aws-iam-ls 0.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.direnv/bin/nix-direnv-reload +19 -0
- package/.direnv/flake-profile-a5d5b61aa8a61b7d9d765e1daf971a9a578f1cfa.rc +2156 -0
- package/.github/workflows/publish.yml +37 -0
- package/.github/workflows/test.yml +16 -0
- package/.vscodeignore +17 -0
- package/LICENSE +21 -0
- package/package.json +53 -0
- package/readme.md +25 -0
- package/src/data/condition-keys/global.json +362 -0
- package/src/data/servicereference/actions.json +1 -0
- package/src/data/servicereference/service-principals.json +1 -0
- package/src/data/servicereference/services/a2c.json +1 -0
- package/src/data/servicereference/services/a4b.json +1 -0
- package/src/data/servicereference/services/access-analyzer.json +1 -0
- package/src/data/servicereference/services/account.json +1 -0
- package/src/data/servicereference/services/acm-pca.json +1 -0
- package/src/data/servicereference/services/acm.json +1 -0
- package/src/data/servicereference/services/aco-automation.json +1 -0
- package/src/data/servicereference/services/action-recommendations.json +1 -0
- package/src/data/servicereference/services/activate.json +1 -0
- package/src/data/servicereference/services/aidevops.json +1 -0
- package/src/data/servicereference/services/aiops.json +1 -0
- package/src/data/servicereference/services/airflow-serverless.json +1 -0
- package/src/data/servicereference/services/airflow.json +1 -0
- package/src/data/servicereference/services/amplify.json +1 -0
- package/src/data/servicereference/services/amplifybackend.json +1 -0
- package/src/data/servicereference/services/amplifyuibuilder.json +1 -0
- package/src/data/servicereference/services/aoss.json +1 -0
- package/src/data/servicereference/services/apigateway.json +1 -0
- package/src/data/servicereference/services/app-integrations.json +1 -0
- package/src/data/servicereference/services/appconfig.json +1 -0
- package/src/data/servicereference/services/appfabric.json +1 -0
- package/src/data/servicereference/services/appflow.json +1 -0
- package/src/data/servicereference/services/application-autoscaling.json +1 -0
- package/src/data/servicereference/services/application-signals.json +1 -0
- package/src/data/servicereference/services/application-transformation.json +1 -0
- package/src/data/servicereference/services/applicationinsights.json +1 -0
- package/src/data/servicereference/services/appmesh-preview.json +1 -0
- package/src/data/servicereference/services/appmesh.json +1 -0
- package/src/data/servicereference/services/apprunner.json +1 -0
- package/src/data/servicereference/services/appstream.json +1 -0
- package/src/data/servicereference/services/appstudio.json +1 -0
- package/src/data/servicereference/services/appsync.json +1 -0
- package/src/data/servicereference/services/apptest.json +1 -0
- package/src/data/servicereference/services/aps.json +1 -0
- package/src/data/servicereference/services/arc-region-switch.json +1 -0
- package/src/data/servicereference/services/arc-zonal-shift.json +1 -0
- package/src/data/servicereference/services/arsenal.json +1 -0
- package/src/data/servicereference/services/artifact.json +1 -0
- package/src/data/servicereference/services/athena.json +1 -0
- package/src/data/servicereference/services/auditmanager.json +1 -0
- package/src/data/servicereference/services/autoscaling-plans.json +1 -0
- package/src/data/servicereference/services/autoscaling.json +1 -0
- package/src/data/servicereference/services/aws-marketplace-management.json +1 -0
- package/src/data/servicereference/services/aws-marketplace.json +1 -0
- package/src/data/servicereference/services/aws-mcp.json +1 -0
- package/src/data/servicereference/services/aws-portal.json +1 -0
- package/src/data/servicereference/services/awsconnector.json +1 -0
- package/src/data/servicereference/services/b2bi.json +1 -0
- package/src/data/servicereference/services/backup-gateway.json +1 -0
- package/src/data/servicereference/services/backup-search.json +1 -0
- package/src/data/servicereference/services/backup-storage.json +1 -0
- package/src/data/servicereference/services/backup.json +1 -0
- package/src/data/servicereference/services/batch.json +1 -0
- package/src/data/servicereference/services/bcm-dashboards.json +1 -0
- package/src/data/servicereference/services/bcm-data-exports.json +1 -0
- package/src/data/servicereference/services/bcm-pricing-calculator.json +1 -0
- package/src/data/servicereference/services/bcm-recommended-actions.json +1 -0
- package/src/data/servicereference/services/bedrock-agentcore.json +1 -0
- package/src/data/servicereference/services/bedrock-mantle.json +1 -0
- package/src/data/servicereference/services/bedrock.json +1 -0
- package/src/data/servicereference/services/billing.json +1 -0
- package/src/data/servicereference/services/billingconductor.json +1 -0
- package/src/data/servicereference/services/braket.json +1 -0
- package/src/data/servicereference/services/budgets.json +1 -0
- package/src/data/servicereference/services/bugbust.json +1 -0
- package/src/data/servicereference/services/cases.json +1 -0
- package/src/data/servicereference/services/cassandra.json +1 -0
- package/src/data/servicereference/services/ce.json +1 -0
- package/src/data/servicereference/services/chatbot.json +1 -0
- package/src/data/servicereference/services/chime.json +1 -0
- package/src/data/servicereference/services/cleanrooms-ml.json +1 -0
- package/src/data/servicereference/services/cleanrooms.json +1 -0
- package/src/data/servicereference/services/cloud9.json +1 -0
- package/src/data/servicereference/services/clouddirectory.json +1 -0
- package/src/data/servicereference/services/cloudformation.json +1 -0
- package/src/data/servicereference/services/cloudfront-keyvaluestore.json +1 -0
- package/src/data/servicereference/services/cloudfront.json +1 -0
- package/src/data/servicereference/services/cloudhsm.json +1 -0
- package/src/data/servicereference/services/cloudsearch.json +1 -0
- package/src/data/servicereference/services/cloudshell.json +1 -0
- package/src/data/servicereference/services/cloudtrail-data.json +1 -0
- package/src/data/servicereference/services/cloudtrail.json +1 -0
- package/src/data/servicereference/services/cloudwatch.json +1 -0
- package/src/data/servicereference/services/codeartifact.json +1 -0
- package/src/data/servicereference/services/codebuild.json +1 -0
- package/src/data/servicereference/services/codecatalyst.json +1 -0
- package/src/data/servicereference/services/codecommit.json +1 -0
- package/src/data/servicereference/services/codeconnections.json +1 -0
- package/src/data/servicereference/services/codedeploy-commands-secure.json +1 -0
- package/src/data/servicereference/services/codedeploy.json +1 -0
- package/src/data/servicereference/services/codeguru-profiler.json +1 -0
- package/src/data/servicereference/services/codeguru-reviewer.json +1 -0
- package/src/data/servicereference/services/codeguru-security.json +1 -0
- package/src/data/servicereference/services/codeguru.json +1 -0
- package/src/data/servicereference/services/codepipeline.json +1 -0
- package/src/data/servicereference/services/codestar-connections.json +1 -0
- package/src/data/servicereference/services/codestar-notifications.json +1 -0
- package/src/data/servicereference/services/codestar.json +1 -0
- package/src/data/servicereference/services/codewhisperer.json +1 -0
- package/src/data/servicereference/services/cognito-identity.json +1 -0
- package/src/data/servicereference/services/cognito-idp.json +1 -0
- package/src/data/servicereference/services/cognito-sync.json +1 -0
- package/src/data/servicereference/services/comprehend.json +1 -0
- package/src/data/servicereference/services/comprehendmedical.json +1 -0
- package/src/data/servicereference/services/compute-optimizer.json +1 -0
- package/src/data/servicereference/services/config.json +1 -0
- package/src/data/servicereference/services/connect-campaigns.json +1 -0
- package/src/data/servicereference/services/connect.json +1 -0
- package/src/data/servicereference/services/consoleapp.json +1 -0
- package/src/data/servicereference/services/consolidatedbilling.json +1 -0
- package/src/data/servicereference/services/controlcatalog.json +1 -0
- package/src/data/servicereference/services/controltower.json +1 -0
- package/src/data/servicereference/services/cost-optimization-hub.json +1 -0
- package/src/data/servicereference/services/cur.json +1 -0
- package/src/data/servicereference/services/customer-verification.json +1 -0
- package/src/data/servicereference/services/databrew.json +1 -0
- package/src/data/servicereference/services/dataexchange.json +1 -0
- package/src/data/servicereference/services/datapipeline.json +1 -0
- package/src/data/servicereference/services/datasync.json +1 -0
- package/src/data/servicereference/services/datazone.json +1 -0
- package/src/data/servicereference/services/dax.json +1 -0
- package/src/data/servicereference/services/dbqms.json +1 -0
- package/src/data/servicereference/services/deadline.json +1 -0
- package/src/data/servicereference/services/detective.json +1 -0
- package/src/data/servicereference/services/devicefarm.json +1 -0
- package/src/data/servicereference/services/devops-guru.json +1 -0
- package/src/data/servicereference/services/directconnect.json +1 -0
- package/src/data/servicereference/services/discovery.json +1 -0
- package/src/data/servicereference/services/dlm.json +1 -0
- package/src/data/servicereference/services/dms.json +1 -0
- package/src/data/servicereference/services/docdb-elastic.json +1 -0
- package/src/data/servicereference/services/drs.json +1 -0
- package/src/data/servicereference/services/ds-data.json +1 -0
- package/src/data/servicereference/services/ds.json +1 -0
- package/src/data/servicereference/services/dsql.json +1 -0
- package/src/data/servicereference/services/dynamodb.json +1 -0
- package/src/data/servicereference/services/ebs.json +1 -0
- package/src/data/servicereference/services/ec2-instance-connect.json +1 -0
- package/src/data/servicereference/services/ec2.json +1 -0
- package/src/data/servicereference/services/ec2messages.json +1 -0
- package/src/data/servicereference/services/ecr-public.json +1 -0
- package/src/data/servicereference/services/ecr.json +1 -0
- package/src/data/servicereference/services/ecs-mcp.json +1 -0
- package/src/data/servicereference/services/ecs.json +1 -0
- package/src/data/servicereference/services/eks-auth.json +1 -0
- package/src/data/servicereference/services/eks-mcp.json +1 -0
- package/src/data/servicereference/services/eks.json +1 -0
- package/src/data/servicereference/services/elasticache.json +1 -0
- package/src/data/servicereference/services/elasticbeanstalk.json +1 -0
- package/src/data/servicereference/services/elasticfilesystem.json +1 -0
- package/src/data/servicereference/services/elasticloadbalancing.json +1 -0
- package/src/data/servicereference/services/elasticmapreduce.json +1 -0
- package/src/data/servicereference/services/elastictranscoder.json +1 -0
- package/src/data/servicereference/services/elemental-activations.json +1 -0
- package/src/data/servicereference/services/elemental-appliances-software.json +1 -0
- package/src/data/servicereference/services/elemental-inference.json +1 -0
- package/src/data/servicereference/services/elemental-support-cases.json +1 -0
- package/src/data/servicereference/services/elemental-support-content.json +1 -0
- package/src/data/servicereference/services/emr-containers.json +1 -0
- package/src/data/servicereference/services/emr-serverless.json +1 -0
- package/src/data/servicereference/services/entityresolution.json +1 -0
- package/src/data/servicereference/services/es.json +1 -0
- package/src/data/servicereference/services/events.json +1 -0
- package/src/data/servicereference/services/evidently.json +1 -0
- package/src/data/servicereference/services/evs.json +1 -0
- package/src/data/servicereference/services/execute-api.json +1 -0
- package/src/data/servicereference/services/finspace-api.json +1 -0
- package/src/data/servicereference/services/finspace.json +1 -0
- package/src/data/servicereference/services/firehose.json +1 -0
- package/src/data/servicereference/services/fis.json +1 -0
- package/src/data/servicereference/services/fms.json +1 -0
- package/src/data/servicereference/services/forecast.json +1 -0
- package/src/data/servicereference/services/frauddetector.json +1 -0
- package/src/data/servicereference/services/freertos.json +1 -0
- package/src/data/servicereference/services/freetier.json +1 -0
- package/src/data/servicereference/services/fsx.json +1 -0
- package/src/data/servicereference/services/gamelift.json +1 -0
- package/src/data/servicereference/services/gameliftstreams.json +1 -0
- package/src/data/servicereference/services/geo-maps.json +1 -0
- package/src/data/servicereference/services/geo-places.json +1 -0
- package/src/data/servicereference/services/geo-routes.json +1 -0
- package/src/data/servicereference/services/geo.json +1 -0
- package/src/data/servicereference/services/glacier.json +1 -0
- package/src/data/servicereference/services/globalaccelerator.json +1 -0
- package/src/data/servicereference/services/glue.json +1 -0
- package/src/data/servicereference/services/grafana.json +1 -0
- package/src/data/servicereference/services/greengrass.json +1 -0
- package/src/data/servicereference/services/groundstation.json +1 -0
- package/src/data/servicereference/services/groundtruthlabeling.json +1 -0
- package/src/data/servicereference/services/guardduty.json +1 -0
- package/src/data/servicereference/services/health-agent.json +1 -0
- package/src/data/servicereference/services/health.json +1 -0
- package/src/data/servicereference/services/healthlake.json +1 -0
- package/src/data/servicereference/services/honeycode.json +1 -0
- package/src/data/servicereference/services/iam.json +1 -0
- package/src/data/servicereference/services/identity-sync.json +1 -0
- package/src/data/servicereference/services/identitystore-auth.json +1 -0
- package/src/data/servicereference/services/identitystore.json +1 -0
- package/src/data/servicereference/services/imagebuilder.json +1 -0
- package/src/data/servicereference/services/importexport.json +1 -0
- package/src/data/servicereference/services/inspector-scan.json +1 -0
- package/src/data/servicereference/services/inspector.json +1 -0
- package/src/data/servicereference/services/inspector2-telemetry.json +1 -0
- package/src/data/servicereference/services/inspector2.json +1 -0
- package/src/data/servicereference/services/interconnect.json +1 -0
- package/src/data/servicereference/services/internetmonitor.json +1 -0
- package/src/data/servicereference/services/invoicing.json +1 -0
- package/src/data/servicereference/services/iot-device-tester.json +1 -0
- package/src/data/servicereference/services/iot.json +1 -0
- package/src/data/servicereference/services/iotanalytics.json +1 -0
- package/src/data/servicereference/services/iotdeviceadvisor.json +1 -0
- package/src/data/servicereference/services/iotevents.json +1 -0
- package/src/data/servicereference/services/iotfleethub.json +1 -0
- package/src/data/servicereference/services/iotfleetwise.json +1 -0
- package/src/data/servicereference/services/iotjobsdata.json +1 -0
- package/src/data/servicereference/services/iotmanagedintegrations.json +1 -0
- package/src/data/servicereference/services/iotsitewise.json +1 -0
- package/src/data/servicereference/services/iottwinmaker.json +1 -0
- package/src/data/servicereference/services/iotwireless.json +1 -0
- package/src/data/servicereference/services/iq-permission.json +1 -0
- package/src/data/servicereference/services/iq.json +1 -0
- package/src/data/servicereference/services/ivs.json +1 -0
- package/src/data/servicereference/services/ivschat.json +1 -0
- package/src/data/servicereference/services/kafka-cluster.json +1 -0
- package/src/data/servicereference/services/kafka.json +1 -0
- package/src/data/servicereference/services/kafkaconnect.json +1 -0
- package/src/data/servicereference/services/kendra-ranking.json +1 -0
- package/src/data/servicereference/services/kendra.json +1 -0
- package/src/data/servicereference/services/kinesis.json +1 -0
- package/src/data/servicereference/services/kinesisanalytics.json +1 -0
- package/src/data/servicereference/services/kinesisvideo.json +1 -0
- package/src/data/servicereference/services/kms.json +1 -0
- package/src/data/servicereference/services/lakeformation.json +1 -0
- package/src/data/servicereference/services/lambda.json +1 -0
- package/src/data/servicereference/services/launchwizard.json +1 -0
- package/src/data/servicereference/services/lex.json +1 -0
- package/src/data/servicereference/services/license-manager-linux-subscriptions.json +1 -0
- package/src/data/servicereference/services/license-manager-user-subscriptions.json +1 -0
- package/src/data/servicereference/services/license-manager.json +1 -0
- package/src/data/servicereference/services/lightsail.json +1 -0
- package/src/data/servicereference/services/logs.json +1 -0
- package/src/data/servicereference/services/lookoutequipment.json +1 -0
- package/src/data/servicereference/services/lookoutmetrics.json +1 -0
- package/src/data/servicereference/services/lookoutvision.json +1 -0
- package/src/data/servicereference/services/m2.json +1 -0
- package/src/data/servicereference/services/machinelearning.json +1 -0
- package/src/data/servicereference/services/macie2.json +1 -0
- package/src/data/servicereference/services/managedblockchain-query.json +1 -0
- package/src/data/servicereference/services/managedblockchain.json +1 -0
- package/src/data/servicereference/services/mapcredits.json +1 -0
- package/src/data/servicereference/services/marketplacecommerceanalytics.json +1 -0
- package/src/data/servicereference/services/mechanicalturk.json +1 -0
- package/src/data/servicereference/services/mediaconnect.json +1 -0
- package/src/data/servicereference/services/mediaconvert.json +1 -0
- package/src/data/servicereference/services/mediaimport.json +1 -0
- package/src/data/servicereference/services/medialive.json +1 -0
- package/src/data/servicereference/services/mediapackage-vod.json +1 -0
- package/src/data/servicereference/services/mediapackage.json +1 -0
- package/src/data/servicereference/services/mediapackagev2.json +1 -0
- package/src/data/servicereference/services/mediastore.json +1 -0
- package/src/data/servicereference/services/mediatailor.json +1 -0
- package/src/data/servicereference/services/medical-imaging.json +1 -0
- package/src/data/servicereference/services/memorydb.json +1 -0
- package/src/data/servicereference/services/mgh.json +1 -0
- package/src/data/servicereference/services/mgn.json +1 -0
- package/src/data/servicereference/services/migrationhub-orchestrator.json +1 -0
- package/src/data/servicereference/services/migrationhub-strategy.json +1 -0
- package/src/data/servicereference/services/mobileanalytics.json +1 -0
- package/src/data/servicereference/services/mobiletargeting.json +1 -0
- package/src/data/servicereference/services/monitron.json +1 -0
- package/src/data/servicereference/services/mpa.json +1 -0
- package/src/data/servicereference/services/mq.json +1 -0
- package/src/data/servicereference/services/neptune-db.json +1 -0
- package/src/data/servicereference/services/neptune-graph.json +1 -0
- package/src/data/servicereference/services/network-firewall.json +1 -0
- package/src/data/servicereference/services/network-security-director.json +1 -0
- package/src/data/servicereference/services/networkflowmonitor.json +1 -0
- package/src/data/servicereference/services/networkmanager-chat.json +1 -0
- package/src/data/servicereference/services/networkmanager.json +1 -0
- package/src/data/servicereference/services/networkmonitor.json +1 -0
- package/src/data/servicereference/services/nimble.json +1 -0
- package/src/data/servicereference/services/notifications-contacts.json +1 -0
- package/src/data/servicereference/services/notifications.json +1 -0
- package/src/data/servicereference/services/nova-act.json +1 -0
- package/src/data/servicereference/services/oam.json +1 -0
- package/src/data/servicereference/services/observabilityadmin.json +1 -0
- package/src/data/servicereference/services/odb.json +1 -0
- package/src/data/servicereference/services/omics.json +1 -0
- package/src/data/servicereference/services/one.json +1 -0
- package/src/data/servicereference/services/opensearch.json +1 -0
- package/src/data/servicereference/services/opsworks-cm.json +1 -0
- package/src/data/servicereference/services/opsworks.json +1 -0
- package/src/data/servicereference/services/organizations.json +1 -0
- package/src/data/servicereference/services/osis.json +1 -0
- package/src/data/servicereference/services/outposts.json +1 -0
- package/src/data/servicereference/services/panorama.json +1 -0
- package/src/data/servicereference/services/partnercentral-account-management.json +1 -0
- package/src/data/servicereference/services/partnercentral.json +1 -0
- package/src/data/servicereference/services/payment-cryptography.json +1 -0
- package/src/data/servicereference/services/payments.json +1 -0
- package/src/data/servicereference/services/pca-connector-ad.json +1 -0
- package/src/data/servicereference/services/pca-connector-scep.json +1 -0
- package/src/data/servicereference/services/pcs.json +1 -0
- package/src/data/servicereference/services/personalize.json +1 -0
- package/src/data/servicereference/services/pi.json +1 -0
- package/src/data/servicereference/services/pipes.json +1 -0
- package/src/data/servicereference/services/polly.json +1 -0
- package/src/data/servicereference/services/pricing.json +1 -0
- package/src/data/servicereference/services/pricingplanmanager.json +1 -0
- package/src/data/servicereference/services/private-networks.json +1 -0
- package/src/data/servicereference/services/profile.json +1 -0
- package/src/data/servicereference/services/proton.json +1 -0
