UNPKG

@cloud-copilot/iam-data

Version:
1,885 lines 110 kB
{ "accountconfigurations": { "name": "AccountConfigurations", "isPermissionOnly": true, "description": "Grants permission to enable setting default access to AWS resources", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "allowvendedlogdeliveryforresource": { "name": "AllowVendedLogDeliveryForResource", "isPermissionOnly": true, "description": "Grants permission to configure log delivery for QuickSuite instance", "accessLevel": "Permissions management", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "batchcreatetopicreviewedanswer": { "name": "BatchCreateTopicReviewedAnswer", "description": "Grants permission to create reviewed answers for a topic", "accessLevel": "Write", "resourceTypes": [ { "name": "topic", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "batchdeletetopicreviewedanswer": { "name": "BatchDeleteTopicReviewedAnswer", "description": "Grants permission to delete reviewed answers for a topic", "accessLevel": "Write", "resourceTypes": [ { "name": "topic", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "batchgetpreferences": { "name": "BatchGetPreferences", "isPermissionOnly": true, "description": "Grants permission to get user preferences", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "batchupdatepreferences": { "name": "BatchUpdatePreferences", "isPermissionOnly": true, "description": "Grants permission to update user preferences", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "cancelingestion": { "name": "CancelIngestion", "description": "Grants permission to cancel a SPICE ingestions on a dataset", "accessLevel": "Write", "resourceTypes": [ { "name": "ingestion", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createaccountcustomization": { "name": "CreateAccountCustomization", "description": "Grants permission to create an account customization for QuickSight account or namespace", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createaccountsubscription": { "name": "CreateAccountSubscription", "description": "Grants permission to subscribe to QuickSight", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "quicksight:Edition", "quicksight:DirectoryType" ], "dependentActions": [] }, "createactionconnector": { "name": "CreateActionConnector", "description": "Grants permission to create an action connector", "accessLevel": "Write", "resourceTypes": [ { "name": "actionconnector", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createadmin": { "name": "CreateAdmin", "isPermissionOnly": true, "description": "Grants permission to provision Amazon QuickSight administrators, authors, and readers", "accessLevel": "Write", "resourceTypes": [ { "name": "user", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createanalysis": { "name": "CreateAnalysis", "description": "Grants permission to create an analysis from a template", "accessLevel": "Write", "resourceTypes": [ { "name": "analysis", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createbrand": { "name": "CreateBrand", "description": "Grants permission to create an Amazon QuickSight brand", "accessLevel": "Write", "resourceTypes": [ { "name": "brand", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createcustompermissions": { "name": "CreateCustomPermissions", "description": "Grants permission to create a QuickSight custom permissions resource", "accessLevel": "Write", "resourceTypes": [ { "name": "custompermissions", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createdashboard": { "name": "CreateDashboard", "description": "Grants permission to create a QuickSight Dashboard", "accessLevel": "Write", "resourceTypes": [ { "name": "dashboard", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createdataset": { "name": "CreateDataSet", "description": "Grants permission to create a dataset", "accessLevel": "Write", "resourceTypes": [ { "name": "datasource", "required": true, "conditionKeys": [], "dependentActions": [ "quicksight:PassDataSource" ] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createdatasource": { "name": "CreateDataSource", "description": "Grants permission to create a data source", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [ "iam:PassRole" ] }, "createemailcustomizationtemplate": { "name": "CreateEmailCustomizationTemplate", "isPermissionOnly": true, "description": "Grants permission to create a QuickSight email customization template", "accessLevel": "Write", "resourceTypes": [ { "name": "emailCustomizationTemplate", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createextensionaccess": { "name": "CreateExtensionAccess", "isPermissionOnly": true, "description": "Grants permission to create an extension access", "accessLevel": "Write", "resourceTypes": [ { "name": "extensionaccess", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createfolder": { "name": "CreateFolder", "description": "Grants permission to create a QuickSight folder", "accessLevel": "Write", "resourceTypes": [ { "name": "folder", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createfoldermembership": { "name": "CreateFolderMembership", "description": "Grants permission to add a QuickSight Dashboard, Analysis or Dataset to a QuickSight Folder", "accessLevel": "Write", "resourceTypes": [ { "name": "folder", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "analysis", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "dashboard", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "dataset", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "creategroup": { "name": "CreateGroup", "description": "Grants permission to create a QuickSight group", "accessLevel": "Write", "resourceTypes": [ { "name": "group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "creategroupmembership": { "name": "CreateGroupMembership", "description": "Grants permission to add a QuickSight user to a QuickSight group", "accessLevel": "Write", "resourceTypes": [ { "name": "group", "required": true, "conditionKeys": [ "quicksight:UserName" ], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [] }, "createiampolicyassignment": { "name": "CreateIAMPolicyAssignment", "description": "Grants permission to create an assignment with one specified IAM Policy ARN that will be assigned to specified groups or users of QuickSight", "accessLevel": "Write", "resourceTypes": [ { "name": "assignment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createingestion": { "name": "CreateIngestion", "description": "Grants permission to start a SPICE ingestion on a dataset", "accessLevel": "Write", "resourceTypes": [ { "name": "ingestion", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createnamespace": { "name": "CreateNamespace", "description": "Grants permission to create an QuickSight namespace", "accessLevel": "Write", "resourceTypes": [ { "name": "namespace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "ds:CreateIdentityPoolDirectory" ] }, "createreader": { "name": "CreateReader", "isPermissionOnly": true, "description": "Grants permission to provision Amazon QuickSight readers", "accessLevel": "Write", "resourceTypes": [ { "name": "user", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createrefreshschedule": { "name": "CreateRefreshSchedule", "description": "Grants permission to create a refresh schedule for a dataset", "accessLevel": "Write", "resourceTypes": [ { "name": "refreshschedule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createrolemembership": { "name": "CreateRoleMembership", "description": "Grants permission to add a group member to a role", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "quicksight:Group" ], "dependentActions": [] }, "createtemplate": { "name": "CreateTemplate", "description": "Grants permission to create a template", "accessLevel": "Write", "resourceTypes": [ { "name": "template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createtemplatealias": { "name": "CreateTemplateAlias", "description": "Grants permission to create a template alias", "accessLevel": "Write", "resourceTypes": [ { "name": "template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createtheme": { "name": "CreateTheme", "description": "Grants permission to create a theme", "accessLevel": "Write", "resourceTypes": [ { "name": "theme", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createthemealias": { "name": "CreateThemeAlias", "description": "Grants permission to create an alias for a theme version", "accessLevel": "Write", "resourceTypes": [ { "name": "theme", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createtopic": { "name": "CreateTopic", "description": "Grants permission to create a topic", "accessLevel": "Write", "resourceTypes": [ { "name": "dataset", "required": true, "conditionKeys": [], "dependentActions": [ "quicksight:PassDataSet" ] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createtopicrefreshschedule": { "name": "CreateTopicRefreshSchedule", "description": "Grants permission to create a refresh schedule for a topic", "accessLevel": "Write", "resourceTypes": [ { "name": "topic", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createuser": { "name": "CreateUser", "isPermissionOnly": true, "description": "Grants permission to provision Amazon QuickSight authors and readers", "accessLevel": "Write", "resourceTypes": [ { "name": "user", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createvpcconnection": { "name": "CreateVPCConnection", "description": "Grants permission to create a vpc connection", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [ "iam:PassRole" ] }, "deleteaccountcustompermission": { "name": "DeleteAccountCustomPermission", "description": "Grants permission to remove the custom permission associated with an account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleteaccountcustomization": { "name": "DeleteAccountCustomization", "description": "Grants permission to delete an account customization for QuickSight account or namespace", "accessLevel": "Write", "resourceTypes": [ { "name": "customization", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteaccountsubscription": { "name": "DeleteAccountSubscription", "description": "Grants permission to delete a QuickSight account", "accessLevel": "Write", "resourceTypes": [ { "name": "account", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteactionconnector": { "name": "DeleteActionConnector", "description": "Grants permission to delete an action connector", "accessLevel": "Write", "resourceTypes": [ { "name": "actionconnector", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteanalysis": { "name": "DeleteAnalysis", "description": "Grants