aws-iam-ls 0.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.direnv/bin/nix-direnv-reload +19 -0
- package/.direnv/flake-profile-a5d5b61aa8a61b7d9d765e1daf971a9a578f1cfa.rc +2156 -0
- package/.github/workflows/publish.yml +37 -0
- package/.github/workflows/test.yml +16 -0
- package/.vscodeignore +17 -0
- package/LICENSE +21 -0
- package/package.json +53 -0
- package/readme.md +25 -0
- package/src/data/condition-keys/global.json +362 -0
- package/src/data/servicereference/actions.json +1 -0
- package/src/data/servicereference/service-principals.json +1 -0
- package/src/data/servicereference/services/a2c.json +1 -0
- package/src/data/servicereference/services/a4b.json +1 -0
- package/src/data/servicereference/services/access-analyzer.json +1 -0
- package/src/data/servicereference/services/account.json +1 -0
- package/src/data/servicereference/services/acm-pca.json +1 -0
- package/src/data/servicereference/services/acm.json +1 -0
- package/src/data/servicereference/services/aco-automation.json +1 -0
- package/src/data/servicereference/services/action-recommendations.json +1 -0
- package/src/data/servicereference/services/activate.json +1 -0
- package/src/data/servicereference/services/aidevops.json +1 -0
- package/src/data/servicereference/services/aiops.json +1 -0
- package/src/data/servicereference/services/airflow-serverless.json +1 -0
- package/src/data/servicereference/services/airflow.json +1 -0
- package/src/data/servicereference/services/amplify.json +1 -0
- package/src/data/servicereference/services/amplifybackend.json +1 -0
- package/src/data/servicereference/services/amplifyuibuilder.json +1 -0
- package/src/data/servicereference/services/aoss.json +1 -0
- package/src/data/servicereference/services/apigateway.json +1 -0
- package/src/data/servicereference/services/app-integrations.json +1 -0
- package/src/data/servicereference/services/appconfig.json +1 -0
- package/src/data/servicereference/services/appfabric.json +1 -0
- package/src/data/servicereference/services/appflow.json +1 -0
- package/src/data/servicereference/services/application-autoscaling.json +1 -0
- package/src/data/servicereference/services/application-signals.json +1 -0
- package/src/data/servicereference/services/application-transformation.json +1 -0
- package/src/data/servicereference/services/applicationinsights.json +1 -0
- package/src/data/servicereference/services/appmesh-preview.json +1 -0
- package/src/data/servicereference/services/appmesh.json +1 -0
- package/src/data/servicereference/services/apprunner.json +1 -0
- package/src/data/servicereference/services/appstream.json +1 -0
- package/src/data/servicereference/services/appstudio.json +1 -0
- package/src/data/servicereference/services/appsync.json +1 -0
- package/src/data/servicereference/services/apptest.json +1 -0
- package/src/data/servicereference/services/aps.json +1 -0
- package/src/data/servicereference/services/arc-region-switch.json +1 -0
- package/src/data/servicereference/services/arc-zonal-shift.json +1 -0
- package/src/data/servicereference/services/arsenal.json +1 -0
- package/src/data/servicereference/services/artifact.json +1 -0
- package/src/data/servicereference/services/athena.json +1 -0
- package/src/data/servicereference/services/auditmanager.json +1 -0
- package/src/data/servicereference/services/autoscaling-plans.json +1 -0
- package/src/data/servicereference/services/autoscaling.json +1 -0
- package/src/data/servicereference/services/aws-marketplace-management.json +1 -0
- package/src/data/servicereference/services/aws-marketplace.json +1 -0
- package/src/data/servicereference/services/aws-mcp.json +1 -0
- package/src/data/servicereference/services/aws-portal.json +1 -0
- package/src/data/servicereference/services/awsconnector.json +1 -0
- package/src/data/servicereference/services/b2bi.json +1 -0
- package/src/data/servicereference/services/backup-gateway.json +1 -0
- package/src/data/servicereference/services/backup-search.json +1 -0
- package/src/data/servicereference/services/backup-storage.json +1 -0
- package/src/data/servicereference/services/backup.json +1 -0
- package/src/data/servicereference/services/batch.json +1 -0
- package/src/data/servicereference/services/bcm-dashboards.json +1 -0
- package/src/data/servicereference/services/bcm-data-exports.json +1 -0
- package/src/data/servicereference/services/bcm-pricing-calculator.json +1 -0
- package/src/data/servicereference/services/bcm-recommended-actions.json +1 -0
- package/src/data/servicereference/services/bedrock-agentcore.json +1 -0
- package/src/data/servicereference/services/bedrock-mantle.json +1 -0
- package/src/data/servicereference/services/bedrock.json +1 -0
- package/src/data/servicereference/services/billing.json +1 -0
- package/src/data/servicereference/services/billingconductor.json +1 -0
- package/src/data/servicereference/services/braket.json +1 -0
- package/src/data/servicereference/services/budgets.json +1 -0
- package/src/data/servicereference/services/bugbust.json +1 -0
- package/src/data/servicereference/services/cases.json +1 -0
- package/src/data/servicereference/services/cassandra.json +1 -0
- package/src/data/servicereference/services/ce.json +1 -0
- package/src/data/servicereference/services/chatbot.json +1 -0
- package/src/data/servicereference/services/chime.json +1 -0
- package/src/data/servicereference/services/cleanrooms-ml.json +1 -0
- package/src/data/servicereference/services/cleanrooms.json +1 -0
- package/src/data/servicereference/services/cloud9.json +1 -0
- package/src/data/servicereference/services/clouddirectory.json +1 -0
- package/src/data/servicereference/services/cloudformation.json +1 -0
- package/src/data/servicereference/services/cloudfront-keyvaluestore.json +1 -0
- package/src/data/servicereference/services/cloudfront.json +1 -0
- package/src/data/servicereference/services/cloudhsm.json +1 -0
- package/src/data/servicereference/services/cloudsearch.json +1 -0
- package/src/data/servicereference/services/cloudshell.json +1 -0
- package/src/data/servicereference/services/cloudtrail-data.json +1 -0
- package/src/data/servicereference/services/cloudtrail.json +1 -0
- package/src/data/servicereference/services/cloudwatch.json +1 -0
- package/src/data/servicereference/services/codeartifact.json +1 -0
- package/src/data/servicereference/services/codebuild.json +1 -0
- package/src/data/servicereference/services/codecatalyst.json +1 -0
- package/src/data/servicereference/services/codecommit.json +1 -0
- package/src/data/servicereference/services/codeconnections.json +1 -0
- package/src/data/servicereference/services/codedeploy-commands-secure.json +1 -0
- package/src/data/servicereference/services/codedeploy.json +1 -0
- package/src/data/servicereference/services/codeguru-profiler.json +1 -0
- package/src/data/servicereference/services/codeguru-reviewer.json +1 -0
- package/src/data/servicereference/services/codeguru-security.json +1 -0
- package/src/data/servicereference/services/codeguru.json +1 -0
- package/src/data/servicereference/services/codepipeline.json +1 -0
- package/src/data/servicereference/services/codestar-connections.json +1 -0
- package/src/data/servicereference/services/codestar-notifications.json +1 -0
- package/src/data/servicereference/services/codestar.json +1 -0
- package/src/data/servicereference/services/codewhisperer.json +1 -0
- package/src/data/servicereference/services/cognito-identity.json +1 -0
- package/src/data/servicereference/services/cognito-idp.json +1 -0
- package/src/data/servicereference/services/cognito-sync.json +1 -0
- package/src/data/servicereference/services/comprehend.json +1 -0
- package/src/data/servicereference/services/comprehendmedical.json +1 -0
- package/src/data/servicereference/services/compute-optimizer.json +1 -0
- package/src/data/servicereference/services/config.json +1 -0
- package/src/data/servicereference/services/connect-campaigns.json +1 -0
- package/src/data/servicereference/services/connect.json +1 -0
- package/src/data/servicereference/services/consoleapp.json +1 -0
- package/src/data/servicereference/services/consolidatedbilling.json +1 -0
- package/src/data/servicereference/services/controlcatalog.json +1 -0
- package/src/data/servicereference/services/controltower.json +1 -0
- package/src/data/servicereference/services/cost-optimization-hub.json +1 -0
- package/src/data/servicereference/services/cur.json +1 -0
- package/src/data/servicereference/services/customer-verification.json +1 -0
- package/src/data/servicereference/services/databrew.json +1 -0
- package/src/data/servicereference/services/dataexchange.json +1 -0
- package/src/data/servicereference/services/datapipeline.json +1 -0
- package/src/data/servicereference/services/datasync.json +1 -0
- package/src/data/servicereference/services/datazone.json +1 -0
- package/src/data/servicereference/services/dax.json +1 -0
- package/src/data/servicereference/services/dbqms.json +1 -0
- package/src/data/servicereference/services/deadline.json +1 -0
- package/src/data/servicereference/services/detective.json +1 -0
- package/src/data/servicereference/services/devicefarm.json +1 -0
- package/src/data/servicereference/services/devops-guru.json +1 -0
- package/src/data/servicereference/services/directconnect.json +1 -0
- package/src/data/servicereference/services/discovery.json +1 -0
- package/src/data/servicereference/services/dlm.json +1 -0
- package/src/data/servicereference/services/dms.json +1 -0
- package/src/data/servicereference/services/docdb-elastic.json +1 -0
- package/src/data/servicereference/services/drs.json +1 -0
- package/src/data/servicereference/services/ds-data.json +1 -0
- package/src/data/servicereference/services/ds.json +1 -0
- package/src/data/servicereference/services/dsql.json +1 -0
- package/src/data/servicereference/services/dynamodb.json +1 -0
- package/src/data/servicereference/services/ebs.json +1 -0
- package/src/data/servicereference/services/ec2-instance-connect.json +1 -0
- package/src/data/servicereference/services/ec2.json +1 -0
- package/src/data/servicereference/services/ec2messages.json +1 -0
- package/src/data/servicereference/services/ecr-public.json +1 -0
- package/src/data/servicereference/services/ecr.json +1 -0
- package/src/data/servicereference/services/ecs-mcp.json +1 -0
- package/src/data/servicereference/services/ecs.json +1 -0
- package/src/data/servicereference/services/eks-auth.json +1 -0
- package/src/data/servicereference/services/eks-mcp.json +1 -0
- package/src/data/servicereference/services/eks.json +1 -0
- package/src/data/servicereference/services/elasticache.json +1 -0
- package/src/data/servicereference/services/elasticbeanstalk.json +1 -0
- package/src/data/servicereference/services/elasticfilesystem.json +1 -0
- package/src/data/servicereference/services/elasticloadbalancing.json +1 -0
- package/src/data/servicereference/services/elasticmapreduce.json +1 -0
- package/src/data/servicereference/services/elastictranscoder.json +1 -0
- package/src/data/servicereference/services/elemental-activations.json +1 -0
- package/src/data/servicereference/services/elemental-appliances-software.json +1 -0
- package/src/data/servicereference/services/elemental-inference.json +1 -0
- package/src/data/servicereference/services/elemental-support-cases.json +1 -0
- package/src/data/servicereference/services/elemental-support-content.json +1 -0
- package/src/data/servicereference/services/emr-containers.json +1 -0
- package/src/data/servicereference/services/emr-serverless.json +1 -0
- package/src/data/servicereference/services/entityresolution.json +1 -0
- package/src/data/servicereference/services/es.json +1 -0
- package/src/data/servicereference/services/events.json +1 -0
- package/src/data/servicereference/services/evidently.json +1 -0
- package/src/data/servicereference/services/evs.json +1 -0
- package/src/data/servicereference/services/execute-api.json +1 -0
- package/src/data/servicereference/services/finspace-api.json +1 -0
- package/src/data/servicereference/services/finspace.json +1 -0
- package/src/data/servicereference/services/firehose.json +1 -0
- package/src/data/servicereference/services/fis.json +1 -0
- package/src/data/servicereference/services/fms.json +1 -0
- package/src/data/servicereference/services/forecast.json +1 -0
- package/src/data/servicereference/services/frauddetector.json +1 -0
- package/src/data/servicereference/services/freertos.json +1 -0
- package/src/data/servicereference/services/freetier.json +1 -0
- package/src/data/servicereference/services/fsx.json +1 -0
- package/src/data/servicereference/services/gamelift.json +1 -0
- package/src/data/servicereference/services/gameliftstreams.json +1 -0
- package/src/data/servicereference/services/geo-maps.json +1 -0
- package/src/data/servicereference/services/geo-places.json +1 -0
- package/src/data/servicereference/services/geo-routes.json +1 -0
- package/src/data/servicereference/services/geo.json +1 -0
- package/src/data/servicereference/services/glacier.json +1 -0
- package/src/data/servicereference/services/globalaccelerator.json +1 -0
- package/src/data/servicereference/services/glue.json +1 -0
- package/src/data/servicereference/services/grafana.json +1 -0
- package/src/data/servicereference/services/greengrass.json +1 -0
- package/src/data/servicereference/services/groundstation.json +1 -0
- package/src/data/servicereference/services/groundtruthlabeling.json +1 -0
- package/src/data/servicereference/services/guardduty.json +1 -0
- package/src/data/servicereference/services/health-agent.json +1 -0
- package/src/data/servicereference/services/health.json +1 -0
- package/src/data/servicereference/services/healthlake.json +1 -0
- package/src/data/servicereference/services/honeycode.json +1 -0
- package/src/data/servicereference/services/iam.json +1 -0
- package/src/data/servicereference/services/identity-sync.json +1 -0
- package/src/data/servicereference/services/identitystore-auth.json +1 -0
- package/src/data/servicereference/services/identitystore.json +1 -0
- package/src/data/servicereference/services/imagebuilder.json +1 -0
- package/src/data/servicereference/services/importexport.json +1 -0
- package/src/data/servicereference/services/inspector-scan.json +1 -0
- package/src/data/servicereference/services/inspector.json +1 -0
- package/src/data/servicereference/services/inspector2-telemetry.json +1 -0
- package/src/data/servicereference/services/inspector2.json +1 -0
- package/src/data/servicereference/services/interconnect.json +1 -0
- package/src/data/servicereference/services/internetmonitor.json +1 -0
- package/src/data/servicereference/services/invoicing.json +1 -0
- package/src/data/servicereference/services/iot-device-tester.json +1 -0
- package/src/data/servicereference/services/iot.json +1 -0
- package/src/data/servicereference/services/iotanalytics.json +1 -0
- package/src/data/servicereference/services/iotdeviceadvisor.json +1 -0
- package/src/data/servicereference/services/iotevents.json +1 -0
- package/src/data/servicereference/services/iotfleethub.json +1 -0
- package/src/data/servicereference/services/iotfleetwise.json +1 -0
- package/src/data/servicereference/services/iotjobsdata.json +1 -0
- package/src/data/servicereference/services/iotmanagedintegrations.json +1 -0
- package/src/data/servicereference/services/iotsitewise.json +1 -0
- package/src/data/servicereference/services/iottwinmaker.json +1 -0
- package/src/data/servicereference/services/iotwireless.json +1 -0
- package/src/data/servicereference/services/iq-permission.json +1 -0
- package/src/data/servicereference/services/iq.json +1 -0
- package/src/data/servicereference/services/ivs.json +1 -0
- package/src/data/servicereference/services/ivschat.json +1 -0
- package/src/data/servicereference/services/kafka-cluster.json +1 -0
- package/src/data/servicereference/services/kafka.json +1 -0
- package/src/data/servicereference/services/kafkaconnect.json +1 -0
- package/src/data/servicereference/services/kendra-ranking.json +1 -0
- package/src/data/servicereference/services/kendra.json +1 -0
- package/src/data/servicereference/services/kinesis.json +1 -0
- package/src/data/servicereference/services/kinesisanalytics.json +1 -0
- package/src/data/servicereference/services/kinesisvideo.json +1 -0
- package/src/data/servicereference/services/kms.json +1 -0
- package/src/data/servicereference/services/lakeformation.json +1 -0
- package/src/data/servicereference/services/lambda.json +1 -0
- package/src/data/servicereference/services/launchwizard.json +1 -0
- package/src/data/servicereference/services/lex.json +1 -0
- package/src/data/servicereference/services/license-manager-linux-subscriptions.json +1 -0
- package/src/data/servicereference/services/license-manager-user-subscriptions.json +1 -0
- package/src/data/servicereference/services/license-manager.json +1 -0
- package/src/data/servicereference/services/lightsail.json +1 -0
- package/src/data/servicereference/services/logs.json +1 -0
- package/src/data/servicereference/services/lookoutequipment.json +1 -0
- package/src/data/servicereference/services/lookoutmetrics.json +1 -0
- package/src/data/servicereference/services/lookoutvision.json +1 -0
- package/src/data/servicereference/services/m2.json +1 -0
- package/src/data/servicereference/services/machinelearning.json +1 -0
- package/src/data/servicereference/services/macie2.json +1 -0
- package/src/data/servicereference/services/managedblockchain-query.json +1 -0
- package/src/data/servicereference/services/managedblockchain.json +1 -0
- package/src/data/servicereference/services/mapcredits.json +1 -0
- package/src/data/servicereference/services/marketplacecommerceanalytics.json +1 -0
- package/src/data/servicereference/services/mechanicalturk.json +1 -0
- package/src/data/servicereference/services/mediaconnect.json +1 -0
- package/src/data/servicereference/services/mediaconvert.json +1 -0
- package/src/data/servicereference/services/mediaimport.json +1 -0
- package/src/data/servicereference/services/medialive.json +1 -0
- package/src/data/servicereference/services/mediapackage-vod.json +1 -0
- package/src/data/servicereference/services/mediapackage.json +1 -0
- package/src/data/servicereference/services/mediapackagev2.json +1 -0
- package/src/data/servicereference/services/mediastore.json +1 -0
- package/src/data/servicereference/services/mediatailor.json +1 -0
- package/src/data/servicereference/services/medical-imaging.json +1 -0
- package/src/data/servicereference/services/memorydb.json +1 -0
- package/src/data/servicereference/services/mgh.json +1 -0
- package/src/data/servicereference/services/mgn.json +1 -0
- package/src/data/servicereference/services/migrationhub-orchestrator.json +1 -0
- package/src/data/servicereference/services/migrationhub-strategy.json +1 -0
- package/src/data/servicereference/services/mobileanalytics.json +1 -0
- package/src/data/servicereference/services/mobiletargeting.json +1 -0
- package/src/data/servicereference/services/monitron.json +1 -0
- package/src/data/servicereference/services/mpa.json +1 -0
- package/src/data/servicereference/services/mq.json +1 -0
- package/src/data/servicereference/services/neptune-db.json +1 -0
- package/src/data/servicereference/services/neptune-graph.json +1 -0
- package/src/data/servicereference/services/network-firewall.json +1 -0
- package/src/data/servicereference/services/network-security-director.json +1 -0
- package/src/data/servicereference/services/networkflowmonitor.json +1 -0
- package/src/data/servicereference/services/networkmanager-chat.json +1 -0
- package/src/data/servicereference/services/networkmanager.json +1 -0
- package/src/data/servicereference/services/networkmonitor.json +1 -0
- package/src/data/servicereference/services/nimble.json +1 -0
- package/src/data/servicereference/services/notifications-contacts.json +1 -0
- package/src/data/servicereference/services/notifications.json +1 -0
- package/src/data/servicereference/services/nova-act.json +1 -0
- package/src/data/servicereference/services/oam.json +1 -0
- package/src/data/servicereference/services/observabilityadmin.json +1 -0
- package/src/data/servicereference/services/odb.json +1 -0
- package/src/data/servicereference/services/omics.json +1 -0
- package/src/data/servicereference/services/one.json +1 -0
- package/src/data/servicereference/services/opensearch.json +1 -0
- package/src/data/servicereference/services/opsworks-cm.json +1 -0
- package/src/data/servicereference/services/opsworks.json +1 -0
- package/src/data/servicereference/services/organizations.json +1 -0
- package/src/data/servicereference/services/osis.json +1 -0
- package/src/data/servicereference/services/outposts.json +1 -0
- package/src/data/servicereference/services/panorama.json +1 -0
- package/src/data/servicereference/services/partnercentral-account-management.json +1 -0
- package/src/data/servicereference/services/partnercentral.json +1 -0
- package/src/data/servicereference/services/payment-cryptography.json +1 -0
- package/src/data/servicereference/services/payments.json +1 -0
- package/src/data/servicereference/services/pca-connector-ad.json +1 -0
- package/src/data/servicereference/services/pca-connector-scep.json +1 -0
- package/src/data/servicereference/services/pcs.json +1 -0
- package/src/data/servicereference/services/personalize.json +1 -0
- package/src/data/servicereference/services/pi.json +1 -0
- package/src/data/servicereference/services/pipes.json +1 -0
- package/src/data/servicereference/services/polly.json +1 -0
