UNPKG

@cloud-copilot/iam-data

Version:
485 lines 13.6 kB
{ "createinvestigation": { "name": "CreateInvestigation", "description": "Grants permission to create a new investigation in the specified investigation group", "accessLevel": "Write", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createinvestigationevent": { "name": "CreateInvestigationEvent", "description": "Grants permission to create a new investigation event in the specified investigation group", "accessLevel": "Write", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createinvestigationgroup": { "name": "CreateInvestigationGroup", "description": "Grants permission to create a new investigation group", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createinvestigationresource": { "name": "CreateInvestigationResource", "description": "Grants permission to create an investigation resource in the specified investigation group", "accessLevel": "Write", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createreport": { "name": "CreateReport", "description": "Grants permission to create a new report in the specified investigation", "accessLevel": "Write", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteinvestigation": { "name": "DeleteInvestigation", "description": "Grants permission to delete an investigation in the specified investigation group", "accessLevel": "Write", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteinvestigationgroup": { "name": "DeleteInvestigationGroup", "description": "Grants permission to delete the specified investigation group", "accessLevel": "Write", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteinvestigationgrouppolicy": { "name": "DeleteInvestigationGroupPolicy", "description": "Grants permission to delete the investigation group policy attached to an investigation group", "accessLevel": "Write", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "generatereport": { "name": "GenerateReport", "description": "Grants permission to generate a report in the specified investigation report", "accessLevel": "Write", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getephemeralinvestigationresults": { "name": "GetEphemeralInvestigationResults", "description": "Grants permission to run and retrieve ephemeral investigation results", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getfact": { "name": "GetFact", "description": "Grants permission to retrieve a fact in the specified investigation report", "accessLevel": "Read", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getfactversions": { "name": "GetFactVersions", "description": "Grants permission to retrieve all versions of a fact token in the specified investigation report", "accessLevel": "Read", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getinvestigation": { "name": "GetInvestigation", "description": "Grants permission to retrieve an investigation in the specified investigation group", "accessLevel": "Read", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getinvestigationevent": { "name": "GetInvestigationEvent", "description": "Grants permission to retrieve an investigation event in the specified investigation group", "accessLevel": "Read", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getinvestigationgroup": { "name": "GetInvestigationGroup", "description": "Grants permission to retrieve the specified investigation group", "accessLevel": "Read", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getinvestigationgrouppolicy": { "name": "GetInvestigationGroupPolicy", "description": "Grants permission to retrieve the investigation group policy attached to an investigation group", "accessLevel": "Read", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getinvestigationresource": { "name": "GetInvestigationResource", "description": "Grants permission to retrieve an investigation resource in the specified investigation group", "accessLevel": "Read", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getreport": { "name": "GetReport", "description": "Grants permission to retrieve a report in the specified investigation", "accessLevel": "Read", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listfacts": { "name": "ListFacts", "description": "Grants permission to list all facts in the specified investigation report", "accessLevel": "List", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listinvestigationevents": { "name": "ListInvestigationEvents", "description": "Grants permission to list all investigation events in the specified investigation group", "accessLevel": "List", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listinvestigationgroups": { "name": "ListInvestigationGroups", "description": "Grants permission to list all investigation groups in the AWS account making the request", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listinvestigations": { "name": "ListInvestigations", "description": "Grants permission to list all investigations that are in the specified investigation group", "accessLevel": "List", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listreports": { "name": "ListReports", "description": "Grants permission to list all reports in the specified investigation", "accessLevel": "List", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to list the tags for the specified resource", "accessLevel": "List", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putfact": { "name": "PutFact", "description": "Grants permission to create or update a new fact in the specified investigation report", "accessLevel": "Write", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putinvestigationgrouppolicy": { "name": "PutInvestigationGroupPolicy", "description": "Grants permission to create/update the investigation group policy attached to an investigation group", "accessLevel": "Write", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to add or update the specified tags for the specified resource", "accessLevel": "Tagging, Write", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to remove the specified tags from the specified resource", "accessLevel": "Tagging, Write", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] }, "updateinvestigation": { "name": "UpdateInvestigation", "description": "Grants permission to update an investigation in the specified investigation group", "accessLevel": "Write", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateinvestigationevent": { "name": "UpdateInvestigationEvent", "description": "Grants permission to update an investigation event in the specified investigation group", "accessLevel": "Write", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateinvestigationgroup": { "name": "UpdateInvestigationGroup", "description": "Grants permission to update the specified investigation group", "accessLevel": "Write", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatereport": { "name": "UpdateReport", "description": "Grants permission to update a report in the specified investigation", "accessLevel": "Write", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "validateinvestigationgroup": { "name": "ValidateInvestigationGroup", "description": "Grants permission to validate the specified investigation group", "accessLevel": "Read", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] } }