- package/src/data/servicereference/services/purchase-orders.json +1 -0
- package/src/data/servicereference/services/q.json +1 -0
- package/src/data/servicereference/services/qapps.json +1 -0
- package/src/data/servicereference/services/qbusiness.json +1 -0
- package/src/data/servicereference/services/qdeveloper.json +1 -0
- package/src/data/servicereference/services/qldb.json +1 -0
- package/src/data/servicereference/services/quicksight.json +1 -0
- package/src/data/servicereference/services/ram.json +1 -0
- package/src/data/servicereference/services/rbin.json +1 -0
- package/src/data/servicereference/services/rds-data.json +1 -0
- package/src/data/servicereference/services/rds-db.json +1 -0
- package/src/data/servicereference/services/rds.json +1 -0
- package/src/data/servicereference/services/redshift-data.json +1 -0
- package/src/data/servicereference/services/redshift-serverless.json +1 -0
- package/src/data/servicereference/services/redshift.json +1 -0
- package/src/data/servicereference/services/refactor-spaces.json +1 -0
- package/src/data/servicereference/services/rekognition.json +1 -0
- package/src/data/servicereference/services/repostspace.json +1 -0
- package/src/data/servicereference/services/resiliencehub.json +1 -0
- package/src/data/servicereference/services/resource-explorer-2.json +1 -0
- package/src/data/servicereference/services/resource-explorer.json +1 -0
- package/src/data/servicereference/services/resource-groups.json +1 -0
- package/src/data/servicereference/services/rhelkb.json +1 -0
- package/src/data/servicereference/services/robomaker.json +1 -0
- package/src/data/servicereference/services/rolesanywhere.json +1 -0
- package/src/data/servicereference/services/route53-recovery-cluster.json +1 -0
- package/src/data/servicereference/services/route53-recovery-control-config.json +1 -0
- package/src/data/servicereference/services/route53-recovery-readiness.json +1 -0
- package/src/data/servicereference/services/route53.json +1 -0
- package/src/data/servicereference/services/route53domains.json +1 -0
- package/src/data/servicereference/services/route53globalresolver.json +1 -0
- package/src/data/servicereference/services/route53profiles.json +1 -0
- package/src/data/servicereference/services/route53resolver.json +1 -0
- package/src/data/servicereference/services/rtbfabric.json +1 -0
- package/src/data/servicereference/services/rum.json +1 -0
- package/src/data/servicereference/services/s3-object-lambda.json +1 -0
- package/src/data/servicereference/services/s3-outposts.json +1 -0
- package/src/data/servicereference/services/s3.json +1 -0
- package/src/data/servicereference/services/s3express.json +1 -0
- package/src/data/servicereference/services/s3tables.json +1 -0
- package/src/data/servicereference/services/s3vectors.json +1 -0
- package/src/data/servicereference/services/sagemaker-data-science-assistant.json +1 -0
- package/src/data/servicereference/services/sagemaker-geospatial.json +1 -0
- package/src/data/servicereference/services/sagemaker-mlflow.json +1 -0
- package/src/data/servicereference/services/sagemaker-unified-studio-mcp.json +1 -0
- package/src/data/servicereference/services/sagemaker.json +1 -0
- package/src/data/servicereference/services/savingsplans.json +1 -0
- package/src/data/servicereference/services/scheduler.json +1 -0
- package/src/data/servicereference/services/schemas.json +1 -0
- package/src/data/servicereference/services/scn.json +1 -0
- package/src/data/servicereference/services/sdb.json +1 -0
- package/src/data/servicereference/services/secretsmanager.json +1 -0
- package/src/data/servicereference/services/security-ir.json +1 -0
- package/src/data/servicereference/services/securityagent.json +1 -0
- package/src/data/servicereference/services/securityhub.json +1 -0
- package/src/data/servicereference/services/securitylake.json +1 -0
- package/src/data/servicereference/services/serverlessrepo.json +1 -0
- package/src/data/servicereference/services/servicecatalog.json +1 -0
- package/src/data/servicereference/services/servicediscovery.json +1 -0
- package/src/data/servicereference/services/serviceextract.json +1 -0
- package/src/data/servicereference/services/servicequotas.json +1 -0
- package/src/data/servicereference/services/ses.json +1 -0
- package/src/data/servicereference/services/shield.json +1 -0
- package/src/data/servicereference/services/signer.json +1 -0
- package/src/data/servicereference/services/signin.json +1 -0
- package/src/data/servicereference/services/simspaceweaver.json +1 -0
- package/src/data/servicereference/services/sms-voice.json +1 -0
- package/src/data/servicereference/services/sms.json +1 -0
- package/src/data/servicereference/services/snow-device-management.json +1 -0
- package/src/data/servicereference/services/snowball.json +1 -0
- package/src/data/servicereference/services/sns.json +1 -0
- package/src/data/servicereference/services/social-messaging.json +1 -0
- package/src/data/servicereference/services/sqlworkbench.json +1 -0
- package/src/data/servicereference/services/sqs.json +1 -0
- package/src/data/servicereference/services/ssm-contacts.json +1 -0
- package/src/data/servicereference/services/ssm-guiconnect.json +1 -0
- package/src/data/servicereference/services/ssm-incidents.json +1 -0
- package/src/data/servicereference/services/ssm-quicksetup.json +1 -0
- package/src/data/servicereference/services/ssm-sap.json +1 -0
- package/src/data/servicereference/services/ssm.json +1 -0
- package/src/data/servicereference/services/ssmmessages.json +1 -0
- package/src/data/servicereference/services/sso-directory.json +1 -0
- package/src/data/servicereference/services/sso-oauth.json +1 -0
- package/src/data/servicereference/services/sso.json +1 -0
- package/src/data/servicereference/services/states.json +1 -0
- package/src/data/servicereference/services/storagegateway.json +1 -0
- package/src/data/servicereference/services/sts.json +1 -0
- package/src/data/servicereference/services/support-console.json +1 -0
- package/src/data/servicereference/services/support.json +1 -0
- package/src/data/servicereference/services/supportapp.json +1 -0
- package/src/data/servicereference/services/supportplans.json +1 -0
- package/src/data/servicereference/services/sustainability.json +1 -0
- package/src/data/servicereference/services/swf.json +1 -0
- package/src/data/servicereference/services/synthetics.json +1 -0
- package/src/data/servicereference/services/tag.json +1 -0
- package/src/data/servicereference/services/tax.json +1 -0
- package/src/data/servicereference/services/textract.json +1 -0
- package/src/data/servicereference/services/thinclient.json +1 -0
- package/src/data/servicereference/services/timestream-influxdb.json +1 -0
- package/src/data/servicereference/services/timestream.json +1 -0
- package/src/data/servicereference/services/tiros.json +1 -0
- package/src/data/servicereference/services/tnb.json +1 -0
- package/src/data/servicereference/services/transcribe.json +1 -0
- package/src/data/servicereference/services/transfer.json +1 -0
- package/src/data/servicereference/services/transform-custom.json +1 -0
- package/src/data/servicereference/services/transform.json +1 -0
- package/src/data/servicereference/services/translate.json +1 -0
- package/src/data/servicereference/services/trustedadvisor.json +1 -0
- package/src/data/servicereference/services/ts.json +1 -0
- package/src/data/servicereference/services/user-subscriptions.json +1 -0
- package/src/data/servicereference/services/uxc.json +1 -0
- package/src/data/servicereference/services/vendor-insights.json +1 -0
- package/src/data/servicereference/services/verified-access.json +1 -0
- package/src/data/servicereference/services/verifiedpermissions.json +1 -0
- package/src/data/servicereference/services/voiceid.json +1 -0
- package/src/data/servicereference/services/vpc-lattice-svcs.json +1 -0
- package/src/data/servicereference/services/vpc-lattice.json +1 -0
- package/src/data/servicereference/services/vpce.json +1 -0
- package/src/data/servicereference/services/waf-regional.json +1 -0
- package/src/data/servicereference/services/waf.json +1 -0
- package/src/data/servicereference/services/wafv2.json +1 -0
- package/src/data/servicereference/services/wam.json +1 -0
- package/src/data/servicereference/services/wellarchitected.json +1 -0
- package/src/data/servicereference/services/wickr.json +1 -0
- package/src/data/servicereference/services/wisdom.json +1 -0
- package/src/data/servicereference/services/workdocs.json +1 -0
- package/src/data/servicereference/services/worklink.json +1 -0
- package/src/data/servicereference/services/workmail.json +1 -0
- package/src/data/servicereference/services/workmailmessageflow.json +1 -0
- package/src/data/servicereference/services/workspaces-instances.json +1 -0
- package/src/data/servicereference/services/workspaces-web.json +1 -0
- package/src/data/servicereference/services/workspaces.json +1 -0
- package/src/data/servicereference/services/xray.json +1 -0
- package/src/data/servicereference/services.json +1 -0
- package/src/extension.d.ts +3 -0
- package/src/extension.js +23 -0
- package/src/grammars/tree-sitter-hcl.wasm +0 -0
- package/src/grammars/tree-sitter-json.wasm +0 -0
- package/src/grammars/tree-sitter-yaml.wasm +0 -0
- package/src/handlers/completion/action-value.d.ts +4 -0
- package/src/handlers/completion/action-value.js +46 -0
- package/src/handlers/completion/condition-block.d.ts +4 -0
- package/src/handlers/completion/condition-block.js +31 -0
- package/src/handlers/completion/condition-key.d.ts +4 -0
- package/src/handlers/completion/condition-key.js +80 -0
- package/src/handlers/completion/condition-operator.d.ts +4 -0
- package/src/handlers/completion/condition-operator.js +22 -0
- package/src/handlers/completion/effect-value.d.ts +4 -0
- package/src/handlers/completion/effect-value.js +14 -0
- package/src/handlers/completion/index.d.ts +14 -0
- package/src/handlers/completion/index.js +96 -0
- package/src/handlers/completion/principal-block-identifier.d.ts +4 -0
- package/src/handlers/completion/principal-block-identifier.js +4 -0
- package/src/handlers/completion/principal-block-type.d.ts +4 -0
- package/src/handlers/completion/principal-block-type.js +24 -0
- package/src/handlers/completion/principal-block.d.ts +4 -0
- package/src/handlers/completion/principal-block.js +28 -0
- package/src/handlers/completion/principal-identifier-completions.d.ts +2 -0
- package/src/handlers/completion/principal-identifier-completions.js +131 -0
- package/src/handlers/completion/principal-type.d.ts +4 -0
- package/src/handlers/completion/principal-type.js +23 -0
- package/src/handlers/completion/principal-typed-value.d.ts +4 -0
- package/src/handlers/completion/principal-typed-value.js +4 -0
- package/src/handlers/completion/principal-value.d.ts +4 -0
- package/src/handlers/completion/principal-value.js +18 -0
- package/src/handlers/completion/resource-value.d.ts +4 -0
- package/src/handlers/completion/resource-value.js +144 -0
- package/src/handlers/completion/statement-block.d.ts +10 -0
- package/src/handlers/completion/statement-block.js +51 -0
- package/src/handlers/completion/statement-key.d.ts +4 -0
- package/src/handlers/completion/statement-key.js +41 -0
- package/src/lib/iam-policy/condition-operators.d.ts +317 -0
- package/src/lib/iam-policy/condition-operators.js +129 -0
- package/src/lib/iam-policy/location.d.ts +71 -0
- package/src/lib/iam-policy/location.js +82 -0
- package/src/lib/iam-policy/partitions.d.ts +116 -0
- package/src/lib/iam-policy/partitions.js +51 -0
- package/src/lib/iam-policy/principals.d.ts +21 -0
- package/src/lib/iam-policy/principals.js +37 -0
- package/src/lib/iam-policy/reference/services.d.ts +22 -0
- package/src/lib/iam-policy/reference/services.js +99 -0
- package/src/lib/iam-policy/reference/types.d.ts +71 -0
- package/src/lib/iam-policy/reference/types.js +1 -0
- package/src/lib/iam-policy/statement-keys.d.ts +8 -0
- package/src/lib/iam-policy/statement-keys.js +159 -0
- package/src/lib/iam-policy/wildcard.d.ts +2 -0
- package/src/lib/iam-policy/wildcard.js +14 -0
- package/src/lib/treesitter/base.d.ts +35 -0
- package/src/lib/treesitter/base.js +50 -0
- package/src/lib/treesitter/hcl.d.ts +9 -0
- package/src/lib/treesitter/hcl.js +888 -0
- package/src/lib/treesitter/json.d.ts +9 -0
- package/src/lib/treesitter/json.js +376 -0
- package/src/lib/treesitter/manager.d.ts +9 -0
- package/src/lib/treesitter/manager.js +66 -0
- package/src/lib/treesitter/yaml.d.ts +9 -0
- package/src/lib/treesitter/yaml.js +878 -0
- package/src/server.d.ts +2 -0
- package/src/server.js +26 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"bedrock-mantle","actions":{"ArchiveProject":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to archive a specific project","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"CallWithBearerToken":{"conditionKeys":["bedrock-mantle:BearerTokenType"],"resources":[],"description":"Grants permission to make API calls using bearer token authentication","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"CancelFineTuningJob":{"conditionKeys":["bedrock-mantle:FineTuningJob"],"resources":[{"name":"project"}],"description":"Grants permission to cancel an in-progress fine tuning job","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"CancelInference":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to cancel an in-progress inference request","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"CreateFile":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to create a file in a project","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"CreateFineTuningJob":{"conditionKeys":["bedrock-mantle:Files","bedrock-mantle:Model"],"resources":[{"name":"project"}],"description":"Grants permission to create a fine tuning job","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"CreateInference":{"conditionKeys":["bedrock-mantle:Model","bedrock-mantle:ServiceTier"],"resources":[{"name":"project"}],"description":"Grants permission to create a chat completion inference request","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"CreateProject":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"project"}],"description":"Grants permission to create a project","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"DeleteFile":{"conditionKeys":["bedrock-mantle:Files"],"resources":[{"name":"project"}],"description":"Grants permission to delete a specific file","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"DeleteInference":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to delete a specific inference request","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]},"GetFile":{"conditionKeys":["bedrock-mantle:Files"],"resources":[{"name":"project"}],"description":"Grants permission to retrieve information about a specific file","accessLevel":"Read","resourceTypes":[{"name":"project","required":true}]},"GetFineTuningJob":{"conditionKeys":["bedrock-mantle:FineTuningJob"],"resources":[{"name":"project"}],"description":"Grants permission to retrieve details of a specific fine tuning job","accessLevel":"Read","resourceTypes":[{"name":"project","required":true}]},"GetInference":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to retrieve details of a specific inference request","accessLevel":"Read","resourceTypes":[{"name":"project","required":true}]},"GetModel":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to retrieve information about a specific model","accessLevel":"Read","resourceTypes":[{"name":"project","required":true}]},"GetProject":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to retrieve details of a specific project","accessLevel":"Read","resourceTypes":[{"name":"project","required":true}]},"ListFiles":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to list all available files in a project","accessLevel":"List","resourceTypes":[{"name":"project","required":true}]},"ListFineTuningJobs":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to list all available fine tuning jobs in a project","accessLevel":"List","resourceTypes":[{"name":"project","required":true}]},"ListModels":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to list all available models in a project","accessLevel":"List","resourceTypes":[{"name":"project","required":true}]},"ListProjects":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to list projects","accessLevel":"List","resourceTypes":[{"name":"project","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to list tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"project","required":false}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"project"}],"description":"Grants permission to tag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"project","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"project"}],"description":"Grants permission to untag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"project","required":false}]},"UpdateProject":{"conditionKeys":[],"resources":[{"name":"project"}],"description":"Grants permission to update a specific project","accessLevel":"Write","resourceTypes":[{"name":"project","required":true}]}},"resources":[{"name":"project","arnFormats":["arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"bedrock-mantle:BearerTokenType":{"types":["String"],"description":"Filters access by the Short-term or Long-term bearer tokens"},"bedrock-mantle:Files":{"types":["ArrayOfString"],"description":"Filters access by the specified file identifiers"},"bedrock-mantle:FineTuningJob":{"types":["String"],"description":"Filters access by the specified fine-tuning job identifier"},"bedrock-mantle:Model":{"types":["String"],"description":"Filters access by the specified Model"},"bedrock-mantle:ServiceTier":{"types":["String"],"description":"Filters access by the specified ServiceTier"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"bedrock","actions":{"AllowVendedLogDeliveryForResource":{"conditionKeys":[],"resources":[{"name":"knowledge-base"}],"description":"Grants permission to configure vended log delivery for a knowledge base","accessLevel":"Permissions management","resourceTypes":[{"name":"knowledge-base","required":false}],"permissionOnly":true},"ApplyGuardrail":{"conditionKeys":[],"resources":[{"name":"guardrail"},{"name":"guardrail-profile"}],"description":"Grants permission to apply a guardrail","accessLevel":"Read","resourceTypes":[{"name":"guardrail","required":true},{"name":"guardrail-profile","required":false}]},"AssociateAgentCollaborator":{"conditionKeys":[],"resources":[{"name":"agent"}],"description":"Grants permission to associate another existing agent as a collaborator to an existing agent","accessLevel":"Write","resourceTypes":[{"name":"agent","required":true}]},"AssociateAgentKnowledgeBase":{"conditionKeys":[],"resources":[{"name":"agent"},{"name":"knowledge-base"}],"description":"Grants permission to associate a knowledge base with an agent","accessLevel":"Write","resourceTypes":[{"name":"agent","required":true},{"name":"knowledge-base","required":true}]},"AssociateThirdPartyKnowledgeBase":{"conditionKeys":["bedrock:ThirdPartyKnowledgeBaseCredentialsSecretArn"],"resources":[],"description":"Grants permission to use 3rd party platform to store knowledge data","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"BatchDeleteEvaluationJob":{"conditionKeys":[],"resources":[{"name":"evaluation-job"}],"description":"Grants permission to batch delete list of bedrock evaluation jobs","accessLevel":"Write","resourceTypes":[{"name":"evaluation-job","required":true}]},"CallWithBearerToken":{"conditionKeys":["bedrock:BearerTokenType"],"resources":[],"description":"Grants permission to use bearer token","accessLevel":"Read","resourceTypes":[]},"CancelAutomatedReasoningPolicyBuildWorkflow":{"conditionKeys":[],"resources":[{"name":"automated-reasoning-policy"}],"description":"Grants permission to cancel a build workflow for an automated reasoning policy","accessLevel":"Write","resourceTypes":[{"name":"automated-reasoning-policy","required":true}]},"CopyBlueprintStage":{"conditionKeys":[],"resources":[{"name":"blueprint"}],"description":"Grants permission to copy a blueprint from one stage to another","accessLevel":"Write","resourceTypes":[{"name":"blueprint","required":true}]},"CountTokens":{"conditionKeys":[],"resources":[{"name":"foundation-model"}],"description":"Grants permission to count the number of tokens in an input prompt","accessLevel":"Read","resourceTypes":[{"name":"foundation-model","required":true}]},"CreateAgent":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new agent and a test agent alias pointing to the DRAFT agent version","accessLevel":"Write","resourceTypes":[]},"CreateAgentActionGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"agent"}],"description":"Grants permission to create a new action group in an existing agent","accessLevel":"Write","resourceTypes":[{"name":"agent","required":true}]},"CreateAgentAlias":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"agent"}],"description":"Grants permission to create a new alias for an agent","accessLevel":"Write","resourceTypes":[{"name":"agent","required":true}]},"CreateAutomatedReasoningPolicy":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new automated reasoning policy","accessLevel":"Write","resourceTypes":[]},"CreateAutomatedReasoningPolicyTestCase":{"conditionKeys":[],"resources":[{"name":"automated-reasoning-policy"}],"description":"Grants permission to create a test case for an automated reasoning policy","accessLevel":"Write","resourceTypes":[{"name":"automated-reasoning-policy","required":true}]},"CreateAutomatedReasoningPolicyVersion":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"automated-reasoning-policy"}],"description":"Grants permission to