2021-08-25
          
        13 new actions, 2 new resources | 5 updated actions
  
    
        
          
            Additions
          
              
                Actions
                
                    - 
                        CreateFramework
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to create a new framework
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: framework
       
        Required: Yes
       
- 
                                Conditions: 
                                
    aws:RequestTag/${TagKey} aws:TagKeys 
 
- 
                        CreateReportPlan
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to create a new report plan
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: reportPlan
       
        Required: Yes
       
- 
                                Conditions: 
                                
    aws:RequestTag/${TagKey} aws:TagKeys 
 
- 
                        DeleteFramework
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to delete a framework
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: framework
       
        Required: Yes
       
 
- 
                        DeleteReportPlan
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to delete a report plan
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: reportPlan
       
        Required: Yes
       
 
- 
                        DescribeFramework
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to describe a framework with the specified name
                                
                              
- 
                                Access: 
                                
                                    Read
                                
                              
- 
                                Resources: 
                                
      
        Name: framework
       
        Required: Yes
       
 
- 
                        DescribeReportJob
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to describe a report job
                                
                              
- 
                                Access: 
                                
                                    Read
                                
                              
 
- 
                        DescribeReportPlan
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to describe a report plan with the specified name
                                
                              
- 
                                Access: 
                                
                                    Read
                                
                              
- 
                                Resources: 
                                
      
        Name: reportPlan
       
        Required: Yes
       
 
- 
                        ListFrameworks
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to list frameworks
                                
                              
- 
                                Access: 
                                
                                    List
                                
                              
 
- 
                        ListReportJobs
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to list report jobs
                                
                              
- 
                                Access: 
                                
                                    List
                                
                              
 
- 
                        ListReportPlans
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to list report plans
                                
                              
- 
                                Access: 
                                
                                    List
                                
                              
 
- 
                        StartReportJob
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to start a new report job
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: reportPlan
       
        Required: Yes
       
 
- 
                        UpdateFramework
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to update a framework
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: framework
       
        Required: Yes
       
 
- 
                        UpdateReportPlan
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to update a report plan
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: reportPlan
       
        Required: Yes
       
 
                Resources
                
                    - 
                        framework
                        
 
                              - 
                                Arn: 
                                
                                    arn:${Partition}:backup:${Region}:${Account}:framework:${FrameworkName}-${FrameworkId}
                                
                              
- 
                                Conditions: 
                                
    aws:ResourceTag/${TagKey} 
 
- 
                        reportPlan
                        
 
                              - 
                                Arn: 
                                
                                    arn:${Partition}:backup:${Region}:${Account}:report-plan:${ReportPlanName}-${ReportPlanId}
                                
                              
- 
                                Conditions: 
                                
    aws:ResourceTag/${TagKey}