@cloud-copilot/iam-data
Version:
1,056 lines • 27.8 kB
JSON
{
"assigninstance": {
"name": "AssignInstance",
"description": "Grants permission to assign a registered instance to a layer",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"assignvolume": {
"name": "AssignVolume",
"description": "Grants permission to assign one of the stack's registered Amazon EBS volumes to a specified instance",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"associateelasticip": {
"name": "AssociateElasticIp",
"description": "Grants permission to associate one of the stack's registered Elastic IP addresses with a specified instance",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"attachelasticloadbalancer": {
"name": "AttachElasticLoadBalancer",
"description": "Grants permission to attach an Elastic Load Balancing load balancer to a specified layer",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"clonestack": {
"name": "CloneStack",
"description": "Grants permission to create a clone of a specified stack",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createapp": {
"name": "CreateApp",
"description": "Grants permission to create an app for a specified stack",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createdeployment": {
"name": "CreateDeployment",
"description": "Grants permission to run deployment or stack commands",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createinstance": {
"name": "CreateInstance",
"description": "Grants permission to create an instance in a specified stack",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createlayer": {
"name": "CreateLayer",
"description": "Grants permission to create a layer",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createstack": {
"name": "CreateStack",
"description": "Grants permission to create a new stack",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"createuserprofile": {
"name": "CreateUserProfile",
"description": "Grants permission to create a new user profile",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deleteapp": {
"name": "DeleteApp",
"description": "Grants permission to delete a specified app",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteinstance": {
"name": "DeleteInstance",
"description": "Grants permission to delete a specified instance, which terminates the associated Amazon EC2 instance",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletelayer": {
"name": "DeleteLayer",
"description": "Grants permission to delete a specified layer",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletestack": {
"name": "DeleteStack",
"description": "Grants permission to delete a specified stack",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deleteuserprofile": {
"name": "DeleteUserProfile",
"description": "Grants permission to delete a user profile",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"deregisterecscluster": {
"name": "DeregisterEcsCluster",
"description": "Grants permission to delete a user profile",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deregisterelasticip": {
"name": "DeregisterElasticIp",
"description": "Grants permission to deregister a specified Elastic IP address",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deregisterinstance": {
"name": "DeregisterInstance",
"description": "Grants permission to deregister a registered Amazon EC2 or on-premises instance",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deregisterrdsdbinstance": {
"name": "DeregisterRdsDbInstance",
"description": "Grants permission to deregister an Amazon RDS instance",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deregistervolume": {
"name": "DeregisterVolume",
"description": "Grants permission to deregister an Amazon EBS volume",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeagentversions": {
"name": "DescribeAgentVersions",
"description": "Grants permission to describe the available AWS OpsWorks agent versions",
"accessLevel": "List",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeapps": {
"name": "DescribeApps",
"description": "Grants permission to request a description of a specified set of apps",
"accessLevel": "List",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describecommands": {
"name": "DescribeCommands",
"description": "Grants permission to describe the results of specified commands",
"accessLevel": "List",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describedeployments": {
"name": "DescribeDeployments",
"description": "Grants permission to request a description of a specified set of deployments",
"accessLevel": "List",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeecsclusters": {
"name": "DescribeEcsClusters",
"description": "Grants permission to describe Amazon ECS clusters that are registered with a stack",
"accessLevel": "List",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeelasticips": {
"name": "DescribeElasticIps",
"description": "Grants permission to describe Elastic IP addresses",
"accessLevel": "List",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeelasticloadbalancers": {
"name": "DescribeElasticLoadBalancers",
"description": "Grants permission to describe a stack's Elastic Load Balancing instances",
"accessLevel": "List",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeinstances": {
"name": "DescribeInstances",
"description": "Grants permission to request a description of a set of instances",
"accessLevel": "List",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describelayers": {
"name": "DescribeLayers",
"description": "Grants permission to request a description of one or more layers in a specified stack",
"accessLevel": "List",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeloadbasedautoscaling": {
"name": "DescribeLoadBasedAutoScaling",
"description": "Grants permission to describe load-based auto scaling configurations for specified layers",
"accessLevel": "List",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describemyuserprofile": {
"name": "DescribeMyUserProfile",
"description": "Grants permission to describe a user's SSH information",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"describeoperatingsystems": {
"name": "DescribeOperatingSystems",
"description": "Grants permission to describe the operating systems that are supported by AWS OpsWorks Stacks",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"describepermissions": {
"name": "DescribePermissions",
"description": "Grants permission to describe the permissions for a specified stack",
"accessLevel": "List",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeraidarrays": {
"name": "DescribeRaidArrays",
"description": "Grants permission to describe an instance's RAID arrays",
"accessLevel": "List",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describerdsdbinstances": {
"name": "DescribeRdsDbInstances",
"description": "Grants permission to describe Amazon RDS instances",
"accessLevel": "List",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeserviceerrors": {
"name": "DescribeServiceErrors",
"description": "Grants permission to describe AWS OpsWorks service errors",
"accessLevel": "List",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describestackprovisioningparameters": {
