@cloud-copilot/iam-data
Version:
282 lines • 7.72 kB
JSON
{
"bulkpublish": {
"name": "BulkPublish",
"description": "Grants permission to initiate a bulk publish of all existing datasets for an Identity Pool to the configured stream",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "identitypool",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletedataset": {
"name": "DeleteDataset",
"description": "Grants permission to delete a specific dataset",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "dataset",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describedataset": {
"name": "DescribeDataset",
"description": "Grants permission to get metadata about a dataset by identity and dataset name",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "dataset",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeidentitypoolusage": {
"name": "DescribeIdentityPoolUsage",
"description": "Grants permission to get usage details (for example, data storage) about a particular identity pool",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "identitypool",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeidentityusage": {
"name": "DescribeIdentityUsage",
"description": "Grants permission to get usage information for an identity, including number of datasets and data usage",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "identity",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getbulkpublishdetails": {
"name": "GetBulkPublishDetails",
"description": "Grants permission to get the status of the last BulkPublish operation for an identity pool",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "identitypool",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getcognitoevents": {
"name": "GetCognitoEvents",
"description": "Grants permission to get the events and the corresponding Lambda functions associated with an identity pool",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "identitypool",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getidentitypoolconfiguration": {
"name": "GetIdentityPoolConfiguration",
"description": "Grants permission to get the configuration settings of an identity pool",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "identitypool",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listdatasets": {
"name": "ListDatasets",
"description": "Grants permission to list datasets for an identity",
"accessLevel": "List",
"resourceTypes": [
{
"name": "dataset",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listidentitypoolusage": {
"name": "ListIdentityPoolUsage",
"description": "Grants permission to get a list of identity pools registered with Cognito",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "identitypool",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listrecords": {
"name": "ListRecords",
"description": "Grants permission to get paginated records, optionally changed after a particular sync count for a dataset and identity",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "dataset",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"queryrecords": {
"name": "QueryRecords",
"isPermissionOnly": true,
"description": "Grants permission to query records",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"registerdevice": {
"name": "RegisterDevice",
"description": "Grants permission to register a device to receive push sync notifications",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "identity",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"setcognitoevents": {
"name": "SetCognitoEvents",
"description": "Grants permission to set the AWS Lambda function for a given event type for an identity pool",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "identitypool",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"setdatasetconfiguration": {
"name": "SetDatasetConfiguration",
"isPermissionOnly": true,
"description": "Grants permission to configure datasets",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "dataset",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"setidentitypoolconfiguration": {
"name": "SetIdentityPoolConfiguration",
"description": "Grants permission to set the necessary configuration for push sync",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "identitypool",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"subscribetodataset": {
"name": "SubscribeToDataset",
"description": "Grants permission to subscribe to receive notifications when a dataset is modified by another device",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "dataset",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"unsubscribefromdataset": {
"name": "UnsubscribeFromDataset",
"description": "Grants permission to unsubscribe from receiving notifications when a dataset is modified by another device",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "dataset",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updaterecords": {
"name": "UpdateRecords",
"description": "Grants permission to post updates to records and add and delete records for a dataset and user",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "dataset",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
}
}