@cloud-copilot/iam-data
Version:
713 lines • 17.4 kB
JSON
{
"archiveproject": {
"name": "ArchiveProject",
"description": "Grants permission to archive a specific project",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "project",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"associatecustomizedmodel": {
"name": "AssociateCustomizedModel",
"description": "Grants permission to associate a customized model with a project",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "customized-model",
"required": true,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
{
"name": "project",
"required": true,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
}
],
"conditionKeys": [
"bedrock-mantle:ProjectArn",
"bedrock-mantle:CustomizedModelArn"
],
"dependentActions": []
},
"callwithbearertoken": {
"name": "CallWithBearerToken",
"isPermissionOnly": true,
"description": "Grants permission to make API calls using bearer token authentication",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [
"bedrock-mantle:BearerTokenType"
],
"dependentActions": []
},
"cancelfinetuningjob": {
"name": "CancelFineTuningJob",
"description": "Grants permission to cancel an in-progress fine tuning job",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "project",
"required": true,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
}
],
"conditionKeys": [
"bedrock-mantle:FineTuningJob"
],
"dependentActions": []
},
"cancelinference": {
"name": "CancelInference",
"description": "Grants permission to cancel an in-progress inference request",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "project",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"createcustomizedmodel": {
"name": "CreateCustomizedModel",
"description": "Grants permission to import a customized model with custom weights",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "customized-model",
"required": true,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createfile": {
"name": "CreateFile",
"description": "Grants permission to create a file in a project",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "project",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"createfinetuningjob": {
"name": "CreateFineTuningJob",
"description": "Grants permission to create a fine tuning job",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "project",
"required": true,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
}
],
"conditionKeys": [
"bedrock-mantle:Model",
"bedrock-mantle:Files"
],
"dependentActions": []
},
"createinference": {
"name": "CreateInference",
"description": "Grants permission to create a chat completion inference request",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "project",
"required": true,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
}
],
"conditionKeys": [
"bedrock-mantle:ServiceTier",
"bedrock-mantle:Model"
],
"dependentActions": []
},
"createproject": {
"name": "CreateProject",
"description": "Grants permission to create a project",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "project",
"required": true,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createreservation": {
"name": "CreateReservation",
"description": "Grants permission to create a capacity reservation for a model",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "project",
"required": true,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
{
"name": "reservation",
"required": true,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys",
"bedrock-mantle:ProjectArn",
"bedrock-mantle:ReservationArn"
],
"dependentActions": []
},
"deletecustomizedmodel": {
"name": "DeleteCustomizedModel",
"description": "Grants permission to delete a customized model",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "customized-model",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"deletefile": {
"name": "DeleteFile",
"description": "Grants permission to delete a specific file",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "project",
"required": true,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
}
],
"conditionKeys": [
"bedrock-mantle:Files"
],
"dependentActions": []
},
"deleteinference": {
"name": "DeleteInference",
"description": "Grants permission to delete a specific inference request",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "project",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"deletereservation": {
"name": "DeleteReservation",
"description": "Grants permission to delete a capacity reservation",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "project",
"required": true,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
{
"name": "reservation",
"required": true,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
}
],
"conditionKeys": [
"bedrock-mantle:ProjectArn",
"bedrock-mantle:ReservationArn"
],
"dependentActions": []
},
"disassociatecustomizedmodel": {
"name": "DisassociateCustomizedModel",
"description": "Grants permission to disassociate a customized model from a project",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "customized-model",
"required": true,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
{
"name": "project",
"required": true,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
}
],
"conditionKeys": [
"bedrock-mantle:ProjectArn",
"bedrock-mantle:CustomizedModelArn"
],
"dependentActions": []
},
"getcustomizedmodel": {
"name": "GetCustomizedModel",
"description": "Grants permission to get customized model",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "customized-model",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"getfile": {
"name": "GetFile",
"description": "Grants permission to retrieve information about a specific file",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "project",
"required": true,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
}
],
"conditionKeys": [
"bedrock-mantle:Files"
],
"dependentActions": []
},
"getfinetuningjob": {
"name": "GetFineTuningJob",
"description": "Grants permission to retrieve details of a specific fine tuning job",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "project",
"required": true,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
}
],
"conditionKeys": [
"bedrock-mantle:FineTuningJob"
],
"dependentActions": []
},
"getinference": {
"name": "GetInference",
"description": "Grants permission to retrieve details of a specific inference request",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "project",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"getmodel": {
"name": "GetModel",
"description": "Grants permission to retrieve information about a specific model",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "project",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"getproject": {
"name": "GetProject",
"description": "Grants permission to retrieve details of a specific project",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "project",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"getreservation": {
"name": "GetReservation",
"description": "Grants permission to get reservation",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "reservation",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"listcustomizedmodelassociations": {
"name": "ListCustomizedModelAssociations",
"description": "Grants permission to list project associations for a customized model",
"accessLevel": "List",
"resourceTypes": [
{
"name": "customized-model",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listcustomizedmodels": {
"name": "ListCustomizedModels",
"description": "Grants permission to list customized models",
"accessLevel": "List",
"resourceTypes": [
{
"name": "customized-model",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listfiles": {
"name": "ListFiles",
"description": "Grants permission to list all available files in a project",
"accessLevel": "List",
"resourceTypes": [
{
"name": "project",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"listfinetuningjobs": {
"name": "ListFineTuningJobs",
"description": "Grants permission to list all available fine tuning jobs in a project",
"accessLevel": "List",
"resourceTypes": [
{
"name": "project",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"listmodels": {
"name": "ListModels",
"description": "Grants permission to list all available models in a project",
"accessLevel": "List",
"resourceTypes": [
{
"name": "project",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"listprojects": {
"name": "ListProjects",
"description": "Grants permission to list projects",
"accessLevel": "List",
"resourceTypes": [
{
"name": "project",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listreservations": {
"name": "ListReservations",
"description": "Grants permission to list reservations",
"accessLevel": "List",
"resourceTypes": [
{
"name": "reservation",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listtagsforresource": {
"name": "ListTagsForResource",
"description": "Grants permission to list tags for a resource",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "customized-model",
"required": false,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
{
"name": "project",
"required": false,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
{
"name": "reservation",
"required": false,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"tagresource": {
"name": "TagResource",
"description": "Grants permission to tag a resource",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "customized-model",
"required": false,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
{
"name": "project",
"required": false,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
{
"name": "reservation",
"required": false,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}"
],
"dependentActions": []
},
"untagresource": {
"name": "UntagResource",
"description": "Grants permission to untag a resource",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "customized-model",
"required": false,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
{
"name": "project",
"required": false,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
{
"name": "reservation",
"required": false,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys"
],
"dependentActions": []
},
"updateproject": {
"name": "UpdateProject",
"description": "Grants permission to update a specific project",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "project",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"updatereservation": {
"name": "UpdateReservation",
"description": "Grants permission to update reservation",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "project",
"required": true,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
{
"name": "reservation",
"required": true,
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
}
],
"conditionKeys": [
"bedrock-mantle:ProjectArn",
"bedrock-mantle:ReservationArn"
],
"dependentActions": []
}
}