@cloud-copilot/iam-data 0.15.202510281 → 0.15.202511081

package/data/actions/cloudfront.json

@@ -83,14 +83,7 @@
     "name": "CreateAnycastIpList",
     "description": "Grants permission to create an Anycast static IP list",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "anycast-ip-list",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -101,14 +94,7 @@
     "name": "CreateCachePolicy",
     "description": "Grants permission to add a new cache policy to CloudFront",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "cache-policy",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -116,14 +102,7 @@
     "name": "CreateCloudFrontOriginAccessIdentity",
     "description": "Grants permission to create a new CloudFront origin access identity",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "origin-access-identity",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -142,14 +121,7 @@
     "name": "CreateContinuousDeploymentPolicy",
     "description": "Grants permission to add a new continuous-deployment policy to CloudFront",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "continuous-deployment-policy",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -157,14 +129,7 @@
     "name": "CreateDistribution",
     "description": "Grants permission to create a new web distribution",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "distribution",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": [
       "cloudfront:CreateConnectionGroup"
@@ -201,14 +166,7 @@
     "name": "CreateFunction",
     "description": "Grants permission to create a CloudFront function",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "function",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -285,14 +243,7 @@
     "name": "CreateOriginRequestPolicy",
     "description": "Grants permission to add a new origin request policy to CloudFront",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "origin-request-policy",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -308,14 +259,7 @@
     "name": "CreateRealtimeLogConfig",
     "description": "Grants permission to create a real-time log configuration",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "realtime-log-config",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -323,14 +267,7 @@
     "name": "CreateResponseHeadersPolicy",
     "description": "Grants permission to add a new response headers policy to CloudFront",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "response-headers-policy",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -347,14 +284,7 @@
     "name": "CreateStreamingDistribution",
     "description": "Grants permission to create a new RTMP distribution",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "streaming-distribution",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -362,14 +292,7 @@
     "name": "CreateStreamingDistributionWithTags",
     "description": "Grants permission to create a new RTMP distribution with tags",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "streaming-distribution",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -621,6 +544,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteresourcepolicy": {
+    "name": "DeleteResourcePolicy",
+    "description": "Grants permission to delete a resource's policy document",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "vpcorigin",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteresponseheaderspolicy": {
     "name": "DeleteResponseHeadersPolicy",
     "description": "Grants permission to delete a response headers policy",
@@ -1156,6 +1094,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getresourcepolicy": {
+    "name": "GetResourcePolicy",
+    "description": "Grants permission to get the information about a resource's policy document",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "vpcorigin",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getresponseheaderspolicy": {
     "name": "GetResponseHeadersPolicy",
     "description": "Grants permission to get the response headers policy",
@@ -1628,6 +1581,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putresourcepolicy": {
+    "name": "PutResourcePolicy",
+    "description": "Grants permission to update or create a resource's policy document",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "vpcorigin",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to a CloudFront resource",
@@ -1738,6 +1706,21 @@
     ],
     "dependentActions": []
   },
+  "updateanycastiplist": {
+    "name": "UpdateAnycastIpList",
+    "description": "Grants permission to update an Anycast static IP list",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "anycast-ip-list",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatecachepolicy": {
     "name": "UpdateCachePolicy",
     "description": "Grants permission to update a cache policy",

package/data/actions/cognito-idp.json

@@ -526,6 +526,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createterms": {
+    "name": "CreateTerms",
+    "description": "Grants permission to create terms and associate it with an app client",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "userpool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createuserimportjob": {
     "name": "CreateUserImportJob",
     "description": "Grants permission to create user CSV import jobs",
@@ -643,6 +658,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteterms": {
+    "name": "DeleteTerms",
+    "description": "Grants permission to delete terms for an app client",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "userpool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteuser": {
     "name": "DeleteUser",
     "description": "Grants permission to allow a user to delete one's self",
@@ -779,6 +809,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeterms": {
+    "name": "DescribeTerms",
+    "description": "Grants permission to get the detailed information about terms for an app client",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "userpool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeuserimportjob": {
     "name": "DescribeUserImportJob",
     "description": "Grants permission to describe any user import job",
@@ -1117,6 +1162,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listterms": {
+    "name": "ListTerms",
+    "description": "Grants permission to list all terms for a user pool",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "userpool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listuserimportjobs": {
     "name": "ListUserImportJobs",
     "description": "Grants permission to list all user import jobs",
@@ -1441,6 +1501,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateterms": {
+    "name": "UpdateTerms",
+    "description": "Grants permission to update terms for an app client",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "userpool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateuserattributes": {
     "name": "UpdateUserAttributes",
     "description": "Grants permission to allow a user to update a specific attribute (one at a time)",

package/data/actions/connect.json

@@ -163,6 +163,24 @@
     ],
     "dependentActions": []
   },
+  "associateemailaddressalias": {
+    "name": "AssociateEmailAddressAlias",
+    "description": "Grants permission to associate an alias with an email address resource in an Amazon Connect instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "email-address",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "connect:InstanceId"
+    ],
+    "dependentActions": []
+  },
   "associateflow": {
     "name": "AssociateFlow",
     "description": "Grants permission to associate a resource with a flow in an Amazon Connect instance",
@@ -2393,6 +2411,24 @@
       "iam:GetRolePolicy"
     ]
   },
+  "disassociateemailaddressalias": {
+    "name": "DisassociateEmailAddressAlias",
+    "description": "Grants permission to disassociate an alias from an email address resource in an Amazon Connect instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "email-address",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "connect:InstanceId"
+    ],
+    "dependentActions": []
+  },
   "disassociateflow": {
     "name": "DisassociateFlow",
     "description": "Grants permission to disassociate a resource from a flow in an Amazon Connect instance",
@@ -4968,6 +5004,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "email-address",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "evaluation-form",
         "required": false,
@@ -5170,6 +5212,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "email-address",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "evaluation-form",
         "required": false,