@cloud-copilot/iam-data 0.15.202512061 → 0.15.202512101

package/data/actions/aco-automation.json

@@ -0,0 +1,252 @@
+{
+  "associateaccounts": {
+    "name": "AssociateAccounts",
+    "description": "Grants permission to associate member accounts with the management account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createautomationrule": {
+    "name": "CreateAutomationRule",
+    "description": "Grants permission to create automation rule",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "deleteautomationrule": {
+    "name": "DeleteAutomationRule",
+    "description": "Grants permission to delete automation rule",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AutomationRule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "disassociateaccounts": {
+    "name": "DisassociateAccounts",
+    "description": "Grants permission to disassociate member accounts from the management account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getautomationevent": {
+    "name": "GetAutomationEvent",
+    "description": "Grants permission to get automation event details",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getautomationrule": {
+    "name": "GetAutomationRule",
+    "description": "Grants permission to get automation rule",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "AutomationRule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "getenrollmentconfiguration": {
+    "name": "GetEnrollmentConfiguration",
+    "description": "Grants permission to get enrollment configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listaccounts": {
+    "name": "ListAccounts",
+    "description": "Grants permission to list the accounts in your organization that are enrolled in Compute Optimizer and whether they have enabled the Automation feature",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listautomationeventsteps": {
+    "name": "ListAutomationEventSteps",
+    "description": "Grants permission to list automation event steps",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listautomationeventsummaries": {
+    "name": "ListAutomationEventSummaries",
+    "description": "Grants permission to list automation event summaries",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listautomationevents": {
+    "name": "ListAutomationEvents",
+    "description": "Grants permission to list automation events",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listautomationrulepreview": {
+    "name": "ListAutomationRulePreview",
+    "description": "Grants permission to list automation rule preview results",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": [
+      "ec2:DescribeVolumes"
+    ]
+  },
+  "listautomationrulepreviewsummaries": {
+    "name": "ListAutomationRulePreviewSummaries",
+    "description": "Grants permission to list automation rule preview summaries",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listautomationrules": {
+    "name": "ListAutomationRules",
+    "description": "Grants permission to list automation rules",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listrecommendedactionsummaries": {
+    "name": "ListRecommendedActionSummaries",
+    "description": "Grants permission to list recommended action summaries",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listrecommendedactions": {
+    "name": "ListRecommendedActions",
+    "description": "Grants permission to list recommended actions",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": [
+      "ec2:DescribeVolumes"
+    ]
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list tags for automation rule",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "AutomationRule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "rollbackautomationevent": {
+    "name": "RollbackAutomationEvent",
+    "description": "Grants permission to initiate a rollback for an automation event",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startautomationevent": {
+    "name": "StartAutomationEvent",
+    "description": "Grants permission to initiate an on-demand automation for a recommended action",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to add tags to automation rule",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "AutomationRule",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to remove tags from automation rule",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "AutomationRule",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "updateautomationrule": {
+    "name": "UpdateAutomationRule",
+    "description": "Grants permission to update automation rule",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AutomationRule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "updateenrollmentconfiguration": {
+    "name": "UpdateEnrollmentConfiguration",
+    "description": "Grants permission to update enrollment configuration for the Compute Optimizer automation feature",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

package/data/actions/aidevops.json

@@ -283,14 +283,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "invokeagent": {
-    "name": "InvokeAgent",
-    "description": "Grants permission to invoke an agent",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listagentspaces": {
     "name": "ListAgentSpaces",
     "description": "Grants permission to list agentspace",

package/data/actions/bcm-data-exports.json

@@ -9,6 +9,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "billingview",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -186,6 +192,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "billingview",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [

package/data/actions/bedrock.json

@@ -927,6 +927,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteenforcedguardrailconfiguration": {
+    "name": "DeleteEnforcedGuardrailConfiguration",
+    "description": "Grants permission to delete account-level enforced guardrail configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteflow": {
     "name": "DeleteFlow",
     "description": "Grants permission to delete a prompt flow",
@@ -1145,7 +1153,19 @@
     "resourceTypes": [
       {
         "name": "custom-model",
-        "required": true,
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "guardrail",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "guardrail-profile",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -2025,7 +2045,19 @@
     "resourceTypes": [
       {
         "name": "custom-model",
-        "required": true,
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "guardrail",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "guardrail-profile",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -2588,6 +2620,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listenforcedguardrailsconfiguration": {
+    "name": "ListEnforcedGuardrailsConfiguration",
+    "description": "Grants permission to list account-level enforced guardrail configurations",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listevaluationjobs": {
     "name": "ListEvaluationJobs",
     "description": "Grants permission to get the list of evaluation jobs that you have submitted",
@@ -3093,6 +3133,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putenforcedguardrailconfiguration": {
+    "name": "PutEnforcedGuardrailConfiguration",
+    "description": "Grants permission to set account-level enforced guardrail configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putfoundationmodelentitlement": {
     "name": "PutFoundationModelEntitlement",
     "description": "Grants permission to put entitlement to access a foundation model",
@@ -3132,7 +3180,19 @@
     "resourceTypes": [
       {
         "name": "custom-model",
-        "required": true,
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "guardrail",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "guardrail-profile",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -3862,6 +3922,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatecustommodeldeployment": {
+    "name": "UpdateCustomModelDeployment",
+    "description": "Grants permission to update an existing custom model deployment with a new custom model",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "custom-model",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "custom-model-deployment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatedataautomationproject": {
     "name": "UpdateDataAutomationProject",
     "description": "Grants permission to update a data automation project",

package/data/actions/ce.json

@@ -496,6 +496,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcostcategoryresourceassociations": {
+    "name": "ListCostCategoryResourceAssociations",
+    "description": "Grants permission to retrieve resource associations of all Cost Categories defined in the account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listsavingsplanspurchaserecommendationgeneration": {
     "name": "ListSavingsPlansPurchaseRecommendationGeneration",
     "description": "Grants permission to retrieve a list of your historical recommendation generations",

package/data/actions/healthlake.json

@@ -35,6 +35,7 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],

package/data/actions/identitystore.json

@@ -508,6 +508,25 @@
     ],
     "dependentActions": []
   },
+  "reserveuser": {
+    "name": "ReserveUser",
+    "description": "Grants permission to reserve a user by getting a userId",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Identitystore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion"
+    ],
+    "dependentActions": []
+  },
   "updategroup": {
     "name": "UpdateGroup",
     "description": "Grants permission to update information about a group in the specified IdentityStore",