@cloud-copilot/iam-data 0.15.202510251 → 0.15.202511061

package/data/actions/aps.json

@@ -33,6 +33,24 @@
     ],
     "dependentActions": []
   },
+  "createanomalydetector": {
+    "name": "CreateAnomalyDetector",
+    "description": "Grants permission to create an anomaly detector",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createloggingconfiguration": {
     "name": "CreateLoggingConfiguration",
     "description": "Grants permission to create a logging configuration",
@@ -161,6 +179,29 @@
     ],
     "dependentActions": []
   },
+  "deleteanomalydetector": {
+    "name": "DeleteAnomalyDetector",
+    "description": "Grants permission to delete an anomaly detector",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "anomalydetector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workspace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deleteloggingconfiguration": {
     "name": "DeleteLoggingConfiguration",
     "description": "Grants permission to delete a logging configuration",
@@ -246,6 +287,23 @@
     ],
     "dependentActions": []
   },
+  "deletescraperloggingconfiguration": {
+    "name": "DeleteScraperLoggingConfiguration",
+    "description": "Grants permission to delete a scraper logging configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "scraper",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deleteworkspace": {
     "name": "DeleteWorkspace",
     "description": "Grants permission to delete a workspace",
@@ -280,6 +338,29 @@
     ],
     "dependentActions": []
   },
+  "describeanomalydetector": {
+    "name": "DescribeAnomalyDetector",
+    "description": "Grants permission to describe an anomaly detector",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "anomalydetector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workspace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "describeloggingconfiguration": {
     "name": "DescribeLoggingConfiguration",
     "description": "Grants permission to describe a logging configuration",
@@ -365,6 +446,23 @@
     ],
     "dependentActions": []
   },
+  "describescraperloggingconfiguration": {
+    "name": "DescribeScraperLoggingConfiguration",
+    "description": "Grants permission to describe a scraper logging configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "scraper",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "describeworkspace": {
     "name": "DescribeWorkspace",
     "description": "Grants permission to describe a workspace",
@@ -577,6 +675,23 @@
     ],
     "dependentActions": []
   },
+  "listanomalydetectors": {
+    "name": "ListAnomalyDetectors",
+    "description": "Grants permission to list anomaly detectors",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "workspace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "listrulegroupsnamespaces": {
     "name": "ListRuleGroupsNamespaces",
     "description": "Grants permission to list rule groups namespaces",
@@ -624,6 +739,12 @@
     "description": "Grants permission to list tags on an AMP resource",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "anomalydetector",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "rulegroupsnamespace",
         "required": false,
@@ -657,6 +778,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "previewanomalydetector": {
+    "name": "PreviewAnomalyDetector",
+    "description": "Grants permission to preview anomaly detection on AMP workspace metrics",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workspace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "putalertmanagerdefinition": {
     "name": "PutAlertManagerDefinition",
     "description": "Grants permission to update an alert manager definition",
@@ -691,6 +829,29 @@
     ],
     "dependentActions": []
   },
+  "putanomalydetector": {
+    "name": "PutAnomalyDetector",
+    "description": "Grants permission to update an anomaly detector",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "anomalydetector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workspace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "putresourcepolicy": {
     "name": "PutResourcePolicy",
     "description": "Grants permission to create and update workspace resource policy",
@@ -764,6 +925,12 @@
     "description": "Grants permission to tag an AMP resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "anomalydetector",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "rulegroupsnamespace",
         "required": false,
@@ -794,6 +961,12 @@
     "description": "Grants permission to untag an AMP resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "anomalydetector",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "rulegroupsnamespace",
         "required": false,
@@ -878,6 +1051,23 @@
     ],
     "dependentActions": []
   },
+  "updatescraperloggingconfiguration": {
+    "name": "UpdateScraperLoggingConfiguration",
+    "description": "Grants permission to put a scraper logging configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "scraper",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "updateworkspacealias": {
     "name": "UpdateWorkspaceAlias",
     "description": "Grants permission to modify the alias of existing AMP workspace",

package/data/actions/autoscaling.json

@@ -716,6 +716,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "launchinstances": {
+    "name": "LaunchInstances",
+    "description": "Grants permission to launch one or more EC2 instances in the specified Auto Scaling group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "autoScalingGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "autoscaling:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "putlifecyclehook": {
     "name": "PutLifecycleHook",
     "description": "Grants permission to create or update a lifecycle hook for the specified Auto Scaling Group",

