@cloud-copilot/iam-data
Version:
1,680 lines • 134 kB
JSON
{
"acceptdelegate": {
"name": "AcceptDelegate",
"description": "Grants permission to accept the delegate invitation to share management of an Amazon Chime account with another AWS Account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"activateusers": {
"name": "ActivateUsers",
"description": "Grants permission to activate users in an Amazon Chime Enterprise account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"adddomain": {
"name": "AddDomain",
"description": "Grants permission to add a domain to your Amazon Chime account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"addorupdategroups": {
"name": "AddOrUpdateGroups",
"description": "Grants permission to add new or update existing Active Directory or Okta user groups associated with your Amazon Chime Enterprise account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"associatechannelflow": {
"name": "AssociateChannelFlow",
"description": "Grants permission to associate a flow with a channel",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "app-instance-bot",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "app-instance-user",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "channel",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "channel-flow",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"associatephonenumberwithuser": {
"name": "AssociatePhoneNumberWithUser",
"description": "Grants permission to associate a phone number with an Amazon Chime user",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"associatephonenumberswithvoiceconnector": {
"name": "AssociatePhoneNumbersWithVoiceConnector",
"description": "Grants permission to associate multiple phone numbers with an Amazon Chime Voice Connector",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "voice-connector",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"associatephonenumberswithvoiceconnectorgroup": {
"name": "AssociatePhoneNumbersWithVoiceConnectorGroup",
"description": "Grants permission to associate multiple phone numbers with an Amazon Chime Voice Connector Group",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"associatesignindelegategroupswithaccount": {
"name": "AssociateSigninDelegateGroupsWithAccount",
"description": "Grants permission to associate the specified sign-in delegate groups with the specified Amazon Chime account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"associatevoiceconnectorconnect": {
"name": "AssociateVoiceConnectorConnect",
"isPermissionOnly": true,
"description": "Grants permission to associate the specified Amazon Connect instance with an Amazon Chime Voice Connector",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"authorizedirectory": {
"name": "AuthorizeDirectory",
"description": "Grants permission to authorize an Active Directory for your Amazon Chime Enterprise account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"batchcreateattendee": {
"name": "BatchCreateAttendee",
"description": "Grants permission to create new attendees for an active Amazon Chime SDK meeting",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "meeting",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"batchcreatechannelmembership": {
"name": "BatchCreateChannelMembership",
"description": "Grants permission to add multiple users and bots to a channel",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "app-instance-bot",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "app-instance-user",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "channel",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"batchcreateroommembership": {
"name": "BatchCreateRoomMembership",
"description": "Grants permission to batch add room members",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"batchdeletephonenumber": {
"name": "BatchDeletePhoneNumber",
"description": "Grants permission to move up to 50 phone numbers to the deletion queue",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"batchsuspenduser": {
"name": "BatchSuspendUser",
"description": "Grants permission to suspend up to 50 users from a Team or EnterpriseLWA Amazon Chime account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"batchunsuspenduser": {
"name": "BatchUnsuspendUser",
"description": "Grants permission to remove the suspension from up to 50 previously suspended users for the specified Amazon Chime EnterpriseLWA account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"batchupdateattendeecapabilitiesexcept": {
"name": "BatchUpdateAttendeeCapabilitiesExcept",
"description": "Grants permission to update AttendeeCapabilities except the capabilities listed in an ExcludedAttendeeIds table",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "meeting",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"batchupdatephonenumber": {
"name": "BatchUpdatePhoneNumber",
"description": "Grants permission to update phone number details within the UpdatePhoneNumberRequestItem object for up to 50 phone numbers",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"batchupdateuser": {
"name": "BatchUpdateUser",
"description": "Grants permission to update user details within the UpdateUserRequestItem object for up to 20 users for the specified Amazon Chime account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"channelflowcallback": {
"name": "ChannelFlowCallback",
"description": "Grants permission to callback for a message on a channel",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "channel",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"connect": {
"name": "Connect",
