@cloud-copilot/iam-data

{ "createconnector": { "name": "CreateConnector", "description": "Grants permission to create a Connector in your account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [ "acm-pca:DescribeCertificateAuthority", "acm-pca:GetCertificate", "acm-pca:GetCertificateAuthorityCertificate", "acm-pca:IssueCertificate", "ec2:CreateTags", "ec2:CreateVpcEndpoint", "ec2:DescribeVpcEndpoints" ] }, "createdirectoryregistration": { "name": "CreateDirectoryRegistration", "description": "Grants permission to create a DirectoryRegistration in your account", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [ "ds:AuthorizeApplication", "ds:DescribeDirectories" ] }, "createserviceprincipalname": { "name": "CreateServicePrincipalName", "description": "Grants permission to create a ServicePrincipalName for a DirectoryRegistration", "accessLevel": "Write", "resourceTypes": [ { "name": "DirectoryRegistration", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "ds:UpdateAuthorizedApplication" ] }, "createtemplate": { "name": "CreateTemplate", "description": "Grants permission to create a Template for a Connector", "accessLevel": "Write", "resourceTypes": [ { "name": "Connector", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createtemplategroupaccesscontrolentry": { "name": "CreateTemplateGroupAccessControlEntry", "description": "Grants permission to create a TemplateGroupAccessControlEntry for a Template", "accessLevel": "Write", "resourceTypes": [ { "name": "Template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteconnector": { "name": "DeleteConnector", "description": "Grants permission to delete a Connector in your account", "accessLevel": "Write", "resourceTypes": [ { "name": "Connector", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "ec2:DeleteVpcEndpoints", "ec2:DescribeVpcEndpoints" ] }, "deletedirectoryregistration": { "name": "DeleteDirectoryRegistration", "description": "Grants permission to delete a DirectoryRegistration in your account", "accessLevel": "Write", "resourceTypes": [ { "name": "DirectoryRegistration", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "ds:UnauthorizeApplication", "ds:UpdateAuthorizedApplication" ] }, "deleteserviceprincipalname": { "name": "DeleteServicePrincipalName", "description": "Grants permission to delete a ServicePrincipalName for a DirectoryRegistration", "accessLevel": "Write", "resourceTypes": [ { "name": "DirectoryRegistration", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "ds:UpdateAuthorizedApplication" ] }, "deletetemplate": { "name": "DeleteTemplate", "description": "Grants permission to delete a Template for a Connector", "accessLevel": "Write", "resourceTypes": [ { "name": "Template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletetemplategroupaccesscontrolentry": { "name": "DeleteTemplateGroupAccessControlEntry", "description": "Grants permission to delete a TemplateGroupAccessControlEntry for a Template", "accessLevel": "Write", "resourceTypes": [ { "name": "Template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getconnector": { "name": "GetConnector", "description": "Grants permission to get a Connector in your account", "accessLevel": "Read", "resourceTypes": [ { "name": "Connector", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getdirectoryregistration": { "name": "GetDirectoryRegistration", "description": "Grants permission to get a DirectoryRegistration in your account", "accessLevel": "Read", "resourceTypes": [ { "name": "DirectoryRegistration", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getserviceprincipalname": { "name": "GetServicePrincipalName", "description": "Grants permission to get a ServicePrincipalName for a DirectoryRegistration", "accessLevel": "Read", "resourceTypes": [ { "name": "DirectoryRegistration", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "gettemplate": { "name": "GetTemplate", "description": "Grants permission to get a Template for a Connector", "accessLevel": "Read", "resourceTypes": [ { "name": "Template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "gettemplategroupaccesscontrolentry": { "name": "GetTemplateGroupAccessControlEntry", "description": "Grants permission to get a TemplateGroupAccessControlEntry for a Template", "accessLevel": "Read", "resourceTypes": [ { "name": "Template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listconnectors": { "name": "ListConnectors", "description": "Grants permission to list the Connectors in your account", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listdirectoryregistrations": { "name": "ListDirectoryRegistrations", "description": "Grants permission to list the DirectoryRegistrations in your account", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listserviceprincipalnames": { "name": "ListServicePrincipalNames", "description": "Grants permission to list the ServicePrincipalNames for a DirectoryRegistration", "accessLevel": "List", "resourceTypes": [ { "name": "DirectoryRegistration", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to list the tags for a pca-connector-ad resource in your account", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listtemplategroupaccesscontrolentries": { "name": "ListTemplateGroupAccessControlEntries", "description": "Grants permission to list the TemplateGroupAccessControlEntries for a Template", "accessLevel": "List", "resourceTypes": [ { "name": "Template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listtemplates": { "name": "ListTemplates", "description": "Grants permission to list the Templates for a Connector", "accessLevel": "List", "resourceTypes": [ { "name": "Connector", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to tag a pca-connector-ad resource in your account", "accessLevel": "Tagging", "resourceTypes": [ { "name": "Connector", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DirectoryRegistration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Template", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to untag a pca-connector-ad resource in your account", "accessLevel": "Tagging", "resourceTypes": [ { "name": "Connector", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DirectoryRegistration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Template", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] }, "updatetemplate": { "name": "UpdateTemplate", "description": "Grants permission to update a Template for a Connector", "accessLevel": "Write", "resourceTypes": [ { "name": "Template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatetemplategroupaccesscontrolentry": { "name": "UpdateTemplateGroupAccessControlEntry", "description": "Grants permission to update a TemplateGroupAccessControlEntry for a Template", "accessLevel": "Write", "resourceTypes": [ { "name": "Template", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] } }