@cloud-copilot/iam-data/data/actions/airflow.json

AWS IAM Data

{
  "createclitoken": {
    "name": "CreateCliToken",
    "description": "Grants permission to create a short-lived token that allows a user to invoke Airflow CLI via an endpoint on the Apache Airflow Webserver",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "environment",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createenvironment": {
    "name": "CreateEnvironment",
    "description": "Grants permission to create an Amazon MWAA environment",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "environment",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}",
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createweblogintoken": {
    "name": "CreateWebLoginToken",
    "description": "Grants permission to create a short-lived token that allows a user to log into Apache Airflow web UI",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "rbac-role",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteenvironment": {
    "name": "DeleteEnvironment",
    "description": "Grants permission to delete an Amazon MWAA environment",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "environment",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getenvironment": {
    "name": "GetEnvironment",
    "description": "Grants permission to view details about an Amazon MWAA environment",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "environment",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "invokerestapi": {
    "name": "InvokeRestApi",
    "description": "Grants permission to invoke Airflow REST API via an endpoint on the Apache Airflow Webserver",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "rbac-role",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listenvironments": {
    "name": "ListEnvironments",
    "description": "Grants permission to list the Amazon MWAA environments in your account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtagsforresource": {
    "name": "ListTagsForResource",
    "description": "Grants permission to lists tag for an Amazon MWAA environment",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "environment",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "publishmetrics": {
    "name": "PublishMetrics",
    "description": "Grants permission to publish metrics for an Amazon MWAA environment",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "environment",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "tagresource": {
    "name": "TagResource",
    "description": "Grants permission to tag an Amazon MWAA environment",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "environment",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}",
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "untagresource": {
    "name": "UntagResource",
    "description": "Grants permission to untag an Amazon MWAA environment",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "environment",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "updateenvironment": {
    "name": "UpdateEnvironment",
    "description": "Grants permission to modify an Amazon MWAA environment",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "environment",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  }
}