@cloud-copilot/iam-data

{ "allowvendedlogdeliveryforresource": { "name": "AllowVendedLogDeliveryForResource", "isPermissionOnly": true, "description": "Grants permission to configure vended log delivery for AWS PCS cluster logs", "accessLevel": "Write", "resourceTypes": [ { "name": "cluster", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createcluster": { "name": "CreateCluster", "description": "Grants permission to create clusters", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [ "ec2:CreateNetworkInterface", "ec2:CreateNetworkInterfacePermission", "ec2:DescribeNetworkInterfaces", "ec2:DescribeSecurityGroups", "ec2:DescribeSubnets", "ec2:DescribeVpcs", "ec2:GetSecurityGroupsForVpc", "iam:CreateServiceLinkedRole", "secretsmanager:CreateSecret", "secretsmanager:TagResource" ] }, "createcomputenodegroup": { "name": "CreateComputeNodeGroup", "description": "Grants permission to create compute node groups", "accessLevel": "Write", "resourceTypes": [ { "name": "cluster", "required": true, "conditionKeys": [], "dependentActions": [ "ec2:CreateFleet", "ec2:CreateLaunchTemplate", "ec2:CreateLaunchTemplateVersion", "ec2:CreateTags", "ec2:DescribeImages", "ec2:DescribeInstanceStatus", "ec2:DescribeInstanceTypes", "ec2:DescribeInstances", "ec2:DescribeLaunchTemplateVersions", "ec2:DescribeLaunchTemplates", "ec2:DescribeSecurityGroups", "ec2:DescribeSubnets", "ec2:DescribeVpcs", "ec2:RunInstances", "iam:GetInstanceProfile", "iam:PassRole" ] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createqueue": { "name": "CreateQueue", "description": "Grants permission to create queues", "accessLevel": "Write", "resourceTypes": [ { "name": "cluster", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "deletecluster": { "name": "DeleteCluster", "description": "Grants permission to delete clusters", "accessLevel": "Write", "resourceTypes": [ { "name": "cluster", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "ec2:DeleteNetworkInterface", "secretsmanager:DeleteSecret" ] }, "deletecomputenodegroup": { "name": "DeleteComputeNodeGroup", "description": "Grants permission to delete compute node groups", "accessLevel": "Write", "resourceTypes": [ { "name": "cluster", "required": true, "conditionKeys": [], "dependentActions": [ "ec2:DeleteLaunchTemplate", "ec2:TerminateInstances" ] }, { "name": "computenodegroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletequeue": { "name": "DeleteQueue", "description": "Grants permission to delete queues", "accessLevel": "Write", "resourceTypes": [ { "name": "cluster", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "queue", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getcluster": { "name": "GetCluster", "description": "Grants permission to get cluster properties", "accessLevel": "Read", "resourceTypes": [ { "name": "cluster", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getcomputenodegroup": { "name": "GetComputeNodeGroup", "description": "Grants permission to get compute node group properties", "accessLevel": "Read", "resourceTypes": [ { "name": "cluster", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "computenodegroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getqueue": { "name": "GetQueue", "description": "Grants permission to get queue properties", "accessLevel": "Read", "resourceTypes": [ { "name": "cluster", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "queue", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listclusters": { "name": "ListClusters", "description": "Grants permission to list clusters", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listcomputenodegroups": { "name": "ListComputeNodeGroups", "description": "Grants permission to list compute node groups", "accessLevel": "List", "resourceTypes": [ { "name": "cluster", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listqueues": { "name": "ListQueues", "description": "Grants permission to list queues", "accessLevel": "List", "resourceTypes": [ { "name": "cluster", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to list the tags for a resource", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "registercomputenodegroupinstance": { "name": "RegisterComputeNodeGroupInstance", "description": "Grants permission to register a compute instance in a compute node group", "accessLevel": "Write", "resourceTypes": [ { "name": "cluster", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "secretsmanager:GetSecretValue" ] }, "tagresource": { "name": "TagResource", "description": "Grants permission to tag a resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "cluster", "required": false, "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, { "name": "computenodegroup", "required": false, "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, { "name": "queue", "required": false, "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to untag a resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "cluster", "required": false, "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, { "name": "computenodegroup", "required": false, "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, { "name": "queue", "required": false, "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] }, "updatecomputenodegroup": { "name": "UpdateComputeNodeGroup", "description": "Grants permission to update compute node group properties", "accessLevel": "Write", "resourceTypes": [ { "name": "cluster", "required": true, "conditionKeys": [], "dependentActions": [ "ec2:CreateFleet", "ec2:CreateLaunchTemplate", "ec2:CreateLaunchTemplateVersion", "ec2:CreateTags", "ec2:DescribeImages", "ec2:DescribeInstanceStatus", "ec2:DescribeInstanceTypes", "ec2:DescribeInstances", "ec2:DescribeLaunchTemplateVersions", "ec2:DescribeLaunchTemplates", "ec2:DescribeSecurityGroups", "ec2:DescribeSubnets", "ec2:DescribeVpcs", "ec2:RunInstances", "iam:GetInstanceProfile", "iam:PassRole" ] }, { "name": "computenodegroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatequeue": { "name": "UpdateQueue", "description": "Grants permission to update queue properties", "accessLevel": "Write", "resourceTypes": [ { "name": "cluster", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "queue", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] } }