@cloud-copilot/iam-data

{ "associatebackupvaultmpaapprovalteam": { "name": "AssociateBackupVaultMpaApprovalTeam", "description": "Grants permission to associate an MPA approval team with a backup vault", "accessLevel": "Write", "resourceTypes": [ { "name": "backupVault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "backup:MpaApprovalTeamArn" ], "dependentActions": [] }, "cancellegalhold": { "name": "CancelLegalHold", "description": "Grants permission to cancel a legal hold", "accessLevel": "Write", "resourceTypes": [ { "name": "legalHold", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "copyfrombackupvault": { "name": "CopyFromBackupVault", "isPermissionOnly": true, "description": "Grants permission to copy from a backup vault", "accessLevel": "Write", "resourceTypes": [ { "name": "recoveryPoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "backup:CopyTargets", "backup:CopyTargetOrgPaths" ], "dependentActions": [] }, "copyintobackupvault": { "name": "CopyIntoBackupVault", "isPermissionOnly": true, "description": "Grants permission to copy into a backup vault", "accessLevel": "Write", "resourceTypes": [ { "name": "backupVault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}" ], "dependentActions": [] }, "createbackupplan": { "name": "CreateBackupPlan", "description": "Grants permission to create a new backup plan", "accessLevel": "Write", "resourceTypes": [ { "name": "backupPlan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createbackupselection": { "name": "CreateBackupSelection", "description": "Grants permission to create a new resource assignment in a backup plan", "accessLevel": "Write", "resourceTypes": [ { "name": "backupPlan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "iam:PassRole" ] }, "createbackupvault": { "name": "CreateBackupVault", "description": "Grants permission to create a new backup vault", "accessLevel": "Write", "resourceTypes": [ { "name": "backupVault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createframework": { "name": "CreateFramework", "description": "Grants permission to create a new framework", "accessLevel": "Write", "resourceTypes": [ { "name": "framework", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createlegalhold": { "name": "CreateLegalHold", "description": "Grants permission to create a new legal hold", "accessLevel": "Write", "resourceTypes": [ { "name": "legalHold", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createlogicallyairgappedbackupvault": { "name": "CreateLogicallyAirGappedBackupVault", "description": "Grants permission to create a new logically air-gapped backup vault, a logical container where backups are stored", "accessLevel": "Write", "resourceTypes": [ { "name": "backupVault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "backup:MinRetentionDays", "backup:MaxRetentionDays" ], "dependentActions": [] }, "createreportplan": { "name": "CreateReportPlan", "description": "Grants permission to create a new report plan", "accessLevel": "Write", "resourceTypes": [ { "name": "reportPlan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "backup:FrameworkArns" ], "dependentActions": [] }, "createrestoreaccessbackupvault": { "name": "CreateRestoreAccessBackupVault", "description": "Grants permission to create a restore access backup vault", "accessLevel": "Write", "resourceTypes": [ { "name": "backupVault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createrestoretestingplan": { "name": "CreateRestoreTestingPlan", "description": "Grants permission to create a new restore testing plan", "accessLevel": "Write", "resourceTypes": [ { "name": "restoreTestingPlan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createrestoretestingselection": { "name": "CreateRestoreTestingSelection", "description": "Grants permission to create a new resource assignment in a restore testing plan", "accessLevel": "Write", "resourceTypes": [ { "name": "restoreTestingPlan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "iam:PassRole" ] }, "deletebackupplan": { "name": "DeleteBackupPlan", "description": "Grants permission to delete a backup plan", "accessLevel": "Write", "resourceTypes": [ { "name": "backupPlan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletebackupselection": { "name": "DeleteBackupSelection", "description": "Grants permission to delete a resource assignment from a backup plan", "accessLevel": "Write", "resourceTypes": [ { "name": "backupPlan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletebackupvault": { "name": "DeleteBackupVault", "description": "Grants permission to delete a backup vault", "accessLevel": "Write", "resourceTypes": [ { "name": "backupVault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletebackupvaultaccesspolicy": { "name": "DeleteBackupVaultAccessPolicy", "description": "Grants permission to delete backup vault access policy", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "backupVault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletebackupvaultlockconfiguration": { "name": "DeleteBackupVaultLockConfiguration", "description": "Grants permission to remove the lock configuration from a backup vault", "accessLevel": "Write", "resourceTypes": [ { "name": "backupVault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletebackupvaultnotifications": { "name": "DeleteBackupVaultNotifications", "description": "Grants permission to remove the notifications from a backup vault", "accessLevel": "Write", "resourceTypes": [ { "name": "backupVault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletebackupvaultsharingpolicy": { "name": "DeleteBackupVaultSharingPolicy", "isPermissionOnly": true, "description": "Grants permission to delete backup vault sharing policy", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "backupVault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteframework": { "name": "DeleteFramework", "description": "Grants permission to delete a framework", "accessLevel": "Write", "resourceTypes": [ { "name": "framework", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleterecoverypoint": { "name": "DeleteRecoveryPoint", "description": "Grants permission to delete a recovery point from a backup vault", "accessLevel": "Write", "resourceTypes": [ { "name": "recoveryPoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletereportplan": { "name": "DeleteReportPlan", "description": "Grants permission to delete a report plan", "accessLevel": "Write", "resourceTypes": [ { "name": "reportPlan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleterestoretestingplan": { "name": "DeleteRestoreTestingPlan", "description": "Grants permission to delete a restore testing plan", "accessLevel": "Write", "resourceTypes": [ { "name": "restoreTestingPlan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleterestoretestingselection": { "name": "DeleteRestoreTestingSelection", "description": "Grants permission to delete a resource assignment from a restore testing plan", "accessLevel": "Write", "resourceTypes": [ { "name": "restoreTestingPlan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describebackupjob": { "name": "DescribeBackupJob", "description": "Grants permission to describe a backup job", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describebackupvault": { "name": "DescribeBackupVault", "description": "Grants permission to describe a new backup vault with the specified name", "accessLevel": "Read", "resourceTypes": [ { "name": "backupVault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describecopyjob": { "name": "DescribeCopyJob", "description": "Grants permission to describe a copy job", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeframework": { "name": "DescribeFramework", "description": "Grants permission to describe a framework with the specified name", "accessLevel": "Read", "resourceTypes": [ { "name": "framework", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeglobalsettings": { "name": "DescribeGlobalSettings", "description": "Grants permission to describe global settings", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeprotectedresource": { "name": "DescribeProtectedResource", "description": "Grants permission to describe a protected resource", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describerecoverypoint": { "name": "DescribeRecoveryPoint", "description": "Grants permission to describe a recovery point", "accessLevel": "Read", "resourceTypes": [ { "name": "recoveryPoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeregionsettings": { "name": "DescribeRegionSettings", "description": "Grants permission to describe region settings", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describereportjob": { "name": "DescribeReportJob", "description": "Grants permission to describe a report job", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describereportplan": { "name": "DescribeReportPlan", "description": "Grants permission to describe a report plan with the specified name", "accessLevel": "Read", "resourceTypes": [ { "name": "reportPlan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describerestorejob": { "name": "DescribeRestoreJob", "description": "Grants permission to describe a restore job", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "disassociatebackupvaultmpaapprovalteam": { "name": "DisassociateBackupVaultMpaApprovalTeam", "description": "Grants permission to disassociate an MPA approval team from a backup vault", "accessLevel": "Write", "resourceTypes": [ { "name": "backupVault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "disassociaterecoverypoint": { "name": "DisassociateRecoveryPoint", "description": "Grants permission to disassociate a recovery point from a backup vault", "accessLevel": "Write", "resourceTypes": [ { "name": "recoveryPoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "disassociaterecoverypointfromparent": { "name": "DisassociateRecoveryPointFromParent", "description": "Grants permission to disassociate a recovery point from its parent", "accessLevel": "Write", "resourceTypes": [ { "name": "recoveryPoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "exportbackupplantemplate": { "name": "ExportBackupPlanTemplate", "description": "Grants permission to export a backup plan as a JSON", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getbackupplan": { "name": "GetBackupPlan", "description": "Grants permission to get a backup plan", "accessLevel": "Read", "resourceTypes": [ { "name": "backupPlan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getbackupplanfromjson": { "name": "GetBackupPlanFromJSON", "description": "Grants permission to transform a JSON to a backup plan", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getbackupplanfromtemplate": { "name": "GetBackupPlanFromTemplate", "description": "Grants permission to transform a template to a backup plan", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getbackupselection": { "name": "GetBackupSelection", "description": "Grants permission to get a backup plan resource assignment", "accessLevel": "Read", "resourceTypes": [ { "name": "backupPlan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getbackupvaultaccesspolicy": { "name": "GetBackupVaultAccessPolicy", "description": "Grants permission to get backup vault access policy", "accessLevel": "Read", "resourceTypes": [ { "name": "backupVault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getbackupvaultnotifications": { "name": "GetBackupVaultNotifications", "description": "Grants permission to get backup vault notifications", "accessLevel": "Read", "resourceTypes": [ { "name": "backupVault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getbackupvaultsharingpolicy": { "name": "GetBackupVaultSharingPolicy", "isPermissionOnly": true, "description": "Grants permission to get backup vault sharing policy", "accessLevel": "Read", "resourceTypes": [ { "name": "backupVault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getlegalhold": { "name": "GetLegalHold", "description": "Grants permission to get a legal hold", "accessLevel": "Read", "resourceTypes": [ { "name": "legalHold", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getrecoverypointindexdetails": { "name": "GetRecoveryPointIndexDetails", "description": "Grants permission to get indexing details for a recovery point", "accessLevel": "Read", "resourceTypes": [ { "name": "recoveryPoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getrecoverypointrestoremetadata": { "name": "GetRecoveryPointRestoreMetadata", "description": "Grants permission to get recovery point restore metadata", "accessLevel": "Read", "resourceTypes": [ { "name": "recoveryPoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getrestorejobmetadata": { "name": "GetRestoreJobMetadata", "description": "Grants permission to get the restore metadata associated with a restore job", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getrestoretestinginferredmetadata": { "name": "GetRestoreTestingInferredMetadata", "description": "Grants permission to get inferred metadata generated by restore testing", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getrestoretestingplan": { "name": "GetRestoreTestingPlan", "description": "Grants permission to get a restore testing plan", "accessLevel": "Read", "resourceTypes": [ { "name": "restoreTestingPlan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getrestoretestingselection": { "name": "GetRestoreTestingSelection", "description": "Grants permission to get a restore testing plan resource assignment", "accessLevel": "Read", "resourceTypes": [ { "name": "restoreTestingPlan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getsupportedresourcetypes": { "name": "GetSupportedResourceTypes", "description": "Grants permission to get supported resource types", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listbackupjobsummaries": { "name": "ListBackupJobSummaries", "description": "Grants permission to list backup job summaries", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listbackupjobs": { "name": "ListBackupJobs", "description": "Grants permission to list backup jobs", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listbackupplantemplates": { "name": "ListBackupPlanTemplates", "description": "Grants permission to list backup plan templates provided by AWS Backup", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listbackupplanversions": { "name": "ListBackupPlanVersions", "description": "Grants permission to list backup plan versions", "accessLevel": "List", "resourceTypes": [ { "name": "backupPlan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listbackupplans": { "name": "ListBackupPlans", "description": "Grants permission to list backup plans", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listbackupselections": { "name": "ListBackupSelections", "description": "Grants permission to list resource assignments for a specific backup plan", "accessLevel": "List", "resourceTypes": [ { "name": "backupPlan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listbackupvaults": { "name": "ListBackupVaults", "description": "Grants permission to list backup vaults", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listcopyjobsummaries": { "name": "ListCopyJobSummaries", "description": "Grants permission to list copy job summaries", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listcopyjobs": { "name": "ListCopyJobs", "description": "Grants permission to list copy jobs", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listframeworks": { "name": "ListFrameworks", "description": "Grants permission to list frameworks", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listindexedrecoverypoints": { "name": "ListIndexedRecoveryPoints", "description": "Grants