@cloud-copilot/iam-data 0.15.202510141 → 0.15.202510151
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/data/actions/bedrock-agentcore.json +152 -5
- package/data/actions/rds.json +19 -8
- package/data/actions/social-messaging.json +64 -8
- package/data/actions/xray.json +6 -2
- package/data/conditionKeys/bedrock-agentcore.json +30 -0
- package/data/conditionKeys/xray.json +5 -0
- package/data/resourceTypes/bedrock-agentcore.json +20 -5
- package/package.json +2 -2
|
@@ -64,6 +64,46 @@
|
|
|
64
64
|
],
|
|
65
65
|
"dependentActions": []
|
|
66
66
|
},
|
|
67
|
+
"completeresourcetokenauth": {
|
|
68
|
+
"name": "CompleteResourceTokenAuth",
|
|
69
|
+
"description": "Grants permission to retrieve access token with OAuth2 for 3LO flow to access external resource",
|
|
70
|
+
"accessLevel": "Read",
|
|
71
|
+
"resourceTypes": [
|
|
72
|
+
{
|
|
73
|
+
"name": "oauth2credentialprovider",
|
|
74
|
+
"required": true,
|
|
75
|
+
"conditionKeys": [],
|
|
76
|
+
"dependentActions": []
|
|
77
|
+
},
|
|
78
|
+
{
|
|
79
|
+
"name": "token-vault",
|
|
80
|
+
"required": true,
|
|
81
|
+
"conditionKeys": [],
|
|
82
|
+
"dependentActions": []
|
|
83
|
+
},
|
|
84
|
+
{
|
|
85
|
+
"name": "workload-identity",
|
|
86
|
+
"required": true,
|
|
87
|
+
"conditionKeys": [],
|
|
88
|
+
"dependentActions": []
|
|
89
|
+
},
|
|
90
|
+
{
|
|
91
|
+
"name": "workload-identity-directory",
|
|
92
|
+
"required": true,
|
|
93
|
+
"conditionKeys": [],
|
|
94
|
+
"dependentActions": []
|
|
95
|
+
}
|
|
96
|
+
],
|
|
97
|
+
"conditionKeys": [
|
|
98
|
+
"bedrock-agentcore:InboundJwtClaim/iss",
|
|
99
|
+
"bedrock-agentcore:InboundJwtClaim/sub",
|
|
100
|
+
"bedrock-agentcore:InboundJwtClaim/aud",
|
|
101
|
+
"bedrock-agentcore:InboundJwtClaim/scope",
|
|
102
|
+
"bedrock-agentcore:InboundJwtClaim/client_id",
|
|
103
|
+
"bedrock-agentcore:userid"
|
|
104
|
+
],
|
|
105
|
+
"dependentActions": []
|
|
106
|
+
},
|
|
67
107
|
"connectbrowserautomationstream": {
|
|
68
108
|
"name": "ConnectBrowserAutomationStream",
|
|
69
109
|
"description": "Grants permission to connect to a browser automation stream",
|
|
@@ -129,7 +169,10 @@
|
|
|
129
169
|
"dependentActions": []
|
|
130
170
|
}
|
|
131
171
|
],
|
|
132
|
-
"conditionKeys": [
|
|
172
|
+
"conditionKeys": [
|
|
173
|
+
"aws:RequestTag/${TagKey}",
|
|
174
|
+
"aws:TagKeys"
|
|
175
|
+
],
|
|
133
176
|
"dependentActions": []
|
|
134
177
|
},
|
|
135
178
|
"createbrowser": {
|
|
@@ -231,7 +274,10 @@
|
|
|
231
274
|
"dependentActions": []
|
|
232
275
|
}
|
|
233
276
|
],
|
|
234
|
-
"conditionKeys": [
|
|
277
|
+
"conditionKeys": [
|
|
278
|
+
"aws:RequestTag/${TagKey}",
|
|
279
|
+
"aws:TagKeys"
|
|
280
|
+
],
|
|
235
281
|
"dependentActions": []
|
|
236
282
|
},
|
|
237
283
|
"createworkloadidentity": {
