@cloud-copilot/iam-data 0.15.202512201 → 0.15.202512231

package/data/actions/arc-region-switch.json

@@ -208,6 +208,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listroute53healthchecksinregion": {
+    "name": "ListRoute53HealthChecksInRegion",
+    "description": "Grants permission to list Route 53 health checks in a specific AWS Region using the Region switch Regional data plane",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "plan",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list tags for a resource",

package/data/actions/bedrock.json

@@ -103,7 +103,9 @@
     "description": "Grants permission to use bearer token",
     "accessLevel": "Read",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "bedrock:BearerTokenType"
+    ],
     "dependentActions": []
   },
   "cancelautomatedreasoningpolicybuildworkflow": {
@@ -190,8 +192,7 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "bedrock:BearerTokenType"
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -224,8 +225,7 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "bedrock:BearerTokenType"
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -262,8 +262,7 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "bedrock:BearerTokenType"
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -281,8 +280,7 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "bedrock:BearerTokenType"
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -351,8 +349,7 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "bedrock:BearerTokenType"
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -434,8 +431,7 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "bedrock:BearerTokenType"
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -532,8 +528,7 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "bedrock:BearerTokenType"
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -557,8 +552,7 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "bedrock:BearerTokenType"
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -582,8 +576,7 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "bedrock:BearerTokenType"
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -594,8 +587,7 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "bedrock:BearerTokenType"
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -625,8 +617,7 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "bedrock:BearerTokenType"
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -667,8 +658,7 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "bedrock:BearerTokenType"
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -710,8 +700,7 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "bedrock:BearerTokenType"
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -2319,7 +2308,6 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
       "bedrock:GuardrailIdentifier",
-      "bedrock:BearerTokenType",
       "bedrock:ServiceTier"
     ],
     "dependentActions": []
@@ -2388,7 +2376,6 @@
       "bedrock:InferenceProfileArn",
       "bedrock:PromptRouterArn",
       "bedrock:GuardrailIdentifier",
-      "bedrock:BearerTokenType",
       "bedrock:ServiceTier"
     ],
     "dependentActions": []
@@ -3602,8 +3589,7 @@
     ],
     "conditionKeys": [
       "aws:TagKeys",
-      "aws:RequestTag/${TagKey}",
-      "bedrock:BearerTokenType"
+      "aws:RequestTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -3776,8 +3762,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "bedrock:BearerTokenType"
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },

package/data/actions/logs.json

@@ -30,6 +30,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "cancelimporttask": {
+    "name": "CancelImportTask",
+    "description": "Grants permission to cancel an import from CloudTrail Lake to CloudWatch",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createdelivery": {
     "name": "CreateDelivery",
     "description": "Grants permission to create a delivery connecting a delivery source to a delivery destination",
@@ -75,6 +83,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createimporttask": {
+    "name": "CreateImportTask",
+    "description": "Grants permission to start an asynchronous process to import data from a CloudTrail Lake event data store into a managed log group in CloudWatch",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createloganomalydetector": {
     "name": "CreateLogAnomalyDetector",
     "description": "Grants permission to create a log anomaly detector",
@@ -485,6 +501,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeimporttaskbatches": {
+    "name": "DescribeImportTaskBatches",
+    "description": "Grants permission to return detailed information about the individual batches within an import task, including status and any error",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeimporttasks": {
+    "name": "DescribeImportTasks",
+    "description": "Grants permission to return all the import tasks associated with the AWS account making the request",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeindexpolicies": {
     "name": "DescribeIndexPolicies",
     "description": "Grants permission to return all the index policies that are attached with the log groups",

