@cloud-copilot/iam-data

{ "batchgetincidentfindings": { "name": "BatchGetIncidentFindings", "description": "Grants permission to retrieve details about specified findings for an incident record", "accessLevel": "Read", "resourceTypes": [ { "name": "incident-record", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "response-plan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createreplicationset": { "name": "CreateReplicationSet", "description": "Grants permission to create a replication set", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [ "iam:CreateServiceLinkedRole", "ssm-incidents:TagResource" ] }, "createresponseplan": { "name": "CreateResponsePlan", "description": "Grants permission to create a response plan", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [ "iam:PassRole", "ssm-incidents:TagResource" ] }, "createtimelineevent": { "name": "CreateTimelineEvent", "description": "Grants permission to create a timeline event for an incident record", "accessLevel": "Write", "resourceTypes": [ { "name": "incident-record", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "response-plan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteincidentrecord": { "name": "DeleteIncidentRecord", "description": "Grants permission to delete an incident record", "accessLevel": "Write", "resourceTypes": [ { "name": "incident-record", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletereplicationset": { "name": "DeleteReplicationSet", "description": "Grants permission to delete a replication set", "accessLevel": "Write", "resourceTypes": [ { "name": "replication-set", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteresourcepolicy": { "name": "DeleteResourcePolicy", "description": "Grants permission to delete resource policy from a response plan", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "response-plan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteresponseplan": { "name": "DeleteResponsePlan", "description": "Grants permission to delete a response plan", "accessLevel": "Write", "resourceTypes": [ { "name": "response-plan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletetimelineevent": { "name": "DeleteTimelineEvent", "description": "Grants permission to delete a timeline event", "accessLevel": "Write", "resourceTypes": [ { "name": "incident-record", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getincidentrecord": { "name": "GetIncidentRecord", "description": "Grants permission to view the contents of an incident record", "accessLevel": "Read", "resourceTypes": [ { "name": "incident-record", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "response-plan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getreplicationset": { "name": "GetReplicationSet", "description": "Grants permission to view the replication set", "accessLevel": "Read", "resourceTypes": [ { "name": "replication-set", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getresourcepolicies": { "name": "GetResourcePolicies", "description": "Grants permission to view resource policies of a response plan", "accessLevel": "Read", "resourceTypes": [ { "name": "response-plan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getresponseplan": { "name": "GetResponsePlan", "description": "Grants permission to view the contents of a specified response plan", "accessLevel": "Read", "resourceTypes": [ { "name": "response-plan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "gettimelineevent": { "name": "GetTimelineEvent", "description": "Grants permission to view a timeline event", "accessLevel": "Read", "resourceTypes": [ { "name": "incident-record", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "response-plan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listincidentfindings": { "name": "ListIncidentFindings", "description": "Grants permission to list findings for an incident record", "accessLevel": "List", "resourceTypes": [ { "name": "incident-record", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "response-plan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listincidentrecords": { "name": "ListIncidentRecords", "description": "Grants permission to list the contents of all incident records", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listrelateditems": { "name": "ListRelatedItems", "description": "Grants permission to list related items of an incident record", "accessLevel": "List", "resourceTypes": [ { "name": "incident-record", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "response-plan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listreplicationsets": { "name": "ListReplicationSets", "description": "Grants permission to list all replication sets", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listresponseplans": { "name": "ListResponsePlans", "description": "Grants permission to list all response plans", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to view a list of resource tags for a specified resource", "accessLevel": "Read", "resourceTypes": [ { "name": "incident-record", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "replication-set", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "response-plan", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listtimelineevents": { "name": "ListTimelineEvents", "description": "Grants permission to list all timeline events for an incident record", "accessLevel": "List", "resourceTypes": [ { "name": "incident-record", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "response-plan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putresourcepolicy": { "name": "PutResourcePolicy", "description": "Grants permission to put resource policy on a response plan", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "response-plan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "startincident": { "name": "StartIncident", "description": "Grants permission to start a new incident using a response plan", "accessLevel": "Write", "resourceTypes": [ { "name": "response-plan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to add tags to a response plan", "accessLevel": "Tagging", "resourceTypes": [ { "name": "incident-record", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "replication-set", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "response-plan", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to remove tags from a response plan", "accessLevel": "Tagging", "resourceTypes": [ { "name": "incident-record", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "replication-set", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "response-plan", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] }, "updatedeletionprotection": { "name": "UpdateDeletionProtection", "description": "Grants permission to update replication set deletion protection", "accessLevel": "Write", "resourceTypes": [ { "name": "replication-set", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateincidentrecord": { "name": "UpdateIncidentRecord", "description": "Grants permission to update the contents of an incident record", "accessLevel": "Write", "resourceTypes": [ { "name": "incident-record", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "response-plan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updaterelateditems": { "name": "UpdateRelatedItems", "description": "Grants permission to update related items of an incident record", "accessLevel": "Write", "resourceTypes": [ { "name": "incident-record", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "response-plan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatereplicationset": { "name": "UpdateReplicationSet", "description": "Grants permission to update a replication set", "accessLevel": "Write", "resourceTypes": [ { "name": "replication-set", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateresponseplan": { "name": "UpdateResponsePlan", "description": "Grants permission to update the contents of a response plan", "accessLevel": "Write", "resourceTypes": [ { "name": "response-plan", "required": true, "conditionKeys": [], "dependentActions": [ "iam:PassRole", "ssm-incidents:TagResource" ] } ], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [] }, "updatetimelineevent": { "name": "UpdateTimelineEvent", "description": "Grants permission to update a timeline event", "accessLevel": "Write", "resourceTypes": [ { "name": "incident-record", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "response-plan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] } }