@cloud-copilot/iam-data
Version:
469 lines • 12.5 kB
JSON
{
"abortmultipartupload": {
"name": "AbortMultipartUpload",
"description": "Grants permission to abort a multipart upload identified by the upload ID",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"abortvaultlock": {
"name": "AbortVaultLock",
"description": "Grants permission to abort the vault locking process if the vault lock is not in the Locked state",
"accessLevel": "Permissions management",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"addtagstovault": {
"name": "AddTagsToVault",
"description": "Grants permission to add the specified tags to a vault",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}"
],
"dependentActions": []
},
"completemultipartupload": {
"name": "CompleteMultipartUpload",
"description": "Grants permission to complete a multipart upload process",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"completevaultlock": {
"name": "CompleteVaultLock",
"description": "Grants permission to complete the vault locking process",
"accessLevel": "Permissions management",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createvault": {
"name": "CreateVault",
"description": "Grants permission to create a new vault with the specified name",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletearchive": {
"name": "DeleteArchive",
"description": "Grants permission to delete an archive from a vault",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"glacier:ArchiveAgeInDays"
],
"dependentActions": []
},
"deletevault": {
"name": "DeleteVault",
"description": "Grants permission to delete a vault",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletevaultaccesspolicy": {
"name": "DeleteVaultAccessPolicy",
"description": "Grants permission to delete the access policy associated with the specified vault",
"accessLevel": "Permissions management",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletevaultnotifications": {
"name": "DeleteVaultNotifications",
"description": "Grants permission to delete the notification configuration set for a vault",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describejob": {
"name": "DescribeJob",
"description": "Grants permission to get information about a job previously initiated",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describevault": {
"name": "DescribeVault",
"description": "Grants permission to get information about a vault",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getdataretrievalpolicy": {
"name": "GetDataRetrievalPolicy",
"description": "Grants permission to get the data retrieval policy",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"getjoboutput": {
"name": "GetJobOutput",
"description": "Grants permission to download the output of the job specified",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getvaultaccesspolicy": {
"name": "GetVaultAccessPolicy",
"description": "Grants permission to retrieve the access-policy subresource set on the vault",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getvaultlock": {
"name": "GetVaultLock",
"description": "Grants permission to retrieve attributes from the lock-policy subresource set on the specified vault",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getvaultnotifications": {
"name": "GetVaultNotifications",
"description": "Grants permission to retrieve the notification-configuration subresource set on the vault",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"initiatejob": {
"name": "InitiateJob",
"description": "Grants permission to initiate a job of the specified type",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"glacier:ArchiveAgeInDays"
],
"dependentActions": []
},
"initiatemultipartupload": {
"name": "InitiateMultipartUpload",
"description": "Grants permission to initiate a multipart upload",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"initiatevaultlock": {
"name": "InitiateVaultLock",
"description": "Grants permission to initiate the vault locking process",
"accessLevel": "Permissions management",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listjobs": {
"name": "ListJobs",
"description": "Grants permission to list jobs for a vault that are in-progress and jobs that have recently finished",
"accessLevel": "List",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listmultipartuploads": {
"name": "ListMultipartUploads",
"description": "Grants permission to list in-progress multipart uploads for the specified vault",
"accessLevel": "List",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listparts": {
"name": "ListParts",
"description": "Grants permission to list the parts of an archive that have been uploaded in a specific multipart upload",
"accessLevel": "List",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listprovisionedcapacity": {
"name": "ListProvisionedCapacity",
"description": "Grants permission to list the provisioned capacity for the specified AWS account",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listtagsforvault": {
"name": "ListTagsForVault",
"description": "Grants permission to list all the tags attached to a vault",
"accessLevel": "List",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listvaults": {
"name": "ListVaults",
"description": "Grants permission to list all vaults",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"purchaseprovisionedcapacity": {
"name": "PurchaseProvisionedCapacity",
"description": "Grants permission to purchases a provisioned capacity unit for an AWS account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"removetagsfromvault": {
"name": "RemoveTagsFromVault",
"description": "Grants permission to remove one or more tags from the set of tags attached to a vault",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"setdataretrievalpolicy": {
"name": "SetDataRetrievalPolicy",
"description": "Grants permission to set and then enacts a data retrieval policy in the region specified in the PUT request",
"accessLevel": "Permissions management",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"setvaultaccesspolicy": {
"name": "SetVaultAccessPolicy",
"description": "Grants permission to configure an access policy for a vault; will overwrite an existing policy",
"accessLevel": "Permissions management",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"setvaultnotifications": {
"name": "SetVaultNotifications",
"description": "Grants permission to configure vault notifications",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"uploadarchive": {
"name": "UploadArchive",
"description": "Grants permission to upload an archive to a vault",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"uploadmultipartpart": {
"name": "UploadMultipartPart",
"description": "Grants permission to upload a part of an archive",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "vault",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
}
}