@cloud-copilot/iam-data 0.19.202606171 → 0.19.202606201

package/data/actions/quicksight.json

@@ -17,6 +17,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "batchassignlimitsprofile": {
+    "name": "BatchAssignLimitsProfile",
+    "description": "Grants permission to assign a limits profile to targets",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "limitsProfile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "batchcreatetopicreviewedanswer": {
     "name": "BatchCreateTopicReviewedAnswer",
     "description": "Grants permission to create reviewed answers for a topic",
@@ -77,6 +92,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "batchunassignlimitsprofile": {
+    "name": "BatchUnassignLimitsProfile",
+    "description": "Grants permission to unassign a limits profile from targets",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "limitsProfile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "batchupdatepreferences": {
     "name": "BatchUpdatePreferences",
     "isPermissionOnly": true,
@@ -449,6 +479,24 @@
     ],
     "dependentActions": []
   },
+  "createlimitsprofile": {
+    "name": "CreateLimitsProfile",
+    "description": "Grants permission to create a limits profile",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "limitsProfile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createnamespace": {
     "name": "CreateNamespace",
     "description": "Grants permission to create an QuickSight namespace",
@@ -1025,6 +1073,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletelimitsprofile": {
+    "name": "DeleteLimitsProfile",
+    "description": "Grants permission to delete a limits profile",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "limitsProfile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletenamespace": {
     "name": "DeleteNamespace",
     "description": "Grants permission to delete a QuickSight namespace",
@@ -1430,6 +1493,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeautomationgroup": {
+    "name": "DescribeAutomationGroup",
+    "description": "Grants permission to describe an automation group",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "automationGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeautomationgrouppermissions": {
+    "name": "DescribeAutomationGroupPermissions",
+    "description": "Grants permission to describe permissions for an automation group",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "automationGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeautomationjob": {
     "name": "DescribeAutomationJob",
     "description": "Grants permission to describe an automation job",
@@ -1873,6 +1966,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describelimitsprofile": {
+    "name": "DescribeLimitsProfile",
+    "description": "Grants permission to describe a limits profile",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "limitsProfile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describenamespace": {
     "name": "DescribeNamespace",
     "description": "Grants permission to describe a QuickSight namespace",
@@ -2425,6 +2533,29 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listassignmentsforprincipal": {
+    "name": "ListAssignmentsForPrincipal",
+    "description": "Grants permission to list limits profile assignments for a principal",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "limitsProfile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listautomationgroups": {
+    "name": "ListAutomationGroups",
+    "description": "Grants permission to list all automation groups in an account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listbrands": {
     "name": "ListBrands",
     "description": "Grants permission to lists all brands in an Amazon QuickSight account",
@@ -2684,6 +2815,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listlimitsprofiles": {
+    "name": "ListLimitsProfiles",
+    "description": "Grants permission to list limits profiles",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "limitsProfile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listnamespaces": {
     "name": "ListNamespaces",
     "description": "Grants permission to lists all namespaces in a QuickSight account",
@@ -2703,6 +2849,21 @@
     ],
     "dependentActions": []
   },
+  "listprofileassignments": {
+    "name": "ListProfileAssignments",
+    "description": "Grants permission to list assignments for a limits profile",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "limitsProfile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listrefreshschedules": {
     "name": "ListRefreshSchedules",
     "description": "Grants permission to list all refresh schedules on a dataset",
@@ -3235,6 +3396,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "searchautomationgroups": {
+    "name": "SearchAutomationGroups",
+    "description": "Grants permission to search for automation groups in an account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "searchdashboards": {
     "name": "SearchDashboards",
     "description": "Grants permission to search for a sub-set of QuickSight Dashboards",
@@ -3875,6 +4044,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateautomationgrouppermissions": {
+    "name": "UpdateAutomationGroupPermissions",
+    "description": "Grants permission to update permissions for an automation group",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "automationGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatebrand": {
     "name": "UpdateBrand",
     "description": "Grants permission to update a brand",
@@ -4256,6 +4440,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatelimitsprofile": {
+    "name": "UpdateLimitsProfile",
+    "description": "Grants permission to update a limits profile",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "limitsProfile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateoauthclientapplication": {
     "name": "UpdateOAuthClientApplication",
     "description": "Grants permission to update an OAuth client application",

