@cloud-copilot/iam-data

{ "associateeiptovlan": { "name": "AssociateEipToVlan", "description": "Grants permission to associate an Elastic IP address (EIP) with a public VLAN in an Amazon EVS environment", "accessLevel": "Write", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "ec2:AssociateAddress", "ec2:DescribeAddresses" ] }, "createentitlement": { "name": "CreateEntitlement", "description": "Grants permission to create an entitlement in an Amazon EVS environment", "accessLevel": "Write", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createenvironment": { "name": "CreateEnvironment", "description": "Grants permission to create an Amazon EVS environment", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [ "ec2:CreateNetworkInterface", "ec2:CreateSubnet", "ec2:CreateTags", "ec2:DeleteNetworkInterface", "ec2:DeleteSubnet", "ec2:DeleteVolume", "ec2:DescribeAddresses", "ec2:DescribeDhcpOptions", "ec2:DescribeHosts", "ec2:DescribeInstanceStatus", "ec2:DescribeInstances", "ec2:DescribeKeyPairs", "ec2:DescribeNetworkInterfaces", "ec2:DescribePlacementGroups", "ec2:DescribeRouteServerEndpoints", "ec2:DescribeRouteServerPeers", "ec2:DescribeRouteServers", "ec2:DescribeSecurityGroups", "ec2:DescribeSubnets", "ec2:DescribeVolumes", "ec2:DescribeVpcs", "ec2:DetachNetworkInterface", "ec2:DetachVolume", "ec2:GetAllowedImagesSettings", "ec2:GetRouteServerAssociations", "ec2:ModifyInstanceAttribute", "ec2:ModifyNetworkInterfaceAttribute", "ec2:RunInstances", "ec2:TerminateInstances", "iam:CreateServiceLinkedRole", "kms:DescribeKey", "kms:ListAliases", "secretsmanager:CreateSecret", "secretsmanager:DeleteSecret", "secretsmanager:GetRandomPassword", "secretsmanager:GetSecretValue", "secretsmanager:TagResource", "secretsmanager:UpdateSecret", "servicequotas:GetServiceQuota", "servicequotas:ListServiceQuotas", "support:DescribeServices", "support:DescribeSupportLevel" ] }, "createenvironmentconnector": { "name": "CreateEnvironmentConnector", "description": "Grants permission to create a connector in an Amazon EVS environment", "accessLevel": "Write", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createenvironmenthost": { "name": "CreateEnvironmentHost", "description": "Grants permission to add host to an Amazon EVS environment", "accessLevel": "Write", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "ec2:CreateNetworkInterface", "ec2:CreateTags", "ec2:DeleteNetworkInterface", "ec2:DescribeDhcpOptions", "ec2:DescribeHosts", "ec2:DescribeInstanceStatus", "ec2:DescribeInstances", "ec2:DescribeKeyPairs", "ec2:DescribeNetworkInterfaces", "ec2:DescribePlacementGroups", "ec2:DescribeSecurityGroups", "ec2:DescribeSubnets", "ec2:DescribeVpcs", "ec2:ModifyNetworkInterfaceAttribute", "ec2:RunInstances", "evs:CreateEnvironmentHost", "secretsmanager:CreateSecret", "secretsmanager:DeleteSecret", "secretsmanager:GetRandomPassword", "secretsmanager:GetSecretValue", "secretsmanager:TagResource", "secretsmanager:UpdateSecret", "servicequotas:GetServiceQuota", "servicequotas:ListServiceQuotas" ] }, "deleteentitlement": { "name": "DeleteEntitlement", "description": "Grants permission to delete an entitlement from an Amazon EVS environment", "accessLevel": "Write", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteenvironment": { "name": "DeleteEnvironment", "description": "Grants permission to delete an Amazon EVS environment", "accessLevel": "Write", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "ec2:DeleteNetworkInterface", "ec2:DeleteSubnet", "ec2:DescribeInstanceStatus", "ec2:DescribeInstances", "ec2:DescribeNetworkInterfaces", "ec2:DescribeSubnets", "ec2:ModifyInstanceAttribute", "ec2:ModifyNetworkInterfaceAttribute", "ec2:TerminateInstances", "secretsmanager:DeleteSecret", "secretsmanager:GetSecretValue" ] }, "deleteenvironmentconnector": { "name": "DeleteEnvironmentConnector", "description": "Grants permission to delete a connector from an Amazon EVS environment", "accessLevel": "Write", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteenvironmenthost": { "name": "DeleteEnvironmentHost", "description": "Grants permission to delete a host from an Amazon EVS environment", "accessLevel": "Write", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "ec2:DeleteNetworkInterface", "ec2:DescribeInstanceStatus", "ec2:DescribeInstances", "ec2:DescribeNetworkInterfaces", "ec2:ModifyInstanceAttribute", "ec2:ModifyNetworkInterfaceAttribute", "ec2:TerminateInstances", "secretsmanager:DeleteSecret", "secretsmanager:GetSecretValue" ] }, "disassociateeipfromvlan": { "name": "DisassociateEipFromVlan", "description": "Grants permission to disassociate an Elastic IP address (EIP) from a public VLAN in an Amazon EVS environment", "accessLevel": "Write", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "ec2:DisassociateAddress" ] }, "getdepoturl": { "name": "GetDepotUrl", "description": "Grants permission to get an Amazon EVS environment depot url", "accessLevel": "Read", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getenvironment": { "name": "GetEnvironment", "description": "Grants permission to get an Amazon EVS environment", "accessLevel": "Read", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getversions": { "name": "GetVersions", "description": "Grants permission to get versions provided for launch by Amazon EVS", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listenvironmentconnectors": { "name": "ListEnvironmentConnectors", "description": "Grants permission to retrieve a list of connectors associated with an Amazon EVS environment", "accessLevel": "List", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listenvironmenthosts": { "name": "ListEnvironmentHosts", "description": "Grants permission to retrieve a list of hosts associated with an Amazon EVS environment", "accessLevel": "List", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listenvironmentvlans": { "name": "ListEnvironmentVlans", "description": "Grants permission to retrieve a list of Amazon EVS environment VLANs", "accessLevel": "List", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listenvironments": { "name": "ListEnvironments", "description": "Grants permission to retrieve a list of Amazon EVS environments in an account", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to list the tags on a specified resource ARN", "accessLevel": "Read", "resourceTypes": [ { "name": "environment", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listvmentitlements": { "name": "ListVmEntitlements", "description": "Grants permission to retrieve a list of entitlements associated with an Amazon EVS environment", "accessLevel": "List", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to tag a specified resource ARN", "accessLevel": "Tagging", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to remove tags from a specified resource ARN", "accessLevel": "Tagging", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "updateenvironmentconnector": { "name": "UpdateEnvironmentConnector", "description": "Grants permission to update a connector in an Amazon EVS environment", "accessLevel": "Write", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] } }