@cloud-copilot/iam-data 0.19.202606031 → 0.19.202606051

package/data/actions/quicksight.json

@@ -35,6 +35,21 @@
     ],
     "dependentActions": []
   },
+  "batchdeleteknowledgebase": {
+    "name": "BatchDeleteKnowledgeBase",
+    "description": "Grants permission to delete one or more knowledge bases",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "knowledgeBase",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "batchdeletetopicreviewedanswer": {
     "name": "BatchDeleteTopicReviewedAnswer",
     "description": "Grants permission to delete reviewed answers for a topic",
@@ -443,13 +458,27 @@
         "name": "namespace",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "ds:CreateIdentityPoolDirectory"
+        ]
       }
     ],
-    "conditionKeys": [],
-    "dependentActions": [
-      "ds:CreateIdentityPoolDirectory"
-    ]
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createoauthclientapplication": {
+    "name": "CreateOAuthClientApplication",
+    "description": "Grants permission to create an OAuth client application",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
   },
   "createreader": {
     "name": "CreateReader",
@@ -981,6 +1010,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteknowledgebase": {
+    "name": "DeleteKnowledgeBase",
+    "description": "Grants permission to delete a knowledge base",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "knowledgeBase",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletenamespace": {
     "name": "DeleteNamespace",
     "description": "Grants permission to delete a QuickSight namespace",
@@ -998,6 +1042,24 @@
       "ds:DeleteDirectory"
     ]
   },
+  "deleteoauthclientapplication": {
+    "name": "DeleteOAuthClientApplication",
+    "description": "Grants permission to delete an OAuth client application",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "oauthClientApplication",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "deleterefreshschedule": {
     "name": "DeleteRefreshSchedule",
     "description": "Grants permission to delete a refresh schedule for a dataset",
@@ -1781,6 +1843,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeknowledgebase": {
+    "name": "DescribeKnowledgeBase",
+    "description": "Grants permission to describe a knowledge base",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "knowledgeBase",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeknowledgebasepermissions": {
+    "name": "DescribeKnowledgeBasePermissions",
+    "description": "Grants permission to describe the resource policy of a knowledge base",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "knowledgeBase",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describenamespace": {
     "name": "DescribeNamespace",
     "description": "Grants permission to describe a QuickSight namespace",
@@ -1796,6 +1888,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeoauthclientapplication": {
+    "name": "DescribeOAuthClientApplication",
+    "description": "Grants permission to describe an OAuth client application",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "oauthClientApplication",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "describeqpersonalizationconfiguration": {
     "name": "DescribeQPersonalizationConfiguration",
     "description": "Grants permission to describe a personalization configuration",
@@ -2566,6 +2676,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listknowledgebases": {
+    "name": "ListKnowledgeBases",
+    "description": "Grants permission to list all knowledge bases in an account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listnamespaces": {
     "name": "ListNamespaces",
     "description": "Grants permission to lists all namespaces in a QuickSight account",
@@ -2574,6 +2692,17 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listoauthclientapplications": {
+    "name": "ListOAuthClientApplications",
+    "description": "Grants permission to list OAuth client applications in an account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "listrefreshschedules": {
     "name": "ListRefreshSchedules",
     "description": "Grants permission to list all refresh schedules on a dataset",
@@ -2699,6 +2828,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "namespace",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "oauthClientApplication",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "template",
         "required": false,
@@ -2717,6 +2858,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "user",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "vpcconnection",
         "required": false,
@@ -2877,6 +3024,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listusersindexcapacity": {
+    "name": "ListUsersIndexCapacity",
+    "isPermissionOnly": true,
+    "description": "Grants permission to list users index capacity",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listvpcconnections": {
     "name": "ListVPCConnections",
     "description": "Grants permission to list all vpc connections",
@@ -2988,13 +3144,16 @@
       {
         "name": "user",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "quicksight:IamArn",
+          "quicksight:SessionName"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "quicksight:IamArn",
-      "quicksight:SessionName"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -3168,6 +3327,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "searchknowledgebases": {
+    "name": "SearchKnowledgeBases",
+    "description": "Grants permission to search for a sub-set of knowledge bases",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "knowledgeBase",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "searchspaces": {
     "name": "SearchSpaces",
     "description": "Grants permission to search spaces",
@@ -3373,6 +3547,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "namespace",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "oauthClientApplication",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "template",
         "required": false,
@@ -3391,6 +3577,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "user",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "vpcconnection",
         "required": false,
@@ -3506,6 +3698,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "namespace",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "oauthClientApplication",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "template",
         "required": false,
@@ -3524,6 +3728,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "user",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "vpcconnection",
         "required": false,
@@ -4031,6 +4241,39 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateknowledgebasepermissions": {
+    "name": "UpdateKnowledgeBasePermissions",
+    "description": "Grants permission to update the resource policy of a knowledge base",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "knowledgeBase",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateoauthclientapplication": {
+    "name": "UpdateOAuthClientApplication",
+    "description": "Grants permission to update an OAuth client application",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "oauthClientApplication",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "updatepublicsharingsettings": {
     "name": "UpdatePublicSharingSettings",
     "description": "Grants permission to enable or disable public sharing on an account",