|
|
@@ -252,7 +298,10 @@
|
|
|
252
298
|
"dependentActions": []
|
|
253
299
|
}
|
|
254
300
|
],
|
|
255
|
-
"conditionKeys": [
|
|
301
|
+
"conditionKeys": [
|
|
302
|
+
"aws:RequestTag/${TagKey}",
|
|
303
|
+
"aws:TagKeys"
|
|
304
|
+
],
|
|
256
305
|
"dependentActions": []
|
|
257
306
|
},
|
|
258
307
|
"deleteagentruntime": {
|
|
@@ -831,7 +880,13 @@
|
|
|
831
880
|
"dependentActions": []
|
|
832
881
|
}
|
|
833
882
|
],
|
|
834
|
-
"conditionKeys": [
|
|
883
|
+
"conditionKeys": [
|
|
884
|
+
"bedrock-agentcore:InboundJwtClaim/iss",
|
|
885
|
+
"bedrock-agentcore:InboundJwtClaim/sub",
|
|
886
|
+
"bedrock-agentcore:InboundJwtClaim/aud",
|
|
887
|
+
"bedrock-agentcore:InboundJwtClaim/scope",
|
|
888
|
+
"bedrock-agentcore:InboundJwtClaim/client_id"
|
|
889
|
+
],
|
|
835
890
|
"dependentActions": []
|
|
836
891
|
},
|
|
837
892
|
"getworkloadaccesstokenforuserid": {
|
|
@@ -852,7 +907,9 @@
|
|
|
852
907
|
"dependentActions": []
|
|
853
908
|
}
|
|
854
909
|
],
|
|
855
|
-
"conditionKeys": [
|
|
910
|
+
"conditionKeys": [
|
|
911
|
+
"bedrock-agentcore:userid"
|
|
912
|
+
],
|
|
856
913
|
"dependentActions": []
|
|
857
914
|
},
|
|
858
915
|
"getworkloadidentity": {
|
|
@@ -1170,6 +1227,12 @@
|
|
|
1170
1227
|
"description": "Grants permission to list tags for a Bedrock-AgentCore resource",
|
|
1171
1228
|
"accessLevel": "List",
|
|
1172
1229
|
"resourceTypes": [
|
|
1230
|
+
{
|
|
1231
|
+
"name": "apikeycredentialprovider",
|
|
1232
|
+
"required": false,
|
|
1233
|
+
"conditionKeys": [],
|
|
1234
|
+
"dependentActions": []
|
|
1235
|
+
},
|
|
1173
1236
|
{
|
|
1174
1237
|
"name": "browser-custom",
|
|
1175
1238
|
"required": false,
|
|
@@ -1194,6 +1257,12 @@
|
|
|
1194
1257
|
"conditionKeys": [],
|
|
1195
1258
|
"dependentActions": []
|
|
1196
1259
|
},
|
|
1260
|
+
{
|
|
1261
|
+
"name": "oauth2credentialprovider",
|
|
1262
|
+
"required": false,
|
|
1263
|
+
"conditionKeys": [],
|
|
1264
|
+
"dependentActions": []
|
|
1265
|
+
},
|
|
1197
1266
|
{
|
|
1198
1267
|
"name": "runtime",
|
|
1199
1268
|
"required": false,
|
|
@@ -1205,6 +1274,24 @@
|
|
|
1205
1274
|
"required": false,
|
|
1206
1275
|
"conditionKeys": [],
|
|
1207
1276
|
"dependentActions": []
|
|
1277
|
+
},
|
|
1278
|
+
{
|
|
1279
|
+
"name": "token-vault",
|
|
1280
|
+
"required": false,
|
|
1281
|
+
"conditionKeys": [],
|
|
1282
|
+
"dependentActions": []
|
|
1283
|
+
},
|
|
1284
|
+
{
|
|
1285
|
+
"name": "workload-identity",
|
|
1286
|
+
"required": false,
|
|
1287
|
+
"conditionKeys": [],
|
|
1288
|
+
"dependentActions": []
|
|
1289
|
+
},
|
|
1290
|
+
{
|
|
1291
|
+
"name": "workload-identity-directory",
|
|
1292
|
+
"required": false,
|
|
1293
|
+
"conditionKeys": [],
|
|
1294
|
+
"dependentActions": []
|
|
1208
1295
|
}
|
|
1209
