@cloud-copilot/iam-data 0.1.202408281 → 0.1.202408301

package/data/actions/bedrock.json

@@ -318,6 +318,17 @@
     ],
     "dependentActions": []
   },
+  "CreateModelImportJob": {
+    "name": "CreateModelImportJob",
+    "description": "Grants permission to create a job for importing model into Bedrock",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "CreateModelInvocationJob": {
     "name": "CreateModelInvocationJob",
     "description": "Grants permission to create a new model invocation job",
@@ -574,6 +585,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "DeleteImportedModel": {
+    "name": "DeleteImportedModel",
+    "description": "Grants permission to delete previously created Bedrock imported model",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "imported-model",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "DeleteKnowledgeBase": {
     "name": "DeleteKnowledgeBase",
     "description": "Grants permission to delete a knowledge base",
@@ -909,6 +935,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "GetImportedModel": {
+    "name": "GetImportedModel",
+    "description": "Grants permission to get the properties associated with Bedrock imported model",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "imported-model",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetInferenceProfile": {
+    "name": "GetInferenceProfile",
+    "description": "Grants permission to get the properties associated with an inference profile",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "inference-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "GetIngestionJob": {
     "name": "GetIngestionJob",
     "description": "Grants permission to retrieve an existing ingestion job",
@@ -984,6 +1040,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "GetModelImportJob": {
+    "name": "GetModelImportJob",
+    "description": "Grants permission to get the properties associated with a model import job and is used to get the status of a model import job",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "model-import-job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "GetModelInvocationJob": {
     "name": "GetModelInvocationJob",
     "description": "Grants permission to retrieve a model invocation job",
@@ -1108,6 +1179,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "imported-model",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "inference-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "provisioned-model",
         "required": true,
@@ -1115,7 +1198,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "bedrock:InferenceProfileArn"
+    ],
     "dependentActions": []
   },
   "InvokeModelWithResponseStream": {
@@ -1129,6 +1214,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "imported-model",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "inference-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "provisioned-model",
         "required": true,
@@ -1136,7 +1233,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "bedrock:InferenceProfileArn"
+    ],
     "dependentActions": []
   },
   "ListAgentActionGroups": {
@@ -1307,6 +1406,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "ListImportedModels": {
+    "name": "ListImportedModels",
+    "description": "Grants permission to get list of Bedrock imported models",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListInferenceProfiles": {
+    "name": "ListInferenceProfiles",
+    "description": "Grants permission to list inference profiles that you can use",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "ListIngestionJobs": {
     "name": "ListIngestionJobs",
     "description": "Grants permission to list ingestion jobs in a data source",
@@ -1354,6 +1469,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "ListModelImportJobs": {
+    "name": "ListModelImportJobs",
+    "description": "Grants permission to get list of model import jobs",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "ListModelInvocationJobs": {
     "name": "ListModelInvocationJobs",
     "description": "Grants permission to list model invocation jobs that you created earlier",
@@ -1432,6 +1555,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "imported-model",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "knowledge-base",
         "required": true,
@@ -1456,6 +1585,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "model-import-job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "model-invocation-job",
         "required": true,
@@ -1687,6 +1822,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "imported-model",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "knowledge-base",
         "required": false,
@@ -1711,6 +1852,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "model-import-job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "model-invocation-job",
         "required": false,
@@ -1789,6 +1936,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "imported-model",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "knowledge-base",
         "required": false,
@@ -1813,6 +1966,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "model-import-job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "model-invocation-job",
         "required": false,

