@cloud-copilot/iam-data

{ "acceptportfolioshare": { "name": "AcceptPortfolioShare", "description": "Grants permission to accept a portfolio that has been shared with you", "accessLevel": "Write", "resourceTypes": [ { "name": "Portfolio", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "associateattributegroup": { "name": "AssociateAttributeGroup", "description": "Grants permission to associate an attribute group with an application", "accessLevel": "Write", "resourceTypes": [ { "name": "Application", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "AttributeGroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "associatebudgetwithresource": { "name": "AssociateBudgetWithResource", "description": "Grants permission to associate a budget with a resource", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "associateprincipalwithportfolio": { "name": "AssociatePrincipalWithPortfolio", "description": "Grants permission to associate an IAM principal with a portfolio, giving the specified principal access to any products associated with the specified portfolio", "accessLevel": "Write", "resourceTypes": [ { "name": "Portfolio", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "associateproductwithportfolio": { "name": "AssociateProductWithPortfolio", "description": "Grants permission to associate a product with a portfolio", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "associateresource": { "name": "AssociateResource", "description": "Grants permission to associate a resource with an application", "accessLevel": "Write", "resourceTypes": [ { "name": "Application", "required": true, "conditionKeys": [], "dependentActions": [ "cloudformation:DescribeStacks", "resource-groups:CreateGroup", "resource-groups:GetGroup", "resource-groups:Tag" ] } ], "conditionKeys": [ "servicecatalog:ResourceType", "servicecatalog:Resource" ], "dependentActions": [] }, "associateserviceactionwithprovisioningartifact": { "name": "AssociateServiceActionWithProvisioningArtifact", "description": "Grants permission to associate an action with a provisioning artifact", "accessLevel": "Write", "resourceTypes": [ { "name": "Product", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "associatetagoptionwithresource": { "name": "AssociateTagOptionWithResource", "description": "Grants permission to associate the specified TagOption with the specified portfolio or product", "accessLevel": "Write", "resourceTypes": [ { "name": "Portfolio", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Product", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchassociateserviceactionwithprovisioningartifact": { "name": "BatchAssociateServiceActionWithProvisioningArtifact", "description": "Grants permission to associate multiple self-service actions with provisioning artifacts", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "batchdisassociateserviceactionfromprovisioningartifact": { "name": "BatchDisassociateServiceActionFromProvisioningArtifact", "description": "Grants permission to disassociate a batch of self-service actions from the specified provisioning artifact", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "copyproduct": { "name": "CopyProduct", "description": "Grants permission to copy the specified source product to the specified target product or a new product", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createapplication": { "name": "CreateApplication", "description": "Grants permission to create an application", "accessLevel": "Write", "resourceTypes": [ { "name": "Application", "required": true, "conditionKeys": [], "dependentActions": [ "iam:CreateServiceLinkedRole" ] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createattributegroup": { "name": "CreateAttributeGroup", "description": "Grants permission to create an attribute group", "accessLevel": "Write", "resourceTypes": [ { "name": "AttributeGroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createconstraint": { "name": "CreateConstraint", "description": "Grants permission to create a constraint on an associated product and portfolio", "accessLevel": "Write", "resourceTypes": [ { "name": "Product", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createportfolio": { "name": "CreatePortfolio", "description": "Grants permission to create a portfolio", "accessLevel": "Write", "resourceTypes": [ { "name": "Portfolio", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createportfolioshare": { "name": "CreatePortfolioShare", "description": "Grants permission to share a portfolio you own with another AWS account", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "Portfolio", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createproduct": { "name": "CreateProduct", "description": "Grants permission to create a product and that product's first provisioning artifact", "accessLevel": "Write", "resourceTypes": [ { "name": "Product", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createprovisionedproductplan": { "name": "CreateProvisionedProductPlan", "description": "Grants permission to add a new provisioned product plan", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "servicecatalog:accountLevel", "servicecatalog:roleLevel", "servicecatalog:userLevel" ], "dependentActions": [] }, "createprovisioningartifact": { "name": "CreateProvisioningArtifact", "description": "Grants permission to add a new provisioning artifact to an existing product", "accessLevel": "Write", "resourceTypes": [ { "name": "Product", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createserviceaction": { "name": "CreateServiceAction", "description": "Grants permission to create a self-service action", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createtagoption": { "name": "CreateTagOption", "description": "Grants permission to create a TagOption", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleteapplication": { "name": "DeleteApplication", "description": "Grants permission to delete an application if all associations have been removed from the application", "accessLevel": "Write", "resourceTypes": [ { "name": "Application", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteattributegroup": { "name": "DeleteAttributeGroup", "description": "Grants permission to delete an attribute group if