1296
|
],
|
|
1210
1297
|
"conditionKeys": [],
|
|
@@ -1390,6 +1477,12 @@
|
|
|
1390
1477
|
"description": "Grants permission to Tag a Bedrock-AgentCore resource",
|
|
1391
1478
|
"accessLevel": "Tagging",
|
|
1392
1479
|
"resourceTypes": [
|
|
1480
|
+
{
|
|
1481
|
+
"name": "apikeycredentialprovider",
|
|
1482
|
+
"required": false,
|
|
1483
|
+
"conditionKeys": [],
|
|
1484
|
+
"dependentActions": []
|
|
1485
|
+
},
|
|
1393
1486
|
{
|
|
1394
1487
|
"name": "browser-custom",
|
|
1395
1488
|
"required": false,
|
|
@@ -1414,6 +1507,12 @@
|
|
|
1414
1507
|
"conditionKeys": [],
|
|
1415
1508
|
"dependentActions": []
|
|
1416
1509
|
},
|
|
1510
|
+
{
|
|
1511
|
+
"name": "oauth2credentialprovider",
|
|
1512
|
+
"required": false,
|
|
1513
|
+
"conditionKeys": [],
|
|
1514
|
+
"dependentActions": []
|
|
1515
|
+
},
|
|
1417
1516
|
{
|
|
1418
1517
|
"name": "runtime",
|
|
1419
1518
|
"required": false,
|
|
@@ -1425,6 +1524,24 @@
|
|
|
1425
1524
|
"required": false,
|
|
1426
1525
|
"conditionKeys": [],
|
|
1427
1526
|
"dependentActions": []
|
|
1527
|
+
},
|
|
1528
|
+
{
|
|
1529
|
+
"name": "token-vault",
|
|
1530
|
+
"required": false,
|
|
1531
|
+
"conditionKeys": [],
|
|
1532
|
+
"dependentActions": []
|
|
1533
|
+
},
|
|
1534
|
+
{
|
|
1535
|
+
"name": "workload-identity",
|
|
1536
|
+
"required": false,
|
|
1537
|
+
"conditionKeys": [],
|
|
1538
|
+
"dependentActions": []
|
|
1539
|
+
},
|
|
1540
|
+
{
|
|
1541
|
+
"name": "workload-identity-directory",
|
|
1542
|
+
"required": false,
|
|
1543
|
+
"conditionKeys": [],
|
|
1544
|
+
"dependentActions": []
|
|
1428
1545
|
}
|
|
1429
1546
|
],
|
|
1430
1547
|
"conditionKeys": [
|
|
@@ -1438,6 +1555,12 @@
|
|
|
1438
1555
|
"description": "Grants permission to Untag a Bedrock-AgentCore resource",
|
|
1439
1556
|
"accessLevel": "Tagging",
|
|
1440
1557
|
"resourceTypes": [
|
|
1558
|
+
{
|
|
1559
|
+
"name": "apikeycredentialprovider",
|
|
1560
|
+
"required": false,
|
|
1561
|
+
"conditionKeys": [],
|
|
1562
|
+
"dependentActions": []
|
|
1563
|
+
},
|
|
1441
1564
|
{
|
|
1442
1565
|
"name": "browser-custom",
|
|
1443
1566
|
"required": false,
|
|
@@ -1462,6 +1585,12 @@
|
|
|
1462
1585
|
"conditionKeys": [],
|
|
1463
1586
|
"dependentActions": []
|
|
1464
1587
|
},
|
|
1588
|
+
{
|
|
1589
|
+
"name": "oauth2credentialprovider",
|
|
1590
|
+
"required": false,
|
|
1591
|
+
"conditionKeys": [],
|
|
1592
|
+
"dependentActions": []
|
|
1593
|
+
},
|
|
1465
1594
|
{
|
|
1466
1595
|
"name": "runtime",
|
|
1467
1596
|
"required": false,
|
|
@@ -1473,6 +1602,24 @@
|
|
|
1473
1602
|
"required": false,
|
|
1474
1603
|
"conditionKeys": [],
|
|
1475
1604
|
"dependentActions": []
|
|
1605
|
+
},
|
|
1606
|
+
{
|
|
1607
|
+
"name": "token-vault",
|
|
1608
|
+
"required": false,
|
|
1609
