UNPKG

@cloud-copilot/iam-data

Version:
388 lines 9.87 kB
{ "createcontainer": { "name": "CreateContainer", "description": "Grants permission to create a container", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [] }, "deletecontainer": { "name": "DeleteContainer", "description": "Grants permission to delete a container", "accessLevel": "Write", "resourceTypes": [ { "name": "container", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletecontainerpolicy": { "name": "DeleteContainerPolicy", "description": "Grants permission to delete the access policy of a container", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "container", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletecorspolicy": { "name": "DeleteCorsPolicy", "description": "Grants permission to delete the CORS policy from a container", "accessLevel": "Write", "resourceTypes": [ { "name": "container", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletelifecyclepolicy": { "name": "DeleteLifecyclePolicy", "description": "Grants permission to delete the lifecycle policy from a container", "accessLevel": "Write", "resourceTypes": [ { "name": "container", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletemetricpolicy": { "name": "DeleteMetricPolicy", "description": "Grants permission to delete the metric policy from a container", "accessLevel": "Write", "resourceTypes": [ { "name": "container", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteobject": { "name": "DeleteObject", "description": "Grants permission to delete an object", "accessLevel": "Write", "resourceTypes": [ { "name": "object", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describecontainer": { "name": "DescribeContainer", "description": "Grants permission to retrieve details on a container", "accessLevel": "List", "resourceTypes": [ { "name": "container", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeobject": { "name": "DescribeObject", "description": "Grants permission to retrieve metadata for an object", "accessLevel": "List", "resourceTypes": [ { "name": "object", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getcontainerpolicy": { "name": "GetContainerPolicy", "description": "Grants permission to retrieve the access policy of a container", "accessLevel": "Read", "resourceTypes": [ { "name": "container", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getcorspolicy": { "name": "GetCorsPolicy", "description": "Grants permission to retrieve the CORS policy of a container", "accessLevel": "Read", "resourceTypes": [ { "name": "container", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getlifecyclepolicy": { "name": "GetLifecyclePolicy", "description": "Grants permission to retrieve the lifecycle policy that is assigned to a container", "accessLevel": "Read", "resourceTypes": [ { "name": "container", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getmetricpolicy": { "name": "GetMetricPolicy", "description": "Grants permission to retrieve the metric policy that is assigned to a container", "accessLevel": "Read", "resourceTypes": [ { "name": "container", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getobject": { "name": "GetObject", "description": "Grants permission to retrieve an object", "accessLevel": "Read", "resourceTypes": [ { "name": "object", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listcontainers": { "name": "ListContainers", "description": "Grants permission to retrieve a list of containers in the current account", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listitems": { "name": "ListItems", "description": "Grants permission to retrieve a list of objects and subfolders that are stored in a folder", "accessLevel": "List", "resourceTypes": [ { "name": "folder", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to list tags on a container", "accessLevel": "Read", "resourceTypes": [ { "name": "container", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putcontainerpolicy": { "name": "PutContainerPolicy", "description": "Grants permission to create or replace the access policy of a container", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "container", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putcorspolicy": { "name": "PutCorsPolicy", "description": "Grants permission to add or modify the CORS policy of a container", "accessLevel": "Write", "resourceTypes": [ { "name": "container", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putlifecyclepolicy": { "name": "PutLifecyclePolicy", "description": "Grants permission to add or modify the lifecycle policy that is assigned to a container", "accessLevel": "Write", "resourceTypes": [ { "name": "container", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putmetricpolicy": { "name": "PutMetricPolicy", "description": "Grants permission to add or modify the metric policy that is assigned to a container", "accessLevel": "Write", "resourceTypes": [ { "name": "container", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putobject": { "name": "PutObject", "description": "Grants permission to upload an object", "accessLevel": "Write", "resourceTypes": [ { "name": "object", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "startaccesslogging": { "name": "StartAccessLogging", "description": "Grants permission to start access logging on a container", "accessLevel": "Write", "resourceTypes": [ { "name": "container", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "iam:PassRole" ] }, "stopaccesslogging": { "name": "StopAccessLogging", "description": "Grants permission to stop access logging on a container", "accessLevel": "Write", "resourceTypes": [ { "name": "container", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to add tags to a container", "accessLevel": "Tagging", "resourceTypes": [ { "name": "container", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to remove tags from a container", "accessLevel": "Tagging", "resourceTypes": [ { "name": "container", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] } }