@cloud-copilot/iam-data
Version:
1,870 lines • 130 kB
JSON
{
"accountconfigurations": {
"name": "AccountConfigurations",
"description": "Grants permission to enable setting default access to AWS resources",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"allowvendedlogdeliveryforresource": {
"name": "AllowVendedLogDeliveryForResource",
"description": "Grants permission to configure log delivery for QuickSuite instance",
"accessLevel": "Permissions management, Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"batchgetpreferences": {
"name": "BatchGetPreferences",
"description": "Grants permission to get user preferences",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"batchupdatepreferences": {
"name": "BatchUpdatePreferences",
"description": "Grants permission to update user preferences",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"createadmin": {
"name": "CreateAdmin",
"description": "Grants permission to provision Amazon QuickSight administrators, authors, and readers",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "user",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createemailcustomizationtemplate": {
"name": "CreateEmailCustomizationTemplate",
"description": "Grants permission to create a QuickSight email customization template",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "emailCustomizationTemplate",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createextensionaccess": {
"name": "CreateExtensionAccess",
"description": "Grants permission to create an extension access",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "extensionaccess",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createreader": {
"name": "CreateReader",
"description": "Grants permission to provision Amazon QuickSight readers",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "user",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createuser": {
"name": "CreateUser",
"description": "Grants permission to provision Amazon QuickSight authors and readers",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "user",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteemailcustomizationtemplate": {
"name": "DeleteEmailCustomizationTemplate",
"description": "Grants permission to delete a QuickSight email customization template",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "emailCustomizationTemplate",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteextensionaccess": {
"name": "DeleteExtensionAccess",
"description": "Grants permission to delete an extension access",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "extensionaccess",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describechatconfiguration": {
"name": "DescribeChatConfiguration",
"description": "Grants permission to describe chat configuration",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"describeemailcustomizationtemplate": {
"name": "DescribeEmailCustomizationTemplate",
"description": "Grants permission to describe a QuickSight email customization template",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "emailCustomizationTemplate",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeextensionaccess": {
"name": "DescribeExtensionAccess",
"description": "Grants permission to describe an extension access",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "extensionaccess",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describequickindexcapacity": {
"name": "DescribeQuickIndexCapacity",
"description": "Grants permission to describe index capacity",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"getanonymoususerembedurl": {
"name": "GetAnonymousUserEmbedUrl",
"description": "Grants permission to get a URL used to embed a QuickSight Dashboard for a user not registered with QuickSight",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"getauthcode": {
"name": "GetAuthCode",
"description": "Grants permission to get an auth code representing a QuickSight user",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "user",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getcustompermissionssummary": {
"name": "GetCustomPermissionsSummary",
"description": "Grants permission to get information about the custom permissions in an account",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"getgroupmapping": {
"name": "GetGroupMapping",
"description": "Grants permission to use Amazon QuickSight, in Enterprise edition, to identify and display the Microsoft Active Directory (Microsoft Active Directory) directory groups that are mapped to roles in Amazon QuickSight",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listcustomermanagedkeys": {
"name": "ListCustomerManagedKeys",
"description": "Grants permission to list all registered customer managed keys",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listextensionaccesses": {
"name": "ListExtensionAccesses",
"description": "Grants permission to list extension accesses",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listkmskeysforuser": {
"name": "ListKMSKeysForUser",
"description": "Grants permission to list a user's KMS keys",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listusersindexcapacity": {
"name": "ListUsersIndexCapacity",
"description": "Grants permission to list users index capacity",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"passdataset": {
"name": "PassDataSet",
"description": "Grants permission to use a dataset for a template",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "dataset",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"passdatasource": {
"name": "PassDataSource",
"description": "Grants permission to use a data source for a data set",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "datasource",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"passtopic": {
"name": "PassTopic",
"description": "Grants permission to use a topic for a template",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "topic",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"quicksuiteusagemetrics": {
"name": "QuickSuiteUsageMetrics",
"description": "Grants permission to get QuickSuite usage metrics",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"registercustomermanagedkey": {
"name": "RegisterCustomerManagedKey",
"description": "Grants permission to register a customer managed key",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"removecustomermanagedkey": {
"name": "RemoveCustomerManagedKey",
"description": "Grants permission to remove a customer managed key",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"scopedownpolicy": {
"name": "ScopeDownPolicy",
"description": "Grants permission to manage scoping policies for permissions to AWS resources",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"searchdirectorygroups": {
"name": "SearchDirectoryGroups",
"description": "Grants permission to use Amazon QuickSight, in Enterprise edition, to display your Microsoft Active Directory directory groups so that you can choose which ones to map to roles in Amazon QuickSight",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"searchusers": {
"name": "SearchUsers",
"description": "Grants permission to search the QuickSight users belonging to this account",
"accessLevel": "List",
"resourceTypes": [
{
"name": "user",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"setgroupmapping": {
"name": "SetGroupMapping",
"description": "Grants permission to use Amazon QuickSight, in Enterprise edition, to display your Microsoft Active Directory directory groups so that you can choose which ones to map to roles in Amazon QuickSight",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"subscribe": {
"name": "Subscribe",
"description": "Grants permission to subscribe to Amazon QuickSight, and also to allow the user to upgrade the subscription to Enterprise edition",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"quicksight:DirectoryType",
"quicksight:Edition"
],
"dependentActions": []
