@cloud-copilot/iam-data
Version:
780 lines • 22.3 kB
JSON
{
"addcustomroutingendpoints": {
"name": "AddCustomRoutingEndpoints",
"description": "Grants permission to add a virtual private cloud (VPC) subnet endpoint to a custom routing accelerator endpoint group",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "endpointgroup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"addendpoints": {
"name": "AddEndpoints",
"description": "Grants permission to add an endpoint to a standard accelerator endpoint group",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "endpointgroup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": [
"globalaccelerator:UpdateEndpointGroup"
]
},
"advertisebyoipcidr": {
"name": "AdvertiseByoipCidr",
"description": "Grants permission to advertises an IPv4 address range that is provisioned for use with your accelerator through bring your own IP addresses (BYOIP)",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"allowcustomroutingtraffic": {
"name": "AllowCustomRoutingTraffic",
"description": "Grants permission to allows custom routing of user traffic to a private destination IP:PORT in a specific VPC subnet",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "endpointgroup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createaccelerator": {
"name": "CreateAccelerator",
"description": "Grants permission to create a standard accelerator",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createcrossaccountattachment": {
"name": "CreateCrossAccountAttachment",
"description": "Grants permission to create a CrossAccountAttachment",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createcustomroutingaccelerator": {
"name": "CreateCustomRoutingAccelerator",
"description": "Grants permission to create a Custom Routing accelerator",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createcustomroutingendpointgroup": {
"name": "CreateCustomRoutingEndpointGroup",
"description": "Grants permission to create an endpoint group for the specified listener for a custom routing accelerator",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "listener",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createcustomroutinglistener": {
"name": "CreateCustomRoutingListener",
"description": "Grants permission to create a listener to process inbound connections from clients to a custom routing accelerator",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "accelerator",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createendpointgroup": {
"name": "CreateEndpointGroup",
"description": "Grants permission to add an endpoint group to a standard accelerator listener",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "listener",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createlistener": {
"name": "CreateListener",
"description": "Grants permission to add a listener to a standard accelerator",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "accelerator",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteaccelerator": {
"name": "DeleteAccelerator",
"description": "Grants permission to delete a standard accelerator",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "accelerator",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletecrossaccountattachment": {
"name": "DeleteCrossAccountAttachment",
"description": "Grants permission to delete a CrossAccountAttachment",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "attachment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletecustomroutingaccelerator": {
"name": "DeleteCustomRoutingAccelerator",
"description": "Grants permission to delete a custom routing accelerator",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "accelerator",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletecustomroutingendpointgroup": {
"name": "DeleteCustomRoutingEndpointGroup",
"description": "Grants permission to delete an endpoint group from a listener for a custom routing accelerator",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "endpointgroup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletecustomroutinglistener": {
"name": "DeleteCustomRoutingListener",
"description": "Grants permission to delete a listener for a custom routing accelerator",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "listener",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteendpointgroup": {
"name": "DeleteEndpointGroup",
"description": "Grants permission to delete an endpoint group associated with a standard accelerator listener",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "endpointgroup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletelistener": {
"name": "DeleteListener",
"description": "Grants permission to delete a listener from a standard accelerator",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "listener",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"denycustomroutingtraffic": {
"name": "DenyCustomRoutingTraffic",
"description": "Grants permission to disallows custom routing of user traffic to a private destination IP:PORT in a specific VPC subnet",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "endpointgroup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deprovisionbyoipcidr": {
"name": "DeprovisionByoipCidr",
"description": "Grants permission to releases the specified address range that you provisioned for use with your accelerator through bring your own IP addresses (BYOIP)",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"describeaccelerator": {
"name": "DescribeAccelerator",
"description": "Grants permissions to describe a standard accelerator",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "accelerator",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeacceleratorattributes": {
"name": "DescribeAcceleratorAttributes",
"description": "Grants permission to describe a standard accelerator attributes",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "accelerator",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describecrossaccountattachment": {
"name": "DescribeCrossAccountAttachment",
"description": "Grants permissions to describe a CrossAccountAttachment",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "attachment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describecustomroutingaccelerator": {
"name": "DescribeCustomRoutingAccelerator",
"description": "Grants permission to describe a custom routing accelerator",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "accelerator",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describecustomroutingacceleratorattributes": {
"name": "DescribeCustomRoutingAcceleratorAttributes",
"description": "Grants permission to describe the attributes of a custom routing accelerator",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "accelerator",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describecustomroutingendpointgroup": {
"name": "DescribeCustomRoutingEndpointGroup",
"description": "Grants permission to describe an endpoint group for a custom routing accelerator",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "endpointgroup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describecustomroutinglistener": {
"name": "DescribeCustomRoutingListener",
"description": "Grants permission to describe a listener for a custom routing accelerator",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "listener",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeendpointgroup": {
"name": "DescribeEndpointGroup",