permission to delete an analysis", "accessLevel": "Write", "resourceTypes": [ { "name": "analysis", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletebrand": { "name": "DeleteBrand", "description": "Grants permission to delete an Amazon QuickSight brand", "accessLevel": "Write", "resourceTypes": [ { "name": "brand", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletebrandassignment": { "name": "DeleteBrandAssignment", "description": "Grants permission to delete a brand assignment", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deletecustompermissions": { "name": "DeleteCustomPermissions", "description": "Grants permission to delete a QuickSight custom permissions resource", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deletedashboard": { "name": "DeleteDashboard", "description": "Grants permission to delete a QuickSight Dashboard", "accessLevel": "Write", "resourceTypes": [ { "name": "dashboard", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletedataset": { "name": "DeleteDataSet", "description": "Grants permission to delete a dataset", "accessLevel": "Write", "resourceTypes": [ { "name": "dataset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "deletedatasetrefreshproperties": { "name": "DeleteDataSetRefreshProperties", "description": "Grants permission to delete dataset refresh properties for a dataset", "accessLevel": "Write", "resourceTypes": [ { "name": "dataset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletedatasource": { "name": "DeleteDataSource", "description": "Grants permission to delete a data source", "accessLevel": "Write", "resourceTypes": [ { "name": "datasource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "deletedefaultqbusinessapplication": { "name": "DeleteDefaultQBusinessApplication", "description": "Grants permission to delete linked QBusiness application for QuickSight account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleteemailcustomizationtemplate": { "name": "DeleteEmailCustomizationTemplate", "isPermissionOnly": true, "description": "Grants permission to delete a QuickSight email customization template", "accessLevel": "Write", "resourceTypes": [ { "name": "emailCustomizationTemplate", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteextensionaccess": { "name": "DeleteExtensionAccess", "isPermissionOnly": true, "description": "Grants permission to delete an extension access", "accessLevel": "Write", "resourceTypes": [ { "name": "extensionaccess", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletefolder": { "name": "DeleteFolder", "description": "Grants permission to delete a QuickSight Folder", "accessLevel": "Write", "resourceTypes": [ { "name": "folder", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletefoldermembership": { "name": "DeleteFolderMembership", "description": "Grants permission to remove a QuickSight Dashboard, Analysis or Dataset from a QuickSight Folder", "accessLevel": "Write", "resourceTypes": [ { "name": "folder", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "analysis", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "dashboard", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "dataset", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletegroup": { "name": "DeleteGroup", "description": "Grants permission to remove a user group from QuickSight", "accessLevel": "Write", "resourceTypes": [ { "name": "group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletegroupmembership": { "name": "DeleteGroupMembership", "description": "Grants permission to remove a user from a group so that he/she is no longer a member of the group", "accessLevel": "Write", "resourceTypes": [ { "name": "group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "quicksight:UserName" ], "dependentActions": [] }, "deleteiampolicyassignment": { "name": "DeleteIAMPolicyAssignment", "description": "Grants permission to update an existing assignment", "accessLevel": "Write", "resourceTypes": [ { "name": "assignment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteidentitypropagationconfig": { "name": "DeleteIdentityPropagationConfig", "description": "Grants permission to remove AWS services for trusted identity propagation in QuickSight", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deletenamespace": { "name": "DeleteNamespace", "description": "Grants permission to delete a QuickSight namespace", "accessLevel": "Write", "resourceTypes": [ { "name": "namespace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "ds:DeleteDirectory" ] }, "deleterefreshschedule": { "name": "DeleteRefreshSchedule", "description": "Grants permission to delete a refresh schedule for a dataset", "accessLevel": "Write", "resourceTypes": [ { "name": "refreshschedule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleterolecustompermission": { "name": "DeleteRoleCustomPermission", "description": "Grants permission to remove the custom permission associated with a role", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleterolemembership": { "name": "DeleteRoleMembership", "description": "Grants permission to remove a group member from a role", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "quicksight:Group" ], "dependentActions": [] }, "deletetemplate": { "name": "DeleteTemplate", "description": "Grants