@cloud-copilot/iam-data
Version:
388 lines • 9.87 kB
JSON
{
"createcontainer": {
"name": "CreateContainer",
"description": "Grants permission to create a container",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}"
],
"dependentActions": []
},
"deletecontainer": {
"name": "DeleteContainer",
"description": "Grants permission to delete a container",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "container",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletecontainerpolicy": {
"name": "DeleteContainerPolicy",
"description": "Grants permission to delete the access policy of a container",
"accessLevel": "Permissions management",
"resourceTypes": [
{
"name": "container",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletecorspolicy": {
"name": "DeleteCorsPolicy",
"description": "Grants permission to delete the CORS policy from a container",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "container",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletelifecyclepolicy": {
"name": "DeleteLifecyclePolicy",
"description": "Grants permission to delete the lifecycle policy from a container",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "container",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletemetricpolicy": {
"name": "DeleteMetricPolicy",
"description": "Grants permission to delete the metric policy from a container",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "container",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteobject": {
"name": "DeleteObject",
"description": "Grants permission to delete an object",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "object",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describecontainer": {
"name": "DescribeContainer",
"description": "Grants permission to retrieve details on a container",
"accessLevel": "List",
"resourceTypes": [
{
"name": "container",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeobject": {
"name": "DescribeObject",
"description": "Grants permission to retrieve metadata for an object",
"accessLevel": "List",
"resourceTypes": [
{
"name": "object",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getcontainerpolicy": {
"name": "GetContainerPolicy",
"description": "Grants permission to retrieve the access policy of a container",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "container",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getcorspolicy": {
"name": "GetCorsPolicy",
"description": "Grants permission to retrieve the CORS policy of a container",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "container",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getlifecyclepolicy": {
"name": "GetLifecyclePolicy",
"description": "Grants permission to retrieve the lifecycle policy that is assigned to a container",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "container",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getmetricpolicy": {
"name": "GetMetricPolicy",
"description": "Grants permission to retrieve the metric policy that is assigned to a container",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "container",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getobject": {
"name": "GetObject",
"description": "Grants permission to retrieve an object",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "object",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listcontainers": {
"name": "ListContainers",
"description": "Grants permission to retrieve a list of containers in the current account",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listitems": {
"name": "ListItems",
"description": "Grants permission to retrieve a list of objects and subfolders that are stored in a folder",
"accessLevel": "List",
"resourceTypes": [
{
"name": "folder",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listtagsforresource": {
"name": "ListTagsForResource",
"description": "Grants permission to list tags on a container",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "container",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"putcontainerpolicy": {
"name": "PutContainerPolicy",
"description": "Grants permission to create or replace the access policy of a container",
"accessLevel": "Permissions management",
"resourceTypes": [
{
"name": "container",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"putcorspolicy": {
"name": "PutCorsPolicy",
"description": "Grants permission to add or modify the CORS policy of a container",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "container",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"putlifecyclepolicy": {
"name": "PutLifecyclePolicy",
"description": "Grants permission to add or modify the lifecycle policy that is assigned to a container",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "container",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"putmetricpolicy": {
"name": "PutMetricPolicy",
"description": "Grants permission to add or modify the metric policy that is assigned to a container",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "container",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"putobject": {
"name": "PutObject",
"description": "Grants permission to upload an object",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "object",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"startaccesslogging": {
"name": "StartAccessLogging",
"description": "Grants permission to start access logging on a container",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "container",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": [
"iam:PassRole"
]
},
"stopaccesslogging": {
"name": "StopAccessLogging",
"description": "Grants permission to stop access logging on a container",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "container",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"tagresource": {
"name": "TagResource",
"description": "Grants permission to add tags to a container",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "container",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}"
],
"dependentActions": []
},
"untagresource": {
"name": "UntagResource",
"description": "Grants permission to remove tags from a container",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "container",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys"
],
"dependentActions": []
}
}