- package/src/data/servicereference/services/pricing.json +1 -0
- package/src/data/servicereference/services/pricingplanmanager.json +1 -0
- package/src/data/servicereference/services/private-networks.json +1 -0
- package/src/data/servicereference/services/profile.json +1 -0
- package/src/data/servicereference/services/proton.json +1 -0
- package/src/data/servicereference/services/purchase-orders.json +1 -0
- package/src/data/servicereference/services/q.json +1 -0
- package/src/data/servicereference/services/qapps.json +1 -0
- package/src/data/servicereference/services/qbusiness.json +1 -0
- package/src/data/servicereference/services/qdeveloper.json +1 -0
- package/src/data/servicereference/services/qldb.json +1 -0
- package/src/data/servicereference/services/quicksight.json +1 -0
- package/src/data/servicereference/services/ram.json +1 -0
- package/src/data/servicereference/services/rbin.json +1 -0
- package/src/data/servicereference/services/rds-data.json +1 -0
- package/src/data/servicereference/services/rds-db.json +1 -0
- package/src/data/servicereference/services/rds.json +1 -0
- package/src/data/servicereference/services/redshift-data.json +1 -0
- package/src/data/servicereference/services/redshift-serverless.json +1 -0
- package/src/data/servicereference/services/redshift.json +1 -0
- package/src/data/servicereference/services/refactor-spaces.json +1 -0
- package/src/data/servicereference/services/rekognition.json +1 -0
- package/src/data/servicereference/services/repostspace.json +1 -0
- package/src/data/servicereference/services/resiliencehub.json +1 -0
- package/src/data/servicereference/services/resource-explorer-2.json +1 -0
- package/src/data/servicereference/services/resource-explorer.json +1 -0
- package/src/data/servicereference/services/resource-groups.json +1 -0
- package/src/data/servicereference/services/rhelkb.json +1 -0
- package/src/data/servicereference/services/robomaker.json +1 -0
- package/src/data/servicereference/services/rolesanywhere.json +1 -0
- package/src/data/servicereference/services/route53-recovery-cluster.json +1 -0
- package/src/data/servicereference/services/route53-recovery-control-config.json +1 -0
- package/src/data/servicereference/services/route53-recovery-readiness.json +1 -0
- package/src/data/servicereference/services/route53.json +1 -0
- package/src/data/servicereference/services/route53domains.json +1 -0
- package/src/data/servicereference/services/route53globalresolver.json +1 -0
- package/src/data/servicereference/services/route53profiles.json +1 -0
- package/src/data/servicereference/services/route53resolver.json +1 -0
- package/src/data/servicereference/services/rtbfabric.json +1 -0
- package/src/data/servicereference/services/rum.json +1 -0
- package/src/data/servicereference/services/s3-object-lambda.json +1 -0
- package/src/data/servicereference/services/s3-outposts.json +1 -0
- package/src/data/servicereference/services/s3.json +1 -0
- package/src/data/servicereference/services/s3express.json +1 -0
- package/src/data/servicereference/services/s3tables.json +1 -0
- package/src/data/servicereference/services/s3vectors.json +1 -0
- package/src/data/servicereference/services/sagemaker-data-science-assistant.json +1 -0
- package/src/data/servicereference/services/sagemaker-geospatial.json +1 -0
- package/src/data/servicereference/services/sagemaker-mlflow.json +1 -0
- package/src/data/servicereference/services/sagemaker-unified-studio-mcp.json +1 -0
- package/src/data/servicereference/services/sagemaker.json +1 -0
- package/src/data/servicereference/services/savingsplans.json +1 -0
- package/src/data/servicereference/services/scheduler.json +1 -0
- package/src/data/servicereference/services/schemas.json +1 -0
- package/src/data/servicereference/services/scn.json +1 -0
- package/src/data/servicereference/services/sdb.json +1 -0
- package/src/data/servicereference/services/secretsmanager.json +1 -0
- package/src/data/servicereference/services/security-ir.json +1 -0
- package/src/data/servicereference/services/securityagent.json +1 -0
- package/src/data/servicereference/services/securityhub.json +1 -0
- package/src/data/servicereference/services/securitylake.json +1 -0
- package/src/data/servicereference/services/serverlessrepo.json +1 -0
- package/src/data/servicereference/services/servicecatalog.json +1 -0
- package/src/data/servicereference/services/servicediscovery.json +1 -0
- package/src/data/servicereference/services/serviceextract.json +1 -0
- package/src/data/servicereference/services/servicequotas.json +1 -0
- package/src/data/servicereference/services/ses.json +1 -0
- package/src/data/servicereference/services/shield.json +1 -0
- package/src/data/servicereference/services/signer.json +1 -0
- package/src/data/servicereference/services/signin.json +1 -0
- package/src/data/servicereference/services/simspaceweaver.json +1 -0
- package/src/data/servicereference/services/sms-voice.json +1 -0
- package/src/data/servicereference/services/sms.json +1 -0
- package/src/data/servicereference/services/snow-device-management.json +1 -0
- package/src/data/servicereference/services/snowball.json +1 -0
- package/src/data/servicereference/services/sns.json +1 -0
- package/src/data/servicereference/services/social-messaging.json +1 -0
- package/src/data/servicereference/services/sqlworkbench.json +1 -0
- package/src/data/servicereference/services/sqs.json +1 -0
- package/src/data/servicereference/services/ssm-contacts.json +1 -0
- package/src/data/servicereference/services/ssm-guiconnect.json +1 -0
- package/src/data/servicereference/services/ssm-incidents.json +1 -0
- package/src/data/servicereference/services/ssm-quicksetup.json +1 -0
- package/src/data/servicereference/services/ssm-sap.json +1 -0
- package/src/data/servicereference/services/ssm.json +1 -0
- package/src/data/servicereference/services/ssmmessages.json +1 -0
- package/src/data/servicereference/services/sso-directory.json +1 -0
- package/src/data/servicereference/services/sso-oauth.json +1 -0
- package/src/data/servicereference/services/sso.json +1 -0
- package/src/data/servicereference/services/states.json +1 -0
- package/src/data/servicereference/services/storagegateway.json +1 -0
- package/src/data/servicereference/services/sts.json +1 -0
- package/src/data/servicereference/services/support-console.json +1 -0
- package/src/data/servicereference/services/support.json +1 -0
- package/src/data/servicereference/services/supportapp.json +1 -0
- package/src/data/servicereference/services/supportplans.json +1 -0
- package/src/data/servicereference/services/sustainability.json +1 -0
- package/src/data/servicereference/services/swf.json +1 -0
- package/src/data/servicereference/services/synthetics.json +1 -0
- package/src/data/servicereference/services/tag.json +1 -0
- package/src/data/servicereference/services/tax.json +1 -0
- package/src/data/servicereference/services/textract.json +1 -0
- package/src/data/servicereference/services/thinclient.json +1 -0
- package/src/data/servicereference/services/timestream-influxdb.json +1 -0
- package/src/data/servicereference/services/timestream.json +1 -0
- package/src/data/servicereference/services/tiros.json +1 -0
- package/src/data/servicereference/services/tnb.json +1 -0
- package/src/data/servicereference/services/transcribe.json +1 -0
- package/src/data/servicereference/services/transfer.json +1 -0
- package/src/data/servicereference/services/transform-custom.json +1 -0
- package/src/data/servicereference/services/transform.json +1 -0
- package/src/data/servicereference/services/translate.json +1 -0
- package/src/data/servicereference/services/trustedadvisor.json +1 -0
- package/src/data/servicereference/services/ts.json +1 -0
- package/src/data/servicereference/services/user-subscriptions.json +1 -0
- package/src/data/servicereference/services/uxc.json +1 -0
- package/src/data/servicereference/services/vendor-insights.json +1 -0
- package/src/data/servicereference/services/verified-access.json +1 -0
- package/src/data/servicereference/services/verifiedpermissions.json +1 -0
- package/src/data/servicereference/services/voiceid.json +1 -0
- package/src/data/servicereference/services/vpc-lattice-svcs.json +1 -0
- package/src/data/servicereference/services/vpc-lattice.json +1 -0
- package/src/data/servicereference/services/vpce.json +1 -0
- package/src/data/servicereference/services/waf-regional.json +1 -0
- package/src/data/servicereference/services/waf.json +1 -0
- package/src/data/servicereference/services/wafv2.json +1 -0
- package/src/data/servicereference/services/wam.json +1 -0
- package/src/data/servicereference/services/wellarchitected.json +1 -0
- package/src/data/servicereference/services/wickr.json +1 -0
- package/src/data/servicereference/services/wisdom.json +1 -0
- package/src/data/servicereference/services/workdocs.json +1 -0
- package/src/data/servicereference/services/worklink.json +1 -0
- package/src/data/servicereference/services/workmail.json +1 -0
- package/src/data/servicereference/services/workmailmessageflow.json +1 -0
- package/src/data/servicereference/services/workspaces-instances.json +1 -0
- package/src/data/servicereference/services/workspaces-web.json +1 -0
- package/src/data/servicereference/services/workspaces.json +1 -0
- package/src/data/servicereference/services/xray.json +1 -0
- package/src/data/servicereference/services.json +1 -0
- package/src/extension.d.ts +3 -0
- package/src/extension.js +23 -0
- package/src/grammars/tree-sitter-hcl.wasm +0 -0
- package/src/grammars/tree-sitter-json.wasm +0 -0
- package/src/grammars/tree-sitter-yaml.wasm +0 -0
- package/src/handlers/completion/action-value.d.ts +4 -0
- package/src/handlers/completion/action-value.js +46 -0
- package/src/handlers/completion/condition-block.d.ts +4 -0
- package/src/handlers/completion/condition-block.js +31 -0
- package/src/handlers/completion/condition-key.d.ts +4 -0
- package/src/handlers/completion/condition-key.js +80 -0
- package/src/handlers/completion/condition-operator.d.ts +4 -0
- package/src/handlers/completion/condition-operator.js +22 -0
- package/src/handlers/completion/effect-value.d.ts +4 -0
- package/src/handlers/completion/effect-value.js +14 -0
- package/src/handlers/completion/index.d.ts +14 -0
- package/src/handlers/completion/index.js +96 -0
- package/src/handlers/completion/principal-block-identifier.d.ts +4 -0
- package/src/handlers/completion/principal-block-identifier.js +4 -0
- package/src/handlers/completion/principal-block-type.d.ts +4 -0
- package/src/handlers/completion/principal-block-type.js +24 -0
- package/src/handlers/completion/principal-block.d.ts +4 -0
- package/src/handlers/completion/principal-block.js +28 -0
- package/src/handlers/completion/principal-identifier-completions.d.ts +2 -0
- package/src/handlers/completion/principal-identifier-completions.js +131 -0
- package/src/handlers/completion/principal-type.d.ts +4 -0
- package/src/handlers/completion/principal-type.js +23 -0
- package/src/handlers/completion/principal-typed-value.d.ts +4 -0
- package/src/handlers/completion/principal-typed-value.js +4 -0
- package/src/handlers/completion/principal-value.d.ts +4 -0
- package/src/handlers/completion/principal-value.js +18 -0
- package/src/handlers/completion/resource-value.d.ts +4 -0
- package/src/handlers/completion/resource-value.js +144 -0
- package/src/handlers/completion/statement-block.d.ts +10 -0
- package/src/handlers/completion/statement-block.js +51 -0
- package/src/handlers/completion/statement-key.d.ts +4 -0
- package/src/handlers/completion/statement-key.js +41 -0
- package/src/lib/iam-policy/condition-operators.d.ts +317 -0
- package/src/lib/iam-policy/condition-operators.js +129 -0
- package/src/lib/iam-policy/location.d.ts +71 -0
- package/src/lib/iam-policy/location.js +82 -0
- package/src/lib/iam-policy/partitions.d.ts +116 -0
- package/src/lib/iam-policy/partitions.js +51 -0
- package/src/lib/iam-policy/principals.d.ts +21 -0
- package/src/lib/iam-policy/principals.js +37 -0
- package/src/lib/iam-policy/reference/services.d.ts +22 -0
- package/src/lib/iam-policy/reference/services.js +99 -0
- package/src/lib/iam-policy/reference/types.d.ts +71 -0
- package/src/lib/iam-policy/reference/types.js +1 -0
- package/src/lib/iam-policy/statement-keys.d.ts +8 -0
- package/src/lib/iam-policy/statement-keys.js +159 -0
- package/src/lib/iam-policy/wildcard.d.ts +2 -0
- package/src/lib/iam-policy/wildcard.js +14 -0
- package/src/lib/treesitter/base.d.ts +35 -0
- package/src/lib/treesitter/base.js +50 -0
- package/src/lib/treesitter/hcl.d.ts +9 -0
- package/src/lib/treesitter/hcl.js +888 -0
- package/src/lib/treesitter/json.d.ts +9 -0
- package/src/lib/treesitter/json.js +376 -0
- package/src/lib/treesitter/manager.d.ts +9 -0
- package/src/lib/treesitter/manager.js +66 -0
- package/src/lib/treesitter/yaml.d.ts +9 -0
- package/src/lib/treesitter/yaml.js +878 -0
- package/src/server.d.ts +2 -0
- package/src/server.js +26 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"appstream","actions":{"AssociateAppBlockBuilderAppBlock":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"app-block"},{"name":"app-block-builder"}],"description":"Grants permission to associate the specified app block builder with the app block","accessLevel":"Write","resourceTypes":[{"name":"app-block","required":true},{"name":"app-block-builder","required":true}]},"AssociateApplicationFleet":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"application"},{"name":"fleet"}],"description":"Grants permission to associate the specified application with the fleet","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"fleet","required":true}]},"AssociateApplicationToEntitlement":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to associate the specified application to the specified entitlement","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"AssociateFleet":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"fleet"},{"name":"stack"}],"description":"Grants permission to associate the specified fleet with the specified stack","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true},{"name":"stack","required":true}]},"AssociateSoftwareToImageBuilder":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"image-builder"}],"description":"Grants permission to associate license included application(s) with an existing image builder instance","accessLevel":"Write","resourceTypes":[{"name":"image-builder","required":true}]},"BatchAssociateUserStack":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"stack"}],"description":"Grants permission to associate the specified users with the specified stacks. Users in a user pool cannot be assigned to stacks with fleets that are joined to an Active Directory domain","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"BatchDisassociateUserStack":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"stack"}],"description":"Grants permission to disassociate the specified users from the specified stacks","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"CopyImage":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"image"}],"description":"Grants permission to copy the specified image within the same Region or to a new Region within the same AWS account","accessLevel":"Write","resourceTypes":[{"name":"image","required":true}]},"CreateAppBlock":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an app block. App blocks store details about the virtual hard disk that contains the files for the application in an S3 bucket. It also stores the setup script with details about how to mount the virtual hard disk. App blocks are only supported for Elastic fleets","accessLevel":"Write","resourceTypes":[]},"CreateAppBlockBuilder":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"app-block-builder"}],"description":"Grants permission to create an app block builder. An app block builder is a virtual machine that is used to create an app block","accessLevel":"Write","resourceTypes":[{"name":"app-block-builder","required":true}]},"CreateAppBlockBuilderStreamingURL":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"app-block-builder"}],"description":"Grants permission to create a URL to start an app block builder streaming session","accessLevel":"Write","resourceTypes":[{"name":"app-block-builder","required":true}]},"CreateApplication":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"app-block"}],"description":"Grants permission to create an application within customer account. Applications store the details about how to launch applications on streaming instances. This is only supported for Elastic fleets","accessLevel":"Write","resourceTypes":[{"name":"app-block","required":true}]},"CreateDirectoryConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a Directory Config object in AppStream 2.0. This object includes the configuration information required to join fleets and image builders to Microsoft Active Directory domains","accessLevel":"Write","resourceTypes":[]},"CreateEntitlement":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to create an entitlement to control access to applications based on user attributes","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"CreateExportImageTask":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[],"description":"Grants permission to create an export task for an AppStream 2.0 image","accessLevel":"Write","resourceTypes":[]},"CreateFleet":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"fleet"},{"name":"image"}],"description":"Grants permission to create a fleet. A fleet is a group of streaming instances from which applications are launched and streamed to users","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true},{"name":"image","required":false}]},"CreateImageBuilder":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"image"},{"name":"image-builder"}],"description":"Grants permission to create an image builder. An image builder is a virtual machine that is used to create an image","accessLevel":"Write","resourceTypes":[{"name":"image","required":true},{"name":"image-builder","required":true}]},"CreateImageBuilderStreamingURL":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"image-builder"}],"description":"Grants permission to create a URL to start an image builder streaming session","accessLevel":"Write","resourceTypes":[{"name":"image-builder","required":true}]},"CreateImportedImage":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an AppStream 2.0 image from an imported AMI","accessLevel":"Write","resourceTypes":[]},"CreateStack":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"stack"}],"description":"Grants permission to create a stack to start streaming applications to users. A stack consists of an associated fleet, user access policies, and storage configurations","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"CreateStreamingURL":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"fleet"},{"name":"stack"}],"description":"Grants permission to create a temporary URL to start an AppStream 2.0 streaming session for the specified user. A streaming URL enables application streaming to be tested without user setup","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true},{"name":"stack","required":true}]},"CreateThemeForStack":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to create a custom branding theme, which might includes a custom logo, website links, and other branding to display to your users","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"CreateUpdatedImage":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"image"}],"description":"Grants permission to update an existing image within customer account","accessLevel":"Write","resourceTypes":[{"name":"image","required":true}]},"CreateUsageReportSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a usage report subscription. Usage reports are generated daily","accessLevel":"Write","resourceTypes":[]},"CreateUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new user in the user pool","accessLevel":"Write","resourceTypes":[]},"DeleteAppBlock":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"app-block"}],"description":"Grants permission to delete the specified app block","accessLevel":"Write","resourceTypes":[{"name":"app-block","required":true}]},"DeleteAppBlockBuilder":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"app-block-builder"}],"description":"Grants permission to delete the specified app block builder and release capacity","accessLevel":"Write","resourceTypes":[{"name":"app-block-builder","required":true}]},"DeleteApplication":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"application"}],"description":"Grants permission to delete the specified application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true}]},"DeleteDirectoryConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the specified Directory Config object from AppStream 2.0. This object includes the configuration information required to join fleets and image builders to Microsoft Active Directory domains","accessLevel":"Write","resourceTypes":[]},"DeleteEntitlement":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to delete the specified entitlement","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"DeleteFleet":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"fleet"}],"description":"Grants permission to delete the specified fleet","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true}]},"DeleteImage":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"image"}],"description":"Grants