@cloud-copilot/iam-data
Version:
1,885 lines • 110 kB
JSON
{
"accountconfigurations": {
"name": "AccountConfigurations",
"isPermissionOnly": true,
"description": "Grants permission to enable setting default access to AWS resources",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"allowvendedlogdeliveryforresource": {
"name": "AllowVendedLogDeliveryForResource",
"isPermissionOnly": true,
"description": "Grants permission to configure log delivery for QuickSuite instance",
"accessLevel": "Permissions management",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"batchcreatetopicreviewedanswer": {
"name": "BatchCreateTopicReviewedAnswer",
"description": "Grants permission to create reviewed answers for a topic",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "topic",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"batchdeletetopicreviewedanswer": {
"name": "BatchDeleteTopicReviewedAnswer",
"description": "Grants permission to delete reviewed answers for a topic",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "topic",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"batchgetpreferences": {
"name": "BatchGetPreferences",
"isPermissionOnly": true,
"description": "Grants permission to get user preferences",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"batchupdatepreferences": {
"name": "BatchUpdatePreferences",
"isPermissionOnly": true,
"description": "Grants permission to update user preferences",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"cancelingestion": {
"name": "CancelIngestion",
"description": "Grants permission to cancel a SPICE ingestions on a dataset",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "ingestion",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createaccountcustomization": {
"name": "CreateAccountCustomization",
"description": "Grants permission to create an account customization for QuickSight account or namespace",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createaccountsubscription": {
"name": "CreateAccountSubscription",
"description": "Grants permission to subscribe to QuickSight",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"quicksight:Edition",
"quicksight:DirectoryType"
],
"dependentActions": []
},
"createactionconnector": {
"name": "CreateActionConnector",
"description": "Grants permission to create an action connector",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "actionconnector",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createadmin": {
"name": "CreateAdmin",
"isPermissionOnly": true,
"description": "Grants permission to provision Amazon QuickSight administrators, authors, and readers",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "user",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createanalysis": {
"name": "CreateAnalysis",
"description": "Grants permission to create an analysis from a template",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "analysis",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createbrand": {
"name": "CreateBrand",
"description": "Grants permission to create an Amazon QuickSight brand",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "brand",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createcustompermissions": {
"name": "CreateCustomPermissions",
"description": "Grants permission to create a QuickSight custom permissions resource",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "custompermissions",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createdashboard": {
"name": "CreateDashboard",
"description": "Grants permission to create a QuickSight Dashboard",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "dashboard",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createdataset": {
"name": "CreateDataSet",
"description": "Grants permission to create a dataset",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "datasource",
"required": true,
"conditionKeys": [],
"dependentActions": [
"quicksight:PassDataSource"
]
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createdatasource": {
"name": "CreateDataSource",
"description": "Grants permission to create a data source",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": [
"iam:PassRole"
]
},
"createemailcustomizationtemplate": {
"name": "CreateEmailCustomizationTemplate",
"isPermissionOnly": true,
"description": "Grants permission to create a QuickSight email customization template",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "emailCustomizationTemplate",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createextensionaccess": {
"name": "CreateExtensionAccess",
"isPermissionOnly": true,
"description": "Grants permission to create an extension access",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "extensionaccess",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createfolder": {
"name": "CreateFolder",
"description": "Grants permission to create a QuickSight folder",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "folder",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createfoldermembership": {
"name": "CreateFolderMembership",
"description": "Grants permission to add a QuickSight Dashboard, Analysis or Dataset to a QuickSight Folder",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "folder",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "analysis",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "dashboard",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "dataset",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"creategroup": {
"name": "CreateGroup",
"description": "Grants permission to create a QuickSight group",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "group",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"creategroupmembership": {
"name": "CreateGroupMembership",
"description": "Grants permission to add a QuickSight user to a QuickSight group",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "group",
"required": true,
"conditionKeys": [
"quicksight:UserName"
],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}"
],
"dependentActions": []
},
"createiampolicyassignment": {
"name": "CreateIAMPolicyAssignment",
"description": "Grants permission to create an assignment with one specified IAM Policy ARN that will be assigned to specified groups or users of QuickSight",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "assignment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createingestion": {
