2023-05-24
          
        12 new actions, 2 new resources | 3 updated actions
  
    
        
          
            Additions
          
              
                Actions
                
                    - 
                        AddStorageSystem
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to create a storage system
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: agent
       
        Required: Yes
       
- 
                                Conditions: 
                                
    aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys 
 
- 
                        DescribeDiscoveryJob
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to describe metadata about a discovery job
                                
                              
- 
                                Access: 
                                
                                    Read
                                
                              
- 
                                Resources: 
                                
      
        Name: discoveryjob
       
        Required: Yes
       
 
- 
                        DescribeStorageSystem
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to view metadata about a storage system
                                
                              
- 
                                Access: 
                                
                                    Read
                                
                              
- 
                                Resources: 
                                
      
        Name: storagesystem
       
        Required: Yes
       
 
- 
                        DescribeStorageSystemResourceMetrics
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to describe resource metrics collected by a discovery job
                                
                              
- 
                                Access: 
                                
                                    List
                                
                              
- 
                                Resources: 
                                
      
        Name: discoveryjob
       
        Required: Yes
       
 
- 
                        DescribeStorageSystemResources
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to describe resources identified by a discovery job
                                
                              
- 
                                Access: 
                                
                                    List
                                
                              
- 
                                Resources: 
                                
      
        Name: discoveryjob
       
        Required: Yes
       
 
- 
                        GenerateRecommendations
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to generate recommendations for a resource identified by a discovery job
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: discoveryjob
       
        Required: Yes
       
 
- 
                        ListDiscoveryJobs
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to list discovery jobs
                                
                              
- 
                                Access: 
                                
                                    List
                                
                              
 
- 
                        ListStorageSystems
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to list storage systems
                                
                              
- 
                                Access: 
                                
                                    List
                                
                              
 
- 
                        RemoveStorageSystem
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to delete a storage system
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: storagesystem
       
        Required: Yes
       
 
- 
                        StartDiscoveryJob
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to start a discovery job for a storage system
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: storagesystem
       
        Required: Yes
       
 
- 
                        StopDiscoveryJob
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to stop a discovery job
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: discoveryjob
       
        Required: Yes
       
 
- 
                        UpdateStorageSystem
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to update a storage system
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: storagesystem
       
        Required: Yes
       
 
                Resources
                
                    - 
                        storagesystem
                        
 
                              - 
                                Arn: 
                                
                                    arn:${Partition}:datasync:${Region}:${AccountId}:system/${StorageSystemId}
                                
                              
- 
                                Conditions: 
                                
    aws:ResourceTag/${TagKey} 
 
- 
                        discoveryjob
                        
 
                              - 
                                Arn: 
                                
                                    arn:${Partition}:datasync:${Region}:${AccountId}:system/${StorageSystemId}/job/${DiscoveryJobId}
                                
                              
- 
                                Conditions: 
                                
    aws:ResourceTag/${TagKey}