@cloud-copilot/iam-data
Version:
496 lines • 13.2 kB
JSON
{
"createexperimenttemplate": {
"name": "CreateExperimentTemplate",
"description": "Grants permission to create an AWS FIS experiment template",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "action",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "experiment-template",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createtargetaccountconfiguration": {
"name": "CreateTargetAccountConfiguration",
"description": "Grants permission to create an AWS FIS target account configuration",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "experiment-template",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteexperimenttemplate": {
"name": "DeleteExperimentTemplate",
"description": "Grants permission to delete the AWS FIS experiment template",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "experiment-template",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletetargetaccountconfiguration": {
"name": "DeleteTargetAccountConfiguration",
"description": "Grants permission to delete an AWS FIS target account configuration",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "experiment-template",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getaction": {
"name": "GetAction",
"description": "Grants permission to retrieve an AWS FIS action",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "action",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"getexperiment": {
"name": "GetExperiment",
"description": "Grants permission to retrieve an AWS FIS experiment",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "experiment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"getexperimenttargetaccountconfiguration": {
"name": "GetExperimentTargetAccountConfiguration",
"description": "Grants permission to retrieve an AWS FIS target account configuration for an AWS FIS experiment",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "experiment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getexperimenttemplate": {
"name": "GetExperimentTemplate",
"description": "Grants permission to retrieve an AWS FIS Experiment Template",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "experiment-template",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"getsafetylever": {
"name": "GetSafetyLever",
"description": "Grants permission to get information about the safety lever",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "safety-lever",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"gettargetaccountconfiguration": {
"name": "GetTargetAccountConfiguration",
"description": "Grants permission to retrieve an AWS FIS target account configuration for an AWS FIS experiment template",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "experiment-template",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"gettargetresourcetype": {
"name": "GetTargetResourceType",
"description": "Grants permission to get information about the specified resource type",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"injectapiinternalerror": {
"name": "InjectApiInternalError",
"isPermissionOnly": true,
"description": "Grants permission to inject an API internal error on the provided AWS service from an FIS Experiment",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "experiment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"fis:Service",
"fis:Operations",
"fis:Percentage",
"fis:Targets"
],
"dependentActions": []
},
"injectapithrottleerror": {
"name": "InjectApiThrottleError",
"isPermissionOnly": true,
"description": "Grants permission to inject an API throttle error on the provided AWS service from an FIS Experiment",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "experiment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"fis:Service",
"fis:Operations",
"fis:Percentage",
"fis:Targets"
],
"dependentActions": []
},
"injectapiunavailableerror": {
"name": "InjectApiUnavailableError",
"isPermissionOnly": true,
"description": "Grants permission to inject an API unavailable error on the provided AWS service from an FIS Experiment",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "experiment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"fis:Service",
"fis:Operations",
"fis:Percentage",
"fis:Targets"
],
"dependentActions": []
},
"listactions": {
"name": "ListActions",
"description": "Grants permission to list all available AWS FIS actions",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listexperimentresolvedtargets": {
"name": "ListExperimentResolvedTargets",
"description": "Grants permission to list resolved targets for AWS FIS experiments",
"accessLevel": "List",
"resourceTypes": [
{
"name": "experiment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listexperimenttargetaccountconfigurations": {
"name": "ListExperimentTargetAccountConfigurations",
"description": "Grants permission to list target account configurations for AWS FIS experiments",
"accessLevel": "List",
"resourceTypes": [
{
"name": "experiment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listexperimenttemplates": {
"name": "ListExperimentTemplates",
"description": "Grants permission to list all available AWS FIS experiment templates",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listexperiments": {
"name": "ListExperiments",
"description": "Grants permission to list all available AWS FIS experiments",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listtagsforresource": {
"name": "ListTagsForResource",
"description": "Grants permission to list the tags for an AWS FIS resource",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "action",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "experiment",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "experiment-template",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listtargetaccountconfigurations": {
"name": "ListTargetAccountConfigurations",
"description": "Grants permission to list target account configurations for AWS FIS experiment templates",
"accessLevel": "List",
"resourceTypes": [
{
"name": "experiment-template",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listtargetresourcetypes": {
"name": "ListTargetResourceTypes",
"description": "Grants permission to list the resource types",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"startexperiment": {
"name": "StartExperiment",
"description": "Grants permission to run an AWS FIS experiment",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "experiment",
"required": true,
"conditionKeys": [],
"dependentActions": [
"iam:CreateServiceLinkedRole"
]
},
{
"name": "experiment-template",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"stopexperiment": {
"name": "StopExperiment",
"description": "Grants permission to stop an AWS FIS experiment",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "experiment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"tagresource": {
"name": "TagResource",
"description": "Grants permission to tag AWS FIS resources",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "action",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "experiment",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "experiment-template",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}"
],
"dependentActions": []
},
"untagresource": {
"name": "UntagResource",
"description": "Grants permission to untag AWS FIS resources",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "action",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "experiment",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "experiment-template",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys"
],
"dependentActions": []
},
"updateexperimenttemplate": {
"name": "UpdateExperimentTemplate",
"description": "Grants permission to update the specified AWS FIS experiment template",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "experiment-template",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "action",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"updatesafetyleverstate": {
"name": "UpdateSafetyLeverState",
"description": "Grants permission to update the state of the safety lever",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "safety-lever",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updatetargetaccountconfiguration": {
"name": "UpdateTargetAccountConfiguration",
"description": "Grants permission to update an AWS FIS target account configuration",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "experiment-template",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
}
}