create a new automated reasoning policy version","accessLevel":"Write","resourceTypes":[{"name":"automated-reasoning-policy","required":true}]},"CreateBlueprint":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a blueprint for custom output from data automation","accessLevel":"Write","resourceTypes":[]},"CreateBlueprintVersion":{"conditionKeys":[],"resources":[{"name":"blueprint"}],"description":"Grants permission to create a new version for an existing blueprint","accessLevel":"Write","resourceTypes":[{"name":"blueprint","required":true}]},"CreateCustomModel":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a custom model into Bedrock","accessLevel":"Write","resourceTypes":[]},"CreateCustomModelDeployment":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"custom-model"}],"description":"Grants permission to create a custom model deployment for custom model","accessLevel":"Write","resourceTypes":[{"name":"custom-model","required":true}]},"CreateDataAutomationProject":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"blueprint"}],"description":"Grants permission to create a data automation project","accessLevel":"Write","resourceTypes":[{"name":"blueprint","required":false}]},"CreateDataSource":{"conditionKeys":[],"resources":[{"name":"knowledge-base"}],"description":"Grants permission to create a data source","accessLevel":"Write","resourceTypes":[{"name":"knowledge-base","required":true}]},"CreateEvaluationJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"custom-model"},{"name":"default-prompt-router"},{"name":"foundation-model"},{"name":"prompt-router"}],"description":"Grants permission to create a job for evaluation foundation models or custom models","accessLevel":"Write","resourceTypes":[{"name":"custom-model","required":true},{"name":"default-prompt-router","required":true},{"name":"foundation-model","required":true},{"name":"prompt-router","required":true}]},"CreateFlow":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a prompt flow","accessLevel":"Write","resourceTypes":[]},"CreateFlowAlias":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"flow"}],"description":"Grants permission to create an alias of a prompt flow","accessLevel":"Write","resourceTypes":[{"name":"flow","required":true}]},"CreateFlowVersion":{"conditionKeys":[],"resources":[{"name":"flow"}],"description":"Grants permission to create an immutable version of a prompt flow","accessLevel":"Write","resourceTypes":[{"name":"flow","required":true}]},"CreateFoundationModelAgreement":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new foundation model agreement","accessLevel":"Write","resourceTypes":[]},"CreateGuardrail":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"automated-reasoning-policy"},{"name":"automated-reasoning-policy-version"},{"name":"guardrail-profile"}],"description":"Grants permission to create a new guardrail","accessLevel":"Write","resourceTypes":[{"name":"automated-reasoning-policy","required":false},{"name":"automated-reasoning-policy-version","required":false},{"name":"guardrail-profile","required":false}]},"CreateGuardrailVersion":{"conditionKeys":[],"resources":[{"name":"guardrail"}],"description":"Grants permission to create a new guardrail version","accessLevel":"Write","resourceTypes":[{"name":"guardrail","required":true}]},"CreateInferenceProfile":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"application-inference-profile"},{"name":"foundation-model"},{"name":"inference-profile"}],"description":"Grants permission to create inference profiles","accessLevel":"Write","resourceTypes":[{"name":"application-inference-profile","required":true},{"name":"foundation-model","required":true},{"name":"inference-profile","required":true}]},"CreateInvocation":{"conditionKeys":[],"resources":[{"name":"session"}],"description":"Grants permission to create a new invocation in an existing session","accessLevel":"Write","resourceTypes":[{"name":"session","required":true}]},"CreateKnowledgeBase":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a knowledge base","accessLevel":"Write","resourceTypes":[]},"CreateMarketplaceModelEndpoint":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a marketplace model endpoint","accessLevel":"Write","resourceTypes":[]},"CreateModelCopyJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"custom-model"}],"description":"Grants permission to create a job for copying a custom model across region or across account","accessLevel":"Write","resourceTypes":[{"name":"custom-model","required":true}]},"CreateModelCustomizationJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"custom-model"},{"name":"foundation-model"}],"description":"Grants permission to create a job for customizing the model with your custom training data","accessLevel":"Write","resourceTypes":[{"name":"custom-model","required":true},{"name":"foundation-model","required":true}]},"CreateModelEvaluationJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"custom-model"},{"name":"foundation-model"}],"description":"Grants permission to create a job for evaluation foundation models or custom models","accessLevel":"Write","resourceTypes":[{"name":"custom-model","required":true},{"name":"foundation-model","required":true}]},"CreateModelImportJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a job for importing model into Bedrock","accessLevel":"Write","resourceTypes":[]},"CreateModelInvocationJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"custom-model"},{"name":"foundation-model"},{"name":"model-invocation-job"}],"description":"Grants permission to create a new model invocation job","accessLevel":"Write","resourceTypes":[{"name":"custom-model","required":true},{"name":"foundation-model","required":true},{"name":"model-invocation-job","required":true}]},"CreatePrompt":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a prompt","accessLevel":"Write","resourceTypes":[]},"CreatePromptRouter":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"application-inference-profile"},{"name":"foundation-model"},{"name":"inference-profile"}],"description":"Grants permission to create a custom prompt router","accessLevel":"Write","resourceTypes":[{"name":"application-inference-profile","required":true},{"name":"foundation-model","required":true},{"name":"inference-profile","required":true}]},"CreatePromptVersion":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"prompt"}],"description":"Grants permission to create a version of a prompt","accessLevel":"Write","resourceTypes":[{"name":"prompt","required":true}]},"CreateProvisionedModelThroughput":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"custom-model"},{"name":"foundation-model"}],"description":"Grants permission to create a new provisioned model throughput","accessLevel":"Write","resourceTypes":[{"name":"custom-model","required":true},{"name":"foundation-model","required":true}]},"CreateSession":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new session","accessLevel":"Write","resourceTypes":[]},"DeleteAgent":{"conditionKeys":[],"resources":[{"name":"agent"}],"description":"Grants permission to delete an Agent that you created earlier","accessLevel":"Write","resourceTypes":[{"name":"agent","required":true}]},"DeleteAgentActionGroup":{"conditionKeys":[],"resources":[{"name":"agent"}],"description":"Grants permission to delete an actionGroup that you created earlier","accessLevel":"Write","resourceTypes":[{"name":"agent","required":true}]},"DeleteAgentAlias":{"conditionKeys":[],"resources":[{"name":"agent-alias"}],"description":"Grants permission to delete an AgentAlias that you created earlier","accessLevel":"Write","resourceTypes":[{"name":"agent-alias","required":true}]},"DeleteAgentMemory":{"conditionKeys":[],"resources":[{"name":"agent-alias"}],"description":"Grants permission to delete existing memory for an alias","accessLevel":"Write","resourceTypes":[{"name":"agent-alias","required":true}]},"DeleteAgentVersion":{"conditionKeys":[],"resources":[{"name":"agent"}],"description":"Grants permission to delete an Agent Version that you created earlier","accessLevel":"Write","resourceTypes":[{"name":"agent","required":true}]},"DeleteAutomatedReasoningPolicy":{"conditionKeys":[],"resources":[{"name":"automated-reasoning-policy"},{"name":"automated-reasoning-policy-version"}],"description":"Grants permission to delete an automated reasoning policy or its version","accessLevel":"Write","resourceTypes":[{"name":"automated-reasoning-policy","required":true},{"name":"automated-reasoning-policy-version","required":true}]},"DeleteAutomatedReasoningPolicyBuildWorkflow":{"conditionKeys":[],"resources":[{"name":"automated-reasoning-policy"}],"description":"Grants permission to delete a build workflow for an automated reasoning policy","accessLevel":"Write","resourceTypes":[{"name":"automated-reasoning-policy","required":true}]},"DeleteAutomatedReasoningPolicyTestCase":{"conditionKeys":[],"resources":[{"name":"automated-reasoning-policy"}],"description":"Grants permission to delete a test case for an automated reasoning policy","accessLevel":"Write","resourceTypes":[{"name":"automated-reasoning-policy","required":true}]},"DeleteBlueprint":{"conditionKeys":[],"resources":[{"name":"blueprint"}],"description":"Grants permission to delete a blueprint for data automation","accessLevel":"Write","resourceTypes":[{"name":"blueprint","required":true}]},"DeleteCustomModel":{"conditionKeys":[],"resources":[{"name":"custom-model"}],"description":"Grants permission to delete a custom model that you created earlier","accessLevel":"Write","resourceTypes":[{"name":"custom-model","required":true}]},"DeleteCustomModelDeployment":{"conditionKeys":[],"resources":[{"name":"custom-model-deployment"}],"description":"Grants permission to delete a custom model deployment that you created earlier","accessLevel":"Write","resourceTypes":[{"name":"custom-model-deployment","required":true}]},"DeleteDataAutomationProject":{"conditionKeys":[],"resources":[{"name":"data-automation-project"}],"description":"Grants permission to delete a data automation project","accessLevel":"Write","resourceTypes":[{"name":"data-automation-project","required":true}]},"DeleteDataSource":{"conditionKeys":[],"resources":[{"name":"knowledge-base"}],"description":"Grants permission to delete a data source","accessLevel":"Write","resourceTypes":[{"name":"knowledge-base","required":true}]},"DeleteEnforcedGuardrailConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete account-level enforced guardrail configuration","accessLevel":"Write","resourceTypes":[]},"DeleteFlow":{"conditionKeys":[],"resources":[{"name":"flow"}],"description":"Grants permission to delete a prompt flow","accessLevel":"Write","resourceTypes":[{"name":"flow","required":true}]},"DeleteFlowAlias":{"conditionKeys":[],"resources":[{"name":"flow-alias"}],"description":"Grants permission to delete an alias of a prompt flow","accessLevel":"Write","resourceTypes":[{"name":"flow-alias","required":true}]},"DeleteFlowVersion":{"conditionKeys":[],"resources":[{"name":"flow"}],"description":"Grants permission to delete a version of a prompt flow","accessLevel":"Write","resourceTypes":[{"name":"flow","required":true}]},"DeleteFoundationModelAgreement":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a foundation model agreement that you created earlier","accessLevel":"Write","resourceTypes":[]},"DeleteGuardrail":{"conditionKeys":[],"resources":[{"name":"guardrail"}],"description":"Grants permission to delete a guardrail or its version","accessLevel":"Write","resourceTypes":[{"name":"guardrail","required":true}]},"DeleteImportedModel":{"conditionKeys":[],"resources":[{"name":"imported-model"}],"description":"Grants permission to delete previously created Bedrock imported model","accessLevel":"Write","resourceTypes":[{"name":"imported-model","required":true}]},"DeleteInferenceProfile":{"conditionKeys":[],"resources":[{"name":"application-inference-profile"}],"description":"Grants permission to delete inference profiles","accessLevel":"Write","resourceTypes":[{"name":"application-inference-profile","required":true}]},"DeleteKnowledgeBase":{"conditionKeys":[],"resources":[{"name":"knowledge-base"}],"description":"Grants permission to delete a knowledge base","accessLevel":"Write","resourceTypes":[{"name":"knowledge-base","required":true}]},"DeleteKnowledgeBaseDocuments":{"conditionKeys":[],"resources":[{"name":"knowledge-base"}],"description":"Grants permission to delete documents from a knowledge base","accessLevel":"Write","resourceTypes":[{"name":"knowledge-base","required":true}]},"DeleteMarketplaceModelAgreement":{"conditionKeys":[],"resources":[],"description":"Grants permission to unsubscribe from a bedrock marketplace enabled AWS marketplace model","accessLevel":"Write","resourceTypes":[]},"DeleteMarketplaceModelEndpoint":{"conditionKeys":[],"resources":[{"name":"bedrock-marketplace-model-endpoint"}],"description":"Grants permission to delete a marketplace model endpoint","accessLevel":"Write","resourceTypes":[{"name":"bedrock-marketplace-model-endpoint","required":true}]},"DeleteModelInvocationLoggingConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete an existing Invocation logging configuration","accessLevel":"Write","resourceTypes":[]},"DeletePrompt":{"conditionKeys":[],"resources":[{"name":"prompt"},{"name":"prompt-version"}],"description":"Grants permission to delete a prompt or its version","accessLevel":"Write","resourceTypes":[{"name":"prompt","required":true},{"name":"prompt-version","required":true}]},"DeletePromptRouter":{"conditionKeys":[],"resources":[{"name":"prompt-router"}],"description":"Grants permission to delete a custom prompt router","accessLevel":"Write","resourceTypes":[{"name":"prompt-router","required":true}]},"DeleteProvisionedModelThroughput":{"conditionKeys":[],"resources":[{"name":"provisioned-model"}],"description":"Grants permission to delete a provisioned model throughput that you created earlier","accessLevel":"Write","resourceTypes":[{"name":"provisioned-model","required":true}]},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[{"name":"custom-model"},{"name":"guardrail"},{"name":"guardrail-profile"}],"description":"Deletes a previously created Bedrock resource policy","accessLevel":"Write","resourceTypes":[{"name":"custom-model","required":false},{"name":"guardrail","required":false},{"name":"guardrail-profile","required":false}],"permissionOnly":true},"DeleteSession":{"conditionKeys":[],"resources":[{"name":"session"}],"description":"Grants permission to delete a Session that you created earlier","accessLevel":"Write","resourceTypes":[{"name":"session","required":true}]},"DeregisterMarketplaceModelEndpoint":{"conditionKeys":[],"resources":[{"name":"bedrock-marketplace-model-endpoint"}],"description":"Grants permission to deregister a marketplace model endpoint to make it unusable in Bedrock Marketplace","accessLevel":"Write","resourceTypes":[{"name":"bedrock-marketplace-model-endpoint","required":true}]},"DetectGeneratedContent":{"conditionKeys":[],"resources":[{"name":"foundation-model"}],"description":"Grants permission to detect if the provided content is generated using Amazon Bedrock","accessLevel":"Read","resourceTypes":[{"name":"foundation-model","required":true}]},"DisassociateAgentCollaborator":{"conditionKeys":[],"resources":[{"name":"agent"}],"description":"Grants permission to diassociate a collaborator that you associated earlier","accessLevel":"Write","resourceTypes":[{"name":"agent","required":true}]},"DisassociateAgentKnowledgeBase":{"conditionKeys":[],"resources":[{"name":"agent"},{"name":"knowledge-base"}],"description":"Grants permission to disassociate a knowledge base from the agent","accessLevel":"Write","resourceTypes":[{"name":"agent","required":true},{"name":"knowledge-base","required":true}]},"EndSession":{"conditionKeys":[],"resources":[{"name":"session"}],"description":"Grants permission to end a Session that you created earlier","accessLevel":"Write","resourceTypes":[{"name":"session","required":true}]},"ExportAutomatedReasoningPolicyVersion":{"conditionKeys":[],"resources":[{"name":"automated-reasoning-policy"},{"name":"automated-reasoning-policy-version"}],"description":"Grants permission to retrieve an automated reasoning policy version artifact","accessLevel":"Read","resourceTypes":[{"name":"automated-reasoning-policy","required":true},{"name":"automated-reasoning-policy-version","required":true}]},"GenerateQuery":{"conditionKeys":[],"resources":[],"description":"Grants permission to generate queries associated with user input","accessLevel":"Read","resourceTypes":[]},"GetAgent":{"conditionKeys":[],"resources":[{"name":"agent"}],"description":"Grants permission to retrieve an existing agent","accessLevel":"Read","resourceTypes":[{"name":"agent","required":true}]},"GetAgentActionGroup":{"conditionKeys":[],"resources":[{"name":"agent"}],"description":"Grants permission to retrieve an existing action group","accessLevel":"Read","resourceTypes":[{"name":"agent","required":true}]},"GetAgentAlias":{"conditionKeys":[],"resources":[{"name":"agent-alias"}],"description":"Grants permission to retrieve an existing alias","accessLevel":"Read","resourceTypes":[{"name":"agent-alias","required":true}]},"GetAgentCollaborator":{"conditionKeys":[],"resources":[{"name":"agent"}],"description":"Grants permission to retrieve an existing collaborator","accessLevel":"Read","resourceTypes":[{"name":"agent","required":true}]},"GetAgentKnowledgeBase":{"conditionKeys":[],"resources":[{"name":"agent"},{"name":"knowledge-base"}],"description":"Grants permission to describe a knowledge base associated with an agent","accessLevel":"Read","resourceTypes":[{"name":"agent","required":true},{"name":"knowledge-base","required":true}]},"GetAgentMemory":{"conditionKeys":[],"resources":[{"name":"agent-alias"}],"description":"Grants permission to retrieve existing memory for an alias","accessLevel":"Read","resourceTypes":[{"name":"agent-alias","required":true}]},"GetAgentVersion":{"conditionKeys":[],"resources":[{"name":"agent"}],"description":"Grants permission to retrieve an existing version of an agent","accessLevel":"Read","resourceTypes":[{"name":"agent","required":true}]},"GetAsyncInvoke":{"conditionKeys":[],"resources":[{"name":"async-invoke"}],"description":"Grants permission to get the properties associated with an asynchronous invocation that you have submitted","accessLevel":"Read","resourceTypes":[{"name":"async-invoke","required":true}]},"GetAutomatedReasoningPolicy":{"conditionKeys":[],"resources":[{"name":"automated-reasoning-policy"},{"name":"automated-reasoning-policy-version"}],"description":"Grants permission to retrieve an automated reasoning policy or its version","accessLevel":"Read","resourceTypes":[{"name":"automated-reasoning-policy","required":true},{"name":"automated-reasoning-policy-version","required":true}]},"GetAutomatedReasoningPolicyAnnotations":{"conditionKeys":[],"resources":[{"name":"automated-reasoning-policy"}],"description":"Grants permission to retrieve annotations for a build workflow for an automated reasoning policy","accessLevel":"Read","resourceTypes":[{"name":"automated-reasoning-policy","required":true}]},"GetAutomatedReasoningPolicyBuildWorkflow":{"conditionKeys":[],"resources":[{"name":"automated-reasoning-policy"}],"description":"Grants permission to retrieve a build workflow for an automated reasoning policy","accessLevel":"Read","resourceTypes":[{"name":"automated-reasoning-policy","required":true}]},"GetAutomatedReasoningPolicyBuildWorkflowResultAssets":{"conditionKeys":[],"resources":[{"name":"automated-reasoning-policy"}],"description":"Grants permission to retrieve assets for a build workflow for an automated reasoning policy","accessLevel":"Read","resourceTypes":[{"name":"automated-reasoning-policy","required":true}]},"GetAutomatedReasoningPolicyNextScenario":{"conditionKeys":[],"resources":[{"name":"automated-reasoning-policy"}],"description":"Grants permission to retrieve the next unreviewed generated scenario for a build workflow for an automated reasoning policy","accessLevel":"Read","resourceTypes":[{"name":"automated-reasoning-policy","required":true}]},"GetAutomatedReasoningPolicyTestCase":{"conditionKeys":[],"resources":[{"name":"automated-reasoning-policy"}],"description":"Grants permission to retrieve a test case for an automated reasoning policy","accessLevel":"Read","resourceTypes":[{"name":"automated-reasoning-policy","required":true}]},"GetAutomatedReasoningPolicyTestResult":{"conditionKeys":[],"resources":[{"name":"automated-reasoning-policy"}],"description":"Grants permission to retrieve result for a test case for an automated reasoning policy","accessLevel":"Read","resourceTypes":[{"name":"automated-reasoning-policy","required":true}]},"GetBlueprint":{"conditionKeys":[],"resources":[{"name":"blueprint"}],"description":"Grants permission to retrieve an existing blueprint for data automation","accessLevel":"Read","resourceTypes":[{"name":"blueprint","required":true}]},"GetBlueprintOptimizationStatus":{"conditionKeys":[],"resources":[{"name":"blueprint-optimization-invocation"}],"description":"Grants permission to get the status of a blueprint optimization job","accessLevel":"Read","resourceTypes":[{"name":"blueprint-optimization-invocation","required":true}]},"GetBlueprintRecommendation":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve blueprint recommendation","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetCustomModel":{"conditionKeys":[],"resources":[{"name":"custom-model"}],"description":"Grants permission to get the properties associated with a Bedrock custom model that you have created","accessLevel":"Read","resourceTypes":[{"name":"custom-model","required":true}]},"GetCustomModelDeployment":{"conditionKeys":[],"resources":[{"name":"custom-model-deployment"}],"description":"Grants