@cloud-copilot/iam-data

{ "acceptreservednodeexchange": { "name": "AcceptReservedNodeExchange", "description": "Grants permission to exchange a DC1 reserved node for a DC2 reserved node with no changes to the configuration", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "addpartner": { "name": "AddPartner", "description": "Grants permission to add a partner integration to a cluster", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "associatedatashareconsumer": { "name": "AssociateDataShareConsumer", "description": "Grants permission to associate a consumer to a datashare", "accessLevel": "Write", "resourceTypes": [ { "name": "datashare", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "redshift:ConsumerArn", "redshift:AllowWrites" ], "dependentActions": [] }, "authorizeclustersecuritygroupingress": { "name": "AuthorizeClusterSecurityGroupIngress", "description": "Grants permission to add an inbound (ingress) rule to an Amazon Redshift security group", "accessLevel": "Write", "resourceTypes": [ { "name": "securitygroup", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "securitygroupingress-ec2securitygroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "authorizedatashare": { "name": "AuthorizeDataShare", "description": "Grants permission to authorize the specified datashare consumer to consume a datashare", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "datashare", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "redshift:ConsumerIdentifier", "redshift:AllowWrites" ], "dependentActions": [] }, "authorizeendpointaccess": { "name": "AuthorizeEndpointAccess", "description": "Grants permission to authorize endpoint related activities for redshift-managed vpc endpoint", "accessLevel": "Permissions management", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "authorizeinboundintegration": { "name": "AuthorizeInboundIntegration", "isPermissionOnly": true, "description": "Grants permission to Amazon Redshift to continuously validate that the target data warehouse can receive data replicated from the source ARN", "accessLevel": "Write", "resourceTypes": [ { "name": "integration", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "authorizesnapshotaccess": { "name": "AuthorizeSnapshotAccess", "description": "Grants permission to the specified AWS account to restore a snapshot", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "snapshot", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchdeleteclustersnapshots": { "name": "BatchDeleteClusterSnapshots", "description": "Grants permission to delete snapshots in a batch of size upto 100", "accessLevel": "Write", "resourceTypes": [ { "name": "snapshot", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchmodifyclustersnapshots": { "name": "BatchModifyClusterSnapshots", "description": "Grants permission to modify settings for a list of snapshots", "accessLevel": "Write", "resourceTypes": [ { "name": "snapshot", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "cancelquery": { "name": "CancelQuery", "isPermissionOnly": true, "description": "Grants permission to cancel a query through the Amazon Redshift console", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "cancelquerysession": { "name": "CancelQuerySession", "isPermissionOnly": true, "description": "Grants permission to see queries in the Amazon Redshift console", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "cancelresize": { "name": "CancelResize", "description": "Grants permission to cancel a resize operation", "accessLevel": "Write", "resourceTypes": [ { "name": "cluster", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "copyclustersnapshot": { "name": "CopyClusterSnapshot", "description": "Grants permission to copy a cluster snapshot", "accessLevel": "Write", "resourceTypes": [ { "name": "snapshot", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createauthenticationprofile": { "name": "CreateAuthenticationProfile", "description": "Grants permission to create an Amazon Redshift authentication profile", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createcluster": { "name": "CreateCluster", "description": "Grants permission to create a cluster", "accessLevel": "Write", "resourceTypes": [ { "name": "cluster", "required": true, "conditionKeys": [], "dependentActions": [ "kms:CreateGrant", "kms:Decrypt", "kms:DescribeKey", "kms:GenerateDataKey", "kms:RetireGrant", "secretsmanager:CreateSecret", "secretsmanager:DeleteSecret", "secretsmanager:DescribeSecret", "secretsmanager:GetRandomPassword", "secretsmanager:RotateSecret", "secretsmanager:TagResource", "secretsmanager:UpdateSecret" ] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createclusterparametergroup": { "name": "CreateClusterParameterGroup", "description": "Grants permission to create an Amazon Redshift parameter group", "accessLevel": "Write", "resourceTypes": [ { "name": "parametergroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createclustersecuritygroup": { "name": "CreateClusterSecurityGroup", "description": "Grants permission to create an Amazon Redshift security group", "accessLevel": "Write", "resourceTypes": [ { "name": "securitygroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createclustersnapshot": { "name": "CreateClusterSnapshot", "description": "Grants permission to create a manual snapshot of the specified cluster", "accessLevel": "Write", "resourceTypes": [ { "name": "snapshot", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createclustersubnetgroup": { "name": "CreateClusterSubnetGroup", "description": "Grants permission to create an