@cloud-copilot/iam-data

{ "addartifact": { "name": "AddArtifact", "description": "Grants permission to add an Artifact for the given Agent Space", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchcreatesecurityrequirements": { "name": "BatchCreateSecurityRequirements", "description": "Grants permission to batch create security requirements in a customer managed pack", "accessLevel": "Write", "resourceTypes": [ { "name": "SecurityRequirementPack", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchdeletecodereviews": { "name": "BatchDeleteCodeReviews", "description": "Grants permission to delete multiple code reviews in a single request", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchdeletepentests": { "name": "BatchDeletePentests", "description": "Grants permission to delete multiple penetration tests in a single request", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchdeletesecurityrequirements": { "name": "BatchDeleteSecurityRequirements", "description": "Grants permission to batch delete security requirements from a customer managed pack", "accessLevel": "Write", "resourceTypes": [ { "name": "SecurityRequirementPack", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchdeletethreatmodels": { "name": "BatchDeleteThreatModels", "description": "Grants permission to delete multiple threat models in a single request", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchdeletethreats": { "name": "BatchDeleteThreats", "description": "Grants permission to delete multiple threats", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchgetagentspaces": { "name": "BatchGetAgentSpaces", "description": "Grants permission to retrieve multiple agent spaces in a single request", "accessLevel": "Read", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchgetartifactmetadata": { "name": "BatchGetArtifactMetadata", "description": "Grants permission to retrieve one or more Artifact Metadata records for the given Agent Space", "accessLevel": "Read", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchgetcodereviewjobtasks": { "name": "BatchGetCodeReviewJobTasks", "description": "Grants permission to retrieve multiple code review job tasks in a single request", "accessLevel": "Read", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchgetcodereviewjobs": { "name": "BatchGetCodeReviewJobs", "description": "Grants permission to retrieve multiple code review jobs in a single request", "accessLevel": "Read", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchgetcodereviews": { "name": "BatchGetCodeReviews", "description": "Grants permission to retrieve multiple code reviews in a single request", "accessLevel": "Read", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchgetfindings": { "name": "BatchGetFindings", "description": "Grants permission to retrieve multiple security testing findings in a single request", "accessLevel": "Read", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchgetpentestjobcontentmetadata": { "name": "BatchGetPentestJobContentMetadata", "description": "Grants permission to retrieve multiple pentest job contents metadata in a single request", "accessLevel": "Read", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchgetpentestjobtasks": { "name": "BatchGetPentestJobTasks", "description": "Grants permission to retrieve multiple pentest job tasks in a single request", "accessLevel": "Read", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchgetpentestjobs": { "name": "BatchGetPentestJobs", "description": "Grants permission to retrieve multiple security testing jobs in a single request", "accessLevel": "Read", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchgetpentests": { "name": "BatchGetPentests", "description": "Grants permission to retrieve multiple penetration tests in a single request", "accessLevel": "Read", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchgetsecurityrequirements": { "name": "BatchGetSecurityRequirements", "description": "Grants permission to retrieve multiple security requirements in a single request", "accessLevel": "Read", "resourceTypes": [ { "name": "SecurityRequirementPack", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchgettargetdomains": { "name": "BatchGetTargetDomains", "description": "Grants permission to retrieve multiple target domains in a single request", "accessLevel": "Read", "resourceTypes": [ { "name": "TargetDomain", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchgetthreatmodeljobtasks": { "name": "BatchGetThreatModelJobTasks", "description": "Grants permission to retrieve multiple tasks for a threat model job in a single request", "accessLevel": "Read", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchgetthreatmodeljobs": { "name": "BatchGetThreatModelJobs", "description": "Grants permission to retrieve details for one or more threat model jobs", "accessLevel": "Read", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchgetthreatmodels": { "name": "BatchGetThreatModels", "description": "Grants permission to retrieve multiple threat models in a single request", "accessLevel": "Read", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchgetthreats": { "name": "BatchGetThreats", "description": "Grants permission to retrieve details for one or more threats", "accessLevel": "Read", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchupdatesecurityrequirements": { "name": "BatchUpdateSecurityRequirements", "description": "Grants permission to batch update security requirements within a customer managed pack", "accessLevel": "Write", "resourceTypes": [ { "name": "SecurityRequirementPack", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createagentspace": { "name": "CreateAgentSpace", "description": "Grants permission to create an agent space record", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createapplication": { "name": "CreateApplication", "description": "Grants permission to create a new application", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createcodereview": { "name": "CreateCodeReview", "description": "Grants permission to create a new code review configuration", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createdesignreview": { "name": "CreateDesignReview", "description": "Grants permission to create a design review", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createintegration": { "name": "CreateIntegration", "description": "Grants