@cloud-copilot/iam-data

{ "createnamespace": { "name": "CreateNamespace", "description": "Grants permission to create a namespace", "accessLevel": "Write", "resourceTypes": [ { "name": "TableBucket", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createtable": { "name": "CreateTable", "description": "Grants permission to create a table", "accessLevel": "Write", "resourceTypes": [ { "name": "TableBucket", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace", "s3tables:SSEAlgorithm", "s3tables:KMSKeyArn", "s3tables:TableBucketTag/${TagKey}", "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createtablebucket": { "name": "CreateTableBucket", "description": "Grants permission to create a table bucket", "accessLevel": "Write", "resourceTypes": [ { "name": "TableBucket", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:SSEAlgorithm", "s3tables:KMSKeyArn", "s3tables:TableBucketTag/${TagKey}", "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "deletenamespace": { "name": "DeleteNamespace", "description": "Grants permission to delete a namespace", "accessLevel": "Write", "resourceTypes": [ { "name": "TableBucket", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace" ], "dependentActions": [] }, "deletetable": { "name": "DeleteTable", "description": "Grants permission to delete a table", "accessLevel": "Write", "resourceTypes": [ { "name": "Table", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace", "s3tables:tableName" ], "dependentActions": [] }, "deletetablebucket": { "name": "DeleteTableBucket", "description": "Grants permission to delete a table bucket", "accessLevel": "Write", "resourceTypes": [ { "name": "TableBucket", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletetablebucketencryption": { "name": "DeleteTableBucketEncryption", "description": "Grants permission to delete encryption configuration on a table bucket", "accessLevel": "Write", "resourceTypes": [ { "name": "TableBucket", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletetablebucketmetricsconfiguration": { "name": "DeleteTableBucketMetricsConfiguration", "description": "Grants permission to delete a metrics configuration on a table bucket", "accessLevel": "Write", "resourceTypes": [ { "name": "TableBucket", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletetablebucketpolicy": { "name": "DeleteTableBucketPolicy", "description": "Grants permission to delete a policy on a table bucket", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "TableBucket", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletetablebucketreplication": { "name": "DeleteTableBucketReplication", "description": "Grants permission to delete table bucket replication configuration on a bucket", "accessLevel": "Write", "resourceTypes": [ { "name": "TableBucket", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletetablepolicy": { "name": "DeleteTablePolicy", "description": "Grants permission to delete a policy on a table", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "Table", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace", "s3tables:tableName" ], "dependentActions": [] }, "deletetablereplication": { "name": "DeleteTableReplication", "description": "Grants permission to delete table replication configuration on a table", "accessLevel": "Write", "resourceTypes": [ { "name": "Table", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace", "s3tables:tableName" ], "dependentActions": [] }, "getnamespace": { "name": "GetNamespace", "description": "Grants permission to get a namespace", "accessLevel": "Read", "resourceTypes": [ { "name": "TableBucket", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace" ], "dependentActions": [] }, "gettable": { "name": "GetTable", "description": "Grants permission to retrieve a table", "accessLevel": "Read", "resourceTypes": [ { "name": "Table", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace", "s3tables:tableName" ], "dependentActions": [] }, "gettablebucket": { "name": "GetTableBucket", "description": "Grants permission to retrieve a table bucket", "accessLevel": "Read", "resourceTypes": [ { "name": "TableBucket", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "gettablebucketencryption": { "name": "GetTableBucketEncryption", "description": "Grants permission to retrieve encryption configuration on a table bucket", "accessLevel": "Read", "resourceTypes": [ { "name": "TableBucket", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "gettablebucketmaintenanceconfiguration": { "name": "GetTableBucketMaintenanceConfiguration", "description": "Grants permission to retrieve a maintenance configuration on a table bucket", "accessLevel": "Read", "resourceTypes": [ { "name": "TableBucket", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "gettablebucketmetricsconfiguration": { "name": "GetTableBucketMetricsConfiguration", "description": "Grants permission to retrieve a metrics configuration on a bucket", "accessLevel": "Read", "resourceTypes": [ { "name": "TableBucket", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "gettablebucketpolicy": { "name": "GetTableBucketPolicy", "description": "Grants permission to retrieve a policy on a table bucket", "accessLevel": "Read", "resourceTypes": [ { "name": "TableBucket", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "gettablebucketreplication": { "name": "GetTableBucketReplication", "description": "Grants permission to retrieve a table bucket replication configuration on a bucket", "accessLevel": "Read", "resourceTypes": [ { "name": "TableBucket", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "gettablebucketstorageclass": { "name": "GetTableBucketStorageClass", "description": "Grants permission to retrieve the storage class configuration for a table bucket", "accessLevel": "Read", "resourceTypes": [ { "name": "TableBucket", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "gettabledata": { "name": "GetTableData", "isPermissionOnly": true, "description": "Grants permission to read metadata and data objects from a table storage endpoint using S3 APIs", "accessLevel": "Read", "resourceTypes": [ { "name": "Table", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace", "s3tables:tableName" ], "dependentActions": [] }, "gettableencryption": { "name": "GetTableEncryption", "description": "Grants permission to retrieve encryption configuration on a table", "accessLevel": "Read", "resourceTypes": [ { "name": "Table", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace", "s3tables:tableName" ], "dependentActions": [] }, "gettablemaintenanceconfiguration": { "name": "GetTableMaintenanceConfiguration", "description": "Grants permission to retrieve a maintenance configuration on a table", "accessLevel": "Read", "resourceTypes": [ { "name": "Table", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace", "s3tables:tableName" ], "dependentActions": [] }, "gettablemaintenancejobstatus": { "name": "GetTableMaintenanceJobStatus", "description": "Grants permission to retrieve the status of maintenance jobs on a table", "accessLevel": "Read", "resourceTypes": [ { "name": "Table", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace", "s3tables:tableName" ], "dependentActions": [] }, "gettablemetadatalocation": { "name": "GetTableMetadataLocation", "description": "Grants permission to retrieve the metadata location of a table", "accessLevel": "Read", "resourceTypes": [ { "name": "Table", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace", "s3tables:tableName" ], "dependentActions": [] }, "gettablepolicy": { "name": "GetTablePolicy", "description": "Grants permission to retrieve a policy on a table", "accessLevel": "Read", "resourceTypes": [ { "name": "Table", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace", "s3tables:tableName" ], "dependentActions": [] }, "gettablerecordexpirationconfiguration": { "name": "GetTableRecordExpirationConfiguration", "description": "Grants permission to retrieve a table maintenance configuration on a system table", "accessLevel": "Read", "resourceTypes": [ { "name": "Table", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace", "s3tables:tableName" ], "dependentActions": [] }, "gettablerecordexpirationjobstatus": { "name": "GetTableRecordExpirationJobStatus", "description": "Grants permission to retrieve the status of table record expiration jobs on a system table", "accessLevel": "Read", "resourceTypes": [ { "name": "Table", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace", "s3tables:tableName" ], "dependentActions": [] }, "gettablereplication": { "name": "GetTableReplication", "description": "Grants permission to retrieve a table replication configuration on a table", "accessLevel": "Read", "resourceTypes": [ { "name": "Table", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace", "s3tables:tableName" ], "dependentActions": [] }, "gettablereplicationstatus": { "name": "GetTableReplicationStatus", "description": "Grants permission to retrieve a table replication status on a table", "accessLevel": "Read", "resourceTypes": [ { "name": "Table", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace", "s3tables:tableName" ], "dependentActions": [] }, "gettablestorageclass": { "name": "GetTableStorageClass", "description": "Grants permission to retrieve the storage class configuration for a specific table", "accessLevel": "Read", "resourceTypes": [ { "name": "Table", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace", "s3tables:tableName" ], "dependentActions": [] }, "listnamespaces": { "name": "ListNamespaces", "description": "Grants permission to list namespaces", "accessLevel": "List", "resourceTypes": [ { "name": "TableBucket", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listtablebuckets": { "name": "ListTableBuckets", "description": "Grants permission to list table buckets", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listtables": { "name": "ListTables", "description": "Grants permission to list tables", "accessLevel": "List", "resourceTypes": [ { "name": "TableBucket", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace" ], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to list the tags for an S3 Tables resource", "accessLevel": "List", "resourceTypes": [ { "name": "Table", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "TableBucket", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "s3tables:TableBucketTag/${TagKey}" ], "dependentActions": [] }, "puttablebucketencryption": { "name": "PutTableBucketEncryption", "description": "Grants permission to put or overwrite encryption configuration on a table