Amazon Redshift subnet group", "accessLevel": "Write", "resourceTypes": [ { "name": "subnetgroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createclusteruser": { "name": "CreateClusterUser", "description": "Grants permission to automatically create the specified Amazon Redshift user if it does not exist", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "dbuser", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "redshift:DbUser" ], "dependentActions": [] }, "createcustomdomainassociation": { "name": "CreateCustomDomainAssociation", "description": "Grants permission to create a custom domain name for a cluster", "accessLevel": "Write", "resourceTypes": [ { "name": "cluster", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "acm:DescribeCertificate" ] }, "createendpointaccess": { "name": "CreateEndpointAccess", "description": "Grants permission to create a redshift-managed vpc endpoint", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createeventsubscription": { "name": "CreateEventSubscription", "description": "Grants permission to create an Amazon Redshift event notification subscription", "accessLevel": "Write", "resourceTypes": [ { "name": "eventsubscription", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createhsmclientcertificate": { "name": "CreateHsmClientCertificate", "description": "Grants permission to create an HSM client certificate that a cluster uses to connect to an HSM", "accessLevel": "Write", "resourceTypes": [ { "name": "hsmclientcertificate", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createhsmconfiguration": { "name": "CreateHsmConfiguration", "description": "Grants permission to create an HSM configuration that contains information required by a cluster to store and use database encryption keys in a hardware security module (HSM)", "accessLevel": "Write", "resourceTypes": [ { "name": "hsmconfiguration", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createinboundintegration": { "name": "CreateInboundIntegration", "isPermissionOnly": true, "description": "Grants permission to the source principal to create an inbound integration for data to be replicated from the source into the target data warehouse", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createintegration": { "name": "CreateIntegration", "description": "Grants permission to create an Amazon Redshift zero-ETL integration", "accessLevel": "Write", "resourceTypes": [ { "name": "integration", "required": true, "conditionKeys": [], "dependentActions": [ "kms:CreateGrant", "kms:DescribeKey" ] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "redshift:IntegrationSourceArn", "redshift:IntegrationTargetArn" ], "dependentActions": [] }, "createqev2idcapplication": { "name": "CreateQev2IdcApplication", "isPermissionOnly": true, "description": "Grants permission to create a qev2 idc application", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [ "sso:CreateApplication", "sso:PutApplicationAccessScope", "sso:PutApplicationAuthenticationMethod", "sso:PutApplicationGrant" ] }, "createredshiftidcapplication": { "name": "CreateRedshiftIdcApplication", "description": "Grants permission to create a redshift idc application", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [ "sso:CreateApplication", "sso:PutApplicationAccessScope", "sso:PutApplicationAuthenticationMethod", "sso:PutApplicationGrant" ] }, "createsavedquery": { "name": "CreateSavedQuery", "isPermissionOnly": true, "description": "Grants permission to create saved SQL queries through the Amazon Redshift console", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createscheduledaction": { "name": "CreateScheduledAction", "description": "Grants permission to create an Amazon Redshift scheduled action", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createsnapshotcopygrant": { "name": "CreateSnapshotCopyGrant", "description": "Grants permission to create a snapshot copy grant and encrypt copied snapshots in a destination AWS Region", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "snapshotcopygrant", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createsnapshotschedule": { "name": "CreateSnapshotSchedule", "description": "Grants permission to create a snapshot schedule", "accessLevel": "Write", "resourceTypes": [ { "name": "snapshotschedule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createtags": { "name": "CreateTags", "description": "Grants permission to add one or more tags to a specified resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "cluster", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "eventsubscription", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "hsmclientcertificate", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "hsmconfiguration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "integration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "parametergroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "securitygroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "securitygroupingress-cidr", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "securitygroupingress-ec2securitygroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "snapshot", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "snapshotcopygrant", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "snapshotschedule", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "subnetgroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "usagelimit", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createusagelimit": { "name": "CreateUsageLimit", "description": "Grants permission