@cloud-copilot/iam-data/data/actions/osis.json

AWS IAM Data

{
  "createpipeline": {
    "name": "CreatePipeline",
    "description": "Grants permission to create an OpenSearch Ingestion pipeline",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": [
      "iam:CreateServiceLinkedRole",
      "iam:PassRole",
      "kms:DescribeKey",
      "kms:GenerateDataKeyWithoutPlaintext",
      "logs:CreateLogDelivery"
    ]
  },
  "deletepipeline": {
    "name": "DeletePipeline",
    "description": "Grants permission to delete an OpenSearch Ingestion pipeline",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "pipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "logs:DeleteLogDelivery",
      "logs:GetLogDelivery",
      "logs:ListLogDeliveries"
    ]
  },
  "getpipeline": {
    "name": "GetPipeline",
    "description": "Grants permission to retrieve configuration information for an OpenSearch Ingestion pipeline",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "pipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getpipelineblueprint": {
    "name": "GetPipelineBlueprint",
    "description": "Grants permission to get the contents of an OpenSearch Ingestion pipeline blueprint",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "pipeline-blueprint",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getpipelinechangeprogress": {
    "name": "GetPipelineChangeProgress",
    "description": "Grants permission to get granular information about the status of an OpenSearch Ingestion pipeline",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "pipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "ingest": {
    "name": "Ingest",
    "description": "Grants permission to ingest data through an OpenSearch Ingestion pipeline",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "pipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listpipelineblueprints": {
    "name": "ListPipelineBlueprints",
    "description": "Grants permission to list the names of available blueprints for an OpenSearch Ingestion pipeline configuration",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listpipelines": {
    "name": "ListPipelines",
    "description": "Grants permission to list basic configuration for each OpenSearch Ingestion pipeline in the current account and Region",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtagsforresource": {
    "name": "ListTagsForResource",
    "description": "Grants permission to list all resource tags associated with an OpenSearch Ingestion pipeline",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "pipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "startpipeline": {
    "name": "StartPipeline",
    "description": "Grants permission to start an OpenSearch Ingestion pipeline",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "pipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "stoppipeline": {
    "name": "StopPipeline",
    "description": "Grants permission to stop an OpenSearch Ingestion pipeline",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "pipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "tagresource": {
    "name": "TagResource",
    "description": "Grants permission to attach resource tags to an OpenSearch Ingestion pipeline",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "pipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "untagresource": {
    "name": "UntagResource",
    "description": "Grants permission to remove resource tags from an OpenSearch Ingestion Service pipeline",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "pipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "updatepipeline": {
    "name": "UpdatePipeline",
    "description": "Grants permission to modify the configuration of an OpenSearch Ingestion pipeline",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "pipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "iam:PassRole",
      "kms:DescribeKey",
      "kms:GenerateDataKeyWithoutPlaintext",
      "logs:GetLogDelivery",
      "logs:ListLogDeliveries",
      "logs:UpdateLogDelivery"
    ]
  },
  "validatepipeline": {
    "name": "ValidatePipeline",
    "description": "Grants permission to validate the configuration of an OpenSearch Ingestion pipeline",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  }
}