"description": "Grants permission to describe a standard accelerator endpoint group",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "endpointgroup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describelistener": {
"name": "DescribeListener",
"description": "Grants permission to describe a standard accelerator listener",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "listener",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listaccelerators": {
"name": "ListAccelerators",
"description": "Grants permission to list all standard accelerators",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listbyoipcidrs": {
"name": "ListByoipCidrs",
"description": "Grants permission to list the BYOIP cidrs",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listcrossaccountattachments": {
"name": "ListCrossAccountAttachments",
"description": "Grants permission to list all CrossAccountAttachments",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listcrossaccountresourceaccounts": {
"name": "ListCrossAccountResourceAccounts",
"description": "Grants permission to list accounts with CrossAccountAttachments listing caller as a principal",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listcrossaccountresources": {
"name": "ListCrossAccountResources",
"description": "Grants permission to list all CrossAccountAttachment resources usable by caller",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listcustomroutingaccelerators": {
"name": "ListCustomRoutingAccelerators",
"description": "Grants permission to list the custom routing accelerators for an AWS account",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listcustomroutingendpointgroups": {
"name": "ListCustomRoutingEndpointGroups",
"description": "Grants permission to list the endpoint groups that are associated with a listener for a custom routing accelerator",
"accessLevel": "List",
"resourceTypes": [
{
"name": "listener",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listcustomroutinglisteners": {
"name": "ListCustomRoutingListeners",
"description": "Grants permission to list the listeners for a custom routing accelerator",
"accessLevel": "List",
"resourceTypes": [
{
"name": "accelerator",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listcustomroutingportmappings": {
"name": "ListCustomRoutingPortMappings",
"description": "Grants permission to list the port mappings for a custom routing accelerator",
"accessLevel": "List",
"resourceTypes": [
{
"name": "accelerator",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listcustomroutingportmappingsbydestination": {
"name": "ListCustomRoutingPortMappingsByDestination",
"description": "Grants permission to list the port mappings for a specific endpoint IP address (a destination address) in a subnet",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listendpointgroups": {
"name": "ListEndpointGroups",
"description": "Grants permission to list all endpoint groups associated with a standard accelerator listener",
"accessLevel": "List",
"resourceTypes": [
{
"name": "listener",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listlisteners": {
"name": "ListListeners",
"description": "Grants permission to list all listeners associated with a standard accelerator",
"accessLevel": "List",
"resourceTypes": [
{
"name": "accelerator",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listtagsforresource": {
"name": "ListTagsForResource",
"description": "Grants permission to list tags for a globalaccelerator resource",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "accelerator",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "attachment",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"provisionbyoipcidr": {
"name": "ProvisionByoipCidr",
"description": "Grants permission to provisions an address range for use with your accelerator through bring your own IP addresses (BYOIP)",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"removecustomroutingendpoints": {
"name": "RemoveCustomRoutingEndpoints",
"description": "Grants permission to remove virtual private cloud (VPC) subnet endpoints from a custom routing accelerator endpoint group",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "endpointgroup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"removeendpoints": {
"name": "RemoveEndpoints",
"description": "Grants permission to remove an endpoint from a standard accelerator endpoint group",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "endpointgroup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": [
"globalaccelerator:UpdateEndpointGroup"
]
},
"tagresource": {
"name": "TagResource",
"description": "Grants permission to add tags to a globalaccelerator resource",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "accelerator",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "attachment",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"untagresource": {
"name": "UntagResource",
"description": "Grants permission to remove tags from a globalaccelerator resource",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "accelerator",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "attachment",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys"
],
"dependentActions": []
},
"updateaccelerator": {
"name": "UpdateAccelerator",
"description": "Grants permission to update a standard accelerator",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "accelerator",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updateacceleratorattributes": {
"name": "UpdateAcceleratorAttributes",
"description": "Grants permission to update a standard accelerator attributes",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "accelerator",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updatecrossaccountattachment": {
"name": "UpdateCrossAccountAttachment",
"description": "Grants permission to update a CrossAccountAttachment",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "attachment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updatecustomroutingaccelerator": {
"name": "UpdateCustomRoutingAccelerator",
"description": "Grants permission to update a custom routing accelerator",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "accelerator",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updatecustomroutingacceleratorattributes": {
"name": "UpdateCustomRoutingAcceleratorAttributes",
"description": "Grants permission to update the attributes for a custom routing accelerator",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "accelerator",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updatecustomroutinglistener": {
"name": "UpdateCustomRoutingListener",
"description": "Grants permission to update a listener for a custom routing accelerator",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "listener",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updateendpointgroup": {
"name": "UpdateEndpointGroup",
"description": "Grants permission to update an endpoint group on a standard accelerator listener",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "endpointgroup",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updatelistener": {
"name": "UpdateListener",
"description": "Grants permission to update a listener on a standard accelerator",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "listener",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"withdrawbyoipcidr": {
"name": "WithdrawByoipCidr",
"description": "Grants permission to stops advertising a BYOIP IPv4 address",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
}
}