereference/services/qldb.json +1 -0
  330. package/src/data/servicereference/services/quicksight.json +1 -0
  331. package/src/data/servicereference/services/ram.json +1 -0
  332. package/src/data/servicereference/services/rbin.json +1 -0
  333. package/src/data/servicereference/services/rds-data.json +1 -0
  334. package/src/data/servicereference/services/rds-db.json +1 -0
  335. package/src/data/servicereference/services/rds.json +1 -0
  336. package/src/data/servicereference/services/redshift-data.json +1 -0
  337. package/src/data/servicereference/services/redshift-serverless.json +1 -0
  338. package/src/data/servicereference/services/redshift.json +1 -0
  339. package/src/data/servicereference/services/refactor-spaces.json +1 -0
  340. package/src/data/servicereference/services/rekognition.json +1 -0
  341. package/src/data/servicereference/services/repostspace.json +1 -0
  342. package/src/data/servicereference/services/resiliencehub.json +1 -0
  343. package/src/data/servicereference/services/resource-explorer-2.json +1 -0
  344. package/src/data/servicereference/services/resource-explorer.json +1 -0
  345. package/src/data/servicereference/services/resource-groups.json +1 -0
  346. package/src/data/servicereference/services/rhelkb.json +1 -0
  347. package/src/data/servicereference/services/robomaker.json +1 -0
  348. package/src/data/servicereference/services/rolesanywhere.json +1 -0
  349. package/src/data/servicereference/services/route53-recovery-cluster.json +1 -0
  350. package/src/data/servicereference/services/route53-recovery-control-config.json +1 -0
  351. package/src/data/servicereference/services/route53-recovery-readiness.json +1 -0
  352. package/src/data/servicereference/services/route53.json +1 -0
  353. package/src/data/servicereference/services/route53domains.json +1 -0
  354. package/src/data/servicereference/services/route53globalresolver.json +1 -0
  355. package/src/data/servicereference/services/route53profiles.json +1 -0
  356. package/src/data/servicereference/services/route53resolver.json +1 -0
  357. package/src/data/servicereference/services/rtbfabric.json +1 -0
  358. package/src/data/servicereference/services/rum.json +1 -0
  359. package/src/data/servicereference/services/s3-object-lambda.json +1 -0
  360. package/src/data/servicereference/services/s3-outposts.json +1 -0
  361. package/src/data/servicereference/services/s3.json +1 -0
  362. package/src/data/servicereference/services/s3express.json +1 -0
  363. package/src/data/servicereference/services/s3tables.json +1 -0
  364. package/src/data/servicereference/services/s3vectors.json +1 -0
  365. package/src/data/servicereference/services/sagemaker-data-science-assistant.json +1 -0
  366. package/src/data/servicereference/services/sagemaker-geospatial.json +1 -0
  367. package/src/data/servicereference/services/sagemaker-mlflow.json +1 -0
  368. package/src/data/servicereference/services/sagemaker-unified-studio-mcp.json +1 -0
  369. package/src/data/servicereference/services/sagemaker.json +1 -0
  370. package/src/data/servicereference/services/savingsplans.json +1 -0
  371. package/src/data/servicereference/services/scheduler.json +1 -0
  372. package/src/data/servicereference/services/schemas.json +1 -0
  373. package/src/data/servicereference/services/scn.json +1 -0
  374. package/src/data/servicereference/services/sdb.json +1 -0
  375. package/src/data/servicereference/services/secretsmanager.json +1 -0
  376. package/src/data/servicereference/services/security-ir.json +1 -0
  377. package/src/data/servicereference/services/securityagent.json +1 -0
  378. package/src/data/servicereference/services/securityhub.json +1 -0
  379. package/src/data/servicereference/services/securitylake.json +1 -0
  380. package/src/data/servicereference/services/serverlessrepo.json +1 -0
  381. package/src/data/servicereference/services/servicecatalog.json +1 -0
  382. package/src/data/servicereference/services/servicediscovery.json +1 -0
  383. package/src/data/servicereference/services/serviceextract.json +1 -0
  384. package/src/data/servicereference/services/servicequotas.json +1 -0
  385. package/src/data/servicereference/services/ses.json +1 -0
  386. package/src/data/servicereference/services/shield.json +1 -0
  387. package/src/data/servicereference/services/signer.json +1 -0
  388. package/src/data/servicereference/services/signin.json +1 -0
  389. package/src/data/servicereference/services/simspaceweaver.json +1 -0
  390. package/src/data/servicereference/services/sms-voice.json +1 -0
  391. package/src/data/servicereference/services/sms.json +1 -0
  392. package/src/data/servicereference/services/snow-device-management.json +1 -0
  393. package/src/data/servicereference/services/snowball.json +1 -0
  394. package/src/data/servicereference/services/sns.json +1 -0
  395. package/src/data/servicereference/services/social-messaging.json +1 -0
  396. package/src/data/servicereference/services/sqlworkbench.json +1 -0
  397. package/src/data/servicereference/services/sqs.json +1 -0
  398. package/src/data/servicereference/services/ssm-contacts.json +1 -0
  399. package/src/data/servicereference/services/ssm-guiconnect.json +1 -0
  400. package/src/data/servicereference/services/ssm-incidents.json +1 -0
  401. package/src/data/servicereference/services/ssm-quicksetup.json +1 -0
  402. package/src/data/servicereference/services/ssm-sap.json +1 -0
  403. package/src/data/servicereference/services/ssm.json +1 -0
  404. package/src/data/servicereference/services/ssmmessages.json +1 -0
  405. package/src/data/servicereference/services/sso-directory.json +1 -0
  406. package/src/data/servicereference/services/sso-oauth.json +1 -0
  407. package/src/data/servicereference/services/sso.json +1 -0
  408. package/src/data/servicereference/services/states.json +1 -0
  409. package/src/data/servicereference/services/storagegateway.json +1 -0
  410. package/src/data/servicereference/services/sts.json +1 -0
  411. package/src/data/servicereference/services/support-console.json +1 -0
  412. package/src/data/servicereference/services/support.json +1 -0
  413. package/src/data/servicereference/services/supportapp.json +1 -0
  414. package/src/data/servicereference/services/supportplans.json +1 -0
  415. package/src/data/servicereference/services/sustainability.json +1 -0
  416. package/src/data/servicereference/services/swf.json +1 -0
  417. package/src/data/servicereference/services/synthetics.json +1 -0
  418. package/src/data/servicereference/services/tag.json +1 -0
  419. package/src/data/servicereference/services/tax.json +1 -0
  420. package/src/data/servicereference/services/textract.json +1 -0
  421. package/src/data/servicereference/services/thinclient.json +1 -0
  422. package/src/data/servicereference/services/timestream-influxdb.json +1 -0
  423. package/src/data/servicereference/services/timestream.json +1 -0
  424. package/src/data/servicereference/services/tiros.json +1 -0
  425. package/src/data/servicereference/services/tnb.json +1 -0
  426. package/src/data/servicereference/services/transcribe.json +1 -0
  427. package/src/data/servicereference/services/transfer.json +1 -0
  428. package/src/data/servicereference/services/transform-custom.json +1 -0
  429. package/src/data/servicereference/services/transform.json +1 -0
  430. package/src/data/servicereference/services/translate.json +1 -0
  431. package/src/data/servicereference/services/trustedadvisor.json +1 -0
  432. package/src/data/servicereference/services/ts.json +1 -0
  433. package/src/data/servicereference/services/user-subscriptions.json +1 -0
  434. package/src/data/servicereference/services/uxc.json +1 -0
  435. package/src/data/servicereference/services/vendor-insights.json +1 -0
  436. package/src/data/servicereference/services/verified-access.json +1 -0
  437. package/src/data/servicereference/services/verifiedpermissions.json +1 -0
  438. package/src/data/servicereference/services/voiceid.json +1 -0
  439. package/src/data/servicereference/services/vpc-lattice-svcs.json +1 -0
  440. package/src/data/servicereference/services/vpc-lattice.json +1 -0
  441. package/src/data/servicereference/services/vpce.json +1 -0
  442. package/src/data/servicereference/services/waf-regional.json +1 -0
  443. package/src/data/servicereference/services/waf.json +1 -0
  444. package/src/data/servicereference/services/wafv2.json +1 -0
  445. package/src/data/servicereference/services/wam.json +1 -0
  446. package/src/data/servicereference/services/wellarchitected.json +1 -0
  447. package/src/data/servicereference/services/wickr.json +1 -0
  448. package/src/data/servicereference/services/wisdom.json +1 -0
  449. package/src/data/servicereference/services/workdocs.json +1 -0
  450. package/src/data/servicereference/services/worklink.json +1 -0
  451. package/src/data/servicereference/services/workmail.json +1 -0
  452. package/src/data/servicereference/services/workmailmessageflow.json +1 -0
  453. package/src/data/servicereference/services/workspaces-instances.json +1 -0
  454. package/src/data/servicereference/services/workspaces-web.json +1 -0
  455. package/src/data/servicereference/services/workspaces.json +1 -0
  456. package/src/data/servicereference/services/xray.json +1 -0
  457. package/src/data/servicereference/services.json +1 -0
  458. package/src/extension.d.ts +3 -0
  459. package/src/extension.js +23 -0
  460. package/src/grammars/tree-sitter-hcl.wasm +0 -0
  461. package/src/grammars/tree-sitter-json.wasm +0 -0
  462. package/src/grammars/tree-sitter-yaml.wasm +0 -0
  463. package/src/handlers/completion/action-value.d.ts +4 -0
  464. package/src/handlers/completion/action-value.js +46 -0
  465. package/src/handlers/completion/condition-block.d.ts +4 -0
  466. package/src/handlers/completion/condition-block.js +31 -0
  467. package/src/handlers/completion/condition-key.d.ts +4 -0
  468. package/src/handlers/completion/condition-key.js +80 -0
  469. package/src/handlers/completion/condition-operator.d.ts +4 -0
  470. package/src/handlers/completion/condition-operator.js +22 -0
  471. package/src/handlers/completion/effect-value.d.ts +4 -0
  472. package/src/handlers/completion/effect-value.js +14 -0
  473. package/src/handlers/completion/index.d.ts +14 -0
  474. package/src/handlers/completion/index.js +96 -0
  475. package/src/handlers/completion/principal-block-identifier.d.ts +4 -0
  476. package/src/handlers/completion/principal-block-identifier.js +4 -0
  477. package/src/handlers/completion/principal-block-type.d.ts +4 -0
  478. package/src/handlers/completion/principal-block-type.js +24 -0
  479. package/src/handlers/completion/principal-block.d.ts +4 -0
  480. package/src/handlers/completion/principal-block.js +28 -0
  481. package/src/handlers/completion/principal-identifier-completions.d.ts +2 -0
  482. package/src/handlers/completion/principal-identifier-completions.js +131 -0
  483. package/src/handlers/completion/principal-type.d.ts +4 -0
  484. package/src/handlers/completion/principal-type.js +23 -0
  485. package/src/handlers/completion/principal-typed-value.d.ts +4 -0
  486. package/src/handlers/completion/principal-typed-value.js +4 -0
  487. package/src/handlers/completion/principal-value.d.ts +4 -0
  488. package/src/handlers/completion/principal-value.js +18 -0
  489. package/src/handlers/completion/resource-value.d.ts +4 -0
  490. package/src/handlers/completion/resource-value.js +144 -0
  491. package/src/handlers/completion/statement-block.d.ts +10 -0
  492. package/src/handlers/completion/statement-block.js +51 -0
  493. package/src/handlers/completion/statement-key.d.ts +4 -0
  494. package/src/handlers/completion/statement-key.js +41 -0
  495. package/src/lib/iam-policy/condition-operators.d.ts +317 -0
  496. package/src/lib/iam-policy/condition-operators.js +129 -0
  497. package/src/lib/iam-policy/location.d.ts +71 -0
  498. package/src/lib/iam-policy/location.js +82 -0
  499. package/src/lib/iam-policy/partitions.d.ts +116 -0
  500. package/src/lib/iam-policy/partitions.js +51 -0
  501. package/src/lib/iam-policy/principals.d.ts +21 -0
  502. package/src/lib/iam-policy/principals.js +37 -0
  503. package/src/lib/iam-policy/reference/services.d.ts +22 -0
  504. package/src/lib/iam-policy/reference/services.js +99 -0
  505. package/src/lib/iam-policy/reference/types.d.ts +71 -0
  506. package/src/lib/iam-policy/reference/types.js +1 -0
  507. package/src/lib/iam-policy/statement-keys.d.ts +8 -0
  508. package/src/lib/iam-policy/statement-keys.js +159 -0
  509. package/src/lib/iam-policy/wildcard.d.ts +2 -0
  510. package/src/lib/iam-policy/wildcard.js +14 -0
  511. package/src/lib/treesitter/base.d.ts +35 -0
  512. package/src/lib/treesitter/base.js +50 -0
  513. package/src/lib/treesitter/hcl.d.ts +9 -0
  514. package/src/lib/treesitter/hcl.js +888 -0
  515. package/src/lib/treesitter/json.d.ts +9 -0
  516. package/src/lib/treesitter/json.js +376 -0
  517. package/src/lib/treesitter/manager.d.ts +9 -0
  518. package/src/lib/treesitter/manager.js +66 -0
  519. package/src/lib/treesitter/yaml.d.ts +9 -0
  520. package/src/lib/treesitter/yaml.js +878 -0
  521. package/src/server.d.ts +2 -0
  522. package/src/server.js +26 -0
@@ -0,0 +1 @@
1
+ ["a4b.amazonaws.com","access-analyzer.amazonaws.com","account.amazonaws.com","acm-pca.amazonaws.com","acm.amazonaws.com","airflow-env.amazonaws.com","airflow.amazonaws.com","alexa-appkit.amazon.com","alexa-connectedhome.amazon.com","amazonmq.amazonaws.com","amplify.amazonaws.com","apigateway.amazonaws.com","appflow.amazonaws.com","application-autoscaling.amazonaws.com","application-insights.amazonaws.com","appstream.amazonaws.com","appstream.application-autoscaling.amazonaws.com","appsync.amazonaws.com","athena.amazonaws.com","automation.amazonaws.com","autoscaling.amazonaws.com","aws-artifact-account-sync.amazonaws.com","backup.amazonaws.com","batch.amazonaws.com","billingconsole.amazonaws.com","braket.amazonaws.com","budgets.amazonaws.com","ce.amazonaws.com","channels.lex.amazonaws.com","chatbot.amazonaws.com","chime.amazonaws.com","cloud9.amazonaws.com","clouddirectory.amazonaws.com","cloudformation.amazonaws.com","cloudfront.amazonaws.com","cloudhsm.amazonaws.com","cloudsearch.amazonaws.com","cloudtrail.amazonaws.com","cloudwatch-crossaccount.amazonaws.com","codebuild.amazonaws.com","codecommit.amazonaws.com","codedeploy.${aws::region}.amazonaws.com","codedeploy.amazonaws.com","codeguru-reviewer.amazonaws.com","codepipeline.amazonaws.com","codestar-notifications.amazonaws.com","codestar.amazonaws.com","cognito-identity.amazonaws.com","cognito-idp.amazonaws.com","cognito-sync.amazonaws.com","comprehend.amazonaws.com","config-conforms.amazonaws.com","config-multiaccountsetup.amazonaws.com","config.amazonaws.com","connect.amazonaws.com","continuousexport.discovery.amazonaws.com","costalerts.amazonaws.com","custom-resource.application-autoscaling.amazonaws.com","databrew.amazonaws.com","datapipeline.amazonaws.com","datasync.amazonaws.com","dax.amazonaws.com","deeplens.amazonaws.com","delivery.logs.amazonaws.com","diode.amazonaws.com","directconnect.amazonaws.com","discovery.amazonaws.com","dlm.amazonaws.com","dms.amazonaws.com","ds.amazonaws.com","dynamodb.amazonaws.com","dynamodb.application-autoscaling.amazonaws.com","ec.amazonaws.com","ec2.amazonaws.com","ec2.application-autoscaling.amazonaws.com","ec2fleet.amazonaws.com","ec2scheduled.amazonaws.com","ecr.amazonaws.com","ecs-tasks.amazonaws.com","ecs.amazonaws.com","ecs.application-autoscaling.amazonaws.com","edgelambda.amazonaws.com","eks-fargate-pods.amazonaws.com","eks-fargate.amazonaws.com","eks-nodegroup.amazonaws.com","eks.amazonaws.com","elasticache.amazonaws.com","elasticbeanstalk.amazonaws.com","elasticfilesystem.amazonaws.com","elasticloadbalancing.amazonaws.com","elasticmapreduce.amazonaws.com","elastictranscoder.amazonaws.com","email.cognito-idp.amazonaws.com","emr-containers.amazonaws.com","es.amazonaws.com","events.amazonaws.com","firehose.amazonaws.com","fms.amazonaws.com","forecast.amazonaws.com","freertos.amazonaws.com","fsx.amazonaws.com","galaxy.amazonaws.com","gamelift.amazonaws.com","glacier.amazonaws.com","globalaccelerator.amazonaws.com","glue.amazonaws.com","greengrass.amazonaws.com","guardduty.amazonaws.com","health.amazonaws.com","honeycode.amazonaws.com","iam.amazonaws.com","imagebuilder.amazonaws.com","importexport.amazonaws.com","inspector.amazonaws.com","iot.amazonaws.com","iotanalytics.amazonaws.com","iotevents.amazonaws.com","iotsitewise.amazonaws.com","iotthingsgraph.amazonaws.com","ivs.amazonaws.com","jellyfish.amazonaws.com","kafka.amazonaws.com","kinesis.amazonaws.com","kinesis.{us-gov-region}.amazonaws.com","kinesisanalytics.amazonaws.com","kms.amazonaws.com","lakeformation.amazonaws.com","lambda.amazonaws.com","lex.amazonaws.com","license-manager.amazonaws.com","lightsail.amazonaws.com","logger.cloudfront.amazonaws.com","logs.amazonaws.com","machinelearning.amazonaws.com","macie.amazonaws.com","managedblockchain.amazonaws.com","managedservices.amazonaws.com","mediaconnect.amazonaws.com","mediaconvert.amazonaws.com","mediapackage.amazonaws.com","mediastore.amazonaws.com","mediatailor.amazonaws.com","meetings.chime.amazonaws.com","member.org.stacksets.cloudformation.amazonaws.com","metering-marketplace.amazonaws.com","mgn.amazonaws.com","migrationhub.amazonaws.com","mobileanalytics.amazonaws.com","mobilehub.amazonaws.com","monitoring.amazonaws.com","monitoring.rds.amazonaws.com","mq.amazonaws.com","network-firewall.amazonaws.com","ops.apigateway.amazonaws.com","opsworks-cm.amazonaws.com","opsworks.amazonaws.com","organizations.amazonaws.com","personalize.amazonaws.com","pinpoint.amazonaws.com","polly.amazonaws.com","purchaseorders.amazonaws.com","qldb.amazonaws.com","quicksight.amazonaws.com","ram.amazonaws.com","rds-preview.amazonaws.com","rds.amazonaws.com","redshift.amazonaws.com","rekognition.amazonaws.com","replication.dynamodb.amazonaws.com","replicator.lambda.amazonaws.com","resource-groups.amazonaws.com","robomaker.amazonaws.com","route53.amazonaws.com","route53domains.amazonaws.com","route53resolver.amazonaws.com","s3.amazonaws.com","sagemaker.amazonaws.com","secretsmanager.amazonaws.com","securityhub.amazonaws.com","serverlessrepo.amazonaws.com","servicecatalog-appregistry.amazonaws.com","servicecatalog.amazonaws.com","servicediscovery.amazonaws.com","ses.amazonaws.com","shield.amazonaws.com","signer.amazonaws.com","signin.amazonaws.com","sms.amazonaws.com","sns.amazonaws.com","spotfleet.amazonaws.com","sqs.amazonaws.com","ssm-incidents.amazonaws.com","ssm.amazonaws.com","sso.amazonaws.com","states.amazonaws.com","storagegateway.amazonaws.com","streams.metrics.cloudwatch.amazonaws.com","sts.amazonaws.com","support.amazonaws.com","swf.amazonaws.com","tagging.amazonaws.com","tagpolicies.tag.amazonaws.com","textract.amazonaws.com","timestream.amazonaws.com","transcribe.amazonaws.com","transfer.amazonaws.com","transitgateway.amazonaws.com","translate.amazonaws.com","trustedadvisor.amazonaws.com","tts.amazonaws.com","vmie.amazonaws.com","vpc-flow-logs.amazonaws.com","waf-regional.amazonaws.com","waf.amazonaws.com","wam.amazonaws.com","workdocs.amazonaws.com","worklink.amazonaws.com","workmail.amazonaws.com","workspaces.amazonaws.com","xray.amazonaws.com","{region}.elasticache-snapshot.amazonaws.com"]