to create a usage limit", "accessLevel": "Write", "resourceTypes": [ { "name": "usagelimit", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "deauthorizedatashare": { "name": "DeauthorizeDataShare", "description": "Grants permission to remove permission from the specified datashare consumer to consume a datashare", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "datashare", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "redshift:ConsumerIdentifier" ], "dependentActions": [] }, "deleteauthenticationprofile": { "name": "DeleteAuthenticationProfile", "description": "Grants permission to delete an Amazon Redshift authentication profile", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deletecluster": { "name": "DeleteCluster", "description": "Grants permission to delete a previously provisioned cluster", "accessLevel": "Write", "resourceTypes": [ { "name": "cluster", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteclusterparametergroup": { "name": "DeleteClusterParameterGroup", "description": "Grants permission to delete an Amazon Redshift parameter group", "accessLevel": "Write", "resourceTypes": [ { "name": "parametergroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteclustersecuritygroup": { "name": "DeleteClusterSecurityGroup", "description": "Grants permission to delete an Amazon Redshift security group", "accessLevel": "Write", "resourceTypes": [ { "name": "securitygroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteclustersnapshot": { "name": "DeleteClusterSnapshot", "description": "Grants permission to delete a manual snapshot", "accessLevel": "Write", "resourceTypes": [ { "name": "snapshot", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteclustersubnetgroup": { "name": "DeleteClusterSubnetGroup", "description": "Grants permission to delete a cluster subnet group", "accessLevel": "Write", "resourceTypes": [ { "name": "subnetgroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletecustomdomainassociation": { "name": "DeleteCustomDomainAssociation", "description": "Grants permission to delete a custom domain name for a cluster", "accessLevel": "Write", "resourceTypes": [ { "name": "cluster", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteendpointaccess": { "name": "DeleteEndpointAccess", "description": "Grants permission to delete a redshift-managed vpc endpoint", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleteeventsubscription": { "name": "DeleteEventSubscription", "description": "Grants permission to delete an Amazon Redshift event notification subscription", "accessLevel": "Write", "resourceTypes": [ { "name": "eventsubscription", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletehsmclientcertificate": { "name": "DeleteHsmClientCertificate", "description": "Grants permission to delete an HSM client certificate", "accessLevel": "Write", "resourceTypes": [ { "name": "hsmclientcertificate", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletehsmconfiguration": { "name": "DeleteHsmConfiguration", "description": "Grants permission to delete an Amazon Redshift HSM configuration", "accessLevel": "Write", "resourceTypes": [ { "name": "hsmconfiguration", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteintegration": { "name": "DeleteIntegration", "description": "Grants permission to delete an Amazon Redshift zero-ETL integration", "accessLevel": "Write", "resourceTypes": [ { "name": "integration", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deletepartner": { "name": "DeletePartner", "description": "Grants permission to delete a partner integration from a cluster", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleteqev2idcapplication": { "name": "DeleteQev2IdcApplication", "isPermissionOnly": true, "description": "Grants permission to delete a qev2 idc application", "accessLevel": "Write", "resourceTypes": [ { "name": "qev2idcapplication", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "sso:DeleteApplication" ] }, "deleteredshiftidcapplication": { "name": "DeleteRedshiftIdcApplication", "description": "Grants permission to delete a redshift idc application", "accessLevel": "Write", "resourceTypes": [ { "name": "redshiftidcapplication", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "sso:DeleteApplication" ] }, "deleteresourcepolicy": { "name": "DeleteResourcePolicy", "description": "Grants permission to delete the resource policy for a specified resource", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "namespace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletesavedqueries": { "name": "DeleteSavedQueries", "isPermissionOnly": true, "description": "Grants permission to delete saved SQL queries through the Amazon Redshift console", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deletescheduledaction": { "name": "DeleteScheduledAction", "description": "Grants permission to delete an Amazon Redshift scheduled action", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deletesnapshotcopygrant": { "name": "DeleteSnapshotCopyGrant", "description": "Grants permission to delete a snapshot copy grant", "accessLevel": "Write", "resourceTypes": [ { "name": "snapshotcopygrant", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletesnapshotschedule": { "name": "DeleteSnapshotSchedule", "description": "Grants permission to delete a snapshot schedule", "accessLevel": "Write", "resourceTypes": [ { "name": "snapshotschedule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletetags": { "name": "DeleteTags", "description": "Grants permission to delete a tag or tags from a resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "cluster", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "eventsubscription", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "hsmclientcertificate", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "hsmconfiguration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "integration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "parametergroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "securitygroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "securitygroupingress-cidr", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "securitygroupingress-ec2securitygroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "snapshot", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "snapshotcopygrant", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "snapshotschedule", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "subnetgroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "usagelimit", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] }, "deleteusagelimit": { "name": "DeleteUsageLimit", "description": "Grants permission to delete a usage limit", "accessLevel": "Write", "resourceTypes": [ { "name": "usagelimit", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deregisternamespace": { "name": "DeregisterNamespace", "description": "Grants permission to deregister the specified namespace from a consumer", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeaccountattributes": { "name": "DescribeAccountAttributes", "description": "Grants permission to describe attributes attached to the specified AWS account", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeauthenticationprofiles": { "name": "DescribeAuthenticationProfiles", "description": "Grants permission to describe created Amazon Redshift authentication profiles", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeclusterdbrevisions": { "name": "DescribeClusterDbRevisions", "description": "Grants permission to describe database revisions for a cluster", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeclusterparametergroups": { "name": "DescribeClusterParameterGroups", "description": "Grants permission to describe Amazon Redshift parameter groups, including parameter groups you created and the default parameter group", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeclusterparameters": { "name": "DescribeClusterParameters", "description": "Grants permission to describe parameters contained within an Amazon Redshift parameter group", "accessLevel": "Read", "resourceTypes": [ { "name": "parametergroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeclustersecuritygroups": { "name": "DescribeClusterSecurityGroups", "description": "Grants permission to describe Amazon Redshift security groups", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeclustersnapshots": { "name": "DescribeClusterSnapshots", "description": "Grants permission to describe one or more snapshot objects, which contain metadata about your cluster snapshots", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeclustersubnetgroups": { "name": "DescribeClusterSubnetGroups", "description": "Grants permission to describe one or more cluster subnet group objects, which contain metadata about your cluster subnet groups", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeclustertracks": { "name": "DescribeClusterTracks", "description": "Grants permission to describe available maintenance tracks", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeclusterversions": { "name": "DescribeClusterVersions", "description": "Grants permission to describe available Amazon Redshift cluster versions", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeclusters": { "name": "DescribeClusters", "description": "Grants permission to describe properties of provisioned clusters", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describecustomdomainassociations": { "name": "DescribeCustomDomainAssociations", "description": "Grants permission to describe custom domain names for a cluster", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describedatashares": { "name": "DescribeDataShares", "description": "Grants permission to describe datashares created and consumed by your clusters", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describedatasharesforconsumer": { "name": "DescribeDataSharesForConsumer", "description": "Grants permission to describe only datashares consumed by your clusters", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describedatasharesforproducer": { "name": "DescribeDataSharesForProducer", "description": "Grants permission to describe only datashares created by your clusters", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describedefaultclusterparameters": { "name": "DescribeDefaultClusterParameters", "description": "Grants permission to describe parameter settings for a parameter group family", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeendpointaccess": { "name": "DescribeEndpointAccess", "description": "Grants permission to describe redshift-managed vpc endpoints", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeendpointauthorization": { "name": "DescribeEndpointAuthorization", "description": "Grants permission to authorize describe activity for redshift-managed vpc endpoint", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeeventcategories": { "name": "DescribeEventCategories", "description": "Grants permission to describe event categories for all event source types, or for a specified source type", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeeventsubscriptions": { "name": "DescribeEventSubscriptions", "description": "Grants permission to describe Amazon Redshift event notification subscriptions for the specified AWS account", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeevents": { "name": "DescribeEvents", "description": "Grants permission to describe events related to clusters, security groups, snapshots, and parameter groups for the past 14 days", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describehsmclientcertificates": { "name": "DescribeHsmClientCertificates", "description": "Grants permission to describe HSM client certificates", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describehsmconfigurations": { "name": "DescribeHsmConfigurations", "description": "Grants permission to describe Amazon Redshift HSM configurations", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeinboundintegrations": { "name": "DescribeInboundIntegrations", "description": "Grants permission to list the inbound integrations", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [ "redshift:InboundIntegrationArn" ], "dependentActions": [] }, "describeintegrations": { "name": "DescribeIntegrations", "description": "Grants permission to describe an Amazon Redshift zero-ETL integration", "accessLevel": "List", "resourceTypes": [ { "name": "integration", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "describeloggingstatus": { "name": "DescribeLoggingStatus", "description": "Grants permission to describe whether information, such as queries and connection attempts, is being logged for a cluster", "accessLevel": "Read", "resourceTypes": [ { "name": "cluster", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describenodeconfigurationoptions": { "name": "DescribeNodeConfigurationOptions", "description": "Grants permission to describe properties of possible node configurations such as node type, number of nodes, and disk usage for the specified action type", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeorderableclusteroptions": { "name": "DescribeOrderableClusterOptions", "description": "Grants permission to describe orderable cluster options", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describepartners": { "name": "DescribePartners", "description": "Grants permission to retrieve information about the partner integrations defined for a cluster", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeqev2idcapplications": { "name": "DescribeQev2IdcApplications", "isPermissionOnly": true, "description": "Grants permission to describe qev2 idc applications", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describequery": { "name": "DescribeQuery", "isPermissionOnly": true, "description": "Grants permission to describe a query through the Amazon Redshift console", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeredshiftidcapplications": { "name": "DescribeRedshiftIdcApplications", "description": "Grants permission to describe redshift idc applications", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [ "sso:GetApplicationGrant", "sso:ListApplicationAccessScopes" ] }, "describereservednodeexchangestatus": { "name": "DescribeReservedNodeExchangeStatus", "description": "Grants permission to describe exchange status details and associated metadata for a reserved-node exchange. Statuses include such values as in progress and requested", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describereservednodeofferings": { "name": "DescribeReservedNodeOfferings", "description": "Grants permission to describe available reserved node offerings by Amazon Redshift", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describereservednodes": { "name": "DescribeReservedNodes", "description": "Grants permission to describe the reserved nodes", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeresize": { "name": "DescribeResize", "description": "Grants permission to describe the last resize operation for a cluster", "accessLevel": "Read", "resourceTypes": [ { "name": "cluster", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describesavedqueries": { "name": "DescribeSavedQueries", "isPermissionOnly": true, "description": "Grants permission to describe saved queries through the Amazon Redshift console", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describescheduledactions": { "name": "DescribeScheduledActions", "description": "Grants permission to describe created Amazon Redshift scheduled actions", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describesnapshotcopygrants": { "name": "DescribeSnapshotCopyGrants", "description": "Grants permission to describe snapshot copy grants owned by the specified AWS account in the destination AWS Region", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describesnapshotschedules": { "name": "DescribeSnapshotSchedules", "description": "Grants permission to describe snapshot schedules", "accessLevel": "Read", "resourceTypes": [ { "name": "snapshotschedule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describestorage": { "name": "DescribeStorage", "description": "Grants permission to describe account level backups storage size and provisional storage", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describetable": { "name": "DescribeTable", "isPermissionOnly": true, "description": "Grants permission to describe a table through the Amazon Redshift console", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describetablerestorestatus": { "name": "DescribeTableRestoreStatus", "description": "Grants permission to describe status