@cloud-copilot/iam-data

{ "batchchecklayeravailability": { "name": "BatchCheckLayerAvailability", "description": "Grants permission to check the availability of multiple image layers in a specified registry and repository", "accessLevel": "Read", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchdeleteimage": { "name": "BatchDeleteImage", "description": "Grants permission to delete a list of specified images within a specified repository", "accessLevel": "Write", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchgetimage": { "name": "BatchGetImage", "description": "Grants permission to get detailed information for specified images within a specified repository", "accessLevel": "Read", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchgetrepositoryscanningconfiguration": { "name": "BatchGetRepositoryScanningConfiguration", "description": "Grants permission to retrieve repository scanning configuration for a list of repositories", "accessLevel": "Read", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchimportupstreamimage": { "name": "BatchImportUpstreamImage", "isPermissionOnly": true, "description": "Grants permission to retrieve the image from the upstream registry and import it to your private registry", "accessLevel": "Write", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "completelayerupload": { "name": "CompleteLayerUpload", "description": "Grants permission to inform Amazon ECR that the image layer upload for a specified registry, repository name, and upload ID, has completed", "accessLevel": "Write", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createpullthroughcacherule": { "name": "CreatePullThroughCacheRule", "description": "Grants permission to create new pull-through cache rule", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [ "iam:CreateServiceLinkedRole" ] }, "createrepository": { "name": "CreateRepository", "description": "Grants permission to create an image repository", "accessLevel": "Write", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [ "ecr:TagResource" ] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createrepositorycreationtemplate": { "name": "CreateRepositoryCreationTemplate", "description": "Grants permission to create the repository creation template", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [ "ecr:CreateRepository", "ecr:PutLifecyclePolicy", "ecr:SetRepositoryPolicy", "iam:CreateServiceLinkedRole", "iam:PassRole" ] }, "deletelifecyclepolicy": { "name": "DeleteLifecyclePolicy", "description": "Grants permission to delete the specified lifecycle policy", "accessLevel": "Write", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletepullthroughcacherule": { "name": "DeletePullThroughCacheRule", "description": "Grants permission to delete the pull-through cache rule", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleteregistrypolicy": { "name": "DeleteRegistryPolicy", "description": "Grants permission to delete the registry policy", "accessLevel": "Permissions management", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleterepository": { "name": "DeleteRepository", "description": "Grants permission to delete an existing image repository", "accessLevel": "Write", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleterepositorycreationtemplate": { "name": "DeleteRepositoryCreationTemplate", "description": "Grants permission to delete the repository creation template", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleterepositorypolicy": { "name": "DeleteRepositoryPolicy", "description": "Grants permission to delete the repository policy from a specified repository", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeimagereplicationstatus": { "name": "DescribeImageReplicationStatus", "description": "Grants permission to retrieve replication status about an image in a registry, including failure reason if replication fails", "accessLevel": "Read", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeimagescanfindings": { "name": "DescribeImageScanFindings", "description": "Grants permission to describe the image scan findings for the specified image", "accessLevel": "Read", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeimages": { "name": "DescribeImages", "description": "Grants permission to get metadata about the images in a repository, including image size, image tags, and creation date", "accessLevel": "List", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describepullthroughcacherules": { "name": "DescribePullThroughCacheRules", "description": "Grants permission to describe the pull-through cache rules", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeregistry": { "name": "DescribeRegistry", "description": "Grants permission to describe the registry settings", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describerepositories": { "name": "DescribeRepositories", "description": "Grants permission to describe image repositories in a registry", "accessLevel": "Read", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describerepositorycreationtemplates": { "name": "DescribeRepositoryCreationTemplates", "description": "Grants permission to describe the repository creation template", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getaccountsetting": { "name": "GetAccountSetting", "description": "Grants permission to retrieve account settings", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [ "ecr:AccountSetting" ], "dependentActions": [] }, "getauthorizationtoken": { "name": "GetAuthorizationToken", "description": "Grants permission to retrieve a token that is valid for a specified registry for 12 hours", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getdownloadurlforlayer": { "name": "GetDownloadUrlForLayer", "description": "Grants permission to retrieve