"name": "CreateIngestion",
"description": "Grants permission to start a SPICE ingestion on a dataset",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "ingestion",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createnamespace": {
"name": "CreateNamespace",
"description": "Grants permission to create an QuickSight namespace",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "namespace",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": [
"ds:CreateIdentityPoolDirectory"
]
},
"createreader": {
"name": "CreateReader",
"isPermissionOnly": true,
"description": "Grants permission to provision Amazon QuickSight readers",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "user",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createrefreshschedule": {
"name": "CreateRefreshSchedule",
"description": "Grants permission to create a refresh schedule for a dataset",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "refreshschedule",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createrolemembership": {
"name": "CreateRoleMembership",
"description": "Grants permission to add a group member to a role",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"quicksight:Group"
],
"dependentActions": []
},
"createtemplate": {
"name": "CreateTemplate",
"description": "Grants permission to create a template",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "template",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createtemplatealias": {
"name": "CreateTemplateAlias",
"description": "Grants permission to create a template alias",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "template",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createtheme": {
"name": "CreateTheme",
"description": "Grants permission to create a theme",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "theme",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createthemealias": {
"name": "CreateThemeAlias",
"description": "Grants permission to create an alias for a theme version",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "theme",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createtopic": {
"name": "CreateTopic",
"description": "Grants permission to create a topic",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "dataset",
"required": true,
"conditionKeys": [],
"dependentActions": [
"quicksight:PassDataSet"
]
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createtopicrefreshschedule": {
"name": "CreateTopicRefreshSchedule",
"description": "Grants permission to create a refresh schedule for a topic",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "topic",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createuser": {
"name": "CreateUser",
"isPermissionOnly": true,
"description": "Grants permission to provision Amazon QuickSight authors and readers",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "user",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createvpcconnection": {
"name": "CreateVPCConnection",
"description": "Grants permission to create a vpc connection",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": [
"iam:PassRole"
]
},
"deleteaccountcustompermission": {
"name": "DeleteAccountCustomPermission",
"description": "Grants permission to remove the custom permission associated with an account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deleteaccountcustomization": {
"name": "DeleteAccountCustomization",
"description": "Grants permission to delete an account customization for QuickSight account or namespace",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "customization",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteaccountsubscription": {
"name": "DeleteAccountSubscription",
"description": "Grants permission to delete a QuickSight account",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "account",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteactionconnector": {
"name": "DeleteActionConnector",
"description": "Grants permission to delete an action connector",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "actionconnector",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteanalysis": {
"name": "DeleteAnalysis",
"description": "Grants permission to delete an analysis",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "analysis",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletebrand": {
"name": "DeleteBrand",
"description": "Grants permission to delete an Amazon QuickSight brand",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "brand",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletebrandassignment": {
"name": "DeleteBrandAssignment",
"description": "Grants permission to delete a brand assignment",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deletecustompermissions": {
"name": "DeleteCustomPermissions",
"description": "Grants permission to delete a QuickSight custom permissions resource",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deletedashboard": {
"name": "DeleteDashboard",
"description": "Grants permission to delete a QuickSight Dashboard",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "dashboard",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletedataset": {
"name": "DeleteDataSet",
"description": "Grants permission to delete a dataset",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "dataset",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"deletedatasetrefreshproperties": {
"name": "DeleteDataSetRefreshProperties",
"description": "Grants permission to delete dataset refresh properties for a dataset",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "dataset",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletedatasource": {
"name": "DeleteDataSource",
"description": "Grants permission to delete a data source",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "datasource",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"deletedefaultqbusinessapplication": {
"name": "DeleteDefaultQBusinessApplication",
"description": "Grants permission to delete linked QBusiness application for QuickSight account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deleteemailcustomizationtemplate": {
"name": "DeleteEmailCustomizationTemplate",
"isPermissionOnly": true,
"description": "Grants permission to delete a QuickSight email customization template",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "emailCustomizationTemplate",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteextensionaccess": {