package/data/actions/pcs.json

@@ -0,0 +1,409 @@
+{
+  "AllowVendedLogDeliveryForResource": {
+    "name": "AllowVendedLogDeliveryForResource",
+    "isPermissionOnly": true,
+    "description": "Grants permission to configure vended log delivery for Skybridge cluster logs",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "CreateCluster": {
+    "name": "CreateCluster",
+    "description": "Grants permission to create clusters",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": [
+      "ec2:CreateNetworkInterface",
+      "ec2:CreateNetworkInterfacePermission",
+      "ec2:DescribeNetworkInterfaces",
+      "ec2:DescribeSecurityGroups",
+      "ec2:DescribeSubnets",
+      "ec2:DescribeVpcs",
+      "ec2:GetSecurityGroupsForVpc",
+      "iam:CreateServiceLinkedRole",
+      "secretsmanager:CreateSecret",
+      "secretsmanager:TagResource"
+    ]
+  },
+  "CreateComputeNodeGroup": {
+    "name": "CreateComputeNodeGroup",
+    "description": "Grants permission to create compute node groups",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "ec2:CreateFleet",
+          "ec2:CreateLaunchTemplate",
+          "ec2:CreateLaunchTemplateVersion",
+          "ec2:CreateTags",
+          "ec2:DescribeImages",
+          "ec2:DescribeInstanceStatus",
+          "ec2:DescribeInstanceTypes",
+          "ec2:DescribeInstances",
+          "ec2:DescribeLaunchTemplateVersions",
+          "ec2:DescribeLaunchTemplates",
+          "ec2:DescribeSecurityGroups",
+          "ec2:DescribeSubnets",
+          "ec2:DescribeVpcs",
+          "ec2:RunInstances",
+          "iam:GetInstanceProfile",
+          "iam:PassRole"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "CreateQueue": {
+    "name": "CreateQueue",
+    "description": "Grants permission to create queues",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "DeleteCluster": {
+    "name": "DeleteCluster",
+    "description": "Grants permission to delete clusters",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "ec2:DeleteNetworkInterface",
+      "secretsmanager:DeleteSecret"
+    ]
+  },
+  "DeleteComputeNodeGroup": {
+    "name": "DeleteComputeNodeGroup",
+    "description": "Grants permission to delete compute node groups",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "ec2:DeleteLaunchTemplate",
+          "ec2:TerminateInstances"
+        ]
+      },
+      {
+        "name": "computenodegroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteQueue": {
+    "name": "DeleteQueue",
+    "description": "Grants permission to delete queues",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "queue",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetCluster": {
+    "name": "GetCluster",
+    "description": "Grants permission to get cluster properties",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetComputeNodeGroup": {
+    "name": "GetComputeNodeGroup",
+    "description": "Grants permission to get compute node group properties",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "computenodegroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetQueue": {
+    "name": "GetQueue",
+    "description": "Grants permission to get queue properties",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "queue",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListClusters": {
+    "name": "ListClusters",
+    "description": "Grants permission to list clusters",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListComputeNodeGroups": {
+    "name": "ListComputeNodeGroups",
+    "description": "Grants permission to list compute node groups",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListQueues": {
+    "name": "ListQueues",
+    "description": "Grants permission to list queues",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListTagsForResource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list the tags for a resource",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "RegisterComputeNodeGroupInstance": {
+    "name": "RegisterComputeNodeGroupInstance",
+    "description": "Grants permission to register a compute instance in a compute node group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "secretsmanager:GetSecretValue"
+    ]
+  },
+  "TagResource": {
+    "name": "TagResource",
+    "description": "Grants permission to tag a resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "computenodegroup",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "queue",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "UntagResource": {
+    "name": "UntagResource",
+    "description": "Grants permission to untag a resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "computenodegroup",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "queue",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "UpdateComputeNodeGroup": {
+    "name": "UpdateComputeNodeGroup",
+    "description": "Grants permission to update compute node group properties",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "ec2:CreateFleet",
+          "ec2:CreateLaunchTemplate",
+          "ec2:CreateLaunchTemplateVersion",
+          "ec2:CreateTags",
+          "ec2:DescribeImages",
+          "ec2:DescribeInstanceStatus",
+          "ec2:DescribeInstanceTypes",
+          "ec2:DescribeInstances",
+          "ec2:DescribeLaunchTemplateVersions",
+          "ec2:DescribeLaunchTemplates",
+          "ec2:DescribeSecurityGroups",
+          "ec2:DescribeSubnets",
+          "ec2:DescribeVpcs",
+          "ec2:RunInstances",
+          "iam:GetInstanceProfile",
+          "iam:PassRole"
+        ]
+      },
+      {
+        "name": "computenodegroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateQueue": {
+    "name": "UpdateQueue",
+    "description": "Grants permission to update queue properties",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "queue",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