the download URL corresponding to an image layer", "accessLevel": "Read", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getimagecopystatus": { "name": "GetImageCopyStatus", "isPermissionOnly": true, "description": "Grants permission to retrieve the status about an image copy", "accessLevel": "Read", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getlifecyclepolicy": { "name": "GetLifecyclePolicy", "description": "Grants permission to retrieve the specified lifecycle policy", "accessLevel": "Read", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getlifecyclepolicypreview": { "name": "GetLifecyclePolicyPreview", "description": "Grants permission to retrieve the results of the specified lifecycle policy preview request", "accessLevel": "Read", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getregistrypolicy": { "name": "GetRegistryPolicy", "description": "Grants permission to retrieve the registry policy", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getregistryscanningconfiguration": { "name": "GetRegistryScanningConfiguration", "description": "Grants permission to retrieve registry scanning configuration", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getrepositorypolicy": { "name": "GetRepositoryPolicy", "description": "Grants permission to retrieve the repository policy for a specified repository", "accessLevel": "Read", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "initiatelayerupload": { "name": "InitiateLayerUpload", "description": "Grants permission to notify Amazon ECR that you intend to upload an image layer", "accessLevel": "Write", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listimages": { "name": "ListImages", "description": "Grants permission to list all the image IDs for a given repository", "accessLevel": "List", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to list the tags for an Amazon ECR resource", "accessLevel": "Read", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "putaccountsetting": { "name": "PutAccountSetting", "description": "Grants permission to update account settings", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "ecr:AccountSetting" ], "dependentActions": [] }, "putimage": { "name": "PutImage", "description": "Grants permission to create or update the image manifest associated with an image", "accessLevel": "Write", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putimagescanningconfiguration": { "name": "PutImageScanningConfiguration", "description": "Grants permission to update the image scanning configuration for a repository", "accessLevel": "Write", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putimagetagmutability": { "name": "PutImageTagMutability", "description": "Grants permission to update the image tag mutability settings for a repository", "accessLevel": "Write", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putlifecyclepolicy": { "name": "PutLifecyclePolicy", "description": "Grants permission to create or update a lifecycle policy", "accessLevel": "Write", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putregistrypolicy": { "name": "PutRegistryPolicy", "description": "Grants permission to update the registry policy", "accessLevel": "Permissions management", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "putregistryscanningconfiguration": { "name": "PutRegistryScanningConfiguration", "description": "Grants permission to update registry scanning configuration", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "putreplicationconfiguration": { "name": "PutReplicationConfiguration", "description": "Grants permission to update the replication configuration for the registry", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [ "iam:CreateServiceLinkedRole" ] }, "replicateimage": { "name": "ReplicateImage", "isPermissionOnly": true, "description": "Grants permission to replicate images to the destination registry", "accessLevel": "Write", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "setrepositorypolicy": { "name": "SetRepositoryPolicy", "description": "Grants permission to apply a repository policy on a specified repository to control access permissions", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "startimagescan": { "name": "StartImageScan", "description": "Grants permission to start an image scan", "accessLevel": "Write", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "startlifecyclepolicypreview": { "name": "StartLifecyclePolicyPreview", "description": "Grants permission to start a preview of the specified lifecycle policy", "accessLevel": "Write", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to tag an Amazon ECR resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to untag an Amazon ECR resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] }, "updatepullthroughcacherule": { "name": "UpdatePullThroughCacheRule", "description": "Grants permission to update the pull-through cache rule", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "updaterepositorycreationtemplate": { "name": "UpdateRepositoryCreationTemplate", "description": "Grants permission to update the repository creation template", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [ "ecr:CreateRepository", "ecr:PutLifecyclePolicy", "ecr:SetRepositoryPolicy", "iam:CreateServiceLinkedRole", "iam:PassRole" ] }, "uploadlayerpart": { "name": "UploadLayerPart", "description": "Grants permission to upload an image layer part to Amazon ECR", "accessLevel": "Write", "resourceTypes": [ { "name": "repository", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "validatepullthroughcacherule": { "name": "ValidatePullThroughCacheRule", "description": "Grants permission to validate the pull-through cache rule", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] } }