"description": "Grants permission to establish a web socket connection for app instance user to the messaging session endpoint",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "app-instance-user",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"connectdirectory": {
"name": "ConnectDirectory",
"description": "Grants permission to connect an Active Directory to your Amazon Chime Enterprise account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": [
"ds:ConnectDirectory"
]
},
"createaccount": {
"name": "CreateAccount",
"description": "Grants permission to create an Amazon Chime account under the administrator's AWS account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"createapikey": {
"name": "CreateApiKey",
"description": "Grants permission to create a new SCIM access key for your Amazon Chime account and Okta configuration",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"createappinstance": {
"name": "CreateAppInstance",
"description": "Grants permission to create an app instance in the AWS account (tag-based access controls are only supported on identity-chime.<region>.amazonaws.com endpoints)",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}"
],
"dependentActions": []
},
"createappinstanceadmin": {
"name": "CreateAppInstanceAdmin",
"description": "Grants permission to promote a user or bot to an AppInstanceAdmin",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "app-instance",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "app-instance-bot",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "app-instance-user",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createappinstancebot": {
"name": "CreateAppInstanceBot",
"description": "Grants permission to create a bot within an AppInstance (tag-based access controls are only supported on identity-chime.<region>.amazonaws.com endpoints)",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}"
],
"dependentActions": []
},
"createappinstanceuser": {
"name": "CreateAppInstanceUser",
"description": "Grants permission to create a user within an AppInstance (tag-based access controls are only supported on identity-chime.<region>.amazonaws.com endpoints)",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}"
],
"dependentActions": []
},
"createattendee": {
"name": "CreateAttendee",
"description": "Grants permission to create a new attendee for an active Amazon Chime SDK meeting",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "meeting",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createbot": {
"name": "CreateBot",
"description": "Grants permission to create a bot for an Amazon Chime Enterprise account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"createcdrbucket": {
"name": "CreateCDRBucket",
"description": "Grants permission to create a new Call Detail Record S3 bucket",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": [
"s3:CreateBucket",
"s3:ListAllMyBuckets"
]
},
"createchannel": {
"name": "CreateChannel",
"description": "Grants permission to create a channel for an app instance in the AWS account (tag-based access controls are only supported on messaging-chime.<region>.amazonaws.com endpoints)",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "app-instance-bot",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "app-instance-user",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}"
],
"dependentActions": []
},
"createchannelban": {
"name": "CreateChannelBan",
"description": "Grants permission to ban a user or bot from a channel",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "app-instance-bot",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "app-instance-user",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "channel",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createchannelflow": {
"name": "CreateChannelFlow",
"description": "Grants permission to create a channel flow for an app instance in the AWS account (tag-based access controls are only supported on messaging-chime.<region>.amazonaws.com endpoints)",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "app-instance",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}"
],
"dependentActions": []
},
"createchannelmembership": {
"name": "CreateChannelMembership",
"description": "Grants permission to add a user or bot to a channel",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "app-instance-bot",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "app-instance-user",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "channel",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createchannelmoderator": {
"name": "CreateChannelModerator",
"description": "Grants permission to create a channel moderator",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "app-instance-bot",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "app-instance-user",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "channel",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createconnectanalyticsconnector": {
"name": "CreateConnectAnalyticsConnector",
"isPermissionOnly": true,
"description": "Grants permission to create an Amazon Connect Analytics Connector in the AWS account (tag-based access controls are only supported on voice-chime.<region>.amazonaws.com endpoints)",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}"
],
"dependentActions": [
"chime:CreateVoiceConnector"
]
},
"createconnectcalltransferconnector": {
"name": "CreateConnectCallTransferConnector",
"isPermissionOnly": true,
"description": "Grants permission to create an Amazon Connect Call Transfer Connector in the AWS account (tag-based access controls are only supported on voice-chime.<region>.amazonaws.com endpoints)",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}"
],
"dependentActions": [
"chime:CreateVoiceConnector"
]
},
"createmediacapturepipeline": {
"name": "CreateMediaCapturePipeline",