all associations have been removed from the attribute group", "accessLevel": "Write", "resourceTypes": [ { "name": "AttributeGroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteconstraint": { "name": "DeleteConstraint", "description": "Grants permission to remove and delete an existing constraint from an associated product and portfolio", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleteportfolio": { "name": "DeletePortfolio", "description": "Grants permission to delete a portfolio if all associations and shares have been removed from the portfolio", "accessLevel": "Write", "resourceTypes": [ { "name": "Portfolio", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteportfolioshare": { "name": "DeletePortfolioShare", "description": "Grants permission to unshare a portfolio you own from an AWS account you previously shared the portfolio with", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "Portfolio", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteproduct": { "name": "DeleteProduct", "description": "Grants permission to delete a product if all associations have been removed from the product", "accessLevel": "Write", "resourceTypes": [ { "name": "Product", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteprovisionedproductplan": { "name": "DeleteProvisionedProductPlan", "description": "Grants permission to delete a provisioned product plan", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "servicecatalog:accountLevel", "servicecatalog:roleLevel", "servicecatalog:userLevel" ], "dependentActions": [] }, "deleteprovisioningartifact": { "name": "DeleteProvisioningArtifact", "description": "Grants permission to delete a provisioning artifact from a product", "accessLevel": "Write", "resourceTypes": [ { "name": "Product", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteresourcepolicy": { "name": "DeleteResourcePolicy", "isPermissionOnly": true, "description": "Grants permission to delete a resource-based policy for the specified resource", "accessLevel": "Write", "resourceTypes": [ { "name": "Application", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "AttributeGroup", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteserviceaction": { "name": "DeleteServiceAction", "description": "Grants permission to delete a self-service action", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deletetagoption": { "name": "DeleteTagOption", "description": "Grants permission to delete the specified TagOption", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeconstraint": { "name": "DescribeConstraint", "description": "Grants permission to describe a constraint", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describecopyproductstatus": { "name": "DescribeCopyProductStatus", "description": "Grants permission to get the status of the specified copy product operation", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeportfolio": { "name": "DescribePortfolio", "description": "Grants permission to describe a portfolio", "accessLevel": "Read", "resourceTypes": [ { "name": "Portfolio", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeportfoliosharestatus": { "name": "DescribePortfolioShareStatus", "description": "Grants permission to get the status of the specified portfolio share operation", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeportfolioshares": { "name": "DescribePortfolioShares", "description": "Grants permission to view a summary of each of the portfolio shares that were created for the specified portfolio", "accessLevel": "List", "resourceTypes": [ { "name": "Portfolio", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeproduct": { "name": "DescribeProduct", "description": "Grants permission to describe a product as an end-user", "accessLevel": "Read", "resourceTypes": [ { "name": "Product", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeproductasadmin": { "name": "DescribeProductAsAdmin", "description": "Grants permission to describe a product as an admin", "accessLevel": "Read", "resourceTypes": [ { "name": "Product", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeproductview": { "name": "DescribeProductView", "description": "Grants permission to describe a product as an end-user", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeprovisionedproduct": { "name": "DescribeProvisionedProduct", "description": "Grants permission to describe a provisioned product", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [ "servicecatalog:accountLevel", "servicecatalog:roleLevel", "servicecatalog:userLevel" ], "dependentActions": [] }, "describeprovisionedproductplan": { "name": "DescribeProvisionedProductPlan", "description": "Grants permission to describe a provisioned product plan", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [ "servicecatalog:accountLevel", "servicecatalog:roleLevel", "servicecatalog:userLevel" ], "dependentActions": [] }, "describeprovisioningartifact": { "name": "DescribeProvisioningArtifact", "description": "Grants permission to describe a provisioning artifact", "accessLevel": "Read", "resourceTypes": [ { "name": "Product", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeprovisioningparameters": { "name": "DescribeProvisioningParameters", "description": "Grants permission to describe the parameters that you need to specify to successfully provision a specified provisioning artifact", "accessLevel": "Read", "resourceTypes": [ { "name": "Product", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describerecord": { "name": "DescribeRecord", "description": "Grants permission to describe a record and lists any outputs", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [ "servicecatalog:accountLevel", "servicecatalog:roleLevel", "servicecatalog:userLevel" ], "dependentActions": [] }, "describeserviceaction": { "name": "DescribeServiceAction", "description": "Grants permission to describe a self-service action", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "describeserviceactionexecutionparameters": { "name": "DescribeServiceActionExecutionParameters", "description": "Grants permission to get the default parameters if you executed the specified Service Action on the specified Provisioned Product", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [ "servicecatalog:accountLevel", "servicecatalog:roleLevel", "servicecatalog:userLevel" ], "dependentActions": [] }, "describetagoption": { "name": "DescribeTagOption", "description": "Grants permission to get information about the specified TagOption", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "disableawsorganizationsaccess": { "name": "DisableAWSOrganizationsAccess", "description": "Grants permission to disable portfolio sharing through AWS Organizations feature", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "disassociateattributegroup": { "name": "DisassociateAttributeGroup", "description": "Grants permission to disassociate an attribute group from an application", "accessLevel": "Write", "resourceTypes": [ { "name": "Application", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "AttributeGroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "disassociatebudgetfromresource": { "name": "DisassociateBudgetFromResource", "description": "Grants permission to disassociate a budget from a resource", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "disassociateprincipalfromportfolio": { "name": "DisassociatePrincipalFromPortfolio", "description": "Grants permission to disassociate an IAM principal from a portfolio", "accessLevel": "Write", "resourceTypes": [ { "name": "Portfolio", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "disassociateproductfromportfolio": { "name": "DisassociateProductFromPortfolio", "description": "Grants permission to disassociate a product from a portfolio", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "disassociateresource": { "name": "DisassociateResource", "description": "Grants permission to disassociate a resource from an application", "accessLevel": "Write", "resourceTypes": [ { "name": "Application", "required": true, "conditionKeys": [], "dependentActions": [ "resource-groups:DeleteGroup" ] } ], "conditionKeys": [ "servicecatalog:ResourceType", "servicecatalog:Resource" ], "dependentActions": [] }, "disassociateserviceactionfromprovisioningartifact": { "name": "DisassociateServiceActionFromProvisioningArtifact", "description": "Grants permission to disassociate the specified self-service action association from the specified provisioning artifact", "accessLevel": "Write", "resourceTypes": [ { "name": "Product", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "disassociatetagoptionfromresource": { "name": "DisassociateTagOptionFromResource", "description": "Grants permission to disassociate the specified TagOption from the specified resource", "accessLevel": "Write", "resourceTypes": [ { "name": "Portfolio", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Product", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "enableawsorganizationsaccess": { "name": "EnableAWSOrganizationsAccess", "description": "Grants permission to enable portfolio sharing feature through AWS Organizations", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "executeprovisionedproductplan": { "name": "ExecuteProvisionedProductPlan", "description": "Grants permission to execute a provisioned product plan", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "servicecatalog:accountLevel", "servicecatalog:roleLevel", "servicecatalog:userLevel" ], "dependentActions": [] }, "executeprovisionedproductserviceaction": { "name": "ExecuteProvisionedProductServiceAction", "description": "Grants permission to executes a provisioned product plan", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "servicecatalog:accountLevel", "servicecatalog:roleLevel", "servicecatalog:userLevel" ], "dependentActions": [] }, "getawsorganizationsaccessstatus": { "name": "GetAWSOrganizationsAccessStatus", "description": "Grants permission to get the access status of AWS Organization portfolio share feature", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getapplication": { "name": "GetApplication", "description": "Grants permission to get an application", "accessLevel": "Read", "resourceTypes": [ { "name": "Application", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getassociatedresource": { "name": "GetAssociatedResource", "description": "Grants permission to get information about a resource associated to an application", "accessLevel": "Read", "resourceTypes": [ { "name": "Application", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "servicecatalog:ResourceType", "servicecatalog:Resource" ], "dependentActions": [] }, "getattributegroup": { "name": "GetAttributeGroup", "description": "Grants permission to get an attribute group", "accessLevel": "Read", "resourceTypes": [ { "name": "AttributeGroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getconfiguration": { "name": "GetConfiguration", "description": "Grants permission to read AppRegistry configurations", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getprovisionedproductoutputs": { "name": "GetProvisionedProductOutputs", "description": "Grants permission to get the provisioned product output with either provisioned product id or name", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getresourcepolicy": { "name": "GetResourcePolicy", "isPermissionOnly": true, "description": "Grants permission to get a resource-based policy for the specified resource", "accessLevel": "Read", "resourceTypes": [ { "name": "Application", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "AttributeGroup", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "importasprovisionedproduct": { "name": "ImportAsProvisionedProduct", "description": "Grants permission to import a resource into a provisioned product", "accessLevel": "Write", "resourceTypes": [ { "name": "Product", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listacceptedportfolioshares": { "name": "ListAcceptedPortfolioShares", "description": "Grants permission to list the portfolios that have been shared with you and you have accepted", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listapplications": { "name": "ListApplications", "description": "Grants permission to list your applications", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listassociatedattributegroups": { "name": "ListAssociatedAttributeGroups", "description": "Grants permission to list the attribute groups associated with an