UNPKG

@cloud-copilot/iam-data

Version:
1,680 lines 134 kB
{ "acceptdelegate": { "name": "AcceptDelegate", "description": "Grants permission to accept the delegate invitation to share management of an Amazon Chime account with another AWS Account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "activateusers": { "name": "ActivateUsers", "description": "Grants permission to activate users in an Amazon Chime Enterprise account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "adddomain": { "name": "AddDomain", "description": "Grants permission to add a domain to your Amazon Chime account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "addorupdategroups": { "name": "AddOrUpdateGroups", "description": "Grants permission to add new or update existing Active Directory or Okta user groups associated with your Amazon Chime Enterprise account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "associatechannelflow": { "name": "AssociateChannelFlow", "description": "Grants permission to associate a flow with a channel", "accessLevel": "Write", "resourceTypes": [ { "name": "app-instance-bot", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "app-instance-user", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "channel", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "channel-flow", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "associatephonenumberwithuser": { "name": "AssociatePhoneNumberWithUser", "description": "Grants permission to associate a phone number with an Amazon Chime user", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "associatephonenumberswithvoiceconnector": { "name": "AssociatePhoneNumbersWithVoiceConnector", "description": "Grants permission to associate multiple phone numbers with an Amazon Chime Voice Connector", "accessLevel": "Write", "resourceTypes": [ { "name": "voice-connector", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "associatephonenumberswithvoiceconnectorgroup": { "name": "AssociatePhoneNumbersWithVoiceConnectorGroup", "description": "Grants permission to associate multiple phone numbers with an Amazon Chime Voice Connector Group", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "associatesignindelegategroupswithaccount": { "name": "AssociateSigninDelegateGroupsWithAccount", "description": "Grants permission to associate the specified sign-in delegate groups with the specified Amazon Chime account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "associatevoiceconnectorconnect": { "name": "AssociateVoiceConnectorConnect", "isPermissionOnly": true, "description": "Grants permission to associate the specified Amazon Connect instance with an Amazon Chime Voice Connector", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "authorizedirectory": { "name": "AuthorizeDirectory", "description": "Grants permission to authorize an Active Directory for your Amazon Chime Enterprise account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "batchcreateattendee": { "name": "BatchCreateAttendee", "description": "Grants permission to create new attendees for an active Amazon Chime SDK meeting", "accessLevel": "Write", "resourceTypes": [ { "name": "meeting", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchcreatechannelmembership": { "name": "BatchCreateChannelMembership", "description": "Grants permission to add multiple users and bots to a channel", "accessLevel": "Write", "resourceTypes": [ { "name": "app-instance-bot", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "app-instance-user", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "channel", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchcreateroommembership": { "name": "BatchCreateRoomMembership", "description": "Grants permission to batch add room members", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "batchdeletephonenumber": { "name": "BatchDeletePhoneNumber", "description": "Grants permission to move up to 50 phone numbers to the deletion queue", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "batchsuspenduser": { "name": "BatchSuspendUser", "description": "Grants permission to suspend up to 50 users from a Team or EnterpriseLWA Amazon Chime account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "batchunsuspenduser": { "name": "BatchUnsuspendUser", "description": "Grants permission to remove the suspension from up to 50 previously suspended users for the specified Amazon Chime EnterpriseLWA account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "batchupdateattendeecapabilitiesexcept": { "name": "BatchUpdateAttendeeCapabilitiesExcept", "description": "Grants permission to update AttendeeCapabilities except the capabilities listed in an ExcludedAttendeeIds table", "accessLevel": "Write", "resourceTypes": [ { "name": "meeting", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchupdatephonenumber": { "name": "BatchUpdatePhoneNumber", "description": "Grants permission to update phone number details within the UpdatePhoneNumberRequestItem object for up to 50 phone numbers", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "batchupdateuser": { "name": "BatchUpdateUser", "description": "Grants permission to update user details within the UpdateUserRequestItem object for up to 20 users for the specified Amazon Chime account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "channelflowcallback": { "name": "ChannelFlowCallback", "description": "Grants permission to callback for a message on a channel", "accessLevel": "Write", "resourceTypes": [ { "name": "channel", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "connect": { "name": "Connect", "description": "Grants permission to establish a web socket connection