},
"unpublishflow": {
"name": "UnpublishFlow",
"description": "Grants permission to unpublish a flow",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "flow",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"unsubscribe": {
"name": "Unsubscribe",
"description": "Grants permission to unsubscribe from Amazon QuickSight, which permanently deletes all users and their resources from Amazon QuickSight",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"updatechatconfiguration": {
"name": "UpdateChatConfiguration",
"description": "Grants permission to update chat configuration",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"updateemailcustomizationtemplate": {
"name": "UpdateEmailCustomizationTemplate",
"description": "Grants permission to update a QuickSight email customization template",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "emailCustomizationTemplate",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updateextensionaccess": {
"name": "UpdateExtensionAccess",
"description": "Grants permission to update an extension access",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "extensionaccess",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updatequickindexcapacity": {
"name": "UpdateQuickIndexCapacity",
"description": "Grants permission to update index capacity",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"updateresourcepermissions": {
"name": "UpdateResourcePermissions",
"description": "Grants permission to update resource-level permissions in QuickSight",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"batchassignlimitsprofile": {
"name": "BatchAssignLimitsProfile",
"description": "Grants permission to assign a limits profile to targets",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "limitsProfile",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"batchcreatetopicreviewedanswer": {
"name": "BatchCreateTopicReviewedAnswer",
"description": "Grants permission to create reviewed answers for a topic",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "topic",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"batchdeleteknowledgebase": {
"name": "BatchDeleteKnowledgeBase",
"description": "Grants permission to delete one or more knowledge bases",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "knowledgeBase",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"batchdeletetopicreviewedanswer": {
"name": "BatchDeleteTopicReviewedAnswer",
"description": "Grants permission to delete reviewed answers for a topic",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "topic",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"batchunassignlimitsprofile": {
"name": "BatchUnassignLimitsProfile",
"description": "Grants permission to unassign a limits profile from targets",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "limitsProfile",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"cancelingestion": {
"name": "CancelIngestion",
"description": "Grants permission to cancel a SPICE ingestions on a dataset",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "ingestion",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createaccountcustomization": {
"name": "CreateAccountCustomization",
"description": "Grants permission to create an account customization for QuickSight account or namespace",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createaccountsubscription": {
"name": "CreateAccountSubscription",
"description": "Grants permission to subscribe to QuickSight",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"quicksight:DirectoryType",
"quicksight:Edition"
],
"dependentActions": []
},
"createactionconnector": {
"name": "CreateActionConnector",
"description": "Grants permission to create an action connector",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "actionconnector",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createagent": {
"name": "CreateAgent",
"description": "Grants permission to create an agent",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "agent",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createanalysis": {
"name": "CreateAnalysis",
"description": "Grants permission to create an analysis from a template",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "analysis",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createbrand": {
"name": "CreateBrand",
"description": "Grants permission to create an Amazon QuickSight brand",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "brand",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createcustompermissions": {
"name": "CreateCustomPermissions",
"description": "Grants permission to create a QuickSight custom permissions resource",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "custompermissions",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createdashboard": {
"name": "CreateDashboard",
"description": "Grants permission to create a QuickSight Dashboard",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "dashboard",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createdataset": {
"name": "CreateDataSet",
"description": "Grants permission to create a dataset",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "datasource",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createdatasource": {
"name": "CreateDataSource",
"description": "Grants permission to create a data source",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createflow": {
"name": "CreateFlow",
"description": "Grants permission to create a flow",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "flow",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createfolder": {
"name": "CreateFolder",
"description": "Grants permission to create a QuickSight folder",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "folder",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createfoldermembership": {
"name": "CreateFolderMembership",
"description": "Grants permission to add a QuickSight Dashboard, Analysis or Dataset to a QuickSight Folder",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "analysis",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "dashboard",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "dataset",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "folder",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"creategroup": {
"name": "CreateGroup",
"description": "Grants permission to create a QuickSight group",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "group",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"creategroupmembership": {
"name": "CreateGroupMembership",
"description": "Grants permission to add a QuickSight user to a QuickSight group",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "group",
"required": true,
"conditionKeys": [
"quicksight:UserName"
],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createiampolicyassignment": {
"name": "CreateIAMPolicyAssignment",
"description": "Grants permission to create an assignment with one specified IAM Policy ARN that will be assigned to specified groups or users of QuickSight",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "assignment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createingestion": {
"name": "CreateIngestion",
"description": "Grants permission to start a SPICE ingestion on a dataset",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "ingestion",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createknowledgebase": {
"name": "CreateKnowledgeBase",
"description": "Grants permission to create a knowledge base",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "datasource",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "knowledgeBase",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createlimitsprofile": {
"name": "CreateLimitsProfile",
"description": "Grants permission to create a limits profile",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "limitsProfile",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createnamespace": {
