UNPKG

@cloud-copilot/iam-data

Version:
350 lines 9.45 kB
{ "batchchecklayeravailability": { "name": "BatchCheckLayerAvailability", "description": "Grants permission to check the availability of multiple image layers in a specified registry and repository", "accessLevel": "Read", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchdeleteimage": { "name": "BatchDeleteImage", "description": "Grants permission to delete a list of specified images within a specified repository", "accessLevel": "Write", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "completelayerupload": { "name": "CompleteLayerUpload", "description": "Grants permission to inform Amazon ECR that the image layer upload for a specified registry, repository name, and upload ID, has completed", "accessLevel": "Write", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createrepository": { "name": "CreateRepository", "description": "Grants permission to create an image repository", "accessLevel": "Write", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [ "ecr-public:TagResource" ] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "deleterepository": { "name": "DeleteRepository", "description": "Grants permission to delete an existing image repository", "accessLevel": "Write", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleterepositorypolicy": { "name": "DeleteRepositoryPolicy", "description": "Grants permission to delete the repository policy from a specified repository", "accessLevel": "Write", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeimagetags": { "name": "DescribeImageTags", "description": "Grants permission to describe all the image tags for a given repository", "accessLevel": "List", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeimages": { "name": "DescribeImages", "description": "Grants permission to get metadata about the images in a repository, including image size, image tags, and creation date", "accessLevel": "Read", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeregistries": { "name": "DescribeRegistries", "description": "Grants permission to retrieve the catalog data associated with a registry", "accessLevel": "List", "resourceTypes": [ { "name": "registry", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describerepositories": { "name": "DescribeRepositories", "description": "Grants permission to describe image repositories in a registry", "accessLevel": "List", "resourceTypes": [ { "name": "repository", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getauthorizationtoken": { "name": "GetAuthorizationToken", "description": "Grants permission to retrieve a token that is valid for a specified registry for 12 hours", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getregistrycatalogdata": { "name": "GetRegistryCatalogData", "description": "Grants permission to retrieve the catalog data associated with a registry", "accessLevel": "Read", "resourceTypes": [ { "name": "registry", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getrepositorycatalogdata": { "name": "GetRepositoryCatalogData", "description": "Grants permission to retrieve the catalog data associated with a repository", "accessLevel": "Read", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getrepositorypolicy": { "name": "GetRepositoryPolicy", "description": "Grants permission to retrieve the repository policy for a specified repository", "accessLevel": "Read", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "initiatelayerupload": { "name": "InitiateLayerUpload", "description": "Grants permission to notify Amazon ECR that you intend to upload an image layer", "accessLevel": "Write", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to list the tags for an Amazon ECR resource", "accessLevel": "Read", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putimage": { "name": "PutImage", "description": "Grants permission to create or update the image manifest associated with an image", "accessLevel": "Write", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putregistrycatalogdata": { "name": "PutRegistryCatalogData", "description": "Grants permission to create and update the catalog data associated with a registry", "accessLevel": "Write", "resourceTypes": [ { "name": "registry", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putrepositorycatalogdata": { "name": "PutRepositoryCatalogData", "description": "Grants permission to update the catalog data associated with a repository", "accessLevel": "Write", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "setrepositorypolicy": { "name": "SetRepositoryPolicy", "description": "Grants permission to apply a repository policy on a specified repository to control access permissions", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to tag an Amazon ECR resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to untag an Amazon ECR resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] }, "uploadlayerpart": { "name": "UploadLayerPart", "description": "Grants permission to upload an image layer part to Amazon ECR Public", "accessLevel": "Write", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] } }