permission to get the properties associated with a custom model deployment. Use this operation to get the status of a custom model deployment","accessLevel":"Read","resourceTypes":[{"name":"custom-model-deployment","required":true}]},"GetDataAutomationProject":{"conditionKeys":[],"resources":[{"name":"data-automation-project"}],"description":"Grants permission to retrieve an existing data automation project","accessLevel":"Read","resourceTypes":[{"name":"data-automation-project","required":true}]},"GetDataAutomationStatus":{"conditionKeys":[],"resources":[{"name":"data-automation-invocation-job"}],"description":"Grants permission to retrieve the status of a data automation invocation job","accessLevel":"Read","resourceTypes":[{"name":"data-automation-invocation-job","required":true}]},"GetDataSource":{"conditionKeys":[],"resources":[{"name":"knowledge-base"}],"description":"Grants permission to retrieve an existing data source","accessLevel":"Read","resourceTypes":[{"name":"knowledge-base","required":true}]},"GetEvaluationJob":{"conditionKeys":[],"resources":[{"name":"evaluation-job"}],"description":"Grants permission to get the properties associated with a evaluation job. Use this operation to get the status of a evaluation job","accessLevel":"Read","resourceTypes":[{"name":"evaluation-job","required":true}]},"GetExecutionFlowSnapshot":{"conditionKeys":[],"resources":[{"name":"flow"},{"name":"flow-alias"},{"name":"flow-execution"}],"description":"Grants permission to retrieve the flow definition for a flow execution","accessLevel":"Read","resourceTypes":[{"name":"flow","required":true},{"name":"flow-alias","required":true},{"name":"flow-execution","required":true}]},"GetFlow":{"conditionKeys":[],"resources":[{"name":"flow"}],"description":"Grants permission to retrieve an existing prompt flow","accessLevel":"Read","resourceTypes":[{"name":"flow","required":true}]},"GetFlowAlias":{"conditionKeys":[],"resources":[{"name":"flow-alias"}],"description":"Grants permission to retrieve an existing alias of a prompt flow","accessLevel":"Read","resourceTypes":[{"name":"flow-alias","required":true}]},"GetFlowExecution":{"conditionKeys":[],"resources":[{"name":"flow"},{"name":"flow-alias"},{"name":"flow-execution"}],"description":"Grants permission to retrieve an existing execution of a flow alias","accessLevel":"Read","resourceTypes":[{"name":"flow","required":true},{"name":"flow-alias","required":true},{"name":"flow-execution","required":true}]},"GetFlowVersion":{"conditionKeys":[],"resources":[{"name":"flow"}],"description":"Grants permission to retrieve an existing version of a prompt flow","accessLevel":"Read","resourceTypes":[{"name":"flow","required":true}]},"GetFoundationModel":{"conditionKeys":[],"resources":[{"name":"foundation-model"}],"description":"Grants permission to get the properties associated with a Bedrock foundation model","accessLevel":"Read","resourceTypes":[{"name":"foundation-model","required":true}]},"GetFoundationModelAvailability":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the availability of a foundation model","accessLevel":"Read","resourceTypes":[]},"GetGuardrail":{"conditionKeys":[],"resources":[{"name":"guardrail"}],"description":"Grants permission to retrieve a guardrail or its version","accessLevel":"Read","resourceTypes":[{"name":"guardrail","required":true}]},"GetImportedModel":{"conditionKeys":[],"resources":[{"name":"imported-model"}],"description":"Grants permission to get the properties associated with Bedrock imported model","accessLevel":"Read","resourceTypes":[{"name":"imported-model","required":true}]},"GetInferenceProfile":{"conditionKeys":[],"resources":[{"name":"application-inference-profile"},{"name":"inference-profile"}],"description":"Grants permission to get the properties associated with an inference profile","accessLevel":"Read","resourceTypes":[{"name":"application-inference-profile","required":true},{"name":"inference-profile","required":true}]},"GetIngestionJob":{"conditionKeys":[],"resources":[{"name":"knowledge-base"}],"description":"Grants permission to retrieve an existing ingestion job","accessLevel":"Read","resourceTypes":[{"name":"knowledge-base","required":true}]},"GetInvocationStep":{"conditionKeys":[],"resources":[{"name":"session"}],"description":"Grants permission to get an invocation step from a session","accessLevel":"Read","resourceTypes":[{"name":"session","required":true}]},"GetKnowledgeBase":{"conditionKeys":[],"resources":[{"name":"knowledge-base"}],"description":"Grants permission to retrieve an existing knowledge base","accessLevel":"Read","resourceTypes":[{"name":"knowledge-base","required":true}]},"GetKnowledgeBaseDocuments":{"conditionKeys":[],"resources":[{"name":"knowledge-base"}],"description":"Grants permission to get details for documents in a knowledge base","accessLevel":"Read","resourceTypes":[{"name":"knowledge-base","required":true}]},"GetMarketplaceModelEndpoint":{"conditionKeys":[],"resources":[{"name":"bedrock-marketplace-model-endpoint"}],"description":"Grants permission to get the properties of a marketplace model endpoint","accessLevel":"Read","resourceTypes":[{"name":"bedrock-marketplace-model-endpoint","required":true}]},"GetModelCopyJob":{"conditionKeys":[],"resources":[{"name":"model-copy-job"}],"description":"Grants permission to get the properties associated with a model-copy job. Use this operation to get the status of a model-copy job","accessLevel":"Read","resourceTypes":[{"name":"model-copy-job","required":true}]},"GetModelCustomizationJob":{"conditionKeys":[],"resources":[{"name":"model-customization-job"}],"description":"Grants permission to get the properties associated with a model-customization job. Use this operation to get the status of a model-customization job","accessLevel":"Read","resourceTypes":[{"name":"model-customization-job","required":true}]},"GetModelEvaluationJob":{"conditionKeys":[],"resources":[{"name":"model-evaluation-job"}],"description":"Grants permission to get the properties associated with a model-evaluation job. Use this operation to get the status of a model-evaluation job","accessLevel":"Read","resourceTypes":[{"name":"model-evaluation-job","required":true}]},"GetModelImportJob":{"conditionKeys":[],"resources":[{"name":"model-import-job"}],"description":"Grants permission to get the properties associated with a model import job and is used to get the status of a model import job","accessLevel":"Read","resourceTypes":[{"name":"model-import-job","required":true}]},"GetModelInvocationJob":{"conditionKeys":[],"resources":[{"name":"model-invocation-job"}],"description":"Grants permission to retrieve a model invocation job","accessLevel":"Read","resourceTypes":[{"name":"model-invocation-job","required":true}]},"GetModelInvocationLoggingConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an existing Invocation logging configuration","accessLevel":"Read","resourceTypes":[]},"GetPrompt":{"conditionKeys":[],"resources":[{"name":"prompt"},{"name":"prompt-version"}],"description":"Grants permission to retrieve an existing prompt or its version","accessLevel":"Read","resourceTypes":[{"name":"prompt","required":true},{"name":"prompt-version","required":true}]},"GetPromptRouter":{"conditionKeys":[],"resources":[{"name":"default-prompt-router"},{"name":"prompt-router"}],"description":"Grants permission to get the properties associated with a prompt router","accessLevel":"Read","resourceTypes":[{"name":"default-prompt-router","required":true},{"name":"prompt-router","required":true}]},"GetProvisionedModelThroughput":{"conditionKeys":[],"resources":[{"name":"provisioned-model"}],"description":"Grants permission to retrieve a provisioned model throughput","accessLevel":"Read","resourceTypes":[{"name":"provisioned-model","required":true}]},"GetResourcePolicy":{"conditionKeys":[],"resources":[{"name":"custom-model"},{"name":"guardrail"},{"name":"guardrail-profile"}],"description":"Gets the resource policy document for a Bedrock resource","accessLevel":"Read","resourceTypes":[{"name":"custom-model","required":false},{"name":"guardrail","required":false},{"name":"guardrail-profile","required":false}],"permissionOnly":true},"GetSession":{"conditionKeys":[],"resources":[{"name":"session"}],"description":"Grants permission to retrieve an existing session","accessLevel":"Read","resourceTypes":[{"name":"session","required":true}]},"GetUseCaseForModelAccess":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a use case for model access","accessLevel":"Read","resourceTypes":[]},"IngestKnowledgeBaseDocuments":{"conditionKeys":[],"resources":[{"name":"knowledge-base"}],"description":"Grants permission to directly ingest documents into a knowledge base","accessLevel":"Write","resourceTypes":[{"name":"knowledge-base","required":true}]},"InvokeAgent":{"conditionKeys":[],"resources":[{"name":"agent-alias"}],"description":"Grants permission to send user input (text-only) to the alias of an agent for Bedrock","accessLevel":"Read","resourceTypes":[{"name":"agent-alias","required":true}]},"InvokeAutomatedReasoningPolicy":{"conditionKeys":[],"resources":[{"name":"automated-reasoning-policy"},{"name":"automated-reasoning-policy-version"}],"description":"Grants permission to invoke an Automated Reasoning policy","accessLevel":"Read","resourceTypes":[{"name":"automated-reasoning-policy","required":true},{"name":"automated-reasoning-policy-version","required":true}],"permissionOnly":true},"InvokeBlueprintOptimizationAsync":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"blueprint"},{"name":"data-automation-profile"}],"description":"Grants permission to invoke an async job to perform blueprint optimization","accessLevel":"Write","resourceTypes":[{"name":"blueprint","required":true},{"name":"data-automation-profile","required":true}]},"InvokeBlueprintRecommendationAsync":{"conditionKeys":[],"resources":[{"name":"data-automation-profile"}],"description":"Grants permission to invoke blueprint recommendations asynchronously","accessLevel":"Write","resourceTypes":[{"name":"data-automation-profile","required":true}],"permissionOnly":true},"InvokeBuilder":{"conditionKeys":[],"resources":[],"description":"Grants permission to use the conversational builder which aids in building supported bedrock resources","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"InvokeDataAutomation":{"conditionKeys":[],"resources":[{"name":"blueprint"},{"name":"data-automation-profile"},{"name":"data-automation-project"}],"description":"Grants permission to invoke a call to Sync API of Bedrock data automation","accessLevel":"Write","resourceTypes":[{"name":"blueprint","required":true},{"name":"data-automation-profile","required":true},{"name":"data-automation-project","required":true}]},"InvokeDataAutomationAsync":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"blueprint"},{"name":"data-automation-profile"},{"name":"data-automation-project"}],"description":"Grants permission to invoke a Bedrock data automation job","accessLevel":"Write","resourceTypes":[{"name":"blueprint","required":true},{"name":"data-automation-profile","required":true},{"name":"data-automation-project","required":true}]},"InvokeFlow":{"conditionKeys":[],"resources":[{"name":"flow-alias"}],"description":"Grants permission to invoke a prompt flow with user input","accessLevel":"Read","resourceTypes":[{"name":"flow-alias","required":true}]},"InvokeInlineAgent":{"conditionKeys":["bedrock:InlineAgentName"],"resources":[],"description":"Grants permission to send user input (text-only) to the inline agent for Bedrock","accessLevel":"Read","resourceTypes":[]},"InvokeModel":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","bedrock:GuardrailIdentifier","bedrock:InferenceProfileArn","bedrock:PromptRouterArn","bedrock:ServiceTier"],"resources":[{"name":"application-inference-profile"},{"name":"async-invoke"},{"name":"bedrock-marketplace-model-endpoint"},{"name":"custom-model-deployment"},{"name":"default-prompt-router"},{"name":"foundation-model"},{"name":"imported-model"},{"name":"inference-profile"},{"name":"prompt-router"},{"name":"provisioned-model"}],"description":"Grants permission to invoke the specified Bedrock model to run inference using the input provided in the request body","accessLevel":"Read","resourceTypes":[{"name":"application-inference-profile","required":true},{"name":"async-invoke","required":true},{"name":"bedrock-marketplace-model-endpoint","required":true},{"name":"custom-model-deployment","required":true},{"name":"default-prompt-router","required":true},{"name":"foundation-model","required":true},{"name":"imported-model","required":true},{"name":"inference-profile","required":true},{"name":"prompt-router","required":true},{"name":"provisioned-model","required":true}]},"InvokeModelWithResponseStream":{"conditionKeys":["bedrock:GuardrailIdentifier","bedrock:InferenceProfileArn","bedrock:PromptRouterArn","bedrock:ServiceTier"],"resources":[{"name":"application-inference-profile"},{"name":"bedrock-marketplace-model-endpoint"},{"name":"custom-model-deployment"},{"name":"default-prompt-router"},{"name":"foundation-model"},{"name":"imported-model"},{"name":"inference-profile"},{"name":"prompt-router"},{"name":"provisioned-model"}],"description":"Grants permission to invoke the specified Bedrock model to run inference using the input provided in the request body with streaming response","accessLevel":"Read","resourceTypes":[{"name":"application-inference-profile","required":true},{"name":"bedrock-marketplace-model-endpoint","required":true},{"name":"custom-model-deployment","required":true},{"name":"default-prompt-router","required":true},{"name":"foundation-model","required":true},{"name":"imported-model","required":true},{"name":"inference-profile","required":true},{"name":"prompt-router","required":true},{"name":"provisioned-model","required":true}]},"InvokeTool":{"conditionKeys":[],"resources":[{"name":"system-tool"}],"description":"Grants permission to invoke the specified Bedrock tool to run inference","accessLevel":"Read","resourceTypes":[{"name":"system-tool","required":true}]},"ListAgentActionGroups":{"conditionKeys":[],"resources":[{"name":"agent"}],"description":"Grants permission to list action groups in an agent","accessLevel":"List","resourceTypes":[{"name":"agent","required":true}]},"ListAgentAliases":{"conditionKeys":[],"resources":[{"name":"agent"}],"description":"Grants permission to list aliases for an agent","accessLevel":"List","resourceTypes":[{"name":"agent","required":true}]},"ListAgentCollaborators":{"conditionKeys":[],"resources":[{"name":"agent"}],"description":"Grants permission to list collaborators for an agent","accessLevel":"List","resourceTypes":[{"name":"agent","required":true}]},"ListAgentKnowledgeBases":{"conditionKeys":[],"resources":[{"name":"agent"}],"description":"Grants permission to list knowledge bases associated with an agent","accessLevel":"List","resourceTypes":[{"name":"agent","required":true}]},"ListAgentVersions":{"conditionKeys":[],"resources":[{"name":"agent"}],"description":"Grants permission to list existing versions of an agent","accessLevel":"List","resourceTypes":[{"name":"agent","required":true}]},"ListAgents":{"conditionKeys":[],"resources":[],"description":"Grants permission to list existing agents","accessLevel":"List","resourceTypes":[]},"ListAsyncInvokes":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of asynchronous invocations that you have submitted","accessLevel":"List","resourceTypes":[]},"ListAutomatedReasoningPolicies":{"conditionKeys":[],"resources":[{"name":"automated-reasoning-policy"}],"description":"Grants permission to list automated reasoning policies or its versions","accessLevel":"List","resourceTypes":[{"name":"automated-reasoning-policy","required":false}]},"ListAutomatedReasoningPolicyBuildWorkflows":{"conditionKeys":[],"resources":[{"name":"automated-reasoning-policy"}],"description":"Grants permission to list build workflows for an automated reasoning policy","accessLevel":"List","resourceTypes":[{"name":"automated-reasoning-policy","required":true}]},"ListAutomatedReasoningPolicyTestCases":{"conditionKeys":[],"resources":[{"name":"automated-reasoning-policy"}],"description":"Grants permission to list test cases for an automated reasoning policy","accessLevel":"List","resourceTypes":[{"name":"automated-reasoning-policy","required":true}]},"ListAutomatedReasoningPolicyTestResults":{"conditionKeys":[],"resources":[{"name":"automated-reasoning-policy"}],"description":"Grants permission to list test result for an automated reasoning policy","accessLevel":"List","resourceTypes":[{"name":"automated-reasoning-policy","required":true}]},"ListBlueprints":{"conditionKeys":[],"resources":[{"name":"data-automation-project"}],"description":"Grants permission to list existing blueprints for data automation","accessLevel":"List","resourceTypes":[{"name":"data-automation-project","required":false}]},"ListCustomModelDeployments":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the list of custom model deployments that you have submitted","accessLevel":"List","resourceTypes":[]},"ListCustomModels":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of Bedrock custom models that you have created","accessLevel":"List","resourceTypes":[]},"ListDataAutomationProjects":{"conditionKeys":[],"resources":[{"name":"blueprint"}],"description":"Grants permission to list existing data automation projects","accessLevel":"List","resourceTypes":[{"name":"blueprint","required":false}]},"ListDataSources":{"conditionKeys":[],"resources":[{"name":"knowledge-base"}],"description":"Grants permission to list existing data sources in an knowledge base","accessLevel":"List","resourceTypes":[{"name":"knowledge-base","required":true}]},"ListEnforcedGuardrailsConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to list account-level enforced guardrail configurations","accessLevel":"List","resourceTypes":[]},"ListEvaluationJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the list of evaluation jobs that you have submitted","accessLevel":"List","resourceTypes":[]},"ListFlowAliases":{"conditionKeys":[],"resources":[{"name":"flow"}],"description":"Grants permission to list existing aliases of a prompt flow","accessLevel":"List","resourceTypes":[{"name":"flow","required":true}]},"ListFlowExecutionEvents":{"conditionKeys":[],"resources":[{"name":"flow"},{"name":"flow-alias"},{"name":"flow-execution"}],"description":"Grants permission to retrieve events for a flow execution","accessLevel":"List","resourceTypes":[{"name":"flow","required":true},{"name":"flow-alias","required":true},{"name":"flow-execution","required":true}]},"ListFlowExecutions":{"conditionKeys":[],"resources":[{"name":"flow"},{"name":"flow-alias"}],"description":"Grants permission to list executions of a flow or a flow alias","accessLevel":"List","resourceTypes":[{"name":"flow","required":true},{"name":"flow-alias","required":false}]},"ListFlowVersions":{"conditionKeys":[],"resources":[{"name":"flow"}],"description":"Grants permission to list existing versions of a prompt flow","accessLevel":"List","resourceTypes":[{"name":"flow","required":true}]},"ListFlows":{"conditionKeys":[],"resources":[],"description":"Grants permission to list existing prompt flows","accessLevel":"List","resourceTypes":[]},"ListFoundationModelAgreementOffers":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of foundation model agreement offers","accessLevel":"List","resourceTypes":[]},"ListFoundationModels":{"conditionKeys":[],"resources":[],"description":"Grants permission to list Bedrock foundation models that you can use","accessLevel":"List","resourceTypes":[]},"ListGuardrails":{"conditionKeys":[],"resources":[{"name":"guardrail"}],"description":"Grants permission to list guardrails or its versions","accessLevel":"List","resourceTypes":[{"name":"guardrail","required":false}]},"ListImportedModels":{"conditionKeys":[],"resources":[],"description":"Grants permission to get list of Bedrock imported models","accessLevel":"List","resourceTypes":[]},"ListInferenceProfiles":{"conditionKeys":[],"resources":[],"description":"Grants permission to list inference profiles that you can use","accessLevel":"List","resourceTypes":[]},"ListIngestionJobs":{"conditionKeys":[],"resources":[{"name":"knowledge-base"}],"description":"Grants permission to list ingestion jobs in a data source","accessLevel":"List","resourceTypes":[{"name":"knowledge-base","required":true}]},"ListInvocationSteps":{"conditionKeys":[],"resources":[{"name":"session"}],"description":"Grants permission to get list of invocation step from a session","accessLevel":"List","resourceTypes":[{"name":"session","required":true}]},"ListInvocations":{"conditionKeys":[],"resources":[{"name":"session"}],"description":"Grants permission to list invocations in a session","accessLevel":"List","resourceTypes":[{"name":"session","required":true}]},"ListKnowledgeBaseDocuments":{"conditionKeys":[],"resources":[{"name":"knowledge-base"}],"description":"Grants permission to list documents in a knowledge base","accessLevel":"List","resourceTypes":[{"name":"knowledge-base","required":true}]},"ListKnowledgeBases":{"conditionKeys":[],"resources":[],"description":"Grants permission to list existing knowledge bases","accessLevel":"List","resourceTypes":[]},"ListMarketplaceModelEndpoints":{"conditionKeys":[],"resources":[],"description":"Grants permission to list marketplace model endpoints that you can use","accessLevel":"Read","resourceTypes":[]},"ListModelCopyJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the list of model copy jobs that you have submitted","accessLevel":"List","resourceTypes":[]},"ListModelCustomizationJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the