@cloud-copilot/iam-data

{ "createbytematchset": { "name": "CreateByteMatchSet", "description": "Grants permission to create a ByteMatchSet", "accessLevel": "Write", "resourceTypes": [ { "name": "bytematchset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "creategeomatchset": { "name": "CreateGeoMatchSet", "description": "Grants permission to create a GeoMatchSet", "accessLevel": "Write", "resourceTypes": [ { "name": "geomatchset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createipset": { "name": "CreateIPSet", "description": "Grants permission to create an IPSet", "accessLevel": "Write", "resourceTypes": [ { "name": "ipset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createratebasedrule": { "name": "CreateRateBasedRule", "description": "Grants permission to create a RateBasedRule for limiting the volume of requests from a single IP address", "accessLevel": "Write", "resourceTypes": [ { "name": "ratebasedrule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createregexmatchset": { "name": "CreateRegexMatchSet", "description": "Grants permission to create a RegexMatchSet", "accessLevel": "Write", "resourceTypes": [ { "name": "regexmatchset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createregexpatternset": { "name": "CreateRegexPatternSet", "description": "Grants permission to create a RegexPatternSet", "accessLevel": "Write", "resourceTypes": [ { "name": "regexpatternset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createrule": { "name": "CreateRule", "description": "Grants permission to create a Rule for filtering web requests", "accessLevel": "Write", "resourceTypes": [ { "name": "rule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createrulegroup": { "name": "CreateRuleGroup", "description": "Grants permission to create a RuleGroup, which is a collection of predefined rules that you can use in a WebACL", "accessLevel": "Write", "resourceTypes": [ { "name": "rulegroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createsizeconstraintset": { "name": "CreateSizeConstraintSet", "description": "Grants permission to create a SizeConstraintSet", "accessLevel": "Write", "resourceTypes": [ { "name": "sizeconstraintset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createsqlinjectionmatchset": { "name": "CreateSqlInjectionMatchSet", "description": "Grants permission to create an SqlInjectionMatchSet", "accessLevel": "Write", "resourceTypes": [ { "name": "sqlinjectionmatchset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createwebacl": { "name": "CreateWebACL", "description": "Grants permission to create a WebACL, which contains rules for filtering web requests", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "webacl", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createwebaclmigrationstack": { "name": "CreateWebACLMigrationStack", "description": "Grants permission to create a CloudFormation web ACL template in an S3 bucket for the purposes of migrating the web ACL from AWS WAF Classic to AWS WAF v2", "accessLevel": "Write", "resourceTypes": [ { "name": "webacl", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "s3:PutObject" ] }, "createxssmatchset": { "name": "CreateXssMatchSet", "description": "Grants permission to create an XssMatchSet, which you use to detect requests that contain cross-site scripting attacks", "accessLevel": "Write", "resourceTypes": [ { "name": "xssmatchset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletebytematchset": { "name": "DeleteByteMatchSet", "description": "Grants permission to delete a ByteMatchSet", "accessLevel": "Write", "resourceTypes": [ { "name": "bytematchset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletegeomatchset": { "name": "DeleteGeoMatchSet", "description": "Grants permission to delete a GeoMatchSet", "accessLevel": "Write", "resourceTypes": [ { "name": "geomatchset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteipset": { "name": "DeleteIPSet", "description": "Grants permission to delete an IPSet", "accessLevel": "Write", "resourceTypes": [ { "name": "ipset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteloggingconfiguration": { "name": "DeleteLoggingConfiguration", "description": "Grants permission to delete the LoggingConfiguration from a web ACL", "accessLevel": "Write", "resourceTypes": [ { "name": "webacl", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletepermissionpolicy": { "name": "DeletePermissionPolicy", "description": "Grants permission to delete an IAM policy from a rule group", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "rulegroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteratebasedrule": { "name": "DeleteRateBasedRule", "description": "Grants permission to delete a RateBasedRule", "accessLevel": "Write", "resourceTypes": [ { "name": "ratebasedrule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteregexmatchset": { "name": "DeleteRegexMatchSet", "description": "Grants permission to delete a RegexMatchSet", "accessLevel": "Write", "resourceTypes": [ { "name": "regexmatchset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteregexpatternset": { "name": "DeleteRegexPatternSet", "description": "Grants permission to delete a RegexPatternSet", "accessLevel": "Write", "resourceTypes": [ { "name": "regexpatternset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleterule": { "name": "DeleteRule", "description": "Grants permission to delete a Rule", "accessLevel": "Write", "resourceTypes": [ { "name": "rule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleterulegroup": { "name": "DeleteRuleGroup", "description": "Grants permission to delete a RuleGroup", "accessLevel": "Write", "resourceTypes": [ { "name": "rulegroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletesizeconstraintset": { "name": "DeleteSizeConstraintSet", "description": "Grants permission to delete a SizeConstraintSet", "accessLevel": "Write", "resourceTypes": [ { "name": "sizeconstraintset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletesqlinjectionmatchset": { "name": "DeleteSqlInjectionMatchSet", "description": "Grants permission to delete an SqlInjectionMatchSet", "accessLevel": "Write", "resourceTypes": [ { "name": "sqlinjectionmatchset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletewebacl": { "name": "DeleteWebACL", "description": "Grants permission to delete a WebACL", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "webacl", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletexssmatchset": { "name": "DeleteXssMatchSet", "description": "Grants permission to delete an XssMatchSet", "accessLevel": "Write", "resourceTypes": [ { "name": "xssmatchset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getbytematchset": { "name": "GetByteMatchSet", "description": "Grants permission to retrieve a ByteMatchSet", "accessLevel": "Read", "resourceTypes": [ { "name": "bytematchset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getchangetoken": { "name": "GetChangeToken", "description": "Grants permission to retrieve a change token to use in create, update, and delete requests", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getchangetokenstatus": { "name": "GetChangeTokenStatus", "description": "Grants permission to retrieve the status of a change token", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getgeomatchset": { "name": "GetGeoMatchSet", "description": "Grants permission to retrieve a GeoMatchSet", "accessLevel": "Read", "resourceTypes": [ { "name": "geomatchset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getipset": { "name": "GetIPSet", "description": "Grants permission to retrieve an IPSet", "accessLevel": "Read", "resourceTypes": [ { "name": "ipset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getloggingconfiguration": { "name": "GetLoggingConfiguration", "description": "Grants permission to retrieve a LoggingConfiguration for a web ACL", "accessLevel": "Read", "resourceTypes": [ { "name": "webacl", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getpermissionpolicy": { "name": "GetPermissionPolicy", "description": "Grants permission to retrieve an IAM policy for a rule group", "accessLevel": "Read", "resourceTypes": [ { "name": "rulegroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getratebasedrule": { "name": "GetRateBasedRule", "description": "Grants permission to retrieve a RateBasedRule", "accessLevel": "Read", "resourceTypes": [ { "name": "ratebasedrule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getratebasedrulemanagedkeys": { "name": "GetRateBasedRuleManagedKeys", "description": "Grants permission to retrieve the array of IP addresses that are currently being blocked by a RateBasedRule", "accessLevel": "Read", "resourceTypes": [ { "name": "ratebasedrule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getregexmatchset": { "name": "GetRegexMatchSet", "description": "Grants permission to retrieve a RegexMatchSet", "accessLevel": "Read", "resourceTypes": [ { "name": "regexmatchset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getregexpatternset": { "name": "GetRegexPatternSet", "description": "Grants permission to retrieve a RegexPatternSet", "accessLevel": "Read", "resourceTypes": [ { "name": "regexpatternset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getrule": { "name": "GetRule", "description": "Grants permission to retrieve a Rule", "accessLevel": "Read", "resourceTypes": [ { "name": "rule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getrulegroup": { "name": "GetRuleGroup", "description": "Grants permission to retrieve a RuleGroup", "accessLevel": "Read", "resourceTypes": [ { "name": "rulegroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getsampledrequests": { "name": "GetSampledRequests", "description": "Grants permission to retrieve detailed information about a sample set of web requests", "accessLevel": "Read", "resourceTypes": [ { "name": "webacl", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getsizeconstraintset": { "name": "GetSizeConstraintSet", "description": "Grants permission to retrieve a SizeConstraintSet", "accessLevel": "Read", "resourceTypes": [ { "name": "sizeconstraintset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getsqlinjectionmatchset": { "name": "GetSqlInjectionMatchSet", "description": "Grants permission to retrieve an SqlInjectionMatchSet", "accessLevel": "Read", "resourceTypes": [ { "name": "sqlinjectionmatchset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getwebacl": { "name": "GetWebACL", "description": "Grants permission to retrieve a WebACL", "accessLevel": "Read", "resourceTypes": [ { "name": "webacl", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getxssmatchset": { "name": "GetXssMatchSet", "description": "Grants permission to retrieve an XssMatchSet", "accessLevel": "Read", "resourceTypes": [ { "name": "xssmatchset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listactivatedrulesinrulegroup": { "name": "ListActivatedRulesInRuleGroup", "description": "Grants permission to retrieve an array of ActivatedRule objects", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listbytematchsets": { "name": "ListByteMatchSets", "description": "Grants permission to retrieve an array of ByteMatchSetSummary objects", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listgeomatchsets": { "name": "ListGeoMatchSets", "description": "Grants permission to retrieve an array of GeoMatchSetSummary objects", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listipsets": { "name": "ListIPSets", "description": "Grants permission to retrieve an array of IPSetSummary objects", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listloggingconfigurations": { "name": "ListLoggingConfigurations", "description": "Grants permission to retrieve an array of LoggingConfiguration objects", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listratebasedrules": { "name": "ListRateBasedRules", "description": "Grants permission to retrieve an array of RuleSummary objects", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listregexmatchsets": { "name": "ListRegexMatchSets", "description": "Grants permission to retrieve an array of RegexMatchSetSummary objects", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listregexpatternsets": { "name": "ListRegexPatternSets", "description": "Grants