"name": "DeleteExtensionAccess",
"isPermissionOnly": true,
"description": "Grants permission to delete an extension access",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "extensionaccess",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletefolder": {
"name": "DeleteFolder",
"description": "Grants permission to delete a QuickSight Folder",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "folder",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletefoldermembership": {
"name": "DeleteFolderMembership",
"description": "Grants permission to remove a QuickSight Dashboard, Analysis or Dataset from a QuickSight Folder",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "folder",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "analysis",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "dashboard",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "dataset",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletegroup": {
"name": "DeleteGroup",
"description": "Grants permission to remove a user group from QuickSight",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "group",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletegroupmembership": {
"name": "DeleteGroupMembership",
"description": "Grants permission to remove a user from a group so that he/she is no longer a member of the group",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "group",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"quicksight:UserName"
],
"dependentActions": []
},
"deleteiampolicyassignment": {
"name": "DeleteIAMPolicyAssignment",
"description": "Grants permission to update an existing assignment",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "assignment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteidentitypropagationconfig": {
"name": "DeleteIdentityPropagationConfig",
"description": "Grants permission to remove AWS services for trusted identity propagation in QuickSight",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deletenamespace": {
"name": "DeleteNamespace",
"description": "Grants permission to delete a QuickSight namespace",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "namespace",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": [
"ds:DeleteDirectory"
]
},
"deleterefreshschedule": {
"name": "DeleteRefreshSchedule",
"description": "Grants permission to delete a refresh schedule for a dataset",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "refreshschedule",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleterolecustompermission": {
"name": "DeleteRoleCustomPermission",
"description": "Grants permission to remove the custom permission associated with a role",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deleterolemembership": {
"name": "DeleteRoleMembership",
"description": "Grants permission to remove a group member from a role",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"quicksight:Group"
],
"dependentActions": []
},
"deletetemplate": {
"name": "DeleteTemplate",
"description": "Grants permission to delete a template",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "template",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletetemplatealias": {
"name": "DeleteTemplateAlias",
"description": "Grants permission to delete a template alias",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "template",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletetheme": {
"name": "DeleteTheme",
"description": "Grants permission to delete a theme",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "theme",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletethemealias": {
"name": "DeleteThemeAlias",
"description": "Grants permission to delete the alias of a theme",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "theme",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletetopic": {
"name": "DeleteTopic",
"description": "Grants permission to delete a topic",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "topic",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"deletetopicrefreshschedule": {
"name": "DeleteTopicRefreshSchedule",
"description": "Grants permission to delete a refresh schedule for a topic",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "topic",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteuser": {
"name": "DeleteUser",
"description": "Grants permission to delete a QuickSight user, given the user name",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "user",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteuserbyprincipalid": {
"name": "DeleteUserByPrincipalId",
"description": "Grants permission to delete a user identified by its principal ID",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "user",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteusercustompermission": {
"name": "DeleteUserCustomPermission",
"description": "Grants permission to remove the custom permission associated with a user",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "user",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletevpcconnection": {
"name": "DeleteVPCConnection",
"description": "Grants permission to delete a vpc connection",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "vpcconnection",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"describeaccountcustompermission": {
"name": "DescribeAccountCustomPermission",
"description": "Grants permission to describe the custom permission associated with an account",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"describeaccountcustomization": {
"name": "DescribeAccountCustomization",
"description": "Grants permission to describe an account customization for QuickSight account or namespace",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "customization",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeaccountsettings": {
"name": "DescribeAccountSettings",
"description": "Grants permission to describe the administrative account settings for QuickSight account",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"describeaccountsubscription": {
"name": "DescribeAccountSubscription",
"description": "Grants permission to describe a QuickSight account",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "account",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeactionconnector": {
