@cloud-copilot/iam-data 0.15.202511271 → 0.15.202512061

package/data/actions/sagemaker.json

@@ -241,6 +241,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "mlflow-app",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "mlflow-tracking-server",
         "required": false,
@@ -547,6 +553,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "callmlflowappapi": {
+    "name": "CallMlflowAppApi",
+    "description": "Grants permission to invoke MLflow APIs",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "callpartnerappapi": {
     "name": "CallPartnerAppApi",
     "description": "Grants permission for Partner App SDK to access the Partner App for reading or writing data use cases",
@@ -1413,6 +1434,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createmlflowapp": {
+    "name": "CreateMlflowApp",
+    "description": "Grants permission to create an MLflow app",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "iam:PassRole",
+          "sagemaker:AddTags"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createmlflowtrackingserver": {
     "name": "CreateMlflowTrackingServer",
     "description": "Grants permission to create an MLflow tracking server",
@@ -1805,6 +1847,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createpresignedmlflowappurl": {
+    "name": "CreatePresignedMlflowAppUrl",
+    "description": "Grants permission to return a URL that you can use from your browser to connect to the MLflow app",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createpresignedmlflowtrackingserverurl": {
     "name": "CreatePresignedMlflowTrackingServerUrl",
     "description": "Grants permission to return a URL that you can use from your browser to connect to the MLflow tracking server",
@@ -2703,6 +2760,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletemlflowapp": {
+    "name": "DeleteMlflowApp",
+    "description": "Grants permission to delete an MLflow app",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletemlflowtrackingserver": {
     "name": "DeleteMlflowTrackingServer",
     "description": "Grants permission to delete an MLflow tracking server",
@@ -4072,6 +4144,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describemlflowapp": {
+    "name": "DescribeMlflowApp",
+    "description": "Grants permission to get information about an MLflow app",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "mlflow-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describemlflowtrackingserver": {
     "name": "DescribeMlflowTrackingServer",
     "description": "Grants permission to get information about an MLflow tracking server",
@@ -5234,6 +5321,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listmlflowapps": {
+    "name": "ListMlflowApps",
+    "description": "Grants permission to list SageMaker MLflow Apps in your account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listmlflowtrackingservers": {
     "name": "ListMlflowTrackingServers",
     "description": "Grants permission to list MLflow tracking servers",
@@ -7055,6 +7150,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatemlflowapp": {
+    "name": "UpdateMlflowApp",
+    "description": "Grants permission to update an MLflow app",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatemlflowtrackingserver": {
     "name": "UpdateMlflowTrackingServer",
     "description": "Grants permission to update an MLflow tracking server",

package/data/actions/security-ir.json

@@ -89,6 +89,7 @@
         "dependentActions": [
           "iam:CreateServiceLinkedRole",
           "organizations:DescribeOrganization",
+          "organizations:ListAWSServiceAccessForOrganization",
           "organizations:ListDelegatedAdministrators"
         ]
       }
@@ -197,6 +198,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listinvestigations": {
+    "name": "ListInvestigations",
+    "description": "Grants permission to list investigations for a case",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "case",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listmemberships": {
     "name": "ListMemberships",
     "description": "Grants permission to list memberships",
@@ -229,6 +245,21 @@
     ],
     "dependentActions": []
   },
+  "sendfeedback": {
+    "name": "SendFeedback",
+    "description": "Grants permission to send feedback for investigation results",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "case",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to the specified resource",