@cloud-copilot/iam-data 0.15.202511181 → 0.15.202511221

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (60) hide show
  1. package/data/actions/application-signals.json +8 -0
  2. package/data/actions/autoscaling.json +16 -0
  3. package/data/actions/backup.json +170 -2
  4. package/data/actions/bedrock-agentcore.json +2 -1
  5. package/data/actions/bedrock.json +31 -2
  6. package/data/actions/braket.json +62 -0
  7. package/data/actions/cloudformation.json +21 -0
  8. package/data/actions/cloudtrail.json +35 -8
  9. package/data/actions/cost-optimization-hub.json +8 -0
  10. package/data/actions/dms.json +27 -0
  11. package/data/actions/ecs.json +90 -0
  12. package/data/actions/glue.json +38 -1
  13. package/data/actions/guardduty.json +24 -0
  14. package/data/actions/iam.json +158 -5
  15. package/data/actions/identitystore.json +76 -27
  16. package/data/actions/imagebuilder.json +40 -0
  17. package/data/actions/invoicing.json +56 -0
  18. package/data/actions/kafka.json +57 -1
  19. package/data/actions/kinesisvideo.json +30 -0
  20. package/data/actions/lakeformation.json +16 -0
  21. package/data/actions/license-manager.json +217 -3
  22. package/data/actions/logs.json +98 -0
  23. package/data/actions/mgn.json +54 -1
  24. package/data/actions/notifications-contacts.json +2 -1
  25. package/data/actions/odb.json +22 -0
  26. package/data/actions/organizations.json +117 -0
  27. package/data/actions/partnercentral.json +307 -3
  28. package/data/actions/pricingplanmanager.json +66 -0
  29. package/data/actions/quicksight.json +9 -0
  30. package/data/actions/s3.json +65 -1
  31. package/data/actions/secretsmanager.json +42 -20
  32. package/data/actions/securityhub.json +30 -0
  33. package/data/actions/signin.json +16 -0
  34. package/data/actions/tag.json +8 -0
  35. package/data/conditionKeys/bedrock-agentcore.json +5 -0
  36. package/data/conditionKeys/bedrock.json +5 -0
  37. package/data/conditionKeys/dynamodb.json +21 -1
  38. package/data/conditionKeys/glue.json +1 -1
  39. package/data/conditionKeys/iam.json +20 -0
  40. package/data/conditionKeys/identitystore.json +26 -1
  41. package/data/conditionKeys/organizations.json +10 -0
  42. package/data/conditionKeys/partnercentral.json +7 -2
  43. package/data/conditionKeys/pricingplanmanager.json +1 -0
  44. package/data/conditionKeys/s3.json +5 -0
  45. package/data/conditionKeys/secretsmanager.json +15 -0
  46. package/data/conditionPatterns.json +1 -0
  47. package/data/resourceTypes/backup.json +7 -0
  48. package/data/resourceTypes/braket.json +7 -0
  49. package/data/resourceTypes/iam.json +7 -0
  50. package/data/resourceTypes/invoicing.json +7 -0
  51. package/data/resourceTypes/license-manager.json +14 -0
  52. package/data/resourceTypes/logs.json +7 -0
  53. package/data/resourceTypes/organizations.json +7 -0
  54. package/data/resourceTypes/partnercentral.json +21 -0
  55. package/data/resourceTypes/pricingplanmanager.json +6 -0
  56. package/data/resourceTypes/s3.json +11 -2
  57. package/data/resourceTypes/secretsmanager.json +2 -1
  58. package/data/serviceNames.json +2 -1
  59. package/data/services.json +1 -0
  60. package/package.json +2 -2
@@ -89,6 +89,35 @@
89
89
  ],
90
90
  "dependentActions": []
91
91
  },
92
+ "createlicenseassetgroup": {
93
+ "name": "CreateLicenseAssetGroup",
94
+ "description": "Grants permission to create a license asset group",
95
