@cloud-copilot/iam-data 0.18.202603311 → 0.18.202604021

package/data/actions/ecs.json

@@ -43,6 +43,34 @@
     ],
     "dependentActions": []
   },
+  "createdaemon": {
+    "name": "CreateDaemon",
+    "description": "Grants permission to create a new daemon in a specified cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "daemon",
+        "required": true,
+        "conditionKeys": [
+          "ecs:cluster",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "ecs:capacity-provider",
+      "ecs:daemon-task-definition",
+      "ecs:enable-ecs-managed-tags",
+      "ecs:enable-execute-command",
+      "ecs:propagate-tags",
+      "ecs:task-cpu",
+      "ecs:task-memory"
+    ],
+    "dependentActions": []
+  },
   "createexpressgatewayservice": {
     "name": "CreateExpressGatewayService",
     "description": "Grants permission to create a new Amazon ECS Express Gateway service with cluster and task definition",
@@ -191,6 +219,41 @@
     ],
     "dependentActions": []
   },
+  "deletedaemon": {
+    "name": "DeleteDaemon",
+    "description": "Grants permission to delete a specified daemon within a cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "daemon",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ecs:cluster",
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "deletedaemontaskdefinition": {
+    "name": "DeleteDaemonTaskDefinition",
+    "description": "Grants permission to delete the specified daemon task definition",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "daemon-task-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deleteexpressgatewayservice": {
     "name": "DeleteExpressGatewayService",
     "description": "Grants permission to delete a specified Express Gateway service",
@@ -340,6 +403,97 @@
     ],
     "dependentActions": []
   },
+  "describedaemon": {
+    "name": "DescribeDaemon",
+    "description": "Grants permission to describe the specified daemon running in your cluster",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "daemon",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ecs:cluster",
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "describedaemondeployments": {
+    "name": "DescribeDaemonDeployments",
+    "description": "Grants permission to describe one or more of your daemon deployments",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "daemon",
+        "required": true,
+        "conditionKeys": [
+          "ecs:cluster",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "daemon-deployment",
+        "required": true,
+        "conditionKeys": [
+          "ecs:cluster",
+          "ecs:daemon",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedaemonrevisions": {
+    "name": "DescribeDaemonRevisions",
+    "description": "Grants permission to describe one or more of your daemon revisions",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "daemon",
+        "required": true,
+        "conditionKeys": [
+          "ecs:cluster",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "daemon-revision",
+        "required": true,
+        "conditionKeys": [
+          "ecs:cluster",
+          "ecs:daemon",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedaemontaskdefinition": {
+    "name": "DescribeDaemonTaskDefinition",
+    "description": "Grants permission to describe a daemon task definition",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "daemon-task-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "describeexpressgatewayservice": {
     "name": "DescribeExpressGatewayService",
     "description": "Grants permission to describe the specified Express Gateway service",
@@ -579,6 +733,42 @@
     ],
     "dependentActions": []
   },
+  "listdaemondeployments": {
+    "name": "ListDaemonDeployments",
+    "description": "Grants permission to get a list of daemon deployments for a specified daemon",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "daemon",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ecs:cluster"
+    ],
+    "dependentActions": []
+  },
+  "listdaemontaskdefinitions": {
+    "name": "ListDaemonTaskDefinitions",
+    "description": "Grants permission to get a list of daemon task definitions that are registered to your account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listdaemons": {
+    "name": "ListDaemons",
+    "description": "Grants permission to get a list of daemons that are running in a specified cluster",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ecs:cluster"
+    ],
+    "dependentActions": []
+  },
   "listservicedeployments": {
     "name": "ListServiceDeployments",
     "description": "Grants permission to get a list of service deployments for a specified service",
@@ -826,6 +1016,29 @@
     ],
     "dependentActions": []
   },
+  "registerdaemontaskdefinition": {
+    "name": "RegisterDaemonTaskDefinition",
+    "description": "Grants permission to register a new daemon task definition from the supplied family and containerDefinitions",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "daemon-task-definition",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "ecs:privileged",
+      "ecs:task-cpu",
+      "ecs:task-memory"
+    ],
+    "dependentActions": []
+  },
   "registertaskdefinition": {
     "name": "RegisterTaskDefinition",
     "description": "Grants permission to register a new task definition from the supplied family and containerDefinitions",
@@ -1037,6 +1250,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "daemon",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "daemon-task-definition",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "service",
         "required": false,
@@ -1093,6 +1318,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "daemon",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "daemon-task-definition",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "service",
         "required": false,
@@ -1215,6 +1452,32 @@
     ],
     "dependentActions": []
   },
+  "updatedaemon": {
+    "name": "UpdateDaemon",
+    "description": "Grants permission to modify the parameters of a daemon",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "daemon",
+        "required": true,
+        "conditionKeys": [
+          "ecs:cluster",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ecs:capacity-provider",
+      "ecs:daemon-task-definition",
+      "ecs:enable-ecs-managed-tags",
+      "ecs:enable-execute-command",
+      "ecs:propagate-tags",
+      "ecs:task-cpu",
+      "ecs:task-memory"
+    ],
+    "dependentActions": []
+  },
   "updateexpressgatewayservice": {
     "name": "UpdateExpressGatewayService",
     "description": "Grants permission to modify the parameters of an Express Gateway service",