permission to delete a template", "accessLevel": "Write", "resourceTypes": [ { "name": "template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletetemplatealias": { "name": "DeleteTemplateAlias", "description": "Grants permission to delete a template alias", "accessLevel": "Write", "resourceTypes": [ { "name": "template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletetheme": { "name": "DeleteTheme", "description": "Grants permission to delete a theme", "accessLevel": "Write", "resourceTypes": [ { "name": "theme", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletethemealias": { "name": "DeleteThemeAlias", "description": "Grants permission to delete the alias of a theme", "accessLevel": "Write", "resourceTypes": [ { "name": "theme", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletetopic": { "name": "DeleteTopic", "description": "Grants permission to delete a topic", "accessLevel": "Write", "resourceTypes": [ { "name": "topic", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "deletetopicrefreshschedule": { "name": "DeleteTopicRefreshSchedule", "description": "Grants permission to delete a refresh schedule for a topic", "accessLevel": "Write", "resourceTypes": [ { "name": "topic", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteuser": { "name": "DeleteUser", "description": "Grants permission to delete a QuickSight user, given the user name", "accessLevel": "Write", "resourceTypes": [ { "name": "user", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteuserbyprincipalid": { "name": "DeleteUserByPrincipalId", "description": "Grants permission to delete a user identified by its principal ID", "accessLevel": "Write", "resourceTypes": [ { "name": "user", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteusercustompermission": { "name": "DeleteUserCustomPermission", "description": "Grants permission to remove the custom permission associated with a user", "accessLevel": "Write", "resourceTypes": [ { "name": "user", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletevpcconnection": { "name": "DeleteVPCConnection", "description": "Grants permission to delete a vpc connection", "accessLevel": "Write", "resourceTypes": [ { "name": "vpcconnection", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "describeaccountcustompermission": { "name": "DescribeAccountCustomPermission", "description": "Grants permission to describe the custom permission associated with an account", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeaccountcustomization": { "name": "DescribeAccountCustomization", "description": "Grants permission to describe an account customization for QuickSight account or namespace", "accessLevel": "Read", "resourceTypes": [ { "name": "customization", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeaccountsettings": { "name": "DescribeAccountSettings", "description": "Grants permission to describe the administrative account settings for QuickSight account", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeaccountsubscription": { "name": "DescribeAccountSubscription", "description": "Grants permission to describe a QuickSight account", "accessLevel": "Read", "resourceTypes": [ { "name": "account", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeactionconnector": { "name": "DescribeActionConnector", "description": "Grants permission to describe an action connector", "accessLevel": "Read", "resourceTypes": [ { "name": "actionconnector", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeactionconnectorpermissions": { "name": "DescribeActionConnectorPermissions", "description": "Grants permission to describe permissions for an action connector", "accessLevel": "Read", "resourceTypes": [ { "name": "actionconnector", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeagent": { "name": "DescribeAgent", "isPermissionOnly": true, "description": "Grants permission to describe an agent", "accessLevel": "Read", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeagentpermissions": { "name": "DescribeAgentPermissions", "isPermissionOnly": true, "description": "Grants permission to describe agent's permissions", "accessLevel": "Read", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeanalysis": { "name": "DescribeAnalysis", "description": "Grants permission to describe an analysis", "accessLevel": "Read", "resourceTypes": [ { "name": "analysis", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeanalysispermissions": { "name": "DescribeAnalysisPermissions", "description": "Grants permission to describe permissions for an analysis", "accessLevel": "Read", "resourceTypes": [ { "name": "analysis", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeassetbundleexportjob": { "name": "DescribeAssetBundleExportJob", "description": "Grants permission to describe an asset bundle export job", "accessLevel": "Read", "resourceTypes": [ { "name": "assetBundleExportJob", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeassetbundleimportjob": { "name": "DescribeAssetBundleImportJob", "description": "Grants permission to describe an asset bundle import job", "accessLevel": "Read", "resourceTypes": [ { "name": "assetBundleImportJob", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeautomationjob": { "name": "DescribeAutomationJob", "description": "Grants