bucket", "accessLevel": "Write", "resourceTypes": [ { "name": "TableBucket", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:KMSKeyArn", "s3tables:SSEAlgorithm" ], "dependentActions": [] }, "puttablebucketmaintenanceconfiguration": { "name": "PutTableBucketMaintenanceConfiguration", "description": "Grants permission to put a maintenance configuration on a table bucket", "accessLevel": "Write", "resourceTypes": [ { "name": "TableBucket", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "puttablebucketmetricsconfiguration": { "name": "PutTableBucketMetricsConfiguration", "description": "Grants permission to create or overwrite a metrics configuration on a table bucket", "accessLevel": "Write", "resourceTypes": [ { "name": "TableBucket", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "puttablebucketpolicy": { "name": "PutTableBucketPolicy", "description": "Grants permission to create or overwrite a policy on a table bucket", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "TableBucket", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "puttablebucketreplication": { "name": "PutTableBucketReplication", "description": "Grants permission to put table bucket replication configuration on a bucket", "accessLevel": "Write", "resourceTypes": [ { "name": "TableBucket", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "puttablebucketstorageclass": { "name": "PutTableBucketStorageClass", "description": "Grants permission to set or update the storage class configuration for a table bucket", "accessLevel": "Write", "resourceTypes": [ { "name": "TableBucket", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:StorageClass" ], "dependentActions": [] }, "puttabledata": { "name": "PutTableData", "isPermissionOnly": true, "description": "Grants permission to write metadata and data objects to a table storage endpoint using S3 APIs", "accessLevel": "Write", "resourceTypes": [ { "name": "Table", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace", "s3tables:tableName" ], "dependentActions": [] }, "puttableencryption": { "name": "PutTableEncryption", "isPermissionOnly": true, "description": "Grants permission to put encryption configuration on a table", "accessLevel": "Write", "resourceTypes": [ { "name": "Table", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace", "s3tables:SSEAlgorithm", "s3tables:KMSKeyArn" ], "dependentActions": [] }, "puttablemaintenanceconfiguration": { "name": "PutTableMaintenanceConfiguration", "description": "Grants permission to put a maintenance configuration on a table", "accessLevel": "Write", "resourceTypes": [ { "name": "Table", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace", "s3tables:tableName" ], "dependentActions": [] }, "puttablepolicy": { "name": "PutTablePolicy", "description": "Grants permission to create or overwrite a policy on a table", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "Table", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace", "s3tables:tableName" ], "dependentActions": [] }, "puttablerecordexpirationconfiguration": { "name": "PutTableRecordExpirationConfiguration", "description": "Grants permission to put a table record expiration configuration on a system table", "accessLevel": "Write", "resourceTypes": [ { "name": "Table", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace", "s3tables:tableName" ], "dependentActions": [] }, "puttablereplication": { "name": "PutTableReplication", "description": "Grants permission to put table replication configuration on a table", "accessLevel": "Write", "resourceTypes": [ { "name": "Table", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace", "s3tables:tableName" ], "dependentActions": [] }, "puttablestorageclass": { "name": "PutTableStorageClass", "description": "Grants permission to set or update the storage class configuration for a table", "accessLevel": "Write", "resourceTypes": [ { "name": "Table", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace", "s3tables:tableName", "s3tables:StorageClass" ], "dependentActions": [] }, "renametable": { "name": "RenameTable", "description": "Grants permission to rename a table or move a table across namespaces", "accessLevel": "Write", "resourceTypes": [ { "name": "Table", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace", "s3tables:tableName" ], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to tag a S3 Tables resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "Table", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "TableBucket", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}", "s3tables:TableBucketTag/${TagKey}" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to untag a S3 Tables resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "Table", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "TableBucket", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys", "aws:ResourceTag/${TagKey}", "s3tables:TableBucketTag/${TagKey}" ], "dependentActions": [] }, "updatetablemetadatalocation": { "name": "UpdateTableMetadataLocation", "description": "Grants permission to update the metadata location of a table", "accessLevel": "Write", "resourceTypes": [ { "name": "Table", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3tables:namespace", "s3tables:tableName" ], "dependentActions": [] } }