permission to delete the specified image. An image cannot be deleted when it is in use","accessLevel":"Write","resourceTypes":[{"name":"image","required":true}]},"DeleteImageBuilder":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"image-builder"}],"description":"Grants permission to delete the specified image builder and release capacity","accessLevel":"Write","resourceTypes":[{"name":"image-builder","required":true}]},"DeleteImagePermissions":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"image"}],"description":"Grants permission to delete permissions for the specified private image","accessLevel":"Write","resourceTypes":[{"name":"image","required":true}]},"DeleteStack":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"stack"}],"description":"Grants permission to delete the specified stack. After the stack is deleted, the application streaming environment provided by the stack is no longer available to users. Also, any reservations made for application streaming sessions for the stack are released","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"DeleteThemeForStack":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to delete a custom branding theme, which might includes a custom logo, website links, and other branding to display to your users","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"DeleteUsageReportSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to disable usage report generation","accessLevel":"Write","resourceTypes":[]},"DeleteUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a user from the user pool","accessLevel":"Write","resourceTypes":[]},"DescribeAppBlockBuilderAppBlockAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the associations that are associated with the specified app block builder or app block","accessLevel":"List","resourceTypes":[]},"DescribeAppBlockBuilders":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list that describes one or more specified app block builders, if the app block builder names are provided. Otherwise, all app block builders in the account are described","accessLevel":"List","resourceTypes":[]},"DescribeAppBlocks":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list that describes one or more specified app blocks, if the app block arns are provided. Otherwise, all app blocks in the account are described","accessLevel":"List","resourceTypes":[]},"DescribeAppLicenseUsage":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve license included application usage information","accessLevel":"List","resourceTypes":[]},"DescribeApplicationFleetAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the associations that are associated with the specified application or fleet","accessLevel":"List","resourceTypes":[]},"DescribeApplications":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list that describes one or more specified applications, if the application arns are provided. Otherwise, all applications in the account are described","accessLevel":"List","resourceTypes":[]},"DescribeDirectoryConfigs":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list that describes one or more specified Directory Config objects for AppStream 2.0, if the names for these objects are provided. Otherwise, all Directory Config objects in the account are described. This object includes the configuration information required to join fleets and image builders to Microsoft Active Directory domains","accessLevel":"List","resourceTypes":[]},"DescribeEntitlements":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to retrieve one or all entitlements for the specified stack","accessLevel":"List","resourceTypes":[{"name":"stack","required":true}]},"DescribeFleets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list that describes one or more specified fleets, if the fleet names are provided. Otherwise, all fleets in the account are described","accessLevel":"List","resourceTypes":[]},"DescribeImageBuilders":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list that describes one or more specified image builders, if the image builder names are provided. Otherwise, all image builders in the account are described","accessLevel":"List","resourceTypes":[]},"DescribeImagePermissions":{"conditionKeys":[],"resources":[{"name":"image"}],"description":"Grants permission to retrieve a list that describes the permissions for shared AWS account IDs on a private image that you own","accessLevel":"Read","resourceTypes":[{"name":"image","required":true}]},"DescribeImages":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list that describes one or more specified images, if the image names or image ARNs are provided. Otherwise, all images in the account are described","accessLevel":"List","resourceTypes":[]},"DescribeSessions":{"conditionKeys":[],"resources":[{"name":"fleet"},{"name":"stack"}],"description":"Grants permission to retrieve a list that describes the streaming sessions for the specified stack and fleet. If a user ID is provided for the stack and fleet, only the streaming sessions for that user are described","accessLevel":"List","resourceTypes":[{"name":"fleet","required":true},{"name":"stack","required":true}]},"DescribeSoftwareAssociations":{"conditionKeys":[],"resources":[{"name":"image"},{"name":"image-builder"}],"description":"Grants permission to retrieve license included application associations for a specified resource","accessLevel":"List","resourceTypes":[{"name":"image","required":false},{"name":"image-builder","required":false}]},"DescribeStacks":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list that describes one or more specified stacks, if the stack names are provided. Otherwise, all stacks in the account are described","accessLevel":"List","resourceTypes":[]},"DescribeThemeForStack":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to get the custom branding theme information, which might includes a custom logo, website links, and other branding to display to your users","accessLevel":"Read","resourceTypes":[{"name":"stack","required":true}]},"DescribeUsageReportSubscriptions":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list that describes one or more usage report subscriptions","accessLevel":"List","resourceTypes":[]},"DescribeUserStackAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list that describes the UserStackAssociation objects","accessLevel":"List","resourceTypes":[]},"DescribeUsers":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list that describes users in the user pool","accessLevel":"List","resourceTypes":[]},"DisableUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to disable the specified user in the user pool. This action does not delete the user","accessLevel":"Write","resourceTypes":[]},"DisassociateAppBlockBuilderAppBlock":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"app-block"},{"name":"app-block-builder"}],"description":"Grants permission to disassociate the specified app block builder with the app block","accessLevel":"Write","resourceTypes":[{"name":"app-block","required":true},{"name":"app-block-builder","required":true}]},"DisassociateApplicationFleet":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"application"},{"name":"fleet"}],"description":"Grants permission to disassociate the specified application from the specified fleet","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"fleet","required":true}]},"DisassociateApplicationFromEntitlement":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to disassociate the specified application from the specified entitlement","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"DisassociateFleet":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"fleet"},{"name":"stack"}],"description":"Grants permission to disassociate the specified fleet from the specified stack","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true},{"name":"stack","required":true}]},"DisassociateSoftwareFromImageBuilder":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"image-builder"}],"description":"Grants permission to remove license included application(s) association(s) from an image builder instance","accessLevel":"Write","resourceTypes":[{"name":"image-builder","required":true}]},"EnableUser":{"conditionKeys":[],"resources":[],"description":"Grants permission to enable a user in the user pool","accessLevel":"Write","resourceTypes":[]},"ExpireSession":{"conditionKeys":[],"resources":[],"description":"Grants permission to immediately stop the specified streaming session","accessLevel":"Write","resourceTypes":[]},"GetExportImageTask":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve details of a specific export image task","accessLevel":"Read","resourceTypes":[]},"ListAssociatedFleets":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to retrieve the name of the fleet that is associated with the specified stack","accessLevel":"Read","resourceTypes":[{"name":"stack","required":true}]},"ListAssociatedStacks":{"conditionKeys":[],"resources":[{"name":"fleet"}],"description":"Grants permission to retrieve the name of the stack with which the specified fleet is associated","accessLevel":"Read","resourceTypes":[{"name":"fleet","required":true}]},"ListEntitledApplications":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to retrieve the applications that are associated with the specified entitlement","accessLevel":"List","resourceTypes":[{"name":"stack","required":true}]},"ListExportImageTasks":{"conditionKeys":[],"resources":[],"description":"Grants permission to list export image tasks","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of all tags for the specified AppStream 2.0 resource. The following resources can be tagged: Image builders, images, fleets, and stacks","accessLevel":"Read","resourceTypes":[]},"StartAppBlockBuilder":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"app-block-builder"}],"description":"Grants permission to start the specified app block builder","accessLevel":"Write","resourceTypes":[{"name":"app-block-builder","required":true}]},"StartFleet":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"fleet"}],"description":"Grants permission to start the specified fleet","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true}]},"StartImageBuilder":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"image-builder"}],"description":"Grants permission to start the specified image builder","accessLevel":"Write","resourceTypes":[{"name":"image-builder","required":true}]},"StartSoftwareDeploymentToImageBuilder":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"image-builder"}],"description":"Grants permission to initiate license included applications deployment to an image builder instance","accessLevel":"Write","resourceTypes":[{"name":"image-builder","required":true}]},"StopAppBlockBuilder":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"app-block-builder"}],"description":"Grants permission to stop the specified app block builder","accessLevel":"Write","resourceTypes":[{"name":"app-block-builder","required":true}]},"StopFleet":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"fleet"}],"description":"Grants permission to stop the specified fleet","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true}]},"StopImageBuilder":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"image-builder"}],"description":"Grants permission to stop the specified image builder","accessLevel":"Write","resourceTypes":[{"name":"image-builder","required":true}]},"Stream":{"conditionKeys":["appstream:userId"],"resources":[{"name":"stack"}],"description":"Grants permission to federated users to sign in by using their existing credentials and stream applications from the specified stack","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"app-block"},{"name":"app-block-builder"},{"name":"application"},{"name":"fleet"},{"name":"image"},{"name":"image-builder"},{"name":"stack"}],"description":"Grants permission to add or overwrite one or more tags for the specified AppStream 2.0 resource. The following resources can be tagged: Image builders, images, fleets, stacks, app blocks and applications","accessLevel":"Tagging","resourceTypes":[{"name":"app-block","required":false},{"name":"app-block-builder","required":false},{"name":"application","required":false},{"name":"fleet","required":false},{"name":"image","required":false},{"name":"image-builder","required":false},{"name":"stack","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"app-block"},{"name":"app-block-builder"},{"name":"application"},{"name":"fleet"},{"name":"image"},{"name":"image-builder"},{"name":"stack"}],"description":"Grants permission to disassociate one or more tags from the specified AppStream 2.0 resource","accessLevel":"Tagging","resourceTypes":[{"name":"app-block","required":false},{"name":"app-block-builder","required":false},{"name":"application","required":false},{"name":"fleet","required":false},{"name":"image","required":false},{"name":"image-builder","required":false},{"name":"stack","required":false}]},"UpdateAppBlockBuilder":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"app-block-builder"}],"description":"Grants permission to update a specific app block builder. An app block builder is a virtual machine that is used to create an app block","accessLevel":"Write","resourceTypes":[{"name":"app-block-builder","required":true}]},"UpdateApplication":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"app-block"},{"name":"application"}],"description":"Grants permission to update the specified fields for the specified application","accessLevel":"Write","resourceTypes":[{"name":"application","required":true},{"name":"app-block","required":false}]},"UpdateDirectoryConfig":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the specified Directory Config object in AppStream 2.0. This object includes the configuration information required to join fleets and image builders to Microsoft Active Directory domains","accessLevel":"Write","resourceTypes":[]},"UpdateEntitlement":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to update the specified fields for the specified entitlement","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"UpdateFleet":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"fleet"},{"name":"image"}],"description":"Grants permission to update the specified fleet. All attributes except the fleet name can be updated when the fleet is in the STOPPED state","accessLevel":"Write","resourceTypes":[{"name":"fleet","required":true},{"name":"image","required":false}]},"UpdateImagePermissions":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"image"}],"description":"Grants permission to add or update permissions for the specified private image","accessLevel":"Write","resourceTypes":[{"name":"image","required":true}]},"UpdateStack":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"stack"}],"description":"Grants permission to update the specified fields for the specified stack","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]},"UpdateThemeForStack":{"conditionKeys":[],"resources":[{"name":"stack"}],"description":"Grants permission to update the custom branding theme information, which might includes a custom logo, website links, and other branding to display to your users","accessLevel":"Write","resourceTypes":[{"name":"stack","required":true}]}},"resources":[{"name":"app-block","arnFormats":["arn:${Partition}:appstream:${Region}:${Account}:app-block/${AppBlockName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"app-block-builder","arnFormats":["arn:${Partition}:appstream:${Region}:${Account}:app-block-builder/${AppBlockBuilderName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"application","arnFormats":["arn:${Partition}:appstream:${Region}:${Account}:application/${ApplicationName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"fleet","arnFormats":["arn:${Partition}:appstream:${Region}:${Account}:fleet/${FleetName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"image","arnFormats":["arn:${Partition}:appstream:${Region}:${Account}:image/${ImageName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"image-builder","arnFormats":["arn:${Partition}:appstream:${Region}:${Account}:image-builder/${ImageBuilderName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"stack","arnFormats":["arn:${Partition}:appstream:${Region}:${Account}:stack/${StackName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"appstream:userId":{"types":["String"],"description":"Filters access by the ID of the AppStream 2.0 user"},"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"appstudio","actions":{"GetAccountStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the account's current status","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetEnablementJobStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to fetch status of a enablement job","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"StartEnablementJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to submit a enablement job","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"StartRollbackEnablementJob":{"conditionKeys":[],"resources":[],"description":"Grants permission to rollback an enablement job","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"StartTeamDeployment":{"conditionKeys":[],"resources":[],"description":"Grants permission to start a team deployment","accessLevel":"Write","resourceTypes":[],"permissionOnly":true}},"resources":[{"name":"application","arnFormats":["arn:${Partition}:appstudio:${Region}:${Account}:application/${ApplicationId}"],"conditionKeys":[]},{"name":"connector","arnFormats":["arn:${Partition}:appstudio:${Region}:${Account}:connector/${ConnectionId}"],"conditionKeys":[]},{"name":"instance","arnFormats":["arn:${Partition}:appstudio:${Region}:${Account}:instance/${InstanceId}"],"conditionKeys":[]}],"conditionKeys":{}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"appsync","actions":{"AssociateApi":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to attach a GraphQL API to a custom domain name in AppSync","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"AssociateMergedGraphqlApi":{"conditionKeys":[],"resources":[{"name":"graphqlapi"}],"description":"Grants permission to associate a merged API to a source API","accessLevel":"Write","resourceTypes":[{"name":"graphqlapi","required":true}]},"AssociateSourceGraphqlApi":{"conditionKeys":[],"resources":[{"name":"graphqlapi"}],"description":"Grants permission to associate a source API to a merged API","accessLevel":"Write","resourceTypes":[{"name":"graphqlapi","required":true}]},"AssociateWebACL":{"conditionKeys":[],"resources":[{"name":"api"},{"name":"graphqlapi"}],"description":"Grants permission to associate a web ACL and a resource","accessLevel":"Write","resourceTypes":[{"name":"api","required":false},{"name":"graphqlapi","required":false}],"permissionOnly":true},"CreateApi":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an API","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:CreateServiceLinkedRole"]},"CreateApiCache":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an API cache in AppSync","accessLevel":"Write","resourceTypes":[]},"CreateApiKey":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a unique key that you can distribute to clients who are executing your API","accessLevel":"Write","resourceTypes":[]},"CreateChannelNamespace":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"channelNamespace"}],"description":"Grants permission to create a channel namespace","accessLevel":"Write","resourceTypes":[{"name":"channelNamespace","required":true}]},"CreateDataSource":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a data source","accessLevel":"Write","resourceTypes":[]},"CreateDomainName":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"domain"}],"description":"Grants permission to create a custom domain name in AppSync","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"CreateFunction":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new function","accessLevel":"Write","resourceTypes":[]},"CreateGraphqlApi":{"conditionKeys":["appsync:Visibility","aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a GraphQL API, which is the top level AppSync resource","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:CreateServiceLinkedRole"]},"CreateResolver":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a resolver. A resolver converts incoming requests into a format that a data source can understand, and converts the data source's responses into GraphQL","accessLevel":"Write","resourceTypes":[]},"CreateType":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a type","accessLevel":"Write","resourceTypes":[]},"DeleteApi":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"api"}],"description":"Grants permission to delete a API. This will also clean up every AppSync resource below that API","accessLevel":"Write","resourceTypes":[{"name":"api","required":true}]},"DeleteApiCache":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete an API cache in AppSync","accessLevel":"Write","resourceTypes":[]},"DeleteApiKey":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete an API key","accessLevel":"Write","resourceTypes":[]},"DeleteChannelNamespace":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"channelNamespace"}],"description":"Grants permission to delete