"description": "Grants permission to create a media capture pipeline (tag-based access controls are only supported on media-pipelines-chime.<region>.amazonaws.com endpoints)",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}"
],
"dependentActions": [
"s3:GetBucketPolicy"
]
},
"createmediaconcatenationpipeline": {
"name": "CreateMediaConcatenationPipeline",
"description": "Grants permission to create a media concatenation pipeline (tag-based access controls are only supported on media-pipelines-chime.<region>.amazonaws.com endpoints)",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}"
],
"dependentActions": [
"s3:GetBucketPolicy"
]
},
"createmediainsightspipeline": {
"name": "CreateMediaInsightsPipeline",
"description": "Grants permission to create a media insights pipeline (tag-based access controls are only supported on media-pipelines-chime.<region>.amazonaws.com endpoints)",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "media-insights-pipeline-configuration",
"required": true,
"conditionKeys": [],
"dependentActions": [
"chime:TagResource",
"kinesisvideo:DescribeStream"
]
}
],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}"
],
"dependentActions": []
},
"createmediainsightspipelineconfiguration": {
"name": "CreateMediaInsightsPipelineConfiguration",
"description": "Grants permission to create a media insights pipeline configuration (tag-based access controls are only supported on media-pipelines-chime.<region>.amazonaws.com endpoints)",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}"
],
"dependentActions": [
"chime:TagResource",
"iam:PassRole",
"kinesis:DescribeStream",
"s3:ListBucket"
]
},
"createmedialiveconnectorpipeline": {
"name": "CreateMediaLiveConnectorPipeline",
"description": "Grants permission to create a media live connector pipeline (tag-based access controls are only supported on media-pipelines-chime.<region>.amazonaws.com endpoints)",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}"
],
"dependentActions": []
},
"createmediapipelinekinesisvideostreampool": {
"name": "CreateMediaPipelineKinesisVideoStreamPool",
"description": "Grants permission to create kinesis video stream pool (tag-based access controls are only supported on media-pipelines-chime.<region>.amazonaws.com endpoints)",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}"
],
"dependentActions": [
"kinesis:DescribeStream",
"kinesisvideo:CreateStream",
"kinesisvideo:GetDataEndpoint",
"kinesisvideo:ListStreams"
]
},
"createmediastreampipeline": {
"name": "CreateMediaStreamPipeline",
"description": "Grants permission to create a media stream pipeline (tag-based access controls are only supported on media-pipelines-chime.<region>.amazonaws.com endpoints)",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "media-pipeline-kinesis-video-stream-pool",
"required": true,
"conditionKeys": [],
"dependentActions": [
"kinesisvideo:DescribeStream",
"kinesisvideo:GetDataEndpoint",
"kinesisvideo:PutMedia"
]
}
],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}"
],
"dependentActions": []
},
"createmeeting": {
"name": "CreateMeeting",
"description": "Grants permission to create a new meeting in the specified media Region, with no initial attendees (tag-based access controls are only supported on meetings-chime.<region>.amazonaws.com endpoints)",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createmeetingdialout": {
"name": "CreateMeetingDialOut",
"description": "Grants permission to call a phone number to join the specified Amazon Chime SDK meeting",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "meeting",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createmeetingwithattendees": {
"name": "CreateMeetingWithAttendees",
"description": "Grants permission to create a new meeting in the specified media Region, with a set of attendees (tag-based access controls are only supported on meetings-chime.<region>.amazonaws.com endpoints)",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createphonenumberorder": {
"name": "CreatePhoneNumberOrder",
"description": "Grants permission to create a phone number order with the Carriers",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"createproxysession": {
"name": "CreateProxySession",
"description": "Grants permission to create a proxy session for the specified Amazon Chime Voice Connector",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "voice-connector",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createroom": {
"name": "CreateRoom",
"description": "Grants permission to create a room",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"createroommembership": {
"name": "CreateRoomMembership",
"description": "Grants permission to add a room member",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"createsipmediaapplication": {
"name": "CreateSipMediaApplication",
"description": "Grants permission to create an Amazon Chime SIP media application in the AWS account (tag-based access controls are only supported on voice-chime.<region>.amazonaws.com endpoints)",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}"
],
"dependentActions": []
},
"createsipmediaapplicationcall": {
"name": "CreateSipMediaApplicationCall",
"description": "Grants permission to create outbound call for Amazon Chime SIP media application under the administrator's AWS account",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "sip-media-application",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createsiprule": {
"name": "CreateSipRule",
"description": "Grants permission to create an Amazon Chime SIP rule under the administrator's AWS account",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "sip-media-application",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createuser": {
