@cloud-copilot/iam-data 0.19.202606181 → 0.19.202606231

package/data/actions/datazone.json

@@ -730,6 +730,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getcompute": {
+    "name": "GetCompute",
+    "description": "Grants permission to get compute",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getconnection": {
     "name": "GetConnection",
     "description": "Grants permission to get connections",
@@ -1620,6 +1628,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startcompute": {
+    "name": "StartCompute",
+    "description": "Grants permission to start compute",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startconversation": {
     "name": "StartConversation",
     "description": "Grants permission to start conversations",
@@ -1668,6 +1684,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startnotebooksync": {
+    "name": "StartNotebookSync",
+    "description": "Grants permission to start notebook sync",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stopcompute": {
+    "name": "StopCompute",
+    "description": "Grants permission to stop compute",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "stopmetadatagenerationrun": {
     "name": "StopMetadataGenerationRun",
     "description": "Grants permission to stop metadata generation run",

package/data/actions/ecs.json

@@ -1528,6 +1528,7 @@
       "ecs:propagate-tags",
       "ecs:subnet",
       "ecs:task-cpu",
+      "ecs:task-definition",
       "ecs:task-memory"
     ],
     "dependentActions": []

package/data/actions/eks.json

@@ -157,7 +157,8 @@
       "eks:deletionProtection",
       "eks:controlPlaneScalingTier",
       "eks:encryptionConfigProviderKeyArns",
-      "eks:zonalShiftEnabled"
+      "eks:zonalShiftEnabled",
+      "eks:controlPlaneEgressMode"
     ],
     "dependentActions": []
   },
@@ -1163,7 +1164,8 @@
       "eks:endpointPrivateAccess",
       "eks:deletionProtection",
       "eks:controlPlaneScalingTier",
-      "eks:zonalShiftEnabled"
+      "eks:zonalShiftEnabled",
+      "eks:controlPlaneEgressMode"
     ],
     "dependentActions": []
   },

package/data/actions/guardduty.json

@@ -68,6 +68,14 @@
       "iam:PutRolePolicy"
     ]
   },
+  "createinvestigation": {
+    "name": "CreateInvestigation",
+    "description": "Grants permission to create a GuardDuty investigation",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createmalwareprotectionplan": {
     "name": "CreateMalwareProtectionPlan",
     "description": "Grants permission to create a new Malware Protection plan",
@@ -448,6 +456,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getinvestigation": {
+    "name": "GetInvestigation",
+    "description": "Grants permission to retrieve a GuardDuty investigation",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getinvitationscount": {
     "name": "GetInvitationsCount",
     "description": "Grants permission to retrieve the count of all GuardDuty invitations sent to a specified account, which does not include the accepted invitation",
@@ -635,6 +651,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listinvestigations": {
+    "name": "ListInvestigations",
+    "description": "Grants permission to retrieve a list of GuardDuty investigations",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listinvitations": {
     "name": "ListInvitations",
     "description": "Grants permission to retrieve a list of all of the GuardDuty membership invitations that were sent to an AWS account",

package/data/actions/lambda.json

@@ -47,6 +47,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "connectmicrovm": {
+    "name": "ConnectMicrovm",
+    "isPermissionOnly": true,
+    "description": "Grants permission to connect to a Lambda MicroVM via HTTP (VPC Endpoint only)",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createalias": {
     "name": "CreateAlias",
     "description": "Grants permission to create an alias for a Lambda function version",
@@ -153,6 +162,73 @