@cloud-copilot/iam-data
Version:
438 lines • 10.8 kB
JSON
{
"createcluster": {
"name": "CreateCluster",
"description": "Grants permission to create a cluster",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createcontrolpanel": {
"name": "CreateControlPanel",
"description": "Grants permission to create a control panel",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "cluster",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createroutingcontrol": {
"name": "CreateRoutingControl",
"description": "Grants permission to create a routing control",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "cluster",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createsafetyrule": {
"name": "CreateSafetyRule",
"description": "Grants permission to create a safety rule",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "cluster",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"deletecluster": {
"name": "DeleteCluster",
"description": "Grants permission to delete a cluster",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "cluster",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletecontrolpanel": {
"name": "DeleteControlPanel",
"description": "Grants permission to delete a control panel",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "controlpanel",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteresourcepolicy": {
"name": "DeleteResourcePolicy",
"isPermissionOnly": true,
"description": "Grants permission to delete the RAM access control policy for a cluster",
"accessLevel": "Permissions management",
"resourceTypes": [
{
"name": "cluster",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteroutingcontrol": {
"name": "DeleteRoutingControl",
"description": "Grants permission to delete a routing control",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "routingcontrol",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletesafetyrule": {
"name": "DeleteSafetyRule",
"description": "Grants permission to delete a safety rule",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "safetyrule",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describecluster": {
"name": "DescribeCluster",
"description": "Grants permission to describe a cluster",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "cluster",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describecontrolpanel": {
"name": "DescribeControlPanel",
"description": "Grants permission to describe a control panel",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "controlpanel",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeroutingcontrol": {
"name": "DescribeRoutingControl",
"description": "Grants permission to describe a routing control",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "routingcontrol",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describesafetyrule": {
"name": "DescribeSafetyRule",
"description": "Grants permission to describe a safety rule",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "safetyrule",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getresourcepolicy": {
"name": "GetResourcePolicy",
"description": "Grants permission to get the resource policy of a cluster",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "cluster",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listassociatedroute53healthchecks": {
"name": "ListAssociatedRoute53HealthChecks",
"description": "Grants permission to list associated Route 53 health checks",
"accessLevel": "List",
"resourceTypes": [
{
"name": "routingcontrol",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listclusters": {
"name": "ListClusters",
"description": "Grants permission to list clusters",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listcontrolpanels": {
"name": "ListControlPanels",
"description": "Grants permission to list control panels",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listroutingcontrols": {
"name": "ListRoutingControls",
"description": "Grants permission to list routing controls",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "controlpanel",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listsafetyrules": {
"name": "ListSafetyRules",
"description": "Grants permission to list safety rules",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "controlpanel",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listtagsforresource": {
"name": "ListTagsForResource",
"description": "Grants permission to list tags for a resource",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "cluster",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "controlpanel",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "safetyrule",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"putresourcepolicy": {
"name": "PutResourcePolicy",
"isPermissionOnly": true,
"description": "Grants permission to define the RAM access control policy for a cluster",
"accessLevel": "Permissions management",
"resourceTypes": [
{
"name": "cluster",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"tagresource": {
"name": "TagResource",
"description": "Grants permission to tag a resource",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "cluster",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "controlpanel",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "safetyrule",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}"
],
"dependentActions": []
},
"untagresource": {
"name": "UntagResource",
"description": "Grants permission to remove tags from a resource",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "cluster",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "controlpanel",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "safetyrule",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys"
],
"dependentActions": []
},
"updatecluster": {
"name": "UpdateCluster",
"description": "Grants permission to update a cluster",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "cluster",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updatecontrolpanel": {
"name": "UpdateControlPanel",
"description": "Grants permission to update a cluster",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "controlpanel",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updateroutingcontrol": {
"name": "UpdateRoutingControl",
"description": "Grants permission to update a routing control",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "routingcontrol",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updatesafetyrule": {
"name": "UpdateSafetyRule",
"description": "Grants permission to update a safety rule",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "safetyrule",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
}
}