+ "accessLevel": "Write",
96
+ "resourceTypes": [
97
+ {
98
+ "name": "license-asset-ruleset",
99
+ "required": true,
100
+ "conditionKeys": [],
101
+ "dependentActions": []
102
+ }
103
+ ],
104
+ "conditionKeys": [
105
+ "aws:RequestTag/${TagKey}",
106
+ "aws:TagKeys"
107
+ ],
108
+ "dependentActions": []
109
+ },
110
+ "createlicenseassetruleset": {
111
+ "name": "CreateLicenseAssetRuleset",
112
+ "description": "Grants permission to create a license asset ruleset",
113
+ "accessLevel": "Write",
114
+ "resourceTypes": [],
115
+ "conditionKeys": [
116
+ "aws:RequestTag/${TagKey}",
117
+ "aws:TagKeys"
118
+ ],
119
+ "dependentActions": []
120
+ },
92
121
  "createlicenseconfiguration": {
93
122
  "name": "CreateLicenseConfiguration",
94
123
  "description": "Grants permission to create a new license configuration",
@@ -110,7 +139,7 @@
110
139
  },
111
140
  "createlicensemanagerreportgenerator": {
112
141
  "name": "CreateLicenseManagerReportGenerator",
113
- "description": "Grants permission to create a report generator for a license configuration",
142
+ "description": "Grants permission to create a report generator for supported license manager resources",
114
143
  "accessLevel": "Write",
115
144
  "resourceTypes": [],
116
145
  "conditionKeys": [
@@ -179,6 +208,36 @@
179
208
  "conditionKeys": [],
180
209
  "dependentActions": []
181
210
  },
211
+ "deletelicenseassetgroup": {
212
+ "name": "DeleteLicenseAssetGroup",
213
+ "description": "Grants permission to delete a license asset group",
214
+ "accessLevel": "Write",
215
+ "resourceTypes": [
216
+ {
217
+ "name": "license-asset-group",
218
+ "required": true,
219
+ "conditionKeys": [],
220
+ "dependentActions": []
221
+ }
222
+ ],
223
+ "conditionKeys": [],
224
+ "dependentActions": []
225
+ },
226
+ "deletelicenseassetruleset": {
227
+ "name": "DeleteLicenseAssetRuleset",
228
+ "description": "Grants permission to delete a license asset ruleset",
229
+ "accessLevel": "Write",
230
+ "resourceTypes": [
231
+ {
232
+ "name": "license-asset-ruleset",
233
+ "required": true,
234
+ "conditionKeys": [],
235
+ "dependentActions": []
236
+ }
237
+ ],
238
+ "conditionKeys": [],
239
+ "dependentActions": []
240
+ },
182
241
  "deletelicenseconfiguration": {
183
242
  "name": "DeleteLicenseConfiguration",
184
243
  "description": "Grants permission to permanently delete a license configuration",
@@ -263,6 +322,36 @@
263
322
  "conditionKeys": [],
264
323
  "dependentActions": []
265
324
  },
325
+ "getlicenseassetgroup": {
326
+ "name": "GetLicenseAssetGroup",
327
+ "description": "Grants permission to get a license asset group",
328
+ "accessLevel": "Read",
329
+ "resourceTypes": [
330
+ {
331
+ "name": "license-asset-group",
332
+ "required": true,
333
+ "conditionKeys": [],
334
+ "dependentActions": []
335
+ }
336
+ ],
337
+ "conditionKeys": [],
338
+ "dependentActions": []
339
+ },
340
+ "getlicenseassetruleset": {
341
+ "name": "GetLicenseAssetRuleset",
342
+ "description": "Grants permission to get a license asset ruleset",
343
+ "accessLevel": "Read",
344
+ "resourceTypes": [
345
+ {
346
+ "name": "license-asset-ruleset",
347
+ "required": true,
348
+ "conditionKeys": [],
349
+ "dependentActions": []
350
+ }
351
+ ],
352
+ "conditionKeys": [],
353
+ "dependentActions": []
354
+ },
266
355
  "getlicenseconfiguration": {
267
356
  "name": "GetLicenseConfiguration",
268
357
  "description": "Grants permission to get a license configuration",
