@cloud-copilot/iam-data
Version:
328 lines • 7.96 kB
JSON
{
"createenvironment": {
"name": "CreateEnvironment",
"description": "Grants permission to create environments",
"accessLevel": "Write",
"resourceTypes": [],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}",
"aws:ResourceTag/${TagKey}"
],
"dependentActions": [
"appstream:DescribeStacks",
"iam:CreateServiceLinkedRole",
"workspaces-web:GetPortal",
"workspaces-web:GetUserSettings",
"workspaces:DescribeWorkspaceDirectories"
]
},
"deletedevice": {
"name": "DeleteDevice",
"description": "Grants permission to delete devices",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "device",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"deleteenvironment": {
"name": "DeleteEnvironment",
"description": "Grants permission to delete environments",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "environment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"deregisterdevice": {
"name": "DeregisterDevice",
"description": "Grants permission to deregister devices",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "device",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"getdevice": {
"name": "GetDevice",
"description": "Grants permission to get devices",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "device",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"getdevicedetails": {
"name": "GetDeviceDetails",
"isPermissionOnly": true,
"description": "Grants permission to get details of devices",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "device",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"getenvironment": {
"name": "GetEnvironment",
"description": "Grants permission to get details of environments",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "environment",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"getsoftwareset": {
"name": "GetSoftwareSet",
"description": "Grants permission to get details of software sets",
"accessLevel": "Read",
"resourceTypes": [
{
"name": "softwareset",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"listdevicesessions": {
"name": "ListDeviceSessions",
"isPermissionOnly": true,
"description": "Grants permission to list device sessions",
"accessLevel": "List",
"resourceTypes": [
{
"name": "device",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"listdevices": {
"name": "ListDevices",
"description": "Grants permission to list devices",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listenvironments": {
"name": "ListEnvironments",
"description": "Grants permission to list environments",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listsoftwaresets": {
"name": "ListSoftwareSets",
"description": "Grants permission to list software sets",
"accessLevel": "List",
"resourceTypes": [],
"conditionKeys": [],
"dependentActions": []
},
"listtagsforresource": {
"name": "ListTagsForResource",
"description": "Grants permission to list tags for a resource",
"accessLevel": "List",
"resourceTypes": [
{
"name": "device",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "environment",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "softwareset",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"tagresource": {
"name": "TagResource",
"description": "Grants permission to add one or more tags to a resource",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "device",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "environment",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "softwareset",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys",
"aws:RequestTag/${TagKey}",
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"untagresource": {
"name": "UntagResource",
"description": "Grants permission to remove one or more tags from a resource",
"accessLevel": "Tagging",
"resourceTypes": [
{
"name": "device",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "environment",
"required": false,
"conditionKeys": [],
"dependentActions": []
},
{
"name": "softwareset",
"required": false,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:TagKeys",
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"updatedevice": {
"name": "UpdateDevice",
"description": "Grants permission to update devices",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "device",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"updateenvironment": {
"name": "UpdateEnvironment",
"description": "Grants permission to update environments",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "environment",
"required": true,
"conditionKeys": [],
"dependentActions": [
"appstream:DescribeStacks",
"workspaces-web:GetPortal",
"workspaces-web:GetUserSettings",
"workspaces:DescribeWorkspaceDirectories"
]
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
},
"updatesoftwareset": {
"name": "UpdateSoftwareSet",
"description": "Grants permission to update software set",
"accessLevel": "Write",
"resourceTypes": [
{
"name": "softwareset",
"required": true,
"conditionKeys": [],
"dependentActions": []
}
],
"conditionKeys": [
"aws:ResourceTag/${TagKey}"
],
"dependentActions": []
}
}