UNPKG

@cloud-copilot/iam-data

Version:
233 lines 6.24 kB
{ "addpurchaseorder": { "name": "AddPurchaseOrder", "isPermissionOnly": true, "description": "Grants permission to add a new purchase order", "accessLevel": "Write", "resourceTypes": [ { "name": "purchase-order", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "deletepurchaseorder": { "name": "DeletePurchaseOrder", "isPermissionOnly": true, "description": "Grants permission to delete a purchase order", "accessLevel": "Write", "resourceTypes": [ { "name": "purchase-order", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getconsoleactionsetenforced": { "name": "GetConsoleActionSetEnforced", "isPermissionOnly": true, "description": "Grants permission to view whether existing or fine-grained IAM actions are being used to control authorization to Billing, Cost Management, and Account consoles", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getpurchaseorder": { "name": "GetPurchaseOrder", "isPermissionOnly": true, "description": "Grants permission to get a purchase order", "accessLevel": "Read", "resourceTypes": [ { "name": "purchase-order", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listpurchaseorderinvoices": { "name": "ListPurchaseOrderInvoices", "isPermissionOnly": true, "description": "Grants permission to list purchase order invoices", "accessLevel": "List", "resourceTypes": [ { "name": "purchase-order", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listpurchaseorders": { "name": "ListPurchaseOrders", "isPermissionOnly": true, "description": "Grants permission to list all purchase orders for an account", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "isPermissionOnly": true, "description": "Grants permission to list tags for a purchase order", "accessLevel": "Read", "resourceTypes": [ { "name": "purchase-order", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "modifypurchaseorders": { "name": "ModifyPurchaseOrders", "isPermissionOnly": true, "description": "Grants permission to modify purchase orders and details", "accessLevel": "Write", "resourceTypes": [ { "name": "purchase-order", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "tagresource": { "name": "TagResource", "isPermissionOnly": true, "description": "Grants permission to tag purchase orders with given key value pairs", "accessLevel": "Tagging", "resourceTypes": [ { "name": "purchase-order", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "isPermissionOnly": true, "description": "Grants permission to remove tags from a purchase order", "accessLevel": "Tagging", "resourceTypes": [ { "name": "purchase-order", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys", "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "updateconsoleactionsetenforced": { "name": "UpdateConsoleActionSetEnforced", "isPermissionOnly": true, "description": "Grants permission to change whether existing or fine-grained IAM actions will be used to control authorization to Billing, Cost Management, and Account consoles", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "updatepurchaseorder": { "name": "UpdatePurchaseOrder", "isPermissionOnly": true, "description": "Grants permission to update an existing purchase order", "accessLevel": "Write", "resourceTypes": [ { "name": "purchase-order", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "updatepurchaseorderstatus": { "name": "UpdatePurchaseOrderStatus", "isPermissionOnly": true, "description": "Grants permission to set purchase order status", "accessLevel": "Write", "resourceTypes": [ { "name": "purchase-order", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "viewpurchaseorders": { "name": "ViewPurchaseOrders", "isPermissionOnly": true, "description": "Grants permission to view purchase orders and details", "accessLevel": "Read", "resourceTypes": [ { "name": "purchase-order", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] } }