@@ -324,6 +413,21 @@
324
413
  "conditionKeys": [],
325
414
  "dependentActions": []
326
415
  },
416
+ "listassetsforlicenseassetgroup": {
417
+ "name": "ListAssetsForLicenseAssetGroup",
418
+ "description": "Grants permission to list assets for a license asset group",
419
+ "accessLevel": "List",
420
+ "resourceTypes": [
421
+ {
422
+ "name": "license-asset-group",
423
+ "required": true,
424
+ "conditionKeys": [],
425
+ "dependentActions": []
426
+ }
427
+ ],
428
+ "conditionKeys": [],
429
+ "dependentActions": []
430
+ },
327
431
  "listassociationsforlicenseconfiguration": {
328
432
  "name": "ListAssociationsForLicenseConfiguration",
329
433
  "description": "Grants permission to list associations for a selected license configuration",
@@ -362,10 +466,48 @@
362
466
  "conditionKeys": [],
363
467
  "dependentActions": []
364
468
  },
469
+ "listlicenseassetgroups": {
470
+ "name": "ListLicenseAssetGroups",
471
+ "description": "Grants permission to list license asset groups",
472
+ "accessLevel": "List",
473
+ "resourceTypes": [
474
+ {
475
+ "name": "license-asset-group",
476
+ "required": false,
477
+ "conditionKeys": [],
478
+ "dependentActions": []
479
+ }
480
+ ],
481
+ "conditionKeys": [],
482
+ "dependentActions": []
483
+ },
484
+ "listlicenseassetrulesets": {
485
+ "name": "ListLicenseAssetRulesets",
486
+ "description": "Grants permission to list license asset rulesets",
487
+ "accessLevel": "List",
488
+ "resourceTypes": [
489
+ {
490
+ "name": "license-asset-ruleset",
491
+ "required": false,
492
+ "conditionKeys": [],
493
+ "dependentActions": []
494
+ }
495
+ ],
496
+ "conditionKeys": [],
497
+ "dependentActions": []
498
+ },
365
499
  "listlicenseconfigurations": {
366
500
  "name": "ListLicenseConfigurations",
367
501
  "description": "Grants permission to list license configurations",
368
- "accessLevel": "Read",
502
+ "accessLevel": "List",
503
+ "resourceTypes": [],
504
+ "conditionKeys": [],
505
+ "dependentActions": []
506
+ },
507
+ "listlicenseconfigurationsfororganization": {
508
+ "name": "ListLicenseConfigurationsForOrganization",
509
+ "description": "Grants permission to list license configurations for organization",
510
+ "accessLevel": "List",
369
511
  "resourceTypes": [],
370
512
  "conditionKeys": [],
371
513
  "dependentActions": []
@@ -481,6 +623,18 @@
481
623
  "conditionKeys": [],
482
624
  "dependentActions": []
483
625
  },
626
+ {
627
+ "name": "license-asset-group",
628
+ "required": false,
629
+ "conditionKeys": [],
630
+ "dependentActions": []
631
+ },
632
+ {
633
+ "name": "license-asset-ruleset",
634
+ "required": false,
635
+ "conditionKeys": [],
636
+ "dependentActions": []
637
+ },
484
638
  {
485
639
  "name": "license-configuration",
486
640
  "required": false,
@@ -552,6 +706,18 @@
552
706
  "conditionKeys": [],
553
707
  "dependentActions": []
554
708
  },
709
+ {
710
+ "name": "license-asset-group",
711
+ "required": false,
712
+ "conditionKeys": [],
713
+ "dependentActions": []
714
+ },
715
+ {
716
+ "name": "license-asset-ruleset",
717
+ "required": false,
718
+ "conditionKeys": [],
719
+ "dependentActions": []
720
+ },
555
721
  {
556
722
  "name": "license-configuration",
557
723
  "required": false,
@@ -588,6 +754,18 @@
588
754
  "conditionKeys": [],
589
755
  "dependentActions": []
590
756
  },
757
+ {
758
+ "name": "license-asset-group",
759
+ "required": false,
760
