@cloud-copilot/iam-data

{ "abortmultipartupload": { "name": "AbortMultipartUpload", "description": "Grants permission to abort a multipart upload", "accessLevel": "Write", "resourceTypes": [ { "name": "objectlambdaaccesspoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3-object-lambda:authType", "s3-object-lambda:signatureAge", "s3-object-lambda:TlsVersion" ], "dependentActions": [] }, "deleteobject": { "name": "DeleteObject", "description": "Grants permission to remove the null version of an object and insert a delete marker, which becomes the current version of the object", "accessLevel": "Write", "resourceTypes": [ { "name": "objectlambdaaccesspoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3-object-lambda:authType", "s3-object-lambda:signatureAge", "s3-object-lambda:TlsVersion" ], "dependentActions": [] }, "deleteobjecttagging": { "name": "DeleteObjectTagging", "description": "Grants permission to use the tagging subresource to remove the entire tag set from the specified object", "accessLevel": "Tagging", "resourceTypes": [ { "name": "objectlambdaaccesspoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3-object-lambda:authType", "s3-object-lambda:signatureAge", "s3-object-lambda:TlsVersion" ], "dependentActions": [] }, "deleteobjectversion": { "name": "DeleteObjectVersion", "description": "Grants permission to remove a specific version of an object", "accessLevel": "Write", "resourceTypes": [ { "name": "objectlambdaaccesspoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3-object-lambda:authType", "s3-object-lambda:signatureAge", "s3-object-lambda:TlsVersion", "s3-object-lambda:versionid" ], "dependentActions": [] }, "deleteobjectversiontagging": { "name": "DeleteObjectVersionTagging", "description": "Grants permission to remove the entire tag set for a specific version of the object", "accessLevel": "Tagging", "resourceTypes": [ { "name": "objectlambdaaccesspoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3-object-lambda:authType", "s3-object-lambda:signatureAge", "s3-object-lambda:TlsVersion", "s3-object-lambda:versionid" ], "dependentActions": [] }, "getobject": { "name": "GetObject", "description": "Grants permission to retrieve objects from Amazon S3", "accessLevel": "Read", "resourceTypes": [ { "name": "objectlambdaaccesspoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3-object-lambda:authType", "s3-object-lambda:signatureAge", "s3-object-lambda:TlsVersion" ], "dependentActions": [] }, "getobjectacl": { "name": "GetObjectAcl", "description": "Grants permission to return the access control list (ACL) of an object", "accessLevel": "Read", "resourceTypes": [ { "name": "objectlambdaaccesspoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3-object-lambda:authType", "s3-object-lambda:signatureAge", "s3-object-lambda:TlsVersion" ], "dependentActions": [] }, "getobjectlegalhold": { "name": "GetObjectLegalHold", "description": "Grants permission to get an object's current Legal Hold status", "accessLevel": "Read", "resourceTypes": [ { "name": "objectlambdaaccesspoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3-object-lambda:authType", "s3-object-lambda:signatureAge", "s3-object-lambda:TlsVersion" ], "dependentActions": [] }, "getobjectretention": { "name": "GetObjectRetention", "description": "Grants permission to retrieve the retention settings for an object", "accessLevel": "Read", "resourceTypes": [ { "name": "objectlambdaaccesspoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3-object-lambda:authType", "s3-object-lambda:signatureAge", "s3-object-lambda:TlsVersion" ], "dependentActions": [] }, "getobjecttagging": { "name": "GetObjectTagging", "description": "Grants permission to return the tag set of an object", "accessLevel": "Read", "resourceTypes": [ { "name": "objectlambdaaccesspoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3-object-lambda:authType", "s3-object-lambda:signatureAge", "s3-object-lambda:TlsVersion" ], "dependentActions": [] }, "getobjectversion": { "name": "GetObjectVersion", "description": "Grants permission to retrieve a specific version of an object", "accessLevel": "Read", "resourceTypes": [ { "name": "objectlambdaaccesspoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3-object-lambda:authType", "s3-object-lambda:signatureAge", "s3-object-lambda:TlsVersion", "s3-object-lambda:versionid" ], "dependentActions": [] }, "getobjectversionacl": { "name": "GetObjectVersionAcl", "description": "Grants permission to return the access control list (ACL) of a specific object version", "accessLevel": "Read", "resourceTypes": [ { "name": "objectlambdaaccesspoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3-object-lambda:authType", "s3-object-lambda:signatureAge", "s3-object-lambda:TlsVersion", "s3-object-lambda:versionid" ], "dependentActions": [] }, "getobjectversiontagging": { "name": "GetObjectVersionTagging", "description": "Grants permission to return the tag set for a specific version of the object", "accessLevel": "Read", "resourceTypes": [ { "name": "objectlambdaaccesspoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3-object-lambda:authType", "s3-object-lambda:signatureAge", "s3-object-lambda:TlsVersion", "s3-object-lambda:versionid" ], "dependentActions": [] }, "listbucket": { "name": "ListBucket", "description": "Grants