@cloud-copilot/iam-data 0.15.202511111 → 0.15.202511181

package/data/actions/airflow-serverless.json

@@ -0,0 +1,225 @@
+{
+  "createworkflow": {
+    "name": "CreateWorkflow",
+    "description": "Grants permission to create a new workflow",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "deleteworkflow": {
+    "name": "DeleteWorkflow",
+    "description": "Grants permission to delete a workflow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Workflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "gettaskinstance": {
+    "name": "GetTaskInstance",
+    "description": "Grants permission to retrieve the task details for a workflow run",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Workflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getworkflow": {
+    "name": "GetWorkflow",
+    "description": "Grants permission to retrieve details about a workflow",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Workflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getworkflowrun": {
+    "name": "GetWorkflowRun",
+    "description": "Grants permission to retrieve details about a workflow run",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Workflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list the tags for the specified resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Workflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "listtaskinstances": {
+    "name": "ListTaskInstances",
+    "description": "Grants permission to list the tasks for a workflow run",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Workflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listworkflowruns": {
+    "name": "ListWorkflowRuns",
+    "description": "Grants permission to list the workflow runs of a workflow",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Workflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listworkflowversions": {
+    "name": "ListWorkflowVersions",
+    "description": "Grants permission to list the workflow versions",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Workflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listworkflows": {
+    "name": "ListWorkflows",
+    "description": "Grants permission to list the workflows",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startworkflowrun": {
+    "name": "StartWorkflowRun",
+    "description": "Grants permission to start an on-demand workflow run for the workflow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Workflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stopworkflowrun": {
+    "name": "StopWorkflowRun",
+    "description": "Grants permission to stop a workflow run",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Workflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to tag the specified resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "Workflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to untag the specified resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "Workflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "updateworkflow": {
+    "name": "UpdateWorkflow",
+    "description": "Grants permission to update an existing workflow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Workflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

package/data/actions/appstream.json

@@ -83,6 +83,23 @@
     ],
     "dependentActions": []
   },
+  "associatesoftwaretoimagebuilder": {
+    "name": "AssociateSoftwareToImageBuilder",
+    "description": "Grants permission to associate license included application(s) with an existing image builder instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "image-builder",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "batchassociateuserstack": {
     "name": "BatchAssociateUserStack",
     "description": "Grants permission to associate the specified users with the specified stacks. Users in a user pool cannot be assigned to stacks with fleets that are joined to an Active Directory domain",
@@ -223,6 +240,16 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createexportimagetask": {
+    "name": "CreateExportImageTask",
+    "description": "Grants permission to create an export task for an AppStream 2.0 image",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "createfleet": {
     "name": "CreateFleet",
     "description": "Grants permission to create a fleet. A fleet is a group of streaming instances from which applications are launched and streamed to users",
@@ -288,6 +315,17 @@
     ],
     "dependentActions": []
   },
+  "createimportedimage": {
+    "name": "CreateImportedImage",
+    "description": "Grants permission to create an AppStream 2.0 image from an imported AMI",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createstack": {
     "name": "CreateStack",
     "description": "Grants permission to create a stack to start streaming applications to users. A stack consists of an associated fleet, user access policies, and storage configurations",
@@ -573,20 +611,7 @@
     "name": "DescribeAppBlockBuilderAppBlockAssociations",
     "description": "Grants permission to retrieve the associations that are associated with the specified app block builder or app block",
     "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "app-block",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
-      {
-        "name": "app-block-builder",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -606,24 +631,19 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeapplicenseusage": {
+    "name": "DescribeAppLicenseUsage",
+    "description": "Grants permission to retrieve license included application usage information",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeapplicationfleetassociations": {
     "name": "DescribeApplicationFleetAssociations",
     "description": "Grants permission to retrieve the associations that are associated with the specified application or fleet",
     "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "application",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
-      {
-        "name": "fleet",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -718,6 +738,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describesoftwareassociations": {
+    "name": "DescribeSoftwareAssociations",
+    "description": "Grants permission to retrieve license included application associations for a specified resource",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "image",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "image-builder",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describestacks": {
     "name": "DescribeStacks",
     "description": "Grants permission to retrieve a list that describes one or more specified stacks, if the stack names are provided. Otherwise, all stacks in the account are described",
@@ -753,14 +794,7 @@
     "name": "DescribeUserStackAssociations",
     "description": "Grants permission to retrieve a list that describes the UserStackAssociation objects",
     "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "stack",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -864,6 +898,23 @@
     ],
     "dependentActions": []
   },
+  "disassociatesoftwarefromimagebuilder": {
+    "name": "DisassociateSoftwareFromImageBuilder",
+    "description": "Grants permission to remove license included application(s) association(s) from an image builder instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "image-builder",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "enableuser": {
     "name": "EnableUser",
     "description": "Grants permission to enable a user in the user pool",
@@ -880,6 +931,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getexportimagetask": {
+    "name": "GetExportImageTask",
+    "description": "Grants permission to retrieve details of a specific export image task",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listassociatedfleets": {
     "name": "ListAssociatedFleets",
     "description": "Grants permission to retrieve the name of the fleet that is associated with the specified stack",
@@ -925,6 +984,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listexportimagetasks": {
+    "name": "ListExportImageTasks",
+    "description": "Grants permission to list export image tasks",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to retrieve a list of all tags for the specified AppStream 2.0 resource. The following resources can be tagged: Image builders, images, fleets, and stacks",
@@ -984,6 +1051,23 @@
     ],
     "dependentActions": []
   },
+  "startsoftwaredeploymenttoimagebuilder": {
+    "name": "StartSoftwareDeploymentToImageBuilder",
+    "description": "Grants permission to initiate license included applications deployment to an image builder instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "image-builder",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "stopappblockbuilder": {
     "name": "StopAppBlockBuilder",
     "description": "Grants permission to stop the specified app block builder",

