@cloud-copilot/iam-data 0.15.202511271 → 0.15.202512091

package/data/actions/nova-act.json

@@ -0,0 +1,276 @@
+{
+  "createact": {
+    "name": "CreateAct",
+    "description": "Grants permission to create a new AI task (act) within a session that can interact with tools and perform specific actions",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workflow-run",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createsession": {
+    "name": "CreateSession",
+    "description": "Grants permission to create a new session context within a workflow run to manage conversation state and acts",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workflow-run",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createworkflowdefinition": {
+    "name": "CreateWorkflowDefinition",
+    "description": "Grants permission to create a new workflow definition template that can be used to execute multiple workflow runs",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createworkflowrun": {
+    "name": "CreateWorkflowRun",
+    "description": "Grants permission to create a new execution instance of a workflow definition with specified parameters",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteworkflowdefinition": {
+    "name": "DeleteWorkflowDefinition",
+    "description": "Grants permission to delete a workflow definition and all associated resources",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteworkflowrun": {
+    "name": "DeleteWorkflowRun",
+    "description": "Grants permission to terminate and clean up a workflow run, stopping all associated acts and sessions",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workflow-run",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getworkflowdefinition": {
+    "name": "GetWorkflowDefinition",
+    "description": "Grants permission to retrieve details and configuration of a specific workflow definition",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getworkflowrun": {
+    "name": "GetWorkflowRun",
+    "description": "Grants permission to retrieve the current state, configuration, and execution details of a workflow run",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workflow-run",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "invokeactstep": {
+    "name": "InvokeActStep",
+    "description": "Grants permission to execute the next step of an act, processing tool call results and returning new tool calls if needed",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workflow-run",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listacts": {
+    "name": "ListActs",
+    "description": "Grants permission to list all acts within a specific session with their current status and execution details",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listmodels": {
+    "name": "ListModels",
+    "description": "Grants permission to list all available AI models that can be used for workflow execution, including their status and compatibility information",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listsessions": {
+    "name": "ListSessions",
+    "description": "Grants permission to list all sessions within a specific workflow run",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workflow-run",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listworkflowdefinitions": {
+    "name": "ListWorkflowDefinitions",
+    "description": "Grants permission to list all workflow definitions in your account with optional filtering and pagination",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listworkflowruns": {
+    "name": "ListWorkflowRuns",
+    "description": "Grants permission to list all workflow runs for a specific workflow definition with optional filtering and pagination",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateact": {
+    "name": "UpdateAct",
+    "description": "Grants permission to update an existing act's configuration, status, or error information",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workflow-run",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateworkflowrun": {
+    "name": "UpdateWorkflowRun",
+    "description": "Grants permission to update the configuration or state of an active workflow run",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workflow-run",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