@@ -0,0 +1 @@
1
+ {"name":"a2c","actions":{"GetContainerizationJobDetails":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the details of all Containerization jobs","accessLevel":"Read","resourceTypes":[]},"GetDeploymentJobDetails":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the details of all Deployment jobs","accessLevel":"Read","resourceTypes":[]},"StartContainerizationJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to start a Containerization job","accessLevel":"Write","resourceTypes":[]},"StartDeploymentJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to start a Deploymnet job","accessLevel":"Write","resourceTypes":[]}},"resources":[],"conditionKeys":{}}
@@ -0,0 +1 @@
1
+ {"name":"a4b","actions":{"ApproveSkill":{"conditionKeys":[],"resources":[],"description":"Grants permission to associate a skill with the organization under the customer's AWS account","accessLevel":"Write","resourceTypes":[]},"AssociateContactWithAddressBook":{"conditionKeys":[],"resources":[{"name":"addressbook"},{"name":"contact"}],"description":"Grants permission to associate a contact with a given address book","accessLevel":"Write","resourceTypes":[{"name":"addressbook","required":true},{"name":"contact","required":true}]},"AssociateDeviceWithNetworkProfile":{"conditionKeys":[],"resources":[{"name":"device"},{"name":"networkprofile"}],"description":"Grants permission to associate a device with the specified network profile","accessLevel":"Write","resourceTypes":[{"name":"device","required":true},{"name":"networkprofile","required":true}]},"AssociateDeviceWithRoom":{"conditionKeys":[],"resources":[{"name":"device"},{"name":"room"}],"description":"Grants permission to associate device with given room","accessLevel":"Write","resourceTypes":[{"name":"device","required":true},{"name":"room","required":true}]},"AssociateSkillGroupWithRoom":{"conditionKeys":[],"resources":[{"name":"room"},{"name":"skillgroup"}],"description":"Grants permission to associate the skill group with given room","accessLevel":"Write","resourceTypes":[{"name":"room","required":true},{"name":"skillgroup","required":true}]},"AssociateSkillWithSkillGroup":{"conditionKeys":[],"resources":[{"name":"skillgroup"}],"description":"Grants permission to associate a skill with a skill group","accessLevel":"Write","resourceTypes":[{"name":"skillgroup","required":true}]},"AssociateSkillWithUsers":{"conditionKeys":[],"resources":[],"description":"Grants permission to make a private skill available for enrolled users to enable on their devices","accessLevel":"Write","resourceTypes":[]},"CompleteRegistration":{"conditionKeys":[],"resources":[],"description":"Grants permission to complete the operation of registering an Alexa device","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CreateAddressBook":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an address book with the specified details","accessLevel":"Write","resourceTypes":[]},"CreateBusinessReportSchedule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a recurring schedule for usage reports to deliver to the specified S3 location with a specified daily or weekly interval","accessLevel":"Write","resourceTypes":[]},"CreateConferenceProvider":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to add a new conference provider under the user's AWS account","accessLevel":"Write","resourceTypes":[]},"CreateContact":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a contact with the specified details","accessLevel":"Write","resourceTypes":[]},"CreateGatewayGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a gateway group with the specified details","accessLevel":"Write","resourceTypes":[]},"CreateNetworkProfile":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a network profile with the specified details","accessLevel":"Write","resourceTypes":[]},"CreateProfile":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new profile","accessLevel":"Write","resourceTypes":[]},"CreateRoom":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"profile"}],"description":"Grants permission to create room with the specified details","accessLevel":"Write","resourceTypes":[{"name":"profile","required":true}]},"CreateSkillGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a skill group with given name and description","accessLevel":"Write","resourceTypes":[]},"CreateUser":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"user"}],"description":"Grants permission to create a user","accessLevel":"Write","resourceTypes":[{"name":"user","required":true}]},"DeleteAddressBook":{"conditionKeys":[],"resources":[{"name":"addressbook"}],"description":"Grants permission to delete an address book by the address book ARN","accessLevel":"Write","resourceTypes":[{"name":"addressbook","required":true}]},"DeleteBusinessReportSchedule":{"conditionKeys":[],"resources":[{"name":"schedule"}],"description":"Grants permission to delete the recurring report delivery schedule with the specified schedule ARN","accessLevel":"Write","resourceTypes":[{"name":"schedule","required":true}]},"DeleteConferenceProvider":{"conditionKeys":[],"resources":[{"name":"conferenceprovider"}],"description":"Grants permission to delete a conference provider","accessLevel":"Write","resourceTypes":[{"name":"conferenceprovider","required":true}]},"DeleteContact":{"conditionKeys":[],"resources":[{"name":"contact"}],"description":"Grants permission to delete a contact by the contact ARN","accessLevel":"Write","resourceTypes":[{"name":"contact","required":true}]},"DeleteDevice":{"conditionKeys":[],"resources":[{"name":"device"}],"description":"Grants permission to remove a device from Alexa For Business","accessLevel":"Write","resourceTypes":[{"name":"device","required":true}]},"DeleteDeviceUsageData":{"conditionKeys":[],"resources":[{"name":"device"}],"description":"Grants permission to delete the device's entire previous history of voice input data and associated response data","accessLevel":"Write","resourceTypes":[{"name":"device","required":true}]},"DeleteGatewayGroup":{"conditionKeys":[],"resources":[{"name":"gatewaygroup"}],"description":"Grants permission to delete a gateway group","accessLevel":"Write","resourceTypes":[{"name":"gatewaygroup","required":true}]},"DeleteNetworkProfile":{"conditionKeys":[],"resources":[{"name":"networkprofile"}],"description":"Grants permission to delete a network profile by the network profile ARN","accessLevel":"Write","resourceTypes":[{"name":"networkprofile","required":true}]},"DeleteProfile":{"conditionKeys":[],"resources":[{"name":"profile"}],"description":"Grants permission to delete profile by profile ARN","accessLevel":"Write","resourceTypes":[{"name":"profile","required":true}]},"DeleteRoom":{"conditionKeys":[],"resources":[{"name":"room"}],"description":"Grants permission to delete room","accessLevel":"Write","resourceTypes":[{"name":"room","required":true}]},"DeleteRoomSkillParameter":{"conditionKeys":[],"resources":[{"name":"room"}],"description":"Grants permission to delete a parameter from a skill and room","accessLevel":"Write","resourceTypes":[{"name":"room","required":true}]},"DeleteSkillAuthorization":{"conditionKeys":[],"resources":[{"name":"room"}],"description":"Grants permission to unlink a third-party account from a skill","accessLevel":"Write","resourceTypes":[{"name":"room","required":true}]},"DeleteSkillGroup":{"conditionKeys":[],"resources":[{"name":"skillgroup"}],"description":"Grants permission to delete skill group with skill group ARN","accessLevel":"Write","resourceTypes":[{"name":"skillgroup","required":true}]},"DeleteUser":{"conditionKeys":[],"resources":[{"name":"user"}],"description":"Grants permission to delete a user","accessLevel":"Write","resourceTypes":[{"name":"user","required":true}]},"DisassociateContactFromAddressBook":{"conditionKeys":[],"resources":[{"name":"addressbook"},{"name":"contact"}],"description":"Grants permission to disassociate a contact from a given address book","accessLevel":"Write","resourceTypes":[{"name":"addressbook","required":true},{"name":"contact","required":true}]},"DisassociateDeviceFromRoom":{"conditionKeys":[],"resources":[{"name":"device"}],"description":"Grants permission to disassociate device from its current room","accessLevel":"Write","resourceTypes":[{"name":"device","required":true}]},"DisassociateSkillFromSkillGroup":{"conditionKeys":[],"resources":[{"name":"skillgroup"}],"description":"Grants permission to disassociate a skill from a skill group","accessLevel":"Write","resourceTypes":[{"name":"skillgroup","required":true}]},"DisassociateSkillFromUsers":{"conditionKeys":[],"resources":[{"name":"user"}],"description":"Grants permission to make a private skill unavailable for enrolled users and prevent them from enabling it on their devices","accessLevel":"Write","resourceTypes":[{"name":"user","required":true}]},"DisassociateSkillGroupFromRoom":{"conditionKeys":[],"resources":[{"name":"room"},{"name":"skillgroup"}],"description":"Grants permission to disassociate the skill group from given room","accessLevel":"Write","resourceTypes":[{"name":"room","required":true},{"name":"skillgroup","required":true}]},"ForgetSmartHomeAppliances":{"conditionKeys":[],"resources":[{"name":"room"}],"description":"Grants permission to forget smart home appliances associated to a room","accessLevel":"Write","resourceTypes":[{"name":"room","required":true}]},"GetAddressBook":{"conditionKeys":[],"resources":[{"name":"addressbook"}],"description":"Grants permission to get the address book details by the address book ARN","accessLevel":"Read","resourceTypes":[{"name":"addressbook","required":true}]},"GetConferencePreference":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the existing conference preferences","accessLevel":"Read","resourceTypes":[]},"GetConferenceProvider":{"conditionKeys":[],"resources":[{"name":"conferenceprovider"}],"description":"Grants permission to get details about a specific conference provider","accessLevel":"Read","resourceTypes":[{"name":"conferenceprovider","required":true}]},"GetContact":{"conditionKeys":[],"resources":[{"name":"contact"}],"description":"Grants permission to get the contact details by the contact ARN","accessLevel":"Read","resourceTypes":[{"name":"contact","required":true}]},"GetDevice":{"conditionKeys":[],"resources":[{"name":"device"}],"description":"Grants permission to get device details","accessLevel":"Read","resourceTypes":[{"name":"device","required":true}]},"GetGateway":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to retrieve the details of a gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}]},"GetGatewayGroup":{"conditionKeys":[],"resources":[{"name":"gatewaygroup"}],"description":"Grants permission to retrieve the details of a gateway group","accessLevel":"Read","resourceTypes":[{"name":"gatewaygroup","required":true}]},"GetInvitationConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the configured values for the user enrollment invitation email template","accessLevel":"Read","resourceTypes":[]},"GetNetworkProfile":{"conditionKeys":[],"resources":[{"name":"networkprofile"}],"description":"Grants permission to get the network profile details by the network profile ARN","accessLevel":"Read","resourceTypes":[{"name":"networkprofile","required":true}]},"GetProfile":{"conditionKeys":[],"resources":[{"name":"profile"}],"description":"Grants permission to get profile when provided with Profile ARN","accessLevel":"Read","resourceTypes":[{"name":"profile","required":true}]},"GetRoom":{"conditionKeys":[],"resources":[{"name":"room"}],"description":"Grants permission to get room details","accessLevel":"Read","resourceTypes":[{"name":"room","required":true}]},"GetRoomSkillParameter":{"conditionKeys":[],"resources":[{"name":"room"}],"description":"Grants permission to get an existing parameter that has been set for a skill and room","accessLevel":"Read","resourceTypes":[{"name":"room","required":true}]},"GetSkillGroup":{"conditionKeys":[],"resources":[{"name":"skillgroup"}],"description":"Grants permission to get skill group details with skill group ARN","accessLevel":"Read","resourceTypes":[{"name":"skillgroup","required":true}]},"ListBusinessReportSchedules":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the details of the schedules that a user configured","accessLevel":"List","resourceTypes":[]},"ListConferenceProviders":{"conditionKeys":[],"resources":[],"description":"Grants permission to list conference providers under a specific AWS account","accessLevel":"List","resourceTypes":[]},"ListDeviceEvents":{"conditionKeys":[],"resources":[{"name":"device"}],"description":"Grants permission to list the device event history, including device connection status, for up to 30 days","accessLevel":"List","resourceTypes":[{"name":"device","required":true}]},"ListGatewayGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to list gateway group summaries","accessLevel":"List","resourceTypes":[]},"ListGateways":{"conditionKeys":[],"resources":[{"name":"gatewaygroup"}],"description":"Grants permission to list gateway summaries","accessLevel":"List","resourceTypes":[{"name":"gatewaygroup","required":true}]},"ListSkills":{"conditionKeys":[],"resources":[],"description":"Grants permission to list skills","accessLevel":"List","resourceTypes":[]},"ListSkillsStoreCategories":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all categories in the Alexa skill store","accessLevel":"List","resourceTypes":[]},"ListSkillsStoreSkillsByCategory":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all skills in the Alexa skill store by category","accessLevel":"List","resourceTypes":[]},"ListSmartHomeAppliances":{"conditionKeys":[],"resources":[{"name":"room"}],"description":"Grants permission to list all of the smart home appliances associated with a room","accessLevel":"List","resourceTypes":[{"name":"room","required":true}]},"ListTags":{"conditionKeys":[],"resources":[{"name":"device"},{"name":"room"},{"name":"user"}],"description":"Grants permission to list all tags on a resource","accessLevel":"Read","resourceTypes":[{"name":"device","required":false},{"name":"room","required":false},{"name":"user","required":false}]},"PutConferencePreference":{"conditionKeys":[],"resources":[],"description":"Grants permission to set the conference preferences on a specific conference provider at the account level","accessLevel":"Write","resourceTypes":[]},"PutDeviceSetupEvents":{"conditionKeys":[],"resources":[],"description":"Grants permission to publish Alexa device setup events","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"PutInvitationConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to configure the email template for the user enrollment invitation with the specified attributes","accessLevel":"Write","resourceTypes":[]},"PutRoomSkillParameter":{"conditionKeys":[],"resources":[{"name":"room"}],"description":"Grants permission to put a room specific parameter for a skill","accessLevel":"Write","resourceTypes":[{"name":"room","required":true}]},"PutSkillAuthorization":{"conditionKeys":[],"resources":[{"name":"room"}],"description":"Grants permission to link a user's account to a third-party skill provider","accessLevel":"Write","resourceTypes":[{"name":"room","required":true}]},"RegisterAVSDevice":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to register an Alexa-enabled device built by an Original Equipment Manufacturer (OEM) using Alexa Voice Service (AVS)","accessLevel":"Write","resourceTypes":[]},"RegisterDevice":{"conditionKeys":[],"resources":[],"description":"Grants permission to register an Alexa device","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"RejectSkill":{"conditionKeys":[],"resources":[],"description":"Grants permission to disassociate a skill from the organization under a user's AWS account","accessLevel":"Write","resourceTypes":[]},"ResolveRoom":{"conditionKeys":[],"resources":[],"description":"Grants permission to resolve room information","accessLevel":"Read","resourceTypes":[]},"RevokeInvitation":{"conditionKeys":[],"resources":[{"name":"user"}],"description":"Grants permission to revoke an invitation","accessLevel":"Write","resourceTypes":[{"name":"user","required":true}]},"SearchAddressBooks":{"conditionKeys":[],"resources":[],"description":"Grants permission to search address books and list the ones that meet a set of filter and sort criteria","accessLevel":"List","resourceTypes":[]},"SearchContacts":{"conditionKeys":[],"resources":[],"description":"Grants