@cloud-copilot/iam-data
Version:
654 lines • 19.9 kB
JSON
{
"addtagstoonpremisesinstances": {
"name": "AddTagsToOnPremisesInstances",
"description": "Grants permission to add tags to one or more on-premises instances",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "instance",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"batchgetapplicationrevisions": {
"name": "BatchGetApplicationRevisions",
"description": "Grants permission to get information about one or more application revisions",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "application",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"batchgetapplications": {
"name": "BatchGetApplications",
"description": "Grants permission to get information about multiple applications associated with the IAM user",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "application",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"batchgetdeploymentgroups": {
"name": "BatchGetDeploymentGroups",
"description": "Grants permission to get information about one or more deployment groups",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "deploymentgroup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"batchgetdeploymentinstances": {
"name": "BatchGetDeploymentInstances",
"description": "Grants permission to get information about one or more instance that are part of a deployment group",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "deploymentgroup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"batchgetdeploymenttargets": {
"name": "BatchGetDeploymentTargets",
"description": "Grants permission to return an array of one or more targets associated with a deployment. This method works with all compute types and should be used instead of the deprecated BatchGetDeploymentInstances. The maximum number of targets that can be returned is 25",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"batchgetdeployments": {
"name": "BatchGetDeployments",
"description": "Grants permission to get information about multiple deployments associated with the IAM user",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "deploymentgroup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"batchgetonpremisesinstances": {
"name": "BatchGetOnPremisesInstances",
"description": "Grants permission to get information about one or more on-premises instances",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "instance",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"continuedeployment": {
"name": "ContinueDeployment",
"description": "Grants permission to start the process of rerouting traffic from instances in the original environment to instances in thereplacement environment without waiting for a specified wait time to elapse",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"createapplication": {
"name": "CreateApplication",
"description": "Grants permission to create an application associated with the IAM user",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "application",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createcloudformationdeployment": {
"name": "CreateCloudFormationDeployment",
"isPermissionOnly": true,
"description": "Grants permission to create CloudFormation deployment to cooperate ochestration for a CloudFormation stack update",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"createdeployment": {
"name": "CreateDeployment",
"description": "Grants permission to create a deployment for an application associated with the IAM user",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "deploymentgroup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createdeploymentconfig": {
"name": "CreateDeploymentConfig",
"description": "Grants permission to create a custom deployment configuration associated with the IAM user",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "deploymentconfig",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createdeploymentgroup": {
"name": "CreateDeploymentGroup",
"description": "Grants permission to create a deployment group for an application associated with the IAM user",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "deploymentgroup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"deleteapplication": {
"name": "DeleteApplication",
"description": "Grants permission to delete an application associated with the IAM user",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "application",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletedeploymentconfig": {
"name": "DeleteDeploymentConfig",
"description": "Grants permission to delete a custom deployment configuration associated with the IAM user",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "deploymentconfig",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletedeploymentgroup": {
"name": "DeleteDeploymentGroup",
"description": "Grants permission to delete a deployment group for an application associated with the IAM user",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "deploymentgroup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletegithubaccounttoken": {
"name": "DeleteGitHubAccountToken",
"description": "Grants permission to delete a GitHub account connection",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deleteresourcesbyexternalid": {
"name": "DeleteResourcesByExternalId",
"description": "Grants permission to delete resources associated with the given external Id",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deregisteronpremisesinstance": {
"name": "DeregisterOnPremisesInstance",
"description": "Grants permission to deregister an on-premises instance",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "instance",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getapplication": {
"name": "GetApplication",
"description": "Grants permission to get information about a single application associated with the IAM user",
"accessLevel": "List",
"resourceTypes": [
{
"name": "application",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getapplicationrevision": {
"name": "GetApplicationRevision",
"description": "Grants permission to get information about a single application revision for an application associated with the IAM user",
"accessLevel": "List",
"resourceTypes": [
{
"name": "application",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getdeployment": {
"name": "GetDeployment",
"description": "Grants permission to get information about a single deployment to a deployment group for an application associated with the IAM user",
"accessLevel": "List",
"resourceTypes": [
{
"name": "deploymentgroup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getdeploymentconfig": {
"name": "GetDeploymentConfig",
"description": "Grants permission to get information about a single deployment configuration associated with the IAM user",
"accessLevel": "List",
"resourceTypes": [
{
"name": "deploymentconfig",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getdeploymentgroup": {