package/data/actions/network-firewall.json

@@ -65,6 +65,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "attachrulegroupstoproxyconfiguration": {
+    "name": "AttachRuleGroupsToProxyConfiguration",
+    "description": "Grants permission to attach proxy rule groups to a proxy configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ProxyConfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ProxyRuleGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createfirewall": {
     "name": "CreateFirewall",
     "description": "Grants permission to create an AWS Network Firewall firewall",
@@ -127,6 +148,89 @@
     ],
     "dependentActions": []
   },
+  "createproxy": {
+    "name": "CreateProxy",
+    "description": "Grants permission to create an AWS Network Firewall proxy",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Proxy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "ec2:AttachApplianceToNatGateway"
+        ]
+      },
+      {
+        "name": "ProxyConfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createproxyconfiguration": {
+    "name": "CreateProxyConfiguration",
+    "description": "Grants permission to create an AWS Network Firewall proxy configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ProxyConfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ProxyRuleGroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createproxyrulegroup": {
+    "name": "CreateProxyRuleGroup",
+    "description": "Grants permission to create an AWS Network Firewall proxy rule group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ProxyRuleGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createproxyrules": {
+    "name": "CreateProxyRules",
+    "description": "Grants permission to add proxy rules to a proxy rule group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ProxyRuleGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createrulegroup": {
     "name": "CreateRuleGroup",
     "description": "Grants permission to create an AWS Network Firewall rule group",
@@ -242,6 +346,68 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteproxy": {
+    "name": "DeleteProxy",
+    "description": "Grants permission to delete a proxy",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Proxy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "ec2:DetachApplianceFromNatGateway"
+    ]
+  },
+  "deleteproxyconfiguration": {
+    "name": "DeleteProxyConfiguration",
+    "description": "Grants permission to delete a proxy configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ProxyConfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteproxyrulegroup": {
+    "name": "DeleteProxyRuleGroup",
+    "description": "Grants permission to delete a proxy rule group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ProxyRuleGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteproxyrules": {
+    "name": "DeleteProxyRules",
+    "description": "Grants permission to remove proxy rules from a proxy rule group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ProxyRuleGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteresourcepolicy": {
     "name": "DeleteResourcePolicy",
     "description": "Grants permission to delete a resource policy for a firewall policy or rule group or firewall",
@@ -422,6 +588,66 @@
       "logs:ListLogDeliveries"
     ]
   },
+  "describeproxy": {
+    "name": "DescribeProxy",
+    "description": "Grants permission to retrieve the data objects that define a proxy",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Proxy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeproxyconfiguration": {
+    "name": "DescribeProxyConfiguration",
+    "description": "Grants permission to retrieve the data objects that define a proxy configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "ProxyConfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeproxyrule": {
+    "name": "DescribeProxyRule",
+    "description": "Grants permission to retrieve the data objects that define a proxy rule",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "ProxyRuleGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeproxyrulegroup": {
+    "name": "DescribeProxyRuleGroup",
+    "description": "Grants permission to retrieve the data objects that define a proxy rule group",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "ProxyRuleGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeresourcepolicy": {
     "name": "DescribeResourcePolicy",
     "description": "Grants permission to describe a resource policy for a firewall policy or rule group or firewall",
@@ -548,6 +774,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "detachrulegroupsfromproxyconfiguration": {
+    "name": "DetachRuleGroupsFromProxyConfiguration",
+    "description": "Grants permission to detach proxy rule groups from a proxy configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ProxyConfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ProxyRuleGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "disassociateavailabilityzones": {
     "name": "DisassociateAvailabilityZones",
     "description": "Grants permission to disassociate availability zones to a firewall",
@@ -668,6 +915,51 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listproxies": {
+    "name": "ListProxies",
+    "description": "Grants permission to retrieve the metadata for proxies",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Proxy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listproxyconfigurations": {
+    "name": "ListProxyConfigurations",
+    "description": "Grants permission to retrieve the metadata for proxy configurations",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "ProxyConfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listproxyrulegroups": {
+    "name": "ListProxyRuleGroups",
+    "description": "Grants permission to retrieve the metadata for proxy rule groups",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "ProxyRuleGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listrulegroups": {
     "name": "ListRuleGroups",
     "description": "Grants permission to retrieve the metadata for rule groups",
@@ -861,6 +1153,24 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "Proxy",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ProxyConfiguration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ProxyRuleGroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "StatefulRuleGroup",
         "required": false,
@@ -909,6 +1219,24 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "Proxy",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ProxyConfiguration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ProxyRuleGroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "StatefulRuleGroup",
         "required": false,
@@ -1077,6 +1405,81 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateproxy": {
+    "name": "UpdateProxy",
+    "description": "Grants permission to modify a proxy",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Proxy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateproxyconfiguration": {
+    "name": "UpdateProxyConfiguration",
+    "description": "Grants permission to modify a proxy configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ProxyConfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateproxyrule": {
+    "name": "UpdateProxyRule",
+    "description": "Grants permission to update an existing proxy rule on a proxy rule group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ProxyRuleGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateproxyrulegrouppriorities": {
+    "name": "UpdateProxyRuleGroupPriorities",
+    "description": "Grants permission to modify rule group priorities on a proxy configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ProxyConfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateproxyrulepriorities": {
+    "name": "UpdateProxyRulePriorities",
+    "description": "Grants permission to update proxy rule priorities within a proxy rule group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ProxyRuleGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updaterulegroup": {
     "name": "UpdateRuleGroup",
     "description": "Grants permission to modify a rule group",