@cloud-copilot/iam-data
Version:
221 lines • 6.25 kB
JSON
{
"createbudgetaction": {
"name": "CreateBudgetAction",
"description": "Grants permission to configure a response that executes once your budget exceeds a specific budget threshold. Creating a budget action with tags also requires the 'budgets:TagResource' permission",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "budgetAction",
"required": true,
"conditionKeys": [],
"dependentActions": [
"iam:PassRole"
]
}
],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}",
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"deletebudgetaction": {
"name": "DeleteBudgetAction",
"description": "Grants permission to delete an action that is associated with a specific budget",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "budgetAction",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describebudgetaction": {
"name": "DescribeBudgetAction",
"description": "Grants permission to retrieve the details of a specific budget action associated with a budget",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "budgetAction",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describebudgetactionhistories": {
"name": "DescribeBudgetActionHistories",
"description": "Grants permission to retrieve a historical view of the budget actions statuses associated with a particular budget action. These status include statues such as 'Standby', 'Pending' and 'Executed'",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "budgetAction",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describebudgetactionsforaccount": {
"name": "DescribeBudgetActionsForAccount",
"description": "Grants permission to retrieve the details of all of the budget actions associated with your account",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"describebudgetactionsforbudget": {
"name": "DescribeBudgetActionsForBudget",
"description": "Grants permission to retrieve the details of all of the budget actions associated with a budget",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "budget",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"executebudgetaction": {
"name": "ExecuteBudgetAction",
"description": "Grants permission to initiate a pending budget action as well as reverse a previously executed budget action",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "budgetAction",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listtagsforresource": {
"name": "ListTagsForResource",
"description": "Grants permission to view resource tags for a budget or budget action",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "budget",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "budgetAction",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"modifybudget": {
"name": "ModifyBudget",
"description": "Grants permission to create and modify budgets, and edit budget details. Creating a budget with tags also requires the 'budgets:TagResource' permission",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "budget",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"tagresource": {
"name": "TagResource",
"description": "Grants permission to apply resource tags to a budget or budget action. Also needed to create a budget or budget action with tags",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "budget",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "budgetAction",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}"
],
"dependentActions": []
},
"untagresource": {
"name": "UntagResource",
"description": "Grants permission to remove resource tags from a budget or budget action",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "budget",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "budgetAction",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys"
],
"dependentActions": []
},
"updatebudgetaction": {
"name": "UpdateBudgetAction",
"description": "Grants permission to update the details of a specific budget action associated with a budget",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "budgetAction",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": [
"iam:PassRole"
]
},
"viewbudget": {
"name": "ViewBudget",
"description": "Grants permission to view budgets and budget details",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "budget",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
}
}