@cloud-copilot/iam-data
Version:
502 lines • 14.6 kB
JSON
{
"acceptconnection": {
"name": "AcceptConnection",
"isPermissionOnly": true,
"description": "Grants permission to accept a request to connect this account to an Amazon CodeCatalyst space",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"associateiamroletoconnection": {
"name": "AssociateIamRoleToConnection",
"isPermissionOnly": true,
"description": "Grants permission to associate an IAM role to a connection",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "connections",
"required": true,
"conditionKeys": [],
"dependentActions": [
"iam:PassRole"
]
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"associateidentitycenterapplicationtospace": {
"name": "AssociateIdentityCenterApplicationToSpace",
"isPermissionOnly": true,
"description": "Grants permission to associate an IAM Identity Center application with an Amazon CodeCatalyst space",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "identity-center-applications",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"associateidentitytoidentitycenterapplication": {
"name": "AssociateIdentityToIdentityCenterApplication",
"isPermissionOnly": true,
"description": "Grants permission to associate an identity with an IAM Identity Center application for an Amazon CodeCatalyst space",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "identity-center-applications",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"batchassociateidentitiestoidentitycenterapplication": {
"name": "BatchAssociateIdentitiesToIdentityCenterApplication",
"isPermissionOnly": true,
"description": "Grants permission to associate multiple identities with an IAM Identity Center application for an Amazon CodeCatalyst space",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "identity-center-applications",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"batchdisassociateidentitiesfromidentitycenterapplication": {
"name": "BatchDisassociateIdentitiesFromIdentityCenterApplication",
"isPermissionOnly": true,
"description": "Grants permission to disassociate multiple identities from an IAM Identity Center application for an Amazon CodeCatalyst space",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "identity-center-applications",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"createidentitycenterapplication": {
"name": "CreateIdentityCenterApplication",
"isPermissionOnly": true,
"description": "Grants permission to create an IAM Identity Center application",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createspace": {
"name": "CreateSpace",
"isPermissionOnly": true,
"description": "Grants permission to create an Amazon CodeCatalyst space",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createspaceadminroleassignment": {
"name": "CreateSpaceAdminRoleAssignment",
"isPermissionOnly": true,
"description": "Grants permission to create an administrator role assignment for a given Amazon CodeCatalyst space and IAM Identity Center application",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "identity-center-applications",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"deleteconnection": {
"name": "DeleteConnection",
"isPermissionOnly": true,
"description": "Grants permission to delete a connection",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "connections",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"deleteidentitycenterapplication": {
"name": "DeleteIdentityCenterApplication",
"isPermissionOnly": true,
"description": "Grants permission to delete an IAM Identity Center application",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "identity-center-applications",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"disassociateiamrolefromconnection": {
"name": "DisassociateIamRoleFromConnection",
"isPermissionOnly": true,
"description": "Grants permission to disassociate an IAM role from a connection",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "connections",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"disassociateidentitycenterapplicationfromspace": {
"name": "DisassociateIdentityCenterApplicationFromSpace",
"isPermissionOnly": true,
"description": "Grants permission to disassociate an IAM Identity Center application from an Amazon CodeCatalyst space",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "identity-center-applications",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"disassociateidentityfromidentitycenterapplication": {
"name": "DisassociateIdentityFromIdentityCenterApplication",
"isPermissionOnly": true,
"description": "Grants permission to disassociate an identity from an IAM Identity Center application for an Amazon CodeCatalyst space",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "identity-center-applications",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"getbillingauthorization": {
"name": "GetBillingAuthorization",
"isPermissionOnly": true,
"description": "Grants permission to describe the billing authorization for a connection",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "connections",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"getconnection": {
"name": "GetConnection",
"isPermissionOnly": true,
"description": "Grants permission to get a connection",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "connections",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"getidentitycenterapplication": {
"name": "GetIdentityCenterApplication",
"isPermissionOnly": true,
"description": "Grants permission to get information about an IAM Identity Center application",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "identity-center-applications",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"getpendingconnection": {
"name": "GetPendingConnection",
"isPermissionOnly": true,
"description": "Grants permission to get a pending request to connect this account to an Amazon CodeCatalyst space",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listconnections": {
"name": "ListConnections",
"isPermissionOnly": true,
"description": "Grants permission to list connections that are not pending",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listiamrolesforconnection": {
"name": "ListIamRolesForConnection",
"isPermissionOnly": true,
"description": "Grants permission to list IAM roles associated with a connection",
"accessLevel": "List",
"resourceTypes": [
{
"name": "connections",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"listidentitycenterapplications": {
"name": "ListIdentityCenterApplications",
"isPermissionOnly": true,
"description": "Grants permission to view a list of all IAM Identity Center applications in the account",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listidentitycenterapplicationsforspace": {
"name": "ListIdentityCenterApplicationsForSpace",
"isPermissionOnly": true,
"description": "Grants permission to view a list of IAM Identity Center applications by Amazon CodeCatalyst space",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listspacesforidentitycenterapplication": {
"name": "ListSpacesForIdentityCenterApplication",
"isPermissionOnly": true,
"description": "Grants permission to view a list of Amazon CodeCatalyst spaces by IAM Identity Center application",
"accessLevel": "List",
"resourceTypes": [
{
"name": "identity-center-applications",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"listtagsforresource": {
"name": "ListTagsForResource",
"isPermissionOnly": true,
"description": "Grants permission to list tags for an Amazon CodeCatalyst resource",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "connections",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "identity-center-applications",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"putbillingauthorization": {
"name": "PutBillingAuthorization",
"isPermissionOnly": true,
"description": "Grants permission to create or update the billing authorization for a connection",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "connections",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"rejectconnection": {
"name": "RejectConnection",
"isPermissionOnly": true,
"description": "Grants permission to reject a request to connect this account to an Amazon CodeCatalyst space",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"synchronizeidentitycenterapplication": {
"name": "SynchronizeIdentityCenterApplication",
"isPermissionOnly": true,
"description": "Grants permission to synchronize an IAM Identity Center application with the backing identity store",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "identity-center-applications",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"tagresource": {
"name": "TagResource",
"isPermissionOnly": true,
"description": "Grants permission to tag an Amazon CodeCatalyst resource",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "connections",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "identity-center-applications",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}",
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"untagresource": {
"name": "UntagResource",
"isPermissionOnly": true,
"description": "Grants permission to untag an Amazon CodeCatalyst resource",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "connections",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "identity-center-applications",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys",
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"updateidentitycenterapplication": {
"name": "UpdateIdentityCenterApplication",
"isPermissionOnly": true,
"description": "Grants permission to update an IAM Identity Center application",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "identity-center-applications",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
}
}