permission to search contacts and list the ones that meet a set of filter and sort criteria","accessLevel":"List","resourceTypes":[]},"SearchDevices":{"conditionKeys":[],"resources":[],"description":"Grants permission to search for devices","accessLevel":"List","resourceTypes":[]},"SearchNetworkProfiles":{"conditionKeys":[],"resources":[],"description":"Grants permission to search network profiles and list the ones that meet a set of filter and sort criteria","accessLevel":"List","resourceTypes":[]},"SearchProfiles":{"conditionKeys":[],"resources":[],"description":"Grants permission to search for profiles","accessLevel":"List","resourceTypes":[]},"SearchRooms":{"conditionKeys":[],"resources":[],"description":"Grants permission to search for rooms","accessLevel":"List","resourceTypes":[]},"SearchSkillGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to search for skill groups","accessLevel":"List","resourceTypes":[]},"SearchUsers":{"conditionKeys":[],"resources":[],"description":"Grants permission to search for users","accessLevel":"List","resourceTypes":[]},"SendAnnouncement":{"conditionKeys":[],"resources":[],"description":"Grants permission to trigger an asynchronous flow to send text, SSML, or audio announcements to rooms that are identified by a search or filter","accessLevel":"Write","resourceTypes":[]},"SendInvitation":{"conditionKeys":[],"resources":[{"name":"user"}],"description":"Grants permission to send an invitation to a user","accessLevel":"Write","resourceTypes":[{"name":"user","required":true}]},"StartDeviceSync":{"conditionKeys":[],"resources":[],"description":"Grants permission to restore the device and its account to its known, default settings by clearing all information and settings set by its previous users","accessLevel":"Write","resourceTypes":[]},"StartSmartHomeApplianceDiscovery":{"conditionKeys":[],"resources":[{"name":"room"}],"description":"Grants permission to initiate the discovery of any smart home appliances associated with the room","accessLevel":"Read","resourceTypes":[{"name":"room","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"device"},{"name":"room"},{"name":"user"}],"description":"Grants permission to add metadata tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"device","required":false},{"name":"room","required":false},{"name":"user","required":false}]},"UntagResource":{"conditionKeys":[],"resources":[{"name":"device"},{"name":"room"},{"name":"user"}],"description":"Grants permission to remove metadata tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"device","required":false},{"name":"room","required":false},{"name":"user","required":false}]},"UpdateAddressBook":{"conditionKeys":[],"resources":[{"name":"addressbook"}],"description":"Grants permission to update address book details by the address book ARN","accessLevel":"Write","resourceTypes":[{"name":"addressbook","required":true}]},"UpdateBusinessReportSchedule":{"conditionKeys":[],"resources":[{"name":"schedule"}],"description":"Grants permission to update the configuration of the report delivery schedule with the specified schedule ARN","accessLevel":"Write","resourceTypes":[{"name":"schedule","required":true}]},"UpdateConferenceProvider":{"conditionKeys":[],"resources":[{"name":"conferenceprovider"}],"description":"Grants permission to update an existing conference provider's settings","accessLevel":"Write","resourceTypes":[{"name":"conferenceprovider","required":true}]},"UpdateContact":{"conditionKeys":[],"resources":[{"name":"contact"}],"description":"Grants permission to update the contact details by the contact ARN","accessLevel":"Write","resourceTypes":[{"name":"contact","required":true}]},"UpdateDevice":{"conditionKeys":[],"resources":[{"name":"device"}],"description":"Grants permission to update device name","accessLevel":"Write","resourceTypes":[{"name":"device","required":true}]},"UpdateGateway":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update the details of a gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}]},"UpdateGatewayGroup":{"conditionKeys":[],"resources":[{"name":"gatewaygroup"}],"description":"Grants permission to update the details of a gateway group","accessLevel":"Write","resourceTypes":[{"name":"gatewaygroup","required":true}]},"UpdateNetworkProfile":{"conditionKeys":[],"resources":[{"name":"networkprofile"}],"description":"Grants permission to update a network profile by the network profile ARN","accessLevel":"Write","resourceTypes":[{"name":"networkprofile","required":true}]},"UpdateProfile":{"conditionKeys":[],"resources":[{"name":"profile"}],"description":"Grants permission to update an existing profile","accessLevel":"Write","resourceTypes":[{"name":"profile","required":true}]},"UpdateRoom":{"conditionKeys":[],"resources":[{"name":"room"}],"description":"Grants permission to update room details","accessLevel":"Write","resourceTypes":[{"name":"room","required":true}]},"UpdateSkillGroup":{"conditionKeys":[],"resources":[{"name":"skillgroup"}],"description":"Grants permission to update skill group details with skill group ARN","accessLevel":"Write","resourceTypes":[{"name":"skillgroup","required":true}]}},"resources":[{"name":"addressbook","arnFormats":["arn:${Partition}:a4b:${Region}:${Account}:address-book/${ResourceId}"],"conditionKeys":[]},{"name":"conferenceprovider","arnFormats":["arn:${Partition}:a4b:${Region}:${Account}:conference-provider/${ResourceId}"],"conditionKeys":[]},{"name":"contact","arnFormats":["arn:${Partition}:a4b:${Region}:${Account}:contact/${ResourceId}"],"conditionKeys":[]},{"name":"device","arnFormats":["arn:${Partition}:a4b:${Region}:${Account}:device/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"gateway","arnFormats":["arn:${Partition}:a4b:${Region}:${Account}:gateway/${ResourceId}"],"conditionKeys":[]},{"name":"gatewaygroup","arnFormats":["arn:${Partition}:a4b:${Region}:${Account}:gateway-group/${ResourceId}"],"conditionKeys":[]},{"name":"networkprofile","arnFormats":["arn:${Partition}:a4b:${Region}:${Account}:network-profile/${ResourceId}"],"conditionKeys":[]},{"name":"profile","arnFormats":["arn:${Partition}:a4b:${Region}:${Account}:profile/${ResourceId}"],"conditionKeys":[]},{"name":"room","arnFormats":["arn:${Partition}:a4b:${Region}:${Account}:room/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"schedule","arnFormats":["arn:${Partition}:a4b:${Region}:${Account}:schedule/${ResourceId}"],"conditionKeys":[]},{"name":"skillgroup","arnFormats":["arn:${Partition}:a4b:${Region}:${Account}:skill-group/${ResourceId}"],"conditionKeys":[]},{"name":"user","arnFormats":["arn:${Partition}:a4b:${Region}:${Account}:user/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"a4b:amazonId":{"types":["String"],"description":"Filters actions based on the Amazon Id in the request"},"a4b:filters_deviceType":{"types":["ArrayOfString"],"description":"Filters actions based on the device type in the request"},"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters actions based on the allowed set of values for each of the tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters actions based on tag-value assoicated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters actions based on the presence of mandatory tags in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"access-analyzer","actions":{"ApplyArchiveRule":{"conditionKeys":[],"resources":[{"name":"Analyzer"}],"description":"Grants permission to apply an archive rule","accessLevel":"Write","resourceTypes":[{"name":"Analyzer","required":true}]},"CancelPolicyGeneration":{"conditionKeys":[],"resources":[],"description":"Grants permission to cancel a policy generation","accessLevel":"Write","resourceTypes":[]},"CheckAccessNotGranted":{"conditionKeys":[],"resources":[],"description":"Grants permission to check that specified access is not allowed by a policy","accessLevel":"Read","resourceTypes":[]},"CheckNoNewAccess":{"conditionKeys":[],"resources":[],"description":"Grants permission to check that no new access is allowed when compared to an existing policy","accessLevel":"Read","resourceTypes":[]},"CheckNoPublicAccess":{"conditionKeys":[],"resources":[],"description":"Grants permission to check that public access is not allowed by a resource policy","accessLevel":"Read","resourceTypes":[]},"CreateAccessPreview":{"conditionKeys":[],"resources":[{"name":"Analyzer"}],"description":"Grants permission to create an access preview for the specified analyzer","accessLevel":"Write","resourceTypes":[{"name":"Analyzer","required":true}]},"CreateAnalyzer":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Analyzer"}],"description":"Grants permission to create an analyzer","accessLevel":"Write","resourceTypes":[{"name":"Analyzer","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"]},"CreateArchiveRule":{"conditionKeys":[],"resources":[{"name":"ArchiveRule"}],"description":"Grants permission to create an archive rule for the specified analyzer","accessLevel":"Write","resourceTypes":[{"name":"ArchiveRule","required":true}]},"DeleteAnalyzer":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Analyzer"}],"description":"Grants permission to delete the specified analyzer","accessLevel":"Write","resourceTypes":[{"name":"Analyzer","required":true}]},"DeleteArchiveRule":{"conditionKeys":[],"resources":[{"name":"ArchiveRule"}],"description":"Grants permission to delete archive rules for the specified analyzer","accessLevel":"Write","resourceTypes":[{"name":"ArchiveRule","required":true}]},"GenerateFindingRecommendation":{"conditionKeys":[],"resources":[{"name":"Analyzer"}],"description":"Grants permission to generate recommendation steps to resolve a finding","accessLevel":"Write","resourceTypes":[{"name":"Analyzer","required":true}]},"GetAccessPreview":{"conditionKeys":[],"resources":[{"name":"Analyzer"}],"description":"Grants permission to retrieve information about an access preview","accessLevel":"Read","resourceTypes":[{"name":"Analyzer","required":true}]},"GetAnalyzedResource":{"conditionKeys":[],"resources":[{"name":"Analyzer"}],"description":"Grants permission to retrieve information about an analyzed resource","accessLevel":"Read","resourceTypes":[{"name":"Analyzer","required":true}]},"GetAnalyzer":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Analyzer"}],"description":"Grants permission to retrieve information about analyzers","accessLevel":"Read","resourceTypes":[{"name":"Analyzer","required":true}]},"GetArchiveRule":{"conditionKeys":[],"resources":[{"name":"ArchiveRule"}],"description":"Grants permission to retrieve information about archive rules for the specified analyzer","accessLevel":"Read","resourceTypes":[{"name":"ArchiveRule","required":true}]},"GetFinding":{"conditionKeys":[],"resources":[{"name":"Analyzer"}],"description":"Grants permission to retrieve findings","accessLevel":"Read","resourceTypes":[{"name":"Analyzer","required":true}]},"GetFindingRecommendation":{"conditionKeys":[],"resources":[{"name":"Analyzer"}],"description":"Grants permission to retrieve recommendation steps to resolve a finding","accessLevel":"Read","resourceTypes":[{"name":"Analyzer","required":true}]},"GetFindingsStatistics":{"conditionKeys":[],"resources":[{"name":"Analyzer"}],"description":"Grants permission to retrieve statistics for findings","accessLevel":"Read","resourceTypes":[{"name":"Analyzer","required":true}]},"GetGeneratedPolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a policy that was generated using StartPolicyGeneration","accessLevel":"Read","resourceTypes":[]},"ListAccessPreviewFindings":{"conditionKeys":[],"resources":[{"name":"Analyzer"}],"description":"Grants permission to retrieve a list of findings from an access preview","accessLevel":"Read","resourceTypes":[{"name":"Analyzer","required":true}]},"ListAccessPreviews":{"conditionKeys":[],"resources":[{"name":"Analyzer"}],"description":"Grants permission to retrieve a list of access previews","accessLevel":"List","resourceTypes":[{"name":"Analyzer","required":true}]},"ListAnalyzedResources":{"conditionKeys":[],"resources":[{"name":"Analyzer"}],"description":"Grants permission to retrieve a list of resources that have been analyzed","accessLevel":"Read","resourceTypes":[{"name":"Analyzer","required":true}]},"ListAnalyzers":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieves a list of analyzers","accessLevel":"List","resourceTypes":[]},"ListArchiveRules":{"conditionKeys":[],"resources":[{"name":"Analyzer"}],"description":"Grants permission to retrieve a list of archive rules from an analyzer","accessLevel":"List","resourceTypes":[{"name":"Analyzer","required":true}]},"ListFindings":{"conditionKeys":[],"resources":[{"name":"Analyzer"}],"description":"Grants permission to retrieve a list of findings from an analyzer","accessLevel":"Read","resourceTypes":[{"name":"Analyzer","required":true}]},"ListPolicyGenerations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the recently started policy generations","accessLevel":"Read","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"Analyzer"}],"description":"Grants permission to retrieve a list of tags applied to a resource","accessLevel":"Read","resourceTypes":[{"name":"Analyzer","required":false}]},"StartPolicyGeneration":{"conditionKeys":[],"resources":[],"description":"Grants permission to start a policy generation","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"]},"StartResourceScan":{"conditionKeys":[],"resources":[{"name":"Analyzer"}],"description":"Grants permission to start a scan of the policies applied to a resource","accessLevel":"Write","resourceTypes":[{"name":"Analyzer","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Analyzer"}],"description":"Grants permission to add a tag to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"Analyzer","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"Analyzer"}],"description":"Grants permission to remove a tag from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"Analyzer","required":false}]},"UpdateAnalyzer":{"conditionKeys":[],"resources":[{"name":"Analyzer"}],"description":"Grants permission to modify an analyzer's configuration","accessLevel":"Write","resourceTypes":[{"name":"Analyzer","required":true}]},"UpdateArchiveRule":{"conditionKeys":[],"resources":[{"name":"ArchiveRule"}],"description":"Grants permission to modify an archive rule","accessLevel":"Write","resourceTypes":[{"name":"ArchiveRule","required":true}]},"UpdateFindings":{"conditionKeys":[],"resources":[{"name":"Analyzer"}],"description":"Grants permission to modify findings","accessLevel":"Write","resourceTypes":[{"name":"Analyzer","required":true}]},"ValidatePolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to validate a policy","accessLevel":"Read","resourceTypes":[]}},"resources":[{"name":"Analyzer","arnFormats":["arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/${AnalyzerName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"ArchiveRule","arnFormats":["arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/${AnalyzerName}/archive-rule/${RuleName}"],"conditionKeys":[]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters actions based on the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters actions based on tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters actions based on the presence of tag keys in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"account","actions":{"AcceptPrimaryEmailUpdate":{"conditionKeys":["account:EmailTargetDomain"],"resources":[{"name":"accountInOrganization"}],"description":"Grants permission to accept the process to update the primary email address of an account","accessLevel":"Write","resourceTypes":[{"name":"accountInOrganization","required":false}]},"CloseAccount":{"conditionKeys":[],"resources":[{"name":"account"}],"description":"Grants permission to close an account","accessLevel":"Write","resourceTypes":[{"name":"account","required":false}],"permissionOnly":true},"DeleteAlternateContact":{"conditionKeys":["account:AlternateContactTypes"],"resources":[{"name":"account"},{"name":"accountInOrganization"}],"description":"Grants permission to delete the alternate contacts for an account","accessLevel":"Write","resourceTypes":[{"name":"account","required":false},{"name":"accountInOrganization","required":false}]},"DisableRegion":{"conditionKeys":["account:TargetRegion"],"resources":[{"name":"account"},{"name":"accountInOrganization"}],"description":"Grants permission to disable use of a Region","accessLevel":"Write","resourceTypes":[{"name":"account","required":false},{"name":"accountInOrganization","required":false}]},"EnableRegion":{"conditionKeys":["account:TargetRegion"],"resources":[{"name":"account"},{"name":"accountInOrganization"}],"description":"Grants permission to enable use of a Region","accessLevel":"Write","resourceTypes":[{"name":"account","required":false},{"name":"accountInOrganization","required":false}]},"GetAccountInformation":{"conditionKeys":[],"resources":[{"name":"account"},{"name":"accountInOrganization"}],"description":"Grants permission to retrieve the account information for an account","accessLevel":"Read","resourceTypes":[{"name":"account","required":false},{"name":"accountInOrganization","required":false}]},"GetAlternateContact":{"conditionKeys":["account:AlternateContactTypes"],"resources":[{"name":"account"},{"name":"accountInOrganization"}],"description":"Grants permission to retrieve the alternate contacts for an account","accessLevel":"Read","resourceTypes":[{"name":"account","required":false},{"name":"accountInOrganization","required":false}]},"GetContactInformation":{"conditionKeys":[],"resources":[{"name":"account"},{"name":"accountInOrganization"}],"description":"Grants permission to retrieve the primary contact information for an account","accessLevel":"Read","resourceTypes":[{"name":"account","required":false},{"name":"accountInOrganization","required":false}]},"GetGovCloudAccountInformation":{"conditionKeys":[],"resources":[{"name":"account"},{"name":"accountInOrganization"}],"description":"Grants