From 33cccdf51a2343690608335d43a5e3ed8b8ff41d Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Sun, 1 Dec 2024 01:19:01 +0000 Subject: [PATCH] New update to service-auth.json --- package.json | 2 +- service-auth.json | 1221 +++++++++++++++++++++++++++++++++++++++++++-- 2 files changed, 1189 insertions(+), 34 deletions(-) diff --git a/package.json b/package.json index fbb95a5..dd4db7b 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@fluggo/aws-service-auth-reference", - "version": "1.0.165", + "version": "1.0.166", "description": "A JSON reference for AWS service authorization (IAM actions)", "main": "index.js", "types": "index.d.ts", diff --git a/service-auth.json b/service-auth.json index 445afc4..626dae9 100644 --- a/service-auth.json +++ b/service-auth.json @@ -27113,6 +27113,589 @@ } ] }, + { + "name": "AWS Billing And Cost Management Pricing Calculator", + "servicePrefix": "bcm-pricing-calculator", + "authReferenceHref": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbillingandcostmanagementpricingcalculator.html", + "apiReferenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_Operations_AWS_Pricing_Calculator.html", + "actions": [ + { + "name": "CreateBillEstimate", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_CreateBillEstimate.html", + "description": "Grants permission to create a new bill estimate. Charge is incurred for successful bill estimates", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "bill-scenario", + "required": false, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "CreateBillScenario", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_CreateBillScenario.html", + "description": "Grants permission to create a new bill scenario", + "accessLevel": "Write", + "resourceTypes": [], + "conditionKeys": [] + }, + { + "name": "CreateBillScenarioCommitmentModification", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_BatchCreateBillScenarioCommitmentModification.html", + "description": "Grants permission to create new commitments or remove existing commitment from a specified bill scenario", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "bill-scenario", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "CreateBillScenarioUsageModification", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_BatchCreateBillScenarioUsageModification.html", + "description": "Grants permission to create usage in the specified bill scenario", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "bill-scenario", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "CreateWorkloadEstimate", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_CreateWorkloadEstimate.html", + "description": "Grants permission to create a new Workload estimate", + "accessLevel": "Write", + "resourceTypes": [], + "conditionKeys": [] + }, + { + "name": "CreateWorkloadEstimateUsage", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_BatchCreateWorkloadEstimateUsage.html", + "description": "Grants permission to create usage in the specified workload estimate", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "workload-estimate", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "DeleteBillEstimate", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_DeleteBillEstimate.html", + "description": "Grants permission to delete bill estimate", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "bill-estimate", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "DeleteBillScenario", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_DeleteBillScenario.html", + "description": "Grants permission to delete a bill scenario", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "bill-scenario", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "DeleteBillScenarioCommitmentModification", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_BatchDeleteBillScenarioCommitmentModification.html", + "description": "Grants permission to delete newly added commitments from the specified bill scenario", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "bill-scenario", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "DeleteBillScenarioUsageModification", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_BatchDeleteBillScenarioUsageModification.html", + "description": "Grants permission to delete newly added usage from the specified bill scenario", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "bill-scenario", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "DeleteWorkloadEstimate", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_DeleteWorkloadEstimate.html", + "description": "Grants permission to delete the specified workload estimate", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "workload-estimate", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "DeleteWorkloadEstimateUsage", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_BatchDeleteWorkloadEstimateUsage.html", + "description": "Grants permission to delete newly added usage from the specified