of one or more table restore requests made using the RestoreTableFromClusterSnapshot API action", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describetags": { "name": "DescribeTags", "description": "Grants permission to describe tags", "accessLevel": "Read", "resourceTypes": [ { "name": "cluster", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "eventsubscription", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "hsmclientcertificate", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "hsmconfiguration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "integration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "parametergroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "securitygroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "securitygroupingress-cidr", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "securitygroupingress-ec2securitygroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "snapshot", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "snapshotcopygrant", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "snapshotschedule", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "subnetgroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "usagelimit", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeusagelimits": { "name": "DescribeUsageLimits", "description": "Grants permission to describe usage limits", "accessLevel": "Read", "resourceTypes": [ { "name": "usagelimit", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "disablelogging": { "name": "DisableLogging", "description": "Grants permission to disable logging information, such as queries and connection attempts, for a cluster", "accessLevel": "Write", "resourceTypes": [ { "name": "cluster", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "disablesnapshotcopy": { "name": "DisableSnapshotCopy", "description": "Grants permission to disable the automatic copy of snapshots for a cluster", "accessLevel": "Write", "resourceTypes": [ { "name": "cluster", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "disassociatedatashareconsumer": { "name": "DisassociateDataShareConsumer", "description": "Grants permission to disassociate a consumer from a datashare", "accessLevel": "Write", "resourceTypes": [ { "name": "datashare", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "redshift:ConsumerArn" ], "dependentActions": [] }, "enablelogging": { "name": "EnableLogging", "description": "Grants permission to enable logging information, such as queries and connection attempts, for a cluster", "accessLevel": "Write", "resourceTypes": [ { "name": "cluster", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "enablesnapshotcopy": { "name": "EnableSnapshotCopy", "description": "Grants permission to enable the automatic copy of snapshots for a cluster", "accessLevel": "Write", "resourceTypes": [ { "name": "cluster", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "executequery": { "name": "ExecuteQuery", "isPermissionOnly": true, "description": "Grants permission to execute a query through the Amazon Redshift console", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "failoverprimarycompute": { "name": "FailoverPrimaryCompute", "description": "Grants permission to failover the primary compute of an Multi-AZ cluster to another AZ", "accessLevel": "Write", "resourceTypes": [ { "name": "cluster", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "fetchresults": { "name": "FetchResults", "isPermissionOnly": true, "description": "Grants permission to fetch query results through the Amazon Redshift console", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getclustercredentials": { "name": "GetClusterCredentials", "description": "Grants permission to get temporary credentials to access an Amazon Redshift database by the specified AWS account", "accessLevel": "Write", "resourceTypes": [ { "name": "dbuser", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "dbname", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "redshift:DbName", "redshift:DbUser", "redshift:DurationSeconds" ], "dependentActions": [] }, "getclustercredentialswithiam": { "name": "GetClusterCredentialsWithIAM", "description": "Grants permission to get enhanced temporary credentials to access an Amazon Redshift database by the specified AWS account", "accessLevel": "Write", "resourceTypes": [ { "name": "dbname", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "redshift:DbName", "redshift:DurationSeconds" ], "dependentActions": [] }, "getreservednodeexchangeconfigurationoptions": { "name": "GetReservedNodeExchangeConfigurationOptions", "description": "Grants permission to get the configuration options for the reserved-node exchange", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getreservednodeexchangeofferings": { "name": "GetReservedNodeExchangeOfferings", "description": "Grants permission to get an array of DC2 ReservedNodeOfferings that matches the payment type, term, and usage price of the given DC1 reserved node", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getresourcepolicy": { "name": "GetResourcePolicy", "description": "Grants permission to get the resource policy for a specified resource", "accessLevel": "Read", "resourceTypes": [ { "name": "namespace", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "joingroup": { "name": "JoinGroup", "description": "Grants permission to join the specified Amazon Redshift group", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "dbgroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listdatabases": { "name": "ListDatabases", "isPermission