@cloud-copilot/iam-data

{ "addtagstostream": { "name": "AddTagsToStream", "description": "Grants permission to add or update tags for the specified Amazon Kinesis stream. Each stream can have up to 50 tags", "accessLevel": "Tagging", "resourceTypes": [ { "name": "stream", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "createstream": { "name": "CreateStream", "description": "Grants permission to create a Amazon Kinesis stream", "accessLevel": "Write", "resourceTypes": [ { "name": "stream", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "decreasestreamretentionperiod": { "name": "DecreaseStreamRetentionPeriod", "description": "Grants permission to decrease the stream's retention period, which is the length of time data records are accessible after they are added to the stream", "accessLevel": "Write", "resourceTypes": [ { "name": "stream", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deleteresourcepolicy": { "name": "DeleteResourcePolicy", "description": "Grants permission to delete a resource policy associated with a specified stream or consumer", "accessLevel": "Write", "resourceTypes": [ { "name": "consumer", "required": true, "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, { "name": "stream", "required": true, "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletestream": { "name": "DeleteStream", "description": "Grants permission to delete a stream and all its shards and data", "accessLevel": "Write", "resourceTypes": [ { "name": "stream", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deregisterstreamconsumer": { "name": "DeregisterStreamConsumer", "description": "Grants permission to deregister a stream consumer with a Kinesis data stream", "accessLevel": "Write", "resourceTypes": [ { "name": "consumer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "describelimits": { "name": "DescribeLimits", "description": "Grants permission to describe the shard limits and usage for the account", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describestream": { "name": "DescribeStream", "description": "Grants permission to describe the specified stream", "accessLevel": "Read", "resourceTypes": [ { "name": "stream", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "describestreamconsumer": { "name": "DescribeStreamConsumer", "description": "Grants permission to get the description of a registered stream consumer", "accessLevel": "Read", "resourceTypes": [ { "name": "consumer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "describestreamsummary": { "name": "DescribeStreamSummary", "description": "Grants permission to provide a summarized description of the specified Kinesis data stream without the shard list", "accessLevel": "Read", "resourceTypes": [ { "name": "stream", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "disableenhancedmonitoring": { "name": "DisableEnhancedMonitoring", "description": "Grants permission to disables enhanced monitoring", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "enableenhancedmonitoring": { "name": "EnableEnhancedMonitoring", "description": "Grants permission to enable enhanced Kinesis data stream monitoring for shard-level metrics", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getrecords": { "name": "GetRecords", "description": "Grants permission to get data records from a shard", "accessLevel": "Read", "resourceTypes": [ { "name": "stream", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getresourcepolicy": { "name": "GetResourcePolicy", "description": "Grants permission to get a resource policy associated with a specified stream or consumer", "accessLevel": "Read", "resourceTypes": [ { "name": "consumer", "required": true, "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, { "name": "stream", "required": true, "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getsharditerator": { "name": "GetShardIterator", "description": "Grants permission to get a shard iterator. A shard iterator expires five minutes after it is returned to the requester", "accessLevel": "Read", "resourceTypes": [ { "name": "stream", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "increasestreamretentionperiod": { "name": "IncreaseStreamRetentionPeriod", "description": "Grants permission to increase the stream's retention period, which is the length of time data records are accessible after they are added to the stream", "accessLevel": "Write", "resourceTypes": [ { "name": "stream", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listshards": { "name": "ListShards", "description": "Grants permission to list the shards in a stream and provides information about each shard", "accessLevel": "List", "resourceTypes": [ { "name": "stream", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "liststreamconsumers": { "name": "ListStreamConsumers", "description": "Grants permission to list the stream consumers registered to receive data from a Kinesis stream using enhanced fan-out, and provides information about each consumer", "accessLevel": "List", "resourceTypes": [ { "name": "stream", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "liststreams": { "name": "ListStreams", "description": "Grants permission to list your streams", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to list the tags for the specified Amazon Kinesis resource", "accessLevel": "Read", "resourceTypes": [ { "name": "consumer", "required": true, "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, { "name": "stream", "required": true, "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listtagsforstream": { "name": "ListTagsForStream", "description": "Grants permission to list the tags for the specified Amazon Kinesis stream", "accessLevel": "Read", "resourceTypes": [ { "name": "stream", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "mergeshards": { "name": "MergeShards", "description": "Grants permission to merge two adjacent shards in a stream and combines them into a single shard to reduce the stream's capacity to ingest and transport data", "accessLevel": "Write", "resourceTypes": [ { "name": "stream", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "putrecord": { "name": "PutRecord", "description": "Grants permission to write a single data record from a producer into an Amazon Kinesis stream", "accessLevel": "Write", "resourceTypes": [ { "name": "stream", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "putrecords": { "name": "PutRecords", "description": "Grants permission to write multiple data records from a producer into an Amazon Kinesis stream in a single call (also referred to as a PutRecords request)", "accessLevel": "Write", "resourceTypes": [ { "name": "stream", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "putresourcepolicy": { "name": "PutResourcePolicy", "description": "Grants permission to attach a resource policy to a specified stream or consumer", "accessLevel": "Write", "resourceTypes": [ { "name": "consumer", "required": true, "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, { "name": "stream", "required": true, "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "registerstreamconsumer": { "name": "RegisterStreamConsumer", "description": "Grants permission to register a stream consumer with a Kinesis data stream", "accessLevel": "Write", "resourceTypes": [ { "name": "stream", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "removetagsfromstream": { "name": "RemoveTagsFromStream", "description": "Grants permission to remove tags from the specified Kinesis data stream. Removed tags are deleted and cannot be recovered after this operation successfully completes", "accessLevel": "Tagging", "resourceTypes": [ { "name": "stream", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys", "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "splitshard": { "name": "SplitShard", "description": "Grants permission to split a shard into two new shards in the Kinesis data stream, to increase the stream's capacity to ingest and transport data", "accessLevel": "Write", "resourceTypes": [ { "name": "stream", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "startstreamencryption": { "name": "StartStreamEncryption", "description": "Grants permission to enable or update server-side encryption using an AWS KMS key for a specified stream", "accessLevel": "Write", "resourceTypes": [ { "name": "kmsKey", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "stream", "required": true, "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "stopstreamencryption": { "name": "StopStreamEncryption", "description": "Grants permission to disable server-side encryption for a specified stream", "accessLevel": "Write", "resourceTypes": [ { "name": "kmsKey", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "stream", "required": true, "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "subscribetoshard": { "name": "SubscribeToShard", "description": "Grants permission to listen to a specific shard with enhanced fan-out", "accessLevel": "Read", "resourceTypes": [ { "name": "consumer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to add or update tags for the specified Amazon Kinesis resource. Each resource can have up to 50 tags", "accessLevel": "Tagging", "resourceTypes": [ { "name": "consumer", "required": true, "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, { "name": "stream", "required": true, "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}" ], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to remove tags from the specified Kinesis data resource. Removed tags are deleted and cannot be recovered after this operation successfully completes", "accessLevel": "Tagging", "resourceTypes": [ { "name": "consumer", "required": true, "conditionKeys": [ "aws:TagKeys", "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, { "name": "stream", "required": true, "conditionKeys": [ "aws:TagKeys", "aws:ResourceTag/${TagKey}" ], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateshardcount": { "name": "UpdateShardCount", "description": "Grants permission to update the shard count of the specified stream to the specified number of shards", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "updatestreammode": { "name": "UpdateStreamMode", "description": "Grants permission to update the capacity mode of the data stream", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] } }