"name": "DescribeStackProvisioningParameters",
"description": "Grants permission to request a description of a stack's provisioning parameters",
"accessLevel": "List",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describestacksummary": {
"name": "DescribeStackSummary",
"description": "Grants permission to describe the number of layers and apps in a specified stack, and the number of instances in each state, such as running_setup or online",
"accessLevel": "List",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describestacks": {
"name": "DescribeStacks",
"description": "Grants permission to request a description of one or more stacks",
"accessLevel": "List",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describetimebasedautoscaling": {
"name": "DescribeTimeBasedAutoScaling",
"description": "Grants permission to describe time-based auto scaling configurations for specified instances",
"accessLevel": "List",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeuserprofiles": {
"name": "DescribeUserProfiles",
"description": "Grants permission to describe specified users",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"describevolumes": {
"name": "DescribeVolumes",
"description": "Grants permission to describe an instance's Amazon EBS volumes",
"accessLevel": "List",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"detachelasticloadbalancer": {
"name": "DetachElasticLoadBalancer",
"description": "Grants permission to detache a specified Elastic Load Balancing instance from its layer",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"disassociateelasticip": {
"name": "DisassociateElasticIp",
"description": "Grants permission to disassociate an Elastic IP address from its instance",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"gethostnamesuggestion": {
"name": "GetHostnameSuggestion",
"description": "Grants permission to get a generated host name for the specified layer, based on the current host name theme",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"grantaccess": {
"name": "GrantAccess",
"description": "Grants permission to grant RDP access to a Windows instance for a specified time period",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listtags": {
"name": "ListTags",
"description": "Grants permission to return a list of tags that are applied to the specified stack or layer",
"accessLevel": "List",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"rebootinstance": {
"name": "RebootInstance",
"description": "Grants permission to reboot a specified instance",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"registerecscluster": {
"name": "RegisterEcsCluster",
"description": "Grants permission to register a specified Amazon ECS cluster with a stack",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"registerelasticip": {
"name": "RegisterElasticIp",
"description": "Grants permission to register an Elastic IP address with a specified stack",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"registerinstance": {
"name": "RegisterInstance",
"description": "Grants permission to register instances with a specified stack that were created outside of AWS OpsWorks",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"registerrdsdbinstance": {
"name": "RegisterRdsDbInstance",
"description": "Grants permission to register an Amazon RDS instance with a stack",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"registervolume": {
"name": "RegisterVolume",
"description": "Grants permission to register an Amazon EBS volume with a specified stack",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"setloadbasedautoscaling": {
"name": "SetLoadBasedAutoScaling",
"description": "Grants permission to specify the load-based auto scaling configuration for a specified layer",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"setpermission": {
"name": "SetPermission",
"description": "Grants permission to specify a user's permissions",
"accessLevel": "Permissions management",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"settimebasedautoscaling": {
"name": "SetTimeBasedAutoScaling",
"description": "Grants permission to specify the time-based auto scaling configuration for a specified instance",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"startinstance": {
"name": "StartInstance",
"description": "Grants permission to start a specified instance",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"startstack": {
"name": "StartStack",
"description": "Grants permission to start a stack's instances",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"stopinstance": {
"name": "StopInstance",
"description": "Grants permission to stop a specified instance",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"stopstack": {
"name": "StopStack",
"description": "Grants permission to stop a specified stack",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"tagresource": {
"name": "TagResource",
"description": "Grants permission to apply tags to a specified stack or layer",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"unassigninstance": {
"name": "UnassignInstance",
"description": "Grants permission to unassign a registered instance from all of it's layers",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"unassignvolume": {
"name": "UnassignVolume",
"description": "Grants permission to unassign an assigned Amazon EBS volume",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"untagresource": {
"name": "UntagResource",
"description": "Grants permission to remove tags from a specified stack or layer",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updateapp": {
"name": "UpdateApp",
"description": "Grants permission to update a specified app",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updateelasticip": {
"name": "UpdateElasticIp",
"description": "Grants permission to update a registered Elastic IP address's name",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updateinstance": {
"name": "UpdateInstance",
"description": "Grants permission to update a specified instance",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updatelayer": {
"name": "UpdateLayer",
"description": "Grants permission to update a specified layer",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updatemyuserprofile": {
"name": "UpdateMyUserProfile",
"description": "Grants permission to update a user's SSH public key",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"updaterdsdbinstance": {
"name": "UpdateRdsDbInstance",
"description": "Grants permission to update an Amazon RDS instance",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updatestack": {
"name": "UpdateStack",
"description": "Grants permission to update a specified stack",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updateuserprofile": {
"name": "UpdateUserProfile",
"description": "Grants permission to update a specified user profile",
"accessLevel": "Permissions management",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"updatevolume": {
"name": "UpdateVolume",
"description": "Grants permission to update an Amazon EBS volume's name or mount point",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stack",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
}
}