@cloud-copilot/iam-data

{ "createportal": { "name": "CreatePortal", "description": "Grants permission to create a Portal", "accessLevel": "Write", "resourceTypes": [ { "name": "Portal", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "apigateway:Request/PortalDisplayName", "apigateway:Request/PortalDomainName", "apigateway:Request/CognitoUserPoolArn", "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createportalproduct": { "name": "CreatePortalProduct", "description": "Grants permission to create a Portal Product", "accessLevel": "Write", "resourceTypes": [ { "name": "PortalProduct", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "apigateway:Request/PortalProductDisplayName", "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createproductpage": { "name": "CreateProductPage", "description": "Grants permission to create a Product Page", "accessLevel": "Write", "resourceTypes": [ { "name": "ProductPage", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "apigateway:Request/ProductPageTitle" ], "dependentActions": [] }, "createproductrestendpointpage": { "name": "CreateProductRestEndpointPage", "description": "Grants permission to create a Product REST Endpoint Page", "accessLevel": "Write", "resourceTypes": [ { "name": "ProductRestEndpointPage", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "apigateway:Request/RestApiId", "apigateway:Request/Stage", "apigateway:Request/Method", "apigateway:Request/ProductRestEndpointPageEndpointPrefix" ], "dependentActions": [] }, "createroutingrule": { "name": "CreateRoutingRule", "description": "Grants permission to create a routing rule", "accessLevel": "Write", "resourceTypes": [ { "name": "RoutingRule", "required": true, "conditionKeys": [ "apigateway:Request/Priority", "apigateway:Request/ConditionBasePaths" ], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "apigateway:Request/Priority", "apigateway:Request/ConditionBasePaths" ], "dependentActions": [] }, "delete": { "name": "DELETE", "description": "Grants permission to delete a particular resource", "accessLevel": "Write", "resourceTypes": [ { "name": "ApiKey", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Authorizer", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "BasePathMapping", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ClientCertificate", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Deployment", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DocumentationPart", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DocumentationVersion", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DomainName", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DomainNameAccessAssociation", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "GatewayResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Integration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "IntegrationResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Method", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "MethodResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Model", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "PrivateBasePathMapping", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "PrivateDomainName", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "RequestValidator", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Resource", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "RestApi", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Stage", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Tags", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Template", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "UsagePlan", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "UsagePlanKey", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "VpcLink", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "deleteportal": { "name": "DeletePortal", "description": "Grants permission to delete a Portal", "accessLevel": "Write", "resourceTypes": [ { "name": "Portal", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteportalproduct": { "name": "DeletePortalProduct", "description": "Grants permission to delete a Portal Product", "accessLevel": "Write", "resourceTypes": [ { "name": "PortalProduct", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteportalproductsharingpolicy": { "name": "DeletePortalProductSharingPolicy", "description": "Grants permission to delete a Portal Product Sharing Policy", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "PortalProduct", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteproductpage": { "name": "DeleteProductPage", "description": "Grants permission to delete a Product Page", "accessLevel": "Write", "resourceTypes": [ { "name": "ProductPage", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteproductrestendpointpage": { "name": "DeleteProductRestEndpointPage", "description": "Grants permission to delete a Product REST Endpoint Page", "accessLevel": "Write", "resourceTypes": [ { "name": "PortalProduct", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "ProductRestEndpointPage", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteroutingrule": { "name": "DeleteRoutingRule", "description": "Grants permission to delete a routing rule", "accessLevel": "Write", "resourceTypes": [ { "name": "RoutingRule", "required": true, "conditionKeys": [ "apigateway:Resource/Priority", "apigateway:Resource/ConditionBasePaths" ], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "apigateway:Resource/Priority", "apigateway:Resource/ConditionBasePaths" ], "dependentActions": [] }, "disableportal": { "name": "DisablePortal", "description": "Grants permission to disable a Portal", "accessLevel": "Write", "resourceTypes": [ { "name": "Portal", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "get": { "name": "GET", "description": "Grants permission to read a particular resource", "accessLevel": "Read", "resourceTypes": [ { "name": "Account", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ApiKey", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ApiKeys", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Authorizer", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Authorizers", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "BasePathMapping", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "BasePathMappings", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ClientCertificate", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ClientCertificates", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Deployment", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Deployments", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DocumentationPart", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DocumentationParts", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DocumentationVersion", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DocumentationVersions", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DomainName", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DomainNameAccessAssociations", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DomainNames", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "GatewayResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "GatewayResponses", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Integration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "IntegrationResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Method", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "MethodResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Model", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Models", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "PrivateBasePathMapping", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "PrivateBasePathMappings", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "PrivateDomainName", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "RequestValidator", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "RequestValidators", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Resource", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Resources", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "RestApi", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "RestApis", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Sdk", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Stage", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Stages", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Tags", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "UsagePlan", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "UsagePlanKey", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "UsagePlanKeys", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "UsagePlans", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "VpcLink", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "VpcLinks", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getportal": { "name": "GetPortal", "description": "Grants permission to read a Portal", "accessLevel": "Read", "resourceTypes": [ { "name": "Portal", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getportalproduct": { "name": "GetPortalProduct", "description": "Grants permission to read a Portal Product", "accessLevel": "Read", "resourceTypes": [ { "name": "PortalProduct", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getportalproductsharingpolicy": { "name": "GetPortalProductSharingPolicy", "description": "Grants permission to read a Portal Product Sharing Policy", "accessLevel": "Read", "resourceTypes": [ { "name": "PortalProduct", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getproductpage": { "name": "GetProductPage", "description": "Grants permission to read a Product Page", "accessLevel": "Read", "resourceTypes": [ { "name": "ProductPage", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "PortalProduct", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getproductrestendpointpage": { "name": "GetProductRestEndpointPage", "description": "Grants permission to read a Product REST Endpoint Page", "accessLevel": "Read", "resourceTypes": [ { "name": "ProductRestEndpointPage", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "PortalProduct", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getroutingrule": { "name": "GetRoutingRule", "description": "Grants permission to read a routing rule", "accessLevel": "Read", "resourceTypes": [ { "name": "RoutingRule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listportalproducts": { "name": "ListPortalProducts", "description": "Grants permission to list Portal Products", "accessLevel": "List", "resourceTypes": [ { "name": "PortalProduct", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listportals": { "name": "ListPortals", "description": "Grants permission to list Portals", "accessLevel": "List", "resourceTypes": [ { "name": "Portal", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listproductpages": { "name": "ListProductPages", "description": "Grants permission to list Product Pages", "accessLevel": "List", "resourceTypes": [ { "name": "ProductPage", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "PortalProduct", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listproductrestendpointpages": { "name": "ListProductRestEndpointPages", "description": "Grants permission to list Product REST Endpoint Pages", "accessLevel": "List", "resourceTypes": [ { "name": "ProductRestEndpointPage", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "PortalProduct", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listroutingrules": { "name": "ListRoutingRules", "description": "Grants permission to list routing rules under a domain name", "accessLevel": "List", "resourceTypes": [ { "name": "RoutingRule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "patch": { "name": "PATCH", "description": "Grants permission to update a particular resource", "accessLevel": "Write", "resourceTypes": [ { "name": "Account", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ApiKey", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Authorizer", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "BasePathMapping", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ClientCertificate", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Deployment", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DocumentationPart", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DocumentationVersion", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DomainName", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "GatewayResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Integration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "IntegrationResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Method", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "MethodResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Model", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "PrivateBasePathMapping", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "PrivateDomainName", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "RequestValidator", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Resource", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "RestApi", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Stage", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Template", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "UsagePlan", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "UsagePlanKey", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "VpcLink", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "post": { "name": "POST", "description": "Grants permission to create a particular resource", "accessLevel": "Write", "resourceTypes": [ { "name": "ApiKeys", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Authorizers", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "BasePathMappings", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ClientCertificates", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Deployments", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DocumentationParts", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DocumentationVersions", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DomainNameAccessAssociations", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DomainNames", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "GatewayResponses", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "IntegrationResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "MethodResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Models", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "PrivateBasePathMappings", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "RequestValidators", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Resources", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "RestApis", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Stages", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "UsagePlanKeys", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "UsagePlans", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "VpcLinks", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "put": { "name": "PUT", "description": "Grants permission to update a particular resource", "accessLevel": "Write", "resourceTypes": [ { "name": "DocumentationPart", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "GatewayResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "IntegrationResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "MethodResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "RestApi", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Tags", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "previewportal": { "name": "PreviewPortal", "description": "Grants permission to preview a Portal", "accessLevel": "Write", "resourceTypes": [ { "name": "Portal", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "publishportal": { "name": "PublishPortal", "description": "Grants permission to publish a Portal", "accessLevel": "Write", "resourceTypes": [ { "name": "Portal", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putportalproductsharingpolicy": { "name": "PutPortalProductSharingPolicy", "description": "Grants permission to put a Portal Product Sharing Policy", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "PortalProduct", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateportal": { "name": "UpdatePortal", "description": "Grants permission to update a Portal", "accessLevel": "Write", "resourceTypes": [ { "name": "Portal", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "apigateway:Request/PortalDisplayName", "apigateway:Request/PortalDomainName", "apigateway:Request/CognitoUserPoolArn", "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "updateportalproduct": { "name": "UpdatePortalProduct", "description": "Grants permission to update a Portal Product", "accessLevel": "Write", "resourceTypes": [ { "name": "PortalProduct", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "apigateway:Request/PortalProductDisplayName", "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "updateproductpage": { "name": "UpdateProductPage", "description": "Grants permission to update a Product Page", "accessLevel": "Write", "resourceTypes": [ { "name": "ProductPage", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "apigateway:Request/ProductPageTitle" ], "dependentActions": [] }, "updateproductrestendpointpage": { "name": "UpdateProductRestEndpointPage", "description": "Grants permission to update a Product REST Endpoint Page", "accessLevel": "Write", "resourceTypes": [ { "name": "ProductRestEndpointPage", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "apigateway:Request/ProductRestEndpointPageEndpointPrefix" ], "dependentActions": [] }, "updateroutingrule": { "name": "UpdateRoutingRule", "description": "Grants permission to update a routing rule using the PutRoutingRule API", "accessLevel": "Write", "resourceTypes": [ { "name": "RoutingRule", "required": true, "conditionKeys": [ "apigateway:Request/Priority", "apigateway:Request/ConditionBasePaths", "apigateway:Resource/Priority", "apigateway:Resource/ConditionBasePaths" ], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "apigateway:Request/Priority", "apigateway:Request/ConditionBasePaths", "apigateway:Resource/Priority", "apigateway:Resource/ConditionBasePaths" ], "dependentActions": [] }, "addcertificatetodomain": { "name": "AddCertificateToDomain", "description": "Grants permission to add certificates for mutual TLS authentication to a domain name. This is an additional authorization control for managing the DomainName resource due to the sensitive nature of mTLS", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "DomainName", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DomainNames", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createaccessassociation": { "name": "CreateAccessAssociation", "description": "Grants permission to create an access association from an access association source to a custom domain name for private APIs", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "PrivateDomainName", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "rejectaccessassociation": { "name": "RejectAccessAssociation", "description": "Grants permission to reject an existing access association owned by another account to a custom domain name for private APIs", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "PrivateDomainName", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "removecertificatefromdomain": { "name": "RemoveCertificateFromDomain", "description": "Grants permission to remove certificates for mutual TLS authentication from a domain name. This is an additional authorization control for managing the DomainName resource due to the sensitive nature of mTLS", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "DomainName", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DomainNames", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "setwebacl": { "name": "SetWebACL", "description": "Grants permission to set a WAF access control list (ACL). This is an additional authorization control for managing the Stage resource due to the sensitive nature of WebAcl's", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "Stage", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Stages", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatedomainnamemanagementpolicy": { "name": "UpdateDomainNameManagementPolicy", "description": "Grants permission to update the management policy of a custom domain name for private APIs", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "PrivateDomainName", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatedomainnamepolicy": { "name": "UpdateDomainNamePolicy", "description": "Grants permission to update the invoke policy of a custom domain name for private APIs", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "DomainNames", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "PrivateDomainName", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updaterestapipolicy": { "name": "UpdateRestApiPolicy", "description": "Grants permission to manage the IAM resource policy for an API. This is an additional authorization control for managing an API due to the sensitive nature of the resource policy", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "RestApi", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "RestApis", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] } }