a channel namespace","accessLevel":"Write","resourceTypes":[{"name":"channelNamespace","required":true}]},"DeleteDataSource":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a data source","accessLevel":"Write","resourceTypes":[]},"DeleteDomainName":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"domain"}],"description":"Grants permission to delete a custom domain name in AppSync","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DeleteFunction":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a function","accessLevel":"Write","resourceTypes":[]},"DeleteGraphqlApi":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"graphqlapi"}],"description":"Grants permission to delete a GraphQL Api. This will also clean up every AppSync resource below that API","accessLevel":"Write","resourceTypes":[{"name":"graphqlapi","required":true}]},"DeleteResolver":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a resolver","accessLevel":"Write","resourceTypes":[]},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to remove a resource policy","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"DeleteType":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a type","accessLevel":"Write","resourceTypes":[]},"DisassociateApi":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to detach a GraphQL API to a custom domain name in AppSync","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"DisassociateMergedGraphqlApi":{"conditionKeys":[],"resources":[{"name":"mergedApiAssociation"}],"description":"Grants permission to remove an associated source API from a merged API identified by the source API","accessLevel":"Write","resourceTypes":[{"name":"mergedApiAssociation","required":true}]},"DisassociateSourceGraphqlApi":{"conditionKeys":[],"resources":[{"name":"sourceApiAssociation"}],"description":"Grants permission to remove an associated source API from a merged API identified by the merged API","accessLevel":"Write","resourceTypes":[{"name":"sourceApiAssociation","required":true}]},"DisassociateWebACL":{"conditionKeys":[],"resources":[{"name":"api"},{"name":"graphqlapi"}],"description":"Grants permission to disassociate a web ACL and a resource","accessLevel":"Write","resourceTypes":[{"name":"api","required":false},{"name":"graphqlapi","required":false}],"permissionOnly":true},"EvaluateCode":{"conditionKeys":[],"resources":[],"description":"Grants permission to evaluate code with a runtime and context","accessLevel":"Read","resourceTypes":[]},"EvaluateMappingTemplate":{"conditionKeys":[],"resources":[],"description":"Grants permission to evaluate template mapping","accessLevel":"Read","resourceTypes":[]},"EventConnect":{"conditionKeys":[],"resources":[{"name":"api"}],"description":"Grants permission to connect to an Event API","accessLevel":"Write","resourceTypes":[{"name":"api","required":true}]},"EventPublish":{"conditionKeys":[],"resources":[{"name":"channelNamespace"}],"description":"Grants permission to publish events to a channel namespace","accessLevel":"Write","resourceTypes":[{"name":"channelNamespace","required":true}]},"EventSubscribe":{"conditionKeys":[],"resources":[{"name":"channelNamespace"}],"description":"Grants permission to subscribe to a channel namespace","accessLevel":"Write","resourceTypes":[{"name":"channelNamespace","required":true}]},"FlushApiCache":{"conditionKeys":[],"resources":[],"description":"Grants permission to flush an API cache in AppSync","accessLevel":"Write","resourceTypes":[]},"GetApi":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"api"}],"description":"Grants permission to retrieve an API","accessLevel":"Read","resourceTypes":[{"name":"api","required":true}]},"GetApiAssociation":{"conditionKeys":[],"resources":[{"name":"domain"}],"description":"Grants permission to read custom domain name - GraphQL API association details in AppSync","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"GetApiCache":{"conditionKeys":[],"resources":[],"description":"Grants permission to read information about an API cache in AppSync","accessLevel":"Read","resourceTypes":[]},"GetChannelNamespace":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"channelNamespace"}],"description":"Grants permission to retrieve a channel namespace","accessLevel":"Read","resourceTypes":[{"name":"channelNamespace","required":true}]},"GetDataSource":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a data source","accessLevel":"Read","resourceTypes":[]},"GetDataSourceIntrospection":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a data source introspection","accessLevel":"Read","resourceTypes":[]},"GetDomainName":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"domain"}],"description":"Grants permission to read information about a custom domain name in AppSync","accessLevel":"Read","resourceTypes":[{"name":"domain","required":true}]},"GetFunction":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a function","accessLevel":"Read","resourceTypes":[]},"GetGraphqlApi":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"graphqlapi"}],"description":"Grants permission to retrieve a GraphQL API","accessLevel":"Read","resourceTypes":[{"name":"graphqlapi","required":true}]},"GetGraphqlApiEnvironmentVariables":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the environment variables for a GraphQL API","accessLevel":"Read","resourceTypes":[]},"GetIntrospectionSchema":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the introspection schema for a GraphQL API","accessLevel":"Read","resourceTypes":[]},"GetResolver":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a resolver","accessLevel":"Read","resourceTypes":[]},"GetResourcePolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to read a resource policy","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetSchemaCreationStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the current status of a schema creation operation","accessLevel":"Read","resourceTypes":[]},"GetSourceApiAssociation":{"conditionKeys":[],"resources":[{"name":"sourceApiAssociation"}],"description":"Grants permission to read information about a merged API associated source API","accessLevel":"Read","resourceTypes":[{"name":"sourceApiAssociation","required":true}]},"GetType":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a type","accessLevel":"Read","resourceTypes":[]},"GetWebACLForResource":{"conditionKeys":[],"resources":[{"name":"api"},{"name":"graphqlapi"}],"description":"Grants permission to get associated web ACLs for a resource","accessLevel":"Read","resourceTypes":[{"name":"api","required":false},{"name":"graphqlapi","required":false}],"permissionOnly":true},"GraphQL":{"conditionKeys":[],"resources":[{"name":"field"},{"name":"graphqlapi"}],"description":"Grants permission to send a GraphQL query to a GraphQL API","accessLevel":"Write","resourceTypes":[{"name":"field","required":true},{"name":"graphqlapi","required":true}],"permissionOnly":true},"ListApiKeys":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the API keys for a given API","accessLevel":"List","resourceTypes":[]},"ListApis":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[],"description":"Grants permission to list APIs","accessLevel":"List","resourceTypes":[]},"ListChannelNamespaces":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"api"}],"description":"Grants permission to list channel namespace","accessLevel":"List","resourceTypes":[{"name":"api","required":true}]},"ListDataSources":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the data sources for a given API","accessLevel":"List","resourceTypes":[]},"ListDomainNames":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[],"description":"Grants permission to enumerate custom domain names in AppSync","accessLevel":"List","resourceTypes":[]},"ListFunctions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the functions for a given API","accessLevel":"List","resourceTypes":[]},"ListGraphqlApis":{"conditionKeys":[],"resources":[],"description":"Grants permission to list GraphQL APIs","accessLevel":"List","resourceTypes":[]},"ListResolvers":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the resolvers for a given API and type","accessLevel":"List","resourceTypes":[]},"ListResolversByFunction":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the resolvers that are associated with a specific function","accessLevel":"List","resourceTypes":[]},"ListResourcesForWebACL":{"conditionKeys":[],"resources":[],"description":"Grants permission to get associated resources for a web ACL","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListSourceApiAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list source APIs associated to a given merged API","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"api"},{"name":"channelNamespace"},{"name":"domain"},{"name":"graphqlapi"}],"description":"Grants permission to list the tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"api","required":false},{"name":"channelNamespace","required":false},{"name":"domain","required":false},{"name":"graphqlapi","required":false}]},"ListTypes":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the types for a given API","accessLevel":"List","resourceTypes":[]},"ListTypesByAssociation":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the types for a given merged API and source API association","accessLevel":"List","resourceTypes":[]},"PutGraphqlApiEnvironmentVariables":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the environment variables for a GraphQL API","accessLevel":"Write","resourceTypes":[]},"PutResourcePolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to set a resource policy","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"SetWebACL":{"conditionKeys":[],"resources":[],"description":"Grants permission to set a web ACL","accessLevel":"Permissions management","resourceTypes":[]},"SourceGraphQL":{"conditionKeys":[],"resources":[{"name":"field"},{"name":"graphqlapi"}],"description":"Grants permission to send a GraphQL query to a source API of a merged API","accessLevel":"Write","resourceTypes":[{"name":"field","required":true},{"name":"graphqlapi","required":true}],"permissionOnly":true},"StartDataSourceIntrospection":{"conditionKeys":[],"resources":[],"description":"Grants permission to introspect a data source","accessLevel":"Write","resourceTypes":[]},"StartSchemaCreation":{"conditionKeys":[],"resources":[],"description":"Grants permission to add a new schema to your GraphQL API. This operation is asynchronous - GetSchemaCreationStatus can show when it has completed","accessLevel":"Write","resourceTypes":[]},"StartSchemaMerge":{"conditionKeys":[],"resources":[{"name":"sourceApiAssociation"}],"description":"Grants permission to initiate a schema merge for a given merged API and associated source API","accessLevel":"Write","resourceTypes":[{"name":"sourceApiAssociation","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"api"},{"name":"channelNamespace"},{"name":"domain"},{"name":"graphqlapi"}],"description":"Grants permission to tag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"api","required":false},{"name":"channelNamespace","required":false},{"name":"domain","required":false},{"name":"graphqlapi","required":false}]},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"api"},{"name":"channelNamespace"},{"name":"domain"},{"name":"graphqlapi"}],"description":"Grants permission to untag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"api","required":false},{"name":"channelNamespace","required":false},{"name":"domain","required":false},{"name":"graphqlapi","required":false}]},"UpdateApi":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"api"}],"description":"Grants permission to update an API","accessLevel":"Write","resourceTypes":[{"name":"api","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"]},"UpdateApiCache":{"conditionKeys":[],"resources":[],"description":"Grants permission to update an API cache in AppSync","accessLevel":"Write","resourceTypes":[]},"UpdateApiKey":{"conditionKeys":[],"resources":[],"description":"Grants permission to update an API key for a given API","accessLevel":"Write","resourceTypes":[]},"UpdateChannelNamespace":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"channelNamespace"}],"description":"Grants permission to update a channel namespace","accessLevel":"Write","resourceTypes":[{"name":"channelNamespace","required":true}]},"UpdateDataSource":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a data source","accessLevel":"Write","resourceTypes":[]},"UpdateDomainName":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"domain"}],"description":"Grants permission to update a custom domain name in AppSync","accessLevel":"Write","resourceTypes":[{"name":"domain","required":true}]},"UpdateFunction":{"conditionKeys":[],"resources":[],"description":"Grants permission to update an existing function","accessLevel":"Write","resourceTypes":[]},"UpdateGraphqlApi":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"graphqlapi"}],"description":"Grants permission to update a GraphQL API","accessLevel":"Write","resourceTypes":[{"name":"graphqlapi","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"]},"UpdateResolver":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a resolver","accessLevel":"Write","resourceTypes":[]},"UpdateSourceApiAssociation":{"conditionKeys":[],"resources":[{"name":"sourceApiAssociation"}],"description":"Grants permission to update a merged API source API association","accessLevel":"Write","resourceTypes":[{"name":"sourceApiAssociation","required":true}]},"UpdateType":{"conditionKeys":[],"resources":[],"description":"Grants permission to update a type","accessLevel":"Write","resourceTypes":[]}},"resources":[{"name":"api","arnFormats":["arn:${Partition}:appsync:${Region}:${Account}:apis/${ApiId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"channelNamespace","arnFormats":["arn:${Partition}:appsync:${Region}:${Account}:apis/${ApiId}/channelNamespace/${ChannelNamespaceName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"datasource","arnFormats":["arn:${Partition}:appsync:${Region}:${Account}:apis/${GraphQLAPIId}/datasources/${DatasourceName}"],"conditionKeys":[]},{"name":"domain","arnFormats":["arn:${Partition}:appsync:${Region}:${Account}:domainnames/${DomainName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"field","arnFormats":["arn:${Partition}:appsync:${Region}:${Account}:apis/${GraphQLAPIId}/types/${TypeName}/fields/${FieldName}"],"conditionKeys":[]},{"name":"function","arnFormats":["arn:${Partition}:appsync:${Region}:${Account}:apis/${GraphQLAPIId}/functions/${FunctionId}"],"conditionKeys":[]},{"name":"graphqlapi","arnFormats":["arn:${Partition}:appsync:${Region}:${Account}:apis/${GraphQLAPIId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"mergedApiAssociation","arnFormats":["arn:${Partition}:appsync:${Region}:${Account}:apis/${SourceGraphQLAPIId}/mergedApiAssociations/${Associationid}"],"conditionKeys":[]},{"name":"sourceApiAssociation","arnFormats":["arn:${Partition}:appsync:${Region}:${Account}:apis/${MergedGraphQLAPIId}/sourceApiAssociations/${Associationid}"],"conditionKeys":[]},{"name":"type","arnFormats":["arn:${Partition}:appsync:${Region}:${Account}:apis/${GraphQLAPIId}/types/${TypeName}"],"conditionKeys":[]}],"conditionKeys":{"appsync:Visibility":{"types":["String"],"description":"Filters access by the visibility of an API"},"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"apptest","actions":{"CreateTestCase":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a test case","accessLevel":"Write","resourceTypes":[]},"CreateTestConfiguration":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a test configuration","accessLevel":"Write","resourceTypes":[]},"CreateTestSuite":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a test suite","accessLevel":"Write","resourceTypes":[]},"DeleteTestCase":{"conditionKeys":[],"resources":[{"name":"TestCase"}],"description":"Grants permission to delete a test case","accessLevel":"Write","resourceTypes":[{"name":"TestCase","required":true}]},"DeleteTestConfiguration":{"conditionKeys":[],"resources":[{"name":"TestConfiguration"}],"description":"Grants permission to delete a test configuration","accessLevel":"Write","resourceTypes":[{"name":"TestConfiguration","required":true}]},"DeleteTestRun":{"conditionKeys":[],"resources":[{"name":"TestRun"}],"description":"Grants permission to delete a test run","accessLevel":"Write","resourceTypes":[{"name":"TestRun","required":true}],"dependentActions":["s3:DeleteObject","s3:ListBucket"]},"DeleteTestSuite":{"conditionKeys":[],"resources":[{"name":"TestSuite"}],"description":"Grants permission to delete a test suite","accessLevel":"Write","resourceTypes":[{"name":"TestSuite","required":true}]},"GetTestCase":{"conditionKeys":[],"resources":[{"name":"TestCase"}],"description":"Grants permission to get a test case","accessLevel":"Read","resourceTypes":[{"name":"TestCase","required":true}]},"GetTestConfiguration":{"conditionKeys":[],"resources":[{"name":"TestConfiguration"}],"description":"Grants permission to get a test configuration","accessLevel":"Read","resourceTypes":[{"name":"TestConfiguration","required":true}]},"GetTestRunStep":{"conditionKeys":[],"resources":[{"name":"TestRun"}],"description":"Grants permission to get test run step","accessLevel":"Read","resourceTypes":[{"name":"TestRun","required":true}]},"GetTestSuite":{"conditionKeys":[],"resources":[{"name":"TestSuite"}],"description":"Grants permission to get a test suite","accessLevel":"Read","resourceTypes":[{"name":"TestSuite","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to list tags for a resource","accessLevel":"Read","resourceTypes":[]},"ListTestCases":{"conditionKeys":[],"resources":[],"description":"Grants permission to list test cases","accessLevel":"List","resourceTypes":[]},"ListTestConfigurations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list test configurations","accessLevel":"List","resourceTypes":[]},"ListTestRunSteps":{"conditionKeys":[],"resources":[{"name":"TestRun"}],"description":"Grants permission to list steps for a test run","accessLevel":"Read","resourceTypes":[{"name":"TestRun","required":true}]},"ListTestRunTestCases":{"conditionKeys":[],"resources":[{"name":"TestRun"}],"description":"Grants permission to list test cases for a test run","accessLevel":"Read","resourceTypes":[{"name":"TestRun","required":true}]},"ListTestRuns":{"conditionKeys":[],"resources":[],"description":"Grants permission to list test runs","accessLevel":"List","resourceTypes":[]},"ListTestSuites":{"conditionKeys":[],"resources":[],"description":"Grants permission to list test suites","accessLevel":"List","resourceTypes":[]},"StartTestRun":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to start a test run","accessLevel":"Write","resourceTypes":[],"dependentActions":["cloudformation:CreateStack","cloudformation:DeleteStack","cloudformation:DescribeStacks","dms:DescribeReplicationTasks","dms:StartReplicationTask","dms:StopReplicationTask","ec2:DescribeAvailabilityZones","ec2:DescribeVpcEndpointServiceConfigurations","ec2:DescribeVpcEndpointServices","m2:CreateDataSetImportTask","m2:GetApplication","m2:GetApplicationVersion","m2:GetBatchJobExecution","m2:GetDataSetDetails","m2:GetDataSetImportTask","m2:StartApplication","m2:StartBatchJob","m2:StopApplication","s3:CreateBucket","s3:DeleteObject","s3:GetObject","s3:ListBucket","s3:PutObject"]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"TestCase"},{"name":"TestConfiguration"},{"name":"TestRun"},{"name":"TestSuite"}],"description":"Grants permission to tag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"TestCase","required":false},{"name":"TestConfiguration","required":false},{"name":"TestRun","required":false},{"name":"TestSuite","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"TestCase"},{"name":"TestConfiguration"},{"name":"TestRun"},{"name":"TestSuite"}],"description":"Grants permission to untag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"TestCase","required":false},{"name":"TestConfiguration","required":false},{"name":"TestRun","required":false},{"name":"TestSuite","required":false}]},"UpdateTestCase":{"conditionKeys":[],"resources":[{"name":"TestCase"}],"description":"Grants permission to update a test case","accessLevel":"Write","resourceTypes":[{"name":"TestCase","required":true}]},"UpdateTestConfiguration":{"conditionKeys":[],"resources":[{"name":"TestConfiguration"}],"description":"Grants permission to update a test configuration","accessLevel":"Write","resourceTypes":[{"name":"TestConfiguration","required":true}]},"UpdateTestSuite":{"conditionKeys":[],"resources":[{"name":"TestSuite"}],"description":"Grants permission to update a test suite","accessLevel":"Write","resourceTypes":[{"name":"TestSuite","required":true}]}},"resources":[{"name":"TestCase","arnFormats":["arn:${Partition}:apptest:${Region}:${Account}:testcase/${TestCaseId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"TestConfiguration","arnFormats":["arn:${Partition}:apptest:${Region}:${Account}:testconfiguration/${TestConfigurationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"TestRun","arnFormats":["arn:${Partition}:apptest:${Region}:${Account}:testrun/${TestRunId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"TestSuite","arnFormats":["arn:${Partition}:apptest:${Region}:${Account}:testsuite/${TestSuiteId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair that is allowed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair of a resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by a list of tag keys that are allowed in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"aps","actions":{"CreateAlertManagerAlerts":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to create alerts","accessLevel":"Write","resourceTypes":[{"name":"workspace","required":true}]},"CreateAlertManagerDefinition":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to create an alert manager definition","accessLevel":"Write","resourceTypes":[{"name":"workspace","required":true}]},"CreateAnomalyDetector":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"workspace"}],"description":"Grants permission to create an anomaly detector","accessLevel":"Write","resourceTypes":[{"name":"workspace","required":true}]},"CreateLoggingConfiguration":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to create a logging configuration","accessLevel":"Write","resourceTypes":[{"name":"workspace","required":true}]},"CreateQueryLoggingConfiguration":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to create a query logging configuration","accessLevel":"Write","resourceTypes":[{"name":"workspace","required":true}]},"CreateRuleGroupsNamespace":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"rulegroupsnamespace"}],"description":"Grants permission to create a rule groups namespace","accessLevel":"Write","resourceTypes":[{"name":"rulegroupsnamespace","required":true}]},"CreateScraper":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"cluster"},{"name":"workspace"}],"description":"Grants permission to create a scraper","accessLevel":"Write","resourceTypes":[{"name":"cluster","required":true},{"name":"workspace","required":true}],"dependentActions":["aps:TagResource","ec2:DescribeSecurityGroups","ec2:DescribeSubnets","eks:DescribeCluster","iam:CreateServiceLinkedRole"]},"CreateWorkspace":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a workspace","accessLevel":"Write","resourceTypes":[]},"DeleteAlertManagerDefinition":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to delete an alert manager definition","accessLevel":"Write","resourceTypes":[{"name":"workspace","required":true}]},"DeleteAlertManagerSilence":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to delete a silence","accessLevel":"Write","resourceTypes":[{"name":"workspace","required":true}]},"DeleteAnomalyDetector":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"anomalydetector"},{"name":"workspace"}],"description":"Grants permission to delete an anomaly detector","accessLevel":"Write","resourceTypes":[{"name":"anomalydetector","required":true},{"name":"workspace","required":true}]},"DeleteLoggingConfiguration":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to delete a logging configuration","accessLevel":"Write","resourceTypes":[{"name":"workspace","required":true}]},"DeleteQueryLoggingConfiguration":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to delete a query logging configuration","accessLevel":"Write","resourceTypes":[{"name":"workspace","required":true}]},"DeleteResourcePolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to delete workspace resource policy","accessLevel":"Write","resourceTypes":[{"name":"workspace","required":true}]},"DeleteRuleGroupsNamespace":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"rulegroupsnamespace"}],"description":"Grants permission to delete a rule groups namespace","accessLevel":"Write","resourceTypes":[{"name":"rulegroupsnamespace","required":true}]},"DeleteScraper":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"scraper"}],"description":"Grants permission to delete a scraper","accessLevel":"Write","resourceTypes":[{"name":"scraper","required":true}]},"DeleteScraperLoggingConfiguration":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"scraper"}],"description":"Grants permission to delete a scraper logging configuration","accessLevel":"Write","resourceTypes":[{"name":"scraper","required":true}]},"DeleteWorkspace":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to delete a workspace","accessLevel":"Write","resourceTypes":[{"name":"workspace","required":true}]},"DescribeAlertManagerDefinition":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to describe an alert manager definition","accessLevel":"Read","resourceTypes":[{"name":"workspace","required":true}]},"DescribeAnomalyDetector":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"anomalydetector"},{"name":"workspace"}],"description":"Grants permission to describe an anomaly detector","accessLevel":"Read","resourceTypes":[{"name":"anomalydetector","required":true},{"name":"workspace","required":true}]},"DescribeLoggingConfiguration":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to describe a logging configuration","accessLevel":"Read","resourceTypes":[{"name":"workspace","required":true}]},"DescribeQueryLoggingConfiguration":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to describe a query logging configuration","accessLevel":"Read","resourceTypes":[{"name":"workspace","required":true}]},"DescribeResourcePolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to describe workspace resource policy","accessLevel":"Read","resourceTypes":[{"name":"workspace","required":true}]},"DescribeRuleGroupsNamespace":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"rulegroupsnamespace"}],"description":"Grants permission to describe a rule groups namespace","accessLevel":"Read","resourceTypes":[{"name":"rulegroupsnamespace","required":true}]},"DescribeScraper":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"scraper"}],"description":"Grants permission to describe a scraper","accessLevel":"Read","resourceTypes":[{"name":"scraper","required":true}]},"DescribeScraperLoggingConfiguration":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"scraper"}],"description":"Grants permission to describe a scraper logging configuration","accessLevel":"Read","resourceTypes":[{"name":"scraper","required":true}]},"DescribeWorkspace":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to describe a workspace","accessLevel":"Read","resourceTypes":[{"name":"workspace","required":true}]},"DescribeWorkspaceConfiguration":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to describe workspace configuration","accessLevel":"Read","resourceTypes":[{"name":"workspace","required":true}]},"GetAlertManagerSilence":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to get a silence","accessLevel":"Read","resourceTypes":[{"name":"workspace","required":true}]},"GetAlertManagerStatus":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to get current status of an alertmanager","accessLevel":"Read","resourceTypes":[{"name":"workspace","required":true}]},"GetDefaultScraperConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to get default scraper configuration","accessLevel":"Read","resourceTypes":[]},"GetLabels":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to retrieve AMP workspace labels","accessLevel":"Read","resourceTypes":[{"name":"workspace","required":true}]},"GetMetricMetadata":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to retrieve the metadata for AMP workspace metrics","accessLevel":"Read","resourceTypes":[{"name":"workspace","required":true}]},"GetSeries":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to retrieve AMP workspace time series data","accessLevel":"Read","resourceTypes":[{"name":"workspace","required":true}]},"ListAlertManagerAlertGroups":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to list groups","accessLevel":"Read","resourceTypes":[{"name":"workspace","required":true}]},"ListAlertManagerAlerts":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to list alerts","accessLevel":"Read","resourceTypes":[{"name":"workspace","required":true}]},"ListAlertManagerReceivers":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to list receivers","accessLevel":"Read","resourceTypes":[{"name":"workspace","required":true}]},"ListAlertManagerSilences":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to list silences","accessLevel":"Read","resourceTypes":[{"name":"workspace","required":true}]},"ListAlerts":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to list active alerts","accessLevel":"Read","resourceTypes":[{"name":"workspace","required":true}]},"ListAnomalyDetectors":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to list anomaly detectors","accessLevel":"List","resourceTypes":[{"name":"workspace","required":true}]},"ListRuleGroupsNamespaces":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to list rule groups namespaces","accessLevel":"List","resourceTypes":[{"name":"workspace","required":true}]},"ListRules":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to list alerting and recording rules","accessLevel":"Read","resourceTypes":[{"name":"workspace","required":true}]},"ListScrapers":{"conditionKeys":[],"resources":[],"description":"Grants permission to list scrapers","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"anomalydetector"},{"name":"rulegroupsnamespace"},{"name":"scraper"},{"name":"workspace"}],"description":"Grants permission to list tags on an AMP resource","accessLevel":"Read","resourceTypes":[{"name":"anomalydetector","required":false},{"name":"rulegroupsnamespace","required":false},{"name":"scraper","required":false},{"name":"workspace","required":false}]},"ListWorkspaces":{"conditionKeys":[],"resources":[],"description":"Grants permission to list workspaces","accessLevel":"List","resourceTypes":[]},"PreviewAnomalyDetector":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to preview anomaly detection on AMP workspace metrics","accessLevel":"Read","resourceTypes":[{"name":"workspace","required":true}]},"PutAlertManagerDefinition":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to update an alert manager definition","accessLevel":"Write","resourceTypes":[{"name":"workspace","required":true}]},"PutAlertManagerSilences":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to create or update a silence","accessLevel":"Write","resourceTypes":[{"name":"workspace","required":true}]},"PutAnomalyDetector":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"anomalydetector"},{"name":"workspace"}],"description":"Grants permission to update an anomaly detector","accessLevel":"Write","resourceTypes":[{"name":"anomalydetector","required":true},{"name":"workspace","required":true}]},"PutResourcePolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to create and update workspace resource policy","accessLevel":"Write","resourceTypes":[{"name":"workspace","required":true}]},"PutRuleGroupsNamespace":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"rulegroupsnamespace"}],"description":"Grants permission to update a rule groups namespace","accessLevel":"Write","resourceTypes":[{"name":"rulegroupsnamespace","required":true}]},"QueryMetrics":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to run a query on AMP workspace metrics","accessLevel":"Read","resourceTypes":[{"name":"workspace","required":true}]},"RemoteWrite":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to perform a remote write operation to initiate the streaming of metrics to AMP workspace","accessLevel":"Write","resourceTypes":[{"name":"workspace","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"anomalydetector"},{"name":"rulegroupsnamespace"},{"name":"scraper"},{"name":"workspace"}],"description":"Grants permission to tag an AMP resource","accessLevel":"Tagging","resourceTypes":[{"name":"anomalydetector","required":false},{"name":"rulegroupsnamespace","required":false},{"name":"scraper","required":false},{"name":"workspace","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"anomalydetector"},{"name":"rulegroupsnamespace"},{"name":"scraper"},{"name":"workspace"}],"description":"Grants permission to untag an AMP resource","accessLevel":"Tagging","resourceTypes":[{"name":"anomalydetector","required":false},{"name":"rulegroupsnamespace","required":false},{"name":"scraper","required":false},{"name":"workspace","required":false}]},"UpdateLoggingConfiguration":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to update a logging configuration","accessLevel":"Write","resourceTypes":[{"name":"workspace","required":true}]},"UpdateQueryLoggingConfiguration":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to update a query logging configuration","accessLevel":"Write","resourceTypes":[{"name":"workspace","required":true}]},"UpdateScraper":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"scraper"},{"name":"workspace"}],"description":"Grants permission to update a scraper","accessLevel":"Write","resourceTypes":[{"name":"scraper","required":true},{"name":"workspace","required":false}],"dependentActions":["aps:CreateScraper","aps:TagResource"]},"UpdateScraperLoggingConfiguration":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"scraper"}],"description":"Grants permission to put a scraper logging configuration","accessLevel":"Write","resourceTypes":[{"name":"scraper","required":true}]},"UpdateWorkspaceAlias":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to modify the alias of existing AMP workspace","accessLevel":"Write","resourceTypes":[{"name":"workspace","required":true}]},"UpdateWorkspaceConfiguration":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspace"}],"description":"Grants permission to update workspace configuration","accessLevel":"Write","resourceTypes":[{"name":"workspace","required":true}]}},"resources":[{"name":"anomalydetector","arnFormats":["arn:${Partition}:aps:${Region}:${Account}:anomalydetector/${WorkspaceId}/${AnomalyDetectorId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"]},{"name":"cluster","arnFormats":["arn:${Partition}:eks:${Region}:${Account}:cluster/${ClusterName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"rulegroupsnamespace","arnFormats":["arn:${Partition}:aps:${Region}:${Account}:rulegroupsnamespace/${WorkspaceId}/${Namespace}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"]},{"name":"scraper","arnFormats":["arn:${Partition}:aps:${Region}:${Account}:scraper/${ScraperId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"]},{"name":"workspace","arnFormats":["arn:${Partition}:aps:${Region}:${Account}:workspace/${WorkspaceId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access based on the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access based on the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access based on the tag keys that are passed in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"arc-region-switch","actions":{"ApprovePlanExecutionStep":{"conditionKeys":[],"resources":[{"name":"plan"}],"description":"Grants permission to approve a plan execution step","accessLevel":"Write","resourceTypes":[{"name":"plan","required":true}]},"CancelPlanExecution":{"conditionKeys":[],"resources":[{"name":"plan"}],"description":"Grants permission to cancel a plan execution","accessLevel":"Write","resourceTypes":[{"name":"plan","required":true}]},"CreatePlan":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"plan"}],"description":"Grants permission to create a plan","accessLevel":"Write","resourceTypes":[{"name":"plan","required":true}]},"DeletePlan":{"conditionKeys":[],"resources":[{"name":"plan"}],"description":"Grants permission to delete a plan","accessLevel":"Write","resourceTypes":[{"name":"plan","required":true}]},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete the RAM access control policy for a plan","accessLevel":"Permissions management","resourceTypes":[],"permissionOnly":true},"GetPlan":{"conditionKeys":[],"resources":[{"name":"plan"}],"description":"Grants permission to get information about plans in all AWS Regions using a control plane","accessLevel":"Read","resourceTypes":[{"name":"plan","required":true}]},"GetPlanEvaluationStatus":{"conditionKeys":[],"resources":[{"name":"plan"}],"description":"Grants permission to get a plan's evaluation status","accessLevel":"Read","resourceTypes":[{"name":"plan","required":true}]},"GetPlanExecution":{"conditionKeys":[],"resources":[{"name":"plan"}],"description":"Grants permission to get plan execution details and setup information","accessLevel":"Read","resourceTypes":[{"name":"plan","required":true}]},"GetPlanInRegion":{"conditionKeys":[],"resources":[{"name":"plan"}],"description":"Grants permission to get information about a plan in a specific AWS Region using the Region switch Regional data plane","accessLevel":"Read","resourceTypes":[{"name":"plan","required":true}]},"GetResourcePolicy":{"conditionKeys":[],"resources":[{"name":"plan"}],"description":"Grants permission to get the resource policy of a plan","accessLevel":"Permissions management","resourceTypes":[{"name":"plan","required":true}],"permissionOnly":true},"ListPlanExecutionEvents":{"conditionKeys":[],"resources":[{"name":"plan"}],"description":"Grants permission to list plan execution events","accessLevel":"List","resourceTypes":[{"name":"plan","required":true}]},"ListPlanExecutions":{"conditionKeys":[],"resources":[{"name":"plan"}],"description":"Grants permission to list plan executions","accessLevel":"List","resourceTypes":[{"name":"plan","required":true}]},"ListPlans":{"conditionKeys":[],"resources":[],"description":"Grants permission to list plans in all AWS Regions using a control plane","accessLevel":"List","resourceTypes":[]},"ListPlansInRegion":{"conditionKeys":[],"resources":[],"description":"Grants permission to list plans in a specific AWS Region using the Region switch Regional data plane","accessLevel":"List","resourceTypes":[]},"ListRoute53HealthChecks":{"conditionKeys":[],"resources":[{"name":"plan"}],"description":"Grants permission to list Route 53 health checks","accessLevel":"List","resourceTypes":[{"name":"plan","required":true}]},"ListRoute53HealthChecksInRegion":{"conditionKeys":[],"resources":[{"name":"plan"}],"description":"Grants permission to list Route 53 health checks in a specific AWS Region using the Region switch Regional data plane","accessLevel":"List","resourceTypes":[{"name":"plan","required":true}]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"plan"}],"description":"Grants permission to list tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"plan","required":true}]},"PutResourcePolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to define the RAM access control policy for a plan","accessLevel":"Permissions management","resourceTypes":[],"permissionOnly":true},"StartPlanExecution":{"conditionKeys":[],"resources":[{"name":"plan"}],"description":"Grants permission to start a plan execution","accessLevel":"Write","resourceTypes":[{"name":"plan","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"plan"}],"description":"Grants permission to tag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"plan","required":true}]},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"plan"}],"description":"Grants permission to remove tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"plan","required":true}]},"UpdatePlan":{"conditionKeys":[],"resources":[{"name":"plan"}],"description":"Grants permission to update a plan","accessLevel":"Write","resourceTypes":[{"name":"plan","required":true}]},"UpdatePlanExecution":{"conditionKeys":[],"resources":[{"name":"plan"}],"description":"Grants permission to update a plan execution","accessLevel":"Write","resourceTypes":[{"name":"plan","required":true}]},"UpdatePlanExecutionStep":{"conditionKeys":[],"resources":[{"name":"plan"}],"description":"Grants permission to update a plan execution step","accessLevel":"Write","resourceTypes":[{"name":"plan","required":true}]}},"resources":[{"name":"plan","arnFormats":["arn:${Partition}:arc-region-switch::${Account}:plan/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag's key and value in a request"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"arc-zonal-shift","actions":{"CancelPracticeRun":{"conditionKeys":["arc-zonal-shift:ResourceIdentifier","aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"ALB"},{"name":"NLB"}],"description":"Grants permission to cancel an active practice run","accessLevel":"Write","resourceTypes":[{"name":"ALB","required":true},{"name":"NLB","required":true}]},"CancelZonalShift":{"conditionKeys":["arc-zonal-shift:ResourceIdentifier","aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"ALB"},{"name":"NLB"}],"description":"Grants permission to cancel an active zonal shift","accessLevel":"Write","resourceTypes":[{"name":"ALB","required":true},{"name":"NLB","required":true}]},"CreatePracticeRunConfiguration":{"conditionKeys":["arc-zonal-shift:ResourceIdentifier","aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"ALB"},{"name":"NLB"}],"description":"Grants permission to create a practice run configuration","accessLevel":"Write","resourceTypes":[{"name":"ALB","required":true},{"name":"NLB","required":true}],"dependentActions":["cloudwatch:DescribeAlarms","iam:CreateServiceLinkedRole"]},"DeletePracticeRunConfiguration":{"conditionKeys":["arc-zonal-shift:ResourceIdentifier","aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"ALB"},{"name":"NLB"}],"description":"Grants permission to delete a practice run configuration","accessLevel":"Write","resourceTypes":[{"name":"ALB","required":true},{"name":"NLB","required":true}]},"GetAutoshiftObserverNotificationStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to get autoshift observer notification