permission to retrieve the linked GovCloud account information for an account","accessLevel":"Read","resourceTypes":[{"name":"account","required":false},{"name":"accountInOrganization","required":false}]},"GetPrimaryEmail":{"conditionKeys":[],"resources":[{"name":"accountInOrganization"}],"description":"Grants permission to retrieve the primary email address of an account","accessLevel":"Read","resourceTypes":[{"name":"accountInOrganization","required":false}]},"GetRegionOptStatus":{"conditionKeys":["account:TargetRegion"],"resources":[{"name":"account"},{"name":"accountInOrganization"}],"description":"Grants permission to get the opt-in status of a Region","accessLevel":"Read","resourceTypes":[{"name":"account","required":false},{"name":"accountInOrganization","required":false}]},"ListRegions":{"conditionKeys":[],"resources":[{"name":"account"},{"name":"accountInOrganization"}],"description":"Grants permission to list the available Regions","accessLevel":"List","resourceTypes":[{"name":"account","required":false},{"name":"accountInOrganization","required":false}]},"PutAccountName":{"conditionKeys":[],"resources":[{"name":"account"},{"name":"accountInOrganization"}],"description":"Grants permission to update the name for an account","accessLevel":"Write","resourceTypes":[{"name":"account","required":false},{"name":"accountInOrganization","required":false}]},"PutAlternateContact":{"conditionKeys":["account:AlternateContactTypes"],"resources":[{"name":"account"},{"name":"accountInOrganization"}],"description":"Grants permission to modify the alternate contacts for an account","accessLevel":"Write","resourceTypes":[{"name":"account","required":false},{"name":"accountInOrganization","required":false}]},"PutContactInformation":{"conditionKeys":[],"resources":[{"name":"account"},{"name":"accountInOrganization"}],"description":"Grants permission to update the primary contact information for an account","accessLevel":"Write","resourceTypes":[{"name":"account","required":false},{"name":"accountInOrganization","required":false}]},"StartPrimaryEmailUpdate":{"conditionKeys":["account:EmailTargetDomain"],"resources":[{"name":"accountInOrganization"}],"description":"Grants permission to start the process to update the primary email address of an account","accessLevel":"Write","resourceTypes":[{"name":"accountInOrganization","required":false}]}},"resources":[{"name":"account","arnFormats":["arn:${Partition}:account::${Account}:account"],"conditionKeys":[]},{"name":"accountInOrganization","arnFormats":["arn:${Partition}:account::${ManagementAccountId}:account/o-${OrganizationId}/${MemberAccountId}"],"conditionKeys":[]}],"conditionKeys":{"account:AccountResourceOrgPaths":{"types":["ArrayOfString"],"description":"Filters access by the resource path for an account in an organization"},"account:AccountResourceOrgTags/${TagKey}":{"types":["String"],"description":"Filters access by resource tags for an account in an organization"},"account:AlternateContactTypes":{"types":["ArrayOfString"],"description":"Filters access by alternate contact types"},"account:EmailTargetDomain":{"types":["String"],"description":"Filters access by email domain of the target email address"},"account:TargetRegion":{"types":["String"],"description":"Filters access by a list of Regions. Enables or disables all the Regions specified here"}}}
@@ -0,0 +1 @@
1
+ {"name":"acm-pca","actions":{"CreateCertificateAuthority":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an AWS Private CA and its associated private key and configuration","accessLevel":"Write","resourceTypes":[]},"CreateCertificateAuthorityAuditReport":{"conditionKeys":[],"resources":[{"name":"certificate-authority"}],"description":"Grants permission to create an audit report for an AWS Private CA","accessLevel":"Write","resourceTypes":[{"name":"certificate-authority","required":true}]},"CreatePermission":{"conditionKeys":[],"resources":[{"name":"certificate-authority"}],"description":"Grants permission to create a permission for an AWS Private CA","accessLevel":"Permissions management","resourceTypes":[{"name":"certificate-authority","required":true}]},"DeleteCertificateAuthority":{"conditionKeys":[],"resources":[{"name":"certificate-authority"}],"description":"Grants permission to delete an AWS Private CA and its associated private key and configuration","accessLevel":"Write","resourceTypes":[{"name":"certificate-authority","required":true}]},"DeletePermission":{"conditionKeys":[],"resources":[{"name":"certificate-authority"}],"description":"Grants permission to delete a permission for an AWS Private CA","accessLevel":"Permissions management","resourceTypes":[{"name":"certificate-authority","required":true}]},"DeletePolicy":{"conditionKeys":[],"resources":[{"name":"certificate-authority"}],"description":"Grants permission to delete the policy for an AWS Private CA","accessLevel":"Permissions management","resourceTypes":[{"name":"certificate-authority","required":true}]},"DescribeCertificateAuthority":{"conditionKeys":[],"resources":[{"name":"certificate-authority"}],"description":"Grants permission to return a list of the configuration and status fields contained in the specified AWS Private CA","accessLevel":"Read","resourceTypes":[{"name":"certificate-authority","required":true}]},"DescribeCertificateAuthorityAuditReport":{"conditionKeys":[],"resources":[{"name":"certificate-authority"}],"description":"Grants permission to return the status and information about an AWS Private CA audit report","accessLevel":"Read","resourceTypes":[{"name":"certificate-authority","required":true}]},"GetCertificate":{"conditionKeys":[],"resources":[{"name":"certificate-authority"}],"description":"Grants permission to retrieve an AWS Private CA certificate and certificate chain for the certificate authority specified by an ARN","accessLevel":"Read","resourceTypes":[{"name":"certificate-authority","required":true}]},"GetCertificateAuthorityCertificate":{"conditionKeys":[],"resources":[{"name":"certificate-authority"}],"description":"Grants permission to retrieve an AWS Private CA certificate and certificate chain for the certificate authority specified by an ARN","accessLevel":"Read","resourceTypes":[{"name":"certificate-authority","required":true}]},"GetCertificateAuthorityCsr":{"conditionKeys":[],"resources":[{"name":"certificate-authority"}],"description":"Grants permission to retrieve an AWS Private CA certificate signing request (CSR) for the certificate-authority specified by an ARN","accessLevel":"Read","resourceTypes":[{"name":"certificate-authority","required":true}]},"GetPolicy":{"conditionKeys":[],"resources":[{"name":"certificate-authority"}],"description":"Grants permission to retrieve the policy on an AWS Private CA","accessLevel":"Read","resourceTypes":[{"name":"certificate-authority","required":true}]},"ImportCertificateAuthorityCertificate":{"conditionKeys":[],"resources":[{"name":"certificate-authority"}],"description":"Grants permission to import an SSL/TLS certificate into AWS Private CA for use as the CA certificate of an AWS Private CA","accessLevel":"Write","resourceTypes":[{"name":"certificate-authority","required":true}]},"IssueCertificate":{"conditionKeys":["acm-pca:TemplateArn"],"resources":[{"name":"certificate-authority"}],"description":"Grants permission to issue an AWS Private CA certificate","accessLevel":"Write","resourceTypes":[{"name":"certificate-authority","required":true}]},"ListCertificateAuthorities":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of the AWS Private CA certificate authority ARNs, and a summary of the status of each CA in the calling account","accessLevel":"List","resourceTypes":[]},"ListPermissions":{"conditionKeys":[],"resources":[{"name":"certificate-authority"}],"description":"Grants permission to list the permissions that have been applied to the AWS Private CA certificate authority","accessLevel":"Read","resourceTypes":[{"name":"certificate-authority","required":true}]},"ListTags":{"conditionKeys":[],"resources":[{"name":"certificate-authority"}],"description":"Grants permission to list the tags that have been applied to the AWS Private CA certificate authority","accessLevel":"Read","resourceTypes":[{"name":"certificate-authority","required":true}]},"PutPolicy":{"conditionKeys":[],"resources":[{"name":"certificate-authority"}],"description":"Grants permission to put a policy on an AWS Private CA","accessLevel":"Permissions management","resourceTypes":[{"name":"certificate-authority","required":true}]},"RestoreCertificateAuthority":{"conditionKeys":[],"resources":[{"name":"certificate-authority"}],"description":"Grants permission to restore an AWS Private CA from the deleted state to the state it was in when deleted","accessLevel":"Write","resourceTypes":[{"name":"certificate-authority","required":true}]},"RevokeCertificate":{"conditionKeys":[],"resources":[{"name":"certificate-authority"}],"description":"Grants permission to revoke a certificate issued by an AWS Private CA","accessLevel":"Write","resourceTypes":[{"name":"certificate-authority","required":true}]},"TagCertificateAuthority":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"certificate-authority"}],"description":"Grants permission to add one or more tags to an AWS Private CA","accessLevel":"Tagging","resourceTypes":[{"name":"certificate-authority","required":true}]},"UntagCertificateAuthority":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"certificate-authority"}],"description":"Grants permission to remove one or more tags from an AWS Private CA","accessLevel":"Tagging","resourceTypes":[{"name":"certificate-authority","required":true}]},"UpdateCertificateAuthority":{"conditionKeys":[],"resources":[{"name":"certificate-authority"}],"description":"Grants permission to update the configuration of an AWS Private CA","accessLevel":"Write","resourceTypes":[{"name":"certificate-authority","required":true}]}},"resources":[{"name":"certificate-authority","arnFormats":["arn:${Partition}:acm-pca:${Region}:${Account}:certificate-authority/${CertificateAuthorityId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"acm-pca:TemplateArn":{"types":["ARN"],"description":"Filters access by the arn of the certificate template used in Issue Certificate request"},"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"acm","actions":{"AddTagsToCertificate":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"certificate"}],"description":"Grants permission to add one or more tags to a certificate","accessLevel":"Tagging","resourceTypes":[{"name":"certificate","required":true}]},"DeleteCertificate":{"conditionKeys":[],"resources":[{"name":"certificate"}],"description":"Grants permission to delete a certificate and its associated private key","accessLevel":"Write","resourceTypes":[{"name":"certificate","required":true}]},"DescribeCertificate":{"conditionKeys":[],"resources":[{"name":"certificate"}],"description":"Grants permission to retreive a certificates and its metadata","accessLevel":"Read","resourceTypes":[{"name":"certificate","required":true}]},"ExportCertificate":{"conditionKeys":["acm:DomainNames"],"resources":[{"name":"certificate"}],"description":"Grants permission to export an exportable certificate for use anywhere","accessLevel":"Read","resourceTypes":[{"name":"certificate","required":true}]},"GetAccountConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve account level configuration from AWS Certificate Manager","accessLevel":"Read","resourceTypes":[]},"GetCertificate":{"conditionKeys":[],"resources":[{"name":"certificate"}],"description":"Grants permission to retrieve a certificate and certificate chain for a certificate ARN","accessLevel":"Read","resourceTypes":[{"name":"certificate","required":true}]},"ImportCertificate":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"certificate"}],"description":"Grants permission to import a 3rd party certificate into AWS Certificate Manager (ACM)","accessLevel":"Write","resourceTypes":[{"name":"certificate","required":true}]},"ListCertificates":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of the certificate ARNs and the domain name for each ARN","accessLevel":"List","resourceTypes":[]},"ListTagsForCertificate":{"conditionKeys":[],"resources":[{"name":"certificate"}],"description":"Grants permission to lists the tags that have been associated with a certificate","accessLevel":"Read","resourceTypes":[{"name":"certificate","required":true}]},"PutAccountConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update account level configuration in AWS Certificate Manager","accessLevel":"Write","resourceTypes":[]},"RemoveTagsFromCertificate":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"certificate"}],"description":"Grants permission to remove one or more tags from a certificate","accessLevel":"Tagging","resourceTypes":[{"name":"certificate","required":true}]},"RenewCertificate":{"conditionKeys":[],"resources":[{"name":"certificate"}],"description":"Grants permission to renew an eligible private certificate","accessLevel":"Write","resourceTypes":[{"name":"certificate","required":true}]},"RequestCertificate":{"conditionKeys":["acm:CertificateAuthority","acm:CertificateTransparencyLogging","acm:DomainNames","acm:Export","acm:KeyAlgorithm","acm:ValidationMethod","aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to requests a public or private certificate","accessLevel":"Write","resourceTypes":[]},"ResendValidationEmail":{"conditionKeys":[],"resources":[{"name":"certificate"}],"description":"Grants permission to resend an email to request domain ownership validation","accessLevel":"Write","resourceTypes":[{"name":"certificate","required":true}]},"RevokeCertificate":{"conditionKeys":["acm:DomainNames"],"resources":[{"name":"certificate"}],"description":"Grants permission to revoke an exportable certificate","accessLevel":"Write","resourceTypes":[{"name":"certificate","required":true}]},"UpdateCertificateOptions":{"conditionKeys":[],"resources":[{"name":"certificate"}],"description":"Grants permission to update a certificate configuration. Use this to specify whether to opt in to or out of certificate transparency logging","accessLevel":"Write","resourceTypes":[{"name":"certificate","required":true}]}},"resources":[{"name":"certificate","arnFormats":["arn:${Partition}:acm:${Region}:${Account}:certificate/${CertificateId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"acm:CertificateAuthority":{"types":["String"],"description":"Filters access by certificateAuthority in the request. Can be used to restrict which Certificate Authorites certificates can be issued from"},"acm:CertificateTransparencyLogging":{"types":["String"],"description":"Filters access by certificateTransparencyLogging option in the request. Default 'ENABLED' if no key is present in the request"},"acm:DomainNames":{"types":["ArrayOfString"],"description":"Filters access by domainNames in the request. This key can be used to restrict which domains can be in certificate requests"},"acm:Export":{"types":["String"],"description":"Filters access by the export option in the request. Can be used to restrict creation of certificates that can be exported"},"acm:KeyAlgorithm":{"types":["String"],"description":"Filters access by keyAlgorithm in the request"},"acm:ValidationMethod":{"types":["String"],"description":"Filters access by validationMethod in the request. Default 'EMAIL' if no key is present in the request"},"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"aco-automation","actions":{"AssociateAccounts":{"conditionKeys":[],"resources":[],"description":"Grants permission to associate member accounts with the management account","accessLevel":"Write","resourceTypes":[]},"CreateAutomationRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create automation rule","accessLevel":"Write","resourceTypes":[]},"DeleteAutomationRule":{"conditionKeys":[],"resources":[{"name":"AutomationRule"}],"description":"Grants permission to delete automation rule","accessLevel":"Write","resourceTypes":[{"name":"AutomationRule","required":true}]},"DisassociateAccounts":{"conditionKeys":[],"resources":[],"description":"Grants permission to disassociate member accounts from the management account","accessLevel":"Write","resourceTypes":[]},"GetAutomationEvent":{"conditionKeys":[],"resources":[],"description":"Grants permission to get automation event details","accessLevel":"Read","resourceTypes":[]},"GetAutomationRule":{"conditionKeys":[],"resources":[{"name":"AutomationRule"}],"description":"Grants permission to get automation rule","accessLevel":"Read","resourceTypes":[{"name":"AutomationRule","required":true}]},"GetEnrollmentConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to get enrollment configuration","accessLevel":"Read","resourceTypes":[]},"ListAccounts":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the accounts in your organization that are enrolled in Compute Optimizer and whether they have enabled the Automation feature","accessLevel":"List","resourceTypes":[]},"ListAutomationEventSteps":{"conditionKeys":[],"resources":[],"description":"Grants permission to list automation event steps","accessLevel":"List","resourceTypes":[]},"ListAutomationEventSummaries":{"conditionKeys":[],"resources":[],"description":"Grants permission to list automation event summaries","accessLevel":"List","resourceTypes":[]},"ListAutomationEvents":{"conditionKeys":[],"resources":[],"description":"Grants permission to list automation events","accessLevel":"List","resourceTypes":[]},"ListAutomationRulePreview":{"conditionKeys":[],"resources":[],"description":"Grants permission to list automation rule preview results","accessLevel":"List","resourceTypes":[],"dependentActions":["ec2:DescribeVolumes"]},"ListAutomationRulePreviewSummaries":{"conditionKeys":[],"resources":[],"description":"Grants permission to list automation rule preview summaries","accessLevel":"List","resourceTypes":[]},"ListAutomationRules":{"conditionKeys":[],"resources":[],"description":"Grants permission to list automation rules","accessLevel":"List","resourceTypes":[]},"ListRecommendedActionSummaries":{"conditionKeys":[],"resources":[],"description":"Grants permission to list recommended action summaries","accessLevel":"List","resourceTypes":[]},"ListRecommendedActions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list recommended actions","accessLevel":"List","resourceTypes":[],"dependentActions":["ec2:DescribeVolumes"]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"AutomationRule"}],"description":"Grants permission to list tags for automation rule","accessLevel":"List","resourceTypes":[{"name":"AutomationRule","required":true}]},"RollbackAutomationEvent":{"conditionKeys":[],"resources":[],"description":"Grants permission to initiate a rollback for an automation event","accessLevel":"Write","resourceTypes":[]},"StartAutomationEvent":{"conditionKeys":[],"resources":[],"description":"Grants permission to initiate an on-demand automation for a recommended action","accessLevel":"Write","resourceTypes":[]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"AutomationRule"}],"description":"Grants permission to add tags to automation rule","accessLevel":"Tagging","resourceTypes":[{"name":"AutomationRule","required":true}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"AutomationRule"}],"description":"Grants permission to remove tags from automation rule","accessLevel":"Tagging","resourceTypes":[{"name":"AutomationRule","required":true}]},"UpdateAutomationRule":{"conditionKeys":[],"resources":[{"name":"AutomationRule"}],"description":"Grants permission to update automation rule","accessLevel":"Write","resourceTypes":[{"name":"AutomationRule","required":true}]},"UpdateEnrollmentConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to update enrollment configuration for the Compute Optimizer automation feature","accessLevel":"Write","resourceTypes":[]}},"resources":[{"name":"AutomationRule","arnFormats":["arn:${Partition}:compute-optimizer::${Account}:automation-rule/${RuleId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"action-recommendations","actions":{"ListRecommendedActions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list recommended actions in the AWS Management Console","accessLevel":"List","resourceTypes":[]}},"resources":[],"conditionKeys":{}}