permission to create a security testing integration", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createmembership": { "name": "CreateMembership", "description": "Grants permission to add a single member to a agent space with specified role", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createonetimeloginsession": { "name": "CreateOneTimeLoginSession", "description": "Grants permission to create a one time login session", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createpentest": { "name": "CreatePentest", "description": "Grants permission to create a new penetration test configuration", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createprivateconnection": { "name": "CreatePrivateConnection", "description": "Grants permission to create a private connection for VPC Lattice integration", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createsecurityrequirement": { "name": "CreateSecurityRequirement", "description": "Grants permission to add a customer managed Security Requirement", "accessLevel": "Write", "resourceTypes": [ { "name": "SecurityRequirementPack", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createsecurityrequirementpack": { "name": "CreateSecurityRequirementPack", "description": "Grants permission to create a customer managed security requirement pack", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createtargetdomain": { "name": "CreateTargetDomain", "description": "Grants permission to create a target domain record", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createthreat": { "name": "CreateThreat", "description": "Grants permission to create a threat in a threat model", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createthreatmodel": { "name": "CreateThreatModel", "description": "Grants permission to create a new threat model configuration", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteagentspace": { "name": "DeleteAgentSpace", "description": "Grants permission to delete an agent space record", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteapplication": { "name": "DeleteApplication", "description": "Grants permission to delete application", "accessLevel": "Write", "resourceTypes": [ { "name": "Application", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteartifact": { "name": "DeleteArtifact", "description": "Grants permission to delete an Artifact", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletedesignreview": { "name": "DeleteDesignReview", "description": "Grants permission to delete a design review", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteintegration": { "name": "DeleteIntegration", "description": "Grants permission to delete the integration of an application", "accessLevel": "Write", "resourceTypes": [ { "name": "Integration", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletemembership": { "name": "DeleteMembership", "description": "Grants permission to remove a single member associated to an agent space", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteprivateconnection": { "name": "DeletePrivateConnection", "description": "Grants permission to delete a private connection", "accessLevel": "Write", "resourceTypes": [ { "name": "PrivateConnection", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletesecurityrequirement": { "name": "DeleteSecurityRequirement", "description": "Grants permission to delete a customer managed Security Requirement", "accessLevel": "Write", "resourceTypes": [ { "name": "SecurityRequirementPack", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletesecurityrequirementpack": { "name": "DeleteSecurityRequirementPack", "description": "Grants permission to delete a customer managed security requirement pack and all its associated security requirements", "accessLevel": "Write", "resourceTypes": [ { "name": "SecurityRequirementPack", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletetargetdomain": { "name": "DeleteTargetDomain", "description": "Grants permission to delete a target domain record", "accessLevel": "Write", "resourceTypes": [ { "name": "TargetDomain", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeprivateconnection": { "name": "DescribePrivateConnection", "description": "Grants permission to describe a private connection", "accessLevel": "Read", "resourceTypes": [ { "name": "PrivateConnection", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getapplication": { "name": "GetApplication", "description": "Grants permission to get application details by application ID", "accessLevel": "Read", "resourceTypes": [ { "name": "Application", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getartifact": { "name": "GetArtifact", "description": "Grants permission to retrieve an Artifact for the given Agent Space", "accessLevel": "Read", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getdesignreview": { "name": "GetDesignReview", "description": "Grants permission to get the status of the associated agent space design review", "accessLevel": "Read", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getdesignreviewartifact": { "name": "GetDesignReviewArtifact", "description": "Grants permission to get design review artifact for a specific document", "accessLevel": "Read", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getdesignreviewfeedback": { "name": "GetDesignReviewFeedback", "description": "Grants permission to get feedback for a design review comment", "accessLevel": "Read", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getintegration": { "name": "GetIntegration", "description": "Grants permission to get the integration metadata by ID", "accessLevel": "Read", "resourceTypes": [ { "name": "Integration", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getproviderregistrationmanifest": { "name": "GetProviderRegistrationManifest", "description": "Grants permission to retrieve the provider registration manifest used for browser-based integration registration", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getsecurityrequirement": { "name": "GetSecurityRequirement", "description": "Grants permission to retrieve a Security Requirement", "accessLevel": "Read", "resourceTypes": [ { "name": "SecurityRequirementPack", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getsecurityrequirementpack": { "name": "GetSecurityRequirementPack", "description": "Grants