@cloud-copilot/iam-data
Version:
303 lines • 7.86 kB
JSON
{
"addpermission": {
"name": "AddPermission",
"description": "Grants permission to a queue for a specific principal",
"accessLevel": "Permissions management",
"resourceTypes": [
{
"name": "queue",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"cancelmessagemovetask": {
"name": "CancelMessageMoveTask",
"description": "Grants permission to cancel an in progress message move task",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "queue",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"changemessagevisibility": {
"name": "ChangeMessageVisibility",
"description": "Grants permission to change the visibility timeout of a specified message in a queue to a new value",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "queue",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"createqueue": {
"name": "CreateQueue",
"description": "Grants permission to create a new queue, or returns the URL of an existing one",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "queue",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"deletemessage": {
"name": "DeleteMessage",
"description": "Grants permission to delete the specified message from the specified queue",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "queue",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"deletequeue": {
"name": "DeleteQueue",
"description": "Grants permission to delete the queue specified by the queue URL, regardless of whether the queue is empty",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "queue",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getqueueattributes": {
"name": "GetQueueAttributes",
"description": "Grants permission to get attributes for the specified queue",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "queue",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"getqueueurl": {
"name": "GetQueueUrl",
"description": "Grants permission to return the URL of an existing queue",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "queue",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listdeadlettersourcequeues": {
"name": "ListDeadLetterSourceQueues",
"description": "Grants permission to return a list of your queues that have the RedrivePolicy queue attribute configured with a dead letter queue",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "queue",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listmessagemovetasks": {
"name": "ListMessageMoveTasks",
"description": "Grants permission to list message move tasks",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "queue",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listqueuetags": {
"name": "ListQueueTags",
"description": "Grants permission to list tags added to an SQS queue",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "queue",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"listqueues": {
"name": "ListQueues",
"description": "Grants permission to return a list of your queues",
"accessLevel": "Read",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"purgequeue": {
"name": "PurgeQueue",
"description": "Grants permission to delete the messages in a queue specified by the queue URL",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "queue",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"receivemessage": {
"name": "ReceiveMessage",
"description": "Grants permission to retrieve one or more messages, with a maximum limit of 10 messages, from the specified queue",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "queue",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"removepermission": {
"name": "RemovePermission",
"description": "Grants permission to revoke any permissions in the queue policy that matches the specified Label parameter",
"accessLevel": "Permissions management",
"resourceTypes": [
{
"name": "queue",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"sendmessage": {
"name": "SendMessage",
"description": "Grants permission to deliver a message to the specified queue",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "queue",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"setqueueattributes": {
"name": "SetQueueAttributes",
"description": "Grants permission to set the value of one or more queue attributes",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "queue",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"startmessagemovetask": {
"name": "StartMessageMoveTask",
"description": "Grants permission to start a message move task",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "queue",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [],
"dependentActions": []
},
"tagqueue": {
"name": "TagQueue",
"description": "Grants permission to add tags to the specified SQS queue",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "queue",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:RequestTag/${TagKey}",
"aws:TagKeys"
],
"dependentActions": []
},
"untagqueue": {
"name": "UntagQueue",
"description": "Grants permission to remove tags from the specified SQS queue",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "queue",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys"
],
"dependentActions": []
}
}