list of model customization jobs that you have submitted","accessLevel":"List","resourceTypes":[]},"ListModelEvaluationJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the list of model evaluation jobs that you have submitted","accessLevel":"List","resourceTypes":[]},"ListModelImportJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to get list of model import jobs","accessLevel":"List","resourceTypes":[]},"ListModelInvocationJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to list model invocation jobs that you created earlier","accessLevel":"List","resourceTypes":[]},"ListPromptRouters":{"conditionKeys":[],"resources":[],"description":"Grants permission to list prompt routers that you can use","accessLevel":"List","resourceTypes":[]},"ListPrompts":{"conditionKeys":[],"resources":[{"name":"prompt"}],"description":"Grants permission to list existing prompts","accessLevel":"List","resourceTypes":[{"name":"prompt","required":false}]},"ListProvisionedModelThroughputs":{"conditionKeys":[],"resources":[],"description":"Grants permission to list provisioned model throughputs that you created earlier","accessLevel":"List","resourceTypes":[]},"ListSessions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list existing sessions","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"agent"},{"name":"agent-alias"},{"name":"application-inference-profile"},{"name":"async-invoke"},{"name":"automated-reasoning-policy"},{"name":"automated-reasoning-policy-version"},{"name":"blueprint"},{"name":"blueprint-optimization-invocation"},{"name":"custom-model"},{"name":"custom-model-deployment"},{"name":"data-automation-invocation-job"},{"name":"data-automation-project"},{"name":"evaluation-job"},{"name":"flow"},{"name":"flow-alias"},{"name":"guardrail"},{"name":"imported-model"},{"name":"knowledge-base"},{"name":"model-copy-job"},{"name":"model-customization-job"},{"name":"model-evaluation-job"},{"name":"model-import-job"},{"name":"model-invocation-job"},{"name":"prompt"},{"name":"prompt-router"},{"name":"prompt-version"},{"name":"provisioned-model"},{"name":"session"}],"description":"Grants permission to list tags for a Bedrock resource","accessLevel":"Read","resourceTypes":[{"name":"agent","required":true},{"name":"agent-alias","required":true},{"name":"application-inference-profile","required":true},{"name":"async-invoke","required":true},{"name":"automated-reasoning-policy","required":true},{"name":"automated-reasoning-policy-version","required":true},{"name":"blueprint","required":true},{"name":"blueprint-optimization-invocation","required":true},{"name":"custom-model","required":true},{"name":"custom-model-deployment","required":true},{"name":"data-automation-invocation-job","required":true},{"name":"data-automation-project","required":true},{"name":"evaluation-job","required":true},{"name":"flow","required":true},{"name":"flow-alias","required":true},{"name":"guardrail","required":true},{"name":"imported-model","required":true},{"name":"knowledge-base","required":true},{"name":"model-copy-job","required":true},{"name":"model-customization-job","required":true},{"name":"model-evaluation-job","required":true},{"name":"model-import-job","required":true},{"name":"model-invocation-job","required":true},{"name":"prompt","required":true},{"name":"prompt-router","required":true},{"name":"prompt-version","required":true},{"name":"provisioned-model","required":true},{"name":"session","required":true}]},"OptimizePrompt":{"conditionKeys":[],"resources":[],"description":"Grants permission to optimize a prompt with user input","accessLevel":"Read","resourceTypes":[]},"PrepareAgent":{"conditionKeys":[],"resources":[{"name":"agent"}],"description":"Grants permission to prepare an existing agent to receive runtime requests","accessLevel":"Write","resourceTypes":[{"name":"agent","required":true}]},"PrepareFlow":{"conditionKeys":[],"resources":[{"name":"flow"}],"description":"Grants permission to apply the latest changes made to a prompt flow, so that they are reflected at runtime","accessLevel":"Write","resourceTypes":[{"name":"flow","required":true}]},"PutEnforcedGuardrailConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to set account-level enforced guardrail configuration","accessLevel":"Write","resourceTypes":[]},"PutFoundationModelEntitlement":{"conditionKeys":[],"resources":[],"description":"Grants permission to put entitlement to access a serverless foundation model. Do not use to restrict model access","accessLevel":"Write","resourceTypes":[]},"PutInvocationStep":{"conditionKeys":[],"resources":[{"name":"session"}],"description":"Grants permission to put an invocation step into an invocation in session","accessLevel":"Write","resourceTypes":[{"name":"session","required":true}]},"PutModelInvocationLoggingConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an existing Invocation logging configuration","accessLevel":"Write","resourceTypes":[]},"PutResourcePolicy":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"custom-model"},{"name":"guardrail"},{"name":"guardrail-profile"}],"description":"Adds a resource policy for a Bedrock resource","accessLevel":"Write","resourceTypes":[{"name":"custom-model","required":false},{"name":"guardrail","required":false},{"name":"guardrail-profile","required":false}],"permissionOnly":true},"PutUseCaseForModelAccess":{"conditionKeys":[],"resources":[],"description":"Grants permission to put a use case for model access","accessLevel":"Write","resourceTypes":[]},"RegisterMarketplaceModelEndpoint":{"conditionKeys":[],"resources":[{"name":"bedrock-marketplace-model-endpoint"}],"description":"Grants permission to register a sagemaker endpoint as a marketplace model endpoint","accessLevel":"Write","resourceTypes":[{"name":"bedrock-marketplace-model-endpoint","required":true}]},"RenderPrompt":{"conditionKeys":[],"resources":[{"name":"prompt"},{"name":"prompt-version"}],"description":"Grants permission to render an existing prompt or its version","accessLevel":"Read","resourceTypes":[{"name":"prompt","required":true},{"name":"prompt-version","required":true}],"permissionOnly":true},"Rerank":{"conditionKeys":[],"resources":[],"description":"Grants permission to rank documents based on user input","accessLevel":"Write","resourceTypes":[]},"Retrieve":{"conditionKeys":[],"resources":[{"name":"knowledge-base"}],"description":"Grants permission to retrieve ingested data from a knowledge base","accessLevel":"Read","resourceTypes":[{"name":"knowledge-base","required":true}]},"RetrieveAndGenerate":{"conditionKeys":[],"resources":[],"description":"Grants permission to send user input to perform retrieval and generation","accessLevel":"Write","resourceTypes":[]},"StartAutomatedReasoningPolicyBuildWorkflow":{"conditionKeys":[],"resources":[{"name":"automated-reasoning-policy"}],"description":"Grants permission to start a build workflow for an automated reasoning policy","accessLevel":"Write","resourceTypes":[{"name":"automated-reasoning-policy","required":true}]},"StartAutomatedReasoningPolicyTestWorkflow":{"conditionKeys":[],"resources":[{"name":"automated-reasoning-policy"}],"description":"Grants permission to start a test workflow for an automated reasoning policy","accessLevel":"Write","resourceTypes":[{"name":"automated-reasoning-policy","required":true}]},"StartFlowExecution":{"conditionKeys":[],"resources":[{"name":"flow"},{"name":"flow-alias"}],"description":"Grants permission to start an execution of a flow alias","accessLevel":"Write","resourceTypes":[{"name":"flow","required":true},{"name":"flow-alias","required":true}]},"StartIngestionJob":{"conditionKeys":[],"resources":[{"name":"knowledge-base"}],"description":"Grants permission to start an ingestion job","accessLevel":"Write","resourceTypes":[{"name":"knowledge-base","required":true}]},"StopEvaluationJob":{"conditionKeys":[],"resources":[{"name":"evaluation-job"}],"description":"Grants permission to stop a evaluation job while in progress","accessLevel":"Write","resourceTypes":[{"name":"evaluation-job","required":true}]},"StopFlowExecution":{"conditionKeys":[],"resources":[{"name":"flow"},{"name":"flow-alias"},{"name":"flow-execution"}],"description":"Grants permission to stop an execution of a flow alias","accessLevel":"Write","resourceTypes":[{"name":"flow","required":true},{"name":"flow-alias","required":true},{"name":"flow-execution","required":true}]},"StopIngestionJob":{"conditionKeys":[],"resources":[{"name":"knowledge-base"}],"description":"Grants permission to stop an ingestion job","accessLevel":"Write","resourceTypes":[{"name":"knowledge-base","required":true}]},"StopModelCustomizationJob":{"conditionKeys":[],"resources":[{"name":"model-customization-job"}],"description":"Grants permission to stop a Bedrock model customization job while in progress","accessLevel":"Write","resourceTypes":[{"name":"model-customization-job","required":true}]},"StopModelInvocationJob":{"conditionKeys":[],"resources":[{"name":"model-invocation-job"}],"description":"Grants permission to stop a model invocation job that you started earlier","accessLevel":"Write","resourceTypes":[{"name":"model-invocation-job","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"agent"},{"name":"agent-alias"},{"name":"application-inference-profile"},{"name":"async-invoke"},{"name":"automated-reasoning-policy"},{"name":"automated-reasoning-policy-version"},{"name":"blueprint"},{"name":"blueprint-optimization-invocation"},{"name":"custom-model"},{"name":"custom-model-deployment"},{"name":"data-automation-invocation-job"},{"name":"data-automation-project"},{"name":"evaluation-job"},{"name":"flow"},{"name":"flow-alias"},{"name":"guardrail"},{"name":"imported-model"},{"name":"knowledge-base"},{"name":"model-copy-job"},{"name":"model-customization-job"},{"name":"model-evaluation-job"},{"name":"model-import-job"},{"name":"model-invocation-job"},{"name":"prompt"},{"name":"prompt-router"},{"name":"prompt-version"},{"name":"provisioned-model"},{"name":"session"}],"description":"Grants permission to Tag a Bedrock resource","accessLevel":"Tagging","resourceTypes":[{"name":"agent","required":false},{"name":"agent-alias","required":false},{"name":"application-inference-profile","required":false},{"name":"async-invoke","required":false},{"name":"automated-reasoning-policy","required":false},{"name":"automated-reasoning-policy-version","required":false},{"name":"blueprint","required":false},{"name":"blueprint-optimization-invocation","required":false},{"name":"custom-model","required":false},{"name":"custom-model-deployment","required":false},{"name":"data-automation-invocation-job","required":false},{"name":"data-automation-project","required":false},{"name":"evaluation-job","required":false},{"name":"flow","required":false},{"name":"flow-alias","required":false},{"name":"guardrail","required":false},{"name":"imported-model","required":false},{"name":"knowledge-base","required":false},{"name":"model-copy-job","required":false},{"name":"model-customization-job","required":false},{"name":"model-evaluation-job","required":false},{"name":"model-import-job","required":false},{"name":"model-invocation-job","required":false},{"name":"prompt","required":false},{"name":"prompt-router","required":false},{"name":"prompt-version","required":false},{"name":"provisioned-model","required":false},{"name":"session","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"agent"},{"name":"agent-alias"},{"name":"application-inference-profile"},{"name":"async-invoke"},{"name":"automated-reasoning-policy"},{"name":"automated-reasoning-policy-version"},{"name":"blueprint"},{"name":"blueprint-optimization-invocation"},{"name":"custom-model"},{"name":"custom-model-deployment"},{"name":"data-automation-invocation-job"},{"name":"data-automation-project"},{"name":"evaluation-job"},{"name":"flow"},{"name":"flow-alias"},{"name":"guardrail"},{"name":"imported-model"},{"name":"knowledge-base"},{"name":"model-copy-job"},{"name":"model-customization-job"},{"name":"model-evaluation-job"},{"name":"model-import-job"},{"name":"model-invocation-job"},{"name":"prompt"},{"name":"prompt-router"},{"name":"prompt-version"},{"name":"provisioned-model"},{"name":"session"}],"description":"Grants permission to Untag a Bedrock resource","accessLevel":"Tagging","resourceTypes":[{"name":"agent","required":false},{"name":"agent-alias","required":false},{"name":"application-inference-profile","required":false},{"name":"async-invoke","required":false},{"name":"automated-reasoning-policy","required":false},{"name":"automated-reasoning-policy-version","required":false},{"name":"blueprint","required":false},{"name":"blueprint-optimization-invocation","required":false},{"name":"custom-model","required":false},{"name":"custom-model-deployment","required":false},{"name":"data-automation-invocation-job","required":false},{"name":"data-automation-project","required":false},{"name":"evaluation-job","required":false},{"name":"flow","required":false},{"name":"flow-alias","required":false},{"name":"guardrail","required":false},{"name":"imported-model","required":false},{"name":"knowledge-base","required":false},{"name":"model-copy-job","required":false},{"name":"model-customization-job","required":false},{"name":"model-evaluation-job","required":false},{"name":"model-import-job","required":false},{"name":"model-invocation-job","required":false},{"name":"prompt","required":false},{"name":"prompt-router","required":false},{"name":"prompt-version","required":false},{"name":"provisioned-model","required":false},{"name":"session","required":false}]},"UpdateAgent":{"conditionKeys":[],"resources":[{"name":"agent"}],"description":"Grants permission to update an existing agent","accessLevel":"Write","resourceTypes":[{"name":"agent","required":true}]},"UpdateAgentActionGroup":{"conditionKeys":[],"resources":[{"name":"agent"}],"description":"Grants permission to update an existing action group","accessLevel":"Write","resourceTypes":[{"name":"agent","required":true}]},"UpdateAgentAlias":{"conditionKeys":[],"resources":[{"name":"agent-alias"}],"description":"Grants permission to update an existing alias","accessLevel":"Write","resourceTypes":[{"name":"agent-alias","required":true}]},"UpdateAgentCollaborator":{"conditionKeys":[],"resources":[{"name":"agent"}],"description":"Grants permission to update an existing collaborator","accessLevel":"Write","resourceTypes":[{"name":"agent","required":true}]},"UpdateAgentKnowledgeBase":{"conditionKeys":[],"resources":[{"name":"agent"},{"name":"knowledge-base"}],"description":"Grants permission to update a knowledge base associated with an agent","accessLevel":"Write","resourceTypes":[{"name":"agent","required":true},{"name":"knowledge-base","required":true}]},"UpdateAutomatedReasoningPolicy":{"conditionKeys":[],"resources":[{"name":"automated-reasoning-policy"}],"description":"Grants permission to update an automated reasoning policy","accessLevel":"Write","resourceTypes":[{"name":"automated-reasoning-policy","required":true}]},"UpdateAutomatedReasoningPolicyAnnotations":{"conditionKeys":[],"resources":[{"name":"automated-reasoning-policy"}],"description":"Grants permission to update annotations for a build workflow for an automated reasoning policy","accessLevel":"Write","resourceTypes":[{"name":"automated-reasoning-policy","required":true}]},"UpdateAutomatedReasoningPolicyTestCase":{"conditionKeys":[],"resources":[{"name":"automated-reasoning-policy"}],"description":"Grants permission to update a test case for automated reasoning policy","accessLevel":"Write","resourceTypes":[{"name":"automated-reasoning-policy","required":true}]},"UpdateBlueprint":{"conditionKeys":[],"resources":[{"name":"blueprint"}],"description":"Grants permission to update a blueprint for data automation","accessLevel":"Write","resourceTypes":[{"name":"blueprint","required":true}]},"UpdateCustomModelDeployment":{"conditionKeys":[],"resources":[{"name":"custom-model"},{"name":"custom-model-deployment"}],"description":"Grants permission to update an existing custom model deployment with a new custom model","accessLevel":"Write","resourceTypes":[{"name":"custom-model","required":true},{"name":"custom-model-deployment","required":true}]},"UpdateDataAutomationProject":{"conditionKeys":[],"resources":[{"name":"blueprint"},{"name":"data-automation-project"}],"description":"Grants permission to update a data automation project","accessLevel":"Write","resourceTypes":[{"name":"data-automation-project","required":true},{"name":"blueprint","required":false}]},"UpdateDataSource":{"conditionKeys":[],"resources":[{"name":"knowledge-base"}],"description":"Grants permission to update a data source","accessLevel":"Write","resourceTypes":[{"name":"knowledge-base","required":true}]},"UpdateFlow":{"conditionKeys":[],"resources":[{"name":"flow"}],"description":"Grants permission to update a prompt flow","accessLevel":"Write","resourceTypes":[{"name":"flow","required":true}]},"UpdateFlowAlias":{"conditionKeys":[],"resources":[{"name":"flow-alias"}],"description":"Grants permission to update the configuration of an alias of a prompt flow","accessLevel":"Write","resourceTypes":[{"name":"flow-alias","required":true}]},"UpdateGuardrail":{"conditionKeys":[],"resources":[{"name":"automated-reasoning-policy"},{"name":"automated-reasoning-policy-version"},{"name":"guardrail"},{"name":"guardrail-profile"}],"description":"Grants permission to update a guardrail","accessLevel":"Write","resourceTypes":[{"name":"guardrail","required":true},{"name":"automated-reasoning-policy","required":false},{"name":"automated-reasoning-policy-version","required":false},{"name":"guardrail-profile","required":false}]},"UpdateKnowledgeBase":{"conditionKeys":[],"resources":[{"name":"knowledge-base"}],"description":"Grants permission to update a knowledge base","accessLevel":"Write","resourceTypes":[{"name":"knowledge-base","required":true}]},"UpdateMarketplaceModelEndpoint":{"conditionKeys":[],"resources":[{"name":"bedrock-marketplace-model-endpoint"}],"description":"Grants permission to update a marketplace model endpoint","accessLevel":"Write","resourceTypes":[{"name":"bedrock-marketplace-model-endpoint","required":true}]},"UpdatePrompt":{"conditionKeys":[],"resources":[{"name":"prompt"}],"description":"Grants permission to update a prompt","accessLevel":"Write","resourceTypes":[{"name":"prompt","required":true}]},"UpdateProvisionedModelThroughput":{"conditionKeys":[],"resources":[{"name":"custom-model"},{"name":"foundation-model"},{"name":"provisioned-model"}],"description":"Grants permission to update a provisioned model throughput that you created earlier","accessLevel":"Write","resourceTypes":[{"name":"custom-model","required":true},{"name":"foundation-model","required":true},{"name":"provisioned-model","required":true}]},"UpdateSession":{"conditionKeys":[],"resources":[{"name":"session"}],"description":"Grants permission to update an existing session","accessLevel":"Write","resourceTypes":[{"name":"session","required":true}]},"ValidateFlowDefinition":{"conditionKeys":[],"resources":[],"description":"Grants permission to validate prompt flow