workload estimate", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "workload-estimate", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "GetBillEstimate", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_GetBillEstimate.html", + "description": "Grants permission to retrieve details of a bill estimate including estimated cost", + "accessLevel": "Read", + "resourceTypes": [ + { + "resourceType": "bill-estimate", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "GetBillScenario", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_GetBillScenario.html", + "description": "Grants permission to retrieve information associated with a bill scenario", + "accessLevel": "Read", + "resourceTypes": [ + { + "resourceType": "bill-scenario", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "GetPreferences", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_GetPreferences.html", + "description": "Grants permission to retrieve applicable rate type preferences for the account", + "accessLevel": "Read", + "resourceTypes": [], + "conditionKeys": [] + }, + { + "name": "GetWorkloadEstimate", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_GetWorkloadEstimate.html", + "description": "Grants permission to retrieve information associated with a workload estimate", + "accessLevel": "Read", + "resourceTypes": [ + { + "resourceType": "workload-estimate", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "ListBillEstimateCommitments", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_ListBillEstimateCommitments.html", + "description": "Grants permission to list commitments associated with the specified bill estimate", + "accessLevel": "List", + "resourceTypes": [ + { + "resourceType": "bill-estimate", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "ListBillEstimateInputCommitmentModifications", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_ListBillEstimateInputCommitmentModifications.html", + "description": "Grants permission to list added or removed commitments for a specified bill estimate", + "accessLevel": "List", + "resourceTypes": [ + { + "resourceType": "bill-estimate", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "ListBillEstimateInputUsageModifications", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_ListBillEstimateInputUsageModifications.html", + "description": "Grants permission to list added or modified usage for a specified bill estimate", + "accessLevel": "List", + "resourceTypes": [ + { + "resourceType": "bill-estimate", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "ListBillEstimateLineItems", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_ListBillEstimateLineItems.html", + "description": "Grants permission to list result line items for a specified bill estimate", + "accessLevel": "List", + "resourceTypes": [ + { + "resourceType": "bill-estimate", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "ListBillEstimates", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_ListBillEstimates.html", + "description": "Grants permission to list bill estimates", + "accessLevel": "List", + "resourceTypes": [], + "conditionKeys": [] + }, + { + "name": "ListBillScenarioCommitmentModifications", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_ListBillScenarioCommitmentModifications.html", + "description": "Grants permission to list commitments included in a bill scenario", + "accessLevel": "List", + "resourceTypes": [ + { + "resourceType": "bill-scenario", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "ListBillScenarioUsageModifications", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_ListBillScenarioUsageModifications.html", + "description": "Grants permission to list usage lines of a specified bill scenario", + "accessLevel": "List", + "resourceTypes": [ + { + "resourceType": "bill-scenario", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "ListBillScenarios", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_ListBillScenarios.html", + "description": "Grants permission to list bill scenarios", + "accessLevel": "List", + "resourceTypes": [], + "conditionKeys": [] + }, + { + "name": "ListTagsForResource", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_ListTagsForResource.html", + "description": "Grants permission to return a list of tags for a resource", + "accessLevel": "Tagging", + "resourceTypes": [], + "conditionKeys": [] + }, + { + "name": "ListWorkloadEstimateUsage", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_ListWorkloadEstimateUsage.html", + "description": "Grants permission to list usage lines for the specified workload estimate", + "accessLevel": "List", + "resourceTypes": [ + { + "resourceType": "workload-estimate", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "ListWorkloadEstimates", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_ListWorkloadEstimates.html", + "description": "Grants permission to list workload estimates", + "accessLevel": "List", + "resourceTypes": [], + "conditionKeys": [] + }, + { + "name": "TagResource", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_TagResource.html", + "description": "Grants permission to add a tag to a resource", + "accessLevel": "Tagging", + "resourceTypes": [], + "conditionKeys": [ + "aws:RequestTag/${TagKey}", + "aws:TagKeys" + ] + }, + { + "name": "UntagResource", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_UntagResource.html", + "description": "Grants permission to remove a tag from a resource", + "accessLevel": "Tagging", + "resourceTypes": [], + "conditionKeys": [ + "aws:TagKeys" + ] + }, + { + "name": "UpdateBillEstimate", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_UpdateBillEstimate.html", + "description": "Grants permission to update bill estimate name and expiration date time", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "bill-estimate", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "UpdateBillScenario", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_UpdateBillScenario.html", + "description": "Grants permission to update name and expiration date time of the specified bill scenario", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "bill-scenario", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "UpdateBillScenarioCommitmentModification", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_BatchUpdateBillScenarioCommitmentModification.html", + "description": "Grants permission to update commitment group of commitments in the specified bill scenario", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "bill-scenario", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "UpdateBillScenarioUsageModification", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_BatchUpdateBillScenarioUsageModification.html", + "description": "Grants permission to update usage amount, usage hour, and usage group in the specified bill scenario", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "bill-scenario", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "UpdatePreferences", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_UpdatePreferences.html", + "description": "Grants permission to update rate type preferences for the account", + "accessLevel": "Write", + "resourceTypes": [], + "conditionKeys": [] + }, + { + "name": "UpdateWorkloadEstimate", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_UpdateWorkloadEstimate.html", + "description": "Grants permission to update name and expiration date time of the specified workload estimate", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "workload-estimate", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "UpdateWorkloadEstimateUsage", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_BatchUpdateWorkloadEstimateUsage.html", + "description": "Grants permission to update usage amount and usage group in the specified workload estimate based on the usage id", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "workload-estimate", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + } + ], + "resourceTypes": [ + { + "name": "bill-estimate", + "referenceHref": "https://docs.aws.amazon.com/cost-management/latest/userguide/bill-estimate.html", + "arnPattern": "arn:${Partition}:bcm-pricing-calculator:${Region}:${Account}:bill-estimate/${BillEstimateId}", + "conditionKeys": [ + "bcm-pricing-calculator:bill-estimateBillEstimateId" + ] + }, + { + "name": "bill-scenario", + "referenceHref": "https://docs.aws.amazon.com/cost-management/latest/userguide/bill-scenario.html", + "arnPattern": "arn:${Partition}:bcm-pricing-calculator:${Region}:${Account}:bill-scenario/${BillScenarioId}", + "conditionKeys": [ + "bcm-pricing-calculator:bill-scenarioBillScenarioId" + ] + }, + { + "name": "workload-estimate", + "referenceHref": "https://docs.aws.amazon.com/cost-management/latest/userguide/workload-estimate.html", + "arnPattern": "arn:${Partition}:bcm-pricing-calculator:${Region}:${Account}:workload-estimate/${WorkloadEstimateId}", + "conditionKeys": [ + "bcm-pricing-calculator:workload-estimateWorkloadEstimateId" + ] + } + ], + "conditionKeys": [ + { + "name": "aws:RequestTag/${TagKey}", + "referenceHref": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag", + "description": "Filters access by the tags that are passed in the request", + "type": "String" + }, + { + "name": "aws:ResourceTag/${TagKey}", + "referenceHref": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag", + "description": "Filters access by the tags associated with the resource", + "type": "String" + }, + { + "name": "aws:TagKeys", + "referenceHref": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys", + "description": "Filters access by the tag keys that are passed in the request", + "type": "ArrayOfString" + }, + { + "name": "bcm-pricing-calculator:bill-estimateBillEstimateId", + "referenceHref": "https://docs.aws.amazon.com/cost-management/latest/userguide/security-iam.htmlbill-estimateBillEstimateId.html", + "description": "bill-estimate resource billEstimateId identifier", + "type": "String" + }, + { + "name": "bcm-pricing-calculator:bill-scenarioBillScenarioId", + "referenceHref": "https://docs.aws.amazon.com/cost-management/latest/userguide/security-iam.htmlbill-scenarioBillScenarioId.html", + "description": "bill-scenario resource billScenarioId identifier", + "type": "String" + }, + { + "name": "bcm-pricing-calculator:workload-estimateWorkloadEstimateId", + "referenceHref": "https://docs.aws.amazon.com/cost-management/latest/userguide/security-iam.htmlworkload-estimateWorkloadEstimateId.html", + "description": "workload-estimate resource workloadEstimateId identifier", + "type": "String" + } + ] + }, { "name": "AWS Billing Conductor", "servicePrefix": "billingconductor", @@ -69953,7 +70536,8 @@ ], "conditionKeys": [ "aws:ResourceTag/${TagKey}", - "connect:InstanceId" + "connect:InstanceId", + "connect:AssignmentType" ] }, { @@ -71743,6 +72327,12 @@ "description": "Filters access by using tag keys in the request", "type": "ArrayOfString" }, + { + "name": "connect:AssignmentType", + "referenceHref": "https://docs.aws.amazon.com/connect/latest/adminguide/security_iam_service-with-iam.html", + "description": "Filters access by restricting access to create contacts based on Assignment Type", + "type": "String" + }, { "name": "connect:AttributeType", "referenceHref": "https://docs.aws.amazon.com/connect/latest/adminguide/security_iam_service-with-iam.html", @@ -72795,6 +73385,31 @@ ], "conditionKeys": [] }, + { + "name": "CreateEventTrigger", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/customerprofiles/latest/APIReference/API_CreateEventTrigger.html", + "description": "Grants permission to create an event trigger in the domain", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "domains", + "required": true, + "conditionKeys": [], + "dependentActions": [] + }, + { + "resourceType": "event-triggers", + "required": true, + "conditionKeys": [ + "aws:RequestTag/${TagKey}", + "aws:TagKeys" + ], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, { "name": "CreateIntegrationWorkflow", "permissionOnly": false, @@ -72977,6 +73592,28 @@ ], "conditionKeys": [] }, + { + "name": "DeleteEventTrigger", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/customerprofiles/latest/APIReference/API_DeleteEventTrigger.html", + "description": "Grants permission to delete an event trigger in the domain", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "domains", + "required": true, + "conditionKeys": [], + "dependentActions": [] + }, + { + "resourceType": "event-triggers", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, { "name": "DeleteIntegration", "permissionOnly": false, @@ -73229,6 +73866,28 @@ ], "conditionKeys": [] }, + { + "name": "GetEventTrigger", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/customerprofiles/latest/APIReference/API_GetEventTrigger.html", + "description": "Grants permission to get an event trigger in the domain", + "accessLevel": "Read", + "resourceTypes": [ + { + "resourceType": "domains", + "required": true, + "conditionKeys": [], + "dependentActions": [] + }, + { + "resourceType": "event-triggers", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, { "name": "GetIdentityResolutionJob", "permissionOnly": false, @@ -73526,6 +74185,22 @@ ], "conditionKeys": [] }, + { + "name": "ListEventTriggers", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/customerprofiles/latest/APIReference/API_ListEventTriggers.html", + "description": "Grants permission to list all the event triggers in the domain", + "accessLevel": "List", + "resourceTypes": [ + { + "resourceType": "domains", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, { "name": "ListIdentityResolutionJobs", "permissionOnly": false, @@ -73960,6 +74635,28 @@ ], "conditionKeys": [] }, + { + "name": "UpdateEventTrigger", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/customerprofiles/latest/APIReference/API_UpdateEventTrigger.html", + "description": "Grants permission to update an event trigger in the domain", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "domains", + "required": true, + "conditionKeys": [], + "dependentActions": [] + }, + { + "resourceType": "event-triggers", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, { "name": "UpdateProfile", "permissionOnly": false, @@ -74025,6 +74722,14 @@ "conditionKeys": [ "aws:ResourceTag/${TagKey}" ] + }, + { + "name": "event-triggers", + "referenceHref": "https://docs.aws.amazon.com/customerprofiles/latest/APIReference/", + "arnPattern": "arn:${Partition}:profile:${Region}:${Account}:domains/${DomainName}/event-triggers/${EventTriggerName}", + "conditionKeys": [ + "aws:ResourceTag/${TagKey}" + ] } ], "conditionKeys": [ @@ -179687,7 +180392,7 @@ { "name": "StartCommandExecution", "permissionOnly": false, - "referenceHref": "https://docs.aws.amazon.com/iot/latest/apireference/API_StartCommandExecution.html", + "referenceHref": "https://docs.aws.amazon.com/iot/latest/apireference/API_iot-jobs-data_StartCommandExecution.html", "description": "Grants permission to start a new command execution", "accessLevel": "Write", "resourceTypes": [ @@ -224965,6 +225670,30 @@ "aws:TagKeys" ] }, + { + "name": "CreateDirectConnectGatewayAttachment", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/networkmanager/latest/APIReference/API_CreateDirectConnectGatewayAttachment.html", + "description": "Grants permission to create a Direct Connect gateway attachment", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "core-network", + "required": true, + "conditionKeys": [], + "dependentActions": [ + "ec2:DescribeRegions", + "networkmanager:TagResource" + ] + } + ], + "conditionKeys": [ + "aws:RequestTag/${TagKey}", + "aws:TagKeys", + "networkmanager:directConnectGatewayArn", + "networkmanager:edgeLocations" + ] + }, { "name": "CreateGlobalNetwork", "permissionOnly": false, @@ -225630,6 +226359,22 @@ ], "conditionKeys": [] }, + { + "name": "GetDirectConnectGatewayAttachment", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/networkmanager/latest/APIReference/API_GetDirectConnectGatewayAttachment.html", + "description": "Grants permission to retrieve a Direct Connect gateway attachment", + "accessLevel": "Read", + "resourceTypes": [ + { + "resourceType": "attachment", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, { "name": "GetLinkAssociations", "permissionOnly": false, @@ -226356,6 +227101,28 @@ ], "conditionKeys": [] }, + { + "name": "UpdateDirectConnectGatewayAttachment", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/networkmanager/latest/APIReference/API_UpdateDirectConnectGatewayAttachment.html", + "description": "Grants permission to update a Direct Connect gateway attachment", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "attachment", + "required": true, + "conditionKeys": [], + "dependentActions": [ + "ec2:DescribeRegions" + ] + } + ], + "conditionKeys": [ + "aws:RequestTag/${TagKey}", + "aws:TagKeys", + "networkmanager:edgeLocations" + ] + }, { "name": "UpdateGlobalNetwork", "permissionOnly": false, @@ -226554,6 +227321,18 @@ "description": "Filters access by which customer gateways can be associated or disassociated", "type": "ARN" }, + { + "name": "networkmanager:directConnectGatewayArn", + "referenceHref": "https://docs.aws.amazon.com/vpc/latest/tgw/nm-security-iam.html", + "description": "Filters access by which Direct Connect gateway can be used to a create/update attachment", + "type": "ARN" + }, + { + "name": "networkmanager:edgeLocations", + "referenceHref": "https://docs.aws.amazon.com/vpc/latest/tgw/nm-security-iam.html", + "description": "Filters access by which edge locations can be added or removed from a Direct Connect gateway attachment", + "type": "ArrayOfString" + }, { "name": "networkmanager:subnetArns", "referenceHref": "https://docs.aws.amazon.com/vpc/latest/tgw/nm-security-iam.html", @@ -228679,7 +229458,10 @@ "dependentActions": [] } ], - "conditionKeys": [] + "conditionKeys": [ + "aoss:collection", + "aoss:CollectionId" + ] }, { "name": "BatchGetCollection", @@ -228796,7 +229578,10 @@ "dependentActions": [] } ], - "conditionKeys": [] + "conditionKeys": [ + "aoss:collection", + "aoss:CollectionId" + ] }, { "name": "DeleteAccessPolicy", @@ -244280,6 +245065,15 @@ "resourceTypes": [], "conditionKeys": [] }, + { + "name": "ListDashboardMetrics", + "permissionOnly": true, + "referenceHref": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html", + "description": "Grants permission to read metrics to populate Amazon Q dashboard", + "accessLevel": "List", + "resourceTypes": [], + "conditionKeys": [] + }, { "name": "ListPluginProviders", "permissionOnly": true, @@ -249778,13 +250572,39 @@ "aws:TagKeys" ] }, + { + "name": "CreateBrand", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateBrand.html", + "description": "Grants permission to create an Amazon QuickSight brand", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "brand", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [ + "aws:RequestTag/${TagKey}", + "aws:TagKeys" + ] + }, { "name": "CreateCustomPermissions", - "permissionOnly": true, - "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html", - "description": "Grants permission to create a custom permissions resource for restricting user access", - "accessLevel": "Permissions management", - "resourceTypes": [], + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateCustomPermissions.html", + "description": "Grants permission to create a QuickSight custom permissions resource", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "custompermissions", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" @@ -250040,7 +250860,10 @@ "description": "Grants permission to add a group member to a role", "accessLevel": "Write", "resourceTypes": [], - "conditionKeys": [] + "conditionKeys": [ + "quicksight:Group", + "identitystore:GroupId" + ] }, { "name": "CreateTemplate", @@ -250231,12 +251054,37 @@ ], "conditionKeys": [] }, + { + "name": "DeleteBrand", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteBrand.html", + "description": "Grants permission to delete an Amazon QuickSight brand", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "brand", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "DeleteBrandAssignment", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteBrandAssignment.html", + "description": "Grants permission to delete a brand assignment", + "accessLevel": "Write", + "resourceTypes": [], + "conditionKeys": [] + }, { "name": "DeleteCustomPermissions", - "permissionOnly": true, - "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html", - "description": "Grants permission to delete a custom permissions resource", - "accessLevel": "Permissions management", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteCustomPermissions.html", + "description": "Grants permission to delete a QuickSight custom permissions resource", + "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [] }, @@ -250485,7 +251333,10 @@ "description": "Grants permission to remove a group member from a role", "accessLevel": "Write", "resourceTypes": [], - "conditionKeys": [] + "conditionKeys": [ + "quicksight:Group", + "identitystore:GroupId" + ] }, { "name": "DeleteTemplate", @@ -250618,6 +251469,22 @@ ], "conditionKeys": [] }, + { + "name": "DeleteUserCustomPermission", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteUserCustomPermission.html", + "description": "Grants permission to remove the custom permission associated with a user", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "user", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, { "name": "DeleteVPCConnection", "permissionOnly": false, @@ -250742,13 +251609,61 @@ ], "conditionKeys": [] }, + { + "name": "DescribeBrand", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeBrand.html", + "description": "Grants permission to describe a brand", + "accessLevel": "Read", + "resourceTypes": [ + { + "resourceType": "brand", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "DescribeBrandAssignment", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeBrandAssignment.html", + "description": "Grants permission to describe a brand assignment", + "accessLevel": "Read", + "resourceTypes": [], + "conditionKeys": [] + }, + { + "name": "DescribeBrandPublishedVersion", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeBrandPublishedVersion.html", + "description": "Grants permission to describes the published version of the brand", + "accessLevel": "Read", + "resourceTypes": [ + { + "resourceType": "brand", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, { "name": "DescribeCustomPermissions", - "permissionOnly": true, - "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeCustomPermissions.html", "description": "Grants permission to describe a custom permissions resource in a QuickSight account", - "accessLevel": "Write", - "resourceTypes": [], + "accessLevel": "Read", + "resourceTypes": [ + { + "resourceType": "custompermissions", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], "conditionKeys": [] }, { @@ -250815,6 +251730,15 @@ ], "conditionKeys": [] }, + { + "name": "DescribeDashboardsQAConfiguration", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeDashboardsQAConfiguration.html", + "description": "Grants permission to describe dashboards qa configuration", + "accessLevel": "Read", + "resourceTypes": [], + "conditionKeys": [] + }, { "name": "DescribeDataSet", "permissionOnly": false, @@ -251475,12 +252399,21 @@ ], "conditionKeys": [] }, + { + "name": "ListBrands", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListBrands.html", + "description": "Grants permission to lists all brands in an Amazon QuickSight account", + "accessLevel": "List", + "resourceTypes": [], + "conditionKeys": [] + }, { "name": "ListCustomPermissions", - "permissionOnly": true, - "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListCustomPermissions.html", "description": "Grants permission to list custom permissions resources in QuickSight account", - "accessLevel": "Write", + "accessLevel": "List", "resourceTypes": [], "conditionKeys": [] }, @@ -252182,6 +253115,22 @@ ], "conditionKeys": [] }, + { + "name": "SearchTopics", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_SearchTopics.html", + "description": "Grants permission to search for a sub-set of topics", + "accessLevel": "List", + "resourceTypes": [ + { + "resourceType": "topic", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, { "name": "SearchUsers", "permissionOnly": true, @@ -252289,12 +253238,24 @@ "conditionKeys": [], "dependentActions": [] }, + { + "resourceType": "brand", + "required": false, + "conditionKeys": [], + "dependentActions": [] + }, { "resourceType": "customization", "required": false, "conditionKeys": [], "dependentActions": [] }, + { + "resourceType": "custompermissions", + "required": false, + "conditionKeys": [], + "dependentActions": [] + }, { "resourceType": "dashboard", "required": false, @@ -252377,12 +253338,24 @@ "conditionKeys": [], "dependentActions": [] }, + { + "resourceType": "brand", + "required": false, + "conditionKeys": [], + "dependentActions": [] + }, { "resourceType": "customization", "required": false, "conditionKeys": [], "dependentActions": [] }, + { + "resourceType": "custompermissions", + "required": false, + "conditionKeys": [], + "dependentActions": [] + }, { "resourceType": "dashboard", "required": false, @@ -252500,14 +253473,62 @@ "conditionKeys": [] }, { - "name": "UpdateCustomPermissions", - "permissionOnly": true, - "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html", - "description": "Grants permission to update a custom permissions resource", - "accessLevel": "Permissions management", + "name": "UpdateBrand", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_UpdateBrand.html", + "description": "Grants permission to update a brand", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "brand", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "UpdateBrandAssignment", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_UpdateBrandAssignment.html", + "description": "Grants permission to update a brand assignment", + "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [] }, + { + "name": "UpdateBrandPublishedVersion", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_UpdateBrandPublishedVersion.html", + "description": "Grants permission to update the published version of a brand", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "brand", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, + { + "name": "UpdateCustomPermissions", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_UpdateCustomPermissions.html", + "description": "Grants permission to update a QuickSight custom permissions resource", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "custompermissions", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, { "name": "UpdateDashboard", "permissionOnly": false, @@ -252572,6 +253593,15 @@ ], "conditionKeys": [] }, + { + "name": "UpdateDashboardsQAConfiguration", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_UpdateDashboardsQAConfiguration.html", + "description": "Grants permission to update dashboards qa configuration", + "accessLevel": "Write", + "resourceTypes": [], + "conditionKeys": [] + }, { "name": "UpdateDataSet", "permissionOnly": false, @@ -253000,6 +254030,22 @@ ], "conditionKeys": [] }, + { + "name": "UpdateUserCustomPermission", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_UpdateUserCustomPermission.html", + "description": "Grants permission to update the custom permission associated with a user", + "accessLevel": "Write", + "resourceTypes": [ + { + "resourceType": "user", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, { "name": "UpdateVPCConnection", "permissionOnly": false, @@ -253172,6 +254218,22 @@ "conditionKeys": [ "aws:ResourceTag/${TagKey}" ] + }, + { + "name": "brand", + "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_BrandDetail.html", + "arnPattern": "arn:${Partition}:quicksight:${Region}:${Account}:brand/${ResourceId}", + "conditionKeys": [ + "aws:ResourceTag/${TagKey}" + ] + }, + { + "name": "custompermissions", + "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CustomPermissions.html", + "arnPattern": "arn:${Partition}:quicksight:${Region}:${Account}:custompermissions/${ResourceId}", + "conditionKeys": [ + "aws:ResourceTag/${TagKey}" + ] } ], "conditionKeys": [ @@ -253193,6 +254255,12 @@ "description": "Filters access by tag keys", "type": "ArrayOfString" }, + { + "name": "identitystore:GroupId", + "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html", + "description": "Filters access by IdentityStore group ARN", + "type": "ARN" + }, { "name": "quicksight:AllowedEmbeddingDomains", "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/user/embedded-dashboards-for-authenticated-users-step-1.html", @@ -253211,6 +254279,12 @@ "description": "Filters access by the edition of QuickSight", "type": "String" }, + { + "name": "quicksight:Group", + "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html", + "description": "Filters access by QuickSight group ARN", + "type": "ARN" + }, { "name": "quicksight:IamArn", "referenceHref": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html", @@ -260551,7 +261625,8 @@ } ], "conditionKeys": [ - "redshift-data:session-owner-iam-userid" + "redshift-data:session-owner-iam-userid", + "redshift-data:glue-catalog-arn" ] }, { @@ -260619,9 +261694,26 @@ } ], "conditionKeys": [ - "redshift-data:session-owner-iam-userid" + "redshift-data:session-owner-iam-userid", + "redshift-data:glue-catalog-arn" ] }, + { + "name": "GetStagingBucketLocation", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/redshift-data/latest/APIReference/API_GetStagingBucketLocation.html", + "description": "Grants permission to get staging bucket location for a given managed workgroup", + "accessLevel": "Read", + "resourceTypes": [ + { + "resourceType": "managed-workgroup", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, { "name": "GetStatementResult", "permissionOnly": false, @@ -260727,6 +261819,12 @@ "conditionKeys": [ "aws:ResourceTag/${TagKey}" ] + }, + { + "name": "managed-workgroup", + "referenceHref": "https://docs.aws.amazon.com/redshift/latest/mgmt/working-with-serverless.html", + "arnPattern": "arn:${Partition}:redshift-serverless:${Region}:${Account}:managed-workgroup/${ManagedWorkgroupId}", + "conditionKeys": [] } ], "conditionKeys": [ @@ -260736,6 +261834,12 @@ "description": "Filters access by tag-value associated with the resource", "type": "String" }, + { + "name": "redshift-data:glue-catalog-arn", + "referenceHref": "https://docs.aws.amazon.com/redshift/latest/mgmt/redshift-iam-access-control-overview.html#redshift-policy-resources.conditions", + "description": "Filters access by glue catalog arn", + "type": "ARN" + }, { "name": "redshift-data:session-owner-iam-userid", "referenceHref": "https://docs.aws.amazon.com/redshift/latest/mgmt/redshift-iam-access-control-overview.html#redshift-policy-resources.conditions", @@ -261104,6 +262208,22 @@ ], "conditionKeys": [] }, + { + "name": "GetManagedWorkgroup", + "permissionOnly": false, + "referenceHref": "https://docs.aws.amazon.com/redshift-serverless/latest/APIReference/API_GetManagedWorkgroup.html", + "description": "Grants permission to create a Amazon Redshift Managed Serverless workgroup with the specified configuration settings", + "accessLevel": "Read", + "resourceTypes": [ + { + "resourceType": "managed-workgroup", + "required": true, + "conditionKeys": [], + "dependentActions": [] + } + ], + "conditionKeys": [] + }, { "name": "GetNamespace", "permissionOnly": false, @@ -261666,6 +262786,12 @@ "aws:ResourceTag/${TagKey}" ] }, + { + "name": "managed-workgroup", + "referenceHref": "https://docs.aws.amazon.com/redshift/latest/mgmt/serverless-managed-workgroup-namespace.html", + "arnPattern": "arn:${Partition}:redshift-serverless:${Region}:${Account}:managed-workgroup/${ManagedWorkgroupName}", + "conditionKeys": [] + }, { "name": "recoveryPoint", "referenceHref": "https://docs.aws.amazon.com/redshift/latest/mgmt/serverless-snapshots-recovery.html", @@ -261706,6 +262832,12 @@ "description": "Filters access by the endpoint access identifier", "type": "String" }, + { + "name": "redshift-serverless:managedWorkgroupName", + "referenceHref": "https://docs.aws.amazon.com/redshift/latest/mgmt/redshift-policy-resources.resource-permissions.html", + "description": "Filters access by the managed workgroup identifier", + "type": "String" + }, { "name": "redshift-serverless:namespaceId", "referenceHref": "https://docs.aws.amazon.com/redshift/latest/mgmt/redshift-policy-resources.resource-permissions.html", @@ -273067,7 +274199,9 @@ "s3:signatureAge", "s3:signatureversion", "s3:TlsVersion", - "s3:x-amz-content-sha256" + "s3:x-amz-content-sha256", + "s3:if-match", + "s3:if-none-match" ] }, { @@ -273916,8 +275050,8 @@ "required": true, "conditionKeys": [], "dependentActions": [ - "S3:GetReplicationConfiguration", - "S3:PutReplicationConfiguration" + "s3:GetReplicationConfiguration", + "s3:PutReplicationConfiguration" ] } ], @@ -274596,7 +275730,10 @@ "s3:object-lock-mode", "s3:object-lock-retain-until-date", "s3:object-lock-remaining-retention-days", - "s3:object-lock-legal-hold" + "s3:object-lock-legal-hold", + "s3:if-match", + "s3:if-none-match", + "s3:ObjectCreationOperation" ] }, { @@ -275333,6 +276470,12 @@ "description": "Filters access by a specific job suspended cause (for example, AWAITING_CONFIRMATION) to cancelling suspended jobs", "type": "String" }, + { + "name": "s3:ObjectCreationOperation", + "referenceHref": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/conditional-writes-enforce.html", + "description": "Filters access by whether or not the operation creates an object", + "type": "Bool" + }, { "name": "s3:RequestJobOperation", "referenceHref": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/batch-ops-job-tags-examples.html", @@ -275387,6 +276530,18 @@ "description": "Filters access by a specific replication destination region for targeted buckets of the AWS FIS action aws:s3:bucket-pause-replication", "type": "String" }, + { + "name": "s3:if-match", + "referenceHref": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/conditional-writes-enforce.html", + "description": "Filters access by the request's 'If-Match' conditional header", + "type": "String" + }, + { + "name": "s3:if-none-match", + "referenceHref": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/conditional-writes-enforce.html", + "description": "Filters access by the request's 'If-None-Match' conditional header", + "type": "String" + }, { "name": "s3:isReplicationPauseRequest", "referenceHref": "https://docs.aws.amazon.com/fis/latest/userguide/security_iam_id-based-policy-examples.html#security-iam-policy-examples-s3",