"name": "GetDeploymentGroup",
"description": "Grants permission to get information about a single deployment group for an application associated with the IAM user",
"accessLevel": "List",
"resourceTypes": [
{
"name": "deploymentgroup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getdeploymentinstance": {
"name": "GetDeploymentInstance",
"description": "Grants permission to get information about a single instance in a deployment associated with the IAM user",
"accessLevel": "List",
"resourceTypes": [
{
"name": "deploymentgroup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getdeploymenttarget": {
"name": "GetDeploymentTarget",
"description": "Grants permission to return information about a deployment target",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"getonpremisesinstance": {
"name": "GetOnPremisesInstance",
"description": "Grants permission to get information about a single on-premises instance",
"accessLevel": "List",
"resourceTypes": [
{
"name": "instance",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listapplicationrevisions": {
"name": "ListApplicationRevisions",
"description": "Grants permission to get information about all application revisions for an application associated with the IAM user",
"accessLevel": "List",
"resourceTypes": [
{
"name": "application",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listapplications": {
"name": "ListApplications",
"description": "Grants permission to get information about all applications associated with the IAM user",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listdeploymentconfigs": {
"name": "ListDeploymentConfigs",
"description": "Grants permission to get information about all deployment configurations associated with the IAM user",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listdeploymentgroups": {
"name": "ListDeploymentGroups",
"description": "Grants permission to get information about all deployment groups for an application associated with the IAM user",
"accessLevel": "List",
"resourceTypes": [
{
"name": "application",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listdeploymentinstances": {
"name": "ListDeploymentInstances",
"description": "Grants permission to get information about all instances in a deployment associated with the IAM user",
"accessLevel": "List",
"resourceTypes": [
{
"name": "deploymentgroup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listdeploymenttargets": {
"name": "ListDeploymentTargets",
"description": "Grants permission to return an array of target IDs that are associated a deployment",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listdeployments": {
"name": "ListDeployments",
"description": "Grants permission to get information about all deployments to a deployment group associated with the IAM user, or to get all deployments associated with the IAM user",
"accessLevel": "List",
"resourceTypes": [
{
"name": "deploymentgroup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listgithubaccounttokennames": {
"name": "ListGitHubAccountTokenNames",
"description": "Grants permission to list the names of stored connections to GitHub accounts",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listonpremisesinstances": {
"name": "ListOnPremisesInstances",
"description": "Grants permission to get a list of one or more on-premises instance names",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listtagsforresource": {
"name": "ListTagsForResource",
"description": "Grants permission to return a list of tags for the resource identified by a specified ARN. Tags are used to organize and categorize your CodeDeploy resources",
"accessLevel": "List",
"resourceTypes": [
{
"name": "application",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "deploymentgroup",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"putlifecycleeventhookexecutionstatus": {
"name": "PutLifecycleEventHookExecutionStatus",
"description": "Grants permission to notify a lifecycle event hook execution status for associated deployment with the IAM user",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"registerapplicationrevision": {
"name": "RegisterApplicationRevision",
"description": "Grants permission to register information about an application revision for an application associated with the IAM user",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "application",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"registeronpremisesinstance": {
"name": "RegisterOnPremisesInstance",
"description": "Grants permission to register an on-premises instance",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "instance",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"removetagsfromonpremisesinstances": {
"name": "RemoveTagsFromOnPremisesInstances",
"description": "Grants permission to remove tags from one or more on-premises instances",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "instance",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"skipwaittimeforinstancetermination": {
"name": "SkipWaitTimeForInstanceTermination",
"description": "Grants permission to override any specified wait time and starts terminating instances immediately after the traffic routing is complete. This action applies to blue-green deployments only",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"stopdeployment": {
"name": "StopDeployment",
"description": "Grants permission to stop a deployment",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"tagresource": {
"name": "TagResource",
"description": "Grants permission to associate the list of tags in the input Tags parameter with the resource identified by the ResourceArn input parameter",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "application",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "deploymentgroup",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"untagresource": {
"name": "UntagResource",
"description": "Grants permission to disassociate a resource from a list of tags. The resource is identified by the ResourceArn input parameter. The tags are identfied by the list of keys in the TagKeys input parameter",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "application",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "deploymentgroup",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys"
],
"dependentActions": []
},
"updateapplication": {
"name": "UpdateApplication",
"description": "Grants permission to update an application",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "application",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updatedeploymentgroup": {
"name": "UpdateDeploymentGroup",
"description": "Grants permission to change information about a single deployment group for an application associated with the IAM user",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "deploymentgroup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
}
}