UNPKG

@cloud-copilot/iam-data

Version:
990 lines 27.2 kB
{ "abortenvironmentupdate": { "name": "AbortEnvironmentUpdate", "description": "Grants permission to cancel in-progress environment configuration update or application version deployment", "accessLevel": "Write", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] }, "addtags": { "name": "AddTags", "description": "Grants permission to add tags to an Elastic Beanstalk resource and to update tag values", "accessLevel": "Tagging", "resourceTypes": [ { "name": "application", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "applicationversion", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "configurationtemplate", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "environment", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "platform", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "applyenvironmentmanagedaction": { "name": "ApplyEnvironmentManagedAction", "description": "Grants permission to apply a scheduled managed action immediately", "accessLevel": "Write", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] }, "associateenvironmentoperationsrole": { "name": "AssociateEnvironmentOperationsRole", "description": "Grants permission to associate an operations role with an environment", "accessLevel": "Write", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "checkdnsavailability": { "name": "CheckDNSAvailability", "description": "Grants permission to check CNAME availability", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "composeenvironments": { "name": "ComposeEnvironments", "description": "Grants permission to create or update a group of environments, each running a separate component of a single application", "accessLevel": "Write", "resourceTypes": [ { "name": "application", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "applicationversion", "required": true, "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createapplication": { "name": "CreateApplication", "description": "Grants permission to create a new application", "accessLevel": "Write", "resourceTypes": [ { "name": "application", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createapplicationversion": { "name": "CreateApplicationVersion", "description": "Grants permission to create an application version for an application", "accessLevel": "Write", "resourceTypes": [ { "name": "application", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "applicationversion", "required": true, "conditionKeys": [ "elasticbeanstalk:InApplication", "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createconfigurationtemplate": { "name": "CreateConfigurationTemplate", "description": "Grants permission to create a configuration template", "accessLevel": "Write", "resourceTypes": [ { "name": "configurationtemplate", "required": true, "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] } ], "conditionKeys": [ "elasticbeanstalk:FromApplication", "elasticbeanstalk:FromApplicationVersion", "elasticbeanstalk:FromConfigurationTemplate", "elasticbeanstalk:FromEnvironment", "elasticbeanstalk:FromSolutionStack", "elasticbeanstalk:FromPlatform", "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createenvironment": { "name": "CreateEnvironment", "description": "Grants permission to launch an environment for an application", "accessLevel": "Write", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] } ], "conditionKeys": [ "elasticbeanstalk:FromApplicationVersion", "elasticbeanstalk:FromConfigurationTemplate", "elasticbeanstalk:FromSolutionStack", "elasticbeanstalk:FromPlatform", "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createplatformversion": { "name": "CreatePlatformVersion", "description": "Grants permission to create a new version of a custom platform", "accessLevel": "Write", "resourceTypes": [ { "name": "platform", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createstoragelocation": { "name": "CreateStorageLocation", "description": "Grants permission to create the Amazon S3 storage location for the account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleteapplication": { "name": "DeleteApplication", "description": "Grants permission to delete an application along with all associated versions and configurations", "accessLevel": "Write", "resourceTypes": [ { "name": "application", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteapplicationversion": { "name": "DeleteApplicationVersion", "description": "Grants permission to delete an application version from an application", "accessLevel": "Write", "resourceTypes": [ { "name": "applicationversion", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] }, "deleteconfigurationtemplate": { "name": "DeleteConfigurationTemplate", "description": "Grants permission to delete a configuration template", "accessLevel": "Write", "resourceTypes": [ { "name": "configurationtemplate", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] }, "deleteenvironmentconfiguration": { "name": "DeleteEnvironmentConfiguration", "description": "Grants permission to delete the draft configuration associated with the running environment", "accessLevel": "Write", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] }, "deleteplatformversion": { "name": "DeletePlatformVersion", "description": "Grants permission to delete a version of a custom platform", "accessLevel": "Write", "resourceTypes": [ { "name": "platform", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeaccountattributes": { "name": "DescribeAccountAttributes", "description": "Grants permission to retrieve