"name": "DescribeActionConnector",
"description": "Grants permission to describe an action connector",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "actionconnector",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeactionconnectorpermissions": {
"name": "DescribeActionConnectorPermissions",
"description": "Grants permission to describe permissions for an action connector",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "actionconnector",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeagent": {
"name": "DescribeAgent",
"isPermissionOnly": true,
"description": "Grants permission to describe an agent",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "agent",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeagentpermissions": {
"name": "DescribeAgentPermissions",
"isPermissionOnly": true,
"description": "Grants permission to describe agent's permissions",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "agent",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeanalysis": {
"name": "DescribeAnalysis",
"description": "Grants permission to describe an analysis",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "analysis",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeanalysispermissions": {
"name": "DescribeAnalysisPermissions",
"description": "Grants permission to describe permissions for an analysis",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "analysis",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeassetbundleexportjob": {
"name": "DescribeAssetBundleExportJob",
"description": "Grants permission to describe an asset bundle export job",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "assetBundleExportJob",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeassetbundleimportjob": {
"name": "DescribeAssetBundleImportJob",
"description": "Grants permission to describe an asset bundle import job",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "assetBundleImportJob",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeautomationjob": {
"name": "DescribeAutomationJob",
"description": "Grants permission to describe an automation job",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "automationJob",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describebrand": {
"name": "DescribeBrand",
"description": "Grants permission to describe a brand",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "brand",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describebrandassignment": {
"name": "DescribeBrandAssignment",
"description": "Grants permission to describe a brand assignment",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"describebrandpublishedversion": {
"name": "DescribeBrandPublishedVersion",
"description": "Grants permission to describes the published version of the brand",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "brand",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describechatconfiguration": {
"name": "DescribeChatConfiguration",
"isPermissionOnly": true,
"description": "Grants permission to describe chat configuration",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"describecustompermissions": {
"name": "DescribeCustomPermissions",
"description": "Grants permission to describe a custom permissions resource in a QuickSight account",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "custompermissions",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describedashboard": {
"name": "DescribeDashboard",
"description": "Grants permission to describe a QuickSight Dashboard",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "dashboard",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describedashboardpermissions": {
"name": "DescribeDashboardPermissions",
"description": "Grants permission to describe permissions for a QuickSight Dashboard",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "dashboard",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describedashboardsnapshotjob": {
"name": "DescribeDashboardSnapshotJob",
"description": "Grants permission to describe a dashboard snapshot job",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "dashboardSnapshotJob",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describedashboardsnapshotjobresult": {
"name": "DescribeDashboardSnapshotJobResult",
"description": "Grants permission to describe result of a dashboard snapshot job",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "dashboardSnapshotJob",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describedashboardsqaconfiguration": {
"name": "DescribeDashboardsQAConfiguration",
"description": "Grants permission to describe dashboards qa configuration",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"describedataset": {
"name": "DescribeDataSet",
"description": "Grants permission to describe a dataset",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "dataset",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"describedatasetpermissions": {
"name": "DescribeDataSetPermissions",
"description": "Grants permission to describe the resource policy of a dataset",
"accessLevel": "Permissions management",
"resourceTypes": [
{
"name": "dataset",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"describedatasetrefreshproperties": {
"name": "DescribeDataSetRefreshProperties",
"description": "Grants permission to describe refresh properties for a dataset",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "dataset",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describedatasource": {
"name": "DescribeDataSource",
"description": "Grants permission to describe a data source",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "datasource",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"describedatasourcepermissions": {
"name": "DescribeDataSourcePermissions",
"description": "Grants permission to describe the resource policy of a data source",
"accessLevel": "Permissions management",
"resourceTypes": [
{
"name": "datasource",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"describedefaultqbusinessapplication": {
"name": "DescribeDefaultQBusinessApplication",
"description": "Grants permission to describe linked QBusiness application Id for QuickSight account",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"describeemailcustomizationtemplate": {
"name": "DescribeEmailCustomizationTemplate",
"isPermissionOnly": true,