application", "accessLevel": "List", "resourceTypes": [ { "name": "Application", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listassociatedresources": { "name": "ListAssociatedResources", "description": "Grants permission to list the resources associated with an application", "accessLevel": "List", "resourceTypes": [ { "name": "Application", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listattributegroups": { "name": "ListAttributeGroups", "description": "Grants permission to list your attribute groups", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listattributegroupsforapplication": { "name": "ListAttributeGroupsForApplication", "description": "Grants permission to list the associated attribute groups for a given application", "accessLevel": "List", "resourceTypes": [ { "name": "Application", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listbudgetsforresource": { "name": "ListBudgetsForResource", "description": "Grants permission to list all the budgets associated to a resource", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listconstraintsforportfolio": { "name": "ListConstraintsForPortfolio", "description": "Grants permission to list constraints associated with a given portfolio", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listlaunchpaths": { "name": "ListLaunchPaths", "description": "Grants permission to list the different ways to launch a given product as an end-user", "accessLevel": "List", "resourceTypes": [ { "name": "Product", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listorganizationportfolioaccess": { "name": "ListOrganizationPortfolioAccess", "description": "Grants permission to list the organization nodes that have access to the specified portfolio", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listportfolioaccess": { "name": "ListPortfolioAccess", "description": "Grants permission to list the AWS accounts you have shared a given portfolio with", "accessLevel": "List", "resourceTypes": [ { "name": "Portfolio", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listportfolios": { "name": "ListPortfolios", "description": "Grants permission to list the portfolios in your account", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listportfoliosforproduct": { "name": "ListPortfoliosForProduct", "description": "Grants permission to list the portfolios associated with a given product", "accessLevel": "List", "resourceTypes": [ { "name": "Product", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listprincipalsforportfolio": { "name": "ListPrincipalsForPortfolio", "description": "Grants permission to list the IAM principals associated with a given portfolio", "accessLevel": "List", "resourceTypes": [ { "name": "Portfolio", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listprovisionedproductplans": { "name": "ListProvisionedProductPlans", "description": "Grants permission to list the provisioned product plans", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [ "servicecatalog:accountLevel", "servicecatalog:roleLevel", "servicecatalog:userLevel" ], "dependentActions": [] }, "listprovisioningartifacts": { "name": "ListProvisioningArtifacts", "description": "Grants permission to list the provisioning artifacts associated with a given product", "accessLevel": "List", "resourceTypes": [ { "name": "Product", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listprovisioningartifactsforserviceaction": { "name": "ListProvisioningArtifactsForServiceAction", "description": "Grants permission to list all provisioning artifacts for the specified self-service action", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listrecordhistory": { "name": "ListRecordHistory", "description": "Grants permission to list all the records in your account or all the records related to a given provisioned product", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [ "servicecatalog:accountLevel", "servicecatalog:roleLevel", "servicecatalog:userLevel" ], "dependentActions": [] }, "listresourcesfortagoption": { "name": "ListResourcesForTagOption", "description": "Grants permission to list the resources associated with the specified TagOption", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listserviceactions": { "name": "ListServiceActions", "description": "Grants permission to list all self-service actions", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listserviceactionsforprovisioningartifact": { "name": "ListServiceActionsForProvisioningArtifact", "description": "Grants permission to list all the service actions associated with the specified provisioning artifact in your account", "accessLevel": "List", "resourceTypes": [ { "name": "Product", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "servicecatalog:accountLevel", "servicecatalog:roleLevel", "servicecatalog:userLevel" ], "dependentActions": [] }, "liststackinstancesforprovisionedproduct": { "name": "ListStackInstancesForProvisionedProduct", "description": "Grants permission to list account, region and status of each stack instances that are associated with a CFN_STACKSET type provisioned product", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [ "servicecatalog:accountLevel", "servicecatalog:roleLevel", "servicecatalog:userLevel" ], "dependentActions": [] }, "listtagoptions": { "name": "ListTagOptions", "description": "Grants permission to list the specified TagOptions or all TagOptions", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to list the tags for a service catalog appregistry resource", "accessLevel": "Read", "resourceTypes": [ { "name": "Application", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "AttributeGroup", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "notifyprovisionproductengineworkflowresult": { "name": "NotifyProvisionProductEngineWorkflowResult", "description": "Grants permission to notify the result of the provisioning engine execution", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "notifyterminateprovisionedproductengineworkflowresult": { "name": "NotifyTerminateProvisionedProductEngineWorkflowResult", "description": "Grants permission to notify the result of the terminate engine execution", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "notifyupdateprovisionedproductengineworkflowresult": { "name": "NotifyUpdateProvisionedProductEngineWorkflowResult", "description": "Grants