@cloud-copilot/iam-data
Version:
984 lines • 25.1 kB
JSON
{
"associatevehiclefleet": {
"name": "AssociateVehicleFleet",
"description": "Grants permission to associate the given vehicle to a fleet",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "fleet",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "vehicle",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createcampaign": {
"name": "CreateCampaign",
"description": "Grants permission to create a campaign",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "campaign",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "fleet",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "signalcatalog",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "vehicle",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys",
"iotfleetwise:DestinationArn"
],
"dependentActions": []
},
"createdecodermanifest": {
"name": "CreateDecoderManifest",
"description": "Grants permission to create a decoder manifest for an existing model",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "decodermanifest",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "modelmanifest",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createfleet": {
"name": "CreateFleet",
"description": "Grants permission to create a fleet",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "fleet",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "signalcatalog",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createmodelmanifest": {
"name": "CreateModelManifest",
"description": "Grants permission to create a model manifest definition",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "modelmanifest",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "signalcatalog",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createsignalcatalog": {
"name": "CreateSignalCatalog",
"description": "Grants permission to create a signal catalog",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "signalcatalog",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createstatetemplate": {
"name": "CreateStateTemplate",
"description": "Grants permission to create a state template",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "signalcatalog",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "statetemplate",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"createvehicle": {
"name": "CreateVehicle",
"description": "Grants permission to create a vehicle",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "decodermanifest",
"required": true,
"conditionKeys": [],
"dependentActions": [
"iot:CreateThing",
"iot:DescribeThing"
]
},
{
"name": "modelmanifest",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "vehicle",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"deletecampaign": {
"name": "DeleteCampaign",
"description": "Grants permission to delete a campaign",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "campaign",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletedecodermanifest": {
"name": "DeleteDecoderManifest",
"description": "Grants permission to delete the given decoder manifest",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "decodermanifest",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletefleet": {
"name": "DeleteFleet",
"description": "Grants permission to delete a fleet",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "fleet",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletemodelmanifest": {
"name": "DeleteModelManifest",
"description": "Grants permission to delete the given model manifest",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "modelmanifest",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletesignalcatalog": {
"name": "DeleteSignalCatalog",
"description": "Grants permission to delete a specific signal catalog",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "signalcatalog",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletestatetemplate": {
"name": "DeleteStateTemplate",
"description": "Grants permission to delete a state template",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "statetemplate",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletevehicle": {
"name": "DeleteVehicle",
"description": "Grants permission to delete a vehicle",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "vehicle",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"disassociatevehiclefleet": {
"name": "DisassociateVehicleFleet",
"description": "Grants permission to disassociate a vehicle from an existing fleet",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "fleet",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "vehicle",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"generatecommandpayload": {
"name": "GenerateCommandPayload",
"isPermissionOnly": true,
"description": "Grants permission to generate the payload for running a command on a vehicle",
"accessLevel": "Permissions management",
"resourceTypes": [
{
"name": "vehicle",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "statetemplate",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"iotfleetwise:Signals"
],
"dependentActions": []
},
"getcampaign": {
"name": "GetCampaign",
"description": "Grants permission to get summary information for a given campaign",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "campaign",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getdecodermanifest": {
"name": "GetDecoderManifest",
"description": "Grants permission to get summary information for a given decoder manifest definition",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "decodermanifest",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getencryptionconfiguration": {
"name": "GetEncryptionConfiguration",
"description": "Grants permission to get KMS-based encryption status for the AWS account",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"getfleet": {
"name": "GetFleet",
"description": "Grants permission to get summary information for a fleet",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "fleet",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getloggingoptions": {
"name": "GetLoggingOptions",
"description": "Grants permission to get the logging options for the AWS account",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"getmodelmanifest": {
"name": "GetModelManifest",
"description": "Grants permission to get summary information for a given model manifest definition",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "modelmanifest",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getregisteraccountstatus": {
"name": "GetRegisterAccountStatus",
"description": "Grants permission to get the account registration status with IoT FleetWise",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"getsignalcatalog": {
"name": "GetSignalCatalog",
"description": "Grants permission to get summary information for a specific signal catalog",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "signalcatalog",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getstatetemplate": {
"name": "GetStateTemplate",
"description": "Grants permission to get summary information for a given state template",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "statetemplate",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getvehicle": {
"name": "GetVehicle",
"description": "Grants permission to get summary information for a vehicle",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "vehicle",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getvehiclestatus": {
"name": "GetVehicleStatus",
"description": "Grants permission to get the status of the campaigns running on a specific vehicle",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "vehicle",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"importdecodermanifest": {
"name": "ImportDecoderManifest",