for app instance user to the messaging session endpoint", "accessLevel": "Write", "resourceTypes": [ { "name": "app-instance-user", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "connectdirectory": { "name": "ConnectDirectory", "description": "Grants permission to connect an Active Directory to your Amazon Chime Enterprise account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [ "ds:ConnectDirectory" ] }, "createaccount": { "name": "CreateAccount", "description": "Grants permission to create an Amazon Chime account under the administrator's AWS account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createapikey": { "name": "CreateApiKey", "description": "Grants permission to create a new SCIM access key for your Amazon Chime account and Okta configuration", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createappinstance": { "name": "CreateAppInstance", "description": "Grants permission to create an app instance in the AWS account (tag-based access controls are only supported on identity-chime.<region>.amazonaws.com endpoints)", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [] }, "createappinstanceadmin": { "name": "CreateAppInstanceAdmin", "description": "Grants permission to promote a user or bot to an AppInstanceAdmin", "accessLevel": "Write", "resourceTypes": [ { "name": "app-instance", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "app-instance-bot", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "app-instance-user", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createappinstancebot": { "name": "CreateAppInstanceBot", "description": "Grants permission to create a bot within an AppInstance (tag-based access controls are only supported on identity-chime.<region>.amazonaws.com endpoints)", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [] }, "createappinstanceuser": { "name": "CreateAppInstanceUser", "description": "Grants permission to create a user within an AppInstance (tag-based access controls are only supported on identity-chime.<region>.amazonaws.com endpoints)", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [] }, "createattendee": { "name": "CreateAttendee", "description": "Grants permission to create a new attendee for an active Amazon Chime SDK meeting", "accessLevel": "Write", "resourceTypes": [ { "name": "meeting", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createbot": { "name": "CreateBot", "description": "Grants permission to create a bot for an Amazon Chime Enterprise account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createcdrbucket": { "name": "CreateCDRBucket", "description": "Grants permission to create a new Call Detail Record S3 bucket", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [ "s3:CreateBucket", "s3:ListAllMyBuckets" ] }, "createchannel": { "name": "CreateChannel", "description": "Grants permission to create a channel for an app instance in the AWS account (tag-based access controls are only supported on messaging-chime.<region>.amazonaws.com endpoints)", "accessLevel": "Write", "resourceTypes": [ { "name": "app-instance-bot", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "app-instance-user", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [] }, "createchannelban": { "name": "CreateChannelBan", "description": "Grants permission to ban a user or bot from a channel", "accessLevel": "Write", "resourceTypes": [ { "name": "app-instance-bot", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "app-instance-user", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "channel", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createchannelflow": { "name": "CreateChannelFlow", "description": "Grants permission to create a channel flow for an app instance in the AWS account (tag-based access controls are only supported on messaging-chime.<region>.amazonaws.com endpoints)", "accessLevel": "Write", "resourceTypes": [ { "name": "app-instance", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [] }, "createchannelmembership": { "name": "CreateChannelMembership", "description": "Grants permission to add a user or bot to a channel", "accessLevel": "Write", "resourceTypes": [ { "name": "app-instance-bot", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "app-instance-user", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "channel", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createchannelmoderator": { "name": "CreateChannelModerator", "description": "Grants permission to create a channel moderator", "accessLevel": "Write", "resourceTypes": [ { "name": "app-instance-bot", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "app-instance-user", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "channel", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createconnectanalyticsconnector": { "name": "CreateConnectAnalyticsConnector", "isPermissionOnly": true, "description": "Grants permission to create an Amazon Connect Analytics Connector in the AWS account (tag-based access controls are only supported on voice-chime.<region>.amazonaws.com endpoints)", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [ "chime:CreateVoiceConnector" ] }, "createconnectcalltransferconnector": { "name": "CreateConnectCallTransferConnector", "isPermissionOnly": true, "description": "Grants permission to create an Amazon Connect Call Transfer Connector in the AWS account (tag-based access controls are only supported on voice-chime.<region>.amazonaws.com endpoints)", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [ "chime:CreateVoiceConnector" ] }, "createmediacapturepipeline": { "name": "CreateMediaCapturePipeline", "description": "Grants permission to create a media capture pipeline (tag-based access controls are only supported on media-pipelines-chime.