UNPKG

@cloud-copilot/iam-data

Version:
1,056 lines 27.8 kB
{ "assigninstance": { "name": "AssignInstance", "description": "Grants permission to assign a registered instance to a layer", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "assignvolume": { "name": "AssignVolume", "description": "Grants permission to assign one of the stack's registered Amazon EBS volumes to a specified instance", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "associateelasticip": { "name": "AssociateElasticIp", "description": "Grants permission to associate one of the stack's registered Elastic IP addresses with a specified instance", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "attachelasticloadbalancer": { "name": "AttachElasticLoadBalancer", "description": "Grants permission to attach an Elastic Load Balancing load balancer to a specified layer", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "clonestack": { "name": "CloneStack", "description": "Grants permission to create a clone of a specified stack", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createapp": { "name": "CreateApp", "description": "Grants permission to create an app for a specified stack", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createdeployment": { "name": "CreateDeployment", "description": "Grants permission to run deployment or stack commands", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createinstance": { "name": "CreateInstance", "description": "Grants permission to create an instance in a specified stack", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createlayer": { "name": "CreateLayer", "description": "Grants permission to create a layer", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createstack": { "name": "CreateStack", "description": "Grants permission to create a new stack", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createuserprofile": { "name": "CreateUserProfile", "description": "Grants permission to create a new user profile", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleteapp": { "name": "DeleteApp", "description": "Grants permission to delete a specified app", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteinstance": { "name": "DeleteInstance", "description": "Grants permission to delete a specified instance, which terminates the associated Amazon EC2 instance", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletelayer": { "name": "DeleteLayer", "description": "Grants permission to delete a specified layer", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletestack": { "name": "DeleteStack", "description": "Grants permission to delete a specified stack", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteuserprofile": { "name": "DeleteUserProfile", "description": "Grants permission to delete a user profile", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deregisterecscluster": { "name": "DeregisterEcsCluster", "description": "Grants permission to delete a user profile", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deregisterelasticip": { "name": "DeregisterElasticIp", "description": "Grants permission to deregister a specified Elastic IP address", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deregisterinstance": { "name": "DeregisterInstance", "description": "Grants permission to deregister a registered Amazon EC2 or on-premises instance", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deregisterrdsdbinstance": { "name": "DeregisterRdsDbInstance", "description": "Grants permission to deregister an Amazon RDS instance", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deregistervolume": { "name": "DeregisterVolume", "description": "Grants permission to deregister an Amazon EBS volume", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeagentversions": { "name": "DescribeAgentVersions", "description": "Grants permission to describe the available AWS OpsWorks agent versions", "accessLevel": "List", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeapps": { "name": "DescribeApps", "description": "Grants permission to request a description of a specified set of apps", "accessLevel": "List", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describecommands": { "name": "DescribeCommands", "description": "Grants permission to describe the results of specified commands", "accessLevel": "List", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describedeployments": { "name": "DescribeDeployments", "description": "Grants permission to request a description of a specified set of deployments", "accessLevel": "List", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeecsclusters": { "name": "DescribeEcsClusters", "description": "Grants permission to describe Amazon ECS clusters that are registered with a stack", "accessLevel": "List", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeelasticips": { "name": "DescribeElasticIps", "description": "Grants permission to describe Elastic IP addresses", "accessLevel": "List", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeelasticloadbalancers": { "name": "DescribeElasticLoadBalancers", "description": "Grants permission to describe a stack's Elastic Load Balancing instances", "accessLevel": "List", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeinstances": { "name": "DescribeInstances", "description": "Grants permission to request a description of a set of instances", "accessLevel": "List", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describelayers": { "name": "DescribeLayers", "description": "Grants permission to request a description of one or more layers in a specified stack", "accessLevel": "List", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeloadbasedautoscaling": { "name": "DescribeLoadBasedAutoScaling", "description": "Grants permission to describe load-based auto scaling configurations for specified layers", "accessLevel": "List", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describemyuserprofile": { "name": "DescribeMyUserProfile", "description": "Grants permission to describe a user's SSH information", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeoperatingsystems": { "name": "DescribeOperatingSystems", "description": "Grants permission to describe the operating systems that are supported by AWS OpsWorks Stacks", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describepermissions": { "name": "DescribePermissions", "description": "Grants permission to describe the permissions for a specified stack", "accessLevel": "List", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeraidarrays": { "name": "DescribeRaidArrays", "description": "Grants permission to describe an instance's RAID arrays", "accessLevel": "List", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describerdsdbinstances": { "name": "DescribeRdsDbInstances", "description": "Grants permission to describe Amazon RDS instances", "accessLevel": "List", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeserviceerrors": { "name": "DescribeServiceErrors", "description": "Grants permission to describe AWS OpsWorks service