+ "conditionKeys": [],
761
+ "dependentActions": []
762
+ },
763
+ {
764
+ "name": "license-asset-ruleset",
765
+ "required": false,
766
+ "conditionKeys": [],
767
+ "dependentActions": []
768
+ },
591
769
  {
592
770
  "name": "license-configuration",
593
771
  "required": false,
@@ -606,6 +784,42 @@
606
784
  ],
607
785
  "dependentActions": []
608
786
  },
787
+ "updatelicenseassetgroup": {
788
+ "name": "UpdateLicenseAssetGroup",
789
+ "description": "Grants permission to update a license asset group",
790
+ "accessLevel": "Write",
791
+ "resourceTypes": [
792
+ {
793
+ "name": "license-asset-group",
794
+ "required": true,
795
+ "conditionKeys": [],
796
+ "dependentActions": []
797
+ },
798
+ {
799
+ "name": "license-asset-ruleset",
800
+ "required": true,
801
+ "conditionKeys": [],
802
+ "dependentActions": []
803
+ }
804
+ ],
805
+ "conditionKeys": [],
806
+ "dependentActions": []
807
+ },
808
+ "updatelicenseassetruleset": {
809
+ "name": "UpdateLicenseAssetRuleset",
810
+ "description": "Grants permission to update a license asset ruleset",
811
+ "accessLevel": "Write",
812
+ "resourceTypes": [
813
+ {
814
+ "name": "license-asset-ruleset",
815
+ "required": true,
816
+ "conditionKeys": [],
817
+ "dependentActions": []
818
+ }
819
+ ],
820
+ "conditionKeys": [],
821
+ "dependentActions": []
822
+ },
609
823
  "updatelicenseconfiguration": {
610
824
  "name": "UpdateLicenseConfiguration",
611
825
  "description": "Grants permission to update an existing license configuration",
@@ -623,7 +837,7 @@
623
837
  },
624
838
  "updatelicensemanagerreportgenerator": {
625
839
  "name": "UpdateLicenseManagerReportGenerator",
626
- "description": "Grants permission to update a report generator for a license configuration",
840
+ "description": "Grants permission to update a report generator for supported license manager resources",
627
841
  "accessLevel": "Write",
628
842
  "resourceTypes": [
629
843
  {
@@ -127,6 +127,24 @@
127
127
  "conditionKeys": [],
128
128
  "dependentActions": []
129
129
  },
130
+ "createscheduledquery": {
131
+ "name": "CreateScheduledQuery",
132
+ "description": "Grants permission to create a scheduled query",
133
+ "accessLevel": "Write",
134
+ "resourceTypes": [
135
+ {
136
+ "name": "scheduled-query",
137
+ "required": true,
138
+ "conditionKeys": [],
139
+ "dependentActions": []
140
+ }
141
+ ],
142
+ "conditionKeys": [
143
+ "aws:TagKeys",
144
+ "aws:RequestTag/${TagKey}"
145
+ ],
146
+ "dependentActions": []
147
+ },
130
148
  "deleteaccountpolicy": {
131
149
  "name": "DeleteAccountPolicy",
132
150
  "description": "Grants permission to delete an account policy",
@@ -341,6 +359,21 @@
341
359
  "conditionKeys": [],
342
360
  "dependentActions": []
343
361
  },
362
+ "deletescheduledquery": {
363
+ "name": "DeleteScheduledQuery",
364
+ "description": "Grants permission to delete a scheduled query",
365
+ "accessLevel": "Write",
366
+ "resourceTypes": [
367
+ {
368
+ "name": "scheduled-query",
369
+ "required": true,
370
+ "conditionKeys": [],
371
+ "dependentActions": []
372
+ }
373
+ ],
374
+ "conditionKeys": [],
375
+ "dependentActions": []
376
+ },
344
377
  "deletesubscriptionfilter": {
345
378
  "name": "DeleteSubscriptionFilter",
346
379
  "description": "Grants permission to delete a subscription filter associated with the specified log group",
@@ -717,6 +750,36 @@
717
750
  "conditionKeys": [],
718
751
  "dependentActions": []