<region>.amazonaws.com endpoints)", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [ "s3:GetBucketPolicy" ] }, "createmediaconcatenationpipeline": { "name": "CreateMediaConcatenationPipeline", "description": "Grants permission to create a media concatenation pipeline (tag-based access controls are only supported on media-pipelines-chime.<region>.amazonaws.com endpoints)", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [ "s3:GetBucketPolicy" ] }, "createmediainsightspipeline": { "name": "CreateMediaInsightsPipeline", "description": "Grants permission to create a media insights pipeline (tag-based access controls are only supported on media-pipelines-chime.<region>.amazonaws.com endpoints)", "accessLevel": "Write", "resourceTypes": [ { "name": "media-insights-pipeline-configuration", "required": true, "conditionKeys": [], "dependentActions": [ "chime:TagResource", "kinesisvideo:DescribeStream" ] } ], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [] }, "createmediainsightspipelineconfiguration": { "name": "CreateMediaInsightsPipelineConfiguration", "description": "Grants permission to create a media insights pipeline configuration (tag-based access controls are only supported on media-pipelines-chime.<region>.amazonaws.com endpoints)", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [ "chime:TagResource", "iam:PassRole", "kinesis:DescribeStream", "s3:ListBucket" ] }, "createmedialiveconnectorpipeline": { "name": "CreateMediaLiveConnectorPipeline", "description": "Grants permission to create a media live connector pipeline (tag-based access controls are only supported on media-pipelines-chime.<region>.amazonaws.com endpoints)", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [] }, "createmediapipelinekinesisvideostreampool": { "name": "CreateMediaPipelineKinesisVideoStreamPool", "description": "Grants permission to create kinesis video stream pool (tag-based access controls are only supported on media-pipelines-chime.<region>.amazonaws.com endpoints)", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [ "kinesis:DescribeStream", "kinesisvideo:CreateStream", "kinesisvideo:GetDataEndpoint", "kinesisvideo:ListStreams" ] }, "createmediastreampipeline": { "name": "CreateMediaStreamPipeline", "description": "Grants permission to create a media stream pipeline (tag-based access controls are only supported on media-pipelines-chime.<region>.amazonaws.com endpoints)", "accessLevel": "Write", "resourceTypes": [ { "name": "media-pipeline-kinesis-video-stream-pool", "required": true, "conditionKeys": [], "dependentActions": [ "kinesisvideo:DescribeStream", "kinesisvideo:GetDataEndpoint", "kinesisvideo:PutMedia" ] } ], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [] }, "createmeeting": { "name": "CreateMeeting", "description": "Grants permission to create a new meeting in the specified media Region, with no initial attendees (tag-based access controls are only supported on meetings-chime.<region>.amazonaws.com endpoints)", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createmeetingdialout": { "name": "CreateMeetingDialOut", "description": "Grants permission to call a phone number to join the specified Amazon Chime SDK meeting", "accessLevel": "Write", "resourceTypes": [ { "name": "meeting", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createmeetingwithattendees": { "name": "CreateMeetingWithAttendees", "description": "Grants permission to create a new meeting in the specified media Region, with a set of attendees (tag-based access controls are only supported on meetings-chime.<region>.amazonaws.com endpoints)", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createphonenumberorder": { "name": "CreatePhoneNumberOrder", "description": "Grants permission to create a phone number order with the Carriers", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createproxysession": { "name": "CreateProxySession", "description": "Grants permission to create a proxy session for the specified Amazon Chime Voice Connector", "accessLevel": "Write", "resourceTypes": [ { "name": "voice-connector", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createroom": { "name": "CreateRoom", "description": "Grants permission to create a room", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createroommembership": { "name": "CreateRoomMembership", "description": "Grants permission to add a room member", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createsipmediaapplication": { "name": "CreateSipMediaApplication", "description": "Grants permission to create an Amazon Chime SIP media application in the AWS account (tag-based access controls are only supported on voice-chime.<region>.amazonaws.com endpoints)", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [] }, "createsipmediaapplicationcall": { "name": "CreateSipMediaApplicationCall", "description": "Grants permission to create outbound call for Amazon Chime SIP media application under the administrator's AWS account", "accessLevel": "Write", "resourceTypes": [ { "name": "sip-media-application", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createsiprule": { "name": "CreateSipRule", "description": "Grants permission to create an Amazon Chime SIP rule under the administrator's AWS account", "accessLevel": "Write", "resourceTypes": [ { "name": "sip-media-application", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createuser": { "name": "CreateUser", "description": "Grants permission to create a user under the specified Amazon Chime account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createvoiceconnector": { "name": "CreateVoiceConnector", "description": "Grants permission to create a Voice Connector in the AWS account (tag-based access controls are only supported on voice-chime.