permission to describe an automation job", "accessLevel": "Read", "resourceTypes": [ { "name": "automationJob", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describebrand": { "name": "DescribeBrand", "description": "Grants permission to describe a brand", "accessLevel": "Read", "resourceTypes": [ { "name": "brand", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describebrandassignment": { "name": "DescribeBrandAssignment", "description": "Grants permission to describe a brand assignment", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describebrandpublishedversion": { "name": "DescribeBrandPublishedVersion", "description": "Grants permission to describes the published version of the brand", "accessLevel": "Read", "resourceTypes": [ { "name": "brand", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describechatconfiguration": { "name": "DescribeChatConfiguration", "isPermissionOnly": true, "description": "Grants permission to describe chat configuration", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describecustompermissions": { "name": "DescribeCustomPermissions", "description": "Grants permission to describe a custom permissions resource in a QuickSight account", "accessLevel": "Read", "resourceTypes": [ { "name": "custompermissions", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describedashboard": { "name": "DescribeDashboard", "description": "Grants permission to describe a QuickSight Dashboard", "accessLevel": "Read", "resourceTypes": [ { "name": "dashboard", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describedashboardpermissions": { "name": "DescribeDashboardPermissions", "description": "Grants permission to describe permissions for a QuickSight Dashboard", "accessLevel": "Read", "resourceTypes": [ { "name": "dashboard", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describedashboardsnapshotjob": { "name": "DescribeDashboardSnapshotJob", "description": "Grants permission to describe a dashboard snapshot job", "accessLevel": "Read", "resourceTypes": [ { "name": "dashboardSnapshotJob", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describedashboardsnapshotjobresult": { "name": "DescribeDashboardSnapshotJobResult", "description": "Grants permission to describe result of a dashboard snapshot job", "accessLevel": "Read", "resourceTypes": [ { "name": "dashboardSnapshotJob", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describedashboardsqaconfiguration": { "name": "DescribeDashboardsQAConfiguration", "description": "Grants permission to describe dashboards qa configuration", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describedataset": { "name": "DescribeDataSet", "description": "Grants permission to describe a dataset", "accessLevel": "Read", "resourceTypes": [ { "name": "dataset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "describedatasetpermissions": { "name": "DescribeDataSetPermissions", "description": "Grants permission to describe the resource policy of a dataset", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "dataset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "describedatasetrefreshproperties": { "name": "DescribeDataSetRefreshProperties", "description": "Grants permission to describe refresh properties for a dataset", "accessLevel": "Read", "resourceTypes": [ { "name": "dataset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describedatasource": { "name": "DescribeDataSource", "description": "Grants permission to describe a data source", "accessLevel": "Read", "resourceTypes": [ { "name": "datasource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "describedatasourcepermissions": { "name": "DescribeDataSourcePermissions", "description": "Grants permission to describe the resource policy of a data source", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "datasource", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "describedefaultqbusinessapplication": { "name": "DescribeDefaultQBusinessApplication", "description": "Grants permission to describe linked QBusiness application Id for QuickSight account", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeemailcustomizationtemplate": { "name": "DescribeEmailCustomizationTemplate", "isPermissionOnly": true, "description": "Grants permission to describe a QuickSight email customization template", "accessLevel": "Read", "resourceTypes": [ { "name": "emailCustomizationTemplate", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeextensionaccess": { "name": "DescribeExtensionAccess", "isPermissionOnly": true, "description": "Grants permission to describe an extension access", "accessLevel": "Read", "resourceTypes": [ { "name": "extensionaccess", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describefolder": { "name": "DescribeFolder", "description": "Grants permission to describe a QuickSight Folder", "accessLevel": "Read", "resourceTypes": [ { "name": "folder", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describefolderpermissions": { "name": "DescribeFolderPermissions", "description": "Grants permission to describe permissions for a QuickSight Folder", "accessLevel": "Read", "resourceTypes": [ { "name": "folder", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describefolderresolvedpermissions": { "name": "DescribeFolderResolvedPermissions", "description": "Grants