@cloud-copilot/iam-data
Version:
595 lines • 14.7 kB
JSON
{
"canceljournalkinesisstream": {
"name": "CancelJournalKinesisStream",
"description": "Grants permission to cancel a journal kinesis stream",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stream",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createledger": {
"name": "CreateLedger",
"description": "Grants permission to create a ledger",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "ledger",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"deleteledger": {
"name": "DeleteLedger",
"description": "Grants permission to delete a ledger",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "ledger",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describejournalkinesisstream": {
"name": "DescribeJournalKinesisStream",
"description": "Grants permission to describe information about a journal kinesis stream",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "stream",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describejournals3export": {
"name": "DescribeJournalS3Export",
"description": "Grants permission to describe information about a journal export job",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "ledger",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"describeledger": {
"name": "DescribeLedger",
"description": "Grants permission to describe a ledger",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "ledger",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"executestatement": {
"name": "ExecuteStatement",
"isPermissionOnly": true,
"description": "Grants permission to send commands to a ledger via the console",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "ledger",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"exportjournaltos3": {
"name": "ExportJournalToS3",
"description": "Grants permission to export journal contents to an Amazon S3 bucket",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "ledger",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getblock": {
"name": "GetBlock",
"description": "Grants permission to retrieve a block from a ledger for a given BlockAddress",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "ledger",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getdigest": {
"name": "GetDigest",
"description": "Grants permission to retrieve a digest from a ledger for a given BlockAddress",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "ledger",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getrevision": {
"name": "GetRevision",
"description": "Grants permission to retrieve a revision for a given document ID and a given BlockAddress",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "ledger",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"insertsampledata": {
"name": "InsertSampleData",
"isPermissionOnly": true,
"description": "Grants permission to insert sample application data via the console",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "ledger",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listjournalkinesisstreamsforledger": {
"name": "ListJournalKinesisStreamsForLedger",
"description": "Grants permission to list journal kinesis streams for a specified ledger",
"accessLevel": "List",
"resourceTypes": [
{
"name": "stream",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listjournals3exports": {
"name": "ListJournalS3Exports",
"description": "Grants permission to list journal export jobs for all ledgers",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listjournals3exportsforledger": {
"name": "ListJournalS3ExportsForLedger",
"description": "Grants permission to list journal export jobs for a specified ledger",
"accessLevel": "List",
"resourceTypes": [
{
"name": "ledger",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listledgers": {
"name": "ListLedgers",
"description": "Grants permission to list existing ledgers",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listtagsforresource": {
"name": "ListTagsForResource",
"description": "Grants permission to list tags for a resource",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "catalog",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "ledger",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "stream",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "table",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"partiqlcreateindex": {
"name": "PartiQLCreateIndex",
"description": "Grants permission to create an index on a table",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "table",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"partiqlcreatetable": {
"name": "PartiQLCreateTable",
"description": "Grants permission to create a table",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "table",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"partiqldelete": {
"name": "PartiQLDelete",
"description": "Grants permission to delete documents from a table",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "table",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"partiqldropindex": {
"name": "PartiQLDropIndex",
"description": "Grants permission to drop an index from a table",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "table",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"qldb:Purge"
],
"dependentActions": []
},
"partiqldroptable": {
"name": "PartiQLDropTable",
"description": "Grants permission to drop a table",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "table",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"qldb:Purge"
],
"dependentActions": []
},
"partiqlhistoryfunction": {
"name": "PartiQLHistoryFunction",
"description": "Grants permission to use the history function on a table",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "table",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"partiqlinsert": {
"name": "PartiQLInsert",
"description": "Grants permission to insert documents into a table",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "table",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"partiqlredact": {
"name": "PartiQLRedact",
"description": "Grants permission to redact historic revisions",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "table",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"partiqlselect": {
"name": "PartiQLSelect",
"description": "Grants permission to select documents from a table",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "catalog",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "table",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"partiqlundroptable": {
"name": "PartiQLUndropTable",
"description": "Grants permission to undrop a table",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "table",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"partiqlupdate": {
"name": "PartiQLUpdate",
"description": "Grants permission to update existing documents in a table",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "table",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"sendcommand": {
"name": "SendCommand",
"description": "Grants permission to send commands to a ledger",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "ledger",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"showcatalog": {
"name": "ShowCatalog",
"isPermissionOnly": true,
"description": "Grants permission to view a ledger's catalog via the console",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "ledger",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"streamjournaltokinesis": {
"name": "StreamJournalToKinesis",
"description": "Grants permission to stream journal contents to a Kinesis Data Stream",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "stream",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"tagresource": {
"name": "TagResource",
"description": "Grants permission to add one or more tags to a resource",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "catalog",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "ledger",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "stream",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "table",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"untagresource": {
"name": "UntagResource",
"description": "Grants permission to remove one or more tags from a resource",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "catalog",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "ledger",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "stream",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "table",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"updateledger": {
"name": "UpdateLedger",
"description": "Grants permission to update properties on a ledger",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "ledger",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"updateledgerpermissionsmode": {
"name": "UpdateLedgerPermissionsMode",
"description": "Grants permission to update the permissions mode on a ledger",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "ledger",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
}
}