<region>.amazonaws.com endpoints)", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [ "chime:CreateConnectAnalyticsConnector", "chime:CreateConnectCallTransferConnector" ] }, "createvoiceconnectorgroup": { "name": "CreateVoiceConnectorGroup", "description": "Grants permission to create a Amazon Chime Voice Connector Group under the administrator's AWS account", "accessLevel": "Write", "resourceTypes": [ { "name": "voice-connector", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createvoiceprofile": { "name": "CreateVoiceProfile", "description": "Grants permission to create a voice profile", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createvoiceprofiledomain": { "name": "CreateVoiceProfileDomain", "description": "Grants permission to create a voice profile domain (tag-based access controls are only supported on voice-chime.<region>.amazonaws.com endpoints)", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [ "chime:TagResource", "kms:CreateGrant", "kms:DescribeKey" ] }, "deleteaccount": { "name": "DeleteAccount", "description": "Grants permission to delete the specified Amazon Chime account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleteaccountopenidconfig": { "name": "DeleteAccountOpenIdConfig", "description": "Grants permission to delete the OpenIdConfig attributes from your Amazon Chime account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleteapikey": { "name": "DeleteApiKey", "description": "Grants permission to delete the specified SCIM access key associated with your Amazon Chime account and Okta configuration", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleteappinstance": { "name": "DeleteAppInstance", "description": "Grants permission to delete an AppInstance", "accessLevel": "Write", "resourceTypes": [ { "name": "app-instance", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteappinstanceadmin": { "name": "DeleteAppInstanceAdmin", "description": "Grants permission to demote an AppInstanceAdmin to a user or bot", "accessLevel": "Write", "resourceTypes": [ { "name": "app-instance", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "app-instance-bot", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "app-instance-user", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteappinstancebot": { "name": "DeleteAppInstanceBot", "description": "Grants permission to delete an AppInstanceBot", "accessLevel": "Write", "resourceTypes": [ { "name": "app-instance-bot", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteappinstancestreamingconfigurations": { "name": "DeleteAppInstanceStreamingConfigurations", "description": "Grants permission to disable data streaming for the app instance", "accessLevel": "Write", "resourceTypes": [ { "name": "app-instance", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteappinstanceuser": { "name": "DeleteAppInstanceUser", "description": "Grants permission to delete an AppInstanceUser", "accessLevel": "Write", "resourceTypes": [ { "name": "app-instance-user", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteattendee": { "name": "DeleteAttendee", "description": "Grants permission to delete the specified attendee from an Amazon Chime SDK meeting", "accessLevel": "Write", "resourceTypes": [ { "name": "meeting", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletecdrbucket": { "name": "DeleteCDRBucket", "description": "Grants permission to delete a Call Detail Record S3 bucket from your Amazon Chime account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [ "s3:DeleteBucket" ] }, "deletechannel": { "name": "DeleteChannel", "description": "Grants permission to delete a channel", "accessLevel": "Write", "resourceTypes": [ { "name": "app-instance-bot", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "app-instance-user", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "channel", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletechannelban": { "name": "DeleteChannelBan", "description": "Grants permission to remove a user or bot from a channel's ban list", "accessLevel": "Write", "resourceTypes": [ { "name": "app-instance-bot", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "app-instance-user", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "channel", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletechannelflow": { "name": "DeleteChannelFlow", "description": "Grants permission to delete a channel flow", "accessLevel": "Write", "resourceTypes": [ { "name": "channel", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletechannelmembership": { "name": "DeleteChannelMembership", "description": "Grants permission to remove a member from a channel", "accessLevel": "Write", "resourceTypes": [ { "name": "app-instance-bot", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "app-instance-user", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "channel", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletechannelmessage": { "name": "DeleteChannelMessage", "description": "Grants permission to delete a channel message", "accessLevel": "Write", "resourceTypes": [ { "name": "app-instance-bot", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "app-instance-user", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "channel", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletechannelmoderator": { "name": "DeleteChannelModerator", "description": "Grants permission to delete a channel moderator", "accessLevel": "Write", "resourceTypes": [ { "name": "app-instance-bot", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "app-instance-user", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "channel", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletedelegate": { "name": "DeleteDelegate", "description": "Grants permission to delete delegated AWS account management from your Amazon Chime account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deletedomain": { "name": "DeleteDomain", "description": "Grants permission to delete a domain from your Amazon Chime account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleteeventsconfiguration": { "name": "DeleteEventsConfiguration", "description": "Grants permission to delete an events configuration for a bot to receive outgoing events", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deletegroups": { "name": "DeleteGroups", "description": "Grants permission to delete Active Directory or Okta user groups from your Amazon Chime Enterprise account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deletemediacapturepipeline": { "name": "DeleteMediaCapturePipeline", "description": "Grants permission to delete a media capture pipeline", "accessLevel": "Write", "resourceTypes": [ { "name": "media-pipeline", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletemediainsightspipelineconfiguration": { "name": "DeleteMediaInsightsPipelineConfiguration", "description": "Grants permission to delete a media insights pipeline configuration", "accessLevel": "Write", "resourceTypes": [ { "name": "media-insights-pipeline-configuration", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "chime:ListVoiceConnectors" ] }, "deletemediapipeline": { "name": "DeleteMediaPipeline", "description": "Grants permission to delete a media pipeline", "accessLevel": "Write", "resourceTypes": [ { "name": "media-pipeline", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletemediapipelinekinesisvideostreampool": { "name": "DeleteMediaPipelineKinesisVideoStreamPool", "description": "Grants permission to delete kinesis video stream pool", "accessLevel": "Write", "resourceTypes": [ { "name": "media-pipeline-kinesis-video-stream-pool", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletemeeting": { "name": "DeleteMeeting", "description": "Grants permission to delete the specified Amazon Chime SDK meeting", "accessLevel": "Write", "resourceTypes": [ { "name": "meeting", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletemessagingstreamingconfigurations": { "name": "DeleteMessagingStreamingConfigurations", "description": "Grants permission to delete the data streaming configurations of an AppInstance", "accessLevel": "Write", "resourceTypes": [ { "name": "app-instance", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletephonenumber": { "name": "DeletePhoneNumber", "description": "Grants permission to move a phone number to the deletion queue", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleteproxysession": { "name": "DeleteProxySession", "description": "Grants permission to delete a proxy session for the specified Amazon Chime Voice Connector", "accessLevel": "Write", "resourceTypes": [ { "name": "voice-connector", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteroom": { "name": "DeleteRoom", "description": "Grants permission to delete a room", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleteroommembership": { "name": "DeleteRoomMembership", "description": "Grants permission to remove a room member", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deletesipmediaapplication": { "name": "DeleteSipMediaApplication", "description": "Grants permission to delete Amazon Chime SIP media application under the administrator's AWS account", "accessLevel": "Write", "resourceTypes": [ { "name": "sip-media-application", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletesiprule": { "name": "DeleteSipRule", "description": "Grants permission to delete Amazon Chime SIP rule under the administrator's AWS account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deletevoiceconnector": { "name": "DeleteVoiceConnector", "description": "Grants permission to delete the specified Amazon Chime Voice Connector", "accessLevel": "Write", "resourceTypes": [ { "name": "voice-connector", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "logs:CreateLogDelivery", "logs:DeleteLogDelivery", "logs:GetLogDelivery", "logs:ListLogDeliveries" ] }, "deletevoiceconnectoremergencycallingconfiguration": { "name": "DeleteVoiceConnectorEmergencyCallingConfiguration", "description": "Grants permission to delete emergency calling configuration for the specified Amazon Chime Voice Connector", "accessLevel": "Write", "resourceTypes": [ { "name": "voice-connector", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletevoiceconnectorexternalsystemsconfiguration": { "name": "DeleteVoiceConnectorExternalSystemsConfiguration", "description": "Grants permission to delete the configuration of the external system that is connected with the specified Amazon Chime Voice Connector", "accessLevel": "Write", "resourceTypes": [ { "name": "voice-connector", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletevoiceconnectorgroup": { "name": "DeleteVoiceConnectorGroup", "description": "Grants permission to delete the specified Amazon Chime Voice Connector Group", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deletevoiceconnectororigination": { "name": "DeleteVoiceConnectorOrigination", "description": "Grants permission to delete the origination settings for the specified Amazon Chime Voice Connector", "accessLevel": "Write", "resourceTypes": [ { "name": "voice-connector", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletevoiceconnectorproxy": { "name": "DeleteVoiceConnectorProxy", "description": "Grants permission to delete proxy configuration for the specified Amazon Chime Voice Connector", "accessLevel": "Write", "resourceTypes": [ { "name": "voice-connector", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletevoiceconnectorstreamingconfiguration": { "name": "DeleteVoiceConnectorStreamingConfiguration", "description": "Grants permission to delete streaming configuration for the specified Amazon Chime Voice Connector", "accessLevel": "Write", "resourceTypes": [ { "name": "voice-connector", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletevoiceconnectortermination": { "name": "DeleteVoiceConnectorTermination", "description": "Grants permission to delete the termination settings for the specified Amazon Chime Voice Connector", "accessLevel": "Write", "resourceTypes": [ { "name": "voice-connector", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletevoiceconnectorterminationcredentials": { "name": "DeleteVoiceConnectorTerminationCredentials", "description": "Grants permission to delete SIP termination credentials for the specified Amazon Chime Voice Connector", "accessLevel": "Write", "resourceTypes": [ { "name": "voice-connector", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletevoiceprofile": { "name": "DeleteVoiceProfile", "description": "Grants permission to delete a voice profile", "accessLevel": "Write", "resourceTypes": [ { "name": "voice-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletevoiceprofiledomain": { "name": "DeleteVoiceProfileDomain", "description": "Grants permission to delete a voice profile domain", "accessLevel": "Write", "resourceTypes": [ { "name": "voice-profile-domain", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deregisterappinstanceuserendpoint": { "name": "DeregisterAppInstanceUserEndpoint", "description": "Grants permission to deregister an endpoint for an app instance user", "accessLevel": "Write", "resourceTypes": [ { "name": "app-instance-user", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeappinstance": { "name": "DescribeAppInstance", "description": "Grants permission to get the full details of an AppInstance", "accessLevel": "Read", "resourceTypes": [ { "name": "app-instance", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeappinstanceadmin": { "name": "DescribeAppInstanceAdmin", "description": "Grants permission to get the full details of an AppInstanceAdmin", "accessLevel": "Read", "resourceTypes": [ { "name": "app-instance", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "app-instance-bot", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "app-instance-user", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeappinstancebot": { "name": "DescribeAppInstanceBot", "description": "Grants permission to get the full details of an AppInstanceBot", "accessLevel": "Read", "resourceTypes": [ { "name": "app-instance-bot", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeappinstanceuser": { "name": "DescribeAppInstanceUser", "description": "Grants permission to get the full details of an AppInstanceUser", "accessLevel": "Read", "resourceTypes": [ { "name": "app-instance-user", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeappinstanceuserendpoint": { "name": "DescribeAppInstanceUserEndpoint", "description": "Grants permission to describe an endpoint registered for an app instance user", "accessLevel": "Read", "resourceTypes": [ { "name": "app-instance-user", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describechannel": { "name": "DescribeChannel", "description": "Grants permission to get the full details of a channel", "accessLevel": "Read", "resourceTypes": [ { "name": "app-instance-bot", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "app-instance-user", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "channel", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describechannelban": { "name": "DescribeChannelBan", "description": "Grants permission to get the full details of a channel ban", "accessLevel": "Read", "resourceTypes": [ { "name": "app-instance-bot", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "app-instance-user", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "channel", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describechannelflow": { "name": "DescribeChannelFlow", "description": "Grants permission to get the full details of a channel flow", "accessLevel": "Read", "resourceTypes": [ { "name": "channel-flow", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describechannelmembership": { "name": "DescribeChannelMembership", "description": "Grants permission to get the full details of a channel membership", "accessLevel": "Read", "resourceTypes": [ { "name": "app-instance-bot", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "app-instance-user", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "channel", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describechannelmembershipforappinstanceuser": { "name": "DescribeChannelMembershipForAppInstanceUser", "description": "Grants permission to get the details of a channel based on the membership of the specified user or bot", "accessLevel": "Read", "resourceTypes": [ { "name": "app-instance-bot", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "app-instance-user", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "channel", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describechannelmoderatedbyappinstanceuser": { "name": "DescribeChannelModeratedByAppInstanceUser", "description": "Grants permission to get the full details of a channel moderated by the specified user or