@cloud-copilot/iam-data

{ "allowvendedlogdeliveryforresource": { "name": "AllowVendedLogDeliveryForResource", "isPermissionOnly": true, "description": "Grants permission to deliver logs for a global resolver", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "global-resolver", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "associatehostedzone": { "name": "AssociateHostedZone", "description": "Grants permission to associate a resource to a hosted zone", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "batchcreatefirewallrule": { "name": "BatchCreateFirewallRule", "description": "Grants permission to create multiple firewall rules", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "batchdeletefirewallrule": { "name": "BatchDeleteFirewallRule", "description": "Grants permission to delete multiple firewall rules", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "batchupdatefirewallrule": { "name": "BatchUpdateFirewallRule", "description": "Grants permission to update multiple firewall rules", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createaccesssource": { "name": "CreateAccessSource", "description": "Grants permission to create an access source", "accessLevel": "Write", "resourceTypes": [ { "name": "dns-view", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createaccesstoken": { "name": "CreateAccessToken", "description": "Grants permission to create an access token", "accessLevel": "Write", "resourceTypes": [ { "name": "access-token", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "creatednsview": { "name": "CreateDNSView", "description": "Grants permission to create a dns view", "accessLevel": "Write", "resourceTypes": [ { "name": "dns-view", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createfirewalldomainlist": { "name": "CreateFirewallDomainList", "description": "Grants permission to create a firewall domain list", "accessLevel": "Write", "resourceTypes": [ { "name": "firewall-domain-list", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createfirewallrule": { "name": "CreateFirewallRule", "description": "Grants permission to create a firewall rule", "accessLevel": "Write", "resourceTypes": [ { "name": "dns-view", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "firewall-domain-list", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createglobalresolver": { "name": "CreateGlobalResolver", "description": "Grants permission to create a global resolver", "accessLevel": "Write", "resourceTypes": [ { "name": "global-resolver", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "deleteaccesssource": { "name": "DeleteAccessSource", "description": "Grants permission to delete an access source", "accessLevel": "Write", "resourceTypes": [ { "name": "access-source", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteaccesstoken": { "name": "DeleteAccessToken", "description": "Grants permission to delete an access token", "accessLevel": "Write", "resourceTypes": [ { "name": "access-token", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletednsview": { "name": "DeleteDNSView", "description": "Grants permission to delete a dns view", "accessLevel": "Write", "resourceTypes": [ { "name": "dns-view", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletefirewalldomainlist": { "name": "DeleteFirewallDomainList", "description": "Grants permission to delete a firewall domain list", "accessLevel": "Write", "resourceTypes": [ { "name": "firewall-domain-list", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletefirewallrule": { "name": "DeleteFirewallRule", "description": "Grants permission to delete a firewall rule", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleteglobalresolver": { "name": "DeleteGlobalResolver", "description": "Grants permission to delete a global resolver", "accessLevel": "Write", "resourceTypes": [ { "name": "global-resolver", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "disablednsview": { "name": "DisableDNSView", "description": "Grants permission to disable a dns view", "accessLevel": "Write", "resourceTypes": [ { "name": "dns-view", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "disassociatehostedzone": { "name": "DisassociateHostedZone", "description": "Grants permission to disassociate a hosted zone from a resource", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "enablednsview": { "name": "EnableDNSView", "description": "Grants permission to enable a dns view", "accessLevel": "Write", "resourceTypes": [ { "name": "dns-view", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getaccesssource": { "name": "GetAccessSource", "description": "Grants permission to get an access source", "accessLevel": "Read", "resourceTypes": [ { "name": "access-source", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getaccesstoken": { "name": "GetAccessToken", "description": "Grants permission to get an access token", "accessLevel": "Read", "resourceTypes": [ { "name": "access-token", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getdnsview": { "name": "GetDNSView", "description": "Grants permission to get a dns view", "accessLevel": "Read", "resourceTypes": [ { "name": "dns-view", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getfirewalldomainlist": { "name": "GetFirewallDomainList", "description": "Grants permission to get a firewall domain list", "accessLevel": "Read", "resourceTypes": [ { "name": "firewall-domain-list", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getfirewallrule": { "name": "GetFirewallRule", "description": "Grants permission to get a firewall rule", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getglobalresolver": { "name": "GetGlobalResolver", "description": "Grants permission to get a global resolver", "accessLevel": "Read", "resourceTypes": [ { "name": "global-resolver", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "gethostedzoneassociation": { "name": "GetHostedZoneAssociation", "description": "Grants permission to get a hosted zone association", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getmanagedfirewalldomainlist": { "name": "GetManagedFirewallDomainList", "description": "Grants permission to get a managed firewall domain list", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "importfirewalldomains": { "name": "ImportFirewallDomains", "description": "Grants permission to import firewall domains from an S3 bucket", "accessLevel": "Write", "resourceTypes": [ { "name": "firewall-domain-list", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "s3:GetObject", "s3:ListBucket" ] }, "listaccesssources": { "name": "ListAccessSources", "description": "Grants permission to list access sources", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listaccesstokens": { "name": "ListAccessTokens", "description": "Grants permission to list access tokens", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listdnsviews": { "name": "ListDNSViews", "description": "Grants permission to list dns views", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listfirewalldomainlists": { "name": "ListFirewallDomainLists", "description": "Grants permission to list firewall domain lists", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listfirewalldomains": { "name": "ListFirewallDomains", "description": "Grants permission to list firewall domains", "accessLevel": "Read", "resourceTypes": [ { "name": "firewall-domain-list", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listfirewallrules": { "name": "ListFirewallRules", "description": "Grants permission to list firewall rules", "accessLevel": "List", "resourceTypes": [ { "name": "dns-view", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listglobalresolvers": { "name": "ListGlobalResolvers", "description": "Grants permission to list global resolvers", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listhostedzoneassociations": { "name": "ListHostedZoneAssociations", "description": "Grants permission to list hosted zone associations", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listmanagedfirewalldomainlists": { "name": "ListManagedFirewallDomainLists", "description": "Grants permission to list managed firewall domain lists", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to list tags for a resource", "accessLevel": "Write", "resourceTypes": [ { "name": "access-source", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "access-token", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "dns-view", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "firewall-domain-list", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "global-resolver", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to tag a resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "access-source", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "access-token", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "dns-view", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "firewall-domain-list", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "global-resolver", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to untag a resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "access-source", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "access-token", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "dns-view", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "firewall-domain-list", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "global-resolver", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] }, "updateaccesssource": { "name": "UpdateAccessSource", "description": "Grants permission to update an access source", "accessLevel": "Write", "resourceTypes": [ { "name": "access-source", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateaccesstoken": { "name": "UpdateAccessToken", "description": "Grants permission to update an access token", "accessLevel": "Write", "resourceTypes": [ { "name": "access-token", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatednsview": { "name": "UpdateDNSView", "description": "Grants permission to update a dns view", "accessLevel": "Write", "resourceTypes": [ { "name": "dns-view", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatefirewalldomains": { "name": "UpdateFirewallDomains", "description": "Grants permission to update firewall domains", "accessLevel": "Write", "resourceTypes": [ { "name": "firewall-domain-list", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatefirewallrule": { "name": "UpdateFirewallRule", "description": "Grants permission to update an firewall rule", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "updateglobalresolver": { "name": "UpdateGlobalResolver", "description": "Grants permission to update a global resolver", "accessLevel": "Write", "resourceTypes": [ { "name": "global-resolver", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatehostedzoneassociation": { "name": "UpdateHostedZoneAssociation", "description": "Grants permission to update a hosted zone association", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] } }