package/data/actions/athena.json

@@ -551,6 +551,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getresourcedashboard": {
+    "name": "GetResourceDashboard",
+    "description": "Grants permission to get a Live UI/Persistence UI for a session",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workgroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "session",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getsession": {
     "name": "GetSession",
     "description": "Grants permission to get a session",
@@ -561,6 +582,33 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "session",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getsessionendpoint": {
+    "name": "GetSessionEndpoint",
+    "description": "Grants permission to get a connection endpoint and authentication token for a given session Id",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workgroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "session",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -576,6 +624,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "session",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -834,6 +888,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "workgroup",
         "required": true,
@@ -921,9 +981,18 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "session",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "stopcalculationexecution": {
@@ -973,6 +1042,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "workgroup",
         "required": true,
@@ -996,6 +1071,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "session",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -1018,6 +1099,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "workgroup",
         "required": true,

package/data/actions/billing.json

@@ -97,8 +97,17 @@
     "isPermissionOnly": true,
     "description": "Grants permission to perform queries on billing information",
     "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
+    "resourceTypes": [
+      {
+        "name": "billingview",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getbillingdetails": {
@@ -106,8 +115,17 @@
     "isPermissionOnly": true,
     "description": "Grants permission to view detailed line item billing information",
     "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
+    "resourceTypes": [
+      {
+        "name": "billingview",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getbillingnotifications": {

package/data/actions/cloudformation.json

@@ -680,6 +680,18 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "gethookresult": {
+    "name": "GetHookResult",
+    "description": "Grants permission to return detailed information about a specific hook invocation result",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "cloudformation:TypeArn"
+    ],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
   "getstackpolicy": {
     "name": "GetStackPolicy",
     "description": "Grants permission to return the stack policy for a specified stack",

package/data/actions/connect.json

@@ -4519,6 +4519,35 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "sendoutboundchatmessage": {
+    "name": "SendOutboundChatMessage",
+    "isPermissionOnly": true,
+    "description": "Grants permission to send outbound chat messages using the Amazon Connect API",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "instance",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "social-messaging:SendWhatsAppMessage",
+          "wisdom:GetMessageTemplate",
+          "wisdom:RenderMessageTemplate"
+        ]
+      },
+      {
+        "name": "phone-number",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "connect:InstanceId",
+      "connect:Subtype"
+    ],
+    "dependentActions": []
+  },
   "sendoutboundemail": {
     "name": "SendOutboundEmail",
     "description": "Grants permission to send outbound email using the Amazon Connect API",