@cloud-copilot/iam-data

{ "createinvestigation": { "name": "CreateInvestigation", "description": "Grants permission to create a new investigation in the specified investigation group", "accessLevel": "Write", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "kms:Decrypt", "kms:GenerateDataKey", "sts:SetContext" ] }, "createinvestigationevent": { "name": "CreateInvestigationEvent", "description": "Grants permission to create a new investigation event in the specified investigation group", "accessLevel": "Write", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "cloudwatch:DescribeAlarmHistory", "cloudwatch:DescribeAlarms", "cloudwatch:GetInsightRuleReport", "cloudwatch:GetMetricData", "kms:Decrypt", "kms:GenerateDataKey", "logs:GetQueryResults", "sts:SetContext" ] }, "createinvestigationgroup": { "name": "CreateInvestigationGroup", "description": "Grants permission to create a new investigation group", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}" ], "dependentActions": [ "aiops:TagResource", "cloudtrail:DescribeTrails", "iam:PassRole", "kms:Decrypt", "kms:DescribeKey", "kms:GenerateDataKey", "sso:CreateApplication", "sso:DeleteApplication", "sso:PutApplicationAccessScope", "sso:PutApplicationAssignmentConfiguration", "sso:PutApplicationAuthenticationMethod", "sso:PutApplicationGrant", "sso:TagResource" ] }, "createinvestigationresource": { "name": "CreateInvestigationResource", "description": "Grants permission to create an investigation resource in the specified investigation group", "accessLevel": "Write", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "cloudwatch:DescribeAlarmHistory", "cloudwatch:DescribeAlarms", "cloudwatch:GetInsightRuleReport", "cloudwatch:GetMetricData", "kms:GenerateDataKey", "logs:GetQueryResults" ] }, "deleteinvestigation": { "name": "DeleteInvestigation", "description": "Grants permission to delete an investigation in the specified investigation group", "accessLevel": "Write", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "sts:SetContext" ] }, "deleteinvestigationgroup": { "name": "DeleteInvestigationGroup", "description": "Grants permission to delete the specified investigation group", "accessLevel": "Write", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "sso:DeleteApplication" ] }, "deleteinvestigationgrouppolicy": { "name": "DeleteInvestigationGroupPolicy", "description": "Grants permission to delete the investigation group policy attached to an investigation group", "accessLevel": "Write", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getinvestigation": { "name": "GetInvestigation", "description": "Grants permission to retrieve an investigation in the specified investigation group", "accessLevel": "Read", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getinvestigationevent": { "name": "GetInvestigationEvent", "description": "Grants permission to retrieve an investigation event in the specified investigation group", "accessLevel": "Read", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "kms:Decrypt" ] }, "getinvestigationgroup": { "name": "GetInvestigationGroup", "description": "Grants permission to retrieve the specified investigation group", "accessLevel": "Read", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getinvestigationgrouppolicy": { "name": "GetInvestigationGroupPolicy", "description": "Grants permission to retrieve the investigation group policy attached to an investigation group", "accessLevel": "Read", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getinvestigationresource": { "name": "GetInvestigationResource", "description": "Grants permission to retrieve an investigation resource in the specified investigation group", "accessLevel": "Read", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "kms:Decrypt" ] }, "listinvestigationevents": { "name": "ListInvestigationEvents", "description": "Grants permission to list all investigation events in the specified investigation group", "accessLevel": "List", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listinvestigationgroups": { "name": "ListInvestigationGroups", "description": "Grants permission to list all investigation groups in the AWS account making the request", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listinvestigations": { "name": "ListInvestigations", "description": "Grants permission to list all investigations that are in the specified investigation group", "accessLevel": "List", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to list the tags for the specified resource", "accessLevel": "List", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putinvestigationgrouppolicy": { "name": "PutInvestigationGroupPolicy", "description": "Grants permission to create/update the investigation group policy attached to an investigation group", "accessLevel": "Write", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to add or update the specified tags for the specified resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to remove the specified tags from the specified resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] }, "updateinvestigation": { "name": "UpdateInvestigation", "description": "Grants permission to update an investigation in the specified investigation group", "accessLevel": "Write", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "kms:Decrypt", "kms:GenerateDataKey", "sts:SetContext" ] }, "updateinvestigationevent": { "name": "UpdateInvestigationEvent", "description": "Grants permission to update an investigation event in the specified investigation group", "accessLevel": "Write", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "kms:Decrypt", "kms:GenerateDataKey", "sts:SetContext" ] }, "updateinvestigationgroup": { "name": "UpdateInvestigationGroup", "description": "Grants permission to update the specified investigation group", "accessLevel": "Write", "resourceTypes": [ { "name": "investigation-group", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "cloudtrail:DescribeTrails", "iam:PassRole", "kms:Decrypt", "kms:DescribeKey", "kms:GenerateDataKey", "sso:CreateApplication", "sso:DeleteApplication", "sso:PutApplicationAccessScope", "sso:PutApplicationAssignmentConfiguration", "sso:PutApplicationAuthenticationMethod", "sso:PutApplicationGrant", "sso:TagResource" ] } }