@cloud-copilot/iam-data
Version:
990 lines • 27.2 kB
JSON
{
"abortenvironmentupdate": {
"name": "AbortEnvironmentUpdate",
"description": "Grants permission to cancel in-progress environment configuration update or application version deployment",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "environment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
},
"addtags": {
"name": "AddTags",
"description": "Grants permission to add tags to an Elastic Beanstalk resource and to update tag values",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "application",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "applicationversion",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "configurationtemplate",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "environment",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "platform",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"applyenvironmentmanagedaction": {
"name": "ApplyEnvironmentManagedAction",
"description": "Grants permission to apply a scheduled managed action immediately",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "environment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
},
"associateenvironmentoperationsrole": {
"name": "AssociateEnvironmentOperationsRole",
"description": "Grants permission to associate an operations role with an environment",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "environment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"checkdnsavailability": {
"name": "CheckDNSAvailability",
"description": "Grants permission to check CNAME availability",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"composeenvironments": {
"name": "ComposeEnvironments",
"description": "Grants permission to create or update a group of environments, each running a separate component of a single application",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "application",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "applicationversion",
"required": true,
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createapplication": {
"name": "CreateApplication",
"description": "Grants permission to create a new application",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "application",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createapplicationversion": {
"name": "CreateApplicationVersion",
"description": "Grants permission to create an application version for an application",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "application",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "applicationversion",
"required": true,
"conditionKeys": [
"elasticbeanstalk:InApplication",
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createconfigurationtemplate": {
"name": "CreateConfigurationTemplate",
"description": "Grants permission to create a configuration template",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "configurationtemplate",
"required": true,
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
}
],
"conditionKeys": [
"elasticbeanstalk:FromApplication",
"elasticbeanstalk:FromApplicationVersion",
"elasticbeanstalk:FromConfigurationTemplate",
"elasticbeanstalk:FromEnvironment",
"elasticbeanstalk:FromSolutionStack",
"elasticbeanstalk:FromPlatform",
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createenvironment": {
"name": "CreateEnvironment",
"description": "Grants permission to launch an environment for an application",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "environment",
"required": true,
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
}
],
"conditionKeys": [
"elasticbeanstalk:FromApplicationVersion",
"elasticbeanstalk:FromConfigurationTemplate",
"elasticbeanstalk:FromSolutionStack",
"elasticbeanstalk:FromPlatform",
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createplatformversion": {
"name": "CreatePlatformVersion",
"description": "Grants permission to create a new version of a custom platform",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "platform",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createstoragelocation": {
"name": "CreateStorageLocation",
"description": "Grants permission to create the Amazon S3 storage location for the account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deleteapplication": {
"name": "DeleteApplication",
"description": "Grants permission to delete an application along with all associated versions and configurations",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "application",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteapplicationversion": {
"name": "DeleteApplicationVersion",
"description": "Grants permission to delete an application version from an application",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "applicationversion",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
},
"deleteconfigurationtemplate": {
"name": "DeleteConfigurationTemplate",
"description": "Grants permission to delete a configuration template",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "configurationtemplate",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
},
"deleteenvironmentconfiguration": {
"name": "DeleteEnvironmentConfiguration",
"description": "Grants permission to delete the draft configuration associated with the running environment",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "environment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
},
"deleteplatformversion": {
"name": "DeletePlatformVersion",
"description": "Grants permission to delete a version of a custom platform",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "platform",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeaccountattributes": {
"name": "DescribeAccountAttributes",
"description": "Grants permission to retrieve a list of account attributes, including resource quotas",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"describeapplicationversions": {
"name": "DescribeApplicationVersions",
"description": "Grants permission to retrieve a list of application versions stored in an AWS Elastic Beanstalk storage bucket",
"accessLevel": "List",
"resourceTypes": [
{
"name": "applicationversion",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
},
"describeapplications": {
"name": "DescribeApplications",
"description": "Grants permission to retrieve the descriptions of existing applications",
"accessLevel": "List",
"resourceTypes": [
{
"name": "application",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeconfigurationoptions": {
"name": "DescribeConfigurationOptions",
"description": "Grants permission to retrieve descriptions of environment configuration options",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "configurationtemplate",
"required": false,
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
},
{
"name": "environment",
"required": false,
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
},
{
"name": "solutionstack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeconfigurationsettings": {
"name": "DescribeConfigurationSettings",
"description": "Grants permission to retrieve a description of the settings for a configuration set",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "configurationtemplate",
"required": false,
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
},
{
"name": "environment",
"required": false,
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeenvironmenthealth": {
"name": "DescribeEnvironmentHealth",
"description": "Grants permission to retrieve information about the overall health of an environment",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "environment",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeenvironmentmanagedactionhistory": {
"name": "DescribeEnvironmentManagedActionHistory",
"description": "Grants permission to retrieve a list of an environment's completed and failed managed actions",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "environment",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
},
"describeenvironmentmanagedactions": {
"name": "DescribeEnvironmentManagedActions",
"description": "Grants permission to retrieve a list of an environment's upcoming and in-progress managed actions",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "environment",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
},
"describeenvironmentresources": {
"name": "DescribeEnvironmentResources",
"description": "Grants permission to retrieve a list of AWS resources for an environment",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "environment",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
},
"describeenvironments": {
"name": "DescribeEnvironments",
"description": "Grants permission to retrieve descriptions for existing environments",