|
+
"conditionKeys": [],
|
|
1610
|
+
"dependentActions": []
|
|
1611
|
+
},
|
|
1612
|
+
{
|
|
1613
|
+
"name": "workload-identity",
|
|
1614
|
+
"required": false,
|
|
1615
|
+
"conditionKeys": [],
|
|
1616
|
+
"dependentActions": []
|
|
1617
|
+
},
|
|
1618
|
+
{
|
|
1619
|
+
"name": "workload-identity-directory",
|
|
1620
|
+
"required": false,
|
|
1621
|
+
"conditionKeys": [],
|
|
1622
|
+
"dependentActions": []
|
|
1476
1623
|
}
|
|
1477
1624
|
],
|
|
1478
1625
|
"conditionKeys": [
|
package/data/actions/rds.json
CHANGED
|
@@ -284,7 +284,8 @@
|
|
|
284
284
|
],
|
|
285
285
|
"conditionKeys": [
|
|
286
286
|
"aws:RequestTag/${TagKey}",
|
|
287
|
-
"aws:TagKeys"
|
|
287
|
+
"aws:TagKeys",
|
|
288
|
+
"rds:req-tag/${TagKey}"
|
|
288
289
|
],
|
|
289
290
|
"dependentActions": []
|
|
290
291
|
},
|
|
@@ -304,7 +305,8 @@
|
|
|
304
305
|
],
|
|
305
306
|
"conditionKeys": [
|
|
306
307
|
"aws:RequestTag/${TagKey}",
|
|
307
|
-
"aws:TagKeys"
|
|
308
|
+
"aws:TagKeys",
|
|
309
|
+
"rds:req-tag/${TagKey}"
|
|
308
310
|
],
|
|
309
311
|
"dependentActions": []
|
|
310
312
|
},
|
|
@@ -324,7 +326,8 @@
|
|
|
324
326
|
],
|
|
325
327
|
"conditionKeys": [
|
|
326
328
|
"aws:RequestTag/${TagKey}",
|
|
327
|
-
"aws:TagKeys"
|
|
329
|
+
"aws:TagKeys",
|
|
330
|
+
"rds:req-tag/${TagKey}"
|
|
328
331
|
],
|
|
329
332
|
"dependentActions": []
|
|
330
333
|
},
|
|
@@ -346,6 +349,7 @@
|
|
|
346
349
|
"conditionKeys": [
|
|
347
350
|
"aws:RequestTag/${TagKey}",
|
|
348
351
|
"aws:TagKeys",
|
|
352
|
+
"rds:req-tag/${TagKey}",
|
|
349
353
|
"rds:CopyOptionGroup"
|
|
350
354
|
],
|
|
351
355
|
"dependentActions": []
|
|
@@ -366,7 +370,8 @@
|
|
|
366
370
|
],
|
|
367
371
|
"conditionKeys": [
|
|
368
372
|
"aws:RequestTag/${TagKey}",
|
|
369
|
-
"aws:TagKeys"
|
|
373
|
+
"aws:TagKeys",
|
|
374
|
+
"rds:req-tag/${TagKey}"
|
|
370
375
|
],
|
|
371
376
|
"dependentActions": []
|
|
372
377
|
},
|
|
@@ -450,7 +455,8 @@
|
|
|
450
455
|
],
|
|
451
456
|
"conditionKeys": [
|
|
452
457
|
"aws:RequestTag/${TagKey}",
|
|
453
|
-
"aws:TagKeys"
|
|
458
|
+
"aws:TagKeys",
|
|
459
|
+
"rds:req-tag/${TagKey}"
|
|
454
460
|
],
|
|
455
461
|
"dependentActions": []
|
|
456
462
|
},
|
|
@@ -543,7 +549,8 @@
|
|
|
543
549
|
"conditionKeys": [
|
|
544
550
|
"rds:EndpointType",
|
|
545
551
|
"aws:RequestTag/${TagKey}",
|
|
546
|
-
"aws:TagKeys"
|
|
552
|
+
"aws:TagKeys",
|
|
553
|
+
"rds:req-tag/${TagKey}"
|
|
547
554
|
],
|
|
548
555
|
"dependentActions": []
|
|
549
556
|
},
|
|
@@ -809,6 +816,7 @@
|
|
|
809
816
|
"conditionKeys": [
|
|
810
817
|
"aws:RequestTag/${TagKey}",
|
|
811
818
|
"aws:TagKeys",
|
|
819
|
+
"rds:req-tag/${TagKey}",
|
|
812
820
|
"rds:PubliclyAccessible"
|
|
813
821
|
],
|
|
814
822
|
"dependentActions": []
|
|
@@ -905,7 +913,8 @@
|
|
|
905
