UNPKG

@cloud-copilot/iam-data

Version:
1,579 lines 40.8 kB
{ "configureintegration": { "name": "ConfigureIntegration", "description": "Grants permission to configure the integration", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "associatelenses": { "name": "AssociateLenses", "description": "Grants permission to associate a lens to the specified workload", "accessLevel": "Write", "resourceTypes": [ { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "associateprofiles": { "name": "AssociateProfiles", "description": "Grants permission to associate a profile to the specified workload", "accessLevel": "Write", "resourceTypes": [ { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "createagentcontext": { "name": "CreateAgentContext", "description": "Grants permission to create a context associated with a profile", "accessLevel": "Write", "resourceTypes": [ { "name": "agent-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "createagentgoal": { "name": "CreateAgentGoal", "description": "Grants permission to create a goal associated with a profile", "accessLevel": "Write", "resourceTypes": [ { "name": "agent-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "createagentprofile": { "name": "CreateAgentProfile", "description": "Grants permission to create an agent profile", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createlensshare": { "name": "CreateLensShare", "description": "Grants permission to an owner of a lens to share with other AWS accounts and IAM users", "accessLevel": "Write", "resourceTypes": [ { "name": "lens", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "createlensversion": { "name": "CreateLensVersion", "description": "Grants permission to create a new lens version", "accessLevel": "Write", "resourceTypes": [ { "name": "lens", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "createmilestone": { "name": "CreateMilestone", "description": "Grants permission to create a new milestone for the specified workload", "accessLevel": "Write", "resourceTypes": [ { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "createprofile": { "name": "CreateProfile", "description": "Grants permission to create a new profile", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createprofileshare": { "name": "CreateProfileShare", "description": "Grants permission to an owner of a profile to share with other AWS accounts and IAM users", "accessLevel": "Write", "resourceTypes": [ { "name": "profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "createreviewtemplate": { "name": "CreateReviewTemplate", "description": "Grants permission to create a new review template", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createtemplateshare": { "name": "CreateTemplateShare", "description": "Grants permission to an owner of a review template to share with other AWS accounts and IAM users", "accessLevel": "Write", "resourceTypes": [ { "name": "review-template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "createworkload": { "name": "CreateWorkload", "description": "Grants permission to create a new workload", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "wellarchitected:JiraProjectKey" ], "dependentActions": [] }, "createworkloadshare": { "name": "CreateWorkloadShare", "description": "Grants permission to share a workload with another account", "accessLevel": "Write", "resourceTypes": [ { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deleteagentcontext": { "name": "DeleteAgentContext", "description": "Grants permission to delete a context associated with a profile", "accessLevel": "Write", "resourceTypes": [ { "name": "agent-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deleteagentgoal": { "name": "DeleteAgentGoal", "description": "Grants permission to delete a goal associated with a profile", "accessLevel": "Write", "resourceTypes": [ { "name": "agent-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deleteagentprofile": { "name": "DeleteAgentProfile", "description": "Grants permission to delete an agent profile", "accessLevel": "Write", "resourceTypes": [ { "name": "agent-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deletelens": { "name": "DeleteLens", "description": "Grants permission to delete a lens", "accessLevel": "Write", "resourceTypes": [ { "name": "lens", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deletelensshare": { "name": "DeleteLensShare", "description": "Grants permission to delete an existing lens share", "accessLevel": "Write", "resourceTypes": [ { "name": "lens", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deleteprofile": { "name": "DeleteProfile", "description": "Grants permission to delete a profile", "accessLevel": "Write", "resourceTypes": [ { "name": "profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deleteprofileshare": { "name": "DeleteProfileShare", "description": "Grants permission to delete an existing profile share", "accessLevel": "Write", "resourceTypes": [ { "name": "profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deletereviewtemplate": { "name": "DeleteReviewTemplate", "description": "Grants permission to delete an existing review template", "accessLevel": "Write", "resourceTypes": [ { "name": "review-template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deletetemplateshare": { "name": "DeleteTemplateShare", "description": "Grants permission to delete an existing review template share", "accessLevel": "Write", "resourceTypes": [ { "name": "review-template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deleteworkload": { "name": "DeleteWorkload", "description": "Grants permission to delete an existing workload", "accessLevel": "Write", "resourceTypes": [ { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deleteworkloadshare": { "name": "DeleteWorkloadShare", "description": "Grants permission to delete an existing workload share", "accessLevel": "Write", "resourceTypes": [ { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "disassociatelenses": { "name": "DisassociateLenses", "description": "Grants permission to disassociate a lens from the specified workload", "accessLevel": "Write", "resourceTypes": [ { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "disassociateprofiles": { "name": "DisassociateProfiles", "description": "Grants permission to disassociate a profile from the specified workload", "accessLevel": "Write", "resourceTypes": [ { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "exportlens": { "name": "ExportLens", "description": "Grants permission to export an existing lens", "accessLevel": "Read", "resourceTypes": [ { "name": "lens", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getagentcontext": { "name": "GetAgentContext", "description": "Grants permission to get context associated with a profile", "accessLevel": "Read", "resourceTypes": [ { "name": "agent-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getagentgoal": { "name": "GetAgentGoal", "description": "Grants permission to get goal associated with a profile", "accessLevel": "Read", "resourceTypes": [ { "name": "agent-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getagentprofile": { "name": "GetAgentProfile", "description": "Grants permission to get agent profile by profile arn", "accessLevel": "Read", "resourceTypes": [ { "name": "agent-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getagentrecommendation": { "name": "GetAgentRecommendation", "description": "Grants permission to get a recommendation by recommendation ARN", "accessLevel": "Read", "resourceTypes": [ { "name": "agent-recommendation", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getagentrecommendationgeneration": { "name": "GetAgentRecommendationGeneration", "description": "Grants permission to get a recommendation generation", "accessLevel": "Read", "resourceTypes": [ { "name": "agent-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getanswer": { "name": "GetAnswer", "description": "Grants permission to retrieve the specified answer from the specified lens review", "accessLevel": "Read", "resourceTypes": [ { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getconsolidatedreport": { "name": "GetConsolidatedReport", "description": "Grants permission to get consolidated report metrics or to generate the consolidated report PDF in this account", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getglobalsettings": { "name": "GetGlobalSettings", "description": "Grants permission to get all settings for the account", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getlens": { "name": "GetLens", "description": "Grants permission to get an existing lens", "accessLevel": "Read", "resourceTypes": [ { "name": "lens", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getlensreview": { "name": "GetLensReview", "description": "Grants permission to retrieve the specified lens review of the specified workload", "accessLevel": "Read", "resourceTypes": [ { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getlensreviewreport": { "name": "GetLensReviewReport", "description": "Grants permission to retrieve the report for the specified lens review", "accessLevel": "Read", "resourceTypes": [ { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getlensversiondifference": { "name": "GetLensVersionDifference", "description": "Grants permission to get the difference between the specified lens version and latest available lens version", "accessLevel": "Read", "resourceTypes": [ { "name": "lens", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getmilestone": { "name": "GetMilestone", "description": "Grants permission to retrieve the specified milestone of the specified workload", "accessLevel": "Read", "resourceTypes": [ { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getprofile": { "name": "GetProfile", "description": "Grants permission to retrieve the specified profile", "accessLevel": "Read", "resourceTypes": [ { "name": "profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getprofiletemplate": { "name": "GetProfileTemplate", "description": "Grants permission to retrieve the specified profile template", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getreviewtemplate": { "name": "GetReviewTemplate", "description": "Grants permission to retrieve the specified review template", "accessLevel": "Read", "resourceTypes": [ { "name": "review-template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getreviewtemplateanswer": { "name": "GetReviewTemplateAnswer", "description": "Grants permission to retrieve the specified answer from the specified review template lens review", "accessLevel": "Read", "resourceTypes": [ { "name": "review-template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getreviewtemplatelensreview": { "name": "GetReviewTemplateLensReview", "description": "Grants permission to retrieve the specified lens review of the specified review template", "accessLevel": "Read", "resourceTypes": [ { "name": "review-template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getworkload": { "name": "GetWorkload", "description": "Grants permission to retrieve the specified workload", "accessLevel": "Read", "resourceTypes": [ { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "importlens": { "name": "ImportLens", "description": "Grants permission to import a new lens", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "listagentcontexts": { "name": "ListAgentContexts", "description": "Grants permission to list contexts associated with a profile by filters on the fields", "accessLevel": "Read", "resourceTypes": [ { "name": "agent-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listagentgoals": { "name": "ListAgentGoals", "description": "Grants permission to list goals associated with a profile by filters on the fields", "accessLevel": "Read", "resourceTypes": [ { "name": "agent-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listagentprofiles": { "name": "ListAgentProfiles", "description": "Grants permission to list agent profiles", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listagentrecommendationgenerations": { "name": "ListAgentRecommendationGenerations", "description": "Grants permission to list recommendation generations", "accessLevel": "Read", "resourceTypes": [ { "name": "agent-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listagentrecommendationitems": { "name": "ListAgentRecommendationItems", "description": "Grants permission to list recommendation items associated with a recommendation", "accessLevel": "Read", "resourceTypes": [ { "name": "agent-recommendation", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listagentrecommendations": { "name": "ListAgentRecommendations", "description": "Grants permission to list recommendations by profile ARN", "accessLevel": "Read", "resourceTypes": [ { "name": "agent-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listanswers": { "name": "ListAnswers", "description": "Grants permission to list the answers from the specified lens review", "accessLevel": "List", "resourceTypes": [ { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listcheckdetails": { "name": "ListCheckDetails", "description": "Grants permission to list the check-details for the workload", "accessLevel": "List", "resourceTypes": [ { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listchecksummaries": { "name": "ListCheckSummaries", "description": "Grants permission to list the check-summaries for the workload", "accessLevel": "List", "resourceTypes": [ { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listlensreviewimprovements": { "name": "ListLensReviewImprovements", "description": "Grants permission to list the improvements of the specified lens review", "accessLevel": "List", "resourceTypes": [ { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listlensreviews": { "name": "ListLensReviews", "description": "Grants permission to list the lens reviews of the specified workload", "accessLevel": "List", "resourceTypes": [ { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listlensshares": { "name": "ListLensShares", "description": "Grants permission to list all shares created for a lens", "accessLevel": "List", "resourceTypes": [ { "name": "lens", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listlenses": { "name": "ListLenses", "description": "Grants permission to list the lenses available to this account", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listmilestones": { "name": "ListMilestones", "description": "Grants permission to list the milestones of the specified workload", "accessLevel": "List", "resourceTypes": [ { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listnotifications": { "name": "ListNotifications", "description": "Grants permission to list notifications related to the account or specified resource", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listprofilenotifications": { "name": "ListProfileNotifications", "description": "Grants permission to list profile notifications related to specified resource", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listprofileshares": { "name": "ListProfileShares", "description": "Grants permission to list all shares created for a profile", "accessLevel": "List", "resourceTypes": [ { "name": "profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listprofiles": { "name": "ListProfiles", "description": "Grants permission to list the profiles available to this account", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listreviewtemplateanswers": { "name": "ListReviewTemplateAnswers", "description": "Grants permission to list the answers from the specified review template lens review", "accessLevel": "List", "resourceTypes": [ { "name": "review-template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listreviewtemplates": { "name": "ListReviewTemplates", "description": "Grants permission to list the review templates available to this account", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listshareinvitations": { "name": "ListShareInvitations", "description": "Grants permission to list the workload share invitations of the specified account or user", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to list tags for a Well-Architected resource", "accessLevel": "Read", "resourceTypes": [ { "name": "agent-profile", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "agent-recommendation", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "lens", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "profile", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "review-template", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "workload", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listtemplateshares": { "name": "ListTemplateShares", "description": "Grants permission to list all shares created for a review template", "accessLevel": "List", "resourceTypes": [ { "name": "review-template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listworkloadshares": { "name": "ListWorkloadShares", "description": "Grants permission to list the workload shares of the specified workload", "accessLevel": "List", "resourceTypes": [ { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listworkloads": { "name": "ListWorkloads", "description": "Grants permission to list the workloads in this account", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "putagentrecommendationfeedback": { "name": "PutAgentRecommendationFeedback", "description": "Grants permission to put feedback on a recommendation", "accessLevel": "Write", "resourceTypes": [ { "name": "agent-recommendation", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "startagentrecommendationgeneration": { "name": "StartAgentRecommendationGeneration", "description": "Grants