package/data/conditionKeys/bedrock.json

@@ -14,6 +14,11 @@
     "description": "Filters access by creating requests based on the presence of mandatory tags in the request",
     "type": "ArrayOfString"
   },
+  "bedrock:InferenceProfileArn": {
+    "key": "bedrock:InferenceProfileArn",
+    "description": "Filters access by the specified inference profile",
+    "type": "ARN"
+  },
   "bedrock:ThirdPartyKnowledgeBaseCredentialsSecretArn": {
     "key": "bedrock:ThirdPartyKnowledgeBaseCredentialsSecretArn",
     "description": "Filters access by the secretArn containing the credentials of the third party platform",

package/data/conditionKeys/pcs.json

@@ -0,0 +1,17 @@
+{
+  "aws:RequestTag/${TagKey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:ResourceTag/${TagKey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
+  "aws:TagKeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  }
+}

package/data/resourceTypes/bedrock.json

@@ -3,6 +3,10 @@
     "key": "foundation-model",
     "arn": "arn:${Partition}:bedrock:${Region}::foundation-model/${ResourceId}"
   },
+  "inference-profile": {
+    "key": "inference-profile",
+    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:inference-profile/${ResourceId}"
+  },
   "custom-model": {
     "key": "custom-model",
     "arn": "arn:${Partition}:bedrock:${Region}:${Account}:custom-model/${ResourceId}",
@@ -107,5 +111,19 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "model-import-job": {
+    "key": "model-import-job",
+    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:model-import-job/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "imported-model": {
+    "key": "imported-model",
+    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:imported-model/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/events.json

@@ -43,5 +43,21 @@
   "endpoint": {
     "key": "endpoint",
     "arn": "arn:${Partition}:events:${Region}:${Account}:endpoint/${EndpointName}"
+  },
+  "create-snapshot": {
+    "key": "create-snapshot",
+    "arn": "arn:${Partition}:events:${Region}:${Account}:target/create-snapshot"
+  },
+  "reboot-instance": {
+    "key": "reboot-instance",
+    "arn": "arn:${Partition}:events:${Region}:${Account}:target/reboot-instance"
+  },
+  "stop-instance": {
+    "key": "stop-instance",
+    "arn": "arn:${Partition}:events:${Region}:${Account}:target/stop-instance"
+  },
+  "terminate-instance": {
+    "key": "terminate-instance",
+    "arn": "arn:${Partition}:events:${Region}:${Account}:target/terminate-instance"
   }
 }

package/data/resourceTypes/pcs.json

@@ -0,0 +1,23 @@
+{
+  "cluster": {
+    "key": "cluster",
+    "arn": "arn:${Partition}:pcs:${Region}:${Account}:cluster/${ClusterIdentifier}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "computenodegroup": {
+    "key": "computenodegroup",
+    "arn": "arn:${Partition}:pcs:${Region}:${Account}:cluster/${ClusterIdentifier}/computenodegroup/${ComputeNodeGroupIdentifier}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "queue": {
+    "key": "queue",
+    "arn": "arn:${Partition}:pcs:${Region}:${Account}:cluster/${ClusterIdentifier}/queue/${QueueIdentifier}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  }
+}

package/data/serviceNames.json

@@ -157,6 +157,7 @@
   "organizations": "AWS Organizations",
   "outposts": "AWS Outposts",
   "panorama": "AWS Panorama",
+  "pcs": "AWS Parallel Computing Service",
   "partnercentral-account-management": "AWS Partner central account management",
   "payment-cryptography": "AWS Payment Cryptography",
   "payments": "AWS Payments",

package/data/services.json

@@ -157,6 +157,7 @@
   "organizations",
   "outposts",
   "panorama",
+  "pcs",
   "partnercentral-account-management",
   "payment-cryptography",
   "payments",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.1.202408281",
+  "version": "0.1.202408301",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
   "exports": {