package/data/actions/observabilityadmin.json

@@ -20,6 +20,43 @@
     ],
     "dependentActions": []
   },
+  "creates3tableintegration": {
+    "name": "CreateS3TableIntegration",
+    "description": "Grants permission to create a new s3 table integration with the specified configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "s3tableintegration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "createtelemetrypipeline": {
+    "name": "CreateTelemetryPipeline",
+    "description": "Grants permission to create a new telemetry pipeline with the specified name and configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "telemetry-pipeline",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}",
+      "observabilityadmin:SourceType"
+    ],
+    "dependentActions": []
+  },
   "createtelemetryrule": {
     "name": "CreateTelemetryRule",
     "description": "Grants permission to create a new telemetry rule with the specified name for the account",
@@ -71,6 +108,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletes3tableintegration": {
+    "name": "DeleteS3TableIntegration",
+    "description": "Grants permission to delete the s3 table integration with the specified arn",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "s3tableintegration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletetelemetrypipeline": {
+    "name": "DeleteTelemetryPipeline",
+    "description": "Grants permission to delete the telemetry pipeline with the specified arn",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "telemetry-pipeline",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletetelemetryrule": {
     "name": "DeleteTelemetryRule",
     "description": "Grants permission to delete a telemetry rule with the specified name for the account",
@@ -116,6 +183,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "gets3tableintegration": {
+    "name": "GetS3TableIntegration",
+    "description": "Grants permission to retrieve the specified s3 table integration for the account",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "s3tableintegration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "gettelemetryenrichmentstatus": {
     "name": "GetTelemetryEnrichmentStatus",
     "description": "Grants permission to retrieve the status of the Resource tags for telemetry feature for the account",
@@ -140,6 +222,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "gettelemetrypipeline": {
+    "name": "GetTelemetryPipeline",
+    "description": "Grants permission to Get the telemetry pipeline with the specified name or arn",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "telemetry-pipeline",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "gettelemetryrule": {
     "name": "GetTelemetryRule",
     "description": "Grants permission to retrieve the specified telemetry rule for the account",
@@ -194,6 +291,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "lists3tableintegrations": {
+    "name": "ListS3TableIntegrations",
+    "description": "Grants permission to list s3 table integrations for the account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list the tags for the specified resource",
@@ -211,6 +316,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "s3tableintegration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "telemetry-pipeline",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "telemetry-rule",
         "required": false,
@@ -221,6 +338,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listtelemetrypipelines": {
+    "name": "ListTelemetryPipelines",
+    "description": "Grants permission to List telemetry pipelines for the account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtelemetryrules": {
     "name": "ListTelemetryRules",
     "description": "Grants permission to list the telemetry rules for the account",
@@ -302,6 +427,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "s3tableintegration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "telemetry-pipeline",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "telemetry-rule",
         "required": false,
@@ -315,6 +452,14 @@
     ],
     "dependentActions": []
   },
+  "testtelemetrypipeline": {
+    "name": "TestTelemetryPipeline",
+    "description": "Grants permission to Test a telemetry pipeline configuration with sample data",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove the specified tags from the specified resource",
@@ -332,6 +477,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "s3tableintegration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "telemetry-pipeline",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "telemetry-rule",
         "required": false,
@@ -363,6 +520,21 @@
     ],
     "dependentActions": []
   },
+  "updatetelemetrypipeline": {
+    "name": "UpdateTelemetryPipeline",
+    "description": "Grants permission to Update the telemetry pipeline with the specified arn",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "telemetry-pipeline",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatetelemetryrule": {
     "name": "UpdateTelemetryRule",
     "description": "Grants permission to update the specified telemetry rule for the account",
@@ -392,5 +564,13 @@
     ],
     "conditionKeys": [],
     "dependentActions": []
+  },
+  "validatetelemetrypipelineconfiguration": {
+    "name": "ValidateTelemetryPipelineConfiguration",
+    "description": "Grants permission to Validate a telemetry pipeline configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
   }
 }

package/data/actions/opensearch.json

@@ -15,6 +15,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "cancelautooptimizejob": {
+    "name": "CancelAutoOptimizeJob",
+    "description": "Grants permission to cancel submitted Auto Optimize Job",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "canceldirectquery": {
     "name": "CancelDirectQuery",
     "description": "Grants permission to cancel the query that is submitted on the OpenSearch DataSource resource",
@@ -30,6 +38,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteautooptimizejob": {
+    "name": "DeleteAutoOptimizeJob",
+    "description": "Grants permission to delete Auto Optimize Job",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getautooptimizejob": {
+    "name": "GetAutoOptimizeJob",
+    "description": "Grants permission to get the Auto Optimize Job details",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdirectquery": {
     "name": "GetDirectQuery",
     "description": "Grants permission to get the query status that are performed on the OpenSearch DataSource resource",
@@ -60,6 +84,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listautooptimizejobs": {
+    "name": "ListAutoOptimizeJobs",
+    "description": "Grants permission to retrieve a list of Auto Optimize Jobs",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startdirectquery": {
     "name": "StartDirectQuery",
     "description": "Grants permission to start a direct query on the provided OpenSearch DataSource arns",
@@ -74,5 +106,13 @@
     ],
     "conditionKeys": [],
     "dependentActions": []
+  },
+  "submitautooptimizejob": {
+    "name": "SubmitAutoOptimizeJob",
+    "description": "Grants permission to create new Auto Optimize Job",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
   }
 }

package/data/actions/partnercentral-account-management.json

@@ -1,4 +1,26 @@
 {
+  "accesslegacypartnercentral": {
+    "name": "AccessLegacyPartnerCentral",
+    "isPermissionOnly": true,
+    "description": "Grants permission to Single Sign-On from AWS Partner Central into Legacy Partner Central",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "partnercentral-account-management:LegacyPartnerCentralRole"
+    ],
+    "dependentActions": []
+  },
+  "accessmarketingcentral": {
+    "name": "AccessMarketingCentral",
+    "isPermissionOnly": true,
+    "description": "Grants permission to Single Sign-On from AWS Partner Central into Marketing Central",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "partnercentral-account-management:MarketingCentralRole"
+    ],
+    "dependentActions": []
+  },
   "associatepartneraccount": {
     "name": "AssociatePartnerAccount",
     "isPermissionOnly": true,