package/data/actions/s3.json

@@ -736,6 +736,36 @@
     ],
     "dependentActions": []
   },
+  "deleteobjectannotation": {
+    "name": "DeleteObjectAnnotation",
+    "description": "Grants permission to delete an annotation from an object",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "accesspointobject",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "object",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3:authType",
+      "s3:signatureAge",
+      "s3:signatureversion",
+      "s3:TlsVersion",
+      "s3:x-amz-content-sha256",
+      "s3:ResourceAccount",
+      "s3:x-amz-object-if-match",
+      "s3:ExistingObjectTag/<key>"
+    ],
+    "dependentActions": []
+  },
   "deleteobjecttagging": {
     "name": "DeleteObjectTagging",
     "description": "Grants permission to use the tagging subresource to remove the entire tag set from the specified object",
@@ -795,6 +825,37 @@
     ],
     "dependentActions": []
   },
+  "deleteobjectversionannotation": {
+    "name": "DeleteObjectVersionAnnotation",
+    "description": "Grants permission to delete an annotation from a specific version of an object",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "accesspointobject",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "object",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3:authType",
+      "s3:signatureAge",
+      "s3:signatureversion",
+      "s3:TlsVersion",
+      "s3:x-amz-content-sha256",
+      "s3:ResourceAccount",
+      "s3:versionid",
+      "s3:x-amz-object-if-match",
+      "s3:ExistingObjectTag/<key>"
+    ],
+    "dependentActions": []
+  },
   "deleteobjectversiontagging": {
     "name": "DeleteObjectVersionTagging",
     "description": "Grants permission to remove the entire tag set for a specific version of the object",
@@ -2000,6 +2061,35 @@
     ],
     "dependentActions": []
   },
+  "getobjectannotation": {
+    "name": "GetObjectAnnotation",
+    "description": "Grants permission to retrieve an annotation from an object",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "accesspointobject",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "object",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3:authType",
+      "s3:signatureAge",
+      "s3:signatureversion",
+      "s3:TlsVersion",
+      "s3:x-amz-content-sha256",
+      "s3:ResourceAccount",
+      "s3:ExistingObjectTag/<key>"
+    ],
+    "dependentActions": []
+  },
   "getobjectattributes": {
     "name": "GetObjectAttributes",
     "description": "Grants permission to retrieve attributes related to a specific object",
@@ -2198,6 +2288,58 @@
     ],
     "dependentActions": []
   },
+  "getobjectversionannotation": {
+    "name": "GetObjectVersionAnnotation",
+    "description": "Grants permission to retrieve an annotation from a specific version of an object",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "accesspointobject",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "object",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3:authType",
+      "s3:signatureAge",
+      "s3:signatureversion",
+      "s3:TlsVersion",
+      "s3:x-amz-content-sha256",
+      "s3:ResourceAccount",
+      "s3:versionid",
+      "s3:ExistingObjectTag/<key>"
+    ],
+    "dependentActions": []
+  },
+  "getobjectversionannotationforreplication": {
+    "name": "GetObjectVersionAnnotationForReplication",
+    "description": "Grants permission to get an object version annotation for replication",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "object",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3:authType",
+      "s3:ResourceAccount",
+      "s3:signatureAge",
+      "s3:signatureversion",
+      "s3:TlsVersion",
+      "s3:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
   "getobjectversionattributes": {
     "name": "GetObjectVersionAttributes",
     "description": "Grants permission to retrieve attributes related to a specific version of an object",
@@ -2710,6 +2852,69 @@
     ],
     "dependentActions": []
   },
+  "listobjectannotations": {
+    "name": "ListObjectAnnotations",
+    "description": "Grants permission to list annotations on an object",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "accesspointobject",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "object",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3:authType",
+      "s3:signatureAge",
+      "s3:signatureversion",
+      "s3:TlsVersion",
+      "s3:x-amz-content-sha256",
+      "s3:ResourceAccount",
+      "s3:annotation-prefix",
+      "s3:max-annotation-results",
+      "s3:ExistingObjectTag/<key>"
+    ],
+    "dependentActions": []
+  },
+  "listobjectversionannotations": {
+    "name": "ListObjectVersionAnnotations",
+    "description": "Grants permission to list annotations on a specific version of an object",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "accesspointobject",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "object",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3:authType",
+      "s3:signatureAge",
+      "s3:signatureversion",
+      "s3:TlsVersion",
+      "s3:x-amz-content-sha256",
+      "s3:ResourceAccount",
+      "s3:versionid",
+      "s3:annotation-prefix",
+      "s3:max-annotation-results",
+      "s3:ExistingObjectTag/<key>"
+    ],
+    "dependentActions": []
+  },
   "liststoragelensconfigurations": {
     "name": "ListStorageLensConfigurations",
     "description": "Grants permission to list Amazon S3 Storage Lens configurations",
@@ -3491,6 +3696,7 @@
       "s3:x-amz-grant-write",
       "s3:x-amz-grant-write-acp",
       "s3:x-amz-metadata-directive",
+      "s3:x-amz-object-annotation-directive",
       "s3:x-amz-server-side-encryption",
       "s3:x-amz-server-side-encryption-aws-kms-key-id",
       "s3:x-amz-server-side-encryption-customer-algorithm",
@@ -3543,6 +3749,36 @@
     ],
     "dependentActions": []
   },
+  "putobjectannotation": {
+    "name": "PutObjectAnnotation",
+    "description": "Grants permission to add or replace an annotation on an object",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "accesspointobject",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "object",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3:authType",
+      "s3:signatureAge",
+      "s3:signatureversion",
+      "s3:TlsVersion",
+      "s3:x-amz-content-sha256",
+      "s3:ResourceAccount",
+      "s3:x-amz-object-if-match",
+      "s3:ExistingObjectTag/<key>"
+    ],
+    "dependentActions": []
+  },
   "putobjectlegalhold": {
     "name": "PutObjectLegalHold",
     "description": "Grants permission to apply a Legal Hold configuration to the specified object",
@@ -3672,6 +3908,37 @@
     ],
     "dependentActions": []
   },
+  "putobjectversionannotation": {
+    "name": "PutObjectVersionAnnotation",
+    "description": "Grants permission to add or replace an annotation on a specific version of an object",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "accesspointobject",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "object",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3:authType",
+      "s3:signatureAge",
+      "s3:signatureversion",
+      "s3:TlsVersion",
+      "s3:x-amz-content-sha256",
+      "s3:ResourceAccount",
+      "s3:versionid",
+      "s3:x-amz-object-if-match",
+      "s3:ExistingObjectTag/<key>"
+    ],
+    "dependentActions": []
+  },
   "putobjectversiontagging": {
     "name": "PutObjectVersionTagging",
     "description": "Grants permission to set the supplied tag-set for a specific version of an object",
@@ -3817,6 +4084,28 @@
     ],
     "dependentActions": []
   },
+  "replicateobjectannotation": {
+    "name": "ReplicateObjectAnnotation",
+    "description": "Grants permission to replicate annotations to the destination bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "object",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3:authType",
+      "s3:ResourceAccount",
+      "s3:signatureAge",
+      "s3:signatureversion",
+      "s3:TlsVersion",
+      "s3:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
   "replicatetags": {
     "name": "ReplicateTags",
     "description": "Grants permission to replicate object tags to the destination bucket",
@@ -4022,6 +4311,28 @@
     ],
     "dependentActions": []
   },
+  "updatebucketmetadataannotationtableconfiguration": {
+    "name": "UpdateBucketMetadataAnnotationTableConfiguration",
+    "description": "Grants permission to update the annotation table configuration for a bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3:authType",
+      "s3:ResourceAccount",
+      "s3:signatureAge",
+      "s3:signatureversion",
+      "s3:TlsVersion",
+      "s3:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
   "updatebucketmetadatainventorytableconfiguration": {
     "name": "UpdateBucketMetadataInventoryTableConfiguration",
     "description": "Grants permission to update the inventory table configuration on an existing S3 Metadata configuration for a specified general purpose bucket",

