@cloud-copilot/iam-data/data/actions/oam.json

AWS IAM Data

{
  "createlink": {
    "name": "CreateLink",
    "description": "Grants permission to create a link between a monitoring account and a source account for cross-account monitoring",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Sink",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "oam:TagResource"
        ]
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys",
      "oam:ResourceTypes"
    ],
    "dependentActions": []
  },
  "createsink": {
    "name": "CreateSink",
    "description": "Grants permission to create a sink in an account so that it can be used as a monitoring account for cross-account monitoring",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": [
      "oam:TagResource"
    ]
  },
  "deletelink": {
    "name": "DeleteLink",
    "description": "Grants permission to delete a link between a monitoring account and a source account for cross-account monitoring",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Link",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "deletesink": {
    "name": "DeleteSink",
    "description": "Grants permission to delete a cross-account monitoring sink in a monitoring account",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Sink",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getlink": {
    "name": "GetLink",
    "description": "Grants permission to retrieve complete information about one cross-account monitoring link",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Link",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getsink": {
    "name": "GetSink",
    "description": "Grants permission to retrieve complete information about one cross-account monitoring sink",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Sink",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getsinkpolicy": {
    "name": "GetSinkPolicy",
    "description": "Grants permission to retrieve information for the IAM policy for a cross-account monitoring sink",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Sink",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listattachedlinks": {
    "name": "ListAttachedLinks",
    "description": "Grants permission to retrieve a list of links that are linked for a cross-account monitoring sink",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Sink",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listlinks": {
    "name": "ListLinks",
    "description": "Grants permission to retrieve the ARNs of cross-account monitoring links in this account",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listsinks": {
    "name": "ListSinks",
    "description": "Grants permission to retrieve the ARNs of cross-account monitoring sinks in this account",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtagsforresource": {
    "name": "ListTagsForResource",
    "description": "Grants permission to list the tags for a resource",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Link",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Sink",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putsinkpolicy": {
    "name": "PutSinkPolicy",
    "description": "Grants permission to create or update the IAM policy for a cross-account monitoring sink",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Sink",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "tagresource": {
    "name": "TagResource",
    "description": "Grants permission to tag a resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "Link",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Sink",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "untagresource": {
    "name": "UntagResource",
    "description": "Grants permission to untag a resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "Link",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Sink",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "updatelink": {
    "name": "UpdateLink",
    "description": "Grants permission to update an existing link between a monitoring account and a source account",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Link",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}",
      "oam:ResourceTypes"
    ],
    "dependentActions": []
  }
}