@cloud-copilot/iam-data

{ "createroutingrule": { "name": "CreateRoutingRule", "description": "Grants permission to create a routing rule", "accessLevel": "Write", "resourceTypes": [ { "name": "RoutingRule", "required": true, "conditionKeys": [ "apigateway:Request/Priority", "apigateway:Request/ConditionBasePaths" ], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "apigateway:Request/Priority", "apigateway:Request/ConditionBasePaths" ], "dependentActions": [] }, "delete": { "name": "DELETE", "description": "Grants permission to delete a particular resource", "accessLevel": "Write", "resourceTypes": [ { "name": "ApiKey", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Authorizer", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "BasePathMapping", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ClientCertificate", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Deployment", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DocumentationPart", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DocumentationVersion", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DomainName", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DomainNameAccessAssociation", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "GatewayResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Integration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "IntegrationResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Method", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "MethodResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Model", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "PrivateBasePathMapping", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "PrivateDomainName", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "RequestValidator", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Resource", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "RestApi", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Stage", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Tags", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Template", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "UsagePlan", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "UsagePlanKey", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "VpcLink", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "deleteroutingrule": { "name": "DeleteRoutingRule", "description": "Grants permission to delete a routing rule", "accessLevel": "Write", "resourceTypes": [ { "name": "RoutingRule", "required": true, "conditionKeys": [ "apigateway:Resource/Priority", "apigateway:Resource/ConditionBasePaths" ], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "apigateway:Resource/Priority", "apigateway:Resource/ConditionBasePaths" ], "dependentActions": [] }, "get": { "name": "GET", "description": "Grants permission to read a particular resource", "accessLevel": "Read", "resourceTypes": [ { "name": "Account", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ApiKey", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ApiKeys", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Authorizer", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Authorizers", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "BasePathMapping", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "BasePathMappings", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ClientCertificate", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ClientCertificates", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Deployment", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Deployments", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DocumentationPart", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DocumentationParts", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DocumentationVersion", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DocumentationVersions", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DomainName", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DomainNameAccessAssociations", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DomainNames", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "GatewayResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "GatewayResponses", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Integration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "IntegrationResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Method", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "MethodResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Model", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Models", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "PrivateBasePathMapping", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "PrivateBasePathMappings", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "PrivateDomainName", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "RequestValidator", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "RequestValidators", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Resource", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Resources", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "RestApi", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "RestApis", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Sdk", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Stage", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Stages", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Tags", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "UsagePlan", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "UsagePlanKey", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "UsagePlanKeys", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "UsagePlans", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "VpcLink", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "VpcLinks", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getroutingrule": { "name": "GetRoutingRule", "description": "Grants permission to read a routing rule", "accessLevel": "Read", "resourceTypes": [ { "name": "RoutingRule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "listroutingrules": { "name": "ListRoutingRules", "description": "Grants permission to list routing rules under a domain name", "accessLevel": "List", "resourceTypes": [ { "name": "RoutingRule", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}" ], "dependentActions": [] }, "patch": { "name": "PATCH", "description": "Grants permission to update a particular resource", "accessLevel": "Write", "resourceTypes": [ { "name": "Account", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ApiKey", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Authorizer", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "BasePathMapping", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ClientCertificate", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Deployment", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DocumentationPart", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DocumentationVersion", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DomainName", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "GatewayResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Integration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "IntegrationResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Method", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "MethodResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Model", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "PrivateBasePathMapping", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "PrivateDomainName", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "RequestValidator", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Resource", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "RestApi", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Stage", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Template", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "UsagePlan", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "UsagePlanKey", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "VpcLink", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "post": { "name": "POST", "description": "Grants permission to create a particular resource", "accessLevel": "Write", "resourceTypes": [ { "name": "ApiKeys", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Authorizers", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "BasePathMappings", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "ClientCertificates", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Deployments", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DocumentationParts", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DocumentationVersions", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DomainNameAccessAssociations", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DomainNames", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "GatewayResponses", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "IntegrationResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "MethodResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Models", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "PrivateBasePathMappings", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "RequestValidators", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Resources", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "RestApis", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Stages", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "UsagePlanKeys", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "UsagePlans", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "VpcLinks", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "put": { "name": "PUT", "description": "Grants permission to update a particular resource", "accessLevel": "Write", "resourceTypes": [ { "name": "DocumentationPart", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "GatewayResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "IntegrationResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "MethodResponse", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "RestApi", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Tags", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "updateroutingrule": { "name": "UpdateRoutingRule", "description": "Grants permission to update a routing rule using the PutRoutingRule API", "accessLevel": "Write", "resourceTypes": [ { "name": "RoutingRule", "required": true, "conditionKeys": [ "apigateway:Request/Priority", "apigateway:Request/ConditionBasePaths", "apigateway:Resource/Priority", "apigateway:Resource/ConditionBasePaths" ], "dependentActions": [] } ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", "apigateway:Request/Priority", "apigateway:Request/ConditionBasePaths", "apigateway:Resource/Priority", "apigateway:Resource/ConditionBasePaths" ], "dependentActions": [] }, "addcertificatetodomain": { "name": "AddCertificateToDomain", "description": "Grants permission to add certificates for mutual TLS authentication to a domain name. This is an additional authorization control for managing the DomainName resource due to the sensitive nature of mTLS", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "DomainName", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DomainNames", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createaccessassociation": { "name": "CreateAccessAssociation", "description": "Grants permission to create an access association from an access association source to a custom domain name for private APIs", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "PrivateDomainName", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "rejectaccessassociation": { "name": "RejectAccessAssociation", "description": "Grants permission to reject an existing access association owned by another account to a custom domain name for private APIs", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "PrivateDomainName", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "removecertificatefromdomain": { "name": "RemoveCertificateFromDomain", "description": "Grants permission to remove certificates for mutual TLS authentication from a domain name. This is an additional authorization control for managing the DomainName resource due to the sensitive nature of mTLS", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "DomainName", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "DomainNames", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "setwebacl": { "name": "SetWebACL", "description": "Grants permission to set a WAF access control list (ACL). This is an additional authorization control for managing the Stage resource due to the sensitive nature of WebAcl's", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "Stage", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "Stages", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatedomainnamemanagementpolicy": { "name": "UpdateDomainNameManagementPolicy", "description": "Grants permission to update the management policy of a custom domain name for private APIs", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "PrivateDomainName", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatedomainnamepolicy": { "name": "UpdateDomainNamePolicy", "description": "Grants permission to update the invoke policy of a custom domain name for private APIs", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "DomainNames", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "PrivateDomainName", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updaterestapipolicy": { "name": "UpdateRestApiPolicy", "description": "Grants permission to manage the IAM resource policy for an API. This is an additional authorization control for managing an API due to the sensitive nature of the resource policy", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "RestApi", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "RestApis", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] } }