@actsecurity/iam-data 0.21.202609231 → 0.21.202609251

package/data/actions/events.json

@@ -6,7 +6,13 @@
     "resourceTypes": [
       {
         "name": "event-bus",
-        "required": true,
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "subscriber",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -170,6 +176,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "event-busv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -178,6 +190,31 @@
     ],
     "dependentActions": []
   },
+  "createeventsource": {
+    "name": "CreateEventSource",
+    "description": "Grants permission to create an event source that forwards events to an event bus",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "event-busv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "event-sourcev2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "events:source"
+    ],
+    "dependentActions": []
+  },
   "createpartnereventsource": {
     "name": "CreatePartnerEventSource",
     "description": "Grants permission to create partner event sources",
@@ -193,6 +230,33 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createsubscriber": {
+    "name": "CreateSubscriber",
+    "description": "Grants permission to create a subscriber",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "event-busv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "subscriber",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "events:ContentFilterPresent",
+      "events:Metadata/${MetadataKey}",
+      "events:Metadata/${MetadataKey}/Matcher"
+    ],
+    "dependentActions": []
+  },
   "deactivateeventsource": {
     "name": "DeactivateEventSource",
     "description": "Grants permission to deactivate event sources",
@@ -293,6 +357,27 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "event-busv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteeventsource": {
+    "name": "DeleteEventSource",
+    "description": "Grants permission to delete an event source",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "event-sourcev2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -313,6 +398,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteresourcepolicy": {
+    "name": "DeleteResourcePolicy",
+    "description": "Grants permission to delete a resource policy attached to an event bus",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [
+      {
+        "name": "event-busv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "events:PolicyName"
+    ],
+    "dependentActions": []
+  },
   "deleterule": {
     "name": "DeleteRule",
     "description": "Grants permission to delete rules",
@@ -337,6 +439,21 @@
     ],
     "dependentActions": []
   },
+  "deletesubscriber": {
+    "name": "DeleteSubscriber",
+    "description": "Grants permission to delete a subscriber",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "subscriber",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeapidestination": {
     "name": "DescribeApiDestination",
     "description": "Grants permission to retrieve details about an api destination",
@@ -413,6 +530,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "event-busv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -425,7 +548,13 @@
     "resourceTypes": [
       {
         "name": "event-source",
-        "required": true,
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "event-sourcev2",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -486,6 +615,21 @@
     ],
     "dependentActions": []
   },
+  "describesubscriber": {
+    "name": "DescribeSubscriber",
+    "description": "Grants permission to retrieve details about a subscriber",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "subscriber",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "disablerule": {
     "name": "DisableRule",
     "description": "Grants permission to disable rules",
@@ -534,6 +678,23 @@
     ],
     "dependentActions": []
   },
+  "getresourcepolicy": {
+    "name": "GetResourcePolicy",
+    "description": "Grants permission to retrieve the resource policy attached to an event bus",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "event-busv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "events:PolicyName"
+    ],
+    "dependentActions": []
+  },
   "listapidestinations": {
     "name": "ListApiDestinations",
     "description": "Grants permission to retrieve a list of api destinations",
@@ -613,6 +774,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listresourcepolicies": {
+    "name": "ListResourcePolicies",
+    "description": "Grants permission to list the resource policies attached to an event bus",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "event-busv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listrulenamesbytarget": {
     "name": "ListRuleNamesByTarget",
     "description": "Grants permission to retrieve a list of the names of the rules associated with a target",
@@ -629,6 +805,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listsubscribers": {
+    "name": "ListSubscribers",
+    "description": "Grants permission to retrieve a list of subscribers",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to retrieve a list of tags associated with an Amazon EventBridge resource",
@@ -640,6 +824,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "event-busv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "event-sourcev2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "rule-on-custom-event-bus",
         "required": false,
@@ -651,6 +847,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "subscriber",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -691,9 +893,18 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "event-busv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
+      "events:SystemMetadata/AwsDetailType",
+      "events:SystemMetadata/AwsSource",
+      "events:SystemMetadata/ContentType",
       "events:detail-type",
       "events:eventBusInvocation",
       "events:source"
@@ -716,6 +927,44 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putrawevents": {
+    "name": "PutRawEvents",
+    "description": "Grants permission to publish raw-format events with custom content types, metadata, binary payloads, and FIFO ordering to Amazon EventBridge",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "event-busv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "events:Metadata/${MetadataKey}",
+      "events:SystemMetadata/AwsDetailType",
+      "events:SystemMetadata/AwsSource",
+      "events:SystemMetadata/ContentType",
+      "events:eventBusInvocation"
+    ],
+    "dependentActions": []
+  },
+  "putresourcepolicy": {
+    "name": "PutResourcePolicy",
+    "description": "Grants permission to attach a resource policy to an event bus",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [
+      {
+        "name": "event-busv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "events:PolicyName"
+    ],
+    "dependentActions": []
+  },
   "putrule": {
     "name": "PutRule",
     "description": "Grants permission to create or updates rules",
@@ -804,6 +1053,21 @@
     ],
     "dependentActions": []
   },
+  "revokeresource": {
+    "name": "RevokeResource",
+    "description": "Grants permission to revoke a subscriber or an event source on an event bus",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "event-busv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startreplay": {
     "name": "StartReplay",
     "description": "Grants permission to start a replay of an archive",
@@ -842,6 +1106,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "event-busv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "event-sourcev2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "rule-on-custom-event-bus",
         "required": false,
@@ -853,6 +1129,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "subscriber",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -881,6 +1163,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "event-busv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "event-sourcev2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "rule-on-custom-event-bus",
         "required": false,
@@ -892,6 +1186,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "subscriber",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -984,9 +1284,63 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "event-busv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
     "dependentActions": []
+  },
+  "updateeventsource": {
+    "name": "UpdateEventSource",
+    "description": "Grants permission to update an event source",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "event-busv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "event-sourcev2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "events:source"
+    ],
+    "dependentActions": []
+  },
+  "updatesubscriber": {
+    "name": "UpdateSubscriber",
+    "description": "Grants permission to update a subscriber",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "event-busv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "subscriber",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "events:ContentFilterPresent",
+      "events:Metadata/${MetadataKey}",
+      "events:Metadata/${MetadataKey}/Matcher"
+    ],
+    "dependentActions": []
   }
 }

