@cloud-copilot/iam-data

{ "applyarchiverule": { "name": "ApplyArchiveRule", "description": "Grants permission to apply an archive rule", "accessLevel": "Write", "resourceTypes": [ { "name": "Analyzer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "cancelpolicygeneration": { "name": "CancelPolicyGeneration", "description": "Grants permission to cancel a policy generation", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "checkaccessnotgranted": { "name": "CheckAccessNotGranted", "description": "Grants permission to check that specified access is not allowed by a policy", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "checknonewaccess": { "name": "CheckNoNewAccess", "description": "Grants permission to check that no new access is allowed when compared to an existing policy", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "checknopublicaccess": { "name": "CheckNoPublicAccess", "description": "Grants permission to check that public access is not allowed by a resource policy", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createaccesspreview": { "name": "CreateAccessPreview", "description": "Grants permission to create an access preview for the specified analyzer", "accessLevel": "Write", "resourceTypes": [ { "name": "Analyzer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createanalyzer": { "name": "CreateAnalyzer", "description": "Grants permission to create an analyzer", "accessLevel": "Write", "resourceTypes": [ { "name": "Analyzer", "required": true, "conditionKeys": [], "dependentActions": [ "iam:CreateServiceLinkedRole" ] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createarchiverule": { "name": "CreateArchiveRule", "description": "Grants permission to create an archive rule for the specified analyzer", "accessLevel": "Write", "resourceTypes": [ { "name": "ArchiveRule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteanalyzer": { "name": "DeleteAnalyzer", "description": "Grants permission to delete the specified analyzer", "accessLevel": "Write", "resourceTypes": [ { "name": "Analyzer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletearchiverule": { "name": "DeleteArchiveRule", "description": "Grants permission to delete archive rules for the specified analyzer", "accessLevel": "Write", "resourceTypes": [ { "name": "ArchiveRule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "generatefindingrecommendation": { "name": "GenerateFindingRecommendation", "description": "Grants permission to generate recommendation steps to resolve a finding", "accessLevel": "Write", "resourceTypes": [ { "name": "Analyzer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getaccesspreview": { "name": "GetAccessPreview", "description": "Grants permission to retrieve information about an access preview", "accessLevel": "Read", "resourceTypes": [ { "name": "Analyzer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getanalyzedresource": { "name": "GetAnalyzedResource", "description": "Grants permission to retrieve information about an analyzed resource", "accessLevel": "Read", "resourceTypes": [ { "name": "Analyzer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getanalyzer": { "name": "GetAnalyzer", "description": "Grants permission to retrieve information about analyzers", "accessLevel": "Read", "resourceTypes": [ { "name": "Analyzer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "getarchiverule": { "name": "GetArchiveRule", "description": "Grants permission to retrieve information about archive rules for the specified analyzer", "accessLevel": "Read", "resourceTypes": [ { "name": "ArchiveRule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getfinding": { "name": "GetFinding", "description": "Grants permission to retrieve findings", "accessLevel": "Read", "resourceTypes": [ { "name": "Analyzer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getfindingrecommendation": { "name": "GetFindingRecommendation", "description": "Grants permission to retrieve recommendation steps to resolve a finding", "accessLevel": "Read", "resourceTypes": [ { "name": "Analyzer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getfindingsstatistics": { "name": "GetFindingsStatistics", "description": "Grants permission to retrieve statistics for findings", "accessLevel": "Read", "resourceTypes": [ { "name": "Analyzer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getgeneratedpolicy": { "name": "GetGeneratedPolicy", "description": "Grants permission to retrieve a policy that was generated using StartPolicyGeneration", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listaccesspreviewfindings": { "name": "ListAccessPreviewFindings", "description": "Grants permission to retrieve a list of findings from an access preview", "accessLevel": "Read", "resourceTypes": [ { "name": "Analyzer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listaccesspreviews": { "name": "ListAccessPreviews", "description": "Grants permission to retrieve a list of access previews", "accessLevel": "List", "resourceTypes": [ { "name": "Analyzer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listanalyzedresources": { "name": "ListAnalyzedResources", "description": "Grants permission to retrieve a list of resources that have been analyzed", "accessLevel": "Read", "resourceTypes": [ { "name": "Analyzer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listanalyzers": { "name": "ListAnalyzers", "description": "Grants permission to retrieves a list of analyzers", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listarchiverules": { "name": "ListArchiveRules", "description": "Grants permission to retrieve a list of archive rules from an analyzer", "accessLevel": "List", "resourceTypes": [ { "name": "Analyzer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listfindings": { "name": "ListFindings", "description": "Grants permission to retrieve a list of findings from an analyzer", "accessLevel": "Read", "resourceTypes": [ { "name": "Analyzer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listpolicygenerations": { "name": "ListPolicyGenerations", "description": "Grants permission to list all the recently started policy generations", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to retrieve a list of tags applied to a resource", "accessLevel": "Read", "resourceTypes": [ { "name": "Analyzer", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "startpolicygeneration": { "name": "StartPolicyGeneration", "description": "Grants permission to start a policy generation", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [ "iam:PassRole" ] }, "startresourcescan": { "name": "StartResourceScan", "description": "Grants permission to start a scan of the policies applied to a resource", "accessLevel": "Write", "resourceTypes": [ { "name": "Analyzer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to add a tag to a resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "Analyzer", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to remove a tag from a resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "Analyzer", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] }, "updateanalyzer": { "name": "UpdateAnalyzer", "description": "Grants permission to modify an analyzer's configuration", "accessLevel": "Write", "resourceTypes": [ { "name": "Analyzer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatearchiverule": { "name": "UpdateArchiveRule", "description": "Grants permission to modify an archive rule", "accessLevel": "Write", "resourceTypes": [ { "name": "ArchiveRule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatefindings": { "name": "UpdateFindings", "description": "Grants permission to modify findings", "accessLevel": "Write", "resourceTypes": [ { "name": "Analyzer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "validatepolicy": { "name": "ValidatePolicy", "description": "Grants permission to validate a policy", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] } }