definitions","accessLevel":"Read","resourceTypes":[]}},"resources":[{"name":"agent","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:agent/${AgentId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"agent-alias","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:agent-alias/${AgentId}/${AgentAliasId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"application-inference-profile","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:application-inference-profile/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"async-invoke","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:async-invoke/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"automated-reasoning-policy","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/${AutomatedReasoningPolicyId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"automated-reasoning-policy-version","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/${AutomatedReasoningPolicyId}:${AutomatedReasoningPolicyVersion}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"bedrock-marketplace-model-endpoint","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:marketplace/model-endpoint/all-access"],"conditionKeys":[]},{"name":"blueprint","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:blueprint/${BlueprintId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"blueprint-optimization-invocation","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:blueprint-optimization-invocation/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"custom-model","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:custom-model/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"custom-model-deployment","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:custom-model-deployment/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"data-automation-invocation-job","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:data-automation-invocation/${JobId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"data-automation-profile","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:data-automation-profile/${ProfileId}"],"conditionKeys":[]},{"name":"data-automation-project","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:data-automation-project/${ProjectId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"default-prompt-router","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:default-prompt-router/${ResourceId}"],"conditionKeys":[]},{"name":"evaluation-job","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:evaluation-job/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"flow","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:flow/${FlowId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"flow-alias","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:flow/${FlowId}/alias/${FlowAliasId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"flow-execution","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:flow/${FlowId}/alias/${FlowAliasId}/execution/${FlowExecutionId}"],"conditionKeys":[]},{"name":"foundation-model","arnFormats":["arn:${Partition}:bedrock:${Region}::foundation-model/${ResourceId}"],"conditionKeys":[]},{"name":"guardrail","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:guardrail/${GuardrailId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"guardrail-profile","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:guardrail-profile/${ResourceId}"],"conditionKeys":[]},{"name":"imported-model","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:imported-model/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"inference-profile","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:inference-profile/${ResourceId}"],"conditionKeys":[]},{"name":"knowledge-base","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/${KnowledgeBaseId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"model-copy-job","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:model-copy-job/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"model-customization-job","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:model-customization-job/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"model-evaluation-job","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:model-evaluation-job/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"model-import-job","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:model-import-job/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"model-invocation-job","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:model-invocation-job/${JobIdentifier}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"prompt","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:prompt/${PromptId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"prompt-router","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:prompt-router/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"prompt-version","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:prompt/${PromptId}:${PromptVersion}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"provisioned-model","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:provisioned-model/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"session","arnFormats":["arn:${Partition}:bedrock:${Region}:${Account}:session/${SessionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"system-tool","arnFormats":["arn:${Partition}:bedrock::${Account}:system-tool/${ResourceId}"],"conditionKeys":[]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by creating requests based on the allowed set of values for each of the mandatory tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by having actions based on the tag value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by creating requests based on the presence of mandatory tags in the request"},"bedrock:BearerTokenType":{"types":["String"],"description":"Filters access by the Short-term or Long-term bearer tokens"},"bedrock:GuardrailIdentifier":{"types":["ARN"],"description":"Filters access by the GuardrailIdentifier containing the GuardrailArn or the GuardrailArn:NumericVersion"},"bedrock:InferenceProfileArn":{"types":["ARN"],"description":"Filters access by the specified inference profile"},"bedrock:InlineAgentName":{"types":["String"],"description":"Filters access by the Inline Agent Names, this will be used in InvokeInlineAgent API names"},"bedrock:PromptRouterArn":{"types":["ARN"],"description":"Filters access by the specified prompt router"},"bedrock:ServiceTier":{"types":["String"],"description":"Filters access by the specified ServiceTier"},"bedrock:ThirdPartyKnowledgeBaseCredentialsSecretArn":{"types":["ARN"],"description":"Filters access by the secretArn containing the credentials of the third party platform"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"billing","actions":{"AssociateSourceViews":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"billingview"}],"description":"Grants permission to associate source views to a billing view","accessLevel":"Write","resourceTypes":[{"name":"billingview","required":true}],"dependentActions":["billing:UseSourceView","iam:CreateServiceLinkedRole"]},"CreateBillingView":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"billingview"}],"description":"Grants permission to create a billing view","accessLevel":"Write","resourceTypes":[{"name":"billingview","required":true}],"dependentActions":["billing:UseSourceView","iam:CreateServiceLinkedRole"]},"DeleteBillingView":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"billingview"}],"description":"Grants permission to delete a billing view","accessLevel":"Write","resourceTypes":[{"name":"billingview","required":true}]},"DeleteResourcePolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"billingview"}],"description":"Grants permission to delete a billing view resource policy","accessLevel":"Permissions management","resourceTypes":[{"name":"billingview","required":true}],"permissionOnly":true},"DisassociateSourceViews":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"billingview"}],"description":"Grants permission to disassociate source views from a billing view","accessLevel":"Write","resourceTypes":[{"name":"billingview","required":true}]},"GetBillingData":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"billingview"}],"description":"Grants permission to perform queries on billing information","accessLevel":"Read","resourceTypes":[{"name":"billingview","required":false}],"permissionOnly":true},"GetBillingDetails":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"billingview"}],"description":"Grants permission to view detailed line item billing information","accessLevel":"Read","resourceTypes":[{"name":"billingview","required":false}],"permissionOnly":true},"GetBillingNotifications":{"conditionKeys":[],"resources":[],"description":"Grants permission to view notifications sent by AWS related to your accounts billing information","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetBillingPreferences":{"conditionKeys":[],"resources":[],"description":"Grants permission to view billing preferences such as reserved instance, savings plans and credits sharing","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetBillingView":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"billingview"}],"description":"Grants permission to get the metadata for a specified billing view","accessLevel":"Read","resourceTypes":[{"name":"billingview","required":true}]},"GetBillingViewData":{"conditionKeys":[],"resources":[{"name":"billingview"}],"description":"Grants permission to get cost and usage data for a specified billng view","accessLevel":"Read","resourceTypes":[{"name":"billingview","required":true}],"permissionOnly":true},"GetContractInformation":{"conditionKeys":[],"resources":[],"description":"Grants permission to view the account's contract information including the contract number, end-user organization names, PO numbers and if the account is used to service public-sector customers","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetCredits":{"conditionKeys":[],"resources":[],"description":"Grants permission to view credits that have been redeemed","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetIAMAccessPreference":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the state of the Allow IAM Access billing preference","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetResourcePolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"billingview"}],"description":"Grants permission to get the resource policy specified billing view","accessLevel":"Permissions management","resourceTypes":[{"name":"billingview","required":true}]},"GetSellerOfRecord":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the account's default Seller of Record","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"ListBillingViews":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a list of all your available billing views","accessLevel":"Read","resourceTypes":[]},"ListSourceViewsForBillingView":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"billingview"}],"description":"Grants permission to get the list of source views for a specified billing view","accessLevel":"List","resourceTypes":[{"name":"billingview","required":true}]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"billingview"}],"description":"Grants permission to get the list of tags for a specified billing view","accessLevel":"Read","resourceTypes":[{"name":"billingview","required":true}]},"PutContractInformation":{"conditionKeys":[],"resources":[],"description":"Grants permission to set the account's contract information end-user organization names and if the account is used to service public-sector customers","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"PutResourcePolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"billingview"}],"description":"Grants permission to put a billing view resource policy","accessLevel":"Permissions management","resourceTypes":[{"name":"billingview","required":true}],"permissionOnly":true},"RedeemCredits":{"conditionKeys":[],"resources":[],"description":"Grants permission to redeem an AWS credit","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"billingview"}],"description":"Grants permission to add tags to a specified billing view","accessLevel":"Tagging","resourceTypes":[{"name":"billingview","required":true}]},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"billingview"}],"description":"Grants permission to remove a tag from a specified billing view","accessLevel":"Tagging","resourceTypes":[{"name":"billingview","required":true}]},"UpdateBillingPreferences":{"conditionKeys":[],"resources":[],"description":"Grants permission to update billing preferences such as reserved instance, savings plans and credits sharing","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"UpdateBillingView":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"billingview"}],"description":"Grants permission to update a billing view","accessLevel":"Write","resourceTypes":[{"name":"billingview","required":true}]},"UpdateIAMAccessPreference":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the Allow IAM Access billing preference","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"UseSourceView":{"conditionKeys":[],"resources":[],"description":"Grants permission to use a billing view as a data source for other billing views","accessLevel":"Read","resourceTypes":[],"permissionOnly":true}},"resources":[{"name":"billingview","arnFormats":["arn:${Partition}:billing::${Account}:billingview/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"billingconductor","actions":{"AssociateAccounts":{"conditionKeys":[],"resources":[{"name":"billinggroup"}],"description":"Grants permission to associate between one and 30 accounts to a billing group","accessLevel":"Write","resourceTypes":[{"name":"billinggroup","required":true}]},"AssociatePricingRules":{"conditionKeys":[],"resources":[{"name":"pricingplan"},{"name":"pricingrule"}],"description":"Grants permission to associate pricing rules","accessLevel":"Write","resourceTypes":[{"name":"pricingplan","required":true},{"name":"pricingrule","required":true}]},"BatchAssociateResourcesToCustomLineItem":{"conditionKeys":[],"resources":[{"name":"customlineitem"}],"description":"Grants permission to batch associate resources to a percentage custom line item","accessLevel":"Write","resourceTypes":[{"name":"customlineitem","required":true}]},"BatchDisassociateResourcesFromCustomLineItem":{"conditionKeys":[],"resources":[{"name":"customlineitem"}],"description":"Grants permission to batch disassociate resources from a percentage custom line item","accessLevel":"Write","resourceTypes":[{"name":"customlineitem","required":true}]},"CreateBillingGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"pricingplan"}],"description":"Grants permission to create a billing group","accessLevel":"Write","resourceTypes":[{"name":"pricingplan","required":true}]},"CreateCustomLineItem":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"billinggroup"}],"description":"Grants permission to create a custom line item","accessLevel":"Write","resourceTypes":[{"name":"billinggroup","required":true}]},"CreatePricingPlan":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"pricingrule"}],"description":"Grants permission to create a pricing plan","accessLevel":"Write","resourceTypes":[{"name":"pricingrule","required":true}]},"CreatePricingRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a pricing rule","accessLevel":"Write","resourceTypes":[]},"DeleteBillingGroup":{"conditionKeys":[],"resources":[{"name":"billinggroup"}],"description":"Grants permission to delete a billing group","accessLevel":"Write","resourceTypes":[{"name":"billinggroup","required":true}]},"DeleteCustomLineItem":{"conditionKeys":[],"resources":[{"name":"customlineitem"}],"description":"Grants permission to delete a custom line item","accessLevel":"Write","resourceTypes":[{"name":"customlineitem","required":true}]},"DeletePricingPlan":{"conditionKeys":[],"resources":[{"name":"pricingplan"}],"description":"Grants permission to delete a pricing plan","accessLevel":"Write","resourceTypes":[{"name":"pricingplan","required":true}]},"DeletePricingRule":{"conditionKeys":[],"resources":[{"name":"pricingrule"}],"description":"Grants permission to delete a pricing rule","accessLevel":"Write","resourceTypes":[{"name":"pricingrule","required":true}]},"DisassociateAccounts":{"conditionKeys":[],"resources":[{"name":"billinggroup"}],"description":"Grants permission to detach between one and 30 accounts from a billing group","accessLevel":"Write","resourceTypes":[{"name":"billinggroup","required":true}]},"DisassociatePricingRules":{"conditionKeys":[],"resources":[{"name":"pricingplan"},{"name":"pricingrule"}],"description":"Grants permission to disassociate pricing rules","accessLevel":"Write","resourceTypes":[{"name":"pricingplan","required":true},{"name":"pricingrule","required":true}]},"GetBillingGroupCostReport":{"conditionKeys":[],"resources":[{"name":"billinggroup"}],"description":"Grants permission to view the billing group cost report for the specified billing group","accessLevel":"Read","resourceTypes":[{"name":"billinggroup","required":true}]},"ListAccountAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the linked accounts of the payer account for the given billing period while also providing the billing group the linked accounts belong to","accessLevel":"List","resourceTypes":[]},"ListBillingGroupCostReports":{"conditionKeys":[],"resources":[],"description":"Grants permission to view the billing group cost report","accessLevel":"Read","resourceTypes":[]},"ListBillingGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to view the details of billing groups","accessLevel":"Read","resourceTypes":[]},"ListCustomLineItemVersions":{"conditionKeys":[],"resources":[{"name":"customlineitem"}],"description":"Grants permission to view custom line item versions","accessLevel":"Read","resourceTypes":[{"name":"customlineitem","required":true}]},"ListCustomLineItems":{"conditionKeys":[],"resources":[],"description":"Grants permission to view custom line item details","accessLevel":"Read","resourceTypes":[]},"ListPricingPlans":{"conditionKeys":[],"resources":[],"description":"Grants permission to view the pricing plans details","accessLevel":"Read","resourceTypes":[]},"ListPricingPlansAssociatedWithPricingRule":{"conditionKeys":[],"resources":[{"name":"pricingrule"}],"description":"Grants permission to list pricing plans associated with a pricing rule","accessLevel":"List","resourceTypes":[{"name":"pricingrule","required":true}]},"ListPricingRules":{"conditionKeys":[],"resources":[],"description":"Grants permission to view pricing rules details","accessLevel":"Read","resourceTypes":[]},"ListPricingRulesAssociatedToPricingPlan":{"conditionKeys":[],"resources":[{"name":"pricingplan"}],"description":"Grants permission to list pricing rules associated to a pricing plan","accessLevel":"List","resourceTypes":[{"name":"pricingplan","required":true}]},"ListResourcesAssociatedToCustomLineItem":{"conditionKeys":[],"resources":[{"name":"customlineitem"}],"description":"Grants permission to list resources associated to a percentage custom line item","accessLevel":"List","resourceTypes":[{"name":"customlineitem","required":true}]},"ListTagsForResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"billinggroup"},{"name":"customlineitem"},{"name":"pricingplan"},{"name":"pricingrule"}],"description":"Grants permission to list tags of a resource","accessLevel":"Read","resourceTypes":[{"name":"billinggroup","required":false},{"name":"customlineitem","required":false},{"name":"pricingplan","required":false},{"name":"pricingrule","required":false}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"billinggroup"},{"name":"customlineitem"},{"name":"pricingplan"},{"name":"pricingrule"}],"description":"Grants permission to tag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"billinggroup","required":false},{"name":"customlineitem","required":false},{"name":"pricingplan","required":false},{"name":"pricingrule","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"billinggroup"},{"name":"customlineitem"},{"name":"pricingplan"},{"name":"pricingrule"}],"description":"Grants permission to untag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"billinggroup","required":false},{"name":"customlineitem","required":false},{"name":"pricingplan","required":false},{"name":"pricingrule","required":false}]},"UpdateBillingGroup":{"conditionKeys":[],"resources":[{"name":"billinggroup"}],"description":"Grants permission to update a billing group","accessLevel":"Write","resourceTypes":[{"name":"billinggroup","required":true}]},"UpdateCustomLineItem":{"conditionKeys":[],"resources":[{"name":"customlineitem"}],"description":"Grants permission to update a custom line item","accessLevel":"Write","resourceTypes":[{"name":"customlineitem","required":true}]},"UpdatePricingPlan":{"conditionKeys":[],"resources":[{"name":"pricingplan"}],"description":"Grants permission to update a pricing plan","accessLevel":"Write","resourceTypes":[{"name":"pricingplan","required":true}]},"UpdatePricingRule":{"conditionKeys":[],"resources":[{"name":"pricingrule"}],"description":"Grants permission to update a pricing rule","accessLevel":"Write","resourceTypes":[{"name":"pricingrule","required":true}]}},"resources":[{"name":"billinggroup","arnFormats":["arn:${Partition}:billingconductor::${Account}:billinggroup/${BillingGroupId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"customlineitem","arnFormats":["arn:${Partition}:billingconductor::${Account}:customlineitem/${CustomLineItemId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"pricingplan","arnFormats":["arn:${Partition}:billingconductor::${Account}:pricingplan/${PricingPlanId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"pricingrule","arnFormats":["arn:${Partition}:billingconductor::${Account}:pricingrule/${PricingRuleId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"braket","actions":{"AcceptUserAgreement":{"conditionKeys":[],"resources":[],"description":"Grants permission to accept the Amazon Braket user agreement","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CancelJob":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to cancel a job","accessLevel":"Write","resourceTypes":[{"name":"job","required":true}]},"CancelQuantumTask":{"conditionKeys":[],"resources":[{"name":"quantum-task"}],"description":"Grants permission to cancel a quantum task","accessLevel":"Write","resourceTypes":[{"name":"quantum-task","required":true}]},"CreateJob":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a job","accessLevel":"Write","resourceTypes":[]},"CreateQuantumTask":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a quantum task","accessLevel":"Write","resourceTypes":[]},"CreateSpendingLimit":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a spending limit","accessLevel":"Write","resourceTypes":[]},"DeleteSpendingLimit":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to delete a spending limit","accessLevel":"Write","resourceTypes":[]},"GetDevice":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about the devices available in Amazon Braket","accessLevel":"Read","resourceTypes":[]},"GetJob":{"conditionKeys":[],"resources":[{"name":"job"}],"description":"Grants permission to retrieve jobs","accessLevel":"Read","resourceTypes":[{"name":"job","required":true}]},"GetQuantumTask":{"conditionKeys":[],"resources":[{"name":"quantum-task"}],"description":"Grants permission to retrieve quantum tasks","accessLevel":"Read","resourceTypes":[{"name":"quantum-task","required":true}]},"GetServiceLinkedRoleStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to check if the Amazon Braket service linked role has been created","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetUserAgreementStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to check if the account has accepted the Amazon Braket user agreement","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"job"},{"name":"quantum-task"},{"name":"spending-limit"}],"description":"Grants permission to listing the tags that have been applied to the quantum task resource or the job","accessLevel":"Read","resourceTypes":[{"name":"job","required":false},{"name":"quantum-task","required":false},{"name":"spending-limit","required":false}]},"SearchDevices":{"conditionKeys":[],"resources":[],"description":"Grants