a list of account attributes, including resource quotas", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeapplicationversions": { "name": "DescribeApplicationVersions", "description": "Grants permission to retrieve a list of application versions stored in an AWS Elastic Beanstalk storage bucket", "accessLevel": "List", "resourceTypes": [ { "name": "applicationversion", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] }, "describeapplications": { "name": "DescribeApplications", "description": "Grants permission to retrieve the descriptions of existing applications", "accessLevel": "List", "resourceTypes": [ { "name": "application", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeconfigurationoptions": { "name": "DescribeConfigurationOptions", "description": "Grants permission to retrieve descriptions of environment configuration options", "accessLevel": "Read", "resourceTypes": [ { "name": "configurationtemplate", "required": false, "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] }, { "name": "environment", "required": false, "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] }, { "name": "solutionstack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeconfigurationsettings": { "name": "DescribeConfigurationSettings", "description": "Grants permission to retrieve a description of the settings for a configuration set", "accessLevel": "Read", "resourceTypes": [ { "name": "configurationtemplate", "required": false, "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] }, { "name": "environment", "required": false, "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeenvironmenthealth": { "name": "DescribeEnvironmentHealth", "description": "Grants permission to retrieve information about the overall health of an environment", "accessLevel": "Read", "resourceTypes": [ { "name": "environment", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeenvironmentmanagedactionhistory": { "name": "DescribeEnvironmentManagedActionHistory", "description": "Grants permission to retrieve a list of an environment's completed and failed managed actions", "accessLevel": "Read", "resourceTypes": [ { "name": "environment", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] }, "describeenvironmentmanagedactions": { "name": "DescribeEnvironmentManagedActions", "description": "Grants permission to retrieve a list of an environment's upcoming and in-progress managed actions", "accessLevel": "Read", "resourceTypes": [ { "name": "environment", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] }, "describeenvironmentresources": { "name": "DescribeEnvironmentResources", "description": "Grants permission to retrieve a list of AWS resources for an environment", "accessLevel": "Read", "resourceTypes": [ { "name": "environment", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] }, "describeenvironments": { "name": "DescribeEnvironments", "description": "Grants permission to retrieve descriptions for existing environments", "accessLevel": "List", "resourceTypes": [ { "name": "environment", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] }, "describeevents": { "name": "DescribeEvents", "description": "Grants permission to retrieve a list of event descriptions matching a set of criteria", "accessLevel": "Read", "resourceTypes": [ { "name": "application", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "applicationversion", "required": false, "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] }, { "name": "configurationtemplate", "required": false, "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] }, { "name": "environment", "required": false, "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeinstanceshealth": { "name": "DescribeInstancesHealth", "description": "Grants permission to retrieve more detailed information about the health of environment instances", "accessLevel": "Read", "resourceTypes": [ { "name": "environment", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeplatformversion": { "name": "DescribePlatformVersion", "description": "Grants permission to retrieve a description of a managed platform version", "accessLevel": "Read", "resourceTypes": [ { "name": "platform", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "disassociateenvironmentoperationsrole": { "name": "DisassociateEnvironmentOperationsRole", "description": "Grants permission to disassociate an operations role with an environment", "accessLevel": "Write", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listavailablesolutionstacks": { "name": "ListAvailableSolutionStacks", "description": "Grants permission to retrieve a list of the available solution stack names", "accessLevel": "List", "resourceTypes": [ { "name": "solutionstack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listplatformbranches": { "name": "ListPlatformBranches", "description": "Grants permission to retrieve a list of the available platform branches", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listplatformversions": { "name": "ListPlatformVersions", "description": "Grants permission to retrieve a list of the available platforms", "accessLevel": "List", "resourceTypes": [ { "name": "platform", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to retrieve a list of tags of an Elastic Beanstalk resource", "accessLevel": "Read", "resourceTypes": [ { "name": "application", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "applicationversion", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "configurationtemplate", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "environment", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "platform", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putinstancestatistics": { "name": "PutInstanceStatistics", "description": "Grants