@@ -0,0 +1 @@
1
+ {"name":"activate","actions":{"CreateForm":{"conditionKeys":[],"resources":[],"description":"Grants permission to submit an Activate application form","accessLevel":"Write","resourceTypes":[]},"GetAccountContact":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the AWS account contact information","accessLevel":"Read","resourceTypes":[]},"GetContentInfo":{"conditionKeys":[],"resources":[],"description":"Grants permission to get Activate tech posts and offer information","accessLevel":"Read","resourceTypes":[]},"GetCosts":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the AWS cost information","accessLevel":"Read","resourceTypes":[]},"GetCredits":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the AWS credit information","accessLevel":"Read","resourceTypes":[]},"GetMemberInfo":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the Activate member information","accessLevel":"Read","resourceTypes":[]},"GetProgram":{"conditionKeys":[],"resources":[],"description":"Grants permission to get an Activate program","accessLevel":"Read","resourceTypes":[]},"PutMemberInfo":{"conditionKeys":[],"resources":[],"description":"Grants permission to create or update the Activate member information","accessLevel":"Write","resourceTypes":[]}},"resources":[],"conditionKeys":{}}
@@ -0,0 +1 @@
1
+ {"name":"aidevops","actions":{"AllowVendedLogDeliveryForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to authorize vended logs","accessLevel":"Permissions management","resourceTypes":[],"permissionOnly":true},"AssociateService":{"conditionKeys":[],"resources":[{"name":"agentspace"},{"name":"associations"}],"description":"Grants permission to associate service","accessLevel":"Write","resourceTypes":[{"name":"agentspace","required":true},{"name":"associations","required":true}]},"CreateAgentSpace":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"agentspace"}],"description":"Grants permission to create agentspace","accessLevel":"Write","resourceTypes":[{"name":"agentspace","required":true}]},"CreateBacklogTask":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to create a new backlog task","accessLevel":"Write","resourceTypes":[{"name":"agentspace","required":true}]},"CreateChat":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to create a chat","accessLevel":"Write","resourceTypes":[{"name":"agentspace","required":true}]},"CreateKnowledgeItem":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to create a new knowledge item","accessLevel":"Write","resourceTypes":[{"name":"agentspace","required":true}]},"DeleteAgentSpace":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"agentspace"}],"description":"Grants permission to delete agentspace","accessLevel":"Write","resourceTypes":[{"name":"agentspace","required":true}]},"DeleteKnowledgeItem":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to delete a knowledge item","accessLevel":"Write","resourceTypes":[{"name":"agentspace","required":true}]},"DeregisterService":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"service"}],"description":"Grants permission to deregister a service","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}]},"DescribeSupportLevel":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to describe a chat for a case","accessLevel":"Write","resourceTypes":[{"name":"agentspace","required":true}]},"DisableOperatorApp":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to disable the Operator App access to the given AgentSpace","accessLevel":"Write","resourceTypes":[{"name":"agentspace","required":true}]},"DisassociateService":{"conditionKeys":[],"resources":[{"name":"agentspace"},{"name":"associations"}],"description":"Grants permission to disassociate service","accessLevel":"Write","resourceTypes":[{"name":"agentspace","required":true},{"name":"associations","required":true}]},"DiscoverTopology":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to discover topology information","accessLevel":"Write","resourceTypes":[{"name":"agentspace","required":true}]},"EnableOperatorApp":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to enable the Operator App to access the given AgentSpace","accessLevel":"Write","resourceTypes":[{"name":"agentspace","required":true}]},"EndChatForCase":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to end a chat for a case","accessLevel":"Write","resourceTypes":[{"name":"agentspace","required":true}]},"GetAccountUsage":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve account usage information","accessLevel":"Read","resourceTypes":[]},"GetAgentSpace":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"agentspace"}],"description":"Grants permission to get agentspace","accessLevel":"Read","resourceTypes":[{"name":"agentspace","required":true}]},"GetAssociation":{"conditionKeys":[],"resources":[{"name":"agentspace"},{"name":"associations"}],"description":"Grants permission to get association","accessLevel":"Read","resourceTypes":[{"name":"agentspace","required":true},{"name":"associations","required":true}]},"GetBacklogTask":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to get a backlog task","accessLevel":"Read","resourceTypes":[{"name":"agentspace","required":true}]},"GetKnowledgeItem":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to get a knowledge item","accessLevel":"Read","resourceTypes":[{"name":"agentspace","required":true}]},"GetOperatorApp":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to get operator auth config for any enabled auth flow","accessLevel":"Read","resourceTypes":[{"name":"agentspace","required":true}]},"GetRecommendation":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to get a recommendation","accessLevel":"Read","resourceTypes":[{"name":"agentspace","required":true}]},"GetService":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"service"}],"description":"Grants permission to get services","accessLevel":"Read","resourceTypes":[{"name":"service","required":true}]},"InitiateChatForCase":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to initiate a chat for a case","accessLevel":"Write","resourceTypes":[{"name":"agentspace","required":true}]},"ListAgentSpaces":{"conditionKeys":[],"resources":[],"description":"Grants permission to list agentspace","accessLevel":"List","resourceTypes":[]},"ListAssociations":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to list associations","accessLevel":"List","resourceTypes":[{"name":"agentspace","required":true}]},"ListBacklogTasks":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to list backlog tasks","accessLevel":"List","resourceTypes":[{"name":"agentspace","required":true}]},"ListChats":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to list chats","accessLevel":"List","resourceTypes":[{"name":"agentspace","required":true}]},"ListExecutions":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to list executions","accessLevel":"List","resourceTypes":[{"name":"agentspace","required":true}]},"ListGoals":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to list goals","accessLevel":"List","resourceTypes":[{"name":"agentspace","required":true}]},"ListJournalRecords":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to list journal records","accessLevel":"List","resourceTypes":[{"name":"agentspace","required":true}]},"ListKnowledgeItemVersions":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to list knowledge item versions","accessLevel":"List","resourceTypes":[{"name":"agentspace","required":true}]},"ListKnowledgeItems":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to list knowledge items","accessLevel":"List","resourceTypes":[{"name":"agentspace","required":true}]},"ListPendingMessages":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to list pending messages","accessLevel":"List","resourceTypes":[{"name":"agentspace","required":true}]},"ListRecommendations":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to list recommendations","accessLevel":"List","resourceTypes":[{"name":"agentspace","required":true}]},"ListServices":{"conditionKeys":[],"resources":[],"description":"Grants permission to list services","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"agentspace"},{"name":"service"}],"description":"Grants permission to list tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"agentspace","required":false},{"name":"service","required":false}]},"ListWebhooks":{"conditionKeys":[],"resources":[{"name":"agentspace"},{"name":"associations"}],"description":"Grants permission to list webhooks for association","accessLevel":"List","resourceTypes":[{"name":"agentspace","required":true},{"name":"associations","required":true}]},"RegisterService":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"service"}],"description":"Grants permission to register specific service","accessLevel":"Write","resourceTypes":[{"name":"service","required":true}]},"SearchServiceAccessibleResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to look up a registered service accessible resources","accessLevel":"Read","resourceTypes":[]},"SendMessage":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to send chat messages","accessLevel":"Write","resourceTypes":[{"name":"agentspace","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"agentspace"},{"name":"service"}],"description":"Grants permission to tag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"agentspace","required":false},{"name":"service","required":false}]},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"agentspace"},{"name":"service"}],"description":"Grants permission to untag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"agentspace","required":false},{"name":"service","required":false}]},"UpdateAgentSpace":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"agentspace"}],"description":"Grants permission to update agentspace","accessLevel":"Write","resourceTypes":[{"name":"agentspace","required":true}]},"UpdateAssociation":{"conditionKeys":[],"resources":[{"name":"agentspace"},{"name":"associations"}],"description":"Grants permission to update association","accessLevel":"Write","resourceTypes":[{"name":"agentspace","required":true},{"name":"associations","required":true}]},"UpdateBacklogTask":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to update a task","accessLevel":"Write","resourceTypes":[{"name":"agentspace","required":true}]},"UpdateGoal":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to update a goal","accessLevel":"Write","resourceTypes":[{"name":"agentspace","required":true}]},"UpdateKnowledgeItem":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to update a knowledge item","accessLevel":"Write","resourceTypes":[{"name":"agentspace","required":true}]},"UpdateOperatorAppIdpConfig":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to update the external Identity Provider configuration for the Operator App","accessLevel":"Write","resourceTypes":[{"name":"agentspace","required":true}]},"UpdateRecommendation":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to update a recommendation","accessLevel":"Write","resourceTypes":[{"name":"agentspace","required":true}]},"ValidateAwsAssociations":{"conditionKeys":[],"resources":[{"name":"agentspace"}],"description":"Grants permission to validate aws association","accessLevel":"Write","resourceTypes":[{"name":"agentspace","required":true}]}},"resources":[{"name":"agentspace","arnFormats":["arn:${Partition}:aidevops:${Region}:${Account}:agentspace/${AgentSpaceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"associations","arnFormats":["arn:${Partition}:aidevops:${Region}:${Account}:agentspace/${AgentSpaceId}/associations/${AssociationId}"],"conditionKeys":[]},{"name":"service","arnFormats":["arn:${Partition}:aidevops:${Region}:${Account}:service/${ServiceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"aiops","actions":{"CreateInvestigation":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to create a new investigation in the specified investigation group","accessLevel":"Write","resourceTypes":[{"name":"investigation-group","required":true}],"dependentActions":["kms:Decrypt","kms:GenerateDataKey","sts:SetContext"]},"CreateInvestigationEvent":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to create a new investigation event in the specified investigation group","accessLevel":"Write","resourceTypes":[{"name":"investigation-group","required":true}],"dependentActions":["cloudwatch:DescribeAlarmHistory","cloudwatch:DescribeAlarms","cloudwatch:GetInsightRuleReport","cloudwatch:GetMetricData","kms:Decrypt","kms:GenerateDataKey","logs:GetQueryResults","sts:SetContext"]},"CreateInvestigationGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new investigation group","accessLevel":"Write","resourceTypes":[],"dependentActions":["aiops:TagResource","cloudtrail:DescribeTrails","iam:PassRole","kms:Decrypt","kms:DescribeKey","kms:GenerateDataKey","sso:CreateApplication","sso:DeleteApplication","sso:PutApplicationAccessScope","sso:PutApplicationAssignmentConfiguration","sso:PutApplicationAuthenticationMethod","sso:PutApplicationGrant","sso:TagResource"]},"CreateInvestigationResource":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to create an investigation resource in the specified investigation group","accessLevel":"Write","resourceTypes":[{"name":"investigation-group","required":true}],"dependentActions":["cloudwatch:DescribeAlarmHistory","cloudwatch:DescribeAlarms","cloudwatch:GetInsightRuleReport","cloudwatch:GetMetricData","kms:GenerateDataKey","logs:GetQueryResults"]},"CreateReport":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to create a new report in the specified investigation","accessLevel":"Write","resourceTypes":[{"name":"investigation-group","required":true}],"dependentActions":["kms:Decrypt","kms:GenerateDataKey","sts:SetContext"]},"DeleteInvestigation":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to delete an investigation in the specified investigation group","accessLevel":"Write","resourceTypes":[{"name":"investigation-group","required":true}],"dependentActions":["sts:SetContext"]},"DeleteInvestigationGroup":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to delete the specified investigation group","accessLevel":"Write","resourceTypes":[{"name":"investigation-group","required":true}],"dependentActions":["sso:DeleteApplication"]},"DeleteInvestigationGroupPolicy":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to delete the investigation group policy attached to an investigation group","accessLevel":"Write","resourceTypes":[{"name":"investigation-group","required":true}]},"GenerateReport":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to generate a report in the specified investigation report","accessLevel":"Write","resourceTypes":[{"name":"investigation-group","required":true}],"dependentActions":["kms:Decrypt","kms:GenerateDataKey","sts:SetContext"]},"GetEphemeralInvestigationResults":{"conditionKeys":[],"resources":[],"description":"Grants permission to run and retrieve ephemeral investigation results","accessLevel":"List","resourceTypes":[]},"GetFact":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to retrieve a fact in the specified investigation report","accessLevel":"Read","resourceTypes":[{"name":"investigation-group","required":true}],"dependentActions":["kms:Decrypt"]},"GetFactVersions":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to