@cloud-copilot/iam-data

{ "associatefailbackclienttorecoveryinstancefordrs": { "name": "AssociateFailbackClientToRecoveryInstanceForDrs", "isPermissionOnly": true, "description": "Grants permission to get associate failback client to recovery instance", "accessLevel": "Write", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "associatesourcenetworkstack": { "name": "AssociateSourceNetworkStack", "description": "Grants permission to associate CloudFormation stack with source network", "accessLevel": "Write", "resourceTypes": [ { "name": "SourceNetworkResource", "required": true, "conditionKeys": [], "dependentActions": [ "cloudformation:DescribeStackResource", "cloudformation:DescribeStacks", "drs:GetLaunchConfiguration", "ec2:CreateLaunchTemplateVersion", "ec2:DescribeLaunchTemplateVersions", "ec2:DescribeLaunchTemplates", "ec2:DescribeSecurityGroups", "ec2:DescribeSubnets", "ec2:DescribeVpcs", "ec2:ModifyLaunchTemplate" ] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "batchcreatevolumesnapshotgroupfordrs": { "name": "BatchCreateVolumeSnapshotGroupForDrs", "isPermissionOnly": true, "description": "Grants permission to batch create volume snapshot group", "accessLevel": "Write", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchdeletesnapshotrequestfordrs": { "name": "BatchDeleteSnapshotRequestForDrs", "isPermissionOnly": true, "description": "Grants permission to batch delete snapshot request", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createconvertedsnapshotfordrs": { "name": "CreateConvertedSnapshotForDrs", "isPermissionOnly": true, "description": "Grants permission to create converted snapshot", "accessLevel": "Write", "resourceTypes": [ { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createextendedsourceserver": { "name": "CreateExtendedSourceServer", "description": "Grants permission to extend a source server", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [ "drs:DescribeSourceServers", "drs:GetReplicationConfiguration" ] }, "createlaunchconfigurationtemplate": { "name": "CreateLaunchConfigurationTemplate", "description": "Grants permission to create launch configuration template", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createrecoveryinstancefordrs": { "name": "CreateRecoveryInstanceForDrs", "isPermissionOnly": true, "description": "Grants permission to create recovery instance", "accessLevel": "Write", "resourceTypes": [ { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createreplicationconfigurationtemplate": { "name": "CreateReplicationConfigurationTemplate", "description": "Grants permission to create replication configuration template", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [ "ec2:CreateSecurityGroup", "ec2:DescribeSecurityGroups", "ec2:DescribeSubnets", "ec2:GetEbsDefaultKmsKeyId", "ec2:GetEbsEncryptionByDefault", "kms:CreateGrant", "kms:DescribeKey" ] }, "createsourcenetwork": { "name": "CreateSourceNetwork", "description": "Grants permission to create a source network", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [ "ec2:DescribeInstances", "ec2:DescribeVpcs" ] }, "createsourceserverfordrs": { "name": "CreateSourceServerForDrs", "isPermissionOnly": true, "description": "Grants permission to create a source server", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "deletejob": { "name": "DeleteJob", "description": "Grants permission to delete a job", "accessLevel": "Write", "resourceTypes": [ { "name": "JobResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletelaunchaction": { "name": "DeleteLaunchAction", "description": "Grants permission to delete a launch action", "accessLevel": "Write", "resourceTypes": [ { "name": "LaunchConfigurationTemplateResource", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "SourceServerResource", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletelaunchconfigurationtemplate": { "name": "DeleteLaunchConfigurationTemplate", "description": "Grants permission to delete launch configuration template", "accessLevel": "Write", "resourceTypes": [ { "name": "LaunchConfigurationTemplateResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleterecoveryinstance": { "name": "DeleteRecoveryInstance", "description": "Grants permission to delete recovery instance", "accessLevel": "Write", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletereplicationconfigurationtemplate": { "name": "DeleteReplicationConfigurationTemplate", "description": "Grants permission to delete replication configuration template", "accessLevel": "Write", "resourceTypes": [ { "name": "ReplicationConfigurationTemplateResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletesourcenetwork": { "name": "DeleteSourceNetwork", "description": "Grants permission to delete source network", "accessLevel": "Write", "resourceTypes": [ { "name": "SourceNetworkResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletesourceserver": { "name": "DeleteSourceServer", "description": "Grants permission to delete source server", "accessLevel": "Write", "resourceTypes": [ { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describejoblogitems": { "name": "DescribeJobLogItems", "description": "Grants permission to describe job log items", "accessLevel": "Read", "resourceTypes": [ { "name": "JobResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describejobs": { "name": "DescribeJobs", "description": "Grants permission to describe jobs", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describelaunchconfigurationtemplates": { "name": "DescribeLaunchConfigurationTemplates", "description": "Grants permission to describe launch configuration template", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describerecoveryinstances": { "name": "DescribeRecoveryInstances", "description": "Grants permission to describe recovery instances", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [ "drs:DescribeSourceServers", "ec2:DescribeInstances" ] }, "describerecoverysnapshots": { "name": "DescribeRecoverySnapshots", "description": "Grants permission to describe recovery snapshots", "accessLevel": "Read", "resourceTypes": [ { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describereplicationconfigurationtemplates": { "name": "DescribeReplicationConfigurationTemplates", "description": "Grants permission to describe replication configuration template", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describereplicationserverassociationsfordrs": { "name": "DescribeReplicationServerAssociationsForDrs", "isPermissionOnly": true, "description": "Grants permission to describe replication server associations", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describesnapshotrequestsfordrs": { "name": "DescribeSnapshotRequestsForDrs", "isPermissionOnly": true, "description": "Grants permission to describe snapshot requests", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describesourcenetworks": { "name": "DescribeSourceNetworks", "description": "Grants permission to describe source networks", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describesourceservers": { "name": "DescribeSourceServers", "description": "Grants permission to describe source servers", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "disconnectrecoveryinstance": { "name": "DisconnectRecoveryInstance", "description": "Grants permission to disconnect recovery instance", "accessLevel": "Write", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "disconnectsourceserver": { "name": "DisconnectSourceServer", "description": "Grants permission to disconnect source server", "accessLevel": "Write", "resourceTypes": [ { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "exportsourcenetworkcfntemplate": { "name": "ExportSourceNetworkCfnTemplate", "description": "Grants permission to export CloudFormation template which contains source network resources", "accessLevel": "Write", "resourceTypes": [ { "name": "SourceNetworkResource", "required": true, "conditionKeys": [], "dependentActions": [ "s3:GetBucketLocation", "s3:GetObject", "s3:PutObject" ] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "getagentcommandfordrs": { "name": "GetAgentCommandForDrs", "isPermissionOnly": true, "description": "Grants permission to get agent command", "accessLevel": "Read", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getagentconfirmedresumeinfofordrs": { "name": "GetAgentConfirmedResumeInfoForDrs", "isPermissionOnly": true, "description": "Grants permission to get agent confirmed resume info", "accessLevel": "Read", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getagentinstallationassetsfordrs": { "name": "GetAgentInstallationAssetsForDrs", "isPermissionOnly": true, "description": "Grants permission to get agent installation assets", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getagentreplicationinfofordrs": { "name": "GetAgentReplicationInfoForDrs", "isPermissionOnly": true, "description": "Grants permission to get agent replication info", "accessLevel": "Read", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getagentruntimeconfigurationfordrs": { "name": "GetAgentRuntimeConfigurationForDrs", "isPermissionOnly": true, "description": "Grants permission to get agent runtime configuration", "accessLevel": "Read", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getagentsnapshotcreditsfordrs": { "name": "GetAgentSnapshotCreditsForDrs", "isPermissionOnly": true, "description": "Grants permission to get agent snapshot credits", "accessLevel": "Read", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getchannelcommandsfordrs": { "name": "GetChannelCommandsForDrs", "isPermissionOnly": true, "description": "Grants permission to get channel commands", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getfailbackcommandfordrs": { "name": "GetFailbackCommandForDrs", "isPermissionOnly": true, "description": "Grants permission to get failback command", "accessLevel": "Read", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getfailbacklaunchrequestedfordrs": { "name": "GetFailbackLaunchRequestedForDrs", "isPermissionOnly": true, "description": "Grants