permission to submit instance statistics for enhanced health", "accessLevel": "Write", "resourceTypes": [ { "name": "application", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "rebuildenvironment": { "name": "RebuildEnvironment", "description": "Grants permission to delete and recreate all of the AWS resources for an environment and to force a restart", "accessLevel": "Write", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] }, "removetags": { "name": "RemoveTags", "description": "Grants permission to remove tags from an Elastic Beanstalk resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "application", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "applicationversion", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "configurationtemplate", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "environment", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "platform", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] }, "requestenvironmentinfo": { "name": "RequestEnvironmentInfo", "description": "Grants permission to initiate a request to compile information of the deployed environment", "accessLevel": "Read", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] }, "restartappserver": { "name": "RestartAppServer", "description": "Grants permission to request an environment to restart the application container server running on each Amazon EC2 instance", "accessLevel": "Write", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] }, "retrieveenvironmentinfo": { "name": "RetrieveEnvironmentInfo", "description": "Grants permission to retrieve the compiled information from a RequestEnvironmentInfo request", "accessLevel": "Read", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] }, "swapenvironmentcnames": { "name": "SwapEnvironmentCNAMEs", "description": "Grants permission to swap the CNAMEs of two environments", "accessLevel": "Write", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] } ], "conditionKeys": [ "elasticbeanstalk:FromEnvironment" ], "dependentActions": [] }, "terminateenvironment": { "name": "TerminateEnvironment", "description": "Grants permission to terminate an environment", "accessLevel": "Write", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] }, "updateapplication": { "name": "UpdateApplication", "description": "Grants permission to update an application with specified properties", "accessLevel": "Write", "resourceTypes": [ { "name": "application", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateapplicationresourcelifecycle": { "name": "UpdateApplicationResourceLifecycle", "description": "Grants permission to update the application version lifecycle policy associated with the application", "accessLevel": "Write", "resourceTypes": [ { "name": "application", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateapplicationversion": { "name": "UpdateApplicationVersion", "description": "Grants permission to update an application version with specified properties", "accessLevel": "Write", "resourceTypes": [ { "name": "applicationversion", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] }, "updateconfigurationtemplate": { "name": "UpdateConfigurationTemplate", "description": "Grants permission to update a configuration template with specified properties or configuration option values", "accessLevel": "Write", "resourceTypes": [ { "name": "configurationtemplate", "required": true, "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] } ], "conditionKeys": [ "elasticbeanstalk:FromApplication", "elasticbeanstalk:FromApplicationVersion", "elasticbeanstalk:FromConfigurationTemplate", "elasticbeanstalk:FromEnvironment", "elasticbeanstalk:FromSolutionStack", "elasticbeanstalk:FromPlatform" ], "dependentActions": [] }, "updateenvironment": { "name": "UpdateEnvironment", "description": "Grants permission to update an environment", "accessLevel": "Write", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] } ], "conditionKeys": [ "elasticbeanstalk:FromApplicationVersion", "elasticbeanstalk:FromConfigurationTemplate", "elasticbeanstalk:FromSolutionStack", "elasticbeanstalk:FromPlatform" ], "dependentActions": [] }, "updatetagsforresource": { "name": "UpdateTagsForResource", "description": "Doesn't grant permission to update tags. To grant permission to add tags to an Elastic Beanstalk resource, remove tags, and to update tag values, specify elasticbeanstalk:AddTags and elasticbeanstalk:RemoveTags", "accessLevel": "Tagging", "resourceTypes": [ { "name": "application", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "applicationversion", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "configurationtemplate", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "environment", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "platform", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "validateconfigurationsettings": { "name": "ValidateConfigurationSettings", "description": "Grants permission to check the validity of a set of configuration settings for a configuration template or an environment", "accessLevel": "Read", "resourceTypes": [ { "name": "configurationtemplate", "required": false, "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] }, { "name": "environment", "required": false, "conditionKeys": [ "elasticbeanstalk:InApplication" ], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] } }