@cloud-copilot/iam-data

{ "associateviaawsservice-eventsandstates": { "name": "AssociateViaAWSService-EventsAndStates", "isPermissionOnly": true, "description": "Grants permission to associate a resource configuration through Amazon EventBridge and AWS Step Functions service networks", "accessLevel": "Permissions management", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createaccesslogsubscription": { "name": "CreateAccessLogSubscription", "description": "Grants permission to create an access log subscription", "accessLevel": "Write", "resourceTypes": [ { "name": "AccessLogSubscription", "required": true, "conditionKeys": [], "dependentActions": [ "logs:CreateLogDelivery", "logs:GetLogDelivery" ] }, { "name": "ResourceConfiguration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Service", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ServiceNetwork", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createlistener": { "name": "CreateListener", "description": "Grants permission to create a listener", "accessLevel": "Write", "resourceTypes": [ { "name": "Listener", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "vpc-lattice:Protocol", "vpc-lattice:TargetGroupArns" ], "dependentActions": [] }, "createresourceconfiguration": { "name": "CreateResourceConfiguration", "description": "Grants permission to create a resource configuration", "accessLevel": "Write", "resourceTypes": [ { "name": "ResourceConfiguration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ResourceGateway", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createresourcegateway": { "name": "CreateResourceGateway", "description": "Grants permission to create a resource gateway", "accessLevel": "Write", "resourceTypes": [ { "name": "ResourceGateway", "required": true, "conditionKeys": [], "dependentActions": [ "ec2:DescribeSecurityGroups", "ec2:DescribeSubnets", "ec2:DescribeVpcs" ] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "vpc-lattice:VpcId" ], "dependentActions": [] }, "createrule": { "name": "CreateRule", "description": "Grants permission to create a rule", "accessLevel": "Write", "resourceTypes": [ { "name": "Rule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "vpc-lattice:TargetGroupArns" ], "dependentActions": [] }, "createservice": { "name": "CreateService", "description": "Grants permission to create a service", "accessLevel": "Write", "resourceTypes": [ { "name": "Service", "required": true, "conditionKeys": [], "dependentActions": [ "iam:CreateServiceLinkedRole" ] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "vpc-lattice:AuthType" ], "dependentActions": [] }, "createservicenetwork": { "name": "CreateServiceNetwork", "description": "Grants permission to create a service network", "accessLevel": "Write", "resourceTypes": [ { "name": "ServiceNetwork", "required": true, "conditionKeys": [], "dependentActions": [ "iam:CreateServiceLinkedRole" ] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "vpc-lattice:AuthType" ], "dependentActions": [] }, "createservicenetworkresourceassociation": { "name": "CreateServiceNetworkResourceAssociation", "description": "Grants permission to create an association between a service network and a resource", "accessLevel": "Write", "resourceTypes": [ { "name": "ResourceConfiguration", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "ServiceNetwork", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "ServiceNetworkResourceAssociation", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "vpc-lattice:ResourceConfigurationArn", "vpc-lattice:ServiceNetworkArn" ], "dependentActions": [] }, "createservicenetworkserviceassociation": { "name": "CreateServiceNetworkServiceAssociation", "description": "Grants permission to create a service network and service association", "accessLevel": "Write", "resourceTypes": [ { "name": "Service", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "ServiceNetwork", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "ServiceNetworkServiceAssociation", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "vpc-lattice:ServiceArn", "vpc-lattice:ServiceNetworkArn" ], "dependentActions": [] }, "createservicenetworkvpcassociation": { "name": "CreateServiceNetworkVpcAssociation", "description": "Grants permission to create a service network and VPC association", "accessLevel": "Write", "resourceTypes": [ { "name": "ServiceNetwork", "required": true, "conditionKeys": [], "dependentActions": [ "ec2:DescribeVpcs" ] }, { "name": "ServiceNetworkVpcAssociation", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "vpc-lattice:SecurityGroupIds", "vpc-lattice:ServiceNetworkArn", "vpc-lattice:VpcId" ], "dependentActions": [] }, "createservicenetworkvpcendpointassociation": { "name": "CreateServiceNetworkVpcEndpointAssociation", "isPermissionOnly": true, "description": "Grants permission to create an association between a service network and VPC endpoint", "accessLevel": "Permissions management", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createtargetgroup": { "name": "CreateTargetGroup", "description": "Grants permission to create a target group", "accessLevel": "Write", "resourceTypes": [ { "name": "TargetGroup", "required": true, "conditionKeys": [], "dependentActions": [ "iam:CreateServiceLinkedRole" ] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "vpc-lattice:VpcId" ], "dependentActions": [] }, "deleteaccesslogsubscription": { "name": "DeleteAccessLogSubscription", "description": "Grants permission to delete an access log subscription", "accessLevel": "Write", "resourceTypes": [ { "name": "AccessLogSubscription", "required": true, "conditionKeys": [], "dependentActions": [ "logs:DeleteLogDelivery", "logs:GetLogDelivery" ] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deleteauthpolicy": { "name": "DeleteAuthPolicy", "description": "Grants permission to delete an auth policy", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "Service", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ServiceNetwork", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletelistener": { "name": "DeleteListener", "description": "Grants permission to delete a listener", "accessLevel": "Write", "resourceTypes": [ { "name": "Listener", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deleteresourceconfiguration": { "name": "DeleteResourceConfiguration", "description": "Grants permission to delete a resource configuration", "accessLevel": "Write", "resourceTypes": [ { "name": "ResourceConfiguration", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deleteresourceendpointassociation": { "name": "DeleteResourceEndpointAssociation", "description": "Grants permission to delete a resource endpoint association", "accessLevel": "Write", "resourceTypes": [ { "name": "ResourceEndpointAssociation", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deleteresourcegateway": { "name": "DeleteResourceGateway", "description": "Grants permission to delete a resource gateway", "accessLevel": "Write", "resourceTypes": [ { "name": "ResourceGateway", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deleteresourcepolicy": { "name": "DeleteResourcePolicy", "description": "Grants permission to delete a resource policy", "accessLevel": "Write", "resourceTypes": [ { "name": "ResourceConfiguration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Service", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ServiceNetwork", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleterule": { "name": "DeleteRule", "description": "Grants permission to delete a rule", "accessLevel": "Write", "resourceTypes": [ { "name": "Rule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deleteservice": { "name": "DeleteService", "description": "Grants permission to delete a service", "accessLevel": "Write", "resourceTypes": [ { "name": "Service", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deleteservicenetwork": { "name": "DeleteServiceNetwork", "description": "Grants permission to delete a service network", "accessLevel": "Write", "resourceTypes": [ { "name": "ServiceNetwork", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deleteservicenetworkresourceassociation": { "name": "DeleteServiceNetworkResourceAssociation", "description": "Grants permission to delete the association between a service network and resource", "accessLevel": "Write", "resourceTypes": [ { "name": "ServiceNetworkResourceAssociation", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deleteservicenetworkserviceassociation": { "name": "DeleteServiceNetworkServiceAssociation", "description": "Grants permission to delete a service network service association", "accessLevel": "Write", "resourceTypes": [ { "name": "ServiceNetworkServiceAssociation", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "vpc-lattice:ServiceArn", "vpc-lattice:ServiceNetworkArn" ], "dependentActions": [] }, "deleteservicenetworkvpcassociation": { "name": "DeleteServiceNetworkVpcAssociation", "description": "Grants permission to delete a service network and VPC association", "accessLevel": "Write", "resourceTypes": [ { "name": "ServiceNetworkVpcAssociation", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "vpc-lattice:ServiceNetworkArn", "vpc-lattice:VpcId" ], "dependentActions": [] }, "deletetargetgroup": { "name": "DeleteTargetGroup", "description": "Grants permission to delete a target group", "accessLevel": "Write", "resourceTypes": [ { "name": "TargetGroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "deregistertargets": { "name": "DeregisterTargets", "description": "Grants permission to deregister targets from a target group", "accessLevel": "Write", "resourceTypes": [ { "name": "TargetGroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getaccesslogsubscription": { "name": "GetAccessLogSubscription", "description": "Grants permission to get information about an access log subscription", "accessLevel": "Read", "resourceTypes": [ { "name": "AccessLogSubscription", "required": true, "conditionKeys": [], "dependentActions": [ "logs:GetLogDelivery" ] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getauthpolicy": { "name": "GetAuthPolicy", "description": "Grants permission to get information about an auth policy", "accessLevel": "Read", "resourceTypes": [ { "name": "Service", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ServiceNetwork", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getlistener": { "name": "GetListener", "description": "Grants permission to get information about a listener", "accessLevel": "Read", "resourceTypes": [ { "name": "Listener", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getresourceconfiguration": { "name": "GetResourceConfiguration", "description": "Grants permission to get information about a resource configuration", "accessLevel": "Read", "resourceTypes": [ { "name": "ResourceConfiguration", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getresourcegateway": { "name": "GetResourceGateway", "description": "Grants permission to get information about a resource gateway", "accessLevel": "Read", "resourceTypes": [ { "name": "ResourceGateway", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getresourcepolicy": { "name": "GetResourcePolicy", "description": "Grants permission to get information about a resource policy", "accessLevel": "Read", "resourceTypes": [ { "name": "ResourceConfiguration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Service", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ServiceNetwork", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getrule": { "name": "GetRule", "description": "Grants permission to get information about a rule", "accessLevel": "Read", "resourceTypes": [ { "name": "Rule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getservice": { "name": "GetService", "description": "Grants permission to get information about a service", "accessLevel": "Read", "resourceTypes": [ { "name": "Service", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getservicenetwork": { "name": "GetServiceNetwork", "description": "Grants permission to get information about a service network", "accessLevel": "Read", "resourceTypes": [ { "name": "ServiceNetwork", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getservicenetworkresourceassociation": { "name": "GetServiceNetworkResourceAssociation", "description": "Grants permission to get information about an association between a service network and resource configuration", "accessLevel": "Read", "resourceTypes": [ { "name": "ServiceNetworkResourceAssociation", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "getservicenetworkserviceassociation": { "name": "GetServiceNetworkServiceAssociation", "description": "Grants permission to get information about a service network and service association", "accessLevel": "Read", "resourceTypes": [ { "name": "ServiceNetworkServiceAssociation", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "vpc-lattice:ServiceArn", "vpc-lattice:ServiceNetworkArn" ], "dependentActions": [] }, "getservicenetworkvpcassociation": { "name": "GetServiceNetworkVpcAssociation", "description": "Grants permission to get information about a service network and VPC association", "accessLevel": "Read", "resourceTypes": [ { "name": "ServiceNetworkVpcAssociation", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "vpc-lattice:ServiceNetworkArn", "vpc-lattice:VpcId" ], "dependentActions": [] }, "gettargetgroup": { "name": "GetTargetGroup", "description": "Grants permission to get information about a target group", "accessLevel": "Read", "resourceTypes": [ { "name": "TargetGroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listaccesslogsubscriptions": { "name": "ListAccessLogSubscriptions", "description": "Grants permission to list some or all access log subscriptions about a service network or a service", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listlisteners": { "name": "ListListeners", "description": "Grants permission to list some or all listeners", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listresourceconfigurations": { "name": "ListResourceConfigurations", "description": "Grants permission to list some or all resource configurations", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listresourceendpointassociations": { "name": "ListResourceEndpointAssociations", "description": "Grants permission to list some or all associations between a resource configuration and VPC endpoint", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [ "vpc-lattice:ResourceConfigurationArn", "vpc-lattice:VpcEndpointId" ], "dependentActions": [] }, "listresourcegateways": { "name": "ListResourceGateways", "description": "Grants permission to list some or all resource gateways", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listrules": { "name": "ListRules", "description": "Grants permission to list some or all rules", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listservicenetworkresourceassociations": { "name": "ListServiceNetworkResourceAssociations", "description": "Grants permission to list some or all associations between a service network and resource configuration", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listservicenetworkserviceassociations": { "name": "ListServiceNetworkServiceAssociations", "description": "Grants permission to list some or all service network and service associations", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [ "vpc-lattice:ServiceArn", "vpc-lattice:ServiceNetworkArn" ], "dependentActions": [] }, "listservicenetworkvpcassociations": { "name": "ListServiceNetworkVpcAssociations", "description": "Grants permission to list some or all service network and VPC associations", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [ "vpc-lattice:ServiceNetworkArn", "vpc-lattice:VpcId" ], "dependentActions": [] }, "listservicenetworkvpcendpointassociations": { "name": "ListServiceNetworkVpcEndpointAssociations", "description": "Grants permission to list some or all associations between a service network and VPC endpoint", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listservicenetworks": { "name": "ListServiceNetworks", "description": "Grants permission to list the service networks owned by a caller account or shared with the caller account", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listservices": { "name": "ListServices", "description": "Grants permission to list the services owned by a caller account or shared with the caller account", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to list tags for a vpc-lattice resource", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listtargetgroups": { "name": "ListTargetGroups", "description": "Grants permission to list some or all target groups", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listtargets": { "name": "ListTargets", "description": "Grants permission to list some or all targets in a target group", "accessLevel": "List", "resourceTypes": [ { "name": "TargetGroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putauthpolicy": { "name": "PutAuthPolicy", "description": "Grants