status","accessLevel":"Read","resourceTypes":[]},"GetManagedResource":{"conditionKeys":["arc-zonal-shift:ResourceIdentifier","aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"ALB"},{"name":"NLB"}],"description":"Grants permission to get information about a managed resource","accessLevel":"Read","resourceTypes":[{"name":"ALB","required":true},{"name":"NLB","required":true}]},"ListAutoshifts":{"conditionKeys":[],"resources":[],"description":"Grants permission to list active and completed autoshifts","accessLevel":"List","resourceTypes":[]},"ListManagedResources":{"conditionKeys":[],"resources":[],"description":"Grants permission to list managed resources","accessLevel":"List","resourceTypes":[]},"ListZonalShifts":{"conditionKeys":[],"resources":[],"description":"Grants permission to list zonal shifts","accessLevel":"List","resourceTypes":[]},"StartPracticeRun":{"conditionKeys":["arc-zonal-shift:ResourceIdentifier","aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"ALB"},{"name":"NLB"}],"description":"Grants permission to start a practice run","accessLevel":"Write","resourceTypes":[{"name":"ALB","required":true},{"name":"NLB","required":true}]},"StartZonalShift":{"conditionKeys":["arc-zonal-shift:ResourceIdentifier","aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"ALB"},{"name":"NLB"}],"description":"Grants permission to start a zonal shift","accessLevel":"Write","resourceTypes":[{"name":"ALB","required":true},{"name":"NLB","required":true}]},"UpdateAutoshiftObserverNotificationStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to update autoshift observer notification status","accessLevel":"Write","resourceTypes":[]},"UpdatePracticeRunConfiguration":{"conditionKeys":["arc-zonal-shift:ResourceIdentifier","aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"ALB"},{"name":"NLB"}],"description":"Grants permission to update a practice run configuration","accessLevel":"Write","resourceTypes":[{"name":"ALB","required":true},{"name":"NLB","required":true}],"dependentActions":["cloudwatch:DescribeAlarms","iam:CreateServiceLinkedRole"]},"UpdateZonalAutoshiftConfiguration":{"conditionKeys":["arc-zonal-shift:ResourceIdentifier","aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"ALB"},{"name":"NLB"}],"description":"Grants permission to update a zonal autoshift status","accessLevel":"Write","resourceTypes":[{"name":"ALB","required":true},{"name":"NLB","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"]},"UpdateZonalShift":{"conditionKeys":["arc-zonal-shift:ResourceIdentifier","aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"],"resources":[{"name":"ALB"},{"name":"NLB"}],"description":"Grants permission to update an existing zonal shift","accessLevel":"Write","resourceTypes":[{"name":"ALB","required":true},{"name":"NLB","required":true}]}},"resources":[{"name":"ALB","arnFormats":["arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/${LoadBalancerName}/${LoadBalancerId}"],"conditionKeys":["arc-zonal-shift:ResourceIdentifier","aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"]},{"name":"NLB","arnFormats":["arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/net/${LoadBalancerName}/${LoadBalancerId}"],"conditionKeys":["arc-zonal-shift:ResourceIdentifier","aws:ResourceTag/${TagKey}","elasticloadbalancing:ResourceTag/${TagKey}"]}],"conditionKeys":{"arc-zonal-shift:ResourceIdentifier":{"types":["String"],"description":"Filters access by the resource identifier of the managed resource"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the managed resource"},"elasticloadbalancing:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the managed resource"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"arsenal","actions":{"RegisterOnPremisesAgent":{"conditionKeys":[],"resources":[],"description":"Grants permission to register AWS provided data collectors to the Application Discovery Service","accessLevel":"Write","resourceTypes":[],"permissionOnly":true}},"resources":[],"conditionKeys":{}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"artifact","actions":{"AcceptAgreement":{"conditionKeys":[],"resources":[{"name":"agreement"}],"description":"Grants permission to accept an AWS agreement that has not yet been accepted by the customer account","accessLevel":"Write","resourceTypes":[{"name":"agreement","required":true}]},"AcceptNdaForAgreement":{"conditionKeys":[],"resources":[{"name":"agreement"}],"description":"Grants permission to accept the terms of an NDA Document for a given agreement resource","accessLevel":"Write","resourceTypes":[{"name":"agreement","required":true}]},"GetAccountSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the account settings for Artifact","accessLevel":"Read","resourceTypes":[]},"GetAgreement":{"conditionKeys":[],"resources":[{"name":"agreement"}],"description":"Grants permission to get an AWS agreement that has not yet been accepted by the customer account","accessLevel":"Read","resourceTypes":[{"name":"agreement","required":true}]},"GetCustomerAgreement":{"conditionKeys":[],"resources":[{"name":"customer-agreement"}],"description":"Grants permission to get an AWS agreement that has been accepted by the customer account","accessLevel":"Read","resourceTypes":[{"name":"customer-agreement","required":true}]},"GetNdaForAgreement":{"conditionKeys":[],"resources":[{"name":"agreement"}],"description":"Grants permission to retrieve the NDA Document for a given agreement resource","accessLevel":"Read","resourceTypes":[{"name":"agreement","required":true}]},"GetReport":{"conditionKeys":[],"resources":[{"name":"report"}],"description":"Grants permission to download a report","accessLevel":"Read","resourceTypes":[{"name":"report","required":true}]},"GetReportMetadata":{"conditionKeys":[],"resources":[{"name":"report"}],"description":"Grants permission to download metadata associated with a report","accessLevel":"Read","resourceTypes":[{"name":"report","required":true}]},"GetTermForReport":{"conditionKeys":[],"resources":[{"name":"report"}],"description":"Grants permission to download a term associated with a report","accessLevel":"Read","resourceTypes":[{"name":"report","required":true}]},"ListAgreements":{"conditionKeys":[],"resources":[],"description":"Grants permission to list AWS agreements","accessLevel":"List","resourceTypes":[]},"ListCustomerAgreements":{"conditionKeys":[],"resources":[],"description":"Grants permission to list customer-agreement resources that have been accepted by the customer account","accessLevel":"List","resourceTypes":[]},"ListReportVersions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list report versions in your account","accessLevel":"List","resourceTypes":[]},"ListReports":{"conditionKeys":[],"resources":[],"description":"Grants permission to list reports in your account","accessLevel":"List","resourceTypes":[]},"PutAccountSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to put account settings for Artifact","accessLevel":"Write","resourceTypes":[]},"TerminateAgreement":{"conditionKeys":[],"resources":[{"name":"customer-agreement"}],"description":"Grants permission to terminate a customer agreement that was previously accepted by the customer account","accessLevel":"Write","resourceTypes":[{"name":"customer-agreement","required":true}]}},"resources":[{"name":"agreement","arnFormats":["arn:${Partition}:artifact:::agreement/*"],"conditionKeys":[]},{"name":"customer-agreement","arnFormats":["arn:${Partition}:artifact::${Account}:customer-agreement/*"],"conditionKeys":[]},{"name":"report","arnFormats":["arn:${Partition}:artifact:${Region}::report/${ReportId}:${Version}"],"conditionKeys":["artifact:ReportCategory","artifact:ReportSeries"]}],"conditionKeys":{"artifact:ReportCategory":{"types":["String"],"description":"Filters access by which category reports are associated with"},"artifact:ReportSeries":{"types":["String"],"description":"Filters access by which series reports are associated with"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"athena","actions":{"BatchGetNamedQuery":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to get information about one or more named queries","accessLevel":"Read","resourceTypes":[{"name":"workgroup","required":true}]},"BatchGetPreparedStatement":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to get information about one or more prepared statements","accessLevel":"Read","resourceTypes":[{"name":"workgroup","required":true}]},"BatchGetQueryExecution":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to get information about one or more query executions","accessLevel":"Read","resourceTypes":[{"name":"workgroup","required":true}]},"CancelCapacityReservation":{"conditionKeys":[],"resources":[{"name":"capacity-reservation"}],"description":"Grants permission to cancel a capacity reservation","accessLevel":"Write","resourceTypes":[{"name":"capacity-reservation","required":true}]},"CancelQueryExecution":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to cancel query execution. Deprecated. Applies only to AWS services and principals that use Athena JDBC driver earlier than 1.1.0. Use StopQueryExecution otherwise","accessLevel":"Write","resourceTypes":[{"name":"workgroup","required":true}]},"CreateCapacityReservation":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"capacity-reservation"}],"description":"Grants permission to create a capacity reservation","accessLevel":"Write","resourceTypes":[{"name":"capacity-reservation","required":true}]},"CreateDataCatalog":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"datacatalog"}],"description":"Grants permission to create a datacatalog","accessLevel":"Write","resourceTypes":[{"name":"datacatalog","required":true}]},"CreateNamedQuery":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to create a named query","accessLevel":"Write","resourceTypes":[{"name":"workgroup","required":true}]},"CreateNotebook":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to create a notebook","accessLevel":"Write","resourceTypes":[{"name":"workgroup","required":true}]},"CreatePreparedStatement":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to create a prepared statement","accessLevel":"Write","resourceTypes":[{"name":"workgroup","required":true}]},"CreatePresignedNotebookUrl":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to create a presigned notebook url","accessLevel":"Write","resourceTypes":[{"name":"workgroup","required":true}]},"CreateWorkGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"workgroup"}],"description":"Grants permission to create a workgroup","accessLevel":"Write","resourceTypes":[{"name":"workgroup","required":true}]},"DeleteCapacityReservation":{"conditionKeys":[],"resources":[{"name":"capacity-reservation"}],"description":"Grants permission to delete a capacity reservation","accessLevel":"Write","resourceTypes":[{"name":"capacity-reservation","required":true}]},"DeleteDataCatalog":{"conditionKeys":[],"resources":[{"name":"datacatalog"}],"description":"Grants permission to delete a datacatalog","accessLevel":"Write","resourceTypes":[{"name":"datacatalog","required":true}]},"DeleteNamedQuery":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to delete a named query specified","accessLevel":"Write","resourceTypes":[{"name":"workgroup","required":true}]},"DeleteNotebook":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to delete a notebook","accessLevel":"Write","resourceTypes":[{"name":"workgroup","required":true}]},"DeletePreparedStatement":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to delete a prepared statement specified","accessLevel":"Write","resourceTypes":[{"name":"workgroup","required":true}]},"DeleteWorkGroup":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to delete a workgroup","accessLevel":"Write","resourceTypes":[{"name":"workgroup","required":true}]},"ExportNotebook":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to export a notebook","accessLevel":"Write","resourceTypes":[{"name":"workgroup","required":true}]},"GetCalculationExecution":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to get a calculation execution","accessLevel":"Read","resourceTypes":[{"name":"workgroup","required":true}]},"GetCalculationExecutionCode":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to get a calculation execution code","accessLevel":"Read","resourceTypes":[{"name":"workgroup","required":true}]},"GetCalculationExecutionStatus":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to get a calculation execution status","accessLevel":"Read","resourceTypes":[{"name":"workgroup","required":true}]},"GetCapacityAssignmentConfiguration":{"conditionKeys":[],"resources":[{"name":"capacity-reservation"}],"description":"Grants permission to get capacity assignment information for a capacity reservation","accessLevel":"Read","resourceTypes":[{"name":"capacity-reservation","required":true}]},"GetCapacityReservation":{"conditionKeys":[],"resources":[{"name":"capacity-reservation"}],"description":"Grants permission to get a capacity reservation","accessLevel":"Read","resourceTypes":[{"name":"capacity-reservation","required":true}]},"GetCatalogs":{"conditionKeys":[],"resources":[],"description":"Grants permission to enable access to databases and tables. Applies only to AWS services managed policy and principals that use an Athena JDBC driver version 1.1.0","accessLevel":"Read","resourceTypes":[]},"GetDataCatalog":{"conditionKeys":[],"resources":[{"name":"datacatalog"}],"description":"Grants permission to get a datacatalog","accessLevel":"Read","resourceTypes":[{"name":"datacatalog","required":true}]},"GetDatabase":{"conditionKeys":[],"resources":[{"name":"datacatalog"}],"description":"Grants permission to get a database for a given datacatalog","accessLevel":"Read","resourceTypes":[{"name":"datacatalog","required":true}]},"GetExecutionEngine":{"conditionKeys":[],"resources":[],"description":"Grants permission to enable access to the specified database and table. Applies only to AWS services managed policy and principals that use an Athena JDBC driver version 1.1.0","accessLevel":"Read","resourceTypes":[]},"GetExecutionEngines":{"conditionKeys":[],"resources":[],"description":"Grants permission to enable access to databases and tables. Applies only to AWS services managed policy and principals that use an Athena JDBC driver version 1.1.0","accessLevel":"Read","resourceTypes":[]},"GetNamedQuery":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to get information about the specified named query","accessLevel":"Read","resourceTypes":[{"name":"workgroup","required":true}]},"GetNamespace":{"conditionKeys":[],"resources":[],"description":"Grants permission to enable access to the specified database and table. Applies only to AWS services managed policy and principals that use an Athena JDBC driver version 1.1.0","accessLevel":"Read","resourceTypes":[]},"GetNamespaces":{"conditionKeys":[],"resources":[],"description":"Grants permission to enable access to databases and tables. Applies only to AWS services managed policy and principals that use an Athena JDBC driver version 1.1.0","accessLevel":"Read","resourceTypes":[]},"GetNotebookMetadata":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to get notebook metadata","accessLevel":"Read","resourceTypes":[{"name":"workgroup","required":true}]},"GetPreparedStatement":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to get information about the specified prepared statement","accessLevel":"Read","resourceTypes":[{"name":"workgroup","required":true}]},"GetQueryExecution":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to get information about the specified query execution","accessLevel":"Read","resourceTypes":[{"name":"workgroup","required":true}]},"GetQueryExecutions":{"conditionKeys":[],"resources":[],"description":"Grants permission to get query executions. Deprecated. Applies only to AWS services and principals that use Athena JDBC driver earlier than 1.1.0. Use ListQueryExecutions otherwise","accessLevel":"Read","resourceTypes":[]},"GetQueryResults":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to get the query results","accessLevel":"Read","resourceTypes":[{"name":"workgroup","required":true}]},"GetQueryResultsStream":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to get the query results stream","accessLevel":"Read","resourceTypes":[{"name":"workgroup","required":true}]},"GetQueryRuntimeStatistics":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to get runtime statistics for the specified query execution","accessLevel":"Read","resourceTypes":[{"name":"workgroup","required":true}]},"GetResourceDashboard":{"conditionKeys":[],"resources":[{"name":"session"},{"name":"workgroup"}],"description":"Grants permission to get a Live UI/Persistence UI for a session","accessLevel":"Read","resourceTypes":[{"name":"workgroup","required":true},{"name":"session","required":false}]},"GetSession":{"conditionKeys":[],"resources":[{"name":"session"},{"name":"workgroup"}],"description":"Grants permission to get a session","accessLevel":"Read","resourceTypes":[{"name":"workgroup","required":true},{"name":"session","required":false}]},"GetSessionEndpoint":{"conditionKeys":[],"resources":[{"name":"session"},{"name":"workgroup"}],"description":"Grants permission to get a connection endpoint and authentication token for a given session Id","accessLevel":"Write","resourceTypes":[{"name":"workgroup","required":true},{"name":"session","required":false}]},"GetSessionStatus":{"conditionKeys":[],"resources":[{"name":"session"},{"name":"workgroup"}],"description":"Grants permission to get a session status","accessLevel":"Read","resourceTypes":[{"name":"workgroup","required":true},{"name":"session","required":false}]},"GetTable":{"conditionKeys":[],"resources":[],"description":"Grants permission to enable access to the specified table. Applies only to AWS services managed policy and principals that use an Athena JDBC driver version 1.1.0","accessLevel":"Read","resourceTypes":[]},"GetTableMetadata":{"conditionKeys":[],"resources":[{"name":"datacatalog"}],"description":"Grants permission to get a metadata about a table for a given datacatalog","accessLevel":"Read","resourceTypes":[{"name":"datacatalog","required":true}]},"GetTables":{"conditionKeys":[],"resources":[],"description":"Grants permission to enable access to tables. Applies only to AWS services managed policy and principals that use an Athena JDBC driver version 1.1.0","accessLevel":"Read","resourceTypes":[]},"GetWorkGroup":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to get a workgroup","accessLevel":"Read","resourceTypes":[{"name":"workgroup","required":true}]},"ImportNotebook":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to import a notebook","accessLevel":"Write","resourceTypes":[{"name":"workgroup","required":true}]},"ListApplicationDPUSizes":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of ApplicationRuntimeIds","accessLevel":"List","resourceTypes":[]},"ListCalculationExecutions":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to return a list of calculation executions","accessLevel":"List","resourceTypes":[{"name":"workgroup","required":true}]},"ListCapacityReservations":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of capacity reservations for the specified AWS account","accessLevel":"List","resourceTypes":[]},"ListDataCatalogs":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of datacatalogs for the specified AWS account","accessLevel":"List","resourceTypes":[]},"ListDatabases":{"conditionKeys":[],"resources":[{"name":"datacatalog"}],"description":"Grants permission to return a list of databases for a given datacatalog","accessLevel":"List","resourceTypes":[{"name":"datacatalog","required":true}]},"ListEngineVersions":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of athena engine versions for the specified AWS account","accessLevel":"Read","resourceTypes":[]},"ListExecutors":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of executors","accessLevel":"List","resourceTypes":[]},"ListNamedQueries":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to return a list of named queries in Amazon Athena for the specified AWS account","accessLevel":"List","resourceTypes":[{"name":"workgroup","required":true}]},"ListNotebookMetadata":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to return a list of notebooks for a given workgroup","accessLevel":"List","resourceTypes":[{"name":"workgroup","required":true}]},"ListNotebookSessions":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to return a list of sessions for a given notebook","accessLevel":"List","resourceTypes":[{"name":"workgroup","required":true}]},"ListPreparedStatements":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to return a list of prepared statements for the specified workgroup","accessLevel":"List","resourceTypes":[{"name":"workgroup","required":true}]},"ListQueryExecutions":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to return a list of query executions for the specified AWS account","accessLevel":"Read","resourceTypes":[{"name":"workgroup","required":true}]},"ListSessions":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to return a list of sessions for a given workgroup","accessLevel":"List","resourceTypes":[{"name":"workgroup","required":true}]},"ListTableMetadata":{"conditionKeys":[],"resources":[{"name":"datacatalog"}],"description":"Grants permission to return a list of table metadata in a database for a given