package/data/actions/bedrock-agentcore.json

@@ -127,9 +127,7 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "bedrock-agentcore:subnets",
-      "bedrock-agentcore:securityGroups"
+      "aws:TagKeys"
     ],
     "dependentActions": [
       "iam:PassRole"
@@ -184,9 +182,7 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "bedrock-agentcore:subnets",
-      "bedrock-agentcore:securityGroups"
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -197,9 +193,7 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "bedrock-agentcore:subnets",
-      "bedrock-agentcore:securityGroups"
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -1642,16 +1636,13 @@
         "name": "runtime",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "bedrock-agentcore:subnets",
-      "bedrock-agentcore:securityGroups"
-    ],
-    "dependentActions": []
+    "conditionKeys": [],
+    "dependentActions": [
+      "iam:PassRole"
+    ]
   },
   "updateagentruntimeendpoint": {
     "name": "UpdateAgentRuntimeEndpoint",

package/data/actions/bedrock.json

@@ -2332,6 +2332,21 @@
     ],
     "dependentActions": []
   },
+  "invoketool": {
+    "name": "InvokeTool",
+    "description": "Grants permission to invoke the specified Bedrock tool to run inference",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "system-tool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listagentactiongroups": {
     "name": "ListAgentActionGroups",
     "description": "Grants permission to list action groups in an agent",

package/data/actions/cloudfront.json

@@ -83,14 +83,7 @@
     "name": "CreateAnycastIpList",
     "description": "Grants permission to create an Anycast static IP list",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "anycast-ip-list",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -101,14 +94,7 @@
     "name": "CreateCachePolicy",
     "description": "Grants permission to add a new cache policy to CloudFront",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "cache-policy",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -116,14 +102,7 @@
     "name": "CreateCloudFrontOriginAccessIdentity",
     "description": "Grants permission to create a new CloudFront origin access identity",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "origin-access-identity",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -142,14 +121,7 @@
     "name": "CreateContinuousDeploymentPolicy",
     "description": "Grants permission to add a new continuous-deployment policy to CloudFront",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "continuous-deployment-policy",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -157,14 +129,7 @@
     "name": "CreateDistribution",
     "description": "Grants permission to create a new web distribution",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "distribution",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": [
       "cloudfront:CreateConnectionGroup"
@@ -201,14 +166,7 @@
     "name": "CreateFunction",
     "description": "Grants permission to create a CloudFront function",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "function",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -285,14 +243,7 @@
     "name": "CreateOriginRequestPolicy",
     "description": "Grants permission to add a new origin request policy to CloudFront",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "origin-request-policy",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -308,14 +259,7 @@
     "name": "CreateRealtimeLogConfig",
     "description": "Grants permission to create a real-time log configuration",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "realtime-log-config",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -323,14 +267,7 @@
     "name": "CreateResponseHeadersPolicy",
     "description": "Grants permission to add a new response headers policy to CloudFront",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "response-headers-policy",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -347,14 +284,7 @@
     "name": "CreateStreamingDistribution",
     "description": "Grants permission to create a new RTMP distribution",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "streaming-distribution",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -362,14 +292,7 @@
     "name": "CreateStreamingDistributionWithTags",
     "description": "Grants permission to create a new RTMP distribution with tags",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "streaming-distribution",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -621,6 +544,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteresourcepolicy": {
+    "name": "DeleteResourcePolicy",
+    "description": "Grants permission to delete a resource's policy document",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "vpcorigin",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteresponseheaderspolicy": {
     "name": "DeleteResponseHeadersPolicy",
     "description": "Grants permission to delete a response headers policy",
@@ -1156,6 +1094,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getresourcepolicy": {
+    "name": "GetResourcePolicy",
+    "description": "Grants permission to get the information about a resource's policy document",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "vpcorigin",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getresponseheaderspolicy": {
     "name": "GetResponseHeadersPolicy",
     "description": "Grants permission to get the response headers policy",
@@ -1628,6 +1581,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putresourcepolicy": {
+    "name": "PutResourcePolicy",
+    "description": "Grants permission to update or create a resource's policy document",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "vpcorigin",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to a CloudFront resource",
@@ -1738,6 +1706,21 @@
     ],
     "dependentActions": []
   },
+  "updateanycastiplist": {
+    "name": "UpdateAnycastIpList",
+    "description": "Grants permission to update an Anycast static IP list",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "anycast-ip-list",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatecachepolicy": {
     "name": "UpdateCachePolicy",
     "description": "Grants permission to update a cache policy",