ds.yml

Actions:
  - Name: ds:AcceptSharedDirectory
  - Name: ds:AddIpRoutes
  - Name: ds:AddRegion
  - Name: ds:AddTagsToResource
  - Name: ds:CancelSchemaExtension
  - Name: ds:ConnectDirectory
  - Name: ds:CreateAlias
  - Name: ds:CreateComputer
  - Name: ds:CreateConditionalForwarder
  - Name: ds:CreateDirectory
  - Name: ds:CreateLogSubscription
  - Name: ds:CreateMicrosoftAD
  - Name: ds:CreateSnapshot
  - Name: ds:CreateTrust
  - Name: ds:DeleteConditionalForwarder
  - Name: ds:DeleteDirectory
  - Name: ds:DeleteLogSubscription
  - Name: ds:DeleteSnapshot
  - Name: ds:DeleteTrust
  - Name: ds:DeregisterCertificate
  - Name: ds:DeregisterEventTopic
  - Name: ds:DescribeCertificate
  - Name: ds:DescribeClientAuthenticationSettings
  - Name: ds:DescribeConditionalForwarders
  - Name: ds:DescribeDirectories
  - Name: ds:DescribeDomainControllers
  - Name: ds:DescribeEventTopics
  - Name: ds:DescribeLDAPSSettings
  - Name: ds:DescribeRegions
  - Name: ds:DescribeSettings
  - Name: ds:DescribeSharedDirectories
  - Name: ds:DescribeSnapshots
  - Name: ds:DescribeTrusts
  - Name: ds:DescribeUpdateDirectory
  - Name: ds:DisableClientAuthentication
  - Name: ds:DisableLDAPS
  - Name: ds:DisableRadius
  - Name: ds:DisableSso
  - Name: ds:EnableClientAuthentication
  - Name: ds:EnableLDAPS
  - Name: ds:EnableRadius
  - Name: ds:EnableSso
  - Name: ds:GetDirectoryLimits
  - Name: ds:GetSnapshotLimits
  - Name: ds:ListCertificates
  - Name: ds:ListIpRoutes
  - Name: ds:ListLogSubscriptions
  - Name: ds:ListSchemaExtensions
  - Name: ds:ListTagsForResource
  - Name: ds:RegisterCertificate
  - Name: ds:RegisterEventTopic
  - Name: ds:RejectSharedDirectory
  - Name: ds:RemoveIpRoutes
  - Name: ds:RemoveRegion
  - Name: ds:RemoveTagsFromResource
  - Name: ds:ResetUserPassword
  - Name: ds:RestoreFromSnapshot
  - Name: ds:ShareDirectory
  - Name: ds:StartSchemaExtension
  - Name: ds:UnshareDirectory
  - Name: ds:UpdateConditionalForwarder
  - Name: ds:UpdateDirectorySetup
  - Name: ds:UpdateNumberOfDomainControllers
  - Name: ds:UpdateRadius
  - Name: ds:UpdateSettings
  - Name: ds:UpdateTrust
  - Name: ds:VerifyTrust

  # actions with no corresponding API
  - Name: ds:AccessDSData
  - Name: ds:AuthorizeApplication
  - Name: ds:CheckAlias
  - Name: ds:CreateIdentityPoolDirectory
  - Name: ds:DescribeDirectoryDataAccess
  - Name: ds:DisableDirectoryDataAccess
  - Name: ds:DisableRoleAccess
  - Name: ds:EnableDirectoryDataAccess
  - Name: ds:EnableRoleAccess
  - Name: ds:GetAuthorizedApplicationDetails
  - Name: ds:ListAuthorizedApplications
  - Name: ds:UnauthorizeApplication
  - Name: ds:UpdateAuthorizedApplication
  - Name: ds:UpdateDirectory