@cloud-copilot/iam-data
Version:
350 lines • 9.45 kB
JSON
{
"batchchecklayeravailability": {
"name": "BatchCheckLayerAvailability",
"description": "Grants permission to check the availability of multiple image layers in a specified registry and repository",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "repository",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"batchdeleteimage": {
"name": "BatchDeleteImage",
"description": "Grants permission to delete a list of specified images within a specified repository",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "repository",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"completelayerupload": {
"name": "CompleteLayerUpload",
"description": "Grants permission to inform Amazon ECR that the image layer upload for a specified registry, repository name, and upload ID, has completed",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "repository",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createrepository": {
"name": "CreateRepository",
"description": "Grants permission to create an image repository",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "repository",
"required": true,
"conditionKeys": [],
"dependentActions": [
"ecr-public:TagResource"
]
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"deleterepository": {
"name": "DeleteRepository",
"description": "Grants permission to delete an existing image repository",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "repository",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleterepositorypolicy": {
"name": "DeleteRepositoryPolicy",
"description": "Grants permission to delete the repository policy from a specified repository",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "repository",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeimagetags": {
"name": "DescribeImageTags",
"description": "Grants permission to describe all the image tags for a given repository",
"accessLevel": "List",
"resourceTypes": [
{
"name": "repository",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeimages": {
"name": "DescribeImages",
"description": "Grants permission to get metadata about the images in a repository, including image size, image tags, and creation date",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "repository",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeregistries": {
"name": "DescribeRegistries",
"description": "Grants permission to retrieve the catalog data associated with a registry",
"accessLevel": "List",
"resourceTypes": [
{
"name": "registry",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describerepositories": {
"name": "DescribeRepositories",
"description": "Grants permission to describe image repositories in a registry",
"accessLevel": "List",
"resourceTypes": [
{
"name": "repository",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getauthorizationtoken": {
"name": "GetAuthorizationToken",
"description": "Grants permission to retrieve a token that is valid for a specified registry for 12 hours",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"getregistrycatalogdata": {
"name": "GetRegistryCatalogData",
"description": "Grants permission to retrieve the catalog data associated with a registry",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "registry",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getrepositorycatalogdata": {
"name": "GetRepositoryCatalogData",
"description": "Grants permission to retrieve the catalog data associated with a repository",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "repository",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getrepositorypolicy": {
"name": "GetRepositoryPolicy",
"description": "Grants permission to retrieve the repository policy for a specified repository",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "repository",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"initiatelayerupload": {
"name": "InitiateLayerUpload",
"description": "Grants permission to notify Amazon ECR that you intend to upload an image layer",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "repository",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listtagsforresource": {
"name": "ListTagsForResource",
"description": "Grants permission to list the tags for an Amazon ECR resource",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "repository",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"putimage": {
"name": "PutImage",
"description": "Grants permission to create or update the image manifest associated with an image",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "repository",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"putregistrycatalogdata": {
"name": "PutRegistryCatalogData",
"description": "Grants permission to create and update the catalog data associated with a registry",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "registry",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"putrepositorycatalogdata": {
"name": "PutRepositoryCatalogData",
"description": "Grants permission to update the catalog data associated with a repository",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "repository",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"setrepositorypolicy": {
"name": "SetRepositoryPolicy",
"description": "Grants permission to apply a repository policy on a specified repository to control access permissions",
"accessLevel": "Permissions management",
"resourceTypes": [
{
"name": "repository",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"tagresource": {
"name": "TagResource",
"description": "Grants permission to tag an Amazon ECR resource",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "repository",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"untagresource": {
"name": "UntagResource",
"description": "Grants permission to untag an Amazon ECR resource",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "repository",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys"
],
"dependentActions": []
},
"uploadlayerpart": {
"name": "UploadLayerPart",
"description": "Grants permission to upload an image layer part to Amazon ECR Public",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "repository",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
}
}