UNPKG

@cloud-copilot/iam-data

Version:
328 lines 7.96 kB
{ "createenvironment": { "name": "CreateEnvironment", "description": "Grants permission to create environments", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}" ], "dependentActions": [ "appstream:DescribeStacks", "iam:CreateServiceLinkedRole", "workspaces-web:GetPortal", "workspaces-web:GetUserSettings", "workspaces:DescribeWorkspaceDirectories" ] }, "deletedevice": { "name": "DeleteDevice", "description": "Grants permission to delete devices", "accessLevel": "Write", "resourceTypes": [ { "name": "device", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deleteenvironment": { "name": "DeleteEnvironment", "description": "Grants permission to delete environments", "accessLevel": "Write", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deregisterdevice": { "name": "DeregisterDevice", "description": "Grants permission to deregister devices", "accessLevel": "Write", "resourceTypes": [ { "name": "device", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getdevice": { "name": "GetDevice", "description": "Grants permission to get devices", "accessLevel": "Read", "resourceTypes": [ { "name": "device", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getdevicedetails": { "name": "GetDeviceDetails", "isPermissionOnly": true, "description": "Grants permission to get details of devices", "accessLevel": "Read", "resourceTypes": [ { "name": "device", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getenvironment": { "name": "GetEnvironment", "description": "Grants permission to get details of environments", "accessLevel": "Read", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getsoftwareset": { "name": "GetSoftwareSet", "description": "Grants permission to get details of software sets", "accessLevel": "Read", "resourceTypes": [ { "name": "softwareset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listdevicesessions": { "name": "ListDeviceSessions", "isPermissionOnly": true, "description": "Grants permission to list device sessions", "accessLevel": "List", "resourceTypes": [ { "name": "device", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listdevices": { "name": "ListDevices", "description": "Grants permission to list devices", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listenvironments": { "name": "ListEnvironments", "description": "Grants permission to list environments", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listsoftwaresets": { "name": "ListSoftwareSets", "description": "Grants permission to list software sets", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to list tags for a resource", "accessLevel": "List", "resourceTypes": [ { "name": "device", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "environment", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "softwareset", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to add one or more tags to a resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "device", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "environment", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "softwareset", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys", "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to remove one or more tags from a resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "device", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "environment", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "softwareset", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys", "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "updatedevice": { "name": "UpdateDevice", "description": "Grants permission to update devices", "accessLevel": "Write", "resourceTypes": [ { "name": "device", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "updateenvironment": { "name": "UpdateEnvironment", "description": "Grants permission to update environments", "accessLevel": "Write", "resourceTypes": [ { "name": "environment", "required": true, "conditionKeys": [], "dependentActions": [ "appstream:DescribeStacks", "workspaces-web:GetPortal", "workspaces-web:GetUserSettings", "workspaces:DescribeWorkspaceDirectories" ] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "updatesoftwareset": { "name": "UpdateSoftwareSet", "description": "Grants permission to update software set", "accessLevel": "Write", "resourceTypes": [ { "name": "softwareset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] } }