@cloud-copilot/iam-data 0.15.202511181 → 0.15.202511221

package/data/actions/identitystore.json

@@ -8,13 +8,16 @@
         "name": "Identitystore",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
-    "conditionKeys": [],
-    "dependentActions": [
-      "kms:Decrypt"
-    ]
+    "conditionKeys": [
+      "identitystore:PrimaryRegion",
+      "identitystore:GroupExternalIdIssuers"
+    ],
+    "dependentActions": []
   },
   "creategroupmembership": {
     "name": "CreateGroupMembership",
@@ -42,7 +45,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion"
+    ],
     "dependentActions": []
   },
   "createidentitystore": {
@@ -67,13 +72,17 @@
         "name": "Identitystore",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
-    "conditionKeys": [],
-    "dependentActions": [
-      "kms:Decrypt"
-    ]
+    "conditionKeys": [
+      "identitystore:PrimaryRegion",
+      "identitystore:UserExternalIdIssuers",
+      "identitystore:ReservedUserId"
+    ],
+    "dependentActions": []
   },
   "deletegroup": {
     "name": "DeleteGroup",
@@ -95,7 +104,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion",
+      "identitystore:GroupExternalIdIssuers"
+    ],
     "dependentActions": []
   },
   "deletegroupmembership": {
@@ -130,7 +142,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion"
+    ],
     "dependentActions": []
   },
   "deleteidentitystore": {
@@ -161,7 +175,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion",
+      "identitystore:UserExternalIdIssuers"
+    ],
     "dependentActions": []
   },
   "describegroup": {
@@ -184,7 +201,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion",
+      "identitystore:GroupExternalIdIssuers"
+    ],
     "dependentActions": []
   },
   "describegroupmembership": {
@@ -219,7 +239,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion"
+    ],
     "dependentActions": []
   },
   "describeuser": {
@@ -242,7 +264,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion",
+      "identitystore:UserExternalIdIssuers"
+    ],
     "dependentActions": []
   },
   "getgroupid": {
@@ -265,7 +290,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion"
+    ],
     "dependentActions": []
   },
   "getgroupmembershipid": {
@@ -300,7 +327,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion"
+    ],
     "dependentActions": []
   },
   "getuserid": {
@@ -323,7 +352,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion"
+    ],
     "dependentActions": []
   },
   "ismemberingroups": {
@@ -358,7 +389,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion"
+    ],
     "dependentActions": []
   },
   "listgroupmemberships": {
@@ -387,7 +420,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion"
+    ],
     "dependentActions": []
   },
   "listgroupmembershipsformember": {
@@ -416,7 +451,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion"
+    ],
     "dependentActions": []
   },
   "listgroups": {
@@ -439,7 +476,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion",
+      "identitystore:GroupExternalIdIssuers"
+    ],
     "dependentActions": []
   },
   "listusers": {
@@ -462,7 +502,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion",
+      "identitystore:UserExternalIdIssuers"
+    ],
     "dependentActions": []
   },
   "updategroup": {
@@ -485,7 +528,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion",
+      "identitystore:GroupExternalIdIssuers"
+    ],
     "dependentActions": []
   },
   "updateidentitystore": {
@@ -521,7 +567,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion",
+      "identitystore:UserExternalIdIssuers"
+    ],
     "dependentActions": []
   }
 }

package/data/actions/imagebuilder.json

@@ -405,6 +405,31 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "distributeimage": {
+    "name": "DistributeImage",
+    "description": "Grants permission to distribute an image",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "image",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "ec2:DescribeImages",
+          "iam:PassRole",
+          "imagebuilder:GetDistributionConfiguration",
+          "imagebuilder:GetImage",
+          "imagebuilder:TagResource",
+          "ssm:GetParameter"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "getcomponent": {
     "name": "GetComponent",
     "description": "Grants permission to view details about a component",
@@ -1130,6 +1155,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "retryimage": {
+    "name": "RetryImage",
+    "description": "Grants permission to retry an image creation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "image",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "sendworkflowstepaction": {
     "name": "SendWorkflowStepAction",
     "description": "Grants permission to send an action to a workflow step",