datacatalog","accessLevel":"Read","resourceTypes":[{"name":"datacatalog","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"capacity-reservation"},{"name":"datacatalog"},{"name":"session"},{"name":"workgroup"}],"description":"Grants permission to return a list of tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"capacity-reservation","required":true},{"name":"datacatalog","required":true},{"name":"session","required":true},{"name":"workgroup","required":true}]},"ListWorkGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to return a list of workgroups for the specified AWS account","accessLevel":"List","resourceTypes":[]},"PutCapacityAssignmentConfiguration":{"conditionKeys":[],"resources":[{"name":"capacity-reservation"},{"name":"workgroup"}],"description":"Grants permission to assign capacity from a capacity reservation to queries","accessLevel":"Write","resourceTypes":[{"name":"capacity-reservation","required":true},{"name":"workgroup","required":true}]},"RunQuery":{"conditionKeys":[],"resources":[],"description":"Grants permission to run a query. Deprecated. Applies only to AWS services and principals that use Athena JDBC driver earlier than 1.1.0. Use StartQueryExecution otherwise","accessLevel":"Write","resourceTypes":[]},"StartCalculationExecution":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to start a calculation execution","accessLevel":"Write","resourceTypes":[{"name":"workgroup","required":true}]},"StartQueryExecution":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to start a query execution using an SQL query provided as a string","accessLevel":"Write","resourceTypes":[{"name":"workgroup","required":true}]},"StartSession":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"session"},{"name":"workgroup"}],"description":"Grants permission to start a session","accessLevel":"Write","resourceTypes":[{"name":"workgroup","required":true},{"name":"session","required":false}]},"StopCalculationExecution":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to stop a calculation execution","accessLevel":"Write","resourceTypes":[{"name":"workgroup","required":true}]},"StopQueryExecution":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to stop the specified query execution","accessLevel":"Write","resourceTypes":[{"name":"workgroup","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"capacity-reservation"},{"name":"datacatalog"},{"name":"session"},{"name":"workgroup"}],"description":"Grants permission to add a tag to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"capacity-reservation","required":true},{"name":"datacatalog","required":true},{"name":"session","required":true},{"name":"workgroup","required":true}]},"TerminateSession":{"conditionKeys":[],"resources":[{"name":"session"},{"name":"workgroup"}],"description":"Grants permission to terminate a session","accessLevel":"Write","resourceTypes":[{"name":"workgroup","required":true},{"name":"session","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"capacity-reservation"},{"name":"datacatalog"},{"name":"session"},{"name":"workgroup"}],"description":"Grants permission to remove a tag from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"capacity-reservation","required":true},{"name":"datacatalog","required":true},{"name":"session","required":true},{"name":"workgroup","required":true}]},"UpdateCapacityReservation":{"conditionKeys":[],"resources":[{"name":"capacity-reservation"}],"description":"Grants permission to update a capacity reservation","accessLevel":"Write","resourceTypes":[{"name":"capacity-reservation","required":true}]},"UpdateDataCatalog":{"conditionKeys":[],"resources":[{"name":"datacatalog"}],"description":"Grants permission to update a datacatalog","accessLevel":"Write","resourceTypes":[{"name":"datacatalog","required":true}]},"UpdateNamedQuery":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to update a named query specified","accessLevel":"Write","resourceTypes":[{"name":"workgroup","required":true}]},"UpdateNotebook":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to update a notebook","accessLevel":"Write","resourceTypes":[{"name":"workgroup","required":true}]},"UpdateNotebookMetadata":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to update notebook metadata","accessLevel":"Write","resourceTypes":[{"name":"workgroup","required":true}]},"UpdatePreparedStatement":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to update a prepared statement","accessLevel":"Write","resourceTypes":[{"name":"workgroup","required":true}]},"UpdateWorkGroup":{"conditionKeys":[],"resources":[{"name":"workgroup"}],"description":"Grants permission to update a workgroup","accessLevel":"Write","resourceTypes":[{"name":"workgroup","required":true}]}},"resources":[{"name":"capacity-reservation","arnFormats":["arn:${Partition}:athena:${Region}:${Account}:capacity-reservation/${CapacityReservationName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"datacatalog","arnFormats":["arn:${Partition}:athena:${Region}:${Account}:datacatalog/${DataCatalogName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"session","arnFormats":["arn:${Partition}:athena:${Region}:${Account}:workgroup/${WorkGroupName}/session/${SessionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"workgroup","arnFormats":["arn:${Partition}:athena:${Region}:${Account}:workgroup/${WorkGroupName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the the presence of tag keys in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"auditmanager","actions":{"AssociateAssessmentReportEvidenceFolder":{"conditionKeys":[],"resources":[{"name":"assessment"}],"description":"Grants permission to associate an evidence folder with an assessment report in AWS Audit Manager","accessLevel":"Write","resourceTypes":[{"name":"assessment","required":true}]},"BatchAssociateAssessmentReportEvidence":{"conditionKeys":[],"resources":[{"name":"assessment"}],"description":"Grants permission to associate a list of evidence to an assessment report in AWS Audit Manager","accessLevel":"Write","resourceTypes":[{"name":"assessment","required":true}]},"BatchCreateDelegationByAssessment":{"conditionKeys":[],"resources":[{"name":"assessment"},{"name":"assessmentControlSet"}],"description":"Grants permission to create delegations for an assessment in AWS Audit Manager","accessLevel":"Write","resourceTypes":[{"name":"assessment","required":true},{"name":"assessmentControlSet","required":true}]},"BatchDeleteDelegationByAssessment":{"conditionKeys":[],"resources":[{"name":"assessment"},{"name":"assessmentControlSet"}],"description":"Grants permission to delete delegations for an assessment in AWS Audit Manager","accessLevel":"Write","resourceTypes":[{"name":"assessment","required":true},{"name":"assessmentControlSet","required":true}]},"BatchDisassociateAssessmentReportEvidence":{"conditionKeys":[],"resources":[{"name":"assessment"}],"description":"Grants permission to disassociate a list of evidence from an assessment report in AWS Audit Manager","accessLevel":"Write","resourceTypes":[{"name":"assessment","required":true}]},"BatchImportEvidenceToAssessmentControl":{"conditionKeys":[],"resources":[{"name":"assessmentControlSet"}],"description":"Grants permission to import a list of evidence to an assessment control in AWS Audit Manager","accessLevel":"Write","resourceTypes":[{"name":"assessmentControlSet","required":true}]},"CreateAssessment":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an assessment to be used with AWS Audit Manager","accessLevel":"Write","resourceTypes":[]},"CreateAssessmentFramework":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"assessmentFramework"},{"name":"control"}],"description":"Grants permission to create a framework for use in AWS Audit Manager","accessLevel":"Write","resourceTypes":[{"name":"assessmentFramework","required":true},{"name":"control","required":true}]},"CreateAssessmentReport":{"conditionKeys":[],"resources":[{"name":"assessment"}],"description":"Grants permission to create an assessment report in AWS Audit Manager","accessLevel":"Write","resourceTypes":[{"name":"assessment","required":true}]},"CreateControl":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a control to be used in AWS Audit Manager","accessLevel":"Write","resourceTypes":[]},"DeleteAssessment":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"assessment"}],"description":"Grants permission to delete an assessment in AWS Audit Manager","accessLevel":"Write","resourceTypes":[{"name":"assessment","required":true}]},"DeleteAssessmentFramework":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"assessmentFramework"}],"description":"Grants permission to delete an assessment framework in AWS Audit Manager","accessLevel":"Write","resourceTypes":[{"name":"assessmentFramework","required":true}]},"DeleteAssessmentFrameworkShare":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a share request for a custom framework in AWS Audit Manager","accessLevel":"Write","resourceTypes":[]},"DeleteAssessmentReport":{"conditionKeys":[],"resources":[{"name":"assessment"}],"description":"Grants permission to delete an assessment report in AWS Audit Manager","accessLevel":"Write","resourceTypes":[{"name":"assessment","required":true}]},"DeleteControl":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"control"}],"description":"Grants permission to delete a control in AWS Audit Manager","accessLevel":"Write","resourceTypes":[{"name":"control","required":true}]},"DeregisterAccount":{"conditionKeys":[],"resources":[],"description":"Grants permission to deregister an account in AWS Audit Manager","accessLevel":"Write","resourceTypes":[]},"DeregisterOrganizationAdminAccount":{"conditionKeys":[],"resources":[],"description":"Grants permission to deregister the delegated administrator account for AWS Audit Manager","accessLevel":"Write","resourceTypes":[]},"DisassociateAssessmentReportEvidenceFolder":{"conditionKeys":[],"resources":[{"name":"assessment"}],"description":"Grants permission to disassociate an evidence folder from an assessment report in AWS Audit Manager","accessLevel":"Write","resourceTypes":[{"name":"assessment","required":true}]},"GetAccountStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the status of an account in AWS Audit Manager","accessLevel":"Read","resourceTypes":[]},"GetAssessment":{"conditionKeys":[],"resources":[{"name":"assessment"}],"description":"Grants permission to get an assessment created in AWS Audit Manager","accessLevel":"Read","resourceTypes":[{"name":"assessment","required":true}]},"GetAssessmentFramework":{"conditionKeys":[],"resources":[{"name":"assessmentFramework"}],"description":"Grants permission to get an assessment framework in AWS Audit Manager","accessLevel":"Read","resourceTypes":[{"name":"assessmentFramework","required":true}]},"GetAssessmentReportUrl":{"conditionKeys":[],"resources":[{"name":"assessment"}],"description":"Grants permission to get the URL for an assessment report in AWS Audit Manager","accessLevel":"Read","resourceTypes":[{"name":"assessment","required":true}]},"GetChangeLogs":{"conditionKeys":[],"resources":[{"name":"assessment"}],"description":"Grants permission to get changelogs for an assessment in AWS Audit Manager","accessLevel":"Read","resourceTypes":[{"name":"assessment","required":true}]},"GetControl":{"conditionKeys":[],"resources":[{"name":"control"}],"description":"Grants permission to get a control in AWS Audit Manager","accessLevel":"Read","resourceTypes":[{"name":"control","required":true}]},"GetDelegations":{"conditionKeys":[],"resources":[],"description":"Grants permission to get all delegations in AWS Audit Manager","accessLevel":"List","resourceTypes":[]},"GetEvidence":{"conditionKeys":[],"resources":[{"name":"assessmentControlSet"}],"description":"Grants permission to get evidence from AWS Audit Manager","accessLevel":"Read","resourceTypes":[{"name":"assessmentControlSet","required":true}]},"GetEvidenceByEvidenceFolder":{"conditionKeys":[],"resources":[{"name":"assessmentControlSet"}],"description":"Grants permission to get all the evidence from an evidence folder in AWS Audit Manager","accessLevel":"Read","resourceTypes":[{"name":"assessmentControlSet","required":true}]},"GetEvidenceFileUploadUrl":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a presigned Amazon S3 URL that can be used to upload a file as manual evidence","accessLevel":"Read","resourceTypes":[]},"GetEvidenceFolder":{"conditionKeys":[],"resources":[{"name":"assessmentControlSet"}],"description":"Grants permission to get the evidence folder from AWS Audit Manager","accessLevel":"Read","resourceTypes":[{"name":"assessmentControlSet","required":true}]},"GetEvidenceFoldersByAssessment":{"conditionKeys":[],"resources":[{"name":"assessment"}],"description":"Grants permission to get the evidence folders from an assessment in AWS Audit Manager","accessLevel":"Read","resourceTypes":[{"name":"assessment","required":true}]},"GetEvidenceFoldersByAssessmentControl":{"conditionKeys":[],"resources":[{"name":"assessmentControlSet"}],"description":"Grants permission to get the evidence folders from an assessment control in AWS Audit Manager","accessLevel":"Read","resourceTypes":[{"name":"assessmentControlSet","required":true}]},"GetInsights":{"conditionKeys":[],"resources":[],"description":"Grants permission to get analytics data for all active assessments","accessLevel":"Read","resourceTypes":[]},"GetInsightsByAssessment":{"conditionKeys":[],"resources":[],"description":"Grants permission to get analytics data for a specific active assessment","accessLevel":"Read","resourceTypes":[]},"GetOrganizationAdminAccount":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the delegated administrator account in AWS Audit Manager","accessLevel":"Read","resourceTypes":[]},"GetServicesInScope":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the services in scope for an assessment in AWS Audit Manager","accessLevel":"Read","resourceTypes":[]},"GetSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to get all settings configured in AWS Audit Manager","accessLevel":"Read","resourceTypes":[]},"ListAssessmentControlInsightsByControlDomain":{"conditionKeys":[],"resources":[],"description":"Grants permission to list analytics data for controls in a specific control domain and active assessment","accessLevel":"List","resourceTypes":[]},"ListAssessmentFrameworkShareRequests":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all sent or received share requests for custom frameworks in AWS Audit Manager","accessLevel":"List","resourceTypes":[]},"ListAssessmentFrameworks":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all assessment frameworks in AWS Audit Manager","accessLevel":"List","resourceTypes":[]},"ListAssessmentReports":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all assessment reports in AWS Audit Manager","accessLevel":"List","resourceTypes":[]},"ListAssessments":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all assessments in AWS Audit Manager","accessLevel":"List","resourceTypes":[]},"ListControlDomainInsights":{"conditionKeys":[],"resources":[],"description":"Grants permission to list analytics data for control domains across all active assessments","accessLevel":"List","resourceTypes":[]},"ListControlDomainInsightsByAssessment":{"conditionKeys":[],"resources":[],"description":"Grants permission to list analytics data for control domains in a specific active assessment","accessLevel":"List","resourceTypes":[]},"ListControlInsightsByControlDomain":{"conditionKeys":[],"resources":[],"description":"Grants permission to list analytics data for controls in a specific control domain across all active assessments","accessLevel":"List","resourceTypes":[]},"ListControls":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all controls in AWS Audit Manager","accessLevel":"List","resourceTypes":[]},"ListKeywordsForDataSource":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all the data source keywords in AWS Audit Manager","accessLevel":"List","resourceTypes":[]},"ListNotifications":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all notifications in AWS Audit Manager","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"assessment"},{"name":"control"}],"description":"Grants permission to list tags for an AWS Audit Manager resource","accessLevel":"Read","resourceTypes":[{"name":"assessment","required":false},{"name":"control","required":false}]},"RegisterAccount":{"conditionKeys":[],"resources":[],"description":"Grants permission to register an account in AWS Audit Manager","accessLevel":"Write","resourceTypes":[]},"RegisterOrganizationAdminAccount":{"conditionKeys":[],"resources":[],"description":"Grants permission to register an account within the organization as the delegated administrator for AWS Audit Manager","accessLevel":"Write","resourceTypes":[]},"StartAssessmentFrameworkShare":{"conditionKeys":[],"resources":[{"name":"assessmentFramework"}],"description":"Grants permission to create a share request for a custom framework in AWS Audit Manager","accessLevel":"Write","resourceTypes":[{"name":"assessmentFramework","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"assessment"},{"name":"assessmentFramework"},{"name":"control"}],"description":"Grants permission to tag an AWS Audit Manager resource","accessLevel":"Tagging","resourceTypes":[{"name":"assessment","required":false},{"name":"assessmentFramework","required":false},{"name":"control","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"assessment"},{"name":"assessmentFramework"},{"name":"control"}],"description":"Grants permission to untag an AWS Audit Manager resource","accessLevel":"Tagging","resourceTypes":[{"name":"assessment","required":false},{"name":"assessmentFramework","required":false},{"name":"control","required":false}]},"UpdateAssessment":{"conditionKeys":[],"resources":[{"name":"assessment"}],"description":"Grants permission to update an assessment in AWS Audit Manager","accessLevel":"Write","resourceTypes":[{"name":"assessment","required":true}]},"UpdateAssessmentControl":{"conditionKeys":[],"resources":[{"name":"assessmentControlSet"}],"description":"Grants permission to update an assessment control in AWS Audit Manager","accessLevel":"Write","resourceTypes":[{"name":"assessmentControlSet","required":true}]},"UpdateAssessmentControlSetStatus":{"conditionKeys":[],"resources":[{"name":"assessmentControlSet"}],"description":"Grants permission to update the status of an assessment control set in AWS Audit Manager","accessLevel":"Write","resourceTypes":[{"name":"assessmentControlSet","required":true}]},"UpdateAssessmentFramework":{"conditionKeys":[],"resources":[{"name":"assessmentFramework"},{"name":"control"}],"description":"Grants permission to update an assessment framework in AWS Audit Manager","accessLevel":"Write","resourceTypes":[{"name":"assessmentFramework","required":true},{"name":"control","required":true}]},"UpdateAssessmentFrameworkShare":{"conditionKeys":[],"resources":[{"name":"assessmentFramework"}],"description":"Grants permission to update a share request for a custom framework in AWS Audit Manager","accessLevel":"Write","resourceTypes":[{"name":"assessmentFramework","required":true}]},"UpdateAssessmentStatus":{"conditionKeys":[],"resources":[{"name":"assessment"}],"description":"Grants permission to update the status of an assessment in AWS Audit Manager","accessLevel":"Write","resourceTypes":[{"name":"assessment","required":true}]},"UpdateControl":{"conditionKeys":[],"resources":[{"name":"control"}],"description":"Grants permission to update a control in AWS Audit Manager","accessLevel":"Write","resourceTypes":[{"name":"control","required":true}]},"UpdateSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to update settings in AWS Audit Manager","accessLevel":"Write","resourceTypes":[]},"ValidateAssessmentReportIntegrity":{"conditionKeys":[],"resources":[],"description":"Grants permission to validate the integrity of an assessment report in AWS Audit Manager","accessLevel":"Read","resourceTypes":[]}},"resources":[{"name":"assessment","arnFormats":["arn:${Partition}:auditmanager:${Region}:${Account}:assessment/${AssessmentId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"assessmentControlSet","arnFormats":["arn:${Partition}:auditmanager:${Region}:${Account}:assessment/${AssessmentId}/controlSet/${ControlSetId}"],"conditionKeys":[]},{"name":"assessmentFramework","arnFormats":["arn:${Partition}:auditmanager:${Region}:${Account}:assessmentFramework/${AssessmentFrameworkId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"control","arnFormats":["arn:${Partition}:auditmanager:${Region}:${Account}:control/${ControlId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"autoscaling-plans","actions":{"CreateScalingPlan":{"conditionKeys":[],"resources":[],"description":"Creates a scaling plan.","accessLevel":"Write","resourceTypes":[]},"DeleteScalingPlan":{"conditionKeys":[],"resources":[],"description":"Deletes the specified scaling plan.","accessLevel":"Write","resourceTypes":[]},"DescribeScalingPlanResources":{"conditionKeys":[],"resources":[],"description":"Describes the scalable resources in the specified scaling plan.","accessLevel":"Read","resourceTypes":[]},"DescribeScalingPlans":{"conditionKeys":[],"resources":[],"description":"Describes the specified scaling plans or all of your scaling plans.","accessLevel":"Read","resourceTypes":[]},"GetScalingPlanResourceForecastData":{"conditionKeys":[],"resources":[],"description":"Retrieves