@cloud-copilot/iam-data
Version:
262 lines • 7.08 kB
JSON
{
"associaterepository": {
"name": "AssociateRepository",
"description": "Grants permission to associates a repository with Amazon CodeGuru Reviewer",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": [
"codecommit:GetRepository",
"codecommit:ListRepositories",
"codecommit:TagResource",
"codestar-connections:PassConnection",
"events:PutRule",
"events:PutTargets",
"iam:CreateServiceLinkedRole",
"s3:CreateBucket",
"s3:ListBucket",
"s3:PutBucketPolicy",
"s3:PutLifecycleConfiguration"
]
},
"createcodereview": {
"name": "CreateCodeReview",
"description": "Grants permission to create a code review",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "association",
"required": true,
"conditionKeys": [],
"dependentActions": [
"s3:GetObject"
]
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"createconnectiontoken": {
"name": "CreateConnectionToken",
"isPermissionOnly": true,
"description": "Grants permission to perform webbased oauth handshake for 3rd party providers",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"describecodereview": {
"name": "DescribeCodeReview",
"description": "Grants permission to describe a code review",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "association",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"describerecommendationfeedback": {
"name": "DescribeRecommendationFeedback",
"description": "Grants permission to describe a recommendation feedback on a code review",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "association",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"describerepositoryassociation": {
"name": "DescribeRepositoryAssociation",
"description": "Grants permission to describe a repository association",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "association",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"disassociaterepository": {
"name": "DisassociateRepository",
"description": "Grants permission to disassociate a repository with Amazon CodeGuru Reviewer",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "association",
"required": true,
"conditionKeys": [],
"dependentActions": [
"codecommit:UntagResource",
"events:DeleteRule",
"events:RemoveTargets"
]
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"getmetricsdata": {
"name": "GetMetricsData",
"isPermissionOnly": true,
"description": "Grants permission to view pull request metrics in console",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listcodereviews": {
"name": "ListCodeReviews",
"description": "Grants permission to list summary of code reviews",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listrecommendationfeedback": {
"name": "ListRecommendationFeedback",
"description": "Grants permission to list summary of recommendation feedback on a code review",
"accessLevel": "List",
"resourceTypes": [
{
"name": "association",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"listrecommendations": {
"name": "ListRecommendations",
"description": "Grants permission to list summary of recommendations on a code review",
"accessLevel": "List",
"resourceTypes": [
{
"name": "association",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"listrepositoryassociations": {
"name": "ListRepositoryAssociations",
"description": "Grants permission to list summary of repository associations",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listtagsforresource": {
"name": "ListTagsForResource",
"description": "Grants permission to list the resource attached to a associated repository ARN",
"accessLevel": "List",
"resourceTypes": [
{
"name": "association",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"listthirdpartyrepositories": {
"name": "ListThirdPartyRepositories",
"isPermissionOnly": true,
"description": "Grants permission to list 3rd party providers repositories in console",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"putrecommendationfeedback": {
"name": "PutRecommendationFeedback",
"description": "Grants permission to put feedback for a recommendation on a code review",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "association",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"tagresource": {
"name": "TagResource",
"description": "Grants permission to attach resource tags to an associated repository ARN",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "association",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"untagresource": {
"name": "UnTagResource",
"description": "Grants permission to disassociate resource tags from an associated repository ARN",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "association",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys"
],
"dependentActions": []
}
}