@cloud-copilot/iam-data 0.15.202511261 → 0.15.202512061

package/data/actions/datazone.json

@@ -722,6 +722,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdataexportconfiguration": {
+    "name": "GetDataExportConfiguration",
+    "description": "Grants permission to retrieve DataZone catalog data export configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdataproduct": {
     "name": "GetDataProduct",
     "description": "Grants permission to get data product",
@@ -1407,6 +1415,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putdataexportconfiguration": {
+    "name": "PutDataExportConfiguration",
+    "description": "Grants permission to create and update DataZone catalog data export configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putdomainsharingpolicy": {
     "name": "PutDomainSharingPolicy",
     "isPermissionOnly": true,

package/data/actions/eks.json

@@ -115,6 +115,24 @@
     ],
     "dependentActions": []
   },
+  "createcapability": {
+    "name": "CreateCapability",
+    "description": "Grants permission to create a capability for an Amazon EKS cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createcluster": {
     "name": "CreateCluster",
     "description": "Grants permission to create an Amazon EKS cluster",
@@ -235,6 +253,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletecapability": {
+    "name": "DeleteCapability",
+    "description": "Grants permission to delete a capability from an Amazon EKS cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capability",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletecluster": {
     "name": "DeleteCluster",
     "description": "Grants permission to delete an Amazon EKS cluster",
@@ -371,6 +404,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describecapability": {
+    "name": "DescribeCapability",
+    "description": "Grants permission to describe a capability for an Amazon EKS cluster",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "capability",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describecluster": {
     "name": "DescribeCluster",
     "description": "Grants permission to retrieve descriptive information about an Amazon EKS cluster",
@@ -516,6 +564,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "capability",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "nodegroup",
         "required": false,
@@ -613,6 +667,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcapabilities": {
+    "name": "ListCapabilities",
+    "description": "Grants permission to list capabilities for an Amazon EKS cluster",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listclusters": {
     "name": "ListClusters",
     "description": "Grants permission to list the Amazon EKS clusters in your AWS account (in the specified or default region)",
@@ -745,6 +814,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "capability",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "cluster",
         "required": false,
@@ -802,6 +877,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "capability",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "nodegroup",
         "required": false,
@@ -873,6 +954,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "capability",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "cluster",
         "required": false,
@@ -939,6 +1026,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "capability",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "cluster",
         "required": false,
@@ -1023,6 +1116,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatecapability": {
+    "name": "UpdateCapability",
+    "description": "Grants permission to update a capability for an Amazon EKS cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capability",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateclusterconfig": {
     "name": "UpdateClusterConfig",
     "description": "Grants permission to update Amazon EKS cluster configurations (eg: API server endpoint access)",

