@cloud-copilot/iam-data
Version:
280 lines • 7.24 kB
JSON
{
"copybackuptoregion": {
"name": "CopyBackupToRegion",
"description": "Grants permission to create a copy of a backup in the specified region",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "backup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createcluster": {
"name": "CreateCluster",
"description": "Grants permission to create a new AWS CloudHSM cluster",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "backup",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createhsm": {
"name": "CreateHsm",
"description": "Grants permission to create a new hardware security module (HSM) in the specified AWS CloudHSM cluster",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "cluster",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletebackup": {
"name": "DeleteBackup",
"description": "Grants permission to delete the specified CloudHSM backup",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "backup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletecluster": {
"name": "DeleteCluster",
"description": "Grants permission to delete the specified AWS CloudHSM cluster",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "cluster",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletehsm": {
"name": "DeleteHsm",
"description": "Grants permission to delete the specified HSM",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deleteresourcepolicy": {
"name": "DeleteResourcePolicy",
"description": "Grants permission to delete the policy attached to CloudHSM resources",
"accessLevel": "Permissions management, Write",
"resourceTypes": [
{
"name": "backup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describebackups": {
"name": "DescribeBackups",
"description": "Grants permission to get information about backups of AWS CloudHSM clusters",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"describeclusters": {
"name": "DescribeClusters",
"description": "Grants permission to get information about AWS CloudHSM clusters",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"getresourcepolicy": {
"name": "GetResourcePolicy",
"description": "Grants permission to get information about the policy attached to a AWS CloudHSM resource",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "backup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"initializecluster": {
"name": "InitializeCluster",
"description": "Grants permission to claim an AWS CloudHSM cluster",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "cluster",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listtags": {
"name": "ListTags",
"description": "Grants permission to get a list of tags for the specified AWS CloudHSM cluster",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "backup",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "cluster",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"modifybackupattributes": {
"name": "ModifyBackupAttributes",
"description": "Grants permission to modify attributes for an AWS CloudHSM backup",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "backup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"modifycluster": {
"name": "ModifyCluster",
"description": "Grants permission to modify AWS CloudHSM cluster",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "cluster",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"putresourcepolicy": {
"name": "PutResourcePolicy",
"description": "Grants permission to attach a policy to an AWS CloudHSM resource",
"accessLevel": "Permissions management, Write",
"resourceTypes": [
{
"name": "backup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"restorebackup": {
"name": "RestoreBackup",
"description": "Grants permission to restore the specified CloudHSM backup",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "backup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"tagresource": {
"name": "TagResource",
"description": "Grants permission to add or overwrite one or more tags for the specified AWS CloudHSM cluster",
"accessLevel": "Tagging, Write",
"resourceTypes": [
{
"name": "backup",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "cluster",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"untagresource": {
"name": "UntagResource",
"description": "Grants permission to remove the specified tag or tags from the specified AWS CloudHSM cluster",
"accessLevel": "Tagging, Write",
"resourceTypes": [
{
"name": "backup",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "cluster",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys"
],
"dependentActions": []
}
}