permission to retrieve an array of RegexPatternSetSummary objects", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listrulegroups": { "name": "ListRuleGroups", "description": "Grants permission to retrieve an array of RuleGroup objects", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listrules": { "name": "ListRules", "description": "Grants permission to retrieve an array of RuleSummary objects", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listsizeconstraintsets": { "name": "ListSizeConstraintSets", "description": "Grants permission to retrieve an array of SizeConstraintSetSummary objects", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listsqlinjectionmatchsets": { "name": "ListSqlInjectionMatchSets", "description": "Grants permission to retrieve an array of SqlInjectionMatchSet objects", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listsubscribedrulegroups": { "name": "ListSubscribedRuleGroups", "description": "Grants permission to retrieve an array of RuleGroup objects that you are subscribed to", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to retrieve the tags for a resource", "accessLevel": "Read", "resourceTypes": [ { "name": "ratebasedrule", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "rule", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "rulegroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "webacl", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listwebacls": { "name": "ListWebACLs", "description": "Grants permission to retrieve an array of WebACLSummary objects", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listxssmatchsets": { "name": "ListXssMatchSets", "description": "Grants permission to retrieve an array of XssMatchSet objects", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "putloggingconfiguration": { "name": "PutLoggingConfiguration", "description": "Grants permission to associate a LoggingConfiguration with a specified web ACL", "accessLevel": "Write", "resourceTypes": [ { "name": "webacl", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "iam:CreateServiceLinkedRole" ] }, "putpermissionpolicy": { "name": "PutPermissionPolicy", "description": "Grants permission to attach an IAM policy to a rule group, to share the rule group between accounts", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "rulegroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to add a Tag to a resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "ratebasedrule", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "rule", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "rulegroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "webacl", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to remove a Tag from a resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "ratebasedrule", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "rule", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "rulegroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "webacl", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] }, "updatebytematchset": { "name": "UpdateByteMatchSet", "description": "Grants permission to insert or delete ByteMatchTuple objects in a ByteMatchSet", "accessLevel": "Write", "resourceTypes": [ { "name": "bytematchset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updategeomatchset": { "name": "UpdateGeoMatchSet", "description": "Grants permission to insert or delete GeoMatchConstraint objects in a GeoMatchSet", "accessLevel": "Write", "resourceTypes": [ { "name": "geomatchset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateipset": { "name": "UpdateIPSet", "description": "Grants permission to insert or delete IPSetDescriptor objects in an IPSet", "accessLevel": "Write", "resourceTypes": [ { "name": "ipset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateratebasedrule": { "name": "UpdateRateBasedRule", "description": "Grants permission to modify a rate based rule", "accessLevel": "Write", "resourceTypes": [ { "name": "ratebasedrule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateregexmatchset": { "name": "UpdateRegexMatchSet", "description": "Grants permission to insert or delete RegexMatchTuple objects in a RegexMatchSet", "accessLevel": "Write", "resourceTypes": [ { "name": "regexmatchset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateregexpatternset": { "name": "UpdateRegexPatternSet", "description": "Grants permission to insert or delete RegexPatternStrings in a RegexPatternSet", "accessLevel": "Write", "resourceTypes": [ { "name": "regexpatternset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updaterule": { "name": "UpdateRule", "description": "Grants permission to modify a Rule", "accessLevel": "Write", "resourceTypes": [ { "name": "rule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updaterulegroup": { "name": "UpdateRuleGroup", "description": "Grants permission to insert or delete ActivatedRule objects in a RuleGroup", "accessLevel": "Write", "resourceTypes": [ { "name": "rulegroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatesizeconstraintset": { "name": "UpdateSizeConstraintSet", "description": "Grants permission to insert or delete SizeConstraint objects in a SizeConstraintSet", "accessLevel": "Write", "resourceTypes": [ { "name": "sizeconstraintset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatesqlinjectionmatchset": { "name": "UpdateSqlInjectionMatchSet", "description": "Grants permission to insert or delete SqlInjectionMatchTuple objects in an SqlInjectionMatchSet", "accessLevel": "Write", "resourceTypes": [ { "name": "sqlinjectionmatchset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatewebacl": { "name": "UpdateWebACL", "description": "Grants permission to insert or delete ActivatedRule objects in a WebACL", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "webacl", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatexssmatchset": { "name": "UpdateXssMatchSet", "description": "Grants permission to insert or delete XssMatchTuple objects in an XssMatchSet", "accessLevel": "Write", "resourceTypes": [ { "name": "xssmatchset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] } }