@cloud-copilot/iam-data

{ "createidentitysource": { "name": "CreateIdentitySource", "description": "Grants permission to create a reference to an external identity provider (IdP) that is compatible with OpenID Connect (OIDC) authentication protocol, such as Amazon Cognito", "accessLevel": "Write", "resourceTypes": [ { "name": "policy-store", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createpolicy": { "name": "CreatePolicy", "description": "Grants permission to create a Cedar policy and save it in the specified policy store", "accessLevel": "Write", "resourceTypes": [ { "name": "policy-store", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createpolicystore": { "name": "CreatePolicyStore", "description": "Grants permission to create a Cedar policy and save it in the specified policy store", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createpolicytemplate": { "name": "CreatePolicyTemplate", "description": "Grants permission to create a policy template", "accessLevel": "Write", "resourceTypes": [ { "name": "policy-store", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteidentitysource": { "name": "DeleteIdentitySource", "description": "Grants permission to delete an identity source that references an identity provider (IdP) such as Amazon Cognito", "accessLevel": "Write", "resourceTypes": [ { "name": "policy-store", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletepolicy": { "name": "DeletePolicy", "description": "Grants permission to delete the specified policy from the policy store", "accessLevel": "Write", "resourceTypes": [ { "name": "policy-store", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletepolicystore": { "name": "DeletePolicyStore", "description": "Grants permission to delete the specified policy store", "accessLevel": "Write", "resourceTypes": [ { "name": "policy-store", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletepolicytemplate": { "name": "DeletePolicyTemplate", "description": "Grants permission to delete the specified policy template from the policy store", "accessLevel": "Write", "resourceTypes": [ { "name": "policy-store", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getidentitysource": { "name": "GetIdentitySource", "description": "Grants permission to retrieve the details about the specified identity source", "accessLevel": "Read", "resourceTypes": [ { "name": "policy-store", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getpolicy": { "name": "GetPolicy", "description": "Grants permission to retrieve information about the specified policy", "accessLevel": "Read", "resourceTypes": [ { "name": "policy-store", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getpolicystore": { "name": "GetPolicyStore", "description": "Grants permission to retrieve details about a policy store", "accessLevel": "Read", "resourceTypes": [ { "name": "policy-store", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "verifiedpermissions:ListTagsForResource" ] }, "getpolicytemplate": { "name": "GetPolicyTemplate", "description": "Grants permission to retrieve the details for the specified policy template in the specified policy store", "accessLevel": "Read", "resourceTypes": [ { "name": "policy-store", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getschema": { "name": "GetSchema", "description": "Grants permission to retrieve the details for the specified schema in the specified policy store", "accessLevel": "Read", "resourceTypes": [ { "name": "policy-store", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "isauthorized": { "name": "IsAuthorized", "description": "Grants permission to make an authorization decision about a service request described in the parameters", "accessLevel": "Read", "resourceTypes": [ { "name": "policy-store", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "isauthorizedwithtoken": { "name": "IsAuthorizedWithToken", "description": "Grants permission to make an authorization decision about a service request described in the parameters. The principal in this request comes from an external identity source", "accessLevel": "Read", "resourceTypes": [ { "name": "policy-store", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listidentitysources": { "name": "ListIdentitySources", "description": "Grants permission to return a paginated list of all of the identity sources defined in the specified policy store", "accessLevel": "List", "resourceTypes": [ { "name": "policy-store", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listpolicies": { "name": "ListPolicies", "description": "Grants permission to return a paginated list of all policies stored in the specified policy store", "accessLevel": "List", "resourceTypes": [ { "name": "policy-store", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listpolicystores": { "name": "ListPolicyStores", "description": "Grants permission to return a paginated list of all policy stores in the calling Amazon Web Services account", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listpolicytemplates": { "name": "ListPolicyTemplates", "description": "Grants permission to return a paginated list of all policy templates in the specified policy store", "accessLevel": "List", "resourceTypes": [ { "name": "policy-store", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to view a list of resource tags for the specified policy store", "accessLevel": "Read", "resourceTypes": [ { "name": "policy-store", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putschema": { "name": "PutSchema", "description": "Grants permission to create or update the policy schema in the specified policy store", "accessLevel": "Write", "resourceTypes": [ { "name": "policy-store", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to add tags to the specified policy store", "accessLevel": "Tagging", "resourceTypes": [ { "name": "policy-store", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to remove tags from the specified policy store", "accessLevel": "Tagging", "resourceTypes": [ { "name": "policy-store", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] }, "updateidentitysource": { "name": "UpdateIdentitySource", "description": "Grants permission to update the specified identity source to use a new identity provider (IdP) source, or to change the mapping of identities from the IdP to a different principal entity type", "accessLevel": "Write", "resourceTypes": [ { "name": "policy-store", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatepolicy": { "name": "UpdatePolicy", "description": "Grants permission to modify the specified Cedar static policy in the specified policy store", "accessLevel": "Write", "resourceTypes": [ { "name": "policy-store", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatepolicystore": { "name": "UpdatePolicyStore", "description": "Grants permission to modify the validation setting for a policy store", "accessLevel": "Write", "resourceTypes": [ { "name": "policy-store", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatepolicytemplate": { "name": "UpdatePolicyTemplate", "description": "Grants permission to update the specified policy template", "accessLevel": "Write", "resourceTypes": [ { "name": "policy-store", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] } }