"name": "CreateUser",
"description": "Grants permission to create a user under the specified Amazon Chime account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"createvoiceconnector": {
"name": "CreateVoiceConnector",
"description": "Grants permission to create a Voice Connector in the AWS account (tag-based access controls are only supported on voice-chime.<region>.amazonaws.com endpoints)",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}"
],
"dependentActions": [
"chime:CreateConnectAnalyticsConnector",
"chime:CreateConnectCallTransferConnector"
]
},
"createvoiceconnectorgroup": {
"name": "CreateVoiceConnectorGroup",
"description": "Grants permission to create a Amazon Chime Voice Connector Group under the administrator's AWS account",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "voice-connector",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createvoiceprofile": {
"name": "CreateVoiceProfile",
"description": "Grants permission to create a voice profile",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"createvoiceprofiledomain": {
"name": "CreateVoiceProfileDomain",
"description": "Grants permission to create a voice profile domain (tag-based access controls are only supported on voice-chime.<region>.amazonaws.com endpoints)",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}"
],
"dependentActions": [
"chime:TagResource",
"kms:CreateGrant",
"kms:DescribeKey"
]
},
"deleteaccount": {
"name": "DeleteAccount",
"description": "Grants permission to delete the specified Amazon Chime account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deleteaccountopenidconfig": {
"name": "DeleteAccountOpenIdConfig",
"description": "Grants permission to delete the OpenIdConfig attributes from your Amazon Chime account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deleteapikey": {
"name": "DeleteApiKey",
"description": "Grants permission to delete the specified SCIM access key associated with your Amazon Chime account and Okta configuration",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deleteappinstance": {
"name": "DeleteAppInstance",
"description": "Grants permission to delete an AppInstance",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "app-instance",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteappinstanceadmin": {
"name": "DeleteAppInstanceAdmin",
"description": "Grants permission to demote an AppInstanceAdmin to a user or bot",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "app-instance",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "app-instance-bot",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "app-instance-user",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteappinstancebot": {
"name": "DeleteAppInstanceBot",
"description": "Grants permission to delete an AppInstanceBot",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "app-instance-bot",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteappinstancestreamingconfigurations": {
"name": "DeleteAppInstanceStreamingConfigurations",
"description": "Grants permission to disable data streaming for the app instance",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "app-instance",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteappinstanceuser": {
"name": "DeleteAppInstanceUser",
"description": "Grants permission to delete an AppInstanceUser",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "app-instance-user",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteattendee": {
"name": "DeleteAttendee",
"description": "Grants permission to delete the specified attendee from an Amazon Chime SDK meeting",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "meeting",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletecdrbucket": {
"name": "DeleteCDRBucket",
"description": "Grants permission to delete a Call Detail Record S3 bucket from your Amazon Chime account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": [
"s3:DeleteBucket"
]
},
"deletechannel": {
"name": "DeleteChannel",
"description": "Grants permission to delete a channel",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "app-instance-bot",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "app-instance-user",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "channel",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletechannelban": {
"name": "DeleteChannelBan",
"description": "Grants permission to remove a user or bot from a channel's ban list",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "app-instance-bot",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "app-instance-user",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "channel",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletechannelflow": {
"name": "DeleteChannelFlow",
"description": "Grants permission to delete a channel flow",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "channel",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletechannelmembership": {
"name": "DeleteChannelMembership",
"description": "Grants permission to remove a member from a channel",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "app-instance-bot",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "app-instance-user",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "channel",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletechannelmessage": {
"name": "DeleteChannelMessage",
"description": "Grants permission to delete a channel message",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "app-instance-bot",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "app-instance-user",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "channel",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletechannelmoderator": {
"name": "DeleteChannelModerator",