retrieve all versions of a fact token in the specified investigation report","accessLevel":"Read","resourceTypes":[{"name":"investigation-group","required":true}],"dependentActions":["kms:Decrypt"]},"GetInvestigation":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to retrieve an investigation in the specified investigation group","accessLevel":"Read","resourceTypes":[{"name":"investigation-group","required":true}]},"GetInvestigationEvent":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to retrieve an investigation event in the specified investigation group","accessLevel":"Read","resourceTypes":[{"name":"investigation-group","required":true}],"dependentActions":["kms:Decrypt"]},"GetInvestigationGroup":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to retrieve the specified investigation group","accessLevel":"Read","resourceTypes":[{"name":"investigation-group","required":true}]},"GetInvestigationGroupPolicy":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to retrieve the investigation group policy attached to an investigation group","accessLevel":"Read","resourceTypes":[{"name":"investigation-group","required":true}]},"GetInvestigationResource":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to retrieve an investigation resource in the specified investigation group","accessLevel":"Read","resourceTypes":[{"name":"investigation-group","required":true}],"dependentActions":["kms:Decrypt"]},"GetReport":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to retrieve a report in the specified investigation","accessLevel":"Read","resourceTypes":[{"name":"investigation-group","required":true}],"dependentActions":["kms:Decrypt"]},"ListFacts":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to list all facts in the specified investigation report","accessLevel":"List","resourceTypes":[{"name":"investigation-group","required":true}],"dependentActions":["kms:Decrypt"]},"ListInvestigationEvents":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to list all investigation events in the specified investigation group","accessLevel":"List","resourceTypes":[{"name":"investigation-group","required":true}]},"ListInvestigationGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all investigation groups in the AWS account making the request","accessLevel":"List","resourceTypes":[]},"ListInvestigations":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to list all investigations that are in the specified investigation group","accessLevel":"List","resourceTypes":[{"name":"investigation-group","required":true}]},"ListReports":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to list all reports in the specified investigation","accessLevel":"List","resourceTypes":[{"name":"investigation-group","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to list the tags for the specified resource","accessLevel":"List","resourceTypes":[{"name":"investigation-group","required":true}]},"PutFact":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to create or update a new fact in the specified investigation report","accessLevel":"Write","resourceTypes":[{"name":"investigation-group","required":true}],"dependentActions":["kms:Decrypt","kms:GenerateDataKey","sts:SetContext"]},"PutInvestigationGroupPolicy":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to create/update the investigation group policy attached to an investigation group","accessLevel":"Write","resourceTypes":[{"name":"investigation-group","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"investigation-group"}],"description":"Grants permission to add or update the specified tags for the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"investigation-group","required":true}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"investigation-group"}],"description":"Grants permission to remove the specified tags from the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"investigation-group","required":true}]},"UpdateInvestigation":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to update an investigation in the specified investigation group","accessLevel":"Write","resourceTypes":[{"name":"investigation-group","required":true}],"dependentActions":["kms:Decrypt","kms:GenerateDataKey","sts:SetContext"]},"UpdateInvestigationEvent":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to update an investigation event in the specified investigation group","accessLevel":"Write","resourceTypes":[{"name":"investigation-group","required":true}],"dependentActions":["kms:Decrypt","kms:GenerateDataKey","sts:SetContext"]},"UpdateInvestigationGroup":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to update the specified investigation group","accessLevel":"Write","resourceTypes":[{"name":"investigation-group","required":true}],"dependentActions":["cloudtrail:DescribeTrails","iam:PassRole","kms:Decrypt","kms:DescribeKey","kms:GenerateDataKey","sso:CreateApplication","sso:DeleteApplication","sso:PutApplicationAccessScope","sso:PutApplicationAssignmentConfiguration","sso:PutApplicationAuthenticationMethod","sso:PutApplicationGrant","sso:TagResource"]},"UpdateReport":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to update a report in the specified investigation","accessLevel":"Write","resourceTypes":[{"name":"investigation-group","required":true}],"dependentActions":["kms:Decrypt","kms:GenerateDataKey","sts:SetContext"]},"ValidateInvestigationGroup":{"conditionKeys":[],"resources":[{"name":"investigation-group"}],"description":"Grants permission to validate the specified investigation group","accessLevel":"Read","resourceTypes":[{"name":"investigation-group","required":true}]}},"resources":[{"name":"investigation-group","arnFormats":["arn:${Partition}:aiops:${Region}:${Account}:investigation-group/${InvestigationGroupId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"airflow-serverless","actions":{"CreateWorkflow":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new workflow","accessLevel":"Write","resourceTypes":[]},"DeleteWorkflow":{"conditionKeys":[],"resources":[{"name":"Workflow"}],"description":"Grants permission to delete a workflow","accessLevel":"Write","resourceTypes":[{"name":"Workflow","required":true}]},"GetTaskInstance":{"conditionKeys":[],"resources":[{"name":"Workflow"}],"description":"Grants permission to retrieve the task details for a workflow run","accessLevel":"Read","resourceTypes":[{"name":"Workflow","required":true}]},"GetWorkflow":{"conditionKeys":[],"resources":[{"name":"Workflow"}],"description":"Grants permission to retrieve details about a workflow","accessLevel":"Read","resourceTypes":[{"name":"Workflow","required":true}]},"GetWorkflowRun":{"conditionKeys":[],"resources":[{"name":"Workflow"}],"description":"Grants permission to retrieve details about a workflow run","accessLevel":"Read","resourceTypes":[{"name":"Workflow","required":true}]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Workflow"}],"description":"Grants permission to list the tags for the specified resource","accessLevel":"Read","resourceTypes":[{"name":"Workflow","required":true}]},"ListTaskInstances":{"conditionKeys":[],"resources":[{"name":"Workflow"}],"description":"Grants permission to list the tasks for a workflow run","accessLevel":"List","resourceTypes":[{"name":"Workflow","required":true}]},"ListWorkflowRuns":{"conditionKeys":[],"resources":[{"name":"Workflow"}],"description":"Grants permission to list the workflow runs of a workflow","accessLevel":"List","resourceTypes":[{"name":"Workflow","required":true}]},"ListWorkflowVersions":{"conditionKeys":[],"resources":[{"name":"Workflow"}],"description":"Grants permission to list the workflow versions","accessLevel":"List","resourceTypes":[{"name":"Workflow","required":true}]},"ListWorkflows":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the workflows","accessLevel":"List","resourceTypes":[]},"StartWorkflowRun":{"conditionKeys":[],"resources":[{"name":"Workflow"}],"description":"Grants permission to start an on-demand workflow run for the workflow","accessLevel":"Write","resourceTypes":[{"name":"Workflow","required":true}]},"StopWorkflowRun":{"conditionKeys":[],"resources":[{"name":"Workflow"}],"description":"Grants permission to stop a workflow run","accessLevel":"Write","resourceTypes":[{"name":"Workflow","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Workflow"}],"description":"Grants permission to tag the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"Workflow","required":true}]},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Workflow"}],"description":"Grants permission to untag the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"Workflow","required":true}]},"UpdateWorkflow":{"conditionKeys":[],"resources":[{"name":"Workflow"}],"description":"Grants permission to update an existing workflow","accessLevel":"Write","resourceTypes":[{"name":"Workflow","required":true}]}},"resources":[{"name":"Workflow","arnFormats":["arn:${Partition}:airflow-serverless:${Region}:${Account}:workflow/${WorkflowId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs that are attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by tag keys in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"airflow","actions":{"CreateCliToken":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to create a short-lived token that allows a user to invoke Airflow CLI via an endpoint on the Apache Airflow Webserver","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}]},"CreateEnvironment":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"environment"}],"description":"Grants permission to create an Amazon MWAA environment","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}]},"CreateWebLoginToken":{"conditionKeys":[],"resources":[{"name":"rbac-role"}],"description":"Grants permission to create a short-lived token that allows a user to log into Apache Airflow web UI","accessLevel":"Write","resourceTypes":[{"name":"rbac-role","required":true}]},"DeleteEnvironment":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"environment"}],"description":"Grants permission to delete an Amazon MWAA environment","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}]},"GetEnvironment":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"environment"}],"description":"Grants permission to view details about an Amazon MWAA environment","accessLevel":"Read","resourceTypes":[{"name":"environment","required":true}]},"InvokeRestApi":{"conditionKeys":[],"resources":[{"name":"rbac-role"}],"description":"Grants permission to invoke Airflow REST API via an endpoint on the Apache Airflow Webserver","accessLevel":"Write","resourceTypes":[{"name":"rbac-role","required":true}]},"ListEnvironments":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the Amazon MWAA environments in your account","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"environment"}],"description":"Grants permission to lists tag for an Amazon MWAA environment","accessLevel":"Read","resourceTypes":[{"name":"environment","required":false}]},"PublishMetrics":{"conditionKeys":[],"resources":[{"name":"environment"}],"description":"Grants permission to publish metrics for an Amazon MWAA environment","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"environment"}],"description":"Grants permission to tag an Amazon MWAA environment","accessLevel":"Tagging","resourceTypes":[{"name":"environment","required":false}]},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"environment"}],"description":"Grants permission to untag an Amazon MWAA environment","accessLevel":"Tagging","resourceTypes":[{"name":"environment","required":false}]},"UpdateEnvironment":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"environment"}],"description":"Grants permission to modify an Amazon MWAA environment","accessLevel":"Write","resourceTypes":[{"name":"environment","required":true}]}},"resources":[{"name":"environment","arnFormats":["arn:${Partition}:airflow:${Region}:${Account}:environment/${EnvironmentName}"],"conditionKeys":[]},{"name":"rbac-role","arnFormats":["arn:${Partition}:airflow:${Region}:${Account}:role/${EnvironmentName}/${RoleName}"],"conditionKeys":[]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by tag keys in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"amplify","actions":{"AssociateWebACL":{"conditionKeys":[],"resources":[{"name":"apps"}],"description":"Grants permission to associate a WebACL to a Resource","accessLevel":"Write","resourceTypes":[{"name":"apps","required":true}]},"CreateApp":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new Amplify App","accessLevel":"Write","resourceTypes":[]},"CreateBackendEnvironment":{"conditionKeys":[],"resources":[{"name":"apps"}],"description":"Grants permission to create a new backend environment for an Amplify App","accessLevel":"Write","resourceTypes":[{"name":"apps","required":true}]},"CreateBranch":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"branches"}],"description":"Grants permission to create a new Branch for an Amplify App","accessLevel":"Write","resourceTypes":[{"name":"branches","required":true}]},"CreateDeployment":{"conditionKeys":[],"resources":[{"name":"branches"}],"description":"Grants permission to create a deployment for manual deploy apps. (Apps are not connected to repository)","accessLevel":"Write","resourceTypes":[{"name":"branches","required":true}]},"CreateDomainAssociation":{"conditionKeys":[],"resources":[{"name":"domains"}],"description":"Grants permission to create a new DomainAssociation on an App","accessLevel":"Write","resourceTypes":[{"name":"domains","required":true}]},"CreateWebHook":{"conditionKeys":[],"resources":[{"name":"branches"}],"description":"Grants permission to create a new webhook on an App","accessLevel":"Write","resourceTypes":[{"name":"branches","required":true}]},"DeleteApp":{"conditionKeys":[],"resources":[{"name":"apps"}],"description":"Grants permission to delete an existing Amplify App by appId","accessLevel":"Write","resourceTypes":[{"name":"apps","required":true}]},"DeleteBackendEnvironment":{"conditionKeys":[],"resources":[{"name":"apps"}],"description":"Grants permission to delete a branch for an Amplify App","accessLevel":"Write","resourceTypes":[{"name":"apps","required":true}]},"DeleteBranch":{"conditionKeys":[],"resources":[{"name":"branches"}],"description":"Grants permission to delete a branch for an Amplify App","accessLevel":"Write","resourceTypes":[{"name":"branches","required":true}]},"DeleteDomainAssociation":{"conditionKeys":[],"resources":[{"name":"domains"}],"description":"Grants permission to delete a DomainAssociation","accessLevel":"Write","resourceTypes":[{"name":"domains","required":true}]},"DeleteJob":{"conditionKeys":[],"resources":[{"name":"jobs"}],"description":"Grants permission to delete a job, for an Amplify branch, part of Amplify App","accessLevel":"Write","resourceTypes":[{"name":"jobs","required":true}]},"DeleteWebHook":{"conditionKeys":[],"resources":[{"name":"webhooks"}],"description":"Grants permission to delete a webhook by id","accessLevel":"Write","resourceTypes":[{"name":"webhooks","required":true}]},"DisassociateWebACL":{"conditionKeys":[],"resources":[{"name":"apps"}],"description":"Grants permission to disassociate a WebACL from a Resource","accessLevel":"Write","resourceTypes":[{"name":"apps","required":true}]},"GenerateAccessLogs":{"conditionKeys":[],"resources":[{"name":"apps"}],"description":"Grants permission to generate website access logs for a specific time range via a pre-signed URL","accessLevel":"Write","resourceTypes":[{"name":"apps","required":true}]},"GetApp":{"conditionKeys":[],"resources":[{"name":"apps"}],"description":"Grants permission to retrieve an existing Amplify App by appId","accessLevel":"Read","resourceTypes":[{"name":"apps","required":true}]},"GetArtifactUrl":{"conditionKeys":[],"resources":[{"name":"apps"}],"description":"Grants permission to retrieve artifact info that corresponds to a artifactId","accessLevel":"Read","resourceTypes":[{"name":"apps","required":true}]},"GetBackendEnvironment":{"conditionKeys":[],"resources":[{"name":"apps"}],"description":"Grants permission to retrieve a backend environment for an Amplify App","accessLevel":"Read","resourceTypes":[{"name":"apps","required":true}]},"GetBranch":{"conditionKeys":[],"resources":[{"name":"branches"}],"description":"Grants permission to retrieve a branch for an Amplify App","accessLevel":"Read","resourceTypes":[{"name":"branches","required":true}]},"GetDomainAssociation":{"conditionKeys":[],"resources":[{"name":"domains"}],"description":"Grants permission to retrieve domain info that corresponds to an appId and domainName","accessLevel":"Read","resourceTypes":[{"name":"domains","required":true}]},"GetJob":{"conditionKeys":[],"resources":[{"name":"jobs"}],"description":"Grants permission to get a job for a branch, part of an Amplify App","accessLevel":"Read","resourceTypes":[{"name":"jobs","required":true}]},"GetWebACLForResource":{"conditionKeys":[],"resources":[{"name":"apps"}],"description":"Grants permission to retrieve the WebACL associated with a Resource","accessLevel":"Read","resourceTypes":[{"name":"apps","required":true}]},"GetWebHook":{"conditionKeys":[],"resources":[{"name":"webhooks"}],"description":"Grants permission to retrieve webhook info that corresponds to a webhookId","accessLevel":"Read","resourceTypes":[{"name":"webhooks","required":true}]},"ListApps":{"conditionKeys":[],"resources":[],"description":"Grants permission to list existing Amplify Apps","accessLevel":"List","resourceTypes":[]},"ListArtifacts":{"conditionKeys":[],"resources":[{"name":"apps"}],"description":"Grants permission to list artifacts with an app, a branch, a job and an artifact type","accessLevel":"List","resourceTypes":[{"name":"apps","required":true}]},"ListBackendEnvironments":{"conditionKeys":[],"resources":[{"name":"apps"}],"description":"Grants permission