package/data/actions/guardduty.json

@@ -431,14 +431,7 @@
     "name": "GetCustomDetectionRule",
     "description": "Grants permission to retrieve a GuardDuty custom detection rule",
     "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "customdetectionrule",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },

package/data/actions/identitystore.json

@@ -245,6 +245,23 @@
     ],
     "dependentActions": []
   },
+  "describeidentitystore": {
+    "name": "DescribeIdentityStore",
+    "description": "Grants permission to retrieve information about an IdentityStore",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Identitystore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion"
+    ],
+    "dependentActions": []
+  },
   "describeregion": {
     "name": "DescribeRegion",
     "description": "Grants permission to retrieve configuration details for a specific IdentityStore region",
@@ -484,6 +501,14 @@
     ],
     "dependentActions": []
   },
+  "listidentitystores": {
+    "name": "ListIdentityStores",
+    "description": "Grants permission to list IdentityStores in an AWS account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listregions": {
     "name": "ListRegions",
     "description": "Grants permission to list all regions configured for an IdentityStore",

package/data/actions/kinesis.json

@@ -788,6 +788,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatestreamrecorddistributionstrategy": {
+    "name": "UpdateStreamRecordDistributionStrategy",
+    "description": "Grants permission to update the record distribution strategy for a Kinesis data stream",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "stream",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatestreamwarmthroughput": {
     "name": "UpdateStreamWarmThroughput",
     "description": "Grants permission to update the warm throughput for a Kinesis on-demand data stream",