@cloud-copilot/iam-data

{ "addregion": { "name": "AddRegion", "description": "Grants permission to add a region to an IdentityStore", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [ "kms:Decrypt" ] }, "creategroup": { "name": "CreateGroup", "description": "Grants permission to create a group in the specified IdentityStore", "accessLevel": "Write", "resourceTypes": [ { "name": "Identitystore", "required": true, "conditionKeys": [], "dependentActions": [ "kms:Decrypt" ] } ], "conditionKeys": [ "identitystore:PrimaryRegion", "identitystore:GroupExternalIdIssuers" ], "dependentActions": [] }, "creategroupmembership": { "name": "CreateGroupMembership", "description": "Grants permission to create a member to a group in the specified IdentityStore", "accessLevel": "Write", "resourceTypes": [ { "name": "Group", "required": true, "conditionKeys": [], "dependentActions": [ "kms:Decrypt" ] }, { "name": "Identitystore", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "User", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "identitystore:PrimaryRegion" ], "dependentActions": [] }, "createidentitystore": { "name": "CreateIdentityStore", "description": "Grants permission to create a new IdentityStore in an AWS account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [ "kms:Decrypt", "kms:DescribeKey", "kms:Encrypt", "kms:GenerateDataKeyWithoutPlaintext" ] }, "createuser": { "name": "CreateUser", "description": "Grants permission to create a user in the specified IdentityStore", "accessLevel": "Write", "resourceTypes": [ { "name": "Identitystore", "required": true, "conditionKeys": [], "dependentActions": [ "kms:Decrypt" ] } ], "conditionKeys": [ "identitystore:PrimaryRegion", "identitystore:UserExternalIdIssuers", "identitystore:ReservedUserId" ], "dependentActions": [] }, "deletegroup": { "name": "DeleteGroup", "description": "Grants permission to delete a group in the specified IdentityStore", "accessLevel": "Write", "resourceTypes": [ { "name": "Group", "required": true, "conditionKeys": [], "dependentActions": [ "kms:Decrypt" ] }, { "name": "Identitystore", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "identitystore:PrimaryRegion", "identitystore:GroupExternalIdIssuers" ], "dependentActions": [] }, "deletegroupmembership": { "name": "DeleteGroupMembership", "description": "Grants permission to remove a member that is part of a group in the specified IdentityStore", "accessLevel": "Write", "resourceTypes": [ { "name": "Group", "required": true, "conditionKeys": [], "dependentActions": [ "kms:Decrypt" ] }, { "name": "GroupMembership", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "Identitystore", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "User", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "identitystore:PrimaryRegion" ], "dependentActions": [] }, "deleteidentitystore": { "name": "DeleteIdentityStore", "description": "Grants permission to delete an IdentityStore", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleteuser": { "name": "DeleteUser", "description": "Grants permission to delete a user in the specified IdentityStore", "accessLevel": "Write", "resourceTypes": [ { "name": "Identitystore", "required": true, "conditionKeys": [], "dependentActions": [ "kms:Decrypt" ] }, { "name": "User", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "identitystore:PrimaryRegion", "identitystore:UserExternalIdIssuers" ], "dependentActions": [] }, "describegroup": { "name": "DescribeGroup", "description": "Grants permission to retrieve information about a group in the specified IdentityStore", "accessLevel": "Read", "resourceTypes": [ { "name": "Group", "required": true, "conditionKeys": [], "dependentActions": [ "kms:Decrypt" ] }, { "name": "Identitystore", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "identitystore:PrimaryRegion", "identitystore:GroupExternalIdIssuers" ], "dependentActions": [] }, "describegroupmembership": { "name": "DescribeGroupMembership", "description": "Grants permission to retrieve information about a member that is part of a group in the specified IdentityStore", "accessLevel": "Read", "resourceTypes": [ { "name": "Group", "required": true, "conditionKeys": [], "dependentActions": [ "kms:Decrypt" ] }, { "name": "GroupMembership", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "Identitystore", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "User", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "identitystore:PrimaryRegion" ], "dependentActions": [] }, "describeregion": { "name": "DescribeRegion", "description": "Grants permission to retrieve configuration details for a specific IdentityStore region", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [ "identitystore:PrimaryRegion" ], "dependentActions": [ "kms:Decrypt" ] }, "describeuser": { "name": "DescribeUser", "description": "Grants permission to retrieve information about user in the specified IdentityStore", "accessLevel": "Read", "resourceTypes": [ { "name": "Identitystore", "required": true, "conditionKeys": [], "dependentActions": [ "kms:Decrypt" ] }, { "name": "User", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "identitystore:PrimaryRegion", "identitystore:UserExternalIdIssuers" ], "dependentActions": [] }, "getgroupid": { "name": "GetGroupId", "description": "Grants permission to retrieve ID information about group in the specified IdentityStore", "accessLevel": "Read", "resourceTypes": [ { "name": "Group", "required": true, "conditionKeys": [], "dependentActions": [ "kms:Decrypt" ] }, { "name": "Identitystore", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "identitystore:PrimaryRegion" ], "dependentActions": [] }, "getgroupmembershipid": { "name": "GetGroupMembershipId", "description": "Grants permission to retrieve ID information of a member which is part of a group in the specified IdentityStore", "accessLevel": "Read", "resourceTypes": [ { "name": "Group", "required": true, "conditionKeys": [], "dependentActions": [ "kms:Decrypt" ] }, { "name": "GroupMembership", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "Identitystore", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "User", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "identitystore:PrimaryRegion" ], "dependentActions": [] }, "getuserid": { "name": "GetUserId", "description": "Grants permission to retrieves ID information about user in the specified IdentityStore", "accessLevel": "Read", "resourceTypes": [ { "name": "Identitystore", "required": true, "conditionKeys": [], "dependentActions": [ "kms:Decrypt" ] }, { "name": "User", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "identitystore:PrimaryRegion" ], "dependentActions": [] }, "ismemberingroups": { "name": "IsMemberInGroups", "description": "Grants permission to check if a member is a part of groups in the specified IdentityStore", "accessLevel": "Read", "resourceTypes": [ { "name": "AllGroupMemberships", "required": true, "conditionKeys": [], "dependentActions": [ "kms:Decrypt" ] }, { "name": "Group", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "Identitystore", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "User", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "identitystore:PrimaryRegion" ], "dependentActions": [] }, "listgroupmemberships": { "name": "ListGroupMemberships", "description": "Grants permission to retrieve all members that are part of a group in the specified IdentityStore", "accessLevel": "List", "resourceTypes": [ { "name": "AllGroupMemberships", "required": true, "conditionKeys": [], "dependentActions": [ "kms:Decrypt" ] }, { "name": "Group", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "Identitystore", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "identitystore:PrimaryRegion" ], "dependentActions": [] }, "listgroupmembershipsformember": { "name": "ListGroupMembershipsForMember", "description": "Grants permission to list groups of the target member in the specified IdentityStore", "accessLevel": "List", "resourceTypes": [ { "name": "AllGroupMemberships", "required": true, "conditionKeys": [], "dependentActions": [ "kms:Decrypt" ] }, { "name": "Identitystore", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "User", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "identitystore:PrimaryRegion" ], "dependentActions": [] }, "listgroups": { "name": "ListGroups", "description": "Grants permission to search for groups within the specified IdentityStore", "accessLevel": "List", "resourceTypes": [ { "name": "AllGroups", "required": true, "conditionKeys": [], "dependentActions": [ "kms:Decrypt" ] }, { "name": "Identitystore", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "identitystore:PrimaryRegion", "identitystore:GroupExternalIdIssuers" ], "dependentActions": [] }, "listregions": { "name": "ListRegions", "description": "Grants permission to list all regions configured for an IdentityStore", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [ "identitystore:PrimaryRegion" ], "dependentActions": [ "kms:Decrypt" ] }, "listusers": { "name": "ListUsers", "description": "Grants permission to search for users in the specified IdentityStore", "accessLevel": "List", "resourceTypes": [ { "name": "AllUsers", "required": true, "conditionKeys": [], "dependentActions": [ "kms:Decrypt" ] }, { "name": "Identitystore", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "identitystore:PrimaryRegion", "identitystore:UserExternalIdIssuers" ], "dependentActions": [] }, "removeregion": { "name": "RemoveRegion", "description": "Grants permission to remove a region from an IdentityStore", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [ "kms:Decrypt" ] }, "reserveuser": { "name": "ReserveUser", "description": "Grants permission to reserve a user by getting a userId", "accessLevel": "Write", "resourceTypes": [ { "name": "Identitystore", "required": true, "conditionKeys": [], "dependentActions": [ "kms:Decrypt" ] } ], "conditionKeys": [ "identitystore:PrimaryRegion" ], "dependentActions": [] }, "updategroup": { "name": "UpdateGroup", "description": "Grants permission to update information about a group in the specified IdentityStore", "accessLevel": "Write", "resourceTypes": [ { "name": "Group", "required": true, "conditionKeys": [], "dependentActions": [ "kms:Decrypt" ] }, { "name": "Identitystore", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "identitystore:PrimaryRegion", "identitystore:GroupExternalIdIssuers" ], "dependentActions": [] }, "updateidentitystore": { "name": "UpdateIdentityStore", "description": "Grants permission to update the configuration of an IdentityStore", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [ "kms:Decrypt", "kms:DescribeKey", "kms:Encrypt", "kms:GenerateDataKeyWithoutPlaintext" ] }, "updateuser": { "name": "UpdateUser", "description": "Grants permission to update user information in the specified IdentityStore", "accessLevel": "Write", "resourceTypes": [ { "name": "Identitystore", "required": true, "conditionKeys": [], "dependentActions": [ "kms:Decrypt" ] }, { "name": "User", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "identitystore:PrimaryRegion", "identitystore:UserExternalIdIssuers" ], "dependentActions": [] } }