permission to notify the result of the update engine execution", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "provisionproduct": { "name": "ProvisionProduct", "description": "Grants permission to provision a product with a specified provisioning artifact and launch parameters", "accessLevel": "Write", "resourceTypes": [ { "name": "Product", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putconfiguration": { "name": "PutConfiguration", "description": "Grants permission to assign AppRegistry configurations", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "putresourcepolicy": { "name": "PutResourcePolicy", "isPermissionOnly": true, "description": "Grants permission to add a resource-based policy for the specified resource", "accessLevel": "Write", "resourceTypes": [ { "name": "Application", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "AttributeGroup", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "rejectportfolioshare": { "name": "RejectPortfolioShare", "description": "Grants permission to reject a portfolio that has been shared with you that you previously accepted", "accessLevel": "Write", "resourceTypes": [ { "name": "Portfolio", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "scanprovisionedproducts": { "name": "ScanProvisionedProducts", "description": "Grants permission to list all the provisioned products in your account", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [ "servicecatalog:accountLevel", "servicecatalog:roleLevel", "servicecatalog:userLevel" ], "dependentActions": [] }, "searchproducts": { "name": "SearchProducts", "description": "Grants permission to list the products available to you as an end-user", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "searchproductsasadmin": { "name": "SearchProductsAsAdmin", "description": "Grants permission to list all the products in your account or all the products associated with a given portfolio", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "searchprovisionedproducts": { "name": "SearchProvisionedProducts", "description": "Grants permission to list all the provisioned products in your account", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [ "servicecatalog:accountLevel", "servicecatalog:roleLevel", "servicecatalog:userLevel" ], "dependentActions": [] }, "syncresource": { "name": "SyncResource", "description": "Grants permission to sync a resource with its current state in AppRegistry", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [ "cloudformation:UpdateStack" ] }, "tagresource": { "name": "TagResource", "description": "Grants permission to tag a service catalog appregistry resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "Application", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "AttributeGroup", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependentActions": [] }, "terminateprovisionedproduct": { "name": "TerminateProvisionedProduct", "description": "Grants permission to terminate an existing provisioned product", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "servicecatalog:accountLevel", "servicecatalog:roleLevel", "servicecatalog:userLevel" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to remove a tag from a service catalog appregistry resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "Application", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "AttributeGroup", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] }, "updateapplication": { "name": "UpdateApplication", "description": "Grants permission to update the attributes of an existing application", "accessLevel": "Write", "resourceTypes": [ { "name": "Application", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "iam:CreateServiceLinkedRole" ] }, "updateattributegroup": { "name": "UpdateAttributeGroup", "description": "Grants permission to update the attributes of an existing attribute group", "accessLevel": "Write", "resourceTypes": [ { "name": "AttributeGroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateconstraint": { "name": "UpdateConstraint", "description": "Grants permission to update the metadata fields of an existing constraint", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "updateportfolio": { "name": "UpdatePortfolio", "description": "Grants permission to update the metadata fields and/or tags of an existing portfolio", "accessLevel": "Write", "resourceTypes": [ { "name": "Portfolio", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "updateportfolioshare": { "name": "UpdatePortfolioShare", "description": "Grants permission to enable or disable resource sharing for an existing portfolio share", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "Portfolio", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateproduct": { "name": "UpdateProduct", "description": "Grants permission to update the metadata fields and/or tags of an existing product", "accessLevel": "Write", "resourceTypes": [ { "name": "Product", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "updateprovisionedproduct": { "name": "UpdateProvisionedProduct", "description": "Grants permission to update an existing provisioned product", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "servicecatalog:accountLevel", "servicecatalog:roleLevel", "servicecatalog:userLevel" ], "dependentActions": [] }, "updateprovisionedproductproperties": { "name": "UpdateProvisionedProductProperties", "description": "Grants permission to update the properties of an existing provisioned product", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "updateprovisioningartifact": { "name": "UpdateProvisioningArtifact", "description": "Grants permission to update the metadata fields of an existing provisioning artifact", "accessLevel": "Write", "resourceTypes": [ { "name": "Product", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateserviceaction": { "name": "UpdateServiceAction", "description": "Grants permission to update a self-service action", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "updatetagoption": { "name": "UpdateTagOption", "description": "Grants permission to update the specified TagOption", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] } }