"description": "Grants permission to import an existing decoder manifest",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "decodermanifest",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"importsignalcatalog": {
"name": "ImportSignalCatalog",
"description": "Grants permission to create a signal catalog by importing existing definitions",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "signalcatalog",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"listcampaigns": {
"name": "ListCampaigns",
"description": "Grants permission to list campaigns",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listdecodermanifestnetworkinterfaces": {
"name": "ListDecoderManifestNetworkInterfaces",
"description": "Grants permission to list network interfaces associated to the existing decoder manifest",
"accessLevel": "List",
"resourceTypes": [
{
"name": "decodermanifest",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listdecodermanifestsignals": {
"name": "ListDecoderManifestSignals",
"description": "Grants permission to list decoder manifest signals",
"accessLevel": "List",
"resourceTypes": [
{
"name": "decodermanifest",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listdecodermanifests": {
"name": "ListDecoderManifests",
"description": "Grants permission to list all decoder manifests, with an optional filter on model manifest",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listfleets": {
"name": "ListFleets",
"description": "Grants permission to list all fleets",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listfleetsforvehicle": {
"name": "ListFleetsForVehicle",
"description": "Grants permission to list all the fleets that the given vehicle is associated with",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "vehicle",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listmodelmanifestnodes": {
"name": "ListModelManifestNodes",
"description": "Grants permission to list all nodes for the given model manifest",
"accessLevel": "List",
"resourceTypes": [
{
"name": "modelmanifest",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listmodelmanifests": {
"name": "ListModelManifests",
"description": "Grants permission to list all model manifests, with an optional filter on signal catalog",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listsignalcatalognodes": {
"name": "ListSignalCatalogNodes",
"description": "Grants permission to list all nodes for a given signal catalog",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "signalcatalog",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listsignalcatalogs": {
"name": "ListSignalCatalogs",
"description": "Grants permission to list all signal catalogs",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"liststatetemplates": {
"name": "ListStateTemplates",
"description": "Grants permission to list state templates",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listtagsforresource": {
"name": "ListTagsForResource",
"description": "Grants permission to list tags for a resource",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "campaign",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "decodermanifest",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "fleet",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "modelmanifest",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "signalcatalog",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "statetemplate",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "vehicle",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listvehicles": {
"name": "ListVehicles",
"description": "Grants permission to list all vehicles, with an optional filter on model manifest",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listvehiclesinfleet": {
"name": "ListVehiclesInFleet",
"description": "Grants permission to list vehicles in the given fleet",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "fleet",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"putencryptionconfiguration": {
"name": "PutEncryptionConfiguration",
"description": "Grants permission to enable or disable KMS-based encryption for the AWS account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"putloggingoptions": {
"name": "PutLoggingOptions",
"description": "Grants permission to put the logging options for the AWS account",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"registeraccount": {
"name": "RegisterAccount",
"description": "Grants permission to register an AWS account to IoT FleetWise",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": [
"iam:PassRole"
]
},
"tagresource": {
"name": "TagResource",
"description": "Grants permission to add tags to a resource",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "campaign",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "decodermanifest",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "fleet",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "modelmanifest",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "signalcatalog",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "statetemplate",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "vehicle",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"untagresource": {
"name": "UntagResource",
"description": "Grants permission to remove tags from a resource",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "campaign",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "decodermanifest",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "fleet",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "modelmanifest",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "signalcatalog",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "statetemplate",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "vehicle",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys"
],
"dependentActions": []
},
"updatecampaign": {
"name": "UpdateCampaign",
"description": "Grants permission to update the given campaign",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "campaign",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updatedecodermanifest": {
"name": "UpdateDecoderManifest",
"description": "Grants permission to update a decoder manifest defnition",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "decodermanifest",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updatefleet": {
"name": "UpdateFleet",
"description": "Grants permission to update the fleet",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "fleet",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updatemodelmanifest": {
"name": "UpdateModelManifest",
"description": "Grants permission to update the given model manifest definition",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "modelmanifest",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updatesignalcatalog": {
"name": "UpdateSignalCatalog",
"description": "Grants permission to update a specific signal catalog definition",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "signalcatalog",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updatestatetemplate": {
"name": "UpdateStateTemplate",
"description": "Grants permission to update the given state template",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "statetemplate",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updatevehicle": {
"name": "UpdateVehicle",
"description": "Grants permission to update the vehicle",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "vehicle",
"required": true,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "decodermanifest",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "modelmanifest",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"iotfleetwise:UpdateToModelManifestArn",
"iotfleetwise:UpdateToDecoderManifestArn"
],
"dependentActions": []
}
}