@cloud-copilot/iam-data 0.15.202511271 → 0.15.202512091

package/data/actions/lambda.json

@@ -33,6 +33,21 @@
     ],
     "dependentActions": []
   },
+  "checkpointdurableexecution": {
+    "name": "CheckpointDurableExecution",
+    "description": "Grants permission to save the progress of an AWS Lambda durable execution",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "durable execution",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createalias": {
     "name": "CreateAlias",
     "description": "Grants permission to create an alias for a Lambda function version",
@@ -48,6 +63,30 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createcapacityprovider": {
+    "name": "CreateCapacityProvider",
+    "description": "Grants permission to create an AWS Lambda capacity provider",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capacityProvider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "iam:CreateServiceLinkedRole",
+          "iam:PassRole",
+          "kms:DescribeKey"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "lambda:SecurityGroupIds",
+      "lambda:SubnetIds"
+    ],
+    "dependentActions": []
+  },
   "createcodesigningconfig": {
     "name": "CreateCodeSigningConfig",
     "description": "Grants permission to create an AWS Lambda code signing config",
@@ -81,7 +120,8 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": [
-          "iam:PassRole"
+          "iam:PassRole",
+          "lambda:PassCapacityProvider"
         ]
       }
     ],
@@ -129,6 +169,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletecapacityprovider": {
+    "name": "DeleteCapacityProvider",
+    "description": "Grants permission to delete an AWS Lambda capacity provider",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capacityProvider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletecodesigningconfig": {
     "name": "DeleteCodeSigningConfig",
     "description": "Grants permission to delete an AWS Lambda code signing config",
@@ -330,6 +385,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getcapacityprovider": {
+    "name": "GetCapacityProvider",
+    "description": "Grants permission to view details about an AWS Lambda capacity provider",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "capacityProvider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getcodesigningconfig": {
     "name": "GetCodeSigningConfig",
     "description": "Grants permission to view details about an AWS Lambda code signing config",
@@ -345,6 +415,51 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdurableexecution": {
+    "name": "GetDurableExecution",
+    "description": "Grants permission to view details of an AWS Lambda durable execution",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "durable execution",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getdurableexecutionhistory": {
+    "name": "GetDurableExecutionHistory",
+    "description": "Grants permission to view execution history of an AWS Lambda durable execution",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "durable execution",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getdurableexecutionstate": {
+    "name": "GetDurableExecutionState",
+    "description": "Grants permission to view current state of an AWS Lambda durable execution",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "durable execution",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "geteventsourcemapping": {
     "name": "GetEventSourceMapping",
     "description": "Grants permission to view details about an AWS Lambda event source mapping",
@@ -452,6 +567,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getfunctionscalingconfig": {
+    "name": "GetFunctionScalingConfig",
+    "description": "Grants permission to view the scaling configuration of an AWS Lambda function running on a capacity provider",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "function",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getfunctionurlconfig": {
     "name": "GetFunctionUrlConfig",
     "description": "Grants permission to read function url configuration for a Lambda function",
@@ -619,6 +749,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcapacityproviders": {
+    "name": "ListCapacityProviders",
+    "description": "Grants permission to retrieve a list of AWS Lambda capacity providers",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcodesigningconfigs": {
     "name": "ListCodeSigningConfigs",
     "description": "Grants permission to retrieve a list of AWS Lambda code signing configs",
@@ -627,6 +765,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdurableexecutionsbyfunction": {
+    "name": "ListDurableExecutionsByFunction",
+    "description": "Grants permission to retrieve a list of AWS Lambda durable executions of an AWS Lambda function",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "function",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listeventsourcemappings": {
     "name": "ListEventSourceMappings",
     "description": "Grants permission to retrieve a list of AWS Lambda event source mappings",
@@ -667,6 +820,21 @@
     ],
     "dependentActions": []
   },
+  "listfunctionversionsbycapacityprovider": {
+    "name": "ListFunctionVersionsByCapacityProvider",
+    "description": "Grants permission to retrieve a list of AWS Lambda function versions by the capacity provider assigned",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "capacityProvider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listfunctions": {
     "name": "ListFunctions",
     "description": "Grants permission to retrieve a list of AWS Lambda functions, with the version-specific configuration of each function",
@@ -723,9 +891,15 @@
   },
   "listtags": {
     "name": "ListTags",
-    "description": "Grants permission to retrieve a list of tags for an AWS Lambda function, event source mapping or code signing configuration resource",
+    "description": "Grants permission to retrieve a list of tags for an AWS Lambda function, event source mapping, capacity provider, or code signing configuration resource",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "capacityProvider",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "code signing config",
         "required": false,
@@ -763,6 +937,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "passcapacityprovider": {
+    "name": "PassCapacityProvider",
+    "isPermissionOnly": true,
+    "description": "Grants permission to pass an AWS Lambda capacity provider to a service",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capacityProvider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "publishlayerversion": {
     "name": "PublishLayerVersion",
     "description": "Grants permission to create an AWS Lambda layer",
@@ -861,6 +1051,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putfunctionscalingconfig": {
+    "name": "PutFunctionScalingConfig",
+    "description": "Grants permission to update the scaling configuration of an AWS Lambda function running on a capacity provider",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "function",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putprovisionedconcurrencyconfig": {
     "name": "PutProvisionedConcurrencyConfig",
     "description": "Grants permission to configure provisioned concurrency for an AWS Lambda function's alias or version",
@@ -930,11 +1135,77 @@
     ],
     "dependentActions": []
   },
+  "senddurableexecutioncallbackfailure": {
+    "name": "SendDurableExecutionCallbackFailure",
+    "description": "Grants permission to send a failure response for a callback operation in an AWS Lambda durable execution",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "durable execution",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "senddurableexecutioncallbackheartbeat": {
+    "name": "SendDurableExecutionCallbackHeartbeat",
+    "description": "Grants permission to send a heartbeat for a callback operation in an AWS Lambda durable execution",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "durable execution",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "senddurableexecutioncallbacksuccess": {
+    "name": "SendDurableExecutionCallbackSuccess",
+    "description": "Grants permission to send a successful response for a callback operation in an AWS Lambda durable execution",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "durable execution",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stopdurableexecution": {
+    "name": "StopDurableExecution",
+    "description": "Grants permission to stop an AWS Lambda durable execution",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "durable execution",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
-    "description": "Grants permission to add tags to an AWS Lambda function, event source mapping or code signing configuration resource",
+    "description": "Grants permission to add tags to an AWS Lambda function, event source mapping, capacity provider, or code signing configuration resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "capacityProvider",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "code signing config",
         "required": false,
@@ -962,9 +1233,15 @@
   },
   "untagresource": {
     "name": "UntagResource",
-    "description": "Grants permission to remove tags from an AWS Lambda function, event source mapping or code signing configuration resource",
+    "description": "Grants permission to remove tags from an AWS Lambda function, event source mapping, capacity provider, or code signing configuration resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "capacityProvider",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "code signing config",
         "required": false,
@@ -1004,6 +1281,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatecapacityprovider": {
+    "name": "UpdateCapacityProvider",
+    "description": "Grants permission to update an AWS Lambda capacity provider",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capacityProvider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatecodesigningconfig": {
     "name": "UpdateCodeSigningConfig",
     "description": "Grants permission to update an AWS Lambda code signing config",

