@cloud-copilot/iam-data

{ "acceptresourceshareinvitation": { "name": "AcceptResourceShareInvitation", "description": "Grants permission to accept the specified resource share invitation", "accessLevel": "Write", "resourceTypes": [ { "name": "resource-share-invitation", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "ram:ShareOwnerAccountId", "ram:ResourceShareName" ], "dependentActions": [] }, "associateresourceshare": { "name": "AssociateResourceShare", "description": "Grants permission to associate resource(s) and/or principal(s) to a resource share", "accessLevel": "Write", "resourceTypes": [ { "name": "resource-share", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "ram:ResourceTag/${TagKey}", "ram:ResourceShareName", "ram:AllowsExternalPrincipals", "ram:Principal", "ram:RequestedResourceType", "ram:ResourceArn", "ram:RetainSharingOnAccountLeaveOrganization" ], "dependentActions": [] }, "associateresourcesharepermission": { "name": "AssociateResourceSharePermission", "description": "Grants permission to associate a Permission with a Resource Share", "accessLevel": "Write", "resourceTypes": [ { "name": "customer-managed-permission", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "permission", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "resource-share", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createpermission": { "name": "CreatePermission", "description": "Grants permission to create a Permission that can be associated to a Resource Share", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "ram:PermissionArn", "ram:PermissionResourceType", "aws:ResourceTag/${TagKey}", "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [ "ram:TagResource" ] }, "createpermissionversion": { "name": "CreatePermissionVersion", "description": "Grants permission to create a new version of a Permission that can be associated to a Resource Share", "accessLevel": "Write", "resourceTypes": [ { "name": "customer-managed-permission", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "ram:PermissionArn", "ram:PermissionResourceType" ], "dependentActions": [] }, "createresourceshare": { "name": "CreateResourceShare", "description": "Grants permission to create a resource share with provided resource(s) and/or principal(s)", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "ram:RequestedResourceType", "ram:ResourceArn", "ram:RequestedAllowsExternalPrincipals", "ram:Principal", "ram:AllowsExternalPrincipals", "ram:RetainSharingOnAccountLeaveOrganization" ], "dependentActions": [] }, "deletepermission": { "name": "DeletePermission", "description": "Grants permission to delete a specified Permission", "accessLevel": "Write", "resourceTypes": [ { "name": "customer-managed-permission", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "ram:PermissionArn", "ram:PermissionResourceType" ], "dependentActions": [] }, "deletepermissionversion": { "name": "DeletePermissionVersion", "description": "Grants permission to delete a specified version of a permission", "accessLevel": "Write", "resourceTypes": [ { "name": "customer-managed-permission", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "ram:PermissionArn", "ram:PermissionResourceType" ], "dependentActions": [] }, "deleteresourceshare": { "name": "DeleteResourceShare", "description": "Grants permission to delete resource share", "accessLevel": "Write", "resourceTypes": [ { "name": "resource-share", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "ram:ResourceTag/${TagKey}", "ram:ResourceShareName", "ram:AllowsExternalPrincipals", "ram:RetainSharingOnAccountLeaveOrganization" ], "dependentActions": [] }, "disassociateresourceshare": { "name": "DisassociateResourceShare", "description": "Grants permission to disassociate resource(s) and/or principal(s) from a resource share", "accessLevel": "Write", "resourceTypes": [ { "name": "resource-share", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "ram:ResourceTag/${TagKey}", "ram:ResourceShareName", "ram:AllowsExternalPrincipals", "ram:Principal", "ram:RequestedResourceType", "ram:ResourceArn", "ram:RetainSharingOnAccountLeaveOrganization" ], "dependentActions": [] }, "disassociateresourcesharepermission": { "name": "DisassociateResourceSharePermission", "description": "Grants permission to disassociate a Permission from a Resource Share", "accessLevel": "Write", "resourceTypes": [ { "name": "customer-managed-permission", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "permission", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "resource-share", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "enablesharingwithawsorganization": { "name": "EnableSharingWithAwsOrganization", "description": "Grants permission to access customer's organization and create a SLR in the customer's account", "accessLevel": "Permissions management", "resourceTypes": [], "conditionKeys": [], "dependentActions": [ "iam:CreateServiceLinkedRole", "organizations:DescribeOrganization", "organizations:EnableAWSServiceAccess" ] }, "getpermission": { "name": "GetPermission", "description": "Grants permission to get the contents of an AWS RAM permission", "accessLevel": "Read", "resourceTypes": [ { "name": "customer-managed-permission", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "permission", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "ram:PermissionArn" ], "dependentActions": [] }, "getresourcepolicies": { "name": "GetResourcePolicies", "description": "Grants permission to get the policies for the specified resources that you own and have shared", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getresourceshareassociations": { "name": "GetResourceShareAssociations", "description": "Grants permission to get a set of resource share associations from a provided list or with a specified status of the specified type", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getresourceshareinvitations": { "name": "GetResourceShareInvitations", "description": "Grants permission to get resource share invitations