913
|
],
|
|
906
914
|
"conditionKeys": [
|
|
907
915
|
"aws:RequestTag/${TagKey}",
|
|
908
|
-
"aws:TagKeys"
|
|
916
|
+
"aws:TagKeys",
|
|
917
|
+
"rds:req-tag/${TagKey}"
|
|
909
918
|
],
|
|
910
919
|
"dependentActions": []
|
|
911
920
|
},
|
|
@@ -982,6 +991,7 @@
|
|
|
982
991
|
"conditionKeys": [
|
|
983
992
|
"aws:RequestTag/${TagKey}",
|
|
984
993
|
"aws:TagKeys",
|
|
994
|
+
"rds:req-tag/${TagKey}",
|
|
985
995
|
"rds:TenantDatabaseName",
|
|
986
996
|
"rds:ManageMasterUserPassword"
|
|
987
997
|
],
|
|
@@ -2778,7 +2788,8 @@
|
|
|
2778
2788
|
],
|
|
2779
2789
|
"conditionKeys": [
|
|
2780
2790
|
"aws:RequestTag/${TagKey}",
|
|
2781
|
-
"aws:TagKeys"
|
|
2791
|
+
"aws:TagKeys",
|
|
2792
|
+
"rds:req-tag/${TagKey}"
|
|
2782
2793
|
],
|
|
2783
2794
|
"dependentActions": []
|
|
2784
2795
|
},
|
|
@@ -15,7 +15,14 @@
|
|
|
15
15
|
"name": "CreateWhatsAppMessageTemplate",
|
|
16
16
|
"description": "Grants permission to create a WhatsApp message template",
|
|
17
17
|
"accessLevel": "Write",
|
|
18
|
-
"resourceTypes": [
|
|
18
|
+
"resourceTypes": [
|
|
19
|
+
{
|
|
20
|
+
"name": "waba",
|
|
21
|
+
"required": true,
|
|
22
|
+
"conditionKeys": [],
|
|
23
|
+
"dependentActions": []
|
|
24
|
+
}
|
|
25
|
+
],
|
|
19
26
|
"conditionKeys": [],
|
|
20
27
|
"dependentActions": []
|
|
21
28
|
},
|
|
@@ -23,7 +30,14 @@
|
|
|
23
30
|
"name": "CreateWhatsAppMessageTemplateFromLibrary",
|
|
24
31
|
"description": "Grants permission to create a WhatsApp message template from Meta's template library",
|
|
25
32
|
"accessLevel": "Write",
|
|
26
|
-
"resourceTypes": [
|
|
33
|
+
"resourceTypes": [
|
|
34
|
+
{
|
|
35
|
+
"name": "waba",
|
|
36
|
+
"required": true,
|
|
37
|
+
"conditionKeys": [],
|
|
38
|
+
"dependentActions": []
|
|
39
|
+
}
|
|
40
|
+
],
|
|
27
41
|
"conditionKeys": [],
|
|
28
42
|
"dependentActions": []
|
|
29
43
|
},
|
|
@@ -31,7 +45,14 @@
|
|
|
31
45
|
"name": "CreateWhatsAppMessageTemplateMedia",
|
|
32
46
|
"description": "Grants permission to create media for WhatsApp message templates",
|
|
33
47
|
"accessLevel": "Write",
|
|
34
|
-
"resourceTypes": [
|
|
48
|
+
"resourceTypes": [
|
|
49
|
+
{
|
|
50
|
+
"name": "waba",
|
|
51
|
+
"required": true,
|
|
52
|
+
"conditionKeys": [],
|
|
53
|
+
"dependentActions": []
|
|
54
|
+
}
|
|
55
|
+
],
|
|
35
56
|
"conditionKeys": [],
|
|
36
57
|
"dependentActions": []
|
|
37
58
|
},
|
|
@@ -54,7 +75,14 @@
|
|
|
54
75
|
"name": "DeleteWhatsAppMessageTemplate",
|
|
55
76
|
"description": "Grants permission to delete a WhatsApp message template",
|
|
56
77
|
"accessLevel": "Write",
|
|
57
|
-
"resourceTypes": [
|
|
78
|
+
"resourceTypes": [
|
|
79
|
+
{
|
|
80
|
+
"name": "waba",
|
|
81
|
+
"required": true,
|
|
82
|
+
"conditionKeys": [],
|
|
83
|
+
"dependentActions": []