package/data/actions/invoicing.json

@@ -18,6 +18,16 @@
     ],
     "dependentActions": []
   },
+  "createprocurementportalpreference": {
+    "name": "CreateProcurementPortalPreference",
+    "description": "Grants permission to create a procurement portal preference",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deleteinvoiceunit": {
     "name": "DeleteInvoiceUnit",
     "description": "Grants permission to update an invoice unit for your organization",
@@ -35,6 +45,16 @@
     ],
     "dependentActions": []
   },
+  "deleteprocurementportalpreference": {
+    "name": "DeleteProcurementPortalPreference",
+    "description": "Grants permission to delete a procurement portal preference",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "getinvoicecorrection": {
     "name": "GetInvoiceCorrection",
     "isPermissionOnly": true,
@@ -76,6 +96,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getprocurementportalpreference": {
+    "name": "GetProcurementPortalPreference",
+    "description": "Grants permission to get a procurement portal preference",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listinvoicecorrections": {
     "name": "ListInvoiceCorrections",
     "isPermissionOnly": true,
@@ -101,6 +129,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listprocurementportalpreferences": {
+    "name": "ListProcurementPortalPreferences",
+    "description": "Grants permission to list procurement portal preferences for an account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list tags for a resource",
@@ -127,6 +163,16 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putprocurementportalpreference": {
+    "name": "PutProcurementPortalPreference",
+    "description": "Grants permission to update a procurement portal preference",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "startinvoicecorrection": {
     "name": "StartInvoiceCorrection",
     "isPermissionOnly": true,
@@ -189,5 +235,15 @@
       "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
+  },
+  "updateprocurementportalpreferencestatus": {
+    "name": "UpdateProcurementPortalPreferenceStatus",
+    "description": "Grants permission to update the status for a procurement portal preference",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
   }
 }

package/data/actions/kafka.json

@@ -344,6 +344,44 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describetopic": {
+    "name": "DescribeTopic",
+    "description": "Grants permission to return metadata details about a specific Kafka topic",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "topic",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kafka-cluster:Connect",
+      "kafka-cluster:DescribeTopic",
+      "kafka-cluster:DescribeTopicDynamicConfiguration"
+    ]
+  },
+  "describetopicpartitions": {
+    "name": "DescribeTopicPartitions",
+    "description": "Grants permission to list all partitions of a specific topic",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "topic",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kafka-cluster:Connect",
+      "kafka-cluster:DescribeTopic",
+      "kafka-cluster:DescribeTopicDynamicConfiguration"
+    ]
+  },
   "describevpcconnection": {
     "name": "DescribeVpcConnection",
     "description": "Grants permission to describe a MSK VPC connection",
@@ -535,6 +573,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listtopics": {
+    "name": "ListTopics",
+    "description": "Grants permission to list all Kafka topics for a specified MSK cluster",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kafka-cluster:Connect",
+      "kafka-cluster:DescribeTopic"
+    ]
+  },
   "listvpcconnections": {
     "name": "ListVpcConnections",
     "description": "Grants permission to list all MSK VPC connections that this account uses",
@@ -774,7 +830,7 @@
   },
   "updaterebalancing": {
     "name": "UpdateRebalancing",
-    "description": "Grants permission to update the rebalancing status of the MSK cluster",
+    "description": "Grants permission to update the intelligent rebalancing status of the MSK cluster",
     "accessLevel": "Write",
     "resourceTypes": [
       {

package/data/actions/kinesisvideo.json

@@ -215,6 +215,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describestreamstorageconfiguration": {
+    "name": "DescribeStreamStorageConfiguration",
+    "description": "Grants permission to describe the stream storage configuration of your Kinesis Video Stream",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "stream",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getclip": {
     "name": "GetClip",
     "description": "Grants permission to get a media clip from a video stream",
@@ -671,5 +686,20 @@
     ],
     "conditionKeys": [],
     "dependentActions": []
+  },
+  "updatestreamstorageconfiguration": {
+    "name": "UpdateStreamStorageConfiguration",
+    "description": "Grants permission to update the stream storage configuration of your Kinesis Video Stream",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "stream",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
   }
 }

package/data/actions/lakeformation.json

@@ -261,6 +261,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "gettemporarygluepartitioncredentials": {
+    "name": "GetTemporaryGluePartitionCredentials",
+    "description": "Grants permission to get temporary credentials to access Glue partition data through Lake Formation",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "gettemporarygluetablecredentials": {
+    "name": "GetTemporaryGlueTableCredentials",
+    "description": "Grants permission to get temporary credentials to access Glue table data through Lake Formation",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getworkunitresults": {
     "name": "GetWorkUnitResults",
     "description": "Grants permission to retrieve the results for the given work units",