permission to create or update the auth policy for a service network or a service", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "Service", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ServiceNetwork", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putresourcepolicy": { "name": "PutResourcePolicy", "description": "Grants permission to create a resource policy for a resource configuration, service, or service network", "accessLevel": "Write", "resourceTypes": [ { "name": "ResourceConfiguration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Service", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ServiceNetwork", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "registertargets": { "name": "RegisterTargets", "description": "Grants permission to register targets to a target group", "accessLevel": "Write", "resourceTypes": [ { "name": "TargetGroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to tag a vpc-lattice resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "AccessLogSubscription", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Listener", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ResourceConfiguration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ResourceEndpointAssociation", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ResourceGateway", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Rule", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Service", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ServiceNetwork", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ServiceNetworkResourceAssociation", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ServiceNetworkServiceAssociation", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ServiceNetworkVpcAssociation", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "TargetGroup", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to untag a vpc-lattice resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "AccessLogSubscription", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Listener", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ResourceConfiguration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ResourceEndpointAssociation", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ResourceGateway", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Rule", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Service", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ServiceNetwork", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ServiceNetworkResourceAssociation", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ServiceNetworkServiceAssociation", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ServiceNetworkVpcAssociation", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "TargetGroup", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] }, "updateaccesslogsubscription": { "name": "UpdateAccessLogSubscription", "description": "Grants permission to update an access log subscription", "accessLevel": "Write", "resourceTypes": [ { "name": "AccessLogSubscription", "required": true, "conditionKeys": [], "dependentActions": [ "logs:GetLogDelivery", "logs:UpdateLogDelivery" ] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "updatelistener": { "name": "UpdateListener", "description": "Grants permission to update a listener", "accessLevel": "Write", "resourceTypes": [ { "name": "Listener", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "vpc-lattice:TargetGroupArns" ], "dependentActions": [] }, "updateresourceconfiguration": { "name": "UpdateResourceConfiguration", "description": "Grants permission to update a resource configuration", "accessLevel": "Write", "resourceTypes": [ { "name": "ResourceConfiguration", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "updateresourcegateway": { "name": "UpdateResourceGateway", "description": "Grants permission to update a resource gateway", "accessLevel": "Write", "resourceTypes": [ { "name": "ResourceGateway", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "vpc-lattice:SecurityGroupIds" ], "dependentActions": [] }, "updaterule": { "name": "UpdateRule", "description": "Grants permission to update a rule", "accessLevel": "Write", "resourceTypes": [ { "name": "Rule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "vpc-lattice:TargetGroupArns" ], "dependentActions": [] }, "updateservice": { "name": "UpdateService", "description": "Grants permission to update a service", "accessLevel": "Write", "resourceTypes": [ { "name": "Service", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "vpc-lattice:AuthType" ], "dependentActions": [] }, "updateservicenetwork": { "name": "UpdateServiceNetwork", "description": "Grants permission to update a service network", "accessLevel": "Write", "resourceTypes": [ { "name": "ServiceNetwork", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "vpc-lattice:AuthType" ], "dependentActions": [] }, "updateservicenetworkvpcassociation": { "name": "UpdateServiceNetworkVpcAssociation", "description": "Grants permission to update a service network and VPC association", "accessLevel": "Write", "resourceTypes": [ { "name": "ServiceNetworkVpcAssociation", "required": true, "conditionKeys": [], "dependentActions": [ "ec2:DescribeSecurityGroups", "ec2:DescribeVpcs" ] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "aws:TagKeys", "vpc-lattice:SecurityGroupIds", "vpc-lattice:ServiceNetworkArn", "vpc-lattice:VpcId" ], "dependentActions": [] }, "updatetargetgroup": { "name": "UpdateTargetGroup", "description": "Grants permission to update a target group", "accessLevel": "Write", "resourceTypes": [ { "name": "TargetGroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] } }