|
|
84
|
+
}
|
|
85
|
+
],
|
|
58
86
|
"conditionKeys": [],
|
|
59
87
|
"dependentActions": []
|
|
60
88
|
},
|
|
@@ -122,7 +150,14 @@
|
|
|
122
150
|
"name": "GetWhatsAppMessageTemplate",
|
|
123
151
|
"description": "Grants permission to get details of a WhatsApp message template",
|
|
124
152
|
"accessLevel": "Read",
|
|
125
|
-
"resourceTypes": [
|
|
153
|
+
"resourceTypes": [
|
|
154
|
+
{
|
|
155
|
+
"name": "waba",
|
|
156
|
+
"required": true,
|
|
157
|
+
"conditionKeys": [],
|
|
158
|
+
"dependentActions": []
|
|
159
|
+
}
|
|
160
|
+
],
|
|
126
161
|
"conditionKeys": [],
|
|
127
162
|
"dependentActions": []
|
|
128
163
|
},
|
|
@@ -159,7 +194,14 @@
|
|
|
159
194
|
"name": "ListWhatsAppMessageTemplates",
|
|
160
195
|
"description": "Grants permission to list WhatsApp message templates",
|
|
161
196
|
"accessLevel": "List",
|
|
162
|
-
"resourceTypes": [
|
|
197
|
+
"resourceTypes": [
|
|
198
|
+
{
|
|
199
|
+
"name": "waba",
|
|
200
|
+
"required": true,
|
|
201
|
+
"conditionKeys": [],
|
|
202
|
+
"dependentActions": []
|
|
203
|
+
}
|
|
204
|
+
],
|
|
163
205
|
"conditionKeys": [],
|
|
164
206
|
"dependentActions": []
|
|
165
207
|
},
|
|
@@ -167,7 +209,14 @@
|
|
|
167
209
|
"name": "ListWhatsAppTemplateLibrary",
|
|
168
210
|
"description": "Grants permission to list available templates from Meta's template library",
|
|
169
211
|
"accessLevel": "List",
|
|
170
|
-
"resourceTypes": [
|
|
212
|
+
"resourceTypes": [
|
|
213
|
+
{
|
|
214
|
+
"name": "waba",
|
|
215
|
+
"required": true,
|
|
216
|
+
"conditionKeys": [],
|
|
217
|
+
"dependentActions": []
|
|
218
|
+
}
|
|
219
|
+
],
|
|
171
220
|
"conditionKeys": [],
|
|
172
221
|
"dependentActions": []
|
|
173
222
|
},
|
|
@@ -269,7 +318,14 @@
|
|
|
269
318
|
"name": "UpdateWhatsAppMessageTemplate",
|
|
270
319
|
"description": "Grants permission to update a WhatsApp message template",
|
|
271
320
|
"accessLevel": "Write",
|
|
272
|
-
"resourceTypes": [
|
|
321
|
+
"resourceTypes": [
|
|
322
|
+
{
|
|
323
|
+
"name": "waba",
|
|
324
|
+
"required": true,
|
|
325
|
+
"conditionKeys": [],
|
|
326
|
+
"dependentActions": []
|
|
327
|
+
}
|
|
328
|
+
],
|
|
273
329
|
"conditionKeys": [],
|
|
274
330
|
"dependentActions": []
|
|
275
331
|
}
|
package/data/actions/xray.json
CHANGED
|
@@ -327,7 +327,9 @@
|
|
|
327
327
|
"description": "Grants permission to upload OpenTelemetry spans to AWS X-Ray",
|
|
328
328
|
"accessLevel": "Write",
|
|
329
329
|
"resourceTypes": [],
|
|
330
|
-
"conditionKeys": [
|
|
330
|
+
"conditionKeys": [
|
|
331
|
+
"logs:LogGeneratingResourceArns"
|
|
332
|
+
],
|
|
331
333
|
"dependentActions": []
|
|
332
334
|
},
|
|
333
335
|
"putspansforindexing": {
|
|
@@ -352,7 +354,9 @@
|
|
|
352
354
|