permission to start a recommendation generation process", "accessLevel": "Write", "resourceTypes": [ { "name": "agent-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to tag a Well-Architected resource", "accessLevel": "Tagging, Write", "resourceTypes": [ { "name": "agent-profile", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "agent-recommendation", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "lens", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "profile", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "review-template", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "workload", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to untag a Well-Architected resource", "accessLevel": "Tagging, Write", "resourceTypes": [ { "name": "agent-profile", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "agent-recommendation", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "lens", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "profile", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "review-template", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "workload", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] }, "updateagentcontext": { "name": "UpdateAgentContext", "description": "Grants permission to update a context associated with a profile", "accessLevel": "Write", "resourceTypes": [ { "name": "agent-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "updateagentgoal": { "name": "UpdateAgentGoal", "description": "Grants permission to update a goal associated with a profile", "accessLevel": "Write", "resourceTypes": [ { "name": "agent-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "updateagentprofile": { "name": "UpdateAgentProfile", "description": "Grants permission to update an agent profile", "accessLevel": "Write", "resourceTypes": [ { "name": "agent-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "updateagentrecommendationstatus": { "name": "UpdateAgentRecommendationStatus", "description": "Grants permission to update the status of a recommendation", "accessLevel": "Write", "resourceTypes": [ { "name": "agent-recommendation", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "updateanswer": { "name": "UpdateAnswer", "description": "Grants permission to update properties of the specified answer", "accessLevel": "Write", "resourceTypes": [ { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "updateglobalsettings": { "name": "UpdateGlobalSettings", "description": "Grants permission to manage all settings for the account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "wellarchitected:JiraProjectKey" ], "dependentActions": [] }, "updateintegration": { "name": "UpdateIntegration", "description": "Grants permission to update properties of the integration", "accessLevel": "Write", "resourceTypes": [ { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "updatelensreview": { "name": "UpdateLensReview", "description": "Grants permission to update properties of the specified lens review", "accessLevel": "Write", "resourceTypes": [ { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "updateprofile": { "name": "UpdateProfile", "description": "Grants permission to update properties of the specified profile", "accessLevel": "Write", "resourceTypes": [ { "name": "profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "updatereviewtemplate": { "name": "UpdateReviewTemplate", "description": "Grants permission to update properties of the specified review template", "accessLevel": "Write", "resourceTypes": [ { "name": "review-template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "updatereviewtemplateanswer": { "name": "UpdateReviewTemplateAnswer", "description": "Grants permission to update properties of the specified review template answer", "accessLevel": "Write", "resourceTypes": [ { "name": "review-template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "updatereviewtemplatelensreview": { "name": "UpdateReviewTemplateLensReview", "description": "Grants permission to update properties of the specified review template lens review", "accessLevel": "Write", "resourceTypes": [ { "name": "review-template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "updateshareinvitation": { "name": "UpdateShareInvitation", "description": "Grants permission to update status of the specified workload share invitation", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "updateworkload": { "name": "UpdateWorkload", "description": "Grants permission to update properties of the specified workload", "accessLevel": "Write", "resourceTypes": [ { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "wellarchitected:JiraProjectKey" ], "dependentActions": [] }, "updateworkloadshare": { "name": "UpdateWorkloadShare", "description": "Grants permission to update properties of the specified workload share", "accessLevel": "Write", "resourceTypes": [ { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "upgradelensreview": { "name": "UpgradeLensReview", "description": "Grants permission to upgrade the specified lens review to use the latest version of the associated lens", "accessLevel": "Write", "resourceTypes": [ { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "upgradeprofileversion": { "name": "UpgradeProfileVersion", "description": "Grants permission to upgrade the specified workload to use the latest version of the associated profile", "accessLevel": "Write", "resourceTypes": [ { "name": "profile", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "workload", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "upgradereviewtemplatelensreview": { "name": "UpgradeReviewTemplateLensReview", "description": "Grants permission to upgrade the specified lens review of the specified review template", "accessLevel": "Write", "resourceTypes": [ { "name": "review-template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] } }