@cloud-copilot/iam-data

{ "cancelsession": { "name": "CancelSession", "description": "Grants permission to cancel an approval session", "accessLevel": "Write", "resourceTypes": [ { "name": "session", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "mpa:RequestedOperation", "mpa:ProtectedResourceAccount" ], "dependentActions": [] }, "createapprovalteam": { "name": "CreateApprovalTeam", "description": "Grants permission to create an approval team", "accessLevel": "Write", "resourceTypes": [ { "name": "approval-team", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createidentitysource": { "name": "CreateIdentitySource", "description": "Grants permission to create an identity source", "accessLevel": "Write", "resourceTypes": [ { "name": "identity-source", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "deleteidentitysource": { "name": "DeleteIdentitySource", "description": "Grants permission to delete an identity source", "accessLevel": "Write", "resourceTypes": [ { "name": "identity-source", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deleteinactiveapprovalteamversion": { "name": "DeleteInactiveApprovalTeamVersion", "description": "Grants permission to delete an inactive approval team", "accessLevel": "Write", "resourceTypes": [ { "name": "approval-team", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deleteresourcepolicy": { "name": "DeleteResourcePolicy", "isPermissionOnly": true, "description": "Grants permission to delete a resource policy", "accessLevel": "Permissions management", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getapprovalteam": { "name": "GetApprovalTeam", "description": "Grants permission to retrieve details for an approval team", "accessLevel": "Read", "resourceTypes": [ { "name": "approval-team", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getidentitysource": { "name": "GetIdentitySource", "description": "Grants permission to retrieve details for an identity source", "accessLevel": "Read", "resourceTypes": [ { "name": "identity-source", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getpolicyversion": { "name": "GetPolicyVersion", "description": "Grants permission to retrieve details for a policy", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getresourcepolicy": { "name": "GetResourcePolicy", "description": "Grants permission to retrieve details for a specific resource", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getsession": { "name": "GetSession", "description": "Grants permission to retrieve details for an approval session", "accessLevel": "Read", "resourceTypes": [ { "name": "session", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "mpa:RequestedOperation", "mpa:ProtectedResourceAccount" ], "dependentActions": [] }, "listapprovalteams": { "name": "ListApprovalTeams", "description": "Grants permission to list approval teams", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listidentitysources": { "name": "ListIdentitySources", "description": "Grants permission to list identity sources", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listpolicies": { "name": "ListPolicies", "description": "Grants permission to list policies", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listpolicyversions": { "name": "ListPolicyVersions", "description": "Grants permission to list the versions for policies", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listresourcepolicies": { "name": "ListResourcePolicies", "description": "Grants permission to list policies for a resource", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listsessions": { "name": "ListSessions", "description": "Grants permission to list approval sessions", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to list tags for a resource", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "putresourcepolicy": { "name": "PutResourcePolicy", "isPermissionOnly": true, "description": "Grants permission to create or update policies for a resource", "accessLevel": "Permissions management", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "startactiveapprovalteamdeletion": { "name": "StartActiveApprovalTeamDeletion", "description": "Grants permission to start the deletion process for an active approval team", "accessLevel": "Write", "resourceTypes": [ { "name": "approval-team", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "startsession": { "name": "StartSession", "isPermissionOnly": true, "description": "Grants permission to start an approval session", "accessLevel": "Write", "resourceTypes": [ { "name": "session", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "mpa:RequestedOperation", "mpa:ProtectedResourceAccount" ], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to tag a resource", "accessLevel": "Tagging", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to untag a resource", "accessLevel": "Tagging", "resourceTypes": [], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "updateapprovalteam": { "name": "UpdateApprovalTeam", "description": "Grants permission to update approval team", "accessLevel": "Write", "resourceTypes": [ { "name": "approval-team", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] } }