permission to search for devices available in Amazon Braket","accessLevel":"Read","resourceTypes":[]},"SearchJobs":{"conditionKeys":[],"resources":[],"description":"Grants permission to search for jobs","accessLevel":"Read","resourceTypes":[]},"SearchQuantumTasks":{"conditionKeys":[],"resources":[],"description":"Grants permission to search for quantum tasks","accessLevel":"Read","resourceTypes":[]},"SearchSpendingLimits":{"conditionKeys":[],"resources":[],"description":"Grants permission to search for spending limit","accessLevel":"Read","resourceTypes":[]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"job"},{"name":"quantum-task"},{"name":"spending-limit"}],"description":"Grants permission to add one or more tags to a quantum task or a hybrid job","accessLevel":"Tagging","resourceTypes":[{"name":"job","required":false},{"name":"quantum-task","required":false},{"name":"spending-limit","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"job"},{"name":"quantum-task"},{"name":"spending-limit"}],"description":"Grants permission to remove one or more tags from a quantum task resource or a job. A tag consists of a key-value pair","accessLevel":"Tagging","resourceTypes":[{"name":"job","required":false},{"name":"quantum-task","required":false},{"name":"spending-limit","required":false}]},"UpdateSpendingLimit":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to update a spending limit","accessLevel":"Write","resourceTypes":[]}},"resources":[{"name":"job","arnFormats":["arn:${Partition}:braket:${Region}:${Account}:job/${JobName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"quantum-task","arnFormats":["arn:${Partition}:braket:${Region}:${Account}:quantum-task/${RandomId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"spending-limit","arnFormats":["arn:${Partition}:braket:${Region}:${Account}:spending-limit/${RandomId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"budgets","actions":{"CreateBudgetAction":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"budgetAction"}],"description":"Grants permission to configure a response that executes once your budget exceeds a specific budget threshold. Creating a budget action with tags also requires the 'budgets:TagResource' permission","accessLevel":"Write","resourceTypes":[{"name":"budgetAction","required":true}],"dependentActions":["iam:PassRole"]},"DeleteBudgetAction":{"conditionKeys":[],"resources":[{"name":"budgetAction"}],"description":"Grants permission to delete an action that is associated with a specific budget","accessLevel":"Write","resourceTypes":[{"name":"budgetAction","required":true}]},"DescribeBudgetAction":{"conditionKeys":[],"resources":[{"name":"budgetAction"}],"description":"Grants permission to retrieve the details of a specific budget action associated with a budget","accessLevel":"Read","resourceTypes":[{"name":"budgetAction","required":true}]},"DescribeBudgetActionHistories":{"conditionKeys":[],"resources":[{"name":"budgetAction"}],"description":"Grants permission to retrieve a historical view of the budget actions statuses associated with a particular budget action. These status include statues such as 'Standby', 'Pending' and 'Executed'","accessLevel":"Read","resourceTypes":[{"name":"budgetAction","required":true}]},"DescribeBudgetActionsForAccount":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the details of all of the budget actions associated with your account","accessLevel":"Read","resourceTypes":[]},"DescribeBudgetActionsForBudget":{"conditionKeys":[],"resources":[{"name":"budget"}],"description":"Grants permission to retrieve the details of all of the budget actions associated with a budget","accessLevel":"Read","resourceTypes":[{"name":"budget","required":true}]},"ExecuteBudgetAction":{"conditionKeys":[],"resources":[{"name":"budgetAction"}],"description":"Grants permission to initiate a pending budget action as well as reverse a previously executed budget action","accessLevel":"Write","resourceTypes":[{"name":"budgetAction","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"budget"},{"name":"budgetAction"}],"description":"Grants permission to view resource tags for a budget or budget action","accessLevel":"Read","resourceTypes":[{"name":"budget","required":false},{"name":"budgetAction","required":false}]},"ModifyBudget":{"conditionKeys":[],"resources":[{"name":"budget"}],"description":"Grants permission to create and modify budgets, and edit budget details. Creating a budget with tags also requires the 'budgets:TagResource' permission","accessLevel":"Write","resourceTypes":[{"name":"budget","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"budget"},{"name":"budgetAction"}],"description":"Grants permission to apply resource tags to a budget or budget action. Also needed to create a budget or budget action with tags","accessLevel":"Tagging","resourceTypes":[{"name":"budget","required":false},{"name":"budgetAction","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"budget"},{"name":"budgetAction"}],"description":"Grants permission to remove resource tags from a budget or budget action","accessLevel":"Tagging","resourceTypes":[{"name":"budget","required":false},{"name":"budgetAction","required":false}]},"UpdateBudgetAction":{"conditionKeys":[],"resources":[{"name":"budgetAction"}],"description":"Grants permission to update the details of a specific budget action associated with a budget","accessLevel":"Write","resourceTypes":[{"name":"budgetAction","required":true}],"dependentActions":["iam:PassRole"]},"ViewBudget":{"conditionKeys":[],"resources":[{"name":"budget"}],"description":"Grants permission to view budgets and budget details","accessLevel":"Read","resourceTypes":[{"name":"budget","required":true}],"dependentActions":["billing:GetBillingViewData"]}},"resources":[{"name":"budget","arnFormats":["arn:${Partition}:budgets::${Account}:budget/${BudgetName}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"]},{"name":"budgetAction","arnFormats":["arn:${Partition}:budgets::${Account}:budget/${BudgetName}/action/${ActionId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access based on the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access based on the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access based on the tag keys that are passed in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"bugbust","actions":{"CreateEvent":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a BugBust event","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:CreateServiceLinkedRole"],"permissionOnly":true},"EvaluateProfilingGroups":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Event"}],"description":"Grants permission to evaluate checked-in profiling groups","accessLevel":"Write","resourceTypes":[{"name":"Event","required":true}],"permissionOnly":true},"GetEvent":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Event"}],"description":"Grants permission to view customer details about an event","accessLevel":"Read","resourceTypes":[{"name":"Event","required":true}],"permissionOnly":true},"GetJoinEventStatus":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Event"}],"description":"Grants permission to view the status of a BugBust player's attempt to join a BugBust event","accessLevel":"Read","resourceTypes":[{"name":"Event","required":true}],"permissionOnly":true},"JoinEvent":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Event"}],"description":"Grants permission to join an event","accessLevel":"Write","resourceTypes":[{"name":"Event","required":true}],"permissionOnly":true},"ListBugs":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Event"}],"description":"Grants permission to view the bugs that were imported into an event for players to work on","accessLevel":"Read","resourceTypes":[{"name":"Event","required":true}],"dependentActions":["codeguru-reviewer:DescribeCodeReview","codeguru-reviewer:ListRecommendations"],"permissionOnly":true},"ListEventParticipants":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Event"}],"description":"Grants permission to view the participants of an event","accessLevel":"Read","resourceTypes":[{"name":"Event","required":true}],"permissionOnly":true},"ListEventScores":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Event"}],"description":"Grants permission to view the scores of an event's players","accessLevel":"Read","resourceTypes":[{"name":"Event","required":true}],"permissionOnly":true},"ListEvents":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[],"description":"Grants permission to List BugBust events","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListProfilingGroups":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Event"}],"description":"Grants permission to view the profiling groups that were imported into an event for players to work on","accessLevel":"Read","resourceTypes":[{"name":"Event","required":true}],"permissionOnly":true},"ListPullRequests":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Event"}],"description":"Grants permission to view the pull requests used by players to submit fixes to their claimed bugs in an event","accessLevel":"Read","resourceTypes":[{"name":"Event","required":true}],"permissionOnly":true},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Event"}],"description":"Grants permission to lists tag for a Bugbust resource","accessLevel":"Read","resourceTypes":[{"name":"Event","required":true}],"permissionOnly":true},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Event"}],"description":"Grants permission to tag a Bugbust resource","accessLevel":"Tagging","resourceTypes":[{"name":"Event","required":true}],"permissionOnly":true},"UntagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Event"}],"description":"Grants permission to untag a Bugbust resource","accessLevel":"Tagging","resourceTypes":[{"name":"Event","required":true}],"permissionOnly":true},"UpdateEvent":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Event"}],"description":"Grants permission to update a BugBust event","accessLevel":"Write","resourceTypes":[{"name":"Event","required":true}],"dependentActions":["codeguru-profiler:DescribeProfilingGroup","codeguru-profiler:ListProfilingGroups","codeguru-reviewer:DescribeCodeReview","codeguru-reviewer:ListCodeReviews","codeguru-reviewer:ListRecommendations","codeguru-reviewer:TagResource","codeguru-reviewer:UnTagResource"],"permissionOnly":true},"UpdateWorkItem":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Event"}],"description":"Grants permission to update a work item as claimed or unclaimed (bug or profiling group)","accessLevel":"Write","resourceTypes":[{"name":"Event","required":true}],"dependentActions":["codeguru-reviewer:ListRecommendations"],"permissionOnly":true},"UpdateWorkItemAdmin":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Event"}],"description":"Grants permission to update an event's work item (bug or profiling group)","accessLevel":"Write","resourceTypes":[{"name":"Event","required":true}],"dependentActions":["codeguru-reviewer:ListRecommendations"],"permissionOnly":true}},"resources":[{"name":"Event","arnFormats":["arn:${Partition}:bugbust:${Region}:${Account}:events/${EventId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access based on the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access based on the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access based on the tag keys that are passed in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"cases","actions":{"BatchGetCaseRule":{"conditionKeys":[],"resources":[{"name":"CaseRule"},{"name":"Domain"}],"description":"Grants permission to retrieve information about the case rules in the case domain","accessLevel":"Read","resourceTypes":[{"name":"CaseRule","required":true},{"name":"Domain","required":true}]},"BatchGetField":{"conditionKeys":[],"resources":[{"name":"Domain"},{"name":"Field"}],"description":"Grants permission to retrieve information about the fields in the case domain","accessLevel":"Read","resourceTypes":[{"name":"Domain","required":true},{"name":"Field","required":true}]},"BatchPutFieldOptions":{"conditionKeys":[],"resources":[{"name":"Domain"},{"name":"Field"}],"description":"Grants permission to update the field options in the case domain","accessLevel":"Write","resourceTypes":[{"name":"Domain","required":true},{"name":"Field","required":true}]},"CreateCase":{"conditionKeys":["connect:UserArn"],"resources":[{"name":"Case"},{"name":"Domain"},{"name":"Field"},{"name":"Template"}],"description":"Grants permission to create a case in the case domain","accessLevel":"Write","resourceTypes":[{"name":"Case","required":true},{"name":"Domain","required":true},{"name":"Field","required":true},{"name":"Template","required":true}]},"CreateCaseRule":{"conditionKeys":[],"resources":[{"name":"CaseRule"},{"name":"Domain"}],"description":"Grants permission to create a case rule in the case domain","accessLevel":"Write","resourceTypes":[{"name":"CaseRule","required":true},{"name":"Domain","required":true}]},"CreateDomain":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new case domain","accessLevel":"Write","resourceTypes":[]},"CreateField":{"conditionKeys":[],"resources":[{"name":"Domain"},{"name":"Field"}],"description":"Grants permission to create a field in the case domain","accessLevel":"Write","resourceTypes":[{"name":"Domain","required":true},{"name":"Field","required":true}]},"CreateLayout":{"conditionKeys":[],"resources":[{"name":"Domain"},{"name":"Layout"}],"description":"Grants permission to create a layout in the case domain","accessLevel":"Write","resourceTypes":[{"name":"Domain","required":true},{"name":"Layout","required":true}]},"CreateRelatedItem":{"conditionKeys":["connect:UserArn"],"resources":[{"name":"Case"},{"name":"Domain"},{"name":"RelatedItem"}],"description":"Grants permission to create a related item associated to a case in the case domain","accessLevel":"Write","resourceTypes":[{"name":"Case","required":true},{"name":"Domain","required":true},{"name":"RelatedItem","required":true}]},"CreateTemplate":{"conditionKeys":[],"resources":[{"name":"Domain"},{"name":"Layout"},{"name":"Template"}],"description":"Grants permission to create a template in the case domain","accessLevel":"Write","resourceTypes":[{"name":"Domain","required":true},{"name":"Layout","required":true},{"name":"Template","required":true}]},"DeleteCase":{"conditionKeys":[],"resources":[{"name":"Case"},{"name":"Domain"}],"description":"Grants permission to delete the case in the case domain","accessLevel":"Write","resourceTypes":[{"name":"Case","required":true},{"name":"Domain","required":true}]},"DeleteCaseRule":{"conditionKeys":[],"resources":[{"name":"CaseRule"},{"name":"Domain"}],"description":"Grants permission to delete the case rule in the case domain","accessLevel":"Write","resourceTypes":[{"name":"CaseRule","required":true},{"name":"Domain","required":true}]},"DeleteDomain":{"conditionKeys":[],"resources":[{"name":"Domain"}],"description":"Grants permission to delete the domain","accessLevel":"Write","resourceTypes":[{"name":"Domain","required":true}]},"DeleteField":{"conditionKeys":[],"resources":[{"name":"Domain"},{"name":"Field"}],"description":"Grants permission to delete the field in the case domain","accessLevel":"Write","resourceTypes":[{"name":"Domain","required":true},{"name":"Field","required":true}]},"DeleteLayout":{"conditionKeys":[],"resources":[{"name":"Domain"},{"name":"Layout"}],"description":"Grants permission to delete the layout in the case domain","accessLevel":"Write","resourceTypes":[{"name":"Domain","required":true},{"name":"Layout","required":true}]},"DeleteRelatedItem":{"conditionKeys":[],"resources":[{"name":"Case"},{"name":"Domain"},{"name":"RelatedItem"}],"description":"Grants permission to delete the related item associated to the case in the case domain","accessLevel":"Write","resourceTypes":[{"name":"Case","required":true},{"name":"Domain","required":true},{"name":"RelatedItem","required":true}]},"DeleteTemplate":{"conditionKeys":[],"resources":[{"name":"Domain"},{"name":"Template"}],"description":"Grants permission to delete the template in the case domain","accessLevel":"Write","resourceTypes":[{"name":"Domain","required":true},{"name":"Template","required":true}]},"GetCase":{"conditionKeys":[],"resources":[{"name":"Case"},{"name":"Domain"},{"name":"Field"}],"description":"Grants permission to retrieve information about a case in the case domain","accessLevel":"Read","resourceTypes":[{"name":"Case","required":true},{"name":"Domain","required":true},{"name":"Field","required":true}]},"GetCaseAuditEvents":{"conditionKeys":[],"resources":[{"name":"Case"},{"name":"Domain"}],"description":"Grants permission to view audit history of a case","accessLevel":"Read","resourceTypes":[{"name":"Case","required":true},{"name":"Domain","required":true}]},"GetCaseEventConfiguration":{"conditionKeys":[],"resources":[{"name":"Domain"}],"description":"Grants permission to retrieve information about the case event configuraton in the case domain","accessLevel":"Read","resourceTypes":[{"name":"Domain","required":true}]},"GetDomain":{"conditionKeys":[],"resources":[{"name":"Domain"}],"description":"Grants permission to retrieve information about the case domain","accessLevel":"Read","resourceTypes":[{"name":"Domain","required":true}]},"GetLayout":{"conditionKeys":[],"resources":[{"name":"Domain"},{"name":"Layout"}],"description":"Grants permission to retrieve information about the layout in the case domain","accessLevel":"Read","resourceTypes":[{"name":"Domain","required":true},{"name":"Layout","required":true}]},"GetTemplate":{"conditionKeys":[],"resources":[{"name":"Domain"},{"name":"Template"}],"description":"Grants permission to retrieve information about the template in the case domain","accessLevel":"Read","resourceTypes":[{"name":"Domain","required":true},{"name":"Template","required":true}]},"ListCaseRules":{"conditionKeys":[],"resources":[{"name":"Domain"}],"description":"Grants permission to list case rules in the case domain","accessLevel":"List","resourceTypes":[{"name":"Domain","required":true}]},"ListCasesForContact":{"conditionKeys":[],"resources":[{"name":"Domain"}],"description":"Grants permission to list cases for a specific contact in the case domain","accessLevel":"List","resourceTypes":[{"name":"Domain","required":true}]},"ListDomains":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all domains in the aws account","accessLevel":"List","resourceTypes":[]},"ListFieldOptions":{"conditionKeys":[],"resources":[{"name":"Domain"},{"name":"Field"}],"description":"Grants permission to list field options for a single select field in the case domain","accessLevel":"List","resourceTypes":[{"name":"Domain","required":true},{"name":"Field","required":true}]},"ListFields":{"conditionKeys":[],"resources":[{"name":"Domain"}],"description":"Grants permission to list fields in the case domain","accessLevel":"List","resourceTypes":[{"name":"Domain","required":true}]},"ListLayouts":{"conditionKeys":[],"resources":[{"name":"Domain"}],"description":"Grants permission to list layouts in the case domain","accessLevel":"List","resourceTypes":[{"name":"Domain","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the tags for the specified resource","accessLevel":"Read","resourceTypes":[]},"ListTemplates":{"conditionKeys":[],"resources":[{"name":"Domain"}],"description":"Grants permission to list templates in the case domain","accessLevel":"List","resourceTypes":[{"name":"Domain","required":true}]},"PutCaseEventConfiguration":{"conditionKeys":[],"resources":[{"name":"Domain"}],"description":"Grants permission to insert or update the case event configuration in the case domain","accessLevel":"Write","resourceTypes":[{"name":"Domain","required":true}]},"SearchCases":{"conditionKeys":[],"resources":[{"name":"Domain"}],"description":"Grants permission to search for cases in the case domain","accessLevel":"Read","resourceTypes":[{"name":"Domain","required":true}]},"SearchRelatedItems":{"conditionKeys":[],"resources":[{"name":"Case"},{"name":"Domain"}],"description":"Grants permission to search for related items associated to the case in the case domain","accessLevel":"Read","resourceTypes":[{"name":"Case","required":true},{"name":"Domain","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Case"},{"name":"CaseRule"},{"name":"Domain"},{"name":"Field"},{"name":"Layout"},{"name":"RelatedItem"},{"name":"Template"}],"description":"Grants permission to add the specified tags to the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"Case","required":false},{"name":"CaseRule","required":false},{"name":"Domain","required":false},{"name":"Field","required":false},{"name":"Layout","required":false},{"name":"RelatedItem","required":false},{"name":"Template","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"Case"},{"name":"CaseRule"},{"name":"Domain"},{"name":"Field"},{"name":"Layout"},{"name":"RelatedItem"},{"name":"Template"}],"description":"Grants permission to remove the specified tags from the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"Case","required":false},{"name":"CaseRule","required":false},{"name":"Domain","required":false},{"name":"Field","required":false},{"name":"Layout","required":false},{"name":"RelatedItem","required":false},{"name":"Template","required":false}]},"UpdateCase":{"conditionKeys":["connect:UserArn"],"resources":[{"name":"Case"},{"name":"Domain"},{"name":"Field"}],"description":"Grants permission to update the field values on the case in the case domain","accessLevel":"Write","resourceTypes":[{"name":"Case","required":true},{"name":"Domain","required":true},{"name":"Field","required":true}]},"UpdateCaseRule":{"conditionKeys":[],"resources":[{"name":"CaseRule"},{"name":"Domain"}],"description":"Grants permission to