UNPKG

@cloud-copilot/iam-data

Version:
509 lines 13.2 kB
{ "creatediscoverer": { "name": "CreateDiscoverer", "description": "Grants permission to create an event schema discoverer. Once created, your events will be automatically map into corresponding schema documents", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createregistry": { "name": "CreateRegistry", "description": "Grants permission to create a new schema registry in your account", "accessLevel": "Write", "resourceTypes": [ { "name": "registry", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createschema": { "name": "CreateSchema", "description": "Grants permission to create a new schema in your account", "accessLevel": "Write", "resourceTypes": [ { "name": "schema", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "deletediscoverer": { "name": "DeleteDiscoverer", "description": "Grants permission to delete discoverer in your account", "accessLevel": "Write", "resourceTypes": [ { "name": "discoverer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteregistry": { "name": "DeleteRegistry", "description": "Grants permission to delete an existing registry in your account", "accessLevel": "Write", "resourceTypes": [ { "name": "registry", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteresourcepolicy": { "name": "DeleteResourcePolicy", "description": "Grants permission to delete the resource-based policy attached to a given registry", "accessLevel": "Write", "resourceTypes": [ { "name": "registry", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteschema": { "name": "DeleteSchema", "description": "Grants permission to delete an existing schema in your account", "accessLevel": "Write", "resourceTypes": [ { "name": "schema", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteschemaversion": { "name": "DeleteSchemaVersion", "description": "Grants permission to delete a specific version of schema in your account", "accessLevel": "Write", "resourceTypes": [ { "name": "schema", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describecodebinding": { "name": "DescribeCodeBinding", "description": "Grants permission to retrieve metadata for generated code for specific schema in your account", "accessLevel": "Read", "resourceTypes": [ { "name": "schema", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describediscoverer": { "name": "DescribeDiscoverer", "description": "Grants permission to retrieve discoverer metadata in your account", "accessLevel": "Read", "resourceTypes": [ { "name": "discoverer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeregistry": { "name": "DescribeRegistry", "description": "Grants permission to describe an existing registry metadata in your account", "accessLevel": "Read", "resourceTypes": [ { "name": "registry", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeschema": { "name": "DescribeSchema", "description": "Grants permission to retrieve an existing schema in your account", "accessLevel": "Read", "resourceTypes": [ { "name": "schema", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "exportschema": { "name": "ExportSchema", "description": "Grants permission to export the AWS registry or discovered schemas in OpenAPI 3 format to JSONSchema format", "accessLevel": "Read", "resourceTypes": [ { "name": "registry", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "schema", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getcodebindingsource": { "name": "GetCodeBindingSource", "description": "Grants permission to retrieve metadata for generated code for specific schema in your account", "accessLevel": "Read", "resourceTypes": [ { "name": "schema", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getdiscoveredschema": { "name": "GetDiscoveredSchema", "description": "Grants permission to retrieve a schema for the provided list of sample events", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getresourcepolicy": { "name": "GetResourcePolicy", "description": "Grants permission to retrieve the resource-based policy attached to a given registry", "accessLevel": "Read", "resourceTypes": [ { "name": "registry", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listdiscoverers": { "name": "ListDiscoverers", "description": "Grants permission to list all discoverers in your account", "accessLevel": "List", "resourceTypes": [ { "name": "discoverer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listregistries": { "name": "ListRegistries", "description": "Grants permission to list all registries in your account", "accessLevel": "List", "resourceTypes": [ { "name": "registry", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listschemaversions": { "name": "ListSchemaVersions", "description": "Grants permission to list all versions of a schema", "accessLevel": "List", "resourceTypes": [ { "name": "schema", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listschemas": { "name": "ListSchemas", "description": "Grants permission to list all schemas", "accessLevel": "List", "resourceTypes": [ { "name": "schema", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to lists tags for a resource", "accessLevel": "Read", "resourceTypes": [ { "name": "discoverer", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "registry", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "schema", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putcodebinding": { "name": "PutCodeBinding", "description": "Grants permission to generate code for specific schema in your account", "accessLevel": "Write", "resourceTypes": [ { "name": "schema", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putresourcepolicy": { "name": "PutResourcePolicy", "description": "Grants permission to attach a resource-based policy to a given registry", "accessLevel": "Write", "resourceTypes": [ { "name": "registry", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "searchschemas": { "name": "SearchSchemas", "description": "Grants permission to search schemas based on specified keywords in your account", "accessLevel": "List", "resourceTypes": [ { "name": "schema", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "startdiscoverer": { "name": "StartDiscoverer", "description": "Grants permission to start the specified discoverer. Once started the discoverer will automatically register schemas for published events to configured source in your account", "accessLevel": "Write", "resourceTypes": [ { "name": "discoverer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "stopdiscoverer": { "name": "StopDiscoverer", "description": "Grants permission to stop the specified discoverer. Once stopped the discoverer will no longer register schemas for published events to configured source in your account", "accessLevel": "Write", "resourceTypes": [ { "name": "discoverer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to tag a resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "discoverer", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "registry", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "schema", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to remove a tag from a resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "discoverer", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "registry", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "schema", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] }, "updatediscoverer": { "name": "UpdateDiscoverer", "description": "Grants permission to update an existing discoverer in your account", "accessLevel": "Write", "resourceTypes": [ { "name": "discoverer", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateregistry": { "name": "UpdateRegistry", "description": "Grants permission to update an existing registry metadata in your account", "accessLevel": "Write", "resourceTypes": [ { "name": "registry", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateschema": { "name": "UpdateSchema", "description": "Grants permission to update an existing schema in your account", "accessLevel": "Write", "resourceTypes": [ { "name": "schema", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] } }