"description": "Grants permission to upload segment documents to AWS X-Ray. The X-Ray SDK generates segment documents and sends them to the X-Ray daemon, which uploads them in batches",
|
|
353
355
|
"accessLevel": "Write",
|
|
354
356
|
"resourceTypes": [],
|
|
355
|
-
"conditionKeys": [
|
|
357
|
+
"conditionKeys": [
|
|
358
|
+
"logs:LogGeneratingResourceArns"
|
|
359
|
+
],
|
|
356
360
|
"dependentActions": []
|
|
357
361
|
},
|
|
358
362
|
"starttraceretrieval": {
|
|
@@ -19,6 +19,31 @@
|
|
|
19
19
|
"description": "Filters access by the authorizerType attribute on a Gateway",
|
|
20
20
|
"type": "String"
|
|
21
21
|
},
|
|
22
|
+
"bedrock-agentcore:inboundjwtclaim/aud": {
|
|
23
|
+
"key": "bedrock-agentcore:InboundJwtClaim/aud",
|
|
24
|
+
"description": "Filters access by the audience claim (aud) in the JWT passed in the request",
|
|
25
|
+
"type": "ArrayOfString"
|
|
26
|
+
},
|
|
27
|
+
"bedrock-agentcore:inboundjwtclaim/client_id": {
|
|
28
|
+
"key": "bedrock-agentcore:InboundJwtClaim/client_id",
|
|
29
|
+
"description": "Filters access by the client_id claim in the JWT passed in the request",
|
|
30
|
+
"type": "String"
|
|
31
|
+
},
|
|
32
|
+
"bedrock-agentcore:inboundjwtclaim/iss": {
|
|
33
|
+
"key": "bedrock-agentcore:InboundJwtClaim/iss",
|
|
34
|
+
"description": "Filters access by the issuer (iss) claim present in the JWT passed in the request",
|
|
35
|
+
"type": "String"
|
|
36
|
+
},
|
|
37
|
+
"bedrock-agentcore:inboundjwtclaim/scope": {
|
|
38
|
+
"key": "bedrock-agentcore:InboundJwtClaim/scope",
|
|
39
|
+
"description": "Filters access by the scope claim in the JWT passed in the request",
|
|
40
|
+
"type": "ArrayOfString"
|
|
41
|
+
},
|
|
42
|
+
"bedrock-agentcore:inboundjwtclaim/sub": {
|
|
43
|
+
"key": "bedrock-agentcore:InboundJwtClaim/sub",
|
|
44
|
+
"description": "Filters access by the subject claim (sub) in the JWT passed in the request",
|
|
45
|
+
"type": "String"
|
|
46
|
+
},
|
|
22
47
|
"bedrock-agentcore:actorid": {
|
|
23
48
|
"key": "bedrock-agentcore:actorId",
|
|
24
49
|
"description": "Filters access by Actor Id",
|
|
@@ -38,5 +63,10 @@
|
|
|
38
63
|
"key": "bedrock-agentcore:strategyId",
|
|
39
64
|
"description": "Filters access by Memory Strategy Id",
|
|
40
65
|
"type": "String"
|
|
66
|
+
},
|
|
67
|
+
"bedrock-agentcore:userid": {
|
|
68
|
+
"key": "bedrock-agentcore:userid",
|
|
69
|
+
"description": "Filters access by the static user ID value passed in the request",
|
|
70
|
+
"type": "String"
|
|
41
71
|
}
|
|
42
72
|
}
|
|
@@ -14,6 +14,11 @@
|
|
|
14
14
|
"description": "Filters access by the tag keys that are passed in the request",
|
|
15
15
|
"type": "ArrayOfString"
|
|
16
16
|
},
|
|
17
|
+
"logs:loggeneratingresourcearns": {
|
|
18
|
+
"key": "logs:LogGeneratingResourceArns",
|
|
19
|
+