"name": "CreateNamespace",
"description": "Grants permission to create an QuickSight namespace",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "namespace",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createoauthclientapplication": {
"name": "CreateOAuthClientApplication",
"description": "Grants permission to create an OAuth client application",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createrefreshschedule": {
"name": "CreateRefreshSchedule",
"description": "Grants permission to create a refresh schedule for a dataset",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "refreshschedule",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createrolemembership": {
"name": "CreateRoleMembership",
"description": "Grants permission to add a group member to a role",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"quicksight:Group"
],
"dependentActions": []
},
"createspace": {
"name": "CreateSpace",
"description": "Grants permission to create a space",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "space",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createtemplate": {
"name": "CreateTemplate",
"description": "Grants permission to create a template",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "template",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createtemplatealias": {
"name": "CreateTemplateAlias",
"description": "Grants permission to create a template alias",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "template",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createtheme": {
"name": "CreateTheme",
"description": "Grants permission to create a theme",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "theme",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createthemealias": {
"name": "CreateThemeAlias",
"description": "Grants permission to create an alias for a theme version",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "theme",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createtopic": {
"name": "CreateTopic",
"description": "Grants permission to create a topic",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "dataset",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createtopicrefreshschedule": {
"name": "CreateTopicRefreshSchedule",
"description": "Grants permission to create a refresh schedule for a topic",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "topic",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createvpcconnection": {
"name": "CreateVPCConnection",
"description": "Grants permission to create a vpc connection",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"deleteaccountcustompermission": {
"name": "DeleteAccountCustomPermission",
"description": "Grants permission to remove the custom permission associated with an account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deleteaccountcustomization": {
"name": "DeleteAccountCustomization",
"description": "Grants permission to delete an account customization for QuickSight account or namespace",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "customization",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteaccountsubscription": {
"name": "DeleteAccountSubscription",
"description": "Grants permission to delete a QuickSight account",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "account",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteactionconnector": {
"name": "DeleteActionConnector",
"description": "Grants permission to delete an action connector",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "actionconnector",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteagent": {
"name": "DeleteAgent",
"description": "Grants permission to delete an agent",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "agent",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteanalysis": {
"name": "DeleteAnalysis",
"description": "Grants permission to delete an analysis",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "analysis",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteapp": {
"name": "DeleteApp",
"description": "Grants permission to delete a QuickSight app",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "app",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletebrand": {
"name": "DeleteBrand",
"description": "Grants permission to delete an Amazon QuickSight brand",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "brand",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletebrandassignment": {
"name": "DeleteBrandAssignment",
"description": "Grants permission to delete a brand assignment",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deletecustompermissions": {
"name": "DeleteCustomPermissions",
"description": "Grants permission to delete a QuickSight custom permissions resource",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deletedashboard": {
"name": "DeleteDashboard",
"description": "Grants permission to delete a QuickSight Dashboard",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "dashboard",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletedataset": {
"name": "DeleteDataSet",
"description": "Grants permission to delete a dataset",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "dataset",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"deletedatasetrefreshproperties": {
"name": "DeleteDataSetRefreshProperties",
"description": "Grants permission to delete dataset refresh properties for a dataset",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "dataset",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletedatasource": {
"name": "DeleteDataSource",
"description": "Grants permission to delete a data source",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "datasource",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"deletedefaultqbusinessapplication": {
"name": "DeleteDefaultQBusinessApplication",
"description": "Grants permission to delete linked QBusiness application for QuickSight account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deleteflow": {
"name": "DeleteFlow",
"description": "Grants permission to delete a flow",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "flow",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletefolder": {
"name": "DeleteFolder",
"description": "Grants permission to delete a QuickSight Folder",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "folder",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletefoldermembership": {
"name": "DeleteFolderMembership",
"description": "Grants permission to remove a QuickSight Dashboard, Analysis or Dataset from a QuickSight Folder",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "analysis",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "dashboard",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "dataset",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "folder",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletegroup": {
"name": "DeleteGroup",
"description": "Grants permission to remove a user group from QuickSight",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "group",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletegroupmembership": {
"name": "DeleteGroupMembership",
"description": "Grants permission to remove a user from a group so that he/she is no longer a member of the group",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "group",
"required": true,
"conditionKeys": [
"quicksight:UserName"
],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteiampolicyassignment": {
"name": "DeleteIAMPolicyAssignment",
"description": "Grants permission to update an existing assignment",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "assignment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteidentitypropagationconfig": {
"name": "DeleteIdentityPropagationConfig",
"description": "Grants permission to remove AWS services for trusted identity propagation in QuickSight",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deleteknowledgebase": {