errors", "accessLevel": "List", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describestackprovisioningparameters": { "name": "DescribeStackProvisioningParameters", "description": "Grants permission to request a description of a stack's provisioning parameters", "accessLevel": "List", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describestacksummary": { "name": "DescribeStackSummary", "description": "Grants permission to describe the number of layers and apps in a specified stack, and the number of instances in each state, such as running_setup or online", "accessLevel": "List", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describestacks": { "name": "DescribeStacks", "description": "Grants permission to request a description of one or more stacks", "accessLevel": "List", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describetimebasedautoscaling": { "name": "DescribeTimeBasedAutoScaling", "description": "Grants permission to describe time-based auto scaling configurations for specified instances", "accessLevel": "List", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeuserprofiles": { "name": "DescribeUserProfiles", "description": "Grants permission to describe specified users", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describevolumes": { "name": "DescribeVolumes", "description": "Grants permission to describe an instance's Amazon EBS volumes", "accessLevel": "List", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "detachelasticloadbalancer": { "name": "DetachElasticLoadBalancer", "description": "Grants permission to detache a specified Elastic Load Balancing instance from its layer", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "disassociateelasticip": { "name": "DisassociateElasticIp", "description": "Grants permission to disassociate an Elastic IP address from its instance", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "gethostnamesuggestion": { "name": "GetHostnameSuggestion", "description": "Grants permission to get a generated host name for the specified layer, based on the current host name theme", "accessLevel": "Read", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "grantaccess": { "name": "GrantAccess", "description": "Grants permission to grant RDP access to a Windows instance for a specified time period", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listtags": { "name": "ListTags", "description": "Grants permission to return a list of tags that are applied to the specified stack or layer", "accessLevel": "List", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "rebootinstance": { "name": "RebootInstance", "description": "Grants permission to reboot a specified instance", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "registerecscluster": { "name": "RegisterEcsCluster", "description": "Grants permission to register a specified Amazon ECS cluster with a stack", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "registerelasticip": { "name": "RegisterElasticIp", "description": "Grants permission to register an Elastic IP address with a specified stack", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "registerinstance": { "name": "RegisterInstance", "description": "Grants permission to register instances with a specified stack that were created outside of AWS OpsWorks", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "registerrdsdbinstance": { "name": "RegisterRdsDbInstance", "description": "Grants permission to register an Amazon RDS instance with a stack", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "registervolume": { "name": "RegisterVolume", "description": "Grants permission to register an Amazon EBS volume with a specified stack", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "setloadbasedautoscaling": { "name": "SetLoadBasedAutoScaling", "description": "Grants permission to specify the load-based auto scaling configuration for a specified layer", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "setpermission": { "name": "SetPermission", "description": "Grants permission to specify a user's permissions", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "settimebasedautoscaling": { "name": "SetTimeBasedAutoScaling", "description": "Grants permission to specify the time-based auto scaling configuration for a specified instance", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "startinstance": { "name": "StartInstance", "description": "Grants permission to start a specified instance", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "startstack": { "name": "StartStack", "description": "Grants permission to start a stack's instances", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "stopinstance": { "name": "StopInstance", "description": "Grants permission to stop a specified instance", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "stopstack": { "name": "StopStack", "description": "Grants permission to stop a specified stack", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to apply tags to a specified stack or layer", "accessLevel": "Tagging", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "unassigninstance": { "name": "UnassignInstance", "description": "Grants permission to unassign a registered instance from all of it's layers", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "unassignvolume": { "name": "UnassignVolume", "description": "Grants permission to unassign an assigned Amazon EBS volume", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to remove tags from a specified stack or layer", "accessLevel": "Tagging", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateapp": { "name": "UpdateApp", "description": "Grants permission to update a specified app", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateelasticip": { "name": "UpdateElasticIp", "description": "Grants permission to update a registered Elastic IP address's name", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateinstance": { "name": "UpdateInstance", "description": "Grants permission to update a specified instance", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatelayer": { "name": "UpdateLayer", "description": "Grants permission to update a specified layer", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatemyuserprofile": { "name": "UpdateMyUserProfile", "description": "Grants permission to update a user's SSH public key", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "updaterdsdbinstance": { "name": "UpdateRdsDbInstance", "description": "Grants permission to update an Amazon RDS instance", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatestack": { "name": "UpdateStack", "description": "Grants permission to update a specified stack", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateuserprofile": { "name": "UpdateUserProfile", "description": "Grants permission to update a specified user profile", "accessLevel": "Permissions management", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "updatevolume": { "name": "UpdateVolume", "description": "Grants permission to update an Amazon EBS volume's name or mount point", "accessLevel": "Write", "resourceTypes": [ { "name": "stack", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] } }