719
752
  },
753
+ "getscheduledquery": {
754
+ "name": "GetScheduledQuery",
755
+ "description": "Grants permission to retrieve information about a specified scheduled query",
756
+ "accessLevel": "Read",
757
+ "resourceTypes": [
758
+ {
759
+ "name": "scheduled-query",
760
+ "required": true,
761
+ "conditionKeys": [],
762
+ "dependentActions": []
763
+ }
764
+ ],
765
+ "conditionKeys": [],
766
+ "dependentActions": []
767
+ },
768
+ "getscheduledqueryhistory": {
769
+ "name": "GetScheduledQueryHistory",
770
+ "description": "Grants permission to return the execution history for a specified scheduled query",
771
+ "accessLevel": "Read",
772
+ "resourceTypes": [
773
+ {
774
+ "name": "scheduled-query",
775
+ "required": true,
776
+ "conditionKeys": [],
777
+ "dependentActions": []
778
+ }
779
+ ],
780
+ "conditionKeys": [],
781
+ "dependentActions": []
782
+ },
720
783
  "gettransformer": {
721
784
  "name": "GetTransformer",
722
785
  "description": "Grants permission to return transformer associated with the specified log group",
@@ -822,6 +885,14 @@
822
885
  "conditionKeys": [],
823
886
  "dependentActions": []
824
887
  },
888
+ "listscheduledqueries": {
889
+ "name": "ListScheduledQueries",
890
+ "description": "Grants permission to return all scheduled queries that are associated with the AWS account making the request",
891
+ "accessLevel": "List",
892
+ "resourceTypes": [],
893
+ "conditionKeys": [],
894
+ "dependentActions": []
895
+ },
825
896
  "listtagsforresource": {
826
897
  "name": "ListTagsForResource",
827
898
  "description": "Grants permission to list the tags for the specified resource",
@@ -1213,6 +1284,12 @@
1213
1284
  "required": false,
1214
1285
  "conditionKeys": [],
1215
1286
  "dependentActions": []
1287
+ },
1288
+ {
1289
+ "name": "scheduled-query",
1290
+ "required": false,
1291
+ "conditionKeys": [],
1292
+ "dependentActions": []
1216
1293
  }
1217
1294
  ],
1218
1295
  "conditionKeys": [
@@ -1310,6 +1387,12 @@
1310
1387
  "required": false,
1311
1388
  "conditionKeys": [],
1312
1389
  "dependentActions": []
1390
+ },
1391
+ {
1392
+ "name": "scheduled-query",
1393
+ "required": false,
1394
+ "conditionKeys": [],
1395
+ "dependentActions": []
1313
1396
  }
1314
1397
  ],
1315
1398
  "conditionKeys": [
@@ -1385,5 +1468,20 @@
1385
1468
  "resourceTypes": [],
1386
1469
  "conditionKeys": [],
1387
1470
  "dependentActions": []
1471
+ },
1472
+ "updatescheduledquery": {
1473
+ "name": "UpdateScheduledQuery",
1474
+ "description": "Grants permission to update a scheduled query",
1475
+ "accessLevel": "Write",
1476
+ "resourceTypes": [
1477
+ {
1478
+ "name": "scheduled-query",
1479
+ "required": true,
1480
+ "conditionKeys": [],
1481
+ "dependentActions": []
1482
+ }
1483
+ ],
1484
+ "conditionKeys": [],
1485
+ "dependentActions": []
1388
1486
  }
1389
1487
  }
@@ -726,6 +726,14 @@
726
726
  "conditionKeys": [],
727
727
  "dependentActions": []
728
728
  },
729
+ "listimportfileenrichments": {
730
+ "name": "ListImportFileEnrichments",
731
+ "description": "Grants permission to list the import file enrichment tasks",
732
+ "accessLevel": "List",
733
+ "resourceTypes": [],
734
+ "conditionKeys": [],
735
+ "dependentActions": []
736
+ },
729
737
  "listimports": {
730
738
  "name": "ListImports",
731
739
  "description": "Grants permission to list the import tasks",
@@ -900,6 +908,21 @@
900
908
  "conditionKeys": [],
901
909