permission to get list indexed recovery points", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listindexedrecoverypointsforsearch": { "name": "ListIndexedRecoveryPointsForSearch", "isPermissionOnly": true, "description": "Grants permission to list indexed recovery points to search", "accessLevel": "Permissions management", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listlegalholds": { "name": "ListLegalHolds", "description": "Grants permission to list legal holds", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listprotectedresources": { "name": "ListProtectedResources", "description": "Grants permission to list protected resources by AWS Backup", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listprotectedresourcesbybackupvault": { "name": "ListProtectedResourcesByBackupVault", "description": "Grants permission to list protected resources inside a backup vault", "accessLevel": "List", "resourceTypes": [ { "name": "backupVault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listrecoverypointsbybackupvault": { "name": "ListRecoveryPointsByBackupVault", "description": "Grants permission to list recovery points inside a backup vault", "accessLevel": "List", "resourceTypes": [ { "name": "backupVault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listrecoverypointsbylegalhold": { "name": "ListRecoveryPointsByLegalHold", "description": "Grants permission to list recovery points by legal hold", "accessLevel": "List", "resourceTypes": [ { "name": "legalHold", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listrecoverypointsbyresource": { "name": "ListRecoveryPointsByResource", "description": "Grants permission to list recovery points for a resource", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listreportjobs": { "name": "ListReportJobs", "description": "Grants permission to list report jobs", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listreportplans": { "name": "ListReportPlans", "description": "Grants permission to list report plans", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listrestoreaccessbackupvaults": { "name": "ListRestoreAccessBackupVaults", "description": "Grants permission to list a restore access backup vaults associated with a backup vault", "accessLevel": "List", "resourceTypes": [ { "name": "backupVault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listrestorejobsummaries": { "name": "ListRestoreJobSummaries", "description": "Grants permission to list restore job summaries", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listrestorejobs": { "name": "ListRestoreJobs", "description": "Grants permission to list restore jobs", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listrestorejobsbyprotectedresource": { "name": "ListRestoreJobsByProtectedResource", "description": "Grants permission to list restore jobs for a protected resource", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listrestoretestingplans": { "name": "ListRestoreTestingPlans", "description": "Grants permission to list restore testing plans", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listrestoretestingselections": { "name": "ListRestoreTestingSelections", "description": "Grants permission to list resource assignments for a specific restore testing plan", "accessLevel": "List", "resourceTypes": [ { "name": "restoreTestingPlan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listtags": { "name": "ListTags", "description": "Grants permission to list tags for a resource", "accessLevel": "Read", "resourceTypes": [ { "name": "backupPlan", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "backupVault", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "framework", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "legalHold", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "recoveryPoint", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "reportPlan", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "restoreTestingPlan", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putbackupvaultaccesspolicy": { "name": "PutBackupVaultAccessPolicy", "description": "Grants permission to add an access policy to the backup vault", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "backupVault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putbackupvaultlockconfiguration": { "name": "PutBackupVaultLockConfiguration", "description": "Grants permission to add a lock configuration to the backup vault", "accessLevel": "Write", "resourceTypes": [ { "name": "backupVault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "backup:ChangeableForDays", "backup:MinRetentionDays", "backup:MaxRetentionDays" ], "dependentActions": [] }, "putbackupvaultnotifications": { "name": "PutBackupVaultNotifications", "description": "Grants permission to add an SNS topic to the backup vault", "accessLevel": "Write", "resourceTypes": [ { "name": "backupVault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putbackupvaultsharingpolicy": { "name": "PutBackupVaultSharingPolicy", "isPermissionOnly": true, "description": "Grants permission to add a sharing policy to the backup vault", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "backupVault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putrestorevalidationresult": { "name": "PutRestoreValidationResult", "description": "Grants