@cloud-copilot/iam-data

{ "associatelicense": { "name": "AssociateLicense", "description": "Grants permission to upgrade a workspace with a license", "accessLevel": "Write", "resourceTypes": [ { "name": "workspace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "aws-marketplace:ViewSubscriptions" ] }, "createworkspace": { "name": "CreateWorkspace", "description": "Grants permission to create a workspace", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [ "ec2:DescribeSecurityGroups", "ec2:DescribeSubnets", "ec2:GetManagedPrefixListEntries", "iam:CreateServiceLinkedRole", "organizations:DescribeOrganization", "sso:CreateManagedApplicationInstance", "sso:DescribeRegisteredRegions", "sso:GetSharedSsoConfiguration" ] }, "createworkspaceapikey": { "name": "CreateWorkspaceApiKey", "description": "Grants permission to create API keys for a workspace", "accessLevel": "Write", "resourceTypes": [ { "name": "workspace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createworkspaceserviceaccount": { "name": "CreateWorkspaceServiceAccount", "description": "Grants permission to create service accounts for a workspace", "accessLevel": "Write", "resourceTypes": [ { "name": "workspace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createworkspaceserviceaccounttoken": { "name": "CreateWorkspaceServiceAccountToken", "description": "Grants permission to create service account tokens for a workspace", "accessLevel": "Write", "resourceTypes": [ { "name": "workspace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteworkspace": { "name": "DeleteWorkspace", "description": "Grants permission to delete a workspace", "accessLevel": "Write", "resourceTypes": [ { "name": "workspace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "sso:DeleteManagedApplicationInstance" ] }, "deleteworkspaceapikey": { "name": "DeleteWorkspaceApiKey", "description": "Grants permission to delete API keys from a workspace", "accessLevel": "Write", "resourceTypes": [ { "name": "workspace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteworkspaceserviceaccount": { "name": "DeleteWorkspaceServiceAccount", "description": "Grants permission to delete service accounts for a workspace", "accessLevel": "Write", "resourceTypes": [ { "name": "workspace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteworkspaceserviceaccounttoken": { "name": "DeleteWorkspaceServiceAccountToken", "description": "Grants permission to delete service account tokens for a workspace", "accessLevel": "Write", "resourceTypes": [ { "name": "workspace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeworkspace": { "name": "DescribeWorkspace", "description": "Grants permission to describe a workspace", "accessLevel": "Read", "resourceTypes": [ { "name": "workspace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeworkspaceauthentication": { "name": "DescribeWorkspaceAuthentication", "description": "Grants permission to describe authentication providers on a workspace", "accessLevel": "Read", "resourceTypes": [ { "name": "workspace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeworkspaceconfiguration": { "name": "DescribeWorkspaceConfiguration", "description": "Grants permission to describe the current configuration string for the given workspace", "accessLevel": "Read", "resourceTypes": [ { "name": "workspace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "disassociatelicense": { "name": "DisassociateLicense", "description": "Grants permission to remove a license from a workspace", "accessLevel": "Write", "resourceTypes": [ { "name": "workspace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listpermissions": { "name": "ListPermissions", "description": "Grants permission to list the permissions on a wokspace", "accessLevel": "List", "resourceTypes": [ { "name": "workspace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to list tags associated with a workspace", "accessLevel": "Read", "resourceTypes": [ { "name": "workspace", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listversions": { "name": "ListVersions", "description": "Grants permission to list all available supported Grafana versions. Optionally, include a workspace to list the versions to which it can be upgraded", "accessLevel": "List", "resourceTypes": [ { "name": "workspace", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listworkspaceserviceaccounttokens": { "name": "ListWorkspaceServiceAccountTokens", "description": "Grants permission to list service account tokens for a workspace", "accessLevel": "Read", "resourceTypes": [ { "name": "workspace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listworkspaceserviceaccounts": { "name": "ListWorkspaceServiceAccounts", "description": "Grants permission to list service accounts for a workspace", "accessLevel": "Read", "resourceTypes": [ { "name": "workspace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listworkspaces": { "name": "ListWorkspaces", "description": "Grants permission to list workspaces", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to add tags to, or update tag values of, a workspace", "accessLevel": "Tagging", "resourceTypes": [ { "name": "workspace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to remove tags from a workspace", "accessLevel": "Tagging", "resourceTypes": [ { "name": "workspace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] }, "updatepermissions": { "name": "UpdatePermissions", "description": "Grants permission to modify the permissions on a workspace", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "workspace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateworkspace": { "name": "UpdateWorkspace", "description": "Grants permission to modify a workspace", "accessLevel": "Write", "resourceTypes": [ { "name": "workspace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "ec2:DescribeSecurityGroups", "ec2:DescribeSubnets", "ec2:GetManagedPrefixListEntries", "iam:CreateServiceLinkedRole" ] }, "updateworkspaceauthentication": { "name": "UpdateWorkspaceAuthentication", "description": "Grants permission to modify authentication providers on a workspace", "accessLevel": "Write", "resourceTypes": [ { "name": "workspace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateworkspaceconfiguration": { "name": "UpdateWorkspaceConfiguration", "description": "Grants permission to update the configuration string for the given workspace", "accessLevel": "Write", "resourceTypes": [ { "name": "workspace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] } }