"description": "Grants permission to delete a channel moderator",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "app-instance-bot",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "app-instance-user",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "channel",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletedelegate": {
"name": "DeleteDelegate",
"description": "Grants permission to delete delegated AWS account management from your Amazon Chime account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deletedomain": {
"name": "DeleteDomain",
"description": "Grants permission to delete a domain from your Amazon Chime account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deleteeventsconfiguration": {
"name": "DeleteEventsConfiguration",
"description": "Grants permission to delete an events configuration for a bot to receive outgoing events",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deletegroups": {
"name": "DeleteGroups",
"description": "Grants permission to delete Active Directory or Okta user groups from your Amazon Chime Enterprise account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deletemediacapturepipeline": {
"name": "DeleteMediaCapturePipeline",
"description": "Grants permission to delete a media capture pipeline",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "media-pipeline",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletemediainsightspipelineconfiguration": {
"name": "DeleteMediaInsightsPipelineConfiguration",
"description": "Grants permission to delete a media insights pipeline configuration",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "media-insights-pipeline-configuration",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": [
"chime:ListVoiceConnectors"
]
},
"deletemediapipeline": {
"name": "DeleteMediaPipeline",
"description": "Grants permission to delete a media pipeline",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "media-pipeline",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletemediapipelinekinesisvideostreampool": {
"name": "DeleteMediaPipelineKinesisVideoStreamPool",
"description": "Grants permission to delete kinesis video stream pool",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "media-pipeline-kinesis-video-stream-pool",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletemeeting": {
"name": "DeleteMeeting",
"description": "Grants permission to delete the specified Amazon Chime SDK meeting",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "meeting",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletemessagingstreamingconfigurations": {
"name": "DeleteMessagingStreamingConfigurations",
"description": "Grants permission to delete the data streaming configurations of an AppInstance",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "app-instance",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletephonenumber": {
"name": "DeletePhoneNumber",
"description": "Grants permission to move a phone number to the deletion queue",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deleteproxysession": {
"name": "DeleteProxySession",
"description": "Grants permission to delete a proxy session for the specified Amazon Chime Voice Connector",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "voice-connector",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteroom": {
"name": "DeleteRoom",
"description": "Grants permission to delete a room",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deleteroommembership": {
"name": "DeleteRoomMembership",
"description": "Grants permission to remove a room member",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deletesipmediaapplication": {
"name": "DeleteSipMediaApplication",
"description": "Grants permission to delete Amazon Chime SIP media application under the administrator's AWS account",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "sip-media-application",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletesiprule": {
"name": "DeleteSipRule",
"description": "Grants permission to delete Amazon Chime SIP rule under the administrator's AWS account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deletevoiceconnector": {
"name": "DeleteVoiceConnector",
"description": "Grants permission to delete the specified Amazon Chime Voice Connector",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "voice-connector",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": [
"logs:CreateLogDelivery",
"logs:DeleteLogDelivery",
"logs:GetLogDelivery",
"logs:ListLogDeliveries"
]
},
"deletevoiceconnectoremergencycallingconfiguration": {
"name": "DeleteVoiceConnectorEmergencyCallingConfiguration",
"description": "Grants permission to delete emergency calling configuration for the specified Amazon Chime Voice Connector",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "voice-connector",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletevoiceconnectorexternalsystemsconfiguration": {
"name": "DeleteVoiceConnectorExternalSystemsConfiguration",
"description": "Grants permission to delete the configuration of the external system that is connected with the specified Amazon Chime Voice Connector",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "voice-connector",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletevoiceconnectorgroup": {
"name": "DeleteVoiceConnectorGroup",
"description": "Grants permission to delete the specified Amazon Chime Voice Connector Group",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deletevoiceconnectororigination": {
"name": "DeleteVoiceConnectorOrigination",
"description": "Grants permission to delete the origination settings for the specified Amazon Chime Voice Connector",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "voice-connector",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletevoiceconnectorproxy": {
