@cloud-copilot/iam-data

{ "convertrecoverypointtosnapshot": { "name": "ConvertRecoveryPointToSnapshot", "description": "Grants permission to convert a recovery point to a snapshot", "accessLevel": "Write", "resourceTypes": [ { "name": "recoveryPoint", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "snapshot", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createcustomdomainassociation": { "name": "CreateCustomDomainAssociation", "description": "Grants permission to create a custom domain association in Amazon Redshift Serverless", "accessLevel": "Write", "resourceTypes": [ { "name": "workgroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "acm:DescribeCertificate" ] }, "createendpointaccess": { "name": "CreateEndpointAccess", "description": "Grants permission to create an Amazon Redshift Serverless managed VPC endpoint", "accessLevel": "Write", "resourceTypes": [ { "name": "endpointAccess", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createnamespace": { "name": "CreateNamespace", "description": "Grants permission to create an Amazon Redshift Serverless namespace", "accessLevel": "Write", "resourceTypes": [ { "name": "namespace", "required": true, "conditionKeys": [], "dependentActions": [ "kms:CreateGrant", "kms:Decrypt", "kms:DescribeKey", "kms:GenerateDataKey", "kms:RetireGrant", "secretsmanager:CreateSecret", "secretsmanager:DeleteSecret", "secretsmanager:DescribeSecret", "secretsmanager:GetRandomPassword", "secretsmanager:RotateSecret", "secretsmanager:TagResource", "secretsmanager:UpdateSecret" ] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createreservation": { "name": "CreateReservation", "description": "Grants permission to purchase a capacity reservation according to a specific reservation offering, for a specified number of RPUs", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createscheduledaction": { "name": "CreateScheduledAction", "description": "Grants permission to create a scheduled action for a specified Amazon Redshift Serverless namespace", "accessLevel": "Write", "resourceTypes": [ { "name": "namespace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createsnapshot": { "name": "CreateSnapshot", "description": "Grants permission to create a snapshot of all databases in a namespace", "accessLevel": "Write", "resourceTypes": [ { "name": "snapshot", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createsnapshotcopyconfiguration": { "name": "CreateSnapshotCopyConfiguration", "description": "Grants permission to create a snapshot copy configuration for a specified Amazon Redshift Serverless namespace", "accessLevel": "Write", "resourceTypes": [ { "name": "namespace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createusagelimit": { "name": "CreateUsageLimit", "description": "Grants permission to create a usage limit for a specified Amazon Redshift Serverless usage type", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createworkgroup": { "name": "CreateWorkgroup", "description": "Grants permission to create a workgroup in Amazon Redshift Serverless", "accessLevel": "Write", "resourceTypes": [ { "name": "workgroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "deletecustomdomainassociation": { "name": "DeleteCustomDomainAssociation", "description": "Grants permission to delete a custom domain association", "accessLevel": "Write", "resourceTypes": [ { "name": "workgroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteendpointaccess": { "name": "DeleteEndpointAccess", "description": "Grants permission to delete an Amazon Redshift Serverless managed VPC endpoint", "accessLevel": "Write", "resourceTypes": [ { "name": "endpointAccess", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletenamespace": { "name": "DeleteNamespace", "description": "Grants permission to delete a namespace from Amazon Redshift Serverless", "accessLevel": "Write", "resourceTypes": [ { "name": "namespace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "kms:DescribeKey", "kms:RetireGrant", "secretsmanager:DeleteSecret", "secretsmanager:DescribeSecret" ] }, "deleteresourcepolicy": { "name": "DeleteResourcePolicy", "description": "Grants permission to delete the specified resource policy", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deletescheduledaction": { "name": "DeleteScheduledAction", "description": "Grants permission to delete a scheduled action from Amazon Redshift Serverless", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deletesnapshot": { "name": "DeleteSnapshot", "description": "Grants permission to delete a snapshot from Amazon Redshift Serverless", "accessLevel": "Write", "resourceTypes": [ { "name": "snapshot", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletesnapshotcopyconfiguration": { "name": "DeleteSnapshotCopyConfiguration", "description": "Grants permission to delete a snapshot copy configuration for a Amazon Redshift Serverless namespace", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleteusagelimit": { "name": "DeleteUsageLimit", "description": "Grants permission to delete a usage limit from Amazon Redshift Serverless", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleteworkgroup": { "name": "DeleteWorkgroup", "description": "Grants permission to delete a workgroup", "accessLevel": "Write", "resourceTypes": [ { "name": "workgroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeonetimecredit": { "name": "DescribeOneTimeCredit", "isPermissionOnly": true, "description": "Grants permission to see on the Amazon Redshift Serverless console the remaining number of free trial credits and their expiration date", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getcredentials": { "name": "GetCredentials", "description": "Grants permission to get a database user name and temporary password with temporary authorization to log on to Amazon Redshift Serverless", "accessLevel": "Write", "resourceTypes": [ { "name": "workgroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getcustomdomainassociation": { "name": "GetCustomDomainAssociation", "description": "Grants permission to get information about a specific custom domain association", "accessLevel": "Read", "resourceTypes": [ { "name": "workgroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getendpointaccess": { "name": "GetEndpointAccess", "description": "Grants permission to create an Amazon Redshift Serverless managed VPC endpoint", "accessLevel": "Read", "resourceTypes": [ { "name": "endpointAccess", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getmanagedworkgroup": { "name": "GetManagedWorkgroup", "description": "Grants permission to create a Amazon Redshift Managed Serverless workgroup with the specified configuration settings", "accessLevel": "Read", "resourceTypes": [ { "name": "managed-workgroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getnamespace": { "name": "GetNamespace", "description": "Grants permission to get information about a namespace in Amazon Redshift Serverless", "accessLevel": "Read", "resourceTypes": [ { "name": "namespace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getrecoverypoint": { "name": "GetRecoveryPoint", "description": "Grants permission to get information about a recovery point", "accessLevel": "Read", "resourceTypes": [ { "name": "recoveryPoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getreservation": { "name": "GetReservation", "description": "Grants permission to get a particular reservation object", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getreservationoffering": { "name": "GetReservationOffering", "description": "Grants permission to get a particular reservation offering", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getresourcepolicy": { "name": "GetResourcePolicy", "description": "Grants permission to get a resource policy", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getscheduledaction": { "name": "GetScheduledAction", "description": "Grants permission to get information about a specific scheduled action", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getsnapshot": { "name": "GetSnapshot", "description": "Grants permission to get information about a specific snapshot", "accessLevel": "Read", "resourceTypes": [ { "name": "snapshot", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "gettablerestorestatus": { "name": "GetTableRestoreStatus", "description": "Grants permission to get table restore status about a specific snapshot", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "gettrack": { "name": "GetTrack", "description": "Grants permission to get information about a track in Amazon Redshift Serverless", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getusagelimit": { "name": "GetUsageLimit", "description": "Grants permission to get information about a usage limit in Amazon Redshift Serverless", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getworkgroup": { "name": "GetWorkgroup", "description": "Grants permission to get information about a specific workgroup", "accessLevel": "Read", "resourceTypes": [ { "name": "workgroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listcustomdomainassociations": { "name": "ListCustomDomainAssociations", "description": "Grants permission to list custom domain associations in Amazon Redshift Serverless", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listendpointaccess": { "name": "ListEndpointAccess", "description": "Grants permission to list EndpointAccess objects and relevant information", "accessLevel": "List", "resourceTypes": [ { "name": "endpointAccess", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listmanagedworkgroups": { "name": "ListManagedWorkgroups", "description": "Grants permission to list managed workgroups in Amazon Redshift Serverless", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listnamespaces": { "name": "ListNamespaces", "description": "Grants permission to list namespaces in Amazon Redshift Serverless", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listrecoverypoints": { "name": "ListRecoveryPoints", "description": "Grants permission to list an array of recovery points", "accessLevel": "List", "resourceTypes": [ { "name": "namespace", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listreservationofferings": { "name": "ListReservationOfferings", "description": "Grants permission to list all available capacity reservation offerings", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listreservations": { "name": "ListReservations", "description": "Grants permission to list all reservations", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listscheduledactions": { "name": "ListScheduledActions", "description": "Grants permission to list scheduled actions", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listsnapshotcopyconfigurations": { "name": "ListSnapshotCopyConfigurations", "description": "Grants permission to list SnapshotCopyConfiguration objects and relevant information", "accessLevel": "List", "resourceTypes": [ { "name": "namespace", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listsnapshots": { "name": "ListSnapshots", "description": "Grants permission to list snapshots", "accessLevel": "List", "resourceTypes": [ { "name": "snapshot", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listtablerestorestatus": { "name": "ListTableRestoreStatus", "description": "Grants permission to list table restore status", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to list the tags assigned to a resource", "accessLevel": "List", "resourceTypes": [ { "name": "namespace", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "workgroup", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listtracks": { "name": "ListTracks", "description": "Grants permission to list tracks available in Amazon Redshift Serverless", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listusagelimits": { "name": "ListUsageLimits", "description": "Grants permission to list all usage limits within Amazon Redshift Serverless", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listworkgroups": { "name": "ListWorkgroups", "description": "Grants permission to list workgroups in Amazon Redshift Serverless", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "putresourcepolicy": { "name": "PutResourcePolicy", "description": "Grants permission to create or update a resource policy", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "restorefromrecoverypoint": { "name": "RestoreFromRecoveryPoint", "description": "Grants permission to restore the data from a recovery point", "accessLevel": "Write", "resourceTypes": [ { "name": "recoveryPoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "restorefromsnapshot": { "name": "RestoreFromSnapshot", "description": "Grants permission to restore a namespace from a snapshot", "accessLevel": "Write", "resourceTypes": [ { "name": "snapshot", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "kms:CreateGrant", "kms:Decrypt", "kms:DescribeKey", "kms:GenerateDataKey", "kms:RetireGrant", "secretsmanager:CreateSecret", "secretsmanager:DeleteSecret", "secretsmanager:DescribeSecret", "secretsmanager:GetRandomPassword", "secretsmanager:RotateSecret", "secretsmanager:TagResource", "secretsmanager:UpdateSecret" ] }, "restoretablefromrecoverypoint": { "name": "RestoreTableFromRecoveryPoint", "description": "Grants permission to restore a table from a recovery point", "accessLevel": "Write", "resourceTypes": [ { "name": "namespace", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "recoveryPoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "restoretablefromsnapshot": { "name": "RestoreTableFromSnapshot", "description": "Grants permission to restore a table from a snapshot", "accessLevel": "Write", "resourceTypes": [ { "name": "namespace", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "snapshot", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to assign one or more tags to a resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "namespace", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "recoveryPoint", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "snapshot", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "workgroup", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to remove a tag or set of tags from a resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "namespace", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "recoveryPoint", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "snapshot", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "workgroup", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] }, "updatecustomdomainassociation": { "name": "UpdateCustomDomainAssociation", "description": "Grants permission to update a certificate associated with a custom domain", "accessLevel": "Write", "resourceTypes": [ { "name": "workgroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "acm:DescribeCertificate" ] }, "updateendpointaccess": { "name": "UpdateEndpointAccess", "description": "Grants permission to update an Amazon Redshift Serverless managed VPC endpoint", "accessLevel": "Write", "resourceTypes": [ { "name": "endpointAccess", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatenamespace": { "name": "UpdateNamespace", "description": "Grants permission to update a namespace with the specified configuration settings", "accessLevel": "Write", "resourceTypes": [ { "name": "namespace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "kms:CreateGrant", "kms:Decrypt", "kms:DescribeKey", "kms:GenerateDataKey", "kms:RetireGrant", "secretsmanager:CreateSecret", "secretsmanager:DeleteSecret", "secretsmanager:DescribeSecret", "secretsmanager:GetRandomPassword", "secretsmanager:RotateSecret", "secretsmanager:TagResource", "secretsmanager:UpdateSecret" ] }, "updatescheduledaction": { "name": "UpdateScheduledAction", "description": "Grants permission to update a scheduled action", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "updatesnapshot": { "name": "UpdateSnapshot", "description": "Grants permission to update a snapshot", "accessLevel": "Write", "resourceTypes": [ { "name": "snapshot", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatesnapshotcopyconfiguration": { "name": "UpdateSnapshotCopyConfiguration", "description": "Grants permission to update a snapshot copy configuration for a Amazon Redshift Serverless namespace", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "updateusagelimit": { "name": "UpdateUsageLimit", "description": "Grants permission to update a usage limit in Amazon Redshift Serverless", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "updateworkgroup": { "name": "UpdateWorkgroup", "description": "Grants permission to update an Amazon Redshift Serverless workgroup with the specified configuration settings", "accessLevel": "Write", "resourceTypes": [ { "name": "workgroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] } }