package/data/actions/lambda.json

@@ -33,6 +33,21 @@
     ],
     "dependentActions": []
   },
+  "checkpointdurableexecution": {
+    "name": "CheckpointDurableExecution",
+    "description": "Grants permission to save the progress of an AWS Lambda durable execution",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "durable execution",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createalias": {
     "name": "CreateAlias",
     "description": "Grants permission to create an alias for a Lambda function version",
@@ -48,6 +63,30 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createcapacityprovider": {
+    "name": "CreateCapacityProvider",
+    "description": "Grants permission to create an AWS Lambda capacity provider",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capacityProvider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "iam:CreateServiceLinkedRole",
+          "iam:PassRole",
+          "kms:DescribeKey"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "lambda:SecurityGroupIds",
+      "lambda:SubnetIds"
+    ],
+    "dependentActions": []
+  },
   "createcodesigningconfig": {
     "name": "CreateCodeSigningConfig",
     "description": "Grants permission to create an AWS Lambda code signing config",
@@ -81,7 +120,8 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": [
-          "iam:PassRole"
+          "iam:PassRole",
+          "lambda:PassCapacityProvider"
         ]
       }
     ],
@@ -129,6 +169,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletecapacityprovider": {
+    "name": "DeleteCapacityProvider",
+    "description": "Grants permission to delete an AWS Lambda capacity provider",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capacityProvider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletecodesigningconfig": {
     "name": "DeleteCodeSigningConfig",
     "description": "Grants permission to delete an AWS Lambda code signing config",
@@ -330,6 +385,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getcapacityprovider": {
+    "name": "GetCapacityProvider",
+    "description": "Grants permission to view details about an AWS Lambda capacity provider",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "capacityProvider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getcodesigningconfig": {
     "name": "GetCodeSigningConfig",
     "description": "Grants permission to view details about an AWS Lambda code signing config",
@@ -345,6 +415,51 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdurableexecution": {
+    "name": "GetDurableExecution",
+    "description": "Grants permission to view details of an AWS Lambda durable execution",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "durable execution",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getdurableexecutionhistory": {
+    "name": "GetDurableExecutionHistory",
+    "description": "Grants permission to view execution history of an AWS Lambda durable execution",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "durable execution",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getdurableexecutionstate": {
+    "name": "GetDurableExecutionState",
+    "description": "Grants permission to view current state of an AWS Lambda durable execution",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "durable execution",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "geteventsourcemapping": {
     "name": "GetEventSourceMapping",
     "description": "Grants permission to view details about an AWS Lambda event source mapping",
@@ -452,6 +567,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getfunctionscalingconfig": {
+    "name": "GetFunctionScalingConfig",
+    "description": "Grants permission to view the scaling configuration of an AWS Lambda function running on a capacity provider",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "function",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getfunctionurlconfig": {
     "name": "GetFunctionUrlConfig",
     "description": "Grants permission to read function url configuration for a Lambda function",
@@ -619,6 +749,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcapacityproviders": {
+    "name": "ListCapacityProviders",
+    "description": "Grants permission to retrieve a list of AWS Lambda capacity providers",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcodesigningconfigs": {
     "name": "ListCodeSigningConfigs",
     "description": "Grants permission to retrieve a list of AWS Lambda code signing configs",
@@ -627,6 +765,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdurableexecutionsbyfunction": {
+    "name": "ListDurableExecutionsByFunction",
+    "description": "Grants permission to retrieve a list of AWS Lambda durable executions of an AWS Lambda function",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "function",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listeventsourcemappings": {
     "name": "ListEventSourceMappings",
     "description": "Grants permission to retrieve a list of AWS Lambda event source mappings",
@@ -667,6 +820,21 @@
     ],
     "dependentActions": []
   },
+  "listfunctionversionsbycapacityprovider": {
+    "name": "ListFunctionVersionsByCapacityProvider",
+    "description": "Grants permission to retrieve a list of AWS Lambda function versions by the capacity provider assigned",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "capacityProvider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listfunctions": {
     "name": "ListFunctions",
     "description": "Grants permission to retrieve a list of AWS Lambda functions, with the version-specific configuration of each function",
@@ -723,9 +891,15 @@
   },
   "listtags": {
     "name": "ListTags",
-    "description": "Grants permission to retrieve a list of tags for an AWS Lambda function, event source mapping or code signing configuration resource",
+    "description": "Grants permission to retrieve a list of tags for an AWS Lambda function, event source mapping, capacity provider, or code signing configuration resource",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "capacityProvider",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "code signing config",
         "required": false,
@@ -763,6 +937,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "passcapacityprovider": {
+    "name": "PassCapacityProvider",
+    "isPermissionOnly": true,
+    "description": "Grants permission to pass an AWS Lambda capacity provider to a service",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capacityProvider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "publishlayerversion": {
     "name": "PublishLayerVersion",
     "description": "Grants permission to create an AWS Lambda layer",
@@ -861,6 +1051,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putfunctionscalingconfig": {
+    "name": "PutFunctionScalingConfig",
+    "description": "Grants permission to update the scaling configuration of an AWS Lambda function running on a capacity provider",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "function",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putprovisionedconcurrencyconfig": {
     "name": "PutProvisionedConcurrencyConfig",
     "description": "Grants permission to configure provisioned concurrency for an AWS Lambda function's alias or version",
@@ -930,11 +1135,77 @@
     ],
     "dependentActions": []
   },
+  "senddurableexecutioncallbackfailure": {
+    "name": "SendDurableExecutionCallbackFailure",
+    "description": "Grants permission to send a failure response for a callback operation in an AWS Lambda durable execution",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "durable execution",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "senddurableexecutioncallbackheartbeat": {
+    "name": "SendDurableExecutionCallbackHeartbeat",
+    "description": "Grants permission to send a heartbeat for a callback operation in an AWS Lambda durable execution",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "durable execution",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "senddurableexecutioncallbacksuccess": {
+    "name": "SendDurableExecutionCallbackSuccess",
+    "description": "Grants permission to send a successful response for a callback operation in an AWS Lambda durable execution",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "durable execution",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stopdurableexecution": {
+    "name": "StopDurableExecution",
+    "description": "Grants permission to stop an AWS Lambda durable execution",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "durable execution",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
-    "description": "Grants permission to add tags to an AWS Lambda function, event source mapping or code signing configuration resource",
+    "description": "Grants permission to add tags to an AWS Lambda function, event source mapping, capacity provider, or code signing configuration resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "capacityProvider",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "code signing config",
         "required": false,
@@ -962,9 +1233,15 @@
   },
   "untagresource": {
     "name": "UntagResource",
-    "description": "Grants permission to remove tags from an AWS Lambda function, event source mapping or code signing configuration resource",
+    "description": "Grants permission to remove tags from an AWS Lambda function, event source mapping, capacity provider, or code signing configuration resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "capacityProvider",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "code signing config",
         "required": false,
@@ -1004,6 +1281,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatecapacityprovider": {
+    "name": "UpdateCapacityProvider",
+    "description": "Grants permission to update an AWS Lambda capacity provider",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capacityProvider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatecodesigningconfig": {
     "name": "UpdateCodeSigningConfig",
     "description": "Grants permission to update an AWS Lambda code signing config",