permission to get failback launch requested", "accessLevel": "Read", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getfailbackreplicationconfiguration": { "name": "GetFailbackReplicationConfiguration", "description": "Grants permission to get failback replication configuration", "accessLevel": "Read", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getlaunchconfiguration": { "name": "GetLaunchConfiguration", "description": "Grants permission to get launch configuration", "accessLevel": "Read", "resourceTypes": [ { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getreplicationconfiguration": { "name": "GetReplicationConfiguration", "description": "Grants permission to get replication configuration", "accessLevel": "Read", "resourceTypes": [ { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getsuggestedfailbackclientdevicemappingfordrs": { "name": "GetSuggestedFailbackClientDeviceMappingForDrs", "isPermissionOnly": true, "description": "Grants permission to get suggested failback client device mapping", "accessLevel": "Read", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "initializeservice": { "name": "InitializeService", "description": "Grants permission to initialize service", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [ "iam:AddRoleToInstanceProfile", "iam:CreateInstanceProfile", "iam:CreateServiceLinkedRole", "iam:GetInstanceProfile" ] }, "issueagentcertificatefordrs": { "name": "IssueAgentCertificateForDrs", "isPermissionOnly": true, "description": "Grants permission to issue an agent certificate", "accessLevel": "Write", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listextensiblesourceservers": { "name": "ListExtensibleSourceServers", "description": "Grants permission to list extensible source servers", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [ "drs:DescribeSourceServers" ] }, "listlaunchactions": { "name": "ListLaunchActions", "description": "Grants permission to list launch actions", "accessLevel": "Read", "resourceTypes": [ { "name": "LaunchConfigurationTemplateResource", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "SourceServerResource", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "liststagingaccounts": { "name": "ListStagingAccounts", "description": "Grants permission to list staging accounts", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to list tags for a resource", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "notifyagentauthenticationfordrs": { "name": "NotifyAgentAuthenticationForDrs", "isPermissionOnly": true, "description": "Grants permission to notify agent authentication", "accessLevel": "Write", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "notifyagentconnectedfordrs": { "name": "NotifyAgentConnectedForDrs", "isPermissionOnly": true, "description": "Grants permission to notify agent is connected", "accessLevel": "Write", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "notifyagentdisconnectedfordrs": { "name": "NotifyAgentDisconnectedForDrs", "isPermissionOnly": true, "description": "Grants permission to notify agent is disconnected", "accessLevel": "Write", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "notifyagentreplicationprogressfordrs": { "name": "NotifyAgentReplicationProgressForDrs", "isPermissionOnly": true, "description": "Grants permission to notify agent replication progress", "accessLevel": "Write", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "notifyconsistencyattainedfordrs": { "name": "NotifyConsistencyAttainedForDrs", "isPermissionOnly": true, "description": "Grants permission to notify consistency attained", "accessLevel": "Write", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "notifyreplicationserverauthenticationfordrs": { "name": "NotifyReplicationServerAuthenticationForDrs", "isPermissionOnly": true, "description": "Grants permission to notify replication server authentication", "accessLevel": "Write", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "notifyvolumeeventfordrs": { "name": "NotifyVolumeEventForDrs", "isPermissionOnly": true, "description": "Grants permission to notify replicator volume events", "accessLevel": "Write", "resourceTypes": [ { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putlaunchaction": { "name": "PutLaunchAction", "description": "Grants permission to put a launch action", "accessLevel": "Write", "resourceTypes": [ { "name": "LaunchConfigurationTemplateResource", "required": false, "conditionKeys": [], "dependentActions": [ "ssm:DescribeDocument" ] }, { "name": "SourceServerResource", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "retrydatareplication": { "name": "RetryDataReplication", "description": "Grants permission to retry data replication", "accessLevel": "Write", "resourceTypes": [ { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "reversereplication": { "name": "ReverseReplication", "description": "Grants permission to reverse replication", "accessLevel": "Write", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [ "drs:DescribeReplicationConfigurationTemplates", "drs:DescribeSourceServers", "ec2:DescribeInstances" ] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "sendagentlogsfordrs": { "name": "SendAgentLogsForDrs", "isPermissionOnly": true, "description": "Grants permission to send agent logs", "accessLevel": "Write", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "sendagentmetricsfordrs": { "name": "SendAgentMetricsForDrs", "isPermissionOnly": true, "description": "Grants permission to send agent metrics", "accessLevel": "Write", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "sendchannelcommandresultfordrs": { "name": "SendChannelCommandResultForDrs", "isPermissionOnly": true, "description": "Grants permission to send channel command result", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "sendclientlogsfordrs": { "name": "SendClientLogsForDrs", "isPermissionOnly": true, "description": "Grants permission to send client logs", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "sendclientmetricsfordrs": { "name": "SendClientMetricsForDrs", "isPermissionOnly": true, "description": "Grants permission to send client metrics", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "sendvolumestatsfordrs": { "name": "SendVolumeStatsForDrs", "isPermissionOnly": true, "description": "Grants permission to send volume throughput statistics", "accessLevel": "Write", "resourceTypes": [ { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "startfailbacklaunch": { "name": "StartFailbackLaunch", "description": "Grants permission to start failback launch", "accessLevel": "Write", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "startrecovery": { "name": "StartRecovery", "description": "Grants permission to start recovery", "accessLevel": "Write", "resourceTypes": [ { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [ "drs:CreateRecoveryInstanceForDrs", "drs:ListTagsForResource", "ec2:AttachVolume", "ec2:AuthorizeSecurityGroupEgress", "ec2:AuthorizeSecurityGroupIngress", "ec2:CreateLaunchTemplate", "ec2:CreateLaunchTemplateVersion", "ec2:CreateSnapshot", "ec2:CreateTags", "ec2:CreateVolume", "ec2:DeleteLaunchTemplateVersions", "ec2:DeleteSnapshot", "ec2:DeleteVolume", "ec2:DescribeAccountAttributes", "ec2:DescribeAvailabilityZones", "ec2:DescribeImages", "ec2:DescribeInstanceAttribute", "ec2:DescribeInstanceStatus", "ec2:DescribeInstanceTypes", "ec2:DescribeInstances", "ec2:DescribeLaunchTemplateVersions", "ec2:DescribeLaunchTemplates", "ec2:DescribeSecurityGroups", "ec2:DescribeSnapshots", "ec2:DescribeSubnets", "ec2:DescribeVolumes", "ec2:DetachVolume", "ec2:ModifyInstanceAttribute", "ec2:ModifyLaunchTemplate", "ec2:RevokeSecurityGroupEgress", "ec2:RunInstances", "ec2:StartInstances", "ec2:StopInstances", "ec2:TerminateInstances", "iam:PassRole" ] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "startreplication": { "name": "StartReplication", "description": "Grants permission to start replication", "accessLevel": "Write", "resourceTypes": [ { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "startsourcenetworkrecovery": { "name": "StartSourceNetworkRecovery", "description": "Grants permission to start network recovery", "accessLevel": "Write", "resourceTypes": [ { "name": "SourceNetworkResource", "required": true, "conditionKeys": [], "dependentActions": [ "cloudformation:CreateStack", "cloudformation:DescribeStackResource", "cloudformation:DescribeStacks", "cloudformation:UpdateStack", "drs:GetLaunchConfiguration", "ec2:CreateLaunchTemplateVersion", "ec2:DescribeLaunchTemplateVersions", "ec2:DescribeLaunchTemplates", "ec2:DescribeSecurityGroups", "ec2:DescribeSubnets", "ec2:DescribeVpcs", "ec2:ModifyLaunchTemplate", "s3:GetObject", "s3:PutObject" ] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "startsourcenetworkreplication": { "name": "StartSourceNetworkReplication", "description": "Grants permission to start network replication", "accessLevel": "Write", "resourceTypes": [ { "name": "SourceNetworkResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "stopfailback": { "name": "StopFailback", "description": "Grants permission to stop failback", "accessLevel": "Write", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "stopreplication": { "name": "StopReplication", "description": "Grants permission to stop replication", "accessLevel": "Write", "resourceTypes": [ { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "stopsourcenetworkreplication": { "name": "StopSourceNetworkReplication", "description": "Grants permission to stop network replication", "accessLevel": "Write", "resourceTypes": [ { "name": "SourceNetworkResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to assign a resource tag", "accessLevel": "Tagging", "resourceTypes": [ { "name": "JobResource", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "LaunchConfigurationTemplateResource", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "RecoveryInstanceResource", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ReplicationConfigurationTemplateResource", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "SourceNetworkResource", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "SourceServerResource", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "drs:CreateAction" ], "dependentActions": [] }, "terminaterecoveryinstances": { "name": "TerminateRecoveryInstances", "description": "Grants permission to terminate recovery instances", "accessLevel": "Write", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [ "drs:DescribeSourceServers", "ec2:DeleteVolume", "ec2:DescribeInstances", "ec2:DescribeVolumes", "ec2:TerminateInstances" ] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to untag a resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "JobResource", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "LaunchConfigurationTemplateResource", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "RecoveryInstanceResource", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ReplicationConfigurationTemplateResource", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "SourceNetworkResource", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "SourceServerResource", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] }, "updateagentbacklogfordrs": { "name": "UpdateAgentBacklogForDrs", "isPermissionOnly": true, "description": "Grants permission to update agent backlog", "accessLevel": "Write", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateagentconversioninfofordrs": { "name": "UpdateAgentConversionInfoForDrs", "isPermissionOnly": true, "description": "Grants permission to update agent conversion info", "accessLevel": "Write", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateagentreplicationinfofordrs": { "name": "UpdateAgentReplicationInfoForDrs", "isPermissionOnly": true, "description": "Grants permission to update agent replication info", "accessLevel": "Write", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateagentreplicationprocessstatefordrs": { "name": "UpdateAgentReplicationProcessStateForDrs", "isPermissionOnly": true, "description": "Grants permission to update agent replication process state", "accessLevel": "Write", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateagentsourcepropertiesfordrs": { "name": "UpdateAgentSourcePropertiesForDrs", "isPermissionOnly": true, "description": "Grants permission to update agent source properties", "accessLevel": "Write", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatefailbackclientdevicemappingfordrs": { "name": "UpdateFailbackClientDeviceMappingForDrs", "isPermissionOnly": true, "description": "Grants permission to update failback client device mapping", "accessLevel": "Write", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatefailbackclientlastseenfordrs": { "name": "UpdateFailbackClientLastSeenForDrs", "isPermissionOnly": true, "description": "Grants permission to update failback client last seen", "accessLevel": "Write", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatefailbackreplicationconfiguration": { "name": "UpdateFailbackReplicationConfiguration", "description": "Grants permission to update failback replication configuration", "accessLevel": "Write", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatelaunchconfiguration": { "name": "UpdateLaunchConfiguration", "description": "Grants permission to update launch configuration", "accessLevel": "Write", "resourceTypes": [ { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "ec2:DescribeInstances" ] }, "updatelaunchconfigurationtemplate": { "name": "UpdateLaunchConfigurationTemplate", "description": "Grants permission to update launch configuration", "accessLevel": "Write", "resourceTypes": [ { "name": "LaunchConfigurationTemplateResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatereplicationcertificatefordrs": { "name": "UpdateReplicationCertificateForDrs", "isPermissionOnly": true, "description": "Grants permission to update a replication certificate", "accessLevel": "Write", "resourceTypes": [ { "name": "RecoveryInstanceResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatereplicationconfiguration": { "name": "UpdateReplicationConfiguration", "description": "Grants permission to update replication configuration", "accessLevel": "Write", "resourceTypes": [ { "name": "SourceServerResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "ec2:CreateSecurityGroup", "ec2:DescribeSecurityGroups", "ec2:DescribeSubnets", "ec2:GetEbsDefaultKmsKeyId", "ec2:GetEbsEncryptionByDefault", "kms:CreateGrant", "kms:DescribeKey" ] }, "updatereplicationconfigurationtemplate": { "name": "UpdateReplicationConfigurationTemplate", "description": "Grants permission to update replication configuration template", "accessLevel": "Write", "resourceTypes": [ { "name": "ReplicationConfigurationTemplateResource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "ec2:CreateSecurityGroup", "ec2:DescribeSecurityGroups", "ec2:DescribeSubnets", "ec2:GetEbsDefaultKmsKeyId", "ec2:GetEbsEncryptionByDefault", "kms:CreateGrant", "kms:DescribeKey" ] } }