  "dependentActions": []
902
910
  },
911
+ "listnetworkmigrationmappingupdates": {
912
+ "name": "ListNetworkMigrationMappingUpdates",
913
+ "description": "Grants permission to list network migration mapping updates",
914
+ "accessLevel": "List",
915
+ "resourceTypes": [
916
+ {
917
+ "name": "NetworkMigrationDefinitionResource",
918
+ "required": true,
919
+ "conditionKeys": [],
920
+ "dependentActions": []
921
+ }
922
+ ],
923
+ "conditionKeys": [],
924
+ "dependentActions": []
925
+ },
903
926
  "listnetworkmigrationmappings": {
904
927
  "name": "ListNetworkMigrationMappings",
905
928
  "description": "Grants permission to list network migration mappings",
@@ -1358,7 +1381,10 @@
1358
1381
  "description": "Grants permission to create an import task",
1359
1382
  "accessLevel": "Write",
1360
1383
  "resourceTypes": [],
1361
- "conditionKeys": [],
1384
+ "conditionKeys": [
1385
+ "aws:RequestTag/${TagKey}",
1386
+ "aws:TagKeys"
1387
+ ],
1362
1388
  "dependentActions": [
1363
1389
  "ec2:CreateLaunchTemplateVersion",
1364
1390
  "ec2:DescribeLaunchTemplateVersions",
@@ -1372,6 +1398,18 @@
1372
1398
  "s3:PutObject"
1373
1399
  ]
1374
1400
  },
1401
+ "startimportfileenrichment": {
1402
+ "name": "StartImportFileEnrichment",
1403
+ "description": "Grants permission to start import file enrichment",
1404
+ "accessLevel": "Write",
1405
+ "resourceTypes": [],
1406
+ "conditionKeys": [],
1407
+ "dependentActions": [
1408
+ "ec2:DescribeSecurityGroups",
1409
+ "ec2:DescribeSubnets",
1410
+ "ec2:DescribeVpcs"
1411
+ ]
1412
+ },
1375
1413
  "startnetworkmigrationanalysis": {
1376
1414
  "name": "StartNetworkMigrationAnalysis",
1377
1415
  "description": "Grants permission to start a network migration analysis",
@@ -1689,6 +1727,21 @@
1689
1727
  "conditionKeys": [],
1690
1728
  "dependentActions": []
1691
1729
  },
1730
+ "startnetworkmigrationmappingupdate": {
1731
+ "name": "StartNetworkMigrationMappingUpdate",
1732
+ "description": "Grants permission to start a network migration mapping update",
1733
+ "accessLevel": "Write",
1734
+ "resourceTypes": [
1735
+ {
1736
+ "name": "NetworkMigrationDefinitionResource",
1737
+ "required": true,
1738
+ "conditionKeys": [],
1739
+ "dependentActions": []
1740
+ }
1741
+ ],
1742
+ "conditionKeys": [],
1743
+ "dependentActions": []
1744
+ },
1692
1745
  "startreplication": {
1693
1746
  "name": "StartReplication",
1694
1747
  "description": "Grants permission to start replication",
@@ -21,7 +21,8 @@
21
21
  "resourceTypes": [],
22
22
  "conditionKeys": [
23
23
  "aws:TagKeys",
24
- "aws:RequestTag/${TagKey}"
24
+ "aws:RequestTag/${TagKey}",
25
+ "aws:ResourceTag/${TagKey}"
25
26
  ],
26
27
  "dependentActions": []
27
28
  },
@@ -807,5 +807,27 @@
807
807
  ],
808
808
  "conditionKeys": [],
809
809
  "dependentActions": []
810
+ },
811
+ "updateoutboundintegration": {
812
+ "name": "UpdateOutboundIntegration",
813
+ "isPermissionOnly": true,
814
+ "description": "Grants permission to update an Outbound Integration",
815
+ "accessLevel": "Write",
816
+ "resourceTypes": [
817
+ {
818
+ "name": "cloud-autonomous-vm-cluster",
819
+ "required": true,
820
+ "conditionKeys": [],
821
+ "dependentActions": []
822
+ },
823
+ {
824
+ "name": "cloud-vm-cluster",
825
+ "required": true,
826
+ "conditionKeys": [],
827
+ "dependentActions": []
828
+ }
829
+ ],
830
+ "conditionKeys": [],
831
+ "dependentActions": []
810
832
  }
811
833
  }