@cloud-copilot/iam-data 0.15.202511271 → 0.15.202512061

package/data/actions/route53globalresolver.json

@@ -0,0 +1,700 @@
+{
+  "allowvendedlogdeliveryforresource": {
+    "name": "AllowVendedLogDeliveryForResource",
+    "isPermissionOnly": true,
+    "description": "Grants permission to deliver logs for a global resolver",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "global-resolver",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "associatehostedzone": {
+    "name": "AssociateHostedZone",
+    "description": "Grants permission to associate a resource to a hosted zone",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchcreatefirewallrule": {
+    "name": "BatchCreateFirewallRule",
+    "description": "Grants permission to create multiple firewall rules",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchdeletefirewallrule": {
+    "name": "BatchDeleteFirewallRule",
+    "description": "Grants permission to delete multiple firewall rules",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchupdatefirewallrule": {
+    "name": "BatchUpdateFirewallRule",
+    "description": "Grants permission to update multiple firewall rules",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createaccesssource": {
+    "name": "CreateAccessSource",
+    "description": "Grants permission to create an access source",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dns-view",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createaccesstoken": {
+    "name": "CreateAccessToken",
+    "description": "Grants permission to create an access token",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "access-token",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "creatednsview": {
+    "name": "CreateDNSView",
+    "description": "Grants permission to create a dns view",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dns-view",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createfirewalldomainlist": {
+    "name": "CreateFirewallDomainList",
+    "description": "Grants permission to create a firewall domain list",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "firewall-domain-list",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createfirewallrule": {
+    "name": "CreateFirewallRule",
+    "description": "Grants permission to create a firewall rule",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dns-view",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "firewall-domain-list",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createglobalresolver": {
+    "name": "CreateGlobalResolver",
+    "description": "Grants permission to create a global resolver",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "global-resolver",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "deleteaccesssource": {
+    "name": "DeleteAccessSource",
+    "description": "Grants permission to delete an access source",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "access-source",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteaccesstoken": {
+    "name": "DeleteAccessToken",
+    "description": "Grants permission to delete an access token",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "access-token",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletednsview": {
+    "name": "DeleteDNSView",
+    "description": "Grants permission to delete a dns view",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dns-view",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletefirewalldomainlist": {
+    "name": "DeleteFirewallDomainList",
+    "description": "Grants permission to delete a firewall domain list",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "firewall-domain-list",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletefirewallrule": {
+    "name": "DeleteFirewallRule",
+    "description": "Grants permission to delete a firewall rule",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteglobalresolver": {
+    "name": "DeleteGlobalResolver",
+    "description": "Grants permission to delete a global resolver",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "global-resolver",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "disablednsview": {
+    "name": "DisableDNSView",
+    "description": "Grants permission to disable a dns view",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dns-view",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "disassociatehostedzone": {
+    "name": "DisassociateHostedZone",
+    "description": "Grants permission to disassociate a hosted zone from a resource",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "enablednsview": {
+    "name": "EnableDNSView",
+    "description": "Grants permission to enable a dns view",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dns-view",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getaccesssource": {
+    "name": "GetAccessSource",
+    "description": "Grants permission to get an access source",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "access-source",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getaccesstoken": {
+    "name": "GetAccessToken",
+    "description": "Grants permission to get an access token",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "access-token",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getdnsview": {
+    "name": "GetDNSView",
+    "description": "Grants permission to get a dns view",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "dns-view",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getfirewalldomainlist": {
+    "name": "GetFirewallDomainList",
+    "description": "Grants permission to get a firewall domain list",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "firewall-domain-list",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getfirewallrule": {
+    "name": "GetFirewallRule",
+    "description": "Grants permission to get a firewall rule",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getglobalresolver": {
+    "name": "GetGlobalResolver",
+    "description": "Grants permission to get a global resolver",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "global-resolver",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "gethostedzoneassociation": {
+    "name": "GetHostedZoneAssociation",
+    "description": "Grants permission to get a hosted zone association",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getmanagedfirewalldomainlist": {
+    "name": "GetManagedFirewallDomainList",
+    "description": "Grants permission to get a managed firewall domain list",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "importfirewalldomains": {
+    "name": "ImportFirewallDomains",
+    "description": "Grants permission to import firewall domains from an S3 bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "firewall-domain-list",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "s3:GetObject",
+      "s3:ListBucket"
+    ]
+  },
+  "listaccesssources": {
+    "name": "ListAccessSources",
+    "description": "Grants permission to list access sources",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listaccesstokens": {
+    "name": "ListAccessTokens",
+    "description": "Grants permission to list access tokens",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listdnsviews": {
+    "name": "ListDNSViews",
+    "description": "Grants permission to list dns views",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listfirewalldomainlists": {
+    "name": "ListFirewallDomainLists",
+    "description": "Grants permission to list firewall domain lists",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listfirewalldomains": {
+    "name": "ListFirewallDomains",
+    "description": "Grants permission to list firewall domains",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "firewall-domain-list",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listfirewallrules": {
+    "name": "ListFirewallRules",
+    "description": "Grants permission to list firewall rules",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "dns-view",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listglobalresolvers": {
+    "name": "ListGlobalResolvers",
+    "description": "Grants permission to list global resolvers",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listhostedzoneassociations": {
+    "name": "ListHostedZoneAssociations",
+    "description": "Grants permission to list hosted zone associations",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listmanagedfirewalldomainlists": {
+    "name": "ListManagedFirewallDomainLists",
+    "description": "Grants permission to list managed firewall domain lists",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list tags for a resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "access-source",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "access-token",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "dns-view",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "firewall-domain-list",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "global-resolver",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to tag a resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "access-source",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "access-token",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "dns-view",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "firewall-domain-list",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "global-resolver",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to untag a resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "access-source",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "access-token",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "dns-view",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "firewall-domain-list",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "global-resolver",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "updateaccesssource": {
+    "name": "UpdateAccessSource",
+    "description": "Grants permission to update an access source",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "access-source",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateaccesstoken": {
+    "name": "UpdateAccessToken",
+    "description": "Grants permission to update an access token",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "access-token",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatednsview": {
+    "name": "UpdateDNSView",
+    "description": "Grants permission to update a dns view",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dns-view",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatefirewalldomains": {
+    "name": "UpdateFirewallDomains",
+    "description": "Grants permission to update firewall domains",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "firewall-domain-list",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatefirewallrule": {
+    "name": "UpdateFirewallRule",
+    "description": "Grants permission to update an firewall rule",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateglobalresolver": {
+    "name": "UpdateGlobalResolver",
+    "description": "Grants permission to update a global resolver",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "global-resolver",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatehostedzoneassociation": {
+    "name": "UpdateHostedZoneAssociation",
+    "description": "Grants permission to update a hosted zone association",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

package/data/actions/s3.json

@@ -274,6 +274,7 @@
           "s3tables:CreateTable",
           "s3tables:CreateTableBucket",
           "s3tables:GetTable",
+          "s3tables:PutTableBucketPolicy",
           "s3tables:PutTableEncryption",
           "s3tables:PutTablePolicy"
         ]