UNPKG

@cloud-copilot/iam-data

Version:
957 lines 25.7 kB
{ "addleaderboardaccesspermission": { "name": "AddLeaderboardAccessPermission", "isPermissionOnly": true, "description": "Grants permission to add access for a private leaderboard", "accessLevel": "Write", "resourceTypes": [ { "name": "leaderboard", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "admindescribeaccountkey": { "name": "AdminDescribeAccountKey", "isPermissionOnly": true, "description": "Grants permission to retrieve information of the KMS key that the user currently has assigned to their account", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "admingetaccountconfig": { "name": "AdminGetAccountConfig", "isPermissionOnly": true, "description": "Grants permission to get current admin multiuser configuration for this account", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "adminlistassociatedresources": { "name": "AdminListAssociatedResources", "isPermissionOnly": true, "description": "Grants permission to list all deepracer users with their associated resources created under this account", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "adminlistassociatedusers": { "name": "AdminListAssociatedUsers", "isPermissionOnly": true, "description": "Grants permission to list user data for all users associated with this account", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "adminmanageuser": { "name": "AdminManageUser", "isPermissionOnly": true, "description": "Grants permission to manage a user associated with this account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "adminsetaccountconfig": { "name": "AdminSetAccountConfig", "isPermissionOnly": true, "description": "Grants permission to set configuration options for this account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "adminupdateaccountkey": { "name": "AdminUpdateAccountKey", "isPermissionOnly": true, "description": "Grants permission to update the KMS key that is assigned to the user's account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "clonereinforcementlearningmodel": { "name": "CloneReinforcementLearningModel", "isPermissionOnly": true, "description": "Grants permission to clone an existing DeepRacer model", "accessLevel": "Write", "resourceTypes": [ { "name": "reinforcement_learning_model", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "track", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "createcar": { "name": "CreateCar", "isPermissionOnly": true, "description": "Grants permission to create a DeepRacer car in your garage", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "createleaderboard": { "name": "CreateLeaderboard", "isPermissionOnly": true, "description": "Grants permission to create a leaderboard", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "createleaderboardaccesstoken": { "name": "CreateLeaderboardAccessToken", "isPermissionOnly": true, "description": "Grants permission to create an access token for a private leaderboard", "accessLevel": "Write", "resourceTypes": [ { "name": "leaderboard", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "createleaderboardsubmission": { "name": "CreateLeaderboardSubmission", "isPermissionOnly": true, "description": "Grants permission to submit a DeepRacer model to be evaluated for leaderboards", "accessLevel": "Write", "resourceTypes": [ { "name": "leaderboard", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "reinforcement_learning_model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "createreinforcementlearningmodel": { "name": "CreateReinforcementLearningModel", "isPermissionOnly": true, "description": "Grants permission to create ra einforcement learning model for DeepRacer", "accessLevel": "Write", "resourceTypes": [ { "name": "track", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "deleteleaderboard": { "name": "DeleteLeaderboard", "isPermissionOnly": true, "description": "Grants permission to delete a leaderboard", "accessLevel": "Write", "resourceTypes": [ { "name": "leaderboard", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "deletemodel": { "name": "DeleteModel", "isPermissionOnly": true, "description": "Grants permission to delete a DeepRacer model", "accessLevel": "Write", "resourceTypes": [ { "name": "reinforcement_learning_model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "editleaderboard": { "name": "EditLeaderboard", "isPermissionOnly": true, "description": "Grants permission to edit a leaderboard", "accessLevel": "Write", "resourceTypes": [ { "name": "leaderboard", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "getaccountconfig": { "name": "GetAccountConfig", "isPermissionOnly": true, "description": "Grants permission to get current multiuser configuration for this account", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "getalias": { "name": "GetAlias", "isPermissionOnly": true, "description": "Grants permission to retrieve the user's alias for submitting a DeepRacer model to leaderboards", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "getasseturl": { "name": "GetAssetUrl", "isPermissionOnly": true, "description": "Grants permission to download artifacts for an existing DeepRacer model", "accessLevel": "Read", "resourceTypes": [ { "name": "reinforcement_learning_model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "getcar": { "name": "GetCar", "isPermissionOnly": true, "description": "Grants permission to retrieve a specific DeepRacer car from your garage", "accessLevel": "Read", "resourceTypes": [ { "name": "car", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "getcars": { "name": "GetCars", "isPermissionOnly": true, "description": "Grants permission to view all the DeepRacer cars in your garage", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "getevaluation": { "name": "GetEvaluation", "isPermissionOnly": true, "description": "Grants permission to retrieve information about an existing DeepRacer model's evaluation jobs", "accessLevel": "Read", "resourceTypes": [ { "name": "evaluation_job", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "getlatestusersubmission": { "name": "GetLatestUserSubmission", "isPermissionOnly": true, "description": "Grants permission to retrieve information about how the latest submitted DeepRacer model for a user performed on a leaderboard", "accessLevel": "Read", "resourceTypes": [ { "name": "leaderboard", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "getleaderboard": { "name": "GetLeaderboard", "isPermissionOnly": true, "description": "Grants permission to retrieve information about leaderboards", "accessLevel": "Read", "resourceTypes": [ { "name": "leaderboard", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "getmodel": { "name": "GetModel", "isPermissionOnly": true, "description": "Grants permission to retrieve information about an existing DeepRacer model", "accessLevel": "Read", "resourceTypes": [ { "name": "reinforcement_learning_model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "getprivateleaderboard": { "name": "GetPrivateLeaderboard", "isPermissionOnly": true, "description": "Grants permission to retrieve information about private leaderboards", "accessLevel": "Read", "resourceTypes": [ { "name": "leaderboard", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "getrankedusersubmission": { "name": "GetRankedUserSubmission", "isPermissionOnly": true, "description": "Grants permission to retrieve information about the performance of a user's DeepRacer model that got placed on a leaderboard", "accessLevel": "Read", "resourceTypes": [ { "name": "leaderboard", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "gettrack": { "name": "GetTrack", "isPermissionOnly": true, "description": "Grants permission to retrieve information about DeepRacer tracks", "accessLevel": "Read", "resourceTypes": [ { "name": "track", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "gettrainingjob": { "name": "GetTrainingJob", "isPermissionOnly": true, "description": "Grants permission to retrieve information about an existing DeepRacer model's training job", "accessLevel": "Read", "resourceTypes": [ { "name": "training_job", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "importmodel": { "name": "ImportModel", "isPermissionOnly": true, "description": "Grants permission to import a reinforcement learning model for DeepRacer", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "listevaluations": { "name": "ListEvaluations", "isPermissionOnly": true, "description": "Grants permission to list a DeepRacer model's evaluation jobs", "accessLevel": "Read", "resourceTypes": [ { "name": "reinforcement_learning_model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "listleaderboardevaluations": { "name": "ListLeaderboardEvaluations", "isPermissionOnly": true, "description": "Grants permission to list all the user's leaderboard evaluation jobs for a leaderboard", "accessLevel": "Read", "resourceTypes": [ { "name": "leaderboard", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "listleaderboardsubmissions": { "name": "ListLeaderboardSubmissions", "isPermissionOnly": true, "description": "Grants permission to list all the DeepRacer model submissions of a user on a leaderboard", "accessLevel": "Read", "resourceTypes": [ { "name": "leaderboard", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "listleaderboards": { "name": "ListLeaderboards", "isPermissionOnly": true, "description": "Grants permission to list all the available leaderboards", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "listmodels": { "name": "ListModels", "isPermissionOnly": true, "description": "Grants permission to list all existing DeepRacer models", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "listprivateleaderboardparticipants": { "name": "ListPrivateLeaderboardParticipants", "isPermissionOnly": true, "description": "Grants permission to retrieve participant information about private leaderboards", "accessLevel": "Read", "resourceTypes": [ { "name": "leaderboard", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "listprivateleaderboards": { "name": "ListPrivateLeaderboards", "isPermissionOnly": true, "description": "Grants permission to list all the available private leaderboards", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "listsubscribedprivateleaderboards": { "name": "ListSubscribedPrivateLeaderboards", "isPermissionOnly": true, "description": "Grants permission to list all the subscribed private leaderboards", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to lists tag for a resource", "accessLevel": "Read", "resourceTypes": [ { "name": "car", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "evaluation_job", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "leaderboard", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "leaderboard_evaluation_job", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "reinforcement_learning_model", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "training_job", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "listtracks": { "name": "ListTracks", "isPermissionOnly": true, "description": "Grants permission to list all DeepRacer tracks", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listtrainingjobs": { "name": "ListTrainingJobs", "isPermissionOnly": true, "description": "Grants permission to list a DeepRacer model's training jobs", "accessLevel": "Read", "resourceTypes": [ { "name": "reinforcement_learning_model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "migratemodels": { "name": "MigrateModels", "isPermissionOnly": true, "description": "Grants permission to migrate previous reinforcement learning models for DeepRacer", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "performleaderboardoperation": { "name": "PerformLeaderboardOperation", "isPermissionOnly": true, "description": "Grants permission to performs the leaderboard operation mentioned in the operation attribute", "accessLevel": "Write", "resourceTypes": [ { "name": "leaderboard", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "removeleaderboardaccesspermission": { "name": "RemoveLeaderboardAccessPermission", "isPermissionOnly": true, "description": "Grants permission to remove access for a private leaderboard", "accessLevel": "Write", "resourceTypes": [ { "name": "leaderboard", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "setalias": { "name": "SetAlias", "isPermissionOnly": true, "description": "Grants permission to set the user's alias for submitting a DeepRacer model to leaderboards", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "startevaluation": { "name": "StartEvaluation", "isPermissionOnly": true, "description": "Grants permission to evaluate a DeepRacer model in a simulated environment", "accessLevel": "Write", "resourceTypes": [ { "name": "reinforcement_learning_model", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "track", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "stopevaluation": { "name": "StopEvaluation", "isPermissionOnly": true, "description": "Grants permission to stop DeepRacer model evaluations", "accessLevel": "Write", "resourceTypes": [ { "name": "evaluation_job", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "stoptrainingreinforcementlearningmodel": { "name": "StopTrainingReinforcementLearningModel", "isPermissionOnly": true, "description": "Grants permission to stop training a DeepRacer model", "accessLevel": "Write", "resourceTypes": [ { "name": "reinforcement_learning_model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to tag a resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "car", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "evaluation_job", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "leaderboard", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "leaderboard_evaluation_job", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "reinforcement_learning_model", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "training_job", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}", "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "testrewardfunction": { "name": "TestRewardFunction", "isPermissionOnly": true, "description": "Grants permission to test reward functions for correctness", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to untag a resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "car", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "evaluation_job", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "leaderboard", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "leaderboard_evaluation_job", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "reinforcement_learning_model", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "training_job", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys", "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] }, "updatecar": { "name": "UpdateCar", "isPermissionOnly": true, "description": "Grants permission to update a DeepRacer car in your garage", "accessLevel": "Write", "resourceTypes": [ { "name": "car", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "deepracer:UserToken", "deepracer:MultiUser" ], "dependentActions": [] } }