"description": "Grants permission to describe a QuickSight email customization template",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "emailCustomizationTemplate",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeextensionaccess": {
"name": "DescribeExtensionAccess",
"isPermissionOnly": true,
"description": "Grants permission to describe an extension access",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "extensionaccess",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describefolder": {
"name": "DescribeFolder",
"description": "Grants permission to describe a QuickSight Folder",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "folder",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describefolderpermissions": {
"name": "DescribeFolderPermissions",
"description": "Grants permission to describe permissions for a QuickSight Folder",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "folder",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describefolderresolvedpermissions": {
"name": "DescribeFolderResolvedPermissions",
"description": "Grants permission to describe resolved permissions for a QuickSight Folder",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "folder",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describegroup": {
"name": "DescribeGroup",
"description": "Grants permission to describe a QuickSight group",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "group",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describegroupmembership": {
"name": "DescribeGroupMembership",
"description": "Grants permission to describe a QuickSight group member",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "group",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"quicksight:UserName"
],
"dependentActions": []
},
"describeiampolicyassignment": {
"name": "DescribeIAMPolicyAssignment",
"description": "Grants permission to describe an existing assignment",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "assignment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeingestion": {
"name": "DescribeIngestion",
"description": "Grants permission to describe a SPICE ingestion on a dataset",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "ingestion",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"describeiprestriction": {
"name": "DescribeIpRestriction",
"description": "Grants permission to describe the IP restrictions for QuickSight account",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"describekeyregistration": {
"name": "DescribeKeyRegistration",
"description": "Grants permission to describe QuickSight key registration",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"describenamespace": {
"name": "DescribeNamespace",
"description": "Grants permission to describe a QuickSight namespace",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "namespace",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeqpersonalizationconfiguration": {
"name": "DescribeQPersonalizationConfiguration",
"description": "Grants permission to describe a personalization configuration",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"describequickindexcapacity": {
"name": "DescribeQuickIndexCapacity",
"isPermissionOnly": true,
"description": "Grants permission to describe index capacity",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"describequicksightqsearchconfiguration": {
"name": "DescribeQuickSightQSearchConfiguration",
"description": "Grants permission to describe QuickSight Q Search configuration",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"describerefreshschedule": {
"name": "DescribeRefreshSchedule",
"description": "Grants permission to describe a refresh schedule for a dataset",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "refreshschedule",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describerolecustompermission": {
"name": "DescribeRoleCustomPermission",
"description": "Grants permission to describe the custom permission associated with a role",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"describeselfupgradeconfiguration": {
"name": "DescribeSelfUpgradeConfiguration",
"description": "Grants permission to describe the administrative self upgrade configuration associated with an account",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"describetemplate": {
"name": "DescribeTemplate",
"description": "Grants permission to describe a template",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "template",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describetemplatealias": {
"name": "DescribeTemplateAlias",
"description": "Grants permission to describe a template alias",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "template",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describetemplatepermissions": {
"name": "DescribeTemplatePermissions",
"description": "Grants permission to describe permissions for a template",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "template",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describetheme": {
"name": "DescribeTheme",
"description": "Grants permission to describe a theme",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "theme",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describethemealias": {
"name": "DescribeThemeAlias",
"description": "Grants permission to describe a theme alias",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "theme",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describethemepermissions": {
"name": "DescribeThemePermissions",
"description": "Grants permission to describe permissions for a theme",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "theme",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describetopic": {
"name": "DescribeTopic",
"description": "Grants permission to describe a topic",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "topic",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"describetopicpermissions": {
"name": "DescribeTopicPermissions",
"description": "Grants permission to describe the resource policy of a topic",
"accessLevel": "Permissions management",
"resourceTypes": [
{
"name": "topic",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"describetopicrefresh": {
"name": "DescribeTopicRefresh",
"description": "Grants permission to describe the refresh status of a topic",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "topic",
"r