to list backend environments for an Amplify App","accessLevel":"List","resourceTypes":[{"name":"apps","required":true}]},"ListBranches":{"conditionKeys":[],"resources":[{"name":"apps"}],"description":"Grants permission to list branches for an Amplify App","accessLevel":"List","resourceTypes":[{"name":"apps","required":true}]},"ListDomainAssociations":{"conditionKeys":[],"resources":[{"name":"apps"}],"description":"Grants permission to list domains with an app","accessLevel":"List","resourceTypes":[{"name":"apps","required":true}]},"ListJobs":{"conditionKeys":[],"resources":[{"name":"branches"}],"description":"Grants permission to list Jobs for a branch, part of an Amplify App","accessLevel":"List","resourceTypes":[{"name":"branches","required":true}]},"ListResourcesForWebACL":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the Resources associated with a WebACL","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"apps"},{"name":"branches"},{"name":"domains"},{"name":"webhooks"}],"description":"Grants permission to list tags for an AWS Amplify Console resource","accessLevel":"Read","resourceTypes":[{"name":"apps","required":false},{"name":"branches","required":false},{"name":"domains","required":false},{"name":"webhooks","required":false}]},"ListWebHooks":{"conditionKeys":[],"resources":[{"name":"apps"}],"description":"Grants permission to list webhooks on an App","accessLevel":"List","resourceTypes":[{"name":"apps","required":true}]},"StartDeployment":{"conditionKeys":[],"resources":[{"name":"branches"}],"description":"Grants permission to start a deployment for manual deploy apps. (Apps are not connected to repository)","accessLevel":"Write","resourceTypes":[{"name":"branches","required":true}]},"StartJob":{"conditionKeys":[],"resources":[{"name":"jobs"}],"description":"Grants permission to start a new job for a branch, part of an Amplify App","accessLevel":"Write","resourceTypes":[{"name":"jobs","required":true}]},"StopJob":{"conditionKeys":[],"resources":[{"name":"jobs"}],"description":"Grants permission to stop a job that is in progress, for an Amplify branch, part of Amplify App","accessLevel":"Write","resourceTypes":[{"name":"jobs","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"apps"},{"name":"branches"},{"name":"domains"},{"name":"webhooks"}],"description":"Grants permission to tag an AWS Amplify Console resource","accessLevel":"Tagging","resourceTypes":[{"name":"apps","required":false},{"name":"branches","required":false},{"name":"domains","required":false},{"name":"webhooks","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"apps"},{"name":"branches"},{"name":"domains"},{"name":"webhooks"}],"description":"Grants permission to remove a tag from an AWS Amplify Console resource","accessLevel":"Tagging","resourceTypes":[{"name":"apps","required":false},{"name":"branches","required":false},{"name":"domains","required":false},{"name":"webhooks","required":false}]},"UpdateApp":{"conditionKeys":[],"resources":[{"name":"apps"}],"description":"Grants permission to update an existing Amplify App","accessLevel":"Write","resourceTypes":[{"name":"apps","required":true}]},"UpdateBranch":{"conditionKeys":[],"resources":[{"name":"branches"}],"description":"Grants permission to update a branch for an Amplify App","accessLevel":"Write","resourceTypes":[{"name":"branches","required":true}]},"UpdateDomainAssociation":{"conditionKeys":[],"resources":[{"name":"domains"}],"description":"Grants permission to update a DomainAssociation on an App","accessLevel":"Write","resourceTypes":[{"name":"domains","required":true}]},"UpdateWebHook":{"conditionKeys":[],"resources":[{"name":"webhooks"}],"description":"Grants permission to update a webhook","accessLevel":"Write","resourceTypes":[{"name":"webhooks","required":true}]}},"resources":[{"name":"apps","arnFormats":["arn:${Partition}:amplify:${Region}:${Account}:apps/${AppId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"branches","arnFormats":["arn:${Partition}:amplify:${Region}:${Account}:apps/${AppId}/branches/${BranchName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"domains","arnFormats":["arn:${Partition}:amplify:${Region}:${Account}:apps/${AppId}/domains/${DomainName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"jobs","arnFormats":["arn:${Partition}:amplify:${Region}:${Account}:apps/${AppId}/branches/${BranchName}/jobs/${JobId}"],"conditionKeys":[]},{"name":"webhooks","arnFormats":["arn:${Partition}:amplify:${Region}:${Account}:webhooks/${WebhookId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag's key and value in a request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag's key associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys in a request"}}}
@@ -0,0 +1 @@
1
+ {"name":"amplifybackend","actions":{"CloneBackend":{"conditionKeys":[],"resources":[{"name":"backend"}],"description":"Grants permission to clone an existing Amplify Admin backend environment into a new Amplify Admin backend enviroment","accessLevel":"Write","resourceTypes":[{"name":"backend","required":true}]},"CreateBackend":{"conditionKeys":[],"resources":[{"name":"created-backend"}],"description":"Grants permission to create a new Amplify Admin backend environment by Amplify appId","accessLevel":"Write","resourceTypes":[{"name":"created-backend","required":true}]},"CreateBackendAPI":{"conditionKeys":[],"resources":[{"name":"api"},{"name":"backend"},{"name":"environment"}],"description":"Grants permission to create an API for an existing Amplify Admin backend environment by appId and backendEnvironmentName","accessLevel":"Write","resourceTypes":[{"name":"api","required":true},{"name":"backend","required":true},{"name":"environment","required":true}]},"CreateBackendAuth":{"conditionKeys":[],"resources":[{"name":"auth"},{"name":"backend"},{"name":"environment"}],"description":"Grants permission to create an auth resource for an existing Amplify Admin backend environment by appId and backendEnvironmentName","accessLevel":"Write","resourceTypes":[{"name":"auth","required":true},{"name":"backend","required":true},{"name":"environment","required":true}]},"CreateBackendConfig":{"conditionKeys":[],"resources":[{"name":"config"}],"description":"Grants permission to create a new Amplify Admin backend config by Amplify appId","accessLevel":"Write","resourceTypes":[{"name":"config","required":true}]},"CreateBackendStorage":{"conditionKeys":[],"resources":[{"name":"backend"},{"name":"environment"},{"name":"storage"}],"description":"Grants permission to create a backend storage resource","accessLevel":"Write","resourceTypes":[{"name":"backend","required":true},{"name":"environment","required":true},{"name":"storage","required":true}]},"CreateToken":{"conditionKeys":[],"resources":[{"name":"backend"},{"name":"token"}],"description":"Grants permission to create an Amplify Admin challenge token by appId","accessLevel":"Write","resourceTypes":[{"name":"backend","required":true},{"name":"token","required":true}]},"DeleteBackend":{"conditionKeys":[],"resources":[{"name":"backend"},{"name":"environment"}],"description":"Grants permission to delete an existing Amplify Admin backend environment by appId and backendEnvironmentName","accessLevel":"Write","resourceTypes":[{"name":"backend","required":true},{"name":"environment","required":true}]},"DeleteBackendAPI":{"conditionKeys":[],"resources":[{"name":"api"},{"name":"backend"},{"name":"environment"}],"description":"Grants permission to delete an API of an existing Amplify Admin backend environment by appId and backendEnvironmentName","accessLevel":"Write","resourceTypes":[{"name":"api","required":true},{"name":"backend","required":true},{"name":"environment","required":true}]},"DeleteBackendAuth":{"conditionKeys":[],"resources":[{"name":"auth"},{"name":"backend"},{"name":"environment"}],"description":"Grants permission to delete an auth resource of an existing Amplify Admin backend environment by appId and backendEnvironmentName","accessLevel":"Write","resourceTypes":[{"name":"auth","required":true},{"name":"backend","required":true},{"name":"environment","required":true}]},"DeleteBackendStorage":{"conditionKeys":[],"resources":[{"name":"backend"},{"name":"environment"},{"name":"storage"}],"description":"Grants permission to delete a backend storage resource","accessLevel":"Write","resourceTypes":[{"name":"backend","required":true},{"name":"environment","required":true},{"name":"storage","required":true}]},"DeleteToken":{"conditionKeys":[],"resources":[{"name":"backend"},{"name":"token"}],"description":"Grants permission to delete an Amplify Admin challenge token by appId","accessLevel":"Write","resourceTypes":[{"name":"backend","required":true},{"name":"token","required":true}]},"GenerateBackendAPIModels":{"conditionKeys":[],"resources":[{"name":"api"},{"name":"backend"},{"name":"environment"}],"description":"Grants permission to generate models for an API of an existing Amplify Admin backend environment by appId and backendEnvironmentName","accessLevel":"Write","resourceTypes":[{"name":"api","required":true},{"name":"backend","required":true},{"name":"environment","required":true}]},"GetBackend":{"conditionKeys":[],"resources":[{"name":"backend"},{"name":"environment"}],"description":"Grants permission to retrieve an existing Amplify Admin backend environment by appId and backendEnvironmentName","accessLevel":"Read","resourceTypes":[{"name":"backend","required":true},{"name":"environment","required":true}]},"GetBackendAPI":{"conditionKeys":[],"resources":[{"name":"api"},{"name":"backend"},{"name":"environment"}],"description":"Grants permission to retrieve an API of an existing Amplify Admin backend environment by appId and backendEnvironmentName","accessLevel":"Read","resourceTypes":[{"name":"api","required":true},{"name":"backend","required":true},{"name":"environment","required":true}]},"GetBackendAPIModels":{"conditionKeys":[],"resources":[{"name":"api"},{"name":"backend"},{"name":"environment"}],"description":"Grants permission to retrieve models for an API of an existing Amplify Admin backend environment by appId and backendEnvironmentName","accessLevel":"Read","resourceTypes":[{"name":"api","required":true},{"name":"backend","required":true},{"name":"environment","required":true}]},"GetBackendAuth":{"conditionKeys":[],"resources":[{"name":"auth"},{"name":"backend"},{"name":"environment"}],"description":"Grants permission to retrieve an auth resource of an existing Amplify Admin backend environment by appId and backendEnvironmentName","accessLevel":"Read","resourceTypes":[{"name":"auth","required":true},{"name":"backend","required":true},{"name":"environment","required":true}]},"GetBackendJob":{"conditionKeys":[],"resources":[{"name":"backend"},{"name":"job"}],"description":"Grants permission to retrieve a job of an existing Amplify Admin backend environment by appId and backendEnvironmentName","accessLevel":"Read","resourceTypes":[{"name":"backend","required":true},{"name":"job","required":true}]},"GetBackendStorage":{"conditionKeys":[],"resources":[{"name":"backend"},{"name":"environment"}],"description":"Grants permission to retrieve an existing backend storage resource","accessLevel":"Read","resourceTypes":[{"name":"backend","required":true},{"name":"environment","required":true}]},"GetToken":{"conditionKeys":[],"resources":[{"name":"backend"},{"name":"token"}],"description":"Grants permission to retrieve an Amplify Admin challenge token by appId","accessLevel":"Read","resourceTypes":[{"name":"backend","required":true},{"name":"token","required":true}]},"ImportBackendAuth":{"conditionKeys":[],"resources":[{"name":"auth"},{"name":"backend"},{"name":"environment"}],"description":"Grants permission to import an existing auth resource of an Amplify Admin backend environment by appId and backendEnvironmentName","accessLevel":"Write","resourceTypes":[{"name":"auth","required":true},{"name":"backend","required":true},{"name":"environment","required":true}]},"ImportBackendStorage":{"conditionKeys":[],"resources":[{"name":"backend"},{"name":"environment"},{"name":"storage"}],"description":"Grants permission to import an existing backend storage resource","accessLevel":"Write","resourceTypes":[{"name":"backend","required":true},{"name":"environment","required":true},{"name":"storage","required":true}]},"ListBackendJobs":{"conditionKeys":[],"resources":[{"name":"backend"},{"name":"job"}],"description":"Grants permission to retrieve the jobs of an existing Amplify Admin backend environment by appId and backendEnvironmentName","accessLevel":"List","resourceTypes":[{"name":"backend","required":true},{"name":"job","required":true}]},"ListS3Buckets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve s3 buckets","accessLevel":"List","resourceTypes":[],"dependentActions":["s3:ListAllMyBuckets"]},"RemoveAllBackends":{"conditionKeys":[],"resources":[{"name":"backend"},{"name":"environment"}],"description":"Grants permission to delete all existing Amplify Admin backend environments by appId","accessLevel":"Write","resourceTypes":[{"name":"backend","required":true},{"name":"environment","required":true}]},"RemoveBackendConfig":{"conditionKeys":[],"resources":[{"name":"config"}],"description":"Grants permission to delete an Amplify Admin backend config by Amplify appId","accessLevel":"Write","resourceTypes":[{"name":"config","required":true}]},"UpdateBackendAPI":{"conditionKeys":[],"resources":[{"name":"api"},{"name":"backend"},{"name":"environment"}],"description":"Grants permission to update an API of an existing Amplify Admin backend environment by appId and backendEnvironmentName","accessLevel":"Write","resourceTypes":[{"name":"api","required":true},{"name":"backend","required":true},{"name":"environment","required":true}]},"UpdateBackendAuth":{"conditionKeys":[],"resources":[{"name":"auth"},{"name":"backend"},{"name":"environment"}],"description":"Grants permission to update an auth resource of an existing Amplify Admin backend environment by appId and backendEnvironmentName","accessLevel":"Write","resourceTypes":[{"name":"auth","required":true},{"name":"backend","required":true},{"name":"environment","required":true}]},"UpdateBackendConfig":{"conditionKeys":[],"resources":[{"name":"config"}],"description":"Grants permission to update an Amplify Admin backend config by Amplify appId","accessLevel":"Write","resourceTypes":[{"name":"config","required":true}]},"UpdateBackendJob":{"conditionKeys":[],"resources":[{"name":"backend"},{"name":"job"}],"description":"Grants permission to update a job of an existing Amplify Admin backend environment by appId and backendEnvironmentName","accessLevel":"Write","resourceTypes":[{"name":"backend","required":true},{"name":"job","required":true}]},"UpdateBackendStorage":{"conditionKeys":[],"resources":[{"name":"backend"},{"name":"environment"},{"name":"storage"}],"description":"Grants permission to update a backend storage resource","accessLevel":"Write","resourceTypes":[{"name":"backend","required":true},{"name":"environment","required":true},{"name":"storage","required":true}]}},"resources":[{"name":"api","arnFormats":["arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/api/*"],"conditionKeys":[]},{"name":"auth","arnFormats":["arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/auth/*"],"conditionKeys":[]},{"name":"backend","arnFormats":["arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/*"],"conditionKeys":[]},{"name":"config","arnFormats":["arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/config/*"],"conditionKeys":[]},{"name":"created-backend","arnFormats":["arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/*"],"conditionKeys":[]},{"name":"environment","arnFormats":["arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/environments/*"],"conditionKeys":[]},{"name":"job","arnFormats":["arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/job/*"],"conditionKeys":[]},{"name":"storage","arnFormats":["arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/storage/*"],"conditionKeys":[]},{"name":"token","arnFormats":["arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/challenge/*"],"conditionKeys":[]}],"conditionKeys":{}}
@@ -0,0 +1 @@
1