package/data/actions/healthlake.json

@@ -101,6 +101,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describefhirbulkmembermatchjob": {
+    "name": "DescribeFHIRBulkMemberMatchJob",
+    "description": "Grants permission to describe a FHIR Bulk Member Match Job",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "datastore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describefhirdatastore": {
     "name": "DescribeFHIRDatastore",
     "description": "Grants permission to get the properties associated with the FHIR datastore, including the datastore ID, datastore ARN, datastore name, datastore status, created at, datastore type version, and datastore endpoint",
@@ -544,6 +559,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startfhirbulkmembermatchjob": {
+    "name": "StartFHIRBulkMemberMatchJob",
+    "description": "Grants permission to begin a FHIR Bulk Member Match Job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "datastore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startfhirexportjob": {
     "name": "StartFHIRExportJob",
     "description": "Grants permission to begin a FHIR Export job",

package/data/actions/logs.json

@@ -160,6 +160,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createlookuptable": {
+    "name": "CreateLookupTable",
+    "description": "Grants permission to create a lookup table",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "lookup-table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "createscheduledquery": {
     "name": "CreateScheduledQuery",
     "description": "Grants permission to create a scheduled query",
@@ -346,6 +364,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletelookuptable": {
+    "name": "DeleteLookupTable",
+    "description": "Grants permission to delete a lookup table",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "lookup-table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletemetricfilter": {
     "name": "DeleteMetricFilter",
     "description": "Grants permission to delete a metric filter associated with the specified log group",
@@ -557,6 +590,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describelookuptables": {
+    "name": "DescribeLookupTables",
+    "description": "Grants permission to return all lookup tables",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describemetricfilters": {
     "name": "DescribeMetricFilters",
     "description": "Grants permission to return all the metrics filters associated with the specified log group",
@@ -809,6 +850,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getlookuptable": {
+    "name": "GetLookupTable",
+    "description": "Grants permission to retrieve a lookup table",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "lookup-table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getqueryresults": {
     "name": "GetQueryResults",
     "description": "Grants permission to return the results from the specified query",
@@ -1039,6 +1095,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "lookup-table",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -1446,6 +1508,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "lookup-table",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "scheduled-query",
         "required": false,
@@ -1549,6 +1617,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "lookup-table",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "scheduled-query",
         "required": false,
@@ -1630,6 +1704,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatelookuptable": {
+    "name": "UpdateLookupTable",
+    "description": "Grants permission to update a lookup table",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "lookup-table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatescheduledquery": {
     "name": "UpdateScheduledQuery",
     "description": "Grants permission to update a scheduled query",

package/data/actions/quicksight.json

@@ -1280,6 +1280,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeautomationjob": {
+    "name": "DescribeAutomationJob",
+    "description": "Grants permission to describe an automation job",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "automationJob",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describebrand": {
     "name": "DescribeBrand",
     "description": "Grants permission to describe a brand",
@@ -3069,6 +3084,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startautomationjob": {
+    "name": "StartAutomationJob",
+    "description": "Grants permission to start an automation job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "automation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startdashboardsnapshotjob": {
     "name": "StartDashboardSnapshotJob",
     "description": "Grants permission to start a dashboard snapshot job",

package/data/actions/s3express.json

@@ -334,6 +334,27 @@
     ],
     "dependentActions": []
   },
+  "getmetricsconfiguration": {
+    "name": "GetMetricsConfiguration",
+    "description": "Grants permission to get a metrics configuration of a directory bucket",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
   "listaccesspointsfordirectorybuckets": {
     "name": "ListAccessPointsForDirectoryBuckets",
     "description": "Grants permission to list access points",
@@ -500,6 +521,27 @@
     ],
     "dependentActions": []
   },
+  "putmetricsconfiguration": {
+    "name": "PutMetricsConfiguration",
+    "description": "Grants permission to set or update a metrics configuration for the CloudWatch request metrics of a directory bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to create a new user-defined tag or update an existing tag",

package/data/actions/sagemaker.json

@@ -3017,6 +3017,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteprocessingjob": {
+    "name": "DeleteProcessingJob",
+    "description": "Grants permission to delete a processing job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "processing-job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteproject": {
     "name": "DeleteProject",
     "description": "Grants permission to delete a project",
@@ -3452,6 +3467,21 @@
     ],
     "dependentActions": []
   },
+  "deletetrainingjob": {
+    "name": "DeleteTrainingJob",
+    "description": "Grants permission to delete a training job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "training-job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletetrial": {
     "name": "DeleteTrial",
     "description": "Grants permission to delete a trial",
@@ -6320,6 +6350,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startclusterhealthcheck": {
+    "name": "StartClusterHealthCheck",
+    "description": "Grants permission to start deep health checks for a SageMaker Hyperpod cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startedgedeploymentstage": {
     "name": "StartEdgeDeploymentStage",
     "description": "Grants permission to start an edge deployment stage",

package/data/actions/sustainability.json

@@ -6,5 +6,21 @@
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
+  },
+  "getestimatedcarbonemissions": {
+    "name": "GetEstimatedCarbonEmissions",
+    "description": "Grants permission to view estimated carbon emission values based on customer grouping and filtering parameters",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getestimatedcarbonemissionsdimensionvalues": {
+    "name": "GetEstimatedCarbonEmissionsDimensionValues",
+    "description": "Grants permission to view the possible dimension values available for the estimated carbon emission values",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
   }
 }