@cloud-copilot/iam-data
Version:
233 lines • 6.24 kB
JSON
{
"addpurchaseorder": {
"name": "AddPurchaseOrder",
"isPermissionOnly": true,
"description": "Grants permission to add a new purchase order",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "purchase-order",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"deletepurchaseorder": {
"name": "DeletePurchaseOrder",
"isPermissionOnly": true,
"description": "Grants permission to delete a purchase order",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "purchase-order",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"getconsoleactionsetenforced": {
"name": "GetConsoleActionSetEnforced",
"isPermissionOnly": true,
"description": "Grants permission to view whether existing or fine-grained IAM actions are being used to control authorization to Billing, Cost Management, and Account consoles",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"getpurchaseorder": {
"name": "GetPurchaseOrder",
"isPermissionOnly": true,
"description": "Grants permission to get a purchase order",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "purchase-order",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"listpurchaseorderinvoices": {
"name": "ListPurchaseOrderInvoices",
"isPermissionOnly": true,
"description": "Grants permission to list purchase order invoices",
"accessLevel": "List",
"resourceTypes": [
{
"name": "purchase-order",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"listpurchaseorders": {
"name": "ListPurchaseOrders",
"isPermissionOnly": true,
"description": "Grants permission to list all purchase orders for an account",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listtagsforresource": {
"name": "ListTagsForResource",
"isPermissionOnly": true,
"description": "Grants permission to list tags for a purchase order",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "purchase-order",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"modifypurchaseorders": {
"name": "ModifyPurchaseOrders",
"isPermissionOnly": true,
"description": "Grants permission to modify purchase orders and details",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "purchase-order",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}",
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"tagresource": {
"name": "TagResource",
"isPermissionOnly": true,
"description": "Grants permission to tag purchase orders with given key value pairs",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "purchase-order",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}",
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"untagresource": {
"name": "UntagResource",
"isPermissionOnly": true,
"description": "Grants permission to remove tags from a purchase order",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "purchase-order",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys",
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"updateconsoleactionsetenforced": {
"name": "UpdateConsoleActionSetEnforced",
"isPermissionOnly": true,
"description": "Grants permission to change whether existing or fine-grained IAM actions will be used to control authorization to Billing, Cost Management, and Account consoles",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"updatepurchaseorder": {
"name": "UpdatePurchaseOrder",
"isPermissionOnly": true,
"description": "Grants permission to update an existing purchase order",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "purchase-order",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"updatepurchaseorderstatus": {
"name": "UpdatePurchaseOrderStatus",
"isPermissionOnly": true,
"description": "Grants permission to set purchase order status",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "purchase-order",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"viewpurchaseorders": {
"name": "ViewPurchaseOrders",
"isPermissionOnly": true,
"description": "Grants permission to view purchase orders and details",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "purchase-order",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
}
}