package/data/actions/logs.json

@@ -14,6 +14,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "associatesourcetos3tableintegration": {
+    "name": "AssociateSourceToS3TableIntegration",
+    "description": "Grants permission to associate a log source to an S3 Tables integration",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "cancelexporttask": {
     "name": "CancelExportTask",
     "description": "Grants permission to cancel an export task if it is in PENDING or RUNNING state",
@@ -328,6 +336,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletepipelinerule": {
+    "name": "DeletePipelineRule",
+    "isPermissionOnly": true,
+    "description": "Grants permission to delete telemetry pipeline",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletequerydefinition": {
     "name": "DeleteQueryDefinition",
     "description": "Grants permission to delete a saved CloudWatch Logs Insights query definition",
@@ -568,6 +585,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "disassociatesourcefroms3tableintegration": {
+    "name": "DisassociateSourceFromS3TableIntegration",
+    "description": "Grants permission to disassociate a log source from an S3 Tables integration",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "filterlogevents": {
     "name": "FilterLogEvents",
     "description": "Grants permission to retrieve log events, optionally filtered by a filter pattern from the specified log group",
@@ -705,6 +730,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getlogfields": {
+    "name": "GetLogFields",
+    "description": "Grants permission to retrieve a list of log fields for a data source",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getloggroupfields": {
     "name": "GetLogGroupFields",
     "description": "Grants permission to return a list of the fields that are included in log events in the specified log group, along with the percentage of log events that contain each field",
@@ -795,6 +828,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "integratewiths3table": {
+    "name": "IntegrateWithS3Table",
+    "isPermissionOnly": true,
+    "description": "Grants permission to deliver log events to S3 Tables",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "log-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "link": {
     "name": "Link",
     "isPermissionOnly": true,
@@ -804,6 +853,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listaggregateloggroupsummaries": {
+    "name": "ListAggregateLogGroupSummaries",
+    "description": "Grants permission to return an aggregate summary of all log groups in the region grouped by specified data-source characteristics",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listanomalies": {
     "name": "ListAnomalies",
     "description": "Grants permission to list all anomalies detected in the AWS account making the request",
@@ -893,6 +950,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listsourcesfors3tableintegration": {
+    "name": "ListSourcesForS3TableIntegration",
+    "description": "Grants permission to return all log sources associated with an S3 Tables integration",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list the tags for the specified resource",
@@ -953,6 +1018,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "processwithpipeline": {
+    "name": "ProcessWithPipeline",
+    "isPermissionOnly": true,
+    "description": "Grants permission to process and transform log events through pipeline transformers before storage",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "log-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putaccountpolicy": {
     "name": "PutAccountPolicy",
     "description": "Grants permission to attach an account policy",
@@ -1095,6 +1176,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putloggroupdeletionprotection": {
+    "name": "PutLogGroupDeletionProtection",
+    "description": "Grants permission to enable or disable deletion protection for the specified log group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "log-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putmetricfilter": {
     "name": "PutMetricFilter",
     "description": "Grants permission to create or update a metric filter and associates it with the specified log group",
@@ -1110,6 +1206,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putpipelinerule": {
+    "name": "PutPipelineRule",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create telemetry pipeline",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putquerydefinition": {
     "name": "PutQueryDefinition",
     "description": "Grants permission to create or update a query definition",