+ {"name":"amplifyuibuilder","actions":{"CreateComponent":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a component","accessLevel":"Write","resourceTypes":[],"dependentActions":["amplify:GetApp","amplifyuibuilder:GetComponent","amplifyuibuilder:TagResource"]},"CreateForm":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a form","accessLevel":"Write","resourceTypes":[],"dependentActions":["amplify:GetApp","amplifyuibuilder:GetForm","amplifyuibuilder:TagResource","amplifyuibuilder:UntagResource"]},"CreateTheme":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a theme","accessLevel":"Write","resourceTypes":[],"dependentActions":["amplify:GetApp","amplifyuibuilder:GetTheme","amplifyuibuilder:TagResource"]},"DeleteComponent":{"conditionKeys":[],"resources":[{"name":"ComponentResource"}],"description":"Grants permission to delete a component","accessLevel":"Write","resourceTypes":[{"name":"ComponentResource","required":true}],"dependentActions":["amplify:GetApp","amplifyuibuilder:UntagResource"]},"DeleteForm":{"conditionKeys":[],"resources":[{"name":"FormResource"}],"description":"Grants permission to delete a form","accessLevel":"Write","resourceTypes":[{"name":"FormResource","required":true}],"dependentActions":["amplify:GetApp","amplifyuibuilder:TagResource","amplifyuibuilder:UntagResource"]},"DeleteTheme":{"conditionKeys":[],"resources":[{"name":"ThemeResource"}],"description":"Grants permission to delete a theme","accessLevel":"Write","resourceTypes":[{"name":"ThemeResource","required":true}],"dependentActions":["amplify:GetApp","amplifyuibuilder:UntagResource"]},"ExchangeCodeForToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to exchange a code for a token","accessLevel":"Write","resourceTypes":[]},"ExportComponents":{"conditionKeys":[],"resources":[],"description":"Grants permission to export components","accessLevel":"Read","resourceTypes":[]},"ExportForms":{"conditionKeys":[],"resources":[],"description":"Grants permission to export forms","accessLevel":"Read","resourceTypes":[]},"ExportThemes":{"conditionKeys":[],"resources":[],"description":"Grants permission to export themes","accessLevel":"Read","resourceTypes":[]},"GetCodegenJob":{"conditionKeys":[],"resources":[{"name":"CodegenJobResource"}],"description":"Grants permission to get an existing codegen job","accessLevel":"Read","resourceTypes":[{"name":"CodegenJobResource","required":true}],"dependentActions":["amplify:GetApp"]},"GetComponent":{"conditionKeys":[],"resources":[{"name":"ComponentResource"}],"description":"Grants permission to get an existing component","accessLevel":"Read","resourceTypes":[{"name":"ComponentResource","required":true}],"dependentActions":["amplify:GetApp"]},"GetForm":{"conditionKeys":[],"resources":[{"name":"FormResource"}],"description":"Grants permission to get an existing form","accessLevel":"Read","resourceTypes":[{"name":"FormResource","required":true}],"dependentActions":["amplify:GetApp"]},"GetMetadata":{"conditionKeys":[],"resources":[],"description":"Grants permission to get an existing metadata","accessLevel":"Read","resourceTypes":[]},"GetTheme":{"conditionKeys":[],"resources":[{"name":"ThemeResource"}],"description":"Grants permission to get an existing theme","accessLevel":"Read","resourceTypes":[{"name":"ThemeResource","required":true}],"dependentActions":["amplify:GetApp"]},"ListCodegenJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to list codegen jobs","accessLevel":"List","resourceTypes":[],"dependentActions":["amplify:GetApp"]},"ListComponents":{"conditionKeys":[],"resources":[],"description":"Grants permission to list components","accessLevel":"List","resourceTypes":[],"dependentActions":["amplify:GetApp"]},"ListForms":{"conditionKeys":[],"resources":[],"description":"Grants permission to list forms","accessLevel":"List","resourceTypes":[],"dependentActions":["amplify:GetApp"]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"CodegenJobResource"},{"name":"ComponentResource"},{"name":"FormResource"},{"name":"ThemeResource"}],"description":"Grants permission to list tags for a specified Amazon Resource Name (ARN)","accessLevel":"List","resourceTypes":[{"name":"CodegenJobResource","required":false},{"name":"ComponentResource","required":false},{"name":"FormResource","required":false},{"name":"ThemeResource","required":false}]},"ListThemes":{"conditionKeys":[],"resources":[],"description":"Grants permission to list themes","accessLevel":"List","resourceTypes":[],"dependentActions":["amplify:GetApp"]},"PutMetadataFlag":{"conditionKeys":[],"resources":[],"description":"Grants permission to put an existing metadata","accessLevel":"Write","resourceTypes":[]},"RefreshToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to refresh an access token","accessLevel":"Write","resourceTypes":[]},"ResetMetadataFlag":{"conditionKeys":[],"resources":[],"description":"Grants permission to reset an existing metadata","accessLevel":"Write","resourceTypes":[]},"StartCodegenJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to start a codegen job","accessLevel":"Write","resourceTypes":[],"dependentActions":["amplify:GetApp"]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"CodegenJobResource"},{"name":"ComponentResource"},{"name":"FormResource"},{"name":"ThemeResource"}],"description":"Grants permission to tag the resource with a tag key and value","accessLevel":"Tagging","resourceTypes":[{"name":"CodegenJobResource","required":false},{"name":"ComponentResource","required":false},{"name":"FormResource","required":false},{"name":"ThemeResource","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"CodegenJobResource"},{"name":"ComponentResource"},{"name":"FormResource"},{"name":"ThemeResource"}],"description":"Grants permission to untag a resource with a specified Amazon Resource Name (ARN)","accessLevel":"Tagging","resourceTypes":[{"name":"CodegenJobResource","required":false},{"name":"ComponentResource","required":false},{"name":"FormResource","required":false},{"name":"ThemeResource","required":false}]},"UpdateComponent":{"conditionKeys":[],"resources":[{"name":"ComponentResource"}],"description":"Grants permission to update a component","accessLevel":"Write","resourceTypes":[{"name":"ComponentResource","required":true}],"dependentActions":["amplify:GetApp","amplifyuibuilder:TagResource","amplifyuibuilder:UntagResource"]},"UpdateForm":{"conditionKeys":[],"resources":[{"name":"FormResource"}],"description":"Grants permission to update a form","accessLevel":"Write","resourceTypes":[{"name":"FormResource","required":true}],"dependentActions":["amplify:GetApp","amplifyuibuilder:GetForm","amplifyuibuilder:TagResource","amplifyuibuilder:UntagResource"]},"UpdateTheme":{"conditionKeys":[],"resources":[{"name":"ThemeResource"}],"description":"Grants permission to update a theme","accessLevel":"Write","resourceTypes":[{"name":"ThemeResource","required":true}],"dependentActions":["amplify:GetApp","amplifyuibuilder:GetTheme","amplifyuibuilder:TagResource","amplifyuibuilder:UntagResource"]}},"resources":[{"name":"CodegenJobResource","arnFormats":["arn:${Partition}:amplifyuibuilder:${Region}:${Account}:app/${AppId}/environment/${EnvironmentName}/codegen-jobs/${Id}"],"conditionKeys":["amplifyuibuilder:CodegenJobResourceAppId","amplifyuibuilder:CodegenJobResourceEnvironmentName","amplifyuibuilder:CodegenJobResourceId","aws:ResourceTag/${TagKey}"]},{"name":"ComponentResource","arnFormats":["arn:${Partition}:amplifyuibuilder:${Region}:${Account}:app/${AppId}/environment/${EnvironmentName}/components/${Id}"],"conditionKeys":["amplifyuibuilder:ComponentResourceAppId","amplifyuibuilder:ComponentResourceEnvironmentName","amplifyuibuilder:ComponentResourceId","aws:ResourceTag/${TagKey}"]},{"name":"FormResource","arnFormats":["arn:${Partition}:amplifyuibuilder:${Region}:${Account}:app/${AppId}/environment/${EnvironmentName}/forms/${Id}"],"conditionKeys":["amplifyuibuilder:FormResourceAppId","amplifyuibuilder:FormResourceEnvironmentName","amplifyuibuilder:FormResourceId","aws:ResourceTag/${TagKey}"]},{"name":"ThemeResource","arnFormats":["arn:${Partition}:amplifyuibuilder:${Region}:${Account}:app/${AppId}/environment/${EnvironmentName}/themes/${Id}"],"conditionKeys":["amplifyuibuilder:ThemeResourceAppId","amplifyuibuilder:ThemeResourceEnvironmentName","amplifyuibuilder:ThemeResourceId","aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"amplifyuibuilder:CodegenJobResourceAppId":{"types":["String"],"description":"Filters access by the app ID"},"amplifyuibuilder:CodegenJobResourceEnvironmentName":{"types":["String"],"description":"Filters access by the backend environment name"},"amplifyuibuilder:CodegenJobResourceId":{"types":["String"],"description":"Filters access by the codegen job ID"},"amplifyuibuilder:ComponentResourceAppId":{"types":["String"],"description":"Filters access by the app ID"},"amplifyuibuilder:ComponentResourceEnvironmentName":{"types":["String"],"description":"Filters access by the backend environment name"},"amplifyuibuilder:ComponentResourceId":{"types":["String"],"description":"Filters access by the component ID"},"amplifyuibuilder:FormResourceAppId":{"types":["String"],"description":"Filters access by the app ID"},"amplifyuibuilder:FormResourceEnvironmentName":{"types":["String"],"description":"Filters access by the backend environment name"},"amplifyuibuilder:FormResourceId":{"types":["String"],"description":"Filters access by the form ID"},"amplifyuibuilder:ThemeResourceAppId":{"types":["String"],"description":"Filters access by the app ID"},"amplifyuibuilder:ThemeResourceEnvironmentName":{"types":["String"],"description":"Filters access by the backend environment name"},"amplifyuibuilder:ThemeResourceId":{"types":["String"],"description":"Filters access by the theme ID"},"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}}}
@@ -0,0 +1 @@
1
+ {"name":"aoss","actions":{"APIAccessAll":{"conditionKeys":["aoss:CollectionId","aoss:collection"],"resources":[{"name":"Collection"}],"description":"Grant permission to all the supported Opensearch APIs","accessLevel":"Write","resourceTypes":[{"name":"Collection","required":true}]},"AddCollectionToCollectionGroup":{"conditionKeys":["aoss:collection-group"],"resources":[{"name":"CollectionGroup"}],"description":"Grants permission to add a serverless collection to a specified collection group","accessLevel":"Write","resourceTypes":[{"name":"CollectionGroup","required":true}]},"BatchGetCollection":{"conditionKeys":["aoss:collection"],"resources":[],"description":"Grants permission to get attributes for one or more collections","accessLevel":"Read","resourceTypes":[]},"BatchGetCollectionGroup":{"conditionKeys":["aoss:collection-group"],"resources":[],"description":"Grants permission to get attributes for one or more collection groups","accessLevel":"Read","resourceTypes":[]},"BatchGetEffectiveLifecyclePolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the information about a lifecycle policy applied to one or more AOSS resources","accessLevel":"Read","resourceTypes":[]},"BatchGetLifecyclePolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about one or more lifecycle policies","accessLevel":"Read","resourceTypes":[]},"BatchGetVpcEndpoint":{"conditionKeys":[],"resources":[],"description":"Grants permission to get attributes for one or more VPC endpoints","accessLevel":"Read","resourceTypes":[]},"CreateAccessPolicy":{"conditionKeys":["aoss:collection","aoss:index"],"resources":[],"description":"Grants permission to create a data access policy","accessLevel":"Write","resourceTypes":[]},"CreateCollection":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a serverless collection","accessLevel":"Write","resourceTypes":[]},"CreateCollectionGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a serverless collection group","accessLevel":"Write","resourceTypes":[]},"CreateIndex":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an opensearch index","accessLevel":"Write","resourceTypes":[]},"CreateLifecyclePolicy":{"conditionKeys":["aoss:index"],"resources":[],"description":"Grants permission to create a lifecycle policy","accessLevel":"Write","resourceTypes":[]},"CreateSecurityConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a serverless security configuration","accessLevel":"Write","resourceTypes":[]},"CreateSecurityPolicy":{"conditionKeys":["aoss:collection"],"resources":[],"description":"Grants permission to create a network or encryption policy","accessLevel":"Write","resourceTypes":[]},"CreateVpcEndpoint":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an OpenSearch-Serverless-managed interface VPC endpoint","accessLevel":"Write","resourceTypes":[]},"DashboardsAccessAll":{"conditionKeys":["aoss:CollectionId","aoss:collection"],"resources":[{"name":"Dashboards"}],"description":"Grants permission to Opensearch Serverless Dashboards","accessLevel":"Write","resourceTypes":[{"name":"Dashboards","required":true}]},"DeleteAccessPolicy":{"conditionKeys":["aoss:collection","aoss:index"],"resources":[],"description":"Grants permission to delete a data access policy","accessLevel":"Write","resourceTypes":[]},"DeleteCollection":{"conditionKeys":[],"resources":[{"name":"Collection"}],"description":"Grants permission to delete a serverless collection","accessLevel":"Write","resourceTypes":[{"name":"Collection","required":true}]},"DeleteCollectionGroup":{"conditionKeys":[],"resources":[{"name":"CollectionGroup"}],"description":"Grants permission to delete a serverless collection group","accessLevel":"Write","resourceTypes":[{"name":"CollectionGroup","required":true}]},"DeleteIndex":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete an opensearch index","accessLevel":"Write","resourceTypes":[]},"DeleteLifecyclePolicy":{"conditionKeys":["aoss:index"],"resources":[],"description":"Grants permission to delete a lifecycle policy","accessLevel":"Write","resourceTypes":[]},"DeleteSecurityConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a security configuration","accessLevel":"Write","resourceTypes":[]},"DeleteSecurityPolicy":{"conditionKeys":["aoss:collection"],"resources":[],"description":"Grants permission to delete a security policy","accessLevel":"Write","resourceTypes":[]},"DeleteVpcEndpoint":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete an OpenSearch Serverless-managed interface VPC endpoint","accessLevel":"Write","resourceTypes":[]},"GetAccessPolicy":{"conditionKeys":["aoss:collection","aoss:index"],"resources":[],"description":"Grants permission to get information about a data access policy","accessLevel":"Read","resourceTypes":[]},"GetAccountSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to get account settings, including capacity settings","accessLevel":"Read","resourceTypes":[]},"GetIndex":{"conditionKeys":[],"resources":[],"description":"Grants permission to get an opensearch index","accessLevel":"Read","resourceTypes":[]},"GetPoliciesStats":{"conditionKeys":[],"resources":[],"description":"Grants permission to get statistis about the security policies in your account","accessLevel":"Read","resourceTypes":[]},"GetSecurityConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to get information about a serverless security configuration","accessLevel":"Read","resourceTypes":[]},"GetSecurityPolicy":{"conditionKeys":["aoss:collection"],"resources":[],"description":"Grants permission to get information about a security policy","accessLevel":"Read","resourceTypes":[]},"ListAccessPolicies":{"conditionKeys":[],"resources":[],"description":"Grants permission to list data access policies","accessLevel":"List","resourceTypes":[]},"ListCollectionGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to list collection groups","accessLevel":"List","resourceTypes":[]},"ListCollections":{"conditionKeys":[],"resources":[],"description":"Grants permission to list collections","accessLevel":"List","resourceTypes":[]},"ListLifecyclePolicies":{"conditionKeys":[],"resources":[],"description":"Grants permission to list lifecycle policies","accessLevel":"List","resourceTypes":[]},"ListSecurityConfigs":{"conditionKeys":[],"resources":[],"description":"Grants permission to list security configurations","accessLevel":"List","resourceTypes":[]},"ListSecurityPolicies":{"conditionKeys":[],"resources":[],"description":"Grants permission to list security policies","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to list tags for a collection","accessLevel":"List","resourceTypes":[]},"ListVpcEndpoints":{"conditionKeys":[],"resources":[],"description":"Grants permission to list OpenSearch Serverless-managed VPC endpoints","accessLevel":"List","resourceTypes":[]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to tag a serverless collection","accessLevel":"Write","resourceTypes":[]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[],"description":"Grants permission to remove tags from a collection","accessLevel":"Write","resourceTypes":[]},"UpdateAccessPolicy":{"conditionKeys":["aoss:collection","aoss:index"],"resources":[],"description":"Grants permission to update a data access policy","accessLevel":"Write","resourceTypes":[]},"UpdateAccountSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to update account settings, including capacity settings","accessLevel":"Write","resourceTypes":[]},"UpdateCollection":{"conditionKeys":[],"resources":[{"name":"Collection"}],"description":"Grants permission to update a collection","accessLevel":"Write","resourceTypes":[{"name":"Collection","required":true}]},"UpdateCollectionGroup":{"conditionKeys":[],"resources":[{"name":"CollectionGroup"}],"description":"Grants permission to update a collection group","accessLevel":"Write","resourceTypes":[{"name":"CollectionGroup","required":true}]},"UpdateIndex":{"conditionKeys":[],"resources":[],"description":"Grants permission to update an opensearch index","accessLevel":"Write","resourceTypes":[]},"UpdateLifecyclePolicy":{"conditionKeys":["aoss:index"],"resources":[],"description":"Grants permission to update a lifecycle policy","accessLevel":"Write","resourceTypes":[]},"UpdateSecurityConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a security configuration","accessLevel":"Write","resourceTypes":[]},"UpdateSecurityPolicy":{"conditionKeys":["aoss:collection"],"resources":[],"description":"Grants permission to update a security policy","accessLevel":"Write","resourceTypes":[]},"UpdateVpcEndpoint":{"conditionKeys":[],"resources":[],"description":"Grants permission to update an OpenSearch Serverless-managed VPC endpoint","accessLevel":"Write","resourceTypes":[]}},"resources":[{"name":"Collection","arnFormats":["arn:${Partition}:aoss:${Region}:${Account}:collection/${CollectionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"CollectionGroup","arnFormats":["arn:${Partition}:aoss:${Region}:${Account}:collection-group/${CollectionGroupId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Dashboards","arnFormats":["arn:${Partition}:aoss:${Region}:${Account}:dashboards/default"],"conditionKeys":[]}],"conditionKeys":{"aoss:CollectionId":{"types":["String"],"description":"Filters access by the identifier of the collection"},"aoss:collection":{"types":["String"],"description":"Filters access by the collection name"},"aoss:collection-group":{"types":["String"],"description":"Filters access by the collection group name"},"aoss:index":{"types":["String"],"description":"Filters access by the index"},"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access based on the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access based on the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access based on the tag keys that are passed in the request"}}}