the forecast data for a scalable resource.","accessLevel":"Read","resourceTypes":[]},"UpdateScalingPlan":{"conditionKeys":[],"resources":[],"description":"Updates a scaling plan.","accessLevel":"Write","resourceTypes":[]}},"resources":[],"conditionKeys":{}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"autoscaling","actions":{"AttachInstances":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to attach one or more EC2 instances to the specified Auto Scaling group","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"AttachLoadBalancerTargetGroups":{"conditionKeys":["autoscaling:TargetGroupARNs"],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to attach one or more target groups to the specified Auto Scaling group","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"AttachLoadBalancers":{"conditionKeys":["autoscaling:LoadBalancerNames"],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to attach one or more load balancers to the specified Auto Scaling group","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"AttachTrafficSources":{"conditionKeys":["autoscaling:TrafficSourceIdentifiers"],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to attach one or more traffic sources to an Auto Scaling group","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"BatchDeleteScheduledAction":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to delete the specified scheduled actions","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"BatchPutScheduledUpdateGroupAction":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to create or update multiple scheduled scaling actions for an Auto Scaling group","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"CancelInstanceRefresh":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to cancel an instance refresh operation in progress","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"CompleteLifecycleAction":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to complete the lifecycle action for the specified token or instance with the specified result","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"CreateAutoScalingGroup":{"conditionKeys":["autoscaling:CapacityReservationIds","autoscaling:CapacityReservationResourceGroupArns","autoscaling:ImageId","autoscaling:InstanceTypes","autoscaling:LaunchConfigurationName","autoscaling:LaunchTemplateVersionSpecified","autoscaling:LoadBalancerNames","autoscaling:MaxSize","autoscaling:MinSize","autoscaling:TargetGroupARNs","autoscaling:TrafficSourceIdentifiers","autoscaling:VPCZoneIdentifiers","aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to create an Auto Scaling group with the specified name and attributes","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}],"dependentActions":["iam:CreateServiceLinkedRole","iam:PassRole"]},"CreateLaunchConfiguration":{"conditionKeys":["autoscaling:ImageId","autoscaling:InstanceType","autoscaling:MetadataHttpEndpoint","autoscaling:MetadataHttpPutResponseHopLimit","autoscaling:MetadataHttpTokens","autoscaling:SpotPrice"],"resources":[{"name":"launchConfiguration"}],"description":"Grants permission to create a launch configuration","accessLevel":"Write","resourceTypes":[{"name":"launchConfiguration","required":true}]},"CreateOrUpdateTags":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to create or update tags for the specified Auto Scaling group","accessLevel":"Tagging","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"DeleteAutoScalingGroup":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to delete the specified Auto Scaling group","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"DeleteLaunchConfiguration":{"conditionKeys":[],"resources":[{"name":"launchConfiguration"}],"description":"Grants permission to delete the specified launch configuration","accessLevel":"Write","resourceTypes":[{"name":"launchConfiguration","required":true}]},"DeleteLifecycleHook":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to deletes the specified lifecycle hook","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"DeleteNotificationConfiguration":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to delete the specified notification","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"DeletePolicy":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to delete the specified Auto Scaling policy","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"DeleteScheduledAction":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to delete the specified scheduled action","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"DeleteTags":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to delete the specified tags","accessLevel":"Tagging","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"DeleteWarmPool":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to delete the warm pool associated with the Auto Scaling group","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"DescribeAccountLimits":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the current Auto Scaling resource limits for your AWS account","accessLevel":"List","resourceTypes":[]},"DescribeAccountSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the current Amazon EC2 Auto Scaling account settings for your account","accessLevel":"List","resourceTypes":[]},"DescribeAdjustmentTypes":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the policy adjustment types for use with PutScalingPolicy","accessLevel":"List","resourceTypes":[]},"DescribeAutoScalingGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe one or more Auto Scaling groups. If a list of names is not provided, the call describes all Auto Scaling groups","accessLevel":"List","resourceTypes":[]},"DescribeAutoScalingInstances":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe one or more Auto Scaling instances. If a list is not provided, the call describes all instances","accessLevel":"List","resourceTypes":[]},"DescribeAutoScalingNotificationTypes":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the notification types that are supported by Auto Scaling","accessLevel":"List","resourceTypes":[]},"DescribeInstanceRefreshes":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe one or more instance refreshes for an Auto Scaling group","accessLevel":"List","resourceTypes":[]},"DescribeLaunchConfigurations":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe one or more launch configurations. If you omit the list of names, then the call describes all launch configurations","accessLevel":"List","resourceTypes":[]},"DescribeLifecycleHookTypes":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the available types of lifecycle hooks","accessLevel":"List","resourceTypes":[]},"DescribeLifecycleHooks":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the lifecycle hooks for the specified Auto Scaling group","accessLevel":"List","resourceTypes":[]},"DescribeLoadBalancerTargetGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the target groups for the specified Auto Scaling group","accessLevel":"List","resourceTypes":[]},"DescribeLoadBalancers":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the load balancers for the specified Auto Scaling group","accessLevel":"List","resourceTypes":[]},"DescribeMetricCollectionTypes":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the available CloudWatch metrics for Auto Scaling","accessLevel":"List","resourceTypes":[]},"DescribeNotificationConfigurations":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the notification actions associated with the specified Auto Scaling group","accessLevel":"List","resourceTypes":[]},"DescribePolicies":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the policies for the specified Auto Scaling group","accessLevel":"List","resourceTypes":[]},"DescribeScalingActivities":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe one or more scaling activities for the specified Auto Scaling group","accessLevel":"List","resourceTypes":[]},"DescribeScalingProcessTypes":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the scaling process types for use with ResumeProcesses and SuspendProcesses","accessLevel":"List","resourceTypes":[]},"DescribeScheduledActions":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the actions scheduled for your Auto Scaling group that haven't run","accessLevel":"List","resourceTypes":[]},"DescribeTags":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the specified tags","accessLevel":"Read","resourceTypes":[]},"DescribeTerminationPolicyTypes":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the termination policies supported by Auto Scaling","accessLevel":"List","resourceTypes":[]},"DescribeTrafficSources":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the target groups for the specified Auto Scaling group","accessLevel":"List","resourceTypes":[]},"DescribeWarmPool":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the warm pool associated with the Auto Scaling group","accessLevel":"List","resourceTypes":[]},"DetachInstances":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to remove one or more instances from the specified Auto Scaling group","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"DetachLoadBalancerTargetGroups":{"conditionKeys":["autoscaling:TargetGroupARNs"],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to detach one or more target groups from the specified Auto Scaling group","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"DetachLoadBalancers":{"conditionKeys":["autoscaling:LoadBalancerNames"],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to remove one or more load balancers from the specified Auto Scaling group","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"DetachTrafficSources":{"conditionKeys":["autoscaling:TrafficSourceIdentifiers"],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to detach one or more traffic sources from an Auto Scaling group","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"DisableMetricsCollection":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to disable monitoring of the specified metrics for the specified Auto Scaling group","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"EnableMetricsCollection":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to enable monitoring of the specified metrics for the specified Auto Scaling group","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"EnterStandby":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to move the specified instances into Standby mode","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"ExecutePolicy":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to execute the specified policy","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"ExitStandby":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to move the specified instances out of Standby mode","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"GetPredictiveScalingForecast":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the forecast data for a predictive scaling policy","accessLevel":"List","resourceTypes":[]},"LaunchInstances":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to launch one or more EC2 instances in the specified Auto Scaling group","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"PutAccountSetting":{"conditionKeys":[],"resources":[],"description":"Grants permission to modify an account setting for your account","accessLevel":"Write","resourceTypes":[]},"PutLifecycleHook":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to create or update a lifecycle hook for the specified Auto Scaling Group","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"PutNotificationConfiguration":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to configure an Auto Scaling group to send notifications when specified events take place","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"PutScalingPolicy":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to create or update a policy for an Auto Scaling group","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"PutScheduledUpdateGroupAction":{"conditionKeys":["autoscaling:MaxSize","autoscaling:MinSize"],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to create or update a scheduled scaling action for an Auto Scaling group","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"PutWarmPool":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to create or update the warm pool associated with the specified Auto Scaling group","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"RecordLifecycleActionHeartbeat":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to record a heartbeat for the lifecycle action associated with the specified token or instance","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"ResumeProcesses":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to resume the specified suspended Auto Scaling processes, or all suspended process, for the specified Auto Scaling group","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"RollbackInstanceRefresh":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to rollback an instance refresh operation in progress","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"SetDesiredCapacity":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to set the size of the specified Auto Scaling group","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"SetInstanceHealth":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to set the health status of the specified instance","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"SetInstanceProtection":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to update the instance protection settings of the specified instances","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"StartInstanceRefresh":{"conditionKeys":["autoscaling:ImageId"],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to start a new instance refresh operation","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"SuspendProcesses":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to suspend the specified Auto Scaling processes, or all processes, for the specified Auto Scaling group","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"TerminateInstanceInAutoScalingGroup":{"conditionKeys":[],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to terminate the specified instance and optionally adjust the desired group size","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}]},"UpdateAutoScalingGroup":{"conditionKeys":["autoscaling:CapacityReservationIds","autoscaling:CapacityReservationResourceGroupArns","autoscaling:ImageId","autoscaling:InstanceTypes","autoscaling:LaunchConfigurationName","autoscaling:LaunchTemplateVersionSpecified","autoscaling:MaxSize","autoscaling:MinSize","autoscaling:VPCZoneIdentifiers"],"resources":[{"name":"autoScalingGroup"}],"description":"Grants permission to update the configuration for the specified Auto Scaling group","accessLevel":"Write","resourceTypes":[{"name":"autoScalingGroup","required":true}],"dependentActions":["iam:PassRole"]}},"resources":[{"name":"autoScalingGroup","arnFormats":["arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:${GroupId}:autoScalingGroupName/${GroupFriendlyName}"],"conditionKeys":["autoscaling:ResourceTag/${TagKey}","aws:ResourceTag/${TagKey}"]},{"name":"launchConfiguration","arnFormats":["arn:${Partition}:autoscaling:${Region}:${Account}:launchConfiguration:${Id}:launchConfigurationName/${LaunchConfigurationName}"],"conditionKeys":[]}],"conditionKeys":{"autoscaling:CapacityReservationIds":{"types":["ArrayOfString"],"description":"Filters access based on the Capacity Reservation IDs"},"autoscaling:CapacityReservationResourceGroupArns":{"types":["ArrayOfString"],"description":"Filters access based on the ARN of a Capacity Reservation resource group"},"autoscaling:ForceDelete":{"types":["Bool"],"description":"Filters access based on whether the force delete option is specified when deleting an Auto Scaling group"},"autoscaling:ImageId":{"types":["String"],"description":"Filters access based on the AMI ID for the launch configuration"},"autoscaling:InstanceType":{"types":["String"],"description":"Filters access based on the instance type for the launch configuration"},"autoscaling:InstanceTypes":{"types":["String"],"description":"Filters access based on the instance types present as overrides to a launch template for a mixed instances policy. Use it to qualify which instance types can be explicitly defined in the policy"},"autoscaling:LaunchConfigurationName":{"types":["String"],"description":"Filters access based on the name of a launch configuration"},"autoscaling:LaunchTemplateVersionSpecified":{"types":["Bool"],"description":"Filters access based on whether users can specify any version of a launch template or only the Latest or Default version"},"autoscaling:LoadBalancerNames":{"types":["ArrayOfString"],"description":"Filters access based on the name of the load balancer"},"autoscaling:MaxSize":{"types":["Numeric"],"description":"Filters access based on the maximum scaling size in the request"},"autoscaling:MetadataHttpEndpoint":{"types":["String"],"description":"Filters access based on whether the HTTP endpoint is enabled for the instance metadata service"},"autoscaling:MetadataHttpPutResponseHopLimit":{"types":["Numeric"],"description":"Filters access based on the allowed number of hops when calling the instance metadata service"},"autoscaling:MetadataHttpTokens":{"types":["String"],"description":"Filters access based on whether tokens are required when calling the instance metadata service (optional or required)"},"autoscaling:MinSize":{"types":["Numeric"],"description":"Filters access based on the minimum scaling size in the request"},"autoscaling:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access based on the tags associated with the resource"},"autoscaling:SpotPrice":{"types":["Numeric"],"description":"Filters access based on the price for Spot Instances for the launch configuration"},"autoscaling:TargetGroupARNs":{"types":["ArrayOfARN"],"description":"Filters access based on the ARN of a target group"},"autoscaling:TrafficSourceIdentifiers":{"types":["ArrayOfString"],"description":"Filters access based on the identifiers of the traffic sources"},"autoscaling:VPCZoneIdentifiers":{"types":["ArrayOfString"],"description":"Filters access based on the identifier of a VPC zone"},"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access based on the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access based on the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access based on the tag keys that are passed in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"aws-marketplace-management","actions":{"GetAdditionalSellerNotificationRecipients":{"conditionKeys":[],"resources":[],"description":"Grants permission to view additional seller notification recipients","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetBankAccountVerificationDetails":{"conditionKeys":[],"resources":[],"description":"Grants permission to view bank account verification status","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetSecondaryUserVerificationDetails":{"conditionKeys":[],"resources":[],"description":"Grants permission to view secondary user account verification status","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetSellerVerificationDetails":{"conditionKeys":[],"resources":[],"description":"Grants permission to view account verification status","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"PutAdditionalSellerNotificationRecipients":{"conditionKeys":[],"resources":[],"description":"Grants permission to update additional seller notification recipients","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"PutBankAccountVerificationDetails":{"conditionKeys":[],"resources":[],"description":"Grants permission to update bank account verification status","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"PutSecondaryUserVerificationDetails":{"conditionKeys":[],"resources":[],"description":"Grants permission to update secondary user account verification status","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"PutSellerVerificationDetails":{"conditionKeys":[],"resources":[],"description":"Grants permission to update account verification status","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"uploadFiles":{"conditionKeys":[],"resources":[],"description":"Allows access to the File Upload page inside the AWS Marketplace Management Portal","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"viewMarketing":{"conditionKeys":[],"resources":[],"description":"Allows access to the Marketing page inside the AWS Marketplace Management Portal","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"viewReports":{"conditionKeys":[],"resources":[],"description":"Allows access to the Reports page inside the AWS Marketplace Management Portal","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"viewSettings":{"conditionKeys":[],"resources":[],"description":"Allows access to the Settings page inside the AWS Marketplace Management Portal","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"viewSupport":{"conditionKeys":[],"resources":[],"description":"Allows access to the Customer Support Eligibility page inside the AWS Marketplace Management Portal","accessLevel":"List","resourceTypes":[],"permissionOnly":true}},"resources":[],"conditionKeys":{}}
|