@cloud-copilot/iam-data

{ "batchgetservicelevelindicatorreport": { "name": "BatchGetServiceLevelIndicatorReport", "description": "Grants permission to batch get service level indicator report", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "batchgetservicelevelobjectivebudgetreport": { "name": "BatchGetServiceLevelObjectiveBudgetReport", "description": "Grants permission to batch retrieve a service level objective budget report", "accessLevel": "Read", "resourceTypes": [ { "name": "slo", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createservicelevelobjective": { "name": "CreateServiceLevelObjective", "description": "Grants permission to create a service level objective", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "deletealarms": { "name": "DeleteAlarms", "description": "Grants permission to delete a collection of alarms", "accessLevel": "Write", "resourceTypes": [ { "name": "alarm", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteanomalydetector": { "name": "DeleteAnomalyDetector", "description": "Grants permission to delete the specified anomaly detection model from your account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deletedashboards": { "name": "DeleteDashboards", "description": "Grants permission to delete all CloudWatch dashboards that you specify", "accessLevel": "Write", "resourceTypes": [ { "name": "dashboard", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteinsightrules": { "name": "DeleteInsightRules", "description": "Grants permission to delete a collection of insight rules", "accessLevel": "Write", "resourceTypes": [ { "name": "insight-rule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletemetricstream": { "name": "DeleteMetricStream", "description": "Grants permission to delete the CloudWatch metric stream that you specify", "accessLevel": "Write", "resourceTypes": [ { "name": "metric-stream", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteservicelevelobjective": { "name": "DeleteServiceLevelObjective", "description": "Grants permission to delete a service level objective", "accessLevel": "Write", "resourceTypes": [ { "name": "slo", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describealarmhistory": { "name": "DescribeAlarmHistory", "description": "Grants permission to retrieve the history for the specified alarm", "accessLevel": "Read", "resourceTypes": [ { "name": "alarm", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describealarms": { "name": "DescribeAlarms", "description": "Grants permission to describe all alarms, currently owned by the user's account", "accessLevel": "Read", "resourceTypes": [ { "name": "alarm", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describealarmsformetric": { "name": "DescribeAlarmsForMetric", "description": "Grants permission to describe all alarms configured on the specified metric, currently owned by the user's account", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeanomalydetectors": { "name": "DescribeAnomalyDetectors", "description": "Grants permission to list the anomaly detection models that you have created in your account", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeinsightrules": { "name": "DescribeInsightRules", "description": "Grants permission to describe all insight rules, currently owned by the user's account", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "disablealarmactions": { "name": "DisableAlarmActions", "description": "Grants permission to disable actions for a collection of alarms", "accessLevel": "Write", "resourceTypes": [ { "name": "alarm", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "disableinsightrules": { "name": "DisableInsightRules", "description": "Grants permission to disable a collection of insight rules", "accessLevel": "Write", "resourceTypes": [ { "name": "insight-rule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "enablealarmactions": { "name": "EnableAlarmActions", "description": "Grants permission to enable actions for a collection of alarms", "accessLevel": "Write", "resourceTypes": [ { "name": "alarm", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "enableinsightrules": { "name": "EnableInsightRules", "description": "Grants permission to enable a collection of insight rules", "accessLevel": "Write", "resourceTypes": [ { "name": "insight-rule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "enabletopologydiscovery": { "name": "EnableTopologyDiscovery", "description": "Grants permission to enable a CloudWatch topology discovery", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "generatequery": { "name": "GenerateQuery", "description": "Grants permission to generate a Metrics Insights or Logs Insights query string from a natural language prompt", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "generatequeryresultssummary": { "name": "GenerateQueryResultsSummary", "description": "Grants permission to generate a summary of CloudWatch LogInsights query results in natural language using generative AI", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getdashboard": { "name": "GetDashboard", "description": "Grants permission to display the details of the CloudWatch dashboard you specify", "accessLevel": "Read", "resourceTypes": [ { "name": "dashboard", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getinsightrulereport": { "name": "GetInsightRuleReport", "description": "Grants permission to return the top-N report of unique contributors over a time range for a given insight rule", "accessLevel": "Read", "resourceTypes": [ { "name": "insight-rule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getmetricdata": { "name": "GetMetricData", "description": "Grants permission to retrieve batch amounts of CloudWatch metric data and perform metric math on retrieved data", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getmetricstatistics": { "name": "GetMetricStatistics", "description": "Grants permission to retrieve statistics for the specified metric", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getmetricstream": { "name": "GetMetricStream", "description": "Grants permission to return the details of a CloudWatch metric stream", "accessLevel": "Read", "resourceTypes": [ { "name": "metric-stream", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getmetricwidgetimage": { "name": "GetMetricWidgetImage", "description": "Grants permission to retrieve snapshots of metric widgets", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getservice": { "name": "GetService", "description": "Grants permission to retrieve information about a service", "accessLevel": "Read", "resourceTypes": [ { "name": "service", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getservicedata": { "name": "GetServiceData", "isPermissionOnly": true, "description": "Grants permission to retrieve service data", "accessLevel": "Read", "resourceTypes": [ { "name": "service", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getservicelevelobjective": { "name": "GetServiceLevelObjective", "description": "Grants permission to retrieve information about service level objective", "accessLevel": "Read", "resourceTypes": [ { "name": "slo", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "gettopologydiscoverystatus": { "name": "GetTopologyDiscoveryStatus", "isPermissionOnly": true, "description": "Grants permission to retrieve a CloudWatch topology discovery status", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "gettopologymap": { "name": "GetTopologyMap", "description": "Grants permission to retrieve a CloudWatch topology map", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "link": { "name": "Link", "isPermissionOnly": true, "description": "Grants permission to share CloudWatch resources with a monitoring account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listdashboards": { "name": "ListDashboards", "description": "Grants permission to return a list of all CloudWatch dashboards in your account", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listentitiesformetric": { "name": "ListEntitiesForMetric", "isPermissionOnly": true, "description": "Grants permission to retrieve all the entities that are emitting a given metric", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listmanagedinsightrules": { "name": "ListManagedInsightRules", "description": "Grants permission to list available managed Insight Rules for a given Resource ARN", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "cloudwatch:requestManagedResourceARNs" ], "dependentActions": [] }, "listmetricstreams": { "name": "ListMetricStreams", "description": "Grants permission to return a list of all CloudWatch metric streams in your account", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listmetrics": { "name": "ListMetrics", "description": "Grants permission to retrieve a list of valid metrics stored for the AWS account owner", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listservicelevelobjectives": { "name": "ListServiceLevelObjectives", "description": "Grants permission to list service level objectives", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listservices": { "name": "ListServices", "description": "Grants permission to list services", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to list tags for an Amazon CloudWatch resource", "accessLevel": "List", "resourceTypes": [ { "name": "alarm", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "insight-rule", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "slo", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [], "scenarios": [ { "name": "CloudWatch-Alarm", "resourceTypes": [ { "name": "alarm", "required": true } ] }, { "name": "CloudWatch-InsightRule", "resourceTypes": [ { "name": "insight-rule", "required": true } ] }, { "name": "CloudWatch-ServiceLevelObjective", "resourceTypes": [ { "name": "slo", "required": true } ] } ] }, "putanomalydetector": { "name": "PutAnomalyDetector", "description": "Grants permission to create or update an anomaly detection model for a CloudWatch metric", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "putcompositealarm": { "name": "PutCompositeAlarm", "description": "Grants permission to create or update a composite alarm", "accessLevel": "Write", "resourceTypes": [ { "name": "alarm", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "cloudwatch:AlarmActions" ], "dependentActions": [] }, "putdashboard": { "name": "PutDashboard", "description": "Grants permission to create a CloudWatch dashboard, or update an existing dashboard if it already exists", "accessLevel": "Write", "resourceTypes": [ { "name": "dashboard", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putinsightrule": { "name": "PutInsightRule", "description": "Grants permission to create a new insight rule or replace an existing insight rule", "accessLevel": "Write", "resourceTypes": [ { "name": "insight-rule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "cloudwatch:requestInsightRuleLogGroups" ], "dependentActions": [] }, "putmanagedinsightrules": { "name": "PutManagedInsightRules", "description": "Grants permission to create managed Insight Rules", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "cloudwatch:requestManagedResourceARNs" ], "dependentActions": [] }, "putmetricalarm": { "name": "PutMetricAlarm", "description": "Grants permission to create or update an alarm and associates it with the specified Amazon CloudWatch metric", "accessLevel": "Write", "resourceTypes": [ { "name": "alarm", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "cloudwatch:AlarmActions" ], "dependentActions": [] }, "putmetricdata": { "name": "PutMetricData", "description": "Grants permission to publish metric data points to Amazon CloudWatch", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "cloudwatch:namespace" ], "dependentActions": [] }, "putmetricstream": { "name": "PutMetricStream", "description": "Grants permission to create a CloudWatch metric stream, or update an existing metric stream if it already exists", "accessLevel": "Write", "resourceTypes": [ { "name": "metric-stream", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "setalarmstate": { "name": "SetAlarmState", "description": "Grants permission to temporarily set the state of an alarm for testing purposes", "accessLevel": "Write", "resourceTypes": [ { "name": "alarm", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "startmetricstreams": { "name": "StartMetricStreams", "description": "Grants permission to start all CloudWatch metric streams that you specify", "accessLevel": "Write", "resourceTypes": [ { "name": "metric-stream", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "stopmetricstreams": { "name": "StopMetricStreams", "description": "Grants permission to stop all CloudWatch metric streams that you specify", "accessLevel": "Write", "resourceTypes": [ { "name": "metric-stream", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to add tags to an Amazon CloudWatch resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "alarm", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "insight-rule", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "slo", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [], "scenarios": [ { "name": "CloudWatch-Alarm", "resourceTypes": [ { "name": "alarm", "required": true } ] }, { "name": "CloudWatch-InsightRule", "resourceTypes": [ { "name": "insight-rule", "required": true } ] }, { "name": "CloudWatch-ServiceLevelObjective", "resourceTypes": [ { "name": "slo", "required": true } ] } ] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to remove a tag from an Amazon CloudWatch resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "alarm", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "insight-rule", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "slo", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [], "scenarios": [ { "name": "CloudWatch-Alarm", "resourceTypes": [ { "name": "alarm", "required": true } ] }, { "name": "CloudWatch-InsightRule", "resourceTypes": [ { "name": "insight-rule", "required": true } ] }, { "name": "CloudWatch-ServiceLevelObjective", "resourceTypes": [ { "name": "slo", "required": true } ] } ] }, "updateservicelevelobjective": { "name": "UpdateServiceLevelObjective", "description": "Grants permission to update a service level objective", "accessLevel": "Write", "resourceTypes": [ { "name": "slo", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] } }