permission to retrieve a security requirement pack", "accessLevel": "Read", "resourceTypes": [ { "name": "SecurityRequirementPack", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "handleproviderregistrationcallback": { "name": "HandleProviderRegistrationCallback", "description": "Grants permission to handle the provider OAuth registration callback that completes integration setup", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "importsecurityrequirements": { "name": "ImportSecurityRequirements", "description": "Grants permission to import security requirements from uploaded documents for a customer managed security requirement pack", "accessLevel": "Write", "resourceTypes": [ { "name": "SecurityRequirementPack", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "initiateproviderregistration": { "name": "InitiateProviderRegistration", "description": "Grants permission to initiate the registration of Security Agent App for the given provider (eg: GitHub)", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listagentspaces": { "name": "ListAgentSpaces", "description": "Grants permission to list agent spaces", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listapplications": { "name": "ListApplications", "description": "Grants permission to list all applications in the account", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listartifacts": { "name": "ListArtifacts", "description": "Grants permission to list all artifacts for the given agent space", "accessLevel": "List", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listcodereviewjobtasks": { "name": "ListCodeReviewJobTasks", "description": "Grants permission to list tasks associated with a code review job", "accessLevel": "List", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listcodereviewjobsforcodereview": { "name": "ListCodeReviewJobsForCodeReview", "description": "Grants permission to list code review jobs associated with a code review", "accessLevel": "List", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listcodereviews": { "name": "ListCodeReviews", "description": "Grants permission to list code reviews with optional filtering by status", "accessLevel": "List", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listdesignreviewcomments": { "name": "ListDesignReviewComments", "description": "Grants permission to list design review comments", "accessLevel": "List", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listdesignreviews": { "name": "ListDesignReviews", "description": "Grants permission to list all design reviews for the given agent space", "accessLevel": "List", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listdiscoveredendpoints": { "name": "ListDiscoveredEndpoints", "description": "Grants permission to list discovered endpoints associated with a pentest job with optional URI prefix filtering", "accessLevel": "List", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listfindings": { "name": "ListFindings", "description": "Grants permission to list findings with filtering and pagination support", "accessLevel": "List", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listintegratedresources": { "name": "ListIntegratedResources", "description": "Grants permission to list integrated resources for an agent space", "accessLevel": "List", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listintegrations": { "name": "ListIntegrations", "description": "Grants permission to get the integrations owned by the caller's AWS account", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listmemberships": { "name": "ListMemberships", "description": "Grants permission to list all members associated to an agent space with pagination support", "accessLevel": "List", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listpentestjobtasks": { "name": "ListPentestJobTasks", "description": "Grants permission to list pentest job tasks associated with a pentest job", "accessLevel": "List", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listpentestjobsforpentest": { "name": "ListPentestJobsForPentest", "description": "Grants permission to list penetration test jobs associated with a penetration test", "accessLevel": "List", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listpentests": { "name": "ListPentests", "description": "Grants permission to list penetration tests with optional filtering by status", "accessLevel": "List", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listprivateconnections": { "name": "ListPrivateConnections", "description": "Grants permission to list private connections in the account", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listresourcesfromintegration": { "name": "ListResourcesFromIntegration", "description": "Grants permission to list resources from Integration", "accessLevel": "List", "resourceTypes": [ { "name": "Integration", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listsecurityrequirementpacks": { "name": "ListSecurityRequirementPacks", "description": "Grants permission to list all security requirement packs in the account", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listsecurityrequirements": { "name": "ListSecurityRequirements", "description": "Grants permission to list all Security Requirements", "accessLevel": "List", "resourceTypes": [ { "name": "SecurityRequirementPack", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to list the tags for a resource", "accessLevel": "Read", "resourceTypes": [ { "name": "AgentSpace", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Application", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Integration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "PrivateConnection", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "SecurityRequirementPack", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "TargetDomain", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listtargetdomains": { "name": "ListTargetDomains", "description": "Grants permission to list target domains", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listthreatmodeljobtasks": { "name": "ListThreatModelJobTasks", "description": "Grants permission to list tasks associated with a specific threat model job", "accessLevel": "List", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listthreatmodeljobs": { "name": "ListThreatModelJobs", "description": "Grants