@cloud-copilot/iam-data

{ "associateprojectadminuser": { "name": "AssociateProjectAdminUser", "isPermissionOnly": true, "description": "Grants permission to associate a user with the project as an administrator", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "project", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "sso-directory:DescribeUsers", "sso:AssociateProfile", "sso:GetManagedApplicationInstance", "sso:GetProfile", "sso:ListDirectoryAssociations", "sso:ListProfileAssociations", "sso:ListProfiles" ] }, "createproject": { "name": "CreateProject", "isPermissionOnly": true, "description": "Grants permission to create a project", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [ "iam:CreateServiceLinkedRole", "kms:CreateGrant", "sso:CreateManagedApplicationInstance", "sso:DeleteManagedApplicationInstance", "sso:DescribeRegisteredRegions" ] }, "createprojectuserassociation": { "name": "CreateProjectUserAssociation", "isPermissionOnly": true, "description": "Grants permission to associate a user with the project", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "project", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "sso-directory:DescribeUsers", "sso:AssociateProfile", "sso:GetManagedApplicationInstance", "sso:GetProfile", "sso:ListDirectoryAssociations", "sso:ListProfileAssociations", "sso:ListProfiles" ] }, "createuseraccessroleassociation": { "name": "CreateUserAccessRoleAssociation", "isPermissionOnly": true, "description": "Grants permission to associate an access role with the user", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "project", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "sso-directory:DescribeUsers", "sso:GetManagedApplicationInstance", "sso:GetProfile", "sso:ListDirectoryAssociations", "sso:ListProfileAssociations", "sso:ListProfiles" ] }, "deleteproject": { "name": "DeleteProject", "isPermissionOnly": true, "description": "Grants permission to delete a project", "accessLevel": "Write", "resourceTypes": [ { "name": "project", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "sso:DeleteManagedApplicationInstance" ] }, "deleteprojectuserassociation": { "name": "DeleteProjectUserAssociation", "isPermissionOnly": true, "description": "Grants permission to disassociate a user from the project", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "project", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "sso-directory:DescribeUsers", "sso:DisassociateProfile", "sso:GetManagedApplicationInstance", "sso:GetProfile", "sso:ListDirectoryAssociations", "sso:ListProfiles" ] }, "deleteuseraccessroleassociation": { "name": "DeleteUserAccessRoleAssociation", "isPermissionOnly": true, "description": "Grants permission to disassociate an access role from the user", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "project", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "disassociateprojectadminuser": { "name": "DisassociateProjectAdminUser", "isPermissionOnly": true, "description": "Grants permission to disassociate an administrator from the project", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "project", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "sso-directory:DescribeUsers", "sso:DisassociateProfile", "sso:GetManagedApplicationInstance", "sso:GetProfile", "sso:ListDirectoryAssociations", "sso:ListProfiles" ] }, "getproject": { "name": "GetProject", "isPermissionOnly": true, "description": "Grants permission to get information about a project", "accessLevel": "Read", "resourceTypes": [ { "name": "project", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getprojectadminuser": { "name": "GetProjectAdminUser", "isPermissionOnly": true, "description": "Grants permission to describe an administrator who is associated with the project", "accessLevel": "Read", "resourceTypes": [ { "name": "project", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "sso-directory:DescribeUsers", "sso:GetManagedApplicationInstance", "sso:ListProfileAssociations" ] }, "listprojectadminusers": { "name": "ListProjectAdminUsers", "isPermissionOnly": true, "description": "Grants permission to list all administrators associated with the project", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "project", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "sso-directory:DescribeUsers", "sso:GetManagedApplicationInstance" ] }, "listprojectuserassociations": { "name": "ListProjectUserAssociations", "isPermissionOnly": true, "description": "Grants permission to list all users associated with the project", "accessLevel": "List", "resourceTypes": [ { "name": "project", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "sso:GetManagedApplicationInstance", "sso:GetProfile", "sso:ListDirectoryAssociations", "sso:ListProfileAssociations", "sso:ListProfiles" ] }, "listprojects": { "name": "ListProjects", "isPermissionOnly": true, "description": "Grants permission to list all projects", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "isPermissionOnly": true, "description": "Grants permission to list all tags for a resource", "accessLevel": "Read", "resourceTypes": [ { "name": "project", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listuseraccessroleassociations": { "name": "ListUserAccessRoleAssociations", "isPermissionOnly": true, "description": "Grants permission to list all access roles associated with the user", "accessLevel": "List", "resourceTypes": [ { "name": "project", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "tagresource": { "name": "TagResource", "isPermissionOnly": true, "description": "Grants permission to tag a resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "project", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "isPermissionOnly": true, "description": "Grants permission to untag a resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "project", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] }, "updateproject": { "name": "UpdateProject", "isPermissionOnly": true, "description": "Grants permission to update a project", "accessLevel": "Write", "resourceTypes": [ { "name": "project", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] } }