update the case rule in the case domain","accessLevel":"Write","resourceTypes":[{"name":"CaseRule","required":true},{"name":"Domain","required":true}]},"UpdateField":{"conditionKeys":[],"resources":[{"name":"Domain"},{"name":"Field"}],"description":"Grants permission to update the field in the case domain","accessLevel":"Write","resourceTypes":[{"name":"Domain","required":true},{"name":"Field","required":true}]},"UpdateLayout":{"conditionKeys":[],"resources":[{"name":"Domain"},{"name":"Layout"}],"description":"Grants permission to update the layout in the case domain","accessLevel":"Write","resourceTypes":[{"name":"Domain","required":true},{"name":"Layout","required":true}]},"UpdateTemplate":{"conditionKeys":[],"resources":[{"name":"Domain"},{"name":"Template"}],"description":"Grants permission to update the template in the case domain","accessLevel":"Write","resourceTypes":[{"name":"Domain","required":true},{"name":"Template","required":true}]}},"resources":[{"name":"Case","arnFormats":["arn:${Partition}:cases:${Region}:${Account}:domain/${DomainId}/case/${CaseId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"CaseRule","arnFormats":["arn:${Partition}:cases:${Region}:${Account}:domain/${DomainId}/case-rule/${CaseRuleId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Domain","arnFormats":["arn:${Partition}:cases:${Region}:${Account}:domain/${DomainId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Field","arnFormats":["arn:${Partition}:cases:${Region}:${Account}:domain/${DomainId}/field/${FieldId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Layout","arnFormats":["arn:${Partition}:cases:${Region}:${Account}:domain/${DomainId}/layout/${LayoutId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"RelatedItem","arnFormats":["arn:${Partition}:cases:${Region}:${Account}:domain/${DomainId}/case/${CaseId}/related-item/${RelatedItemId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Template","arnFormats":["arn:${Partition}:cases:${Region}:${Account}:domain/${DomainId}/template/${TemplateId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by tag keys that are passed in the request"},"connect:UserArn":{"types":["ARN"],"description":"Filters access by connect's UserArn"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"cassandra","actions":{"Alter":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"keyspace"},{"name":"table"}],"description":"Grants permission to alter a keyspace or table","accessLevel":"Write","resourceTypes":[{"name":"keyspace","required":false},{"name":"table","required":false}]},"AlterMultiRegionResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"keyspace"},{"name":"table"}],"description":"Grants permission to alter a multiregion keyspace or table","accessLevel":"Write","resourceTypes":[{"name":"keyspace","required":false},{"name":"table","required":false}]},"Create":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"keyspace"},{"name":"table"}],"description":"Grants permission to create a keyspace or table","accessLevel":"Write","resourceTypes":[{"name":"keyspace","required":false},{"name":"table","required":false}]},"CreateMultiRegionResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"keyspace"},{"name":"table"}],"description":"Grants permission to create a multiregion keyspace or table","accessLevel":"Write","resourceTypes":[{"name":"keyspace","required":false},{"name":"table","required":false}]},"Drop":{"conditionKeys":[],"resources":[{"name":"keyspace"},{"name":"table"}],"description":"Grants permission to drop a keyspace or table","accessLevel":"Write","resourceTypes":[{"name":"keyspace","required":false},{"name":"table","required":false}]},"DropMultiRegionResource":{"conditionKeys":[],"resources":[{"name":"keyspace"},{"name":"table"}],"description":"Grants permission to drop a multiregion keyspace or table","accessLevel":"Write","resourceTypes":[{"name":"keyspace","required":false},{"name":"table","required":false}]},"GetRecords":{"conditionKeys":[],"resources":[{"name":"stream"}],"description":"Grants permission to retrieve the CDC stream records from a given shard","accessLevel":"Read","resourceTypes":[{"name":"stream","required":true}]},"GetShardIterator":{"conditionKeys":[],"resources":[{"name":"stream"}],"description":"Grants permission to return a shard iterator","accessLevel":"Read","resourceTypes":[{"name":"stream","required":true}]},"GetStream":{"conditionKeys":[],"resources":[{"name":"stream"}],"description":"Grants permission to return information about a CDC stream, including the composition of its shards","accessLevel":"Read","resourceTypes":[{"name":"stream","required":true}]},"ListStreams":{"conditionKeys":[],"resources":[],"description":"Grants permission to return an array of CDC stream ARNs associated with the current account and endpoint","accessLevel":"List","resourceTypes":[]},"Modify":{"conditionKeys":[],"resources":[{"name":"table"}],"description":"Grants permission to INSERT, UPDATE or DELETE data in a table","accessLevel":"Write","resourceTypes":[{"name":"table","required":true}]},"ModifyMultiRegionResource":{"conditionKeys":[],"resources":[{"name":"table"}],"description":"Grants permission to INSERT, UPDATE or DELETE data in a multiregion table","accessLevel":"Write","resourceTypes":[{"name":"table","required":true}]},"Restore":{"conditionKeys":[],"resources":[{"name":"table"}],"description":"Grants permission to restore table from a backup","accessLevel":"Write","resourceTypes":[{"name":"table","required":true}]},"RestoreMultiRegionTable":{"conditionKeys":[],"resources":[{"name":"table"}],"description":"Grants permission to restore multiregion table from a backup","accessLevel":"Write","resourceTypes":[{"name":"table","required":true}]},"Select":{"conditionKeys":[],"resources":[{"name":"table"}],"description":"Grants permission to SELECT data from a table","accessLevel":"Read","resourceTypes":[{"name":"table","required":true}]},"SelectMultiRegionResource":{"conditionKeys":[],"resources":[{"name":"table"}],"description":"Grants permission to SELECT data from a multiregion table","accessLevel":"Read","resourceTypes":[{"name":"table","required":true}]},"TagMultiRegionResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"keyspace"},{"name":"table"}],"description":"Grants permission to tag a multiregion keyspace or table","accessLevel":"Tagging","resourceTypes":[{"name":"keyspace","required":false},{"name":"table","required":false}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"keyspace"},{"name":"stream"},{"name":"table"}],"description":"Grants permission to tag a keyspace, table, or stream","accessLevel":"Tagging","resourceTypes":[{"name":"keyspace","required":false},{"name":"stream","required":false},{"name":"table","required":false}]},"UnTagMultiRegionResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"keyspace"},{"name":"table"}],"description":"Grants permission to untag a multiregion keyspace or table","accessLevel":"Tagging","resourceTypes":[{"name":"keyspace","required":false},{"name":"table","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"keyspace"},{"name":"stream"},{"name":"table"}],"description":"Grants permission to untag a keyspace, table or stream","accessLevel":"Tagging","resourceTypes":[{"name":"keyspace","required":false},{"name":"stream","required":false},{"name":"table","required":false}]},"UpdatePartitioner":{"conditionKeys":[],"resources":[{"name":"table"}],"description":"Grants permission to UPDATE the partitioner in a system table","accessLevel":"Write","resourceTypes":[{"name":"table","required":true}]}},"resources":[{"name":"keyspace","arnFormats":["arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/${KeyspaceName}/"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"stream","arnFormats":["arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/${KeyspaceName}/table/${TableName}/stream/${StreamLabel}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"table","arnFormats":["arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/${KeyspaceName}/table/${TableName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters actions based on the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters actions based on tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters actions based on the presence of tag keys in the request"}}}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"name":"ce","actions":{"CreateAnomalyMonitor":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new Anomaly Monitor","accessLevel":"Write","resourceTypes":[]},"CreateAnomalySubscription":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new Anomaly Subscription","accessLevel":"Write","resourceTypes":[]},"CreateCostCategoryDefinition":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new Cost Category with the requested name and rules","accessLevel":"Write","resourceTypes":[]},"CreateNotificationSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to create Reservation expiration alerts","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CreateReport":{"conditionKeys":[],"resources":[],"description":"Grants permission to create Cost Explorer Reports","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"DeleteAnomalyMonitor":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"anomalymonitor"}],"description":"Grants permission to delete an Anomaly Monitor","accessLevel":"Write","resourceTypes":[{"name":"anomalymonitor","required":true}]},"DeleteAnomalySubscription":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"anomalysubscription"}],"description":"Grants permission to delete an Anomaly Subscription","accessLevel":"Write","resourceTypes":[{"name":"anomalysubscription","required":true}]},"DeleteCostCategoryDefinition":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"costcategory"}],"description":"Grants permission to delete a Cost Category","accessLevel":"Write","resourceTypes":[{"name":"costcategory","required":true}]},"DeleteNotificationSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete Reservation expiration alerts","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"DeleteReport":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete Cost Explorer Reports","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"DescribeCostCategoryDefinition":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"costcategory"}],"description":"Grants permission to retrieve descriptions such as the name, ARN, rules, definition, and effective dates of a Cost Category","accessLevel":"Read","resourceTypes":[{"name":"costcategory","required":true}]},"DescribeNotificationSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to view Reservation expiration alerts","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"DescribeReport":{"conditionKeys":[],"resources":[],"description":"Grants permission to view Cost Explorer Reports page","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetAnomalies":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"anomalymonitor"}],"description":"Grants permission to retrieve anomalies","accessLevel":"Read","resourceTypes":[{"name":"anomalymonitor","required":true}]},"GetAnomalyMonitors":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"anomalymonitor"}],"description":"Grants permission to query Anomaly Monitors","accessLevel":"Read","resourceTypes":[{"name":"anomalymonitor","required":true}]},"GetAnomalySubscriptions":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"anomalysubscription"}],"description":"Grants permission to query Anomaly Subscriptions","accessLevel":"Read","resourceTypes":[{"name":"anomalysubscription","required":true}]},"GetApproximateUsageRecords":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve approximate usage record count for the chosen resource, level, and hourly granularity preferences, derived from the past month's usage","accessLevel":"Read","resourceTypes":[]},"GetCommitmentPurchaseAnalysis":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the commitment purchase analysis for your account","accessLevel":"Read","resourceTypes":[]},"GetConsoleActionSetEnforced":{"conditionKeys":[],"resources":[],"description":"Grants permission to view whether existing or fine-grained IAM actions are being used to control authorization to Billing, Cost Management, and Account consoles","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetCostAndUsage":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"billingview"}],"description":"Grants permission to retrieve the cost and usage metrics for your account","accessLevel":"Read","resourceTypes":[{"name":"billingview","required":false}]},"GetCostAndUsageComparisons":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"billingview"}],"description":"Grants permission to retrieve the cost and usage comparisons for your account","accessLevel":"Read","resourceTypes":[{"name":"billingview","required":false}]},"GetCostAndUsageWithResources":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"billingview"}],"description":"Grants permission to retrieve the cost and usage metrics with resources for your account","accessLevel":"Read","resourceTypes":[{"name":"billingview","required":false}]},"GetCostCategories":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"billingview"}],"description":"Grants permission to query Cost Catagory names and values for a specified time period","accessLevel":"Read","resourceTypes":[{"name":"billingview","required":false}]},"GetCostComparisonDrivers":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"billingview"}],"description":"Grants permission to retrieve the cost drivers for your account","accessLevel":"Read","resourceTypes":[{"name":"billingview","required":false}]},"GetCostForecast":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"billingview"}],"description":"Grants permission to retrieve a cost forecast for a forecast time period","accessLevel":"Read","resourceTypes":[{"name":"billingview","required":false}]},"GetDimensionValues":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"billingview"}],"description":"Grants permission to retrieve all available filter values for a filter for a period of time","accessLevel":"Read","resourceTypes":[{"name":"billingview","required":false}]},"GetPreferences":{"conditionKeys":[],"resources":[],"description":"Grants permission to view Cost Explorer Preferences page","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetReservationCoverage":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the reservation coverage for your account","accessLevel":"Read","resourceTypes":[]},"GetReservationPurchaseRecommendation":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the reservation recommendations for your account","accessLevel":"Read","resourceTypes":[]},"GetReservationUtilization":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the reservation utilization for your account","accessLevel":"Read","resourceTypes":[]},"GetRightsizingRecommendation":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the rightsizing recommendations for your account","accessLevel":"Read","resourceTypes":[]},"GetSavingsPlanPurchaseRecommendationDetails":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the Savings Plan recommendation details for your account","accessLevel":"Read","resourceTypes":[]},"GetSavingsPlansCoverage":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the Savings Plans coverage for your account","accessLevel":"Read","resourceTypes":[]},"GetSavingsPlansPurchaseRecommendation":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the Savings Plans recommendations for your account","accessLevel":"Read","resourceTypes":[]},"GetSavingsPlansUtilization":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the Savings Plans utilization for your account","accessLevel":"Read","resourceTypes":[]},"GetSavingsPlansUtilizationDetails":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the Savings Plans utilization details for your account","accessLevel":"Read","resourceTypes":[]},"GetTags":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"billingview"}],"description":"Grants permission to query tags for a specified time period","accessLevel":"Read","resourceTypes":[{"name":"billingview","required":false}]},"GetUsageForecast":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"billingview"}],"description":"Grants permission to retrieve a usage forecast for a forecast time period","accessLevel":"Read","resourceTypes":[{"name":"billingview","required":false}]},"ListCommitmentPurchaseAnalyses":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of your historical commitment purchase analyses","accessLevel":"List","resourceTypes":[]},"ListCostAllocationTagBackfillHistory":{"conditionKeys":[],"resources":[],"description":"Grants permission to list Cost Allocation Tag backfill history","accessLevel":"List","resourceTypes":[]},"ListCostAllocationTags":{"conditionKeys":[],"resources":[],"description":"Grants permission to list Cost Allocation Tags","accessLevel":"List","resourceTypes":[]},"ListCostCategoryDefinitions":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve names, ARN, and effective dates for all Cost Categories","accessLevel":"List","resourceTypes":[]},"ListCostCategoryResourceAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve resource associations of all Cost Categories defined in the account","accessLevel":"List","resourceTypes":[]},"ListSavingsPlansPurchaseRecommendationGeneration":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of your historical recommendation generations","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"anomalymonitor"},{"name":"anomalysubscription"},{"name":"costcategory"}],"description":"Grants permission to list tags for a Cost Explorer resource","accessLevel":"Read","resourceTypes":[{"name":"anomalymonitor","required":false},{"name":"anomalysubscription","required":false},{"name":"costcategory","required":false}]},"ProvideAnomalyFeedback":{"conditionKeys":[],"resources":[],"description":"Grants permission to provide feedback on detected anomalies","accessLevel":"Write","resourceTypes":[]},"StartCommitmentPurchaseAnalysis":{"conditionKeys":[],"resources":[],"description":"Grants permission to request a commitment purchase analysis","accessLevel":"Write","resourceTypes":[]},"StartCostAllocationTagBackfill":{"conditionKeys":[],"resources":[],"description":"Grants permission to request a Cost Allocation Tag backfill","accessLevel":"Write","resourceTypes":[]},"StartSavingsPlansPurchaseRecommendationGeneration":{"conditionKeys":[],"resources":[],"description":"Grants permission to request a Savings Plans recommendation generation","accessLevel":"Write","resourceTypes":[]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"anomalymonitor"},{"name":"anomalysubscription"},{"name":"costcategory"}],"description":"Grants permission to tag a Cost Explorer resource","accessLevel":"Tagging","resourceTypes":[{"name":"anomalymonitor","required":false},{"name":"anomalysubscription","required":false},{"name":"costcategory","required":false}]},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"anomalymonitor"},{"name":"anomalysubscription"},{"name":"costcategory"}],"description":"Grants permission to remove tags from a Cost Explorer resource","accessLevel":"Tagging","resourceTypes":[{"name":"anomalymonitor","required":false},{"name":"anomalysubscription","required":false},{"name":"costcategory","required":false}]},"UpdateAnomalyMonitor":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"anomalymonitor"}],"description":"Grants permission to update an existing Anomaly Monitor","accessLevel":"Write","resourceTypes":[{"name":"anomalymonitor","required":true}]},"UpdateAnomalySubscription":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"anomalysubscription"}],"description":"Grants permission to update an existing Anomaly Subscription","accessLevel":"Write","resourceTypes":[{"name":"anomalysubscription","required":true}]},"UpdateConsoleActionSetEnforced":{"conditionKeys":[],"resources":[],"description":"Grants permission to change whether existing or fine-grained IAM actions will be used to control authorization to Billing, Cost Management, and Account consoles","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"UpdateCostAllocationTagsStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to update existing Cost Allocation Tags status","accessLevel":"Write","resourceTypes":[]},"UpdateCostCategoryDefinition":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"costcategory"}],"description":"Grants permission to update an existing Cost Category","accessLevel":"Write","resourceTypes":[{"name":"costcategory","required":true}]},"UpdateNotificationSubscription":{"conditionKeys":[],"resources":[],"description":"Grants permission to update Reservation expiration alerts","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"UpdatePreferences":{"conditionKeys":[],"resources":[],"description":"Grants permission to edit Cost Explorer Preferences page","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"UpdateReport":{"conditionKeys":[],"resources":[],"description":"Grants permission to update Cost Explorer Reports","accessLevel":"Write","resourceTypes":[],"permissionOnly":true}},"resources":[{"name":"anomalymonitor","arnFormats":["arn:${Partition}:ce::${Account}:anomalymonitor/${Identifier}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"anomalysubscription","arnFormats":["arn:${Partition}:ce::${Account}:anomalysubscription/${Identifier}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"billingview","arnFormats":["arn:${Partition}:billing::${Account}:billingview/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"costcategory","arnFormats":["arn:${Partition}:ce::${Account}:costcategory/${Identifier}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}}}
|