permission to list threat model jobs for a threat model", "accessLevel": "List", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listthreatmodels": { "name": "ListThreatModels", "description": "Grants permission to list threat models for an agent space", "accessLevel": "List", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listthreats": { "name": "ListThreats", "description": "Grants permission to list threats for a threat model job with filtering and pagination support", "accessLevel": "List", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putdesignreviewfeedback": { "name": "PutDesignReviewFeedback", "description": "Grants permission to submit feedback for a design review comment", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "startcoderemediation": { "name": "StartCodeRemediation", "description": "Grants permission to start code remediation for the findings", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "startcodereviewjob": { "name": "StartCodeReviewJob", "description": "Grants permission to initiate the execution of a code review", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "startpentestjob": { "name": "StartPentestJob", "description": "Grants permission to initiate the execution of a penetration test", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "startthreatmodeljob": { "name": "StartThreatModelJob", "description": "Grants permission to initiate the execution of a threat model job", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "stopcodereviewjob": { "name": "StopCodeReviewJob", "description": "Grants permission to stop the execution of a running code review", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "stoppentestjob": { "name": "StopPentestJob", "description": "Grants permission to stop the execution of a running penetration test", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "stopthreatmodeljob": { "name": "StopThreatModelJob", "description": "Grants permission to stop a running threat model job", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to add tags to a resource", "accessLevel": "Tagging, Write", "resourceTypes": [ { "name": "AgentSpace", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Application", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Integration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "PrivateConnection", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "SecurityRequirementPack", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "TargetDomain", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "togglemanagedsecurityrequirement": { "name": "ToggleManagedSecurityRequirement", "description": "Grants permission to toggle the status of a managed Security Requirement", "accessLevel": "Write", "resourceTypes": [ { "name": "SecurityRequirementPack", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to remove tags from a resource", "accessLevel": "Tagging, Write", "resourceTypes": [ { "name": "AgentSpace", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Application", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Integration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "PrivateConnection", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "SecurityRequirementPack", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "TargetDomain", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] }, "updateagentspace": { "name": "UpdateAgentSpace", "description": "Grants permission to update an agent space record", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateapplication": { "name": "UpdateApplication", "description": "Grants permission to update application configuration", "accessLevel": "Write", "resourceTypes": [ { "name": "Application", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatecodereview": { "name": "UpdateCodeReview", "description": "Grants permission to update an existing code review with new configuration or settings", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatefinding": { "name": "UpdateFinding", "description": "Grants permission to update an existing security finding with new details or status", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateintegratedresources": { "name": "UpdateIntegratedResources", "description": "Grants permission to update integrated resources for an agent space", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatepentest": { "name": "UpdatePentest", "description": "Grants permission to update an existing penetration test with new configuration or settings", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateprivateconnectioncertificate": { "name": "UpdatePrivateConnectionCertificate", "description": "Grants permission to update the certificate associated with a private connection", "accessLevel": "Write", "resourceTypes": [ { "name": "PrivateConnection", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatesecurityrequirement": { "name": "UpdateSecurityRequirement", "description": "Grants permission to update a customer managed Security Requirement", "accessLevel": "Write", "resourceTypes": [ { "name": "SecurityRequirementPack", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatesecurityrequirementpack": { "name": "UpdateSecurityRequirementPack", "description": "Grants permission to update a security requirement pack", "accessLevel": "Write", "resourceTypes": [ { "name": "SecurityRequirementPack", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatetargetdomain": { "name": "UpdateTargetDomain", "description": "Grants permission to update a target domain record", "accessLevel": "Write", "resourceTypes": [ { "name": "TargetDomain", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatethreat": { "name": "UpdateThreat", "description": "Grants permission to update a threat", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatethreatmodel": { "name": "UpdateThreatModel", "description": "Grants permission to update an existing threat model with new configuration", "accessLevel": "Write", "resourceTypes": [ { "name": "AgentSpace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "verifytargetdomain": { "name": "VerifyTargetDomain", "description": "Grants permission to verify ownership for a registered target domain", "accessLevel": "Write", "resourceTypes": [ { "name": "TargetDomain", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] } }