"accessLevel": "List",
"resourceTypes": [
{
"name": "environment",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
},
"describeevents": {
"name": "DescribeEvents",
"description": "Grants permission to retrieve a list of event descriptions matching a set of criteria",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "application",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "applicationversion",
"required": false,
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
},
{
"name": "configurationtemplate",
"required": false,
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
},
{
"name": "environment",
"required": false,
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeinstanceshealth": {
"name": "DescribeInstancesHealth",
"description": "Grants permission to retrieve more detailed information about the health of environment instances",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "environment",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeplatformversion": {
"name": "DescribePlatformVersion",
"description": "Grants permission to retrieve a description of a managed platform version",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "platform",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"disassociateenvironmentoperationsrole": {
"name": "DisassociateEnvironmentOperationsRole",
"description": "Grants permission to disassociate an operations role with an environment",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "environment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listavailablesolutionstacks": {
"name": "ListAvailableSolutionStacks",
"description": "Grants permission to retrieve a list of the available solution stack names",
"accessLevel": "List",
"resourceTypes": [
{
"name": "solutionstack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listplatformbranches": {
"name": "ListPlatformBranches",
"description": "Grants permission to retrieve a list of the available platform branches",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listplatformversions": {
"name": "ListPlatformVersions",
"description": "Grants permission to retrieve a list of the available platforms",
"accessLevel": "List",
"resourceTypes": [
{
"name": "platform",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listtagsforresource": {
"name": "ListTagsForResource",
"description": "Grants permission to retrieve a list of tags of an Elastic Beanstalk resource",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "application",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "applicationversion",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "configurationtemplate",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "environment",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "platform",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"putinstancestatistics": {
"name": "PutInstanceStatistics",
"description": "Grants permission to submit instance statistics for enhanced health",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "application",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "environment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"rebuildenvironment": {
"name": "RebuildEnvironment",
"description": "Grants permission to delete and recreate all of the AWS resources for an environment and to force a restart",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "environment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
},
"removetags": {
"name": "RemoveTags",
"description": "Grants permission to remove tags from an Elastic Beanstalk resource",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "application",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "applicationversion",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "configurationtemplate",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "environment",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "platform",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys"
],
"dependentActions": []
},
"requestenvironmentinfo": {
"name": "RequestEnvironmentInfo",
"description": "Grants permission to initiate a request to compile information of the deployed environment",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "environment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
},
"restartappserver": {
"name": "RestartAppServer",
"description": "Grants permission to request an environment to restart the application container server running on each Amazon EC2 instance",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "environment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
},
"retrieveenvironmentinfo": {
"name": "RetrieveEnvironmentInfo",
"description": "Grants permission to retrieve the compiled information from a RequestEnvironmentInfo request",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "environment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
},
"swapenvironmentcnames": {
"name": "SwapEnvironmentCNAMEs",
"description": "Grants permission to swap the CNAMEs of two environments",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "environment",
"required": true,
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
}
],
"conditionKeys": [
"elasticbeanstalk:FromEnvironment"
],
"dependentActions": []
},
"terminateenvironment": {
"name": "TerminateEnvironment",
"description": "Grants permission to terminate an environment",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "environment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
},
"updateapplication": {
"name": "UpdateApplication",
"description": "Grants permission to update an application with specified properties",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "application",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updateapplicationresourcelifecycle": {
"name": "UpdateApplicationResourceLifecycle",
"description": "Grants permission to update the application version lifecycle policy associated with the application",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "application",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updateapplicationversion": {
"name": "UpdateApplicationVersion",
"description": "Grants permission to update an application version with specified properties",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "applicationversion",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
},
"updateconfigurationtemplate": {
"name": "UpdateConfigurationTemplate",
"description": "Grants permission to update a configuration template with specified properties or configuration option values",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "configurationtemplate",
"required": true,
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
}
],
"conditionKeys": [
"elasticbeanstalk:FromApplication",
"elasticbeanstalk:FromApplicationVersion",
"elasticbeanstalk:FromConfigurationTemplate",
"elasticbeanstalk:FromEnvironment",
"elasticbeanstalk:FromSolutionStack",
"elasticbeanstalk:FromPlatform"
],
"dependentActions": []
},
"updateenvironment": {
"name": "UpdateEnvironment",
"description": "Grants permission to update an environment",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "environment",
"required": true,
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
}
],
"conditionKeys": [
"elasticbeanstalk:FromApplicationVersion",
"elasticbeanstalk:FromConfigurationTemplate",
"elasticbeanstalk:FromSolutionStack",
"elasticbeanstalk:FromPlatform"
],
"dependentActions": []
},
"updatetagsforresource": {
"name": "UpdateTagsForResource",
"description": "Doesn't grant permission to update tags. To grant permission to add tags to an Elastic Beanstalk resource, remove tags, and to update tag values, specify elasticbeanstalk:AddTags and elasticbeanstalk:RemoveTags",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "application",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "applicationversion",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "configurationtemplate",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "environment",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "platform",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"validateconfigurationsettings": {
"name": "ValidateConfigurationSettings",
"description": "Grants permission to check the validity of a set of configuration settings for a configuration template or an environment",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "configurationtemplate",
"required": false,
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
},
{
"name": "environment",
"required": false,
"conditionKeys": [
"elasticbeanstalk:InApplication"
],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
}
}