"name": "DeleteKnowledgeBase",
"description": "Grants permission to delete a knowledge base",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "knowledgeBase",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletelimitsprofile": {
"name": "DeleteLimitsProfile",
"description": "Grants permission to delete a limits profile",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "limitsProfile",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletenamespace": {
"name": "DeleteNamespace",
"description": "Grants permission to delete a QuickSight namespace",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "namespace",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteoauthclientapplication": {
"name": "DeleteOAuthClientApplication",
"description": "Grants permission to delete an OAuth client application",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "oauthClientApplication",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"deleterefreshschedule": {
"name": "DeleteRefreshSchedule",
"description": "Grants permission to delete a refresh schedule for a dataset",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "refreshschedule",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleterolecustompermission": {
"name": "DeleteRoleCustomPermission",
"description": "Grants permission to remove the custom permission associated with a role",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deleterolemembership": {
"name": "DeleteRoleMembership",
"description": "Grants permission to remove a group member from a role",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"quicksight:Group"
],
"dependentActions": []
},
"deletespace": {
"name": "DeleteSpace",
"description": "Grants permission to delete a space",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "space",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletetemplate": {
"name": "DeleteTemplate",
"description": "Grants permission to delete a template",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "template",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletetemplatealias": {
"name": "DeleteTemplateAlias",
"description": "Grants permission to delete a template alias",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "template",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletetheme": {
"name": "DeleteTheme",
"description": "Grants permission to delete a theme",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "theme",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletethemealias": {
"name": "DeleteThemeAlias",
"description": "Grants permission to delete the alias of a theme",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "theme",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletetopic": {
"name": "DeleteTopic",
"description": "Grants permission to delete a topic",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "topic",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"deletetopicrefreshschedule": {
"name": "DeleteTopicRefreshSchedule",
"description": "Grants permission to delete a refresh schedule for a topic",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "topic",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteuser": {
"name": "DeleteUser",
"description": "Grants permission to delete a QuickSight user, given the user name",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "user",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteuserbyprincipalid": {
"name": "DeleteUserByPrincipalId",
"description": "Grants permission to delete a user identified by its principal ID",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "user",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteusercustompermission": {
"name": "DeleteUserCustomPermission",
"description": "Grants permission to remove the custom permission associated with a user",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "user",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletevpcconnection": {
"name": "DeleteVPCConnection",
"description": "Grants permission to delete a vpc connection",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "vpcconnection",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"describeaccountcustompermission": {
"name": "DescribeAccountCustomPermission",
"description": "Grants permission to describe the custom permission associated with an account",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"describeaccountcustomization": {
"name": "DescribeAccountCustomization",
"description": "Grants permission to describe an account customization for QuickSight account or namespace",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "customization",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeaccountsettings": {
"name": "DescribeAccountSettings",
"description": "Grants permission to describe the administrative account settings for QuickSight account",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"describeaccountsubscription": {
"name": "DescribeAccountSubscription",
"description": "Grants permission to describe a QuickSight account",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "account",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeactionconnector": {
"name": "DescribeActionConnector",
"description": "Grants permission to describe an action connector",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "actionconnector",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeactionconnectorpermissions": {
"name": "DescribeActionConnectorPermissions",
"description": "Grants permission to describe permissions for an action connector",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "actionconnector",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeagent": {
"name": "DescribeAgent",
"description": "Grants permission to describe an agent",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "agent",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeagentpermissions": {
"name": "DescribeAgentPermissions",
"description": "Grants permission to describe agent's permissions",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "agent",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeanalysis": {
"name": "DescribeAnalysis",
"description": "Grants permission to describe an analysis",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "analysis",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeanalysispermissions": {
"name": "DescribeAnalysisPermissions",
"description": "Grants permission to describe permissions for an analysis",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "analysis",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeapp": {
"name": "DescribeApp",
"description": "Grants permission to describe a QuickSight app",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "app",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeapppermissions": {
"name": "DescribeAppPermissions",
"description": "Grants permission to describe permissions for a QuickSight app",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "app",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeassetbundleexportjob": {
"name": "DescribeAssetBundleExportJob",
"description": "Grants permission to describe an asset bundle export job",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "assetBundleExportJob",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeassetbundleimportjob": {
"name": "DescribeAssetBundleImportJob",
"description": "Grants permission to describe an asset bundle import job",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "assetBundleImportJob",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeautomationgroup": {
"name": "DescribeAutomationGroup",
"description": "Grants permission to describe an automation group",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "automationGroup",
"required": true,
"conditionKeys": [],
"dependentActions": []