permission to put a restore validation result", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "revokerestoreaccessbackupvault": { "name": "RevokeRestoreAccessBackupVault", "description": "Grants permission to revoke a restore access backup vault", "accessLevel": "Write", "resourceTypes": [ { "name": "backupVault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "searchrecoverypoint": { "name": "SearchRecoveryPoint", "isPermissionOnly": true, "description": "Grants permission to search a recovery point", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "recoveryPoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "startbackupjob": { "name": "StartBackupJob", "description": "Grants permission to start a new backup job", "accessLevel": "Write", "resourceTypes": [ { "name": "backupVault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "iam:PassRole" ] }, "startcopyjob": { "name": "StartCopyJob", "description": "Grants permission to copy a backup from a source backup vault to a destination backup vault", "accessLevel": "Write", "resourceTypes": [ { "name": "recoveryPoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "iam:PassRole" ] }, "startreportjob": { "name": "StartReportJob", "description": "Grants permission to start a new report job", "accessLevel": "Write", "resourceTypes": [ { "name": "reportPlan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "startrestorejob": { "name": "StartRestoreJob", "description": "Grants permission to start a new restore job", "accessLevel": "Write", "resourceTypes": [ { "name": "recoveryPoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "iam:PassRole" ] }, "stopbackupjob": { "name": "StopBackupJob", "description": "Grants permission to stop a backup job", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to tag a resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "backupPlan", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "backupVault", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "framework", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "legalHold", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "recoveryPoint", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "reportPlan", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "restoreTestingPlan", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to untag a resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "backupPlan", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "backupVault", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "framework", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "legalHold", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "recoveryPoint", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "reportPlan", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "restoreTestingPlan", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] }, "updatebackupplan": { "name": "UpdateBackupPlan", "description": "Grants permission to update a backup plan", "accessLevel": "Write", "resourceTypes": [ { "name": "backupPlan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateframework": { "name": "UpdateFramework", "description": "Grants permission to update a framework", "accessLevel": "Write", "resourceTypes": [ { "name": "framework", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateglobalsettings": { "name": "UpdateGlobalSettings", "description": "Grants permission to update the current global settings for the AWS Account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "updaterecoverypointindexsettings": { "name": "UpdateRecoveryPointIndexSettings", "description": "Grants permission to update recovery point index settings", "accessLevel": "Write", "resourceTypes": [ { "name": "recoveryPoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "backup:Index" ], "dependentActions": [] }, "updaterecoverypointlifecycle": { "name": "UpdateRecoveryPointLifecycle", "description": "Grants permission to update the lifecycle of the recovery point", "accessLevel": "Write", "resourceTypes": [ { "name": "recoveryPoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateregionsettings": { "name": "UpdateRegionSettings", "description": "Grants permission to update the current service opt-in settings for the Region", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "updatereportplan": { "name": "UpdateReportPlan", "description": "Grants permission to update a report plan", "accessLevel": "Write", "resourceTypes": [ { "name": "reportPlan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "backup:FrameworkArns" ], "dependentActions": [] }, "updaterestoretestingplan": { "name": "UpdateRestoreTestingPlan", "description": "Grants permission to update a restore testing plan", "accessLevel": "Write", "resourceTypes": [ { "name": "restoreTestingPlan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updaterestoretestingselection": { "name": "UpdateRestoreTestingSelection", "description": "Grants permission to update a resource assignment in a restore testing plan", "accessLevel": "Write", "resourceTypes": [ { "name": "restoreTestingPlan", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "iam:PassRole" ] } }