by the specified invitation arn or those for the resource share", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getresourceshares": { "name": "GetResourceShares", "description": "Grants permission to get a set of resource shares from a provided list or with a specified status", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "listpendinginvitationresources": { "name": "ListPendingInvitationResources", "description": "Grants permission to list the resources in a resource share that is shared with you but that the invitation is still pending for", "accessLevel": "Read", "resourceTypes": [ { "name": "resource-share-invitation", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "ram:ResourceShareName" ], "dependentActions": [] }, "listpermissionassociations": { "name": "ListPermissionAssociations", "description": "Grants permission to list information about the permission and any associations", "accessLevel": "List", "resourceTypes": [ { "name": "customer-managed-permission", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "permission", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "ram:PermissionArn", "ram:PermissionResourceType" ], "dependentActions": [] }, "listpermissionversions": { "name": "ListPermissionVersions", "description": "Grants permission to list the versions of an AWS RAM permission", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listpermissions": { "name": "ListPermissions", "description": "Grants permission to list the AWS RAM permissions", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listprincipals": { "name": "ListPrincipals", "description": "Grants permission to list the principals that you have shared resources with or that have shared resources with you", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listreplacepermissionassociationswork": { "name": "ListReplacePermissionAssociationsWork", "description": "Grants permission to retrieve the status of the asynchronous permission replacement", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listresourcesharepermissions": { "name": "ListResourceSharePermissions", "description": "Grants permission to list the Permissions associated with a Resource Share", "accessLevel": "List", "resourceTypes": [ { "name": "resource-share", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "ram:ResourceShareName", "ram:AllowsExternalPrincipals", "ram:RetainSharingOnAccountLeaveOrganization" ], "dependentActions": [] }, "listresourcetypes": { "name": "ListResourceTypes", "description": "Grants permission to list the shareable resource types supported by AWS RAM", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listresources": { "name": "ListResources", "description": "Grants permission to list the resources that you added to resource shares or the resources that are shared with you", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listsourceassociations": { "name": "ListSourceAssociations", "description": "Grants permission to list source associations for resource shares", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "promotepermissioncreatedfrompolicy": { "name": "PromotePermissionCreatedFromPolicy", "description": "Grants permission to create a separate, fully manageable customer managed permission", "accessLevel": "Write", "resourceTypes": [ { "name": "customer-managed-permission", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "ram:PermissionArn", "ram:PermissionResourceType" ], "dependentActions": [] }, "promoteresourcesharecreatedfrompolicy": { "name": "PromoteResourceShareCreatedFromPolicy", "description": "Grants permission to promote the specified resource share", "accessLevel": "Write", "resourceTypes": [ { "name": "resource-share", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "rejectresourceshareinvitation": { "name": "RejectResourceShareInvitation", "description": "Grants permission to reject the specified resource share invitation", "accessLevel": "Write", "resourceTypes": [ { "name": "resource-share-invitation", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "ram:ShareOwnerAccountId", "ram:ResourceShareName" ], "dependentActions": [] }, "replacepermissionassociations": { "name": "ReplacePermissionAssociations", "description": "Grants permission to update all resource shares to a new permission", "accessLevel": "Write", "resourceTypes": [ { "name": "customer-managed-permission", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "permission", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "ram:PermissionArn", "ram:PermissionResourceType" ], "dependentActions": [] }, "setdefaultpermissionversion": { "name": "SetDefaultPermissionVersion", "description": "Grants permission to specify a version number as the default version for the respective customer managed permission", "accessLevel": "Write", "resourceTypes": [ { "name": "customer-managed-permission", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "ram:PermissionArn", "ram:PermissionResourceType" ], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to tag the specified resource share or permission", "accessLevel": "Tagging", "resourceTypes": [ { "name": "customer-managed-permission", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "resource-share", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to untag the specified resource share or permission", "accessLevel": "Tagging", "resourceTypes": [ { "name": "customer-managed-permission", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "resource-share", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] }, "updateresourceshare": { "name": "UpdateResourceShare", "description": "Grants permission to update attributes of the resource share", "accessLevel": "Write", "resourceTypes": [ { "name": "resource-share", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "ram:ResourceTag/${TagKey}", "ram:ResourceShareName", "ram:AllowsExternalPrincipals", "ram:RequestedAllowsExternalPrincipals", "ram:RetainSharingOnAccountLeaveOrganization" ], "dependentActions": [] } }