package/data/actions/securityagent.json

@@ -48,6 +48,40 @@
       "kms:Decrypt"
     ]
   },
+  "batchdeletethreatmodels": {
+    "name": "BatchDeleteThreatModels",
+    "description": "Grants permission to delete multiple threat models in a single request",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
+  "batchdeletethreats": {
+    "name": "BatchDeleteThreats",
+    "description": "Grants permission to delete multiple threats",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
   "batchgetagentspaces": {
     "name": "BatchGetAgentSpaces",
     "description": "Grants permission to retrieve multiple agent spaces in a single request",
@@ -231,6 +265,74 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "batchgetthreatmodeljobtasks": {
+    "name": "BatchGetThreatModelJobTasks",
+    "description": "Grants permission to retrieve multiple tasks for a threat model job in a single request",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
+  "batchgetthreatmodeljobs": {
+    "name": "BatchGetThreatModelJobs",
+    "description": "Grants permission to retrieve details for one or more threat model jobs",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
+  "batchgetthreatmodels": {
+    "name": "BatchGetThreatModels",
+    "description": "Grants permission to retrieve multiple threat models in a single request",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
+  "batchgetthreats": {
+    "name": "BatchGetThreats",
+    "description": "Grants permission to retrieve details for one or more threats",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
   "createagentspace": {
     "name": "CreateAgentSpace",
     "description": "Grants permission to create an agent space record",
@@ -374,6 +476,40 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createthreat": {
+    "name": "CreateThreat",
+    "description": "Grants permission to create a threat in a threat model",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
+  "createthreatmodel": {
+    "name": "CreateThreatModel",
+    "description": "Grants permission to create a new threat model configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
   "deleteagentspace": {
     "name": "DeleteAgentSpace",
     "description": "Grants permission to delete an agent space record",
@@ -921,6 +1057,74 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listthreatmodeljobtasks": {
+    "name": "ListThreatModelJobTasks",
+    "description": "Grants permission to list tasks associated with a specific threat model job",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
+  "listthreatmodeljobs": {
+    "name": "ListThreatModelJobs",
+    "description": "Grants permission to list threat model jobs for a threat model",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
+  "listthreatmodels": {
+    "name": "ListThreatModels",
+    "description": "Grants permission to list threat models for an agent space",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
+  "listthreats": {
+    "name": "ListThreats",
+    "description": "Grants permission to list threats for a threat model job with filtering and pagination support",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
   "putdesignreviewfeedback": {
     "name": "PutDesignReviewFeedback",
     "description": "Grants permission to submit feedback for a design review comment",
@@ -990,6 +1194,24 @@
       "kms:GenerateDataKey"
     ]
   },
+  "startthreatmodeljob": {
+    "name": "StartThreatModelJob",
+    "description": "Grants permission to initiate the execution of a threat model job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt",
+      "kms:GenerateDataKey"
+    ]
+  },
   "stopcodereviewjob": {
     "name": "StopCodeReviewJob",
     "description": "Grants permission to stop the execution of a running code review",
@@ -1024,6 +1246,23 @@
       "kms:Decrypt"
     ]
   },
+  "stopthreatmodeljob": {
+    "name": "StopThreatModelJob",
+    "description": "Grants permission to stop a running threat model job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to a resource",
@@ -1253,6 +1492,40 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatethreat": {
+    "name": "UpdateThreat",
+    "description": "Grants permission to update a threat",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
+  "updatethreatmodel": {
+    "name": "UpdateThreatModel",
+    "description": "Grants permission to update an existing threat model with new configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
   "verifytargetdomain": {
     "name": "VerifyTargetDomain",
     "description": "Grants permission to verify ownership for a registered target domain",

package/data/conditionKeys/finops-agent.json

@@ -0,0 +1 @@
+{}