@cloud-copilot/iam-data

{ "createapplication": { "name": "CreateApplication", "description": "Grants permission to create an application within an environment", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "refactor-spaces:ApplicationCreatedByAccount", "refactor-spaces:CreatedByAccountIds", "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createenvironment": { "name": "CreateEnvironment", "description": "Grants permission to create an environment", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createroute": { "name": "CreateRoute", "description": "Grants permission to create a route within an application", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "refactor-spaces:ApplicationCreatedByAccount", "refactor-spaces:ServiceCreatedByAccount", "refactor-spaces:RouteCreatedByAccount", "refactor-spaces:CreatedByAccountIds", "refactor-spaces:SourcePath", "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createservice": { "name": "CreateService", "description": "Grants permission to create a service within an application", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "refactor-spaces:ApplicationCreatedByAccount", "refactor-spaces:ServiceCreatedByAccount", "refactor-spaces:CreatedByAccountIds", "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "deleteapplication": { "name": "DeleteApplication", "description": "Grants permission to delete an application from an environment", "accessLevel": "Write", "resourceTypes": [ { "name": "application", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "refactor-spaces:ApplicationCreatedByAccount", "refactor-spaces:CreatedByAccountIds", "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deleteenvironment": { "name": "DeleteEnvironment", "description": "Grants permission to delete an environment", "accessLevel": "Write", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deleteresourcepolicy": { "name": "DeleteResourcePolicy", "description": "Grants permission to delete a resource policy", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleteroute": { "name": "DeleteRoute", "description": "Grants permission to delete a route from an application", "accessLevel": "Write", "resourceTypes": [ { "name": "route", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "refactor-spaces:ApplicationCreatedByAccount", "refactor-spaces:ServiceCreatedByAccount", "refactor-spaces:RouteCreatedByAccount", "refactor-spaces:CreatedByAccountIds", "refactor-spaces:SourcePath", "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deleteservice": { "name": "DeleteService", "description": "Grants permission to delete a service from an application", "accessLevel": "Write", "resourceTypes": [ { "name": "service", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "refactor-spaces:ApplicationCreatedByAccount", "refactor-spaces:ServiceCreatedByAccount", "refactor-spaces:CreatedByAccountIds", "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getapplication": { "name": "GetApplication", "description": "Grants permission to get more information about an application", "accessLevel": "Read", "resourceTypes": [ { "name": "application", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "refactor-spaces:ApplicationCreatedByAccount", "refactor-spaces:CreatedByAccountIds", "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getenvironment": { "name": "GetEnvironment", "description": "Grants permission to get more information for an environment", "accessLevel": "Read", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getresourcepolicy": { "name": "GetResourcePolicy", "description": "Grants permission to get the details about a resource policy", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getroute": { "name": "GetRoute", "description": "Grants permission to get more information about a route", "accessLevel": "Read", "resourceTypes": [ { "name": "route", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "refactor-spaces:ApplicationCreatedByAccount", "refactor-spaces:ServiceCreatedByAccount", "refactor-spaces:RouteCreatedByAccount", "refactor-spaces:CreatedByAccountIds", "refactor-spaces:SourcePath", "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getservice": { "name": "GetService", "description": "Grants permission to get more information about a service", "accessLevel": "Read", "resourceTypes": [ { "name": "service", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "refactor-spaces:ApplicationCreatedByAccount", "refactor-spaces:ServiceCreatedByAccount", "refactor-spaces:CreatedByAccountIds", "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listapplications": { "name": "ListApplications", "description": "Grants permission to list all the applications in an environment", "accessLevel": "Read", "resourceTypes": [ { "name": "application", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listenvironmentvpcs": { "name": "ListEnvironmentVpcs", "description": "Grants permission to list all the VPCs for the environment", "accessLevel": "Read", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listenvironments": { "name": "ListEnvironments", "description": "Grants permission to list all environments", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listroutes": { "name": "ListRoutes", "description": "Grants permission to list all the routes in an application", "accessLevel": "Read", "resourceTypes": [ { "name": "route", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listservices": { "name": "ListServices", "description": "Grants permission to list all the services in an environment", "accessLevel": "Read", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to list all the tags for a given resource", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "putresourcepolicy": { "name": "PutResourcePolicy", "description": "Grants permission to add a resource policy", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to tag a resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "application", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "environment", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "route", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "service", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "refactor-spaces:ApplicationCreatedByAccount", "refactor-spaces:ServiceCreatedByAccount", "refactor-spaces:RouteCreatedByAccount", "refactor-spaces:CreatedByAccountIds", "refactor-spaces:SourcePath", "aws:TagKeys", "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to remove a tag from a resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "application", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "environment", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "route", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "service", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "refactor-spaces:ApplicationCreatedByAccount", "refactor-spaces:ServiceCreatedByAccount", "refactor-spaces:RouteCreatedByAccount", "refactor-spaces:CreatedByAccountIds", "refactor-spaces:SourcePath", "aws:TagKeys", "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "updateroute": { "name": "UpdateRoute", "description": "Grants permission to update a route from an application", "accessLevel": "Write", "resourceTypes": [ { "name": "route", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "refactor-spaces:ApplicationCreatedByAccount", "refactor-spaces:ServiceCreatedByAccount", "refactor-spaces:RouteCreatedByAccount", "refactor-spaces:CreatedByAccountIds", "refactor-spaces:SourcePath", "aws:ResourceTag/${TagKey}" ], "dependentActions": [] } }