@cloud-copilot/iam-data

{ "associateassessmentreportevidencefolder": { "name": "AssociateAssessmentReportEvidenceFolder", "description": "Grants permission to associate an evidence folder with an assessment report in AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [ { "name": "assessment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchassociateassessmentreportevidence": { "name": "BatchAssociateAssessmentReportEvidence", "description": "Grants permission to associate a list of evidence to an assessment report in AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [ { "name": "assessment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchcreatedelegationbyassessment": { "name": "BatchCreateDelegationByAssessment", "description": "Grants permission to create delegations for an assessment in AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [ { "name": "assessment", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "assessmentControlSet", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchdeletedelegationbyassessment": { "name": "BatchDeleteDelegationByAssessment", "description": "Grants permission to delete delegations for an assessment in AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [ { "name": "assessment", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "assessmentControlSet", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchdisassociateassessmentreportevidence": { "name": "BatchDisassociateAssessmentReportEvidence", "description": "Grants permission to disassociate a list of evidence from an assessment report in AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [ { "name": "assessment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchimportevidencetoassessmentcontrol": { "name": "BatchImportEvidenceToAssessmentControl", "description": "Grants permission to import a list of evidence to an assessment control in AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [ { "name": "assessmentControlSet", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createassessment": { "name": "CreateAssessment", "description": "Grants permission to create an assessment to be used with AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "createassessmentframework": { "name": "CreateAssessmentFramework", "description": "Grants permission to create a framework for use in AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "createassessmentreport": { "name": "CreateAssessmentReport", "description": "Grants permission to create an assessment report in AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [ { "name": "assessment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createcontrol": { "name": "CreateControl", "description": "Grants permission to create a control to be used in AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deleteassessment": { "name": "DeleteAssessment", "description": "Grants permission to delete an assessment in AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [ { "name": "assessment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "deleteassessmentframework": { "name": "DeleteAssessmentFramework", "description": "Grants permission to delete an assessment framework in AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [ { "name": "assessmentFramework", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "deleteassessmentframeworkshare": { "name": "DeleteAssessmentFrameworkShare", "description": "Grants permission to delete a share request for a custom framework in AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleteassessmentreport": { "name": "DeleteAssessmentReport", "description": "Grants permission to delete an assessment report in AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [ { "name": "assessment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletecontrol": { "name": "DeleteControl", "description": "Grants permission to delete a control in AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [ { "name": "control", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "deregisteraccount": { "name": "DeregisterAccount", "description": "Grants permission to deregister an account in AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deregisterorganizationadminaccount": { "name": "DeregisterOrganizationAdminAccount", "description": "Grants permission to deregister the delegated administrator account for AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "disassociateassessmentreportevidencefolder": { "name": "DisassociateAssessmentReportEvidenceFolder", "description": "Grants permission to disassociate an evidence folder from an assessment report in AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [ { "name": "assessment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getaccountstatus": { "name": "GetAccountStatus", "description": "Grants permission to get the status of an account in AWS Audit Manager", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getassessment": { "name": "GetAssessment", "description": "Grants permission to get an assessment created in AWS Audit Manager", "accessLevel": "Read", "resourceTypes": [ { "name": "assessment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getassessmentframework": { "name": "GetAssessmentFramework", "description": "Grants permission to get an assessment framework in AWS Audit Manager", "accessLevel": "Read", "resourceTypes": [ { "name": "assessmentFramework", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getassessmentreporturl": { "name": "GetAssessmentReportUrl", "description": "Grants permission to get the URL for an assessment report in AWS Audit Manager", "accessLevel": "Read", "resourceTypes": [ { "name": "assessment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getchangelogs": { "name": "GetChangeLogs", "description": "Grants permission to get changelogs for an assessment in AWS Audit Manager", "accessLevel": "Read", "resourceTypes": [ { "name": "assessment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getcontrol": { "name": "GetControl", "description": "Grants permission to get a control in AWS Audit Manager", "accessLevel": "Read", "resourceTypes": [ { "name": "control", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getdelegations": { "name": "GetDelegations", "description": "Grants permission to get all delegations in AWS Audit Manager", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getevidence": { "name": "GetEvidence", "description": "Grants permission to get evidence from AWS Audit Manager", "accessLevel": "Read", "resourceTypes": [ { "name": "assessmentControlSet", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getevidencebyevidencefolder": { "name": "GetEvidenceByEvidenceFolder", "description": "Grants permission to get all the evidence from an evidence folder in AWS Audit Manager", "accessLevel": "Read", "resourceTypes": [ { "name": "assessmentControlSet", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getevidencefileuploadurl": { "name": "GetEvidenceFileUploadUrl", "description": "Grants permission to get a presigned Amazon S3 URL that can be used to upload a file as manual evidence", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getevidencefolder": { "name": "GetEvidenceFolder", "description": "Grants permission to get the evidence folder from AWS Audit Manager", "accessLevel": "Read", "resourceTypes": [ { "name": "assessmentControlSet", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getevidencefoldersbyassessment": { "name": "GetEvidenceFoldersByAssessment", "description": "Grants permission to get the evidence folders from an assessment in AWS Audit Manager", "accessLevel": "Read", "resourceTypes": [ { "name": "assessment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getevidencefoldersbyassessmentcontrol": { "name": "GetEvidenceFoldersByAssessmentControl", "description": "Grants permission to get the evidence folders from an assessment control in AWS Audit Manager", "accessLevel": "Read", "resourceTypes": [ { "name": "assessmentControlSet", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getinsights": { "name": "GetInsights", "description": "Grants permission to get analytics data for all active assessments", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getinsightsbyassessment": { "name": "GetInsightsByAssessment", "description": "Grants permission to get analytics data for a specific active assessment", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getorganizationadminaccount": { "name": "GetOrganizationAdminAccount", "description": "Grants permission to get the delegated administrator account in AWS Audit Manager", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getservicesinscope": { "name": "GetServicesInScope", "description": "Grants permission to get the services in scope for an assessment in AWS Audit Manager", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getsettings": { "name": "GetSettings", "description": "Grants permission to get all settings configured in AWS Audit Manager", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listassessmentcontrolinsightsbycontroldomain": { "name": "ListAssessmentControlInsightsByControlDomain", "description": "Grants permission to list analytics data for controls in a specific control domain and active assessment", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listassessmentframeworksharerequests": { "name": "ListAssessmentFrameworkShareRequests", "description": "Grants permission to list all sent or received share requests for custom frameworks in AWS Audit Manager", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listassessmentframeworks": { "name": "ListAssessmentFrameworks", "description": "Grants permission to list all assessment frameworks in AWS Audit Manager", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listassessmentreports": { "name": "ListAssessmentReports", "description": "Grants permission to list all assessment reports in AWS Audit Manager", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listassessments": { "name": "ListAssessments", "description": "Grants permission to list all assessments in AWS Audit Manager", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listcontroldomaininsights": { "name": "ListControlDomainInsights", "description": "Grants permission to list analytics data for control domains across all active assessments", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listcontroldomaininsightsbyassessment": { "name": "ListControlDomainInsightsByAssessment", "description": "Grants permission to list analytics data for control domains in a specific active assessment", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listcontrolinsightsbycontroldomain": { "name": "ListControlInsightsByControlDomain", "description": "Grants permission to list analytics data for controls in a specific control domain across all active assessments", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listcontrols": { "name": "ListControls", "description": "Grants permission to list all controls in AWS Audit Manager", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listkeywordsfordatasource": { "name": "ListKeywordsForDataSource", "description": "Grants permission to list all the data source keywords in AWS Audit Manager", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listnotifications": { "name": "ListNotifications", "description": "Grants permission to list all notifications in AWS Audit Manager", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to list tags for an AWS Audit Manager resource", "accessLevel": "Read", "resourceTypes": [ { "name": "assessment", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "control", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "registeraccount": { "name": "RegisterAccount", "description": "Grants permission to register an account in AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "registerorganizationadminaccount": { "name": "RegisterOrganizationAdminAccount", "description": "Grants permission to register an account within the organization as the delegated administrator for AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "startassessmentframeworkshare": { "name": "StartAssessmentFrameworkShare", "description": "Grants permission to create a share request for a custom framework in AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [ { "name": "assessmentFramework", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to tag an AWS Audit Manager resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "assessment", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "assessmentFramework", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "control", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to untag an AWS Audit Manager resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "assessment", "required": false, "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, { "name": "assessmentFramework", "required": false, "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, { "name": "control", "required": false, "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] }, "updateassessment": { "name": "UpdateAssessment", "description": "Grants permission to update an assessment in AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [ { "name": "assessment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateassessmentcontrol": { "name": "UpdateAssessmentControl", "description": "Grants permission to update an assessment control in AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [ { "name": "assessmentControlSet", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateassessmentcontrolsetstatus": { "name": "UpdateAssessmentControlSetStatus", "description": "Grants permission to update the status of an assessment control set in AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [ { "name": "assessmentControlSet", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateassessmentframework": { "name": "UpdateAssessmentFramework", "description": "Grants permission to update an assessment framework in AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [ { "name": "assessmentFramework", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateassessmentframeworkshare": { "name": "UpdateAssessmentFrameworkShare", "description": "Grants permission to update a share request for a custom framework in AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [ { "name": "assessmentFramework", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateassessmentstatus": { "name": "UpdateAssessmentStatus", "description": "Grants permission to update the status of an assessment in AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [ { "name": "assessment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatecontrol": { "name": "UpdateControl", "description": "Grants permission to update a control in AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [ { "name": "control", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatesettings": { "name": "UpdateSettings", "description": "Grants permission to update settings in AWS Audit Manager", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "validateassessmentreportintegrity": { "name": "ValidateAssessmentReportIntegrity", "description": "Grants permission to validate the integrity of an assessment report in AWS Audit Manager", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] } }