permission to describe resolved permissions for a QuickSight Folder", "accessLevel": "Read", "resourceTypes": [ { "name": "folder", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describegroup": { "name": "DescribeGroup", "description": "Grants permission to describe a QuickSight group", "accessLevel": "Read", "resourceTypes": [ { "name": "group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describegroupmembership": { "name": "DescribeGroupMembership", "description": "Grants permission to describe a QuickSight group member", "accessLevel": "Read", "resourceTypes": [ { "name": "group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "quicksight:UserName" ], "dependentActions": [] }, "describeiampolicyassignment": { "name": "DescribeIAMPolicyAssignment", "description": "Grants permission to describe an existing assignment", "accessLevel": "Read", "resourceTypes": [ { "name": "assignment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeingestion": { "name": "DescribeIngestion", "description": "Grants permission to describe a SPICE ingestion on a dataset", "accessLevel": "Read", "resourceTypes": [ { "name": "ingestion", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "describeiprestriction": { "name": "DescribeIpRestriction", "description": "Grants permission to describe the IP restrictions for QuickSight account", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describekeyregistration": { "name": "DescribeKeyRegistration", "description": "Grants permission to describe QuickSight key registration", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describenamespace": { "name": "DescribeNamespace", "description": "Grants permission to describe a QuickSight namespace", "accessLevel": "Read", "resourceTypes": [ { "name": "namespace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeqpersonalizationconfiguration": { "name": "DescribeQPersonalizationConfiguration", "description": "Grants permission to describe a personalization configuration", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describequickindexcapacity": { "name": "DescribeQuickIndexCapacity", "isPermissionOnly": true, "description": "Grants permission to describe index capacity", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describequicksightqsearchconfiguration": { "name": "DescribeQuickSightQSearchConfiguration", "description": "Grants permission to describe QuickSight Q Search configuration", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describerefreshschedule": { "name": "DescribeRefreshSchedule", "description": "Grants permission to describe a refresh schedule for a dataset", "accessLevel": "Read", "resourceTypes": [ { "name": "refreshschedule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describerolecustompermission": { "name": "DescribeRoleCustomPermission", "description": "Grants permission to describe the custom permission associated with a role", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeselfupgradeconfiguration": { "name": "DescribeSelfUpgradeConfiguration", "description": "Grants permission to describe the administrative self upgrade configuration associated with an account", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describetemplate": { "name": "DescribeTemplate", "description": "Grants permission to describe a template", "accessLevel": "Read", "resourceTypes": [ { "name": "template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describetemplatealias": { "name": "DescribeTemplateAlias", "description": "Grants permission to describe a template alias", "accessLevel": "Read", "resourceTypes": [ { "name": "template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describetemplatepermissions": { "name": "DescribeTemplatePermissions", "description": "Grants permission to describe permissions for a template", "accessLevel": "Read", "resourceTypes": [ { "name": "template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describetheme": { "name": "DescribeTheme", "description": "Grants permission to describe a theme", "accessLevel": "Read", "resourceTypes": [ { "name": "theme", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describethemealias": { "name": "DescribeThemeAlias", "description": "Grants permission to describe a theme alias", "accessLevel": "Read", "resourceTypes": [ { "name": "theme", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describethemepermissions": { "name": "DescribeThemePermissions", "description": "Grants permission to describe permissions for a theme", "accessLevel": "Read", "resourceTypes": [ { "name": "theme", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describetopic": { "name": "DescribeTopic", "description": "Grants permission to describe a topic", "accessLevel": "Read", "resourceTypes": [ { "name": "topic", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "describetopicpermissions": { "name": "DescribeTopicPermissions", "description": "Grants permission to describe the resource policy of a topic", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "topic", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "describetopicrefresh": { "name": "DescribeTopicRefresh", "description": "Grants permission to describe the refresh status of a topic", "accessLevel": "Read", "resourceTypes": [ { "name": "topic", "r