"description": "Filters access by LogGeneratingResourceArn in the request",
|
|
20
|
+
"type": "ArrayOfARN"
|
|
21
|
+
},
|
|
17
22
|
"xray:resourcepolicyname": {
|
|
18
23
|
"key": "xray:ResourcePolicyName",
|
|
19
24
|
"description": "Filters access by PolicyName in the request",
|
|
@@ -15,15 +15,24 @@
|
|
|
15
15
|
},
|
|
16
16
|
"workload-identity": {
|
|
17
17
|
"key": "workload-identity",
|
|
18
|
-
"arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}/workload-identity/${WorkloadIdentityName}"
|
|
18
|
+
"arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}/workload-identity/${WorkloadIdentityName}",
|
|
19
|
+
"conditionKeys": [
|
|
20
|
+
"aws:ResourceTag/${TagKey}"
|
|
21
|
+
]
|
|
19
22
|
},
|
|
20
23
|
"oauth2credentialprovider": {
|
|
21
24
|
"key": "oauth2credentialprovider",
|
|
22
|
-
"arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/oauth2credentialprovider/${Name}"
|
|
25
|
+
"arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/oauth2credentialprovider/${Name}",
|
|
26
|
+
"conditionKeys": [
|
|
27
|
+
"aws:ResourceTag/${TagKey}"
|
|
28
|
+
]
|
|
23
29
|
},
|
|
24
30
|
"apikeycredentialprovider": {
|
|
25
31
|
"key": "apikeycredentialprovider",
|
|
26
|
-
"arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/apikeycredentialprovider/${Name}"
|
|
32
|
+
"arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/apikeycredentialprovider/${Name}",
|
|
33
|
+
"conditionKeys": [
|
|
34
|
+
"aws:ResourceTag/${TagKey}"
|
|
35
|
+
]
|
|
27
36
|
},
|
|
28
37
|
"runtime": {
|
|
29
38
|
"key": "runtime",
|
|
@@ -63,10 +72,16 @@
|
|
|
63
72
|
},
|
|
64
73
|
"workload-identity-directory": {
|
|
65
74
|
"key": "workload-identity-directory",
|
|
66
|
-
"arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}"
|
|
75
|
+
"arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}",
|
|
76
|
+
"conditionKeys": [
|
|
77
|
+
"aws:ResourceTag/${TagKey}"
|
|
78
|
+
]
|
|
67
79
|
},
|
|
68
80
|
"token-vault": {
|
|
69
81
|
"key": "token-vault",
|
|
70
|
-
"arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}"
|
|
82
|
+
"arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}",
|
|
83
|
+
"conditionKeys": [
|
|
84
|
+
"aws:ResourceTag/${TagKey}"
|
|
85
|
+
]
|
|
71
86
|
}
|
|
72
87
|
}
|
package/package.json
CHANGED
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@cloud-copilot/iam-data",
|
|
3
|
-
"version": "0.15.
|
|
3
|
+
"version": "0.15.202510151",
|
|
4
4
|
"description": "AWS IAM Data",
|
|
5
5
|
"repository": {
|
|
6
6
|
"type": "git",
|
|
7
7
|
"url": "git+https://github.com/cloud-copilot/iam-data.git"
|
|
8
8
|
},
|
|
9
|
-
"updatedAt": "2025-10-
|
|
9
|
+
"updatedAt": "2025-10-15T04:46:38.452Z",
|
|
10
10
|
"exports": {
|
|
11
11
|
".": {
|
|
12
12
|
"import": "./dist/esm/index.js",
|