@cloud-copilot/iam-data/data/actions/vendor-insights.json

AWS IAM Data

{
  "activatesecurityprofile": {
    "name": "ActivateSecurityProfile",
    "description": "Grants permission to activate the security profile",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "SecurityProfile",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "associatedatasource": {
    "name": "AssociateDataSource",
    "description": "Grants permission to associate security profile with a data source",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "SecurityProfile",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "vendor-insights:GetDataSource"
        ]
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "createdatasource": {
    "name": "CreateDataSource",
    "description": "Grants permission to create a new data source",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}",
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": [
      "vendor-insights:TagResource"
    ]
  },
  "createsecurityprofile": {
    "name": "CreateSecurityProfile",
    "description": "Grants permission to create a new security profile",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}",
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": [
      "vendor-insights:TagResource"
    ]
  },
  "deactivatesecurityprofile": {
    "name": "DeactivateSecurityProfile",
    "description": "Grants permission to deactivate the security profile",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "SecurityProfile",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "deletedatasource": {
    "name": "DeleteDataSource",
    "description": "Grants permission to delete a data source",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "DataSource",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "disassociatedatasource": {
    "name": "DisassociateDataSource",
    "description": "Grants permission to disassociate security profile from a data source",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "SecurityProfile",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "vendor-insights:GetDataSource"
        ]
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getdatasource": {
    "name": "GetDataSource",
    "description": "Grants permission to retrieve the details of an existing data source",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "DataSource",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getentitledsecurityprofilesnapshot": {
    "name": "GetEntitledSecurityProfileSnapshot",
    "description": "Grants permission to return the details of a security profile snapshot that requester is entitled to read",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "SecurityProfile",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getprofileaccessterms": {
    "name": "GetProfileAccessTerms",
    "description": "Grants permission to get the access terms for a vendor insights profile",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getsecurityprofile": {
    "name": "GetSecurityProfile",
    "description": "Grants permission to return the details of an existing security profile",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "SecurityProfile",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getsecurityprofilesnapshot": {
    "name": "GetSecurityProfileSnapshot",
    "description": "Grants permission to return the details of a security profile snapshot",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "SecurityProfile",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listdatasources": {
    "name": "ListDataSources",
    "description": "Grants permission to list existing data sources",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listentitledsecurityprofilesnapshots": {
    "name": "ListEntitledSecurityProfileSnapshots",
    "description": "Grants permission to return the snapshot summary list for an existing security profile that requester is entitled to list",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "SecurityProfile",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listentitledsecurityprofiles": {
    "name": "ListEntitledSecurityProfiles",
    "description": "Grants permission to list entitled security profiles",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listsecurityprofilesnapshots": {
    "name": "ListSecurityProfileSnapshots",
    "description": "Grants permission to return the snapshot summary list for an existing security profile",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "SecurityProfile",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listsecurityprofiles": {
    "name": "ListSecurityProfiles",
    "description": "Grants permission to list existing security profiles",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtagsforresource": {
    "name": "ListTagsForResource",
    "description": "Grants permission to list tags for vendor insights resource",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "DataSource",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "SecurityProfile",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "tagresource": {
    "name": "TagResource",
    "description": "Grants permission to tag vendor insights resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "DataSource",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "SecurityProfile",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}",
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "untagresource": {
    "name": "UntagResource",
    "description": "Grants permission to untag vendor insights resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "DataSource",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "SecurityProfile",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "updatedatasource": {
    "name": "UpdateDataSource",
    "description": "Grants permission to update an existing data source",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "DataSource",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "updatesecurityprofile": {
    "name": "UpdateSecurityProfile",
    "description": "Grants permission to update the security profile",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "SecurityProfile",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "updatesecurityprofilesnapshotcreationconfiguration": {
    "name": "UpdateSecurityProfileSnapshotCreationConfiguration",
    "description": "Grants permission to update the security profile snapshot creation configuration",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "SecurityProfile",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "updatesecurityprofilesnapshotreleaseconfiguration": {
    "name": "UpdateSecurityProfileSnapshotReleaseConfiguration",
    "description": "Grants permission to update the security profile snapshot release configuration",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "SecurityProfile",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  }
}