permission to list some or all of the objects in an Amazon S3 bucket (up to 1000)", "accessLevel": "List", "resourceTypes": [ { "name": "objectlambdaaccesspoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3-object-lambda:authType", "s3-object-lambda:signatureAge", "s3-object-lambda:TlsVersion" ], "dependentActions": [] }, "listbucketmultipartuploads": { "name": "ListBucketMultipartUploads", "description": "Grants permission to list in-progress multipart uploads", "accessLevel": "List", "resourceTypes": [ { "name": "objectlambdaaccesspoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3-object-lambda:authType", "s3-object-lambda:signatureAge", "s3-object-lambda:TlsVersion" ], "dependentActions": [] }, "listbucketversions": { "name": "ListBucketVersions", "description": "Grants permission to list metadata about all the versions of objects in an Amazon S3 bucket", "accessLevel": "List", "resourceTypes": [ { "name": "objectlambdaaccesspoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3-object-lambda:authType", "s3-object-lambda:signatureAge", "s3-object-lambda:TlsVersion" ], "dependentActions": [] }, "listmultipartuploadparts": { "name": "ListMultipartUploadParts", "description": "Grants permission to list the parts that have been uploaded for a specific multipart upload", "accessLevel": "List", "resourceTypes": [ { "name": "objectlambdaaccesspoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3-object-lambda:authType", "s3-object-lambda:signatureAge", "s3-object-lambda:TlsVersion" ], "dependentActions": [] }, "putobject": { "name": "PutObject", "description": "Grants permission to add an object to a bucket", "accessLevel": "Write", "resourceTypes": [ { "name": "objectlambdaaccesspoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3-object-lambda:authType", "s3-object-lambda:signatureAge", "s3-object-lambda:TlsVersion" ], "dependentActions": [] }, "putobjectacl": { "name": "PutObjectAcl", "description": "Grants permission to set the access control list (ACL) permissions for new or existing objects in an S3 bucket", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "objectlambdaaccesspoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3-object-lambda:authType", "s3-object-lambda:signatureAge", "s3-object-lambda:TlsVersion" ], "dependentActions": [] }, "putobjectlegalhold": { "name": "PutObjectLegalHold", "description": "Grants permission to apply a Legal Hold configuration to the specified object", "accessLevel": "Write", "resourceTypes": [ { "name": "objectlambdaaccesspoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3-object-lambda:authType", "s3-object-lambda:signatureAge", "s3-object-lambda:TlsVersion" ], "dependentActions": [] }, "putobjectretention": { "name": "PutObjectRetention", "description": "Grants permission to place an Object Retention configuration on an object", "accessLevel": "Write", "resourceTypes": [ { "name": "objectlambdaaccesspoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3-object-lambda:authType", "s3-object-lambda:signatureAge", "s3-object-lambda:TlsVersion" ], "dependentActions": [] }, "putobjecttagging": { "name": "PutObjectTagging", "description": "Grants permission to set the supplied tag-set to an object that already exists in a bucket", "accessLevel": "Tagging", "resourceTypes": [ { "name": "objectlambdaaccesspoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3-object-lambda:authType", "s3-object-lambda:signatureAge", "s3-object-lambda:TlsVersion" ], "dependentActions": [] }, "putobjectversionacl": { "name": "PutObjectVersionAcl", "description": "Grants permission to use the acl subresource to set the access control list (ACL) permissions for an object that already exists in a bucket", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "objectlambdaaccesspoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3-object-lambda:authType", "s3-object-lambda:signatureAge", "s3-object-lambda:TlsVersion", "s3-object-lambda:versionid" ], "dependentActions": [] }, "putobjectversiontagging": { "name": "PutObjectVersionTagging", "description": "Grants permission to set the supplied tag-set for a specific version of an object", "accessLevel": "Tagging", "resourceTypes": [ { "name": "objectlambdaaccesspoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3-object-lambda:authType", "s3-object-lambda:signatureAge", "s3-object-lambda:TlsVersion", "s3-object-lambda:versionid" ], "dependentActions": [] }, "restoreobject": { "name": "RestoreObject", "description": "Grants permission to restore an archived copy of an object back into Amazon S3", "accessLevel": "Write", "resourceTypes": [ { "name": "objectlambdaaccesspoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3-object-lambda:authType", "s3-object-lambda:signatureAge", "s3-object-lambda:TlsVersion" ], "dependentActions": [] }, "writegetobjectresponse": { "name": "WriteGetObjectResponse", "description": "Grants permission to provide data for GetObject requests send to S3 Object Lambda", "accessLevel": "Write", "resourceTypes": [ { "name": "objectlambdaaccesspoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "s3-object-lambda:authType", "s3-object-lambda:signatureAge", "s3-object-lambda:TlsVersion" ], "dependentActions": [] } }