"name": "DeleteVoiceConnectorProxy",
"description": "Grants permission to delete proxy configuration for the specified Amazon Chime Voice Connector",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "voice-connector",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletevoiceconnectorstreamingconfiguration": {
"name": "DeleteVoiceConnectorStreamingConfiguration",
"description": "Grants permission to delete streaming configuration for the specified Amazon Chime Voice Connector",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "voice-connector",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletevoiceconnectortermination": {
"name": "DeleteVoiceConnectorTermination",
"description": "Grants permission to delete the termination settings for the specified Amazon Chime Voice Connector",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "voice-connector",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletevoiceconnectorterminationcredentials": {
"name": "DeleteVoiceConnectorTerminationCredentials",
"description": "Grants permission to delete SIP termination credentials for the specified Amazon Chime Voice Connector",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "voice-connector",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletevoiceprofile": {
"name": "DeleteVoiceProfile",
"description": "Grants permission to delete a voice profile",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "voice-profile",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletevoiceprofiledomain": {
"name": "DeleteVoiceProfileDomain",
"description": "Grants permission to delete a voice profile domain",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "voice-profile-domain",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deregisterappinstanceuserendpoint": {
"name": "DeregisterAppInstanceUserEndpoint",
"description": "Grants permission to deregister an endpoint for an app instance user",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "app-instance-user",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeappinstance": {
"name": "DescribeAppInstance",
"description": "Grants permission to get the full details of an AppInstance",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "app-instance",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeappinstanceadmin": {
"name": "DescribeAppInstanceAdmin",
"description": "Grants permission to get the full details of an AppInstanceAdmin",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "app-instance",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "app-instance-bot",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "app-instance-user",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeappinstancebot": {
"name": "DescribeAppInstanceBot",
"description": "Grants permission to get the full details of an AppInstanceBot",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "app-instance-bot",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeappinstanceuser": {
"name": "DescribeAppInstanceUser",
"description": "Grants permission to get the full details of an AppInstanceUser",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "app-instance-user",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeappinstanceuserendpoint": {
"name": "DescribeAppInstanceUserEndpoint",
"description": "Grants permission to describe an endpoint registered for an app instance user",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "app-instance-user",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describechannel": {
"name": "DescribeChannel",
"description": "Grants permission to get the full details of a channel",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "app-instance-bot",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "app-instance-user",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "channel",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describechannelban": {
"name": "DescribeChannelBan",
"description": "Grants permission to get the full details of a channel ban",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "app-instance-bot",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "app-instance-user",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "channel",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describechannelflow": {
"name": "DescribeChannelFlow",
"description": "Grants permission to get the full details of a channel flow",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "channel-flow",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describechannelmembership": {
"name": "DescribeChannelMembership",
"description": "Grants permission to get the full details of a channel membership",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "app-instance-bot",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "app-instance-user",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "channel",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describechannelmembershipforappinstanceuser": {
"name": "DescribeChannelMembershipForAppInstanceUser",
"description": "Grants permission to get the details of a channel based on the membership of the specified user or bot",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "app-instance-bot",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "app-instance-user",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "channel",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describechannelmoderatedbyappinstanceuser": {
"name": "DescribeChannelModeratedByAppInstanceUser",
"description": "Grants permission to get the full details of a channel moderated by the specified user or