package/data/conditionKeys/cloudwatch.json

@@ -1,32 +1,32 @@
 {
   "aws:requesttag/${tagkey}": {
     "key": "aws:RequestTag/${TagKey}",
-    "description": "Filters actions based on the allowed set of values for each of the tags",
+    "description": "Filters access by the presence of tags in the request",
     "type": "String"
   },
   "aws:resourcetag/${tagkey}": {
     "key": "aws:ResourceTag/${TagKey}",
-    "description": "Filters actions based on tag-value associated with the resource",
+    "description": "Filters access by tags associated with the resource",
     "type": "String"
   },
   "aws:tagkeys": {
     "key": "aws:TagKeys",
-    "description": "Filters actions based on the presence of mandatory tags in the request",
+    "description": "Filters access by the presence of tags in the request",
     "type": "ArrayOfString"
   },
   "cloudwatch:alarmactions": {
     "key": "cloudwatch:AlarmActions",
-    "description": "Filters actions based on defined alarm actions",
+    "description": "Filters access by defined alarm actions",
     "type": "ArrayOfString"
   },
   "cloudwatch:namespace": {
     "key": "cloudwatch:namespace",
-    "description": "Filters actions based on the presence of optional namespace values",
+    "description": "Filters access by the presence of optional namespace values",
     "type": "String"
   },
   "cloudwatch:requestinsightruleloggroups": {
     "key": "cloudwatch:requestInsightRuleLogGroups",
-    "description": "Filters actions based on the Log Groups specified in an Insight Rule",
+    "description": "Filters access by the Log Groups specified in an Insight Rule",
     "type": "ArrayOfString"
   },
   "cloudwatch:requestmanagedresourcearns": {