{
  "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloudshell.html",
  "name": "AWS CloudShell",
  "prefix": "cloudshell",
  "timestamp": "1778371206",
  "actions": [
    {
      "url": "https://docs.aws.amazon.com/cloudshell/latest/userguide/sec-auth-with-identities.html#ApproveCommand",
      "name": "ApproveCommand",
      "description": "Grants permission to approve a command sent by another AWS service",
      "access": "Read",
      "resources": [
        {
          "name": "Environment",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/cloudshell/latest/userguide/sec-auth-with-identities.html#CreateEnvironment",
      "name": "CreateEnvironment",
      "description": "Grants permissions to create a CloudShell environment",
      "access": "Write",
      "resources": [],
      "conditions": [
        "cloudshell:SecurityGroupIds",
        "cloudshell:SubnetIds",
        "cloudshell:VpcIds"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/cloudshell/latest/userguide/sec-auth-with-identities.html#CreateSession",
      "name": "CreateSession",
      "description": "Grants permissions to connect to a CloudShell environment from the AWS Management Console",
      "access": "Write",
      "resources": [
        {
          "name": "Environment",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/cloudshell/latest/userguide/sec-auth-with-identities.html#DeleteEnvironment",
      "name": "DeleteEnvironment",
      "description": "Grants permission to delete a CloudShell environment",
      "access": "Write",
      "resources": [
        {
          "name": "Environment",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/cloudshell/latest/userguide/sec-auth-with-identities.html#DescribeEnvironments",
      "name": "DescribeEnvironments",
      "description": "Grants permission to return descriptions of existing user's environments",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/cloudshell/latest/userguide/sec-auth-with-identities.html#GetEnvironmentStatus",
      "name": "GetEnvironmentStatus",
      "description": "Grants permission to read a CloudShell environment status",
      "access": "Read",
      "resources": [
        {
          "name": "Environment",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/cloudshell/latest/userguide/sec-auth-with-identities.html#GetFileDownloadUrls",
      "name": "GetFileDownloadUrls",
      "description": "Grants permissions to download files from a CloudShell environment",
      "access": "Write",
      "resources": [
        {
          "name": "Environment",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/cloudshell/latest/userguide/sec-auth-with-identities.html#GetFileUploadUrls",
      "name": "GetFileUploadUrls",
      "description": "Grants permissions to upload files to a CloudShell environment",
      "access": "Write",
      "resources": [
        {
          "name": "Environment",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/cloudshell/latest/userguide/sec-auth-with-identities.html#PutCredentials",
      "name": "PutCredentials",
      "description": "Grants permissions to forward console credentials to the environment",
      "access": "Write",
      "resources": [
        {
          "name": "Environment",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/cloudshell/latest/userguide/sec-auth-with-identities.html#StartEnvironment",
      "name": "StartEnvironment",
      "description": "Grants permission to start a stopped CloudShell environment",
      "access": "Write",
      "resources": [
        {
          "name": "Environment",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/cloudshell/latest/userguide/sec-auth-with-identities.html#StopEnvironment",
      "name": "StopEnvironment",
      "description": "Grants permission to stop a running CloudShell environment",
      "access": "Write",
      "resources": [
        {
          "name": "Environment",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    }
  ],
  "resources": [
    {
      "url": "https://docs.aws.amazon.com/cloudshell/latest/userguide/sec-auth-with-identities.html#Environment",
      "name": "Environment",
      "arn": "arn:${Partition}:cloudshell:${Region}:${Account}:environment/${EnvironmentId}",
      "conditions": []
    }
  ],
  "conditions": [
    {
      "url": "https://docs.aws.amazon.com/cloudshell/latest/userguide/aws-cloudshell-vpc-permissions-1.html#vpc-condition-keys-examples-1",
      "name": "cloudshell:SecurityGroupIds",
      "description": "Filters access by security group ids. Available during CreateEnvironment operation",
      "type": "ArrayOfString"
    },
    {
      "url": "https://docs.aws.amazon.com/cloudshell/latest/userguide/aws-cloudshell-vpc-permissions-1.html#vpc-condition-keys-examples-1",
      "name": "cloudshell:SubnetIds",
      "description": "Filters access by subnet ids. Available during CreateEnvironment operation",
      "type": "ArrayOfString"
    },
    {
      "url": "https://docs.aws.amazon.com/cloudshell/latest/userguide/aws-cloudshell-vpc-permissions-1.html#vpc-condition-keys-examples-1",
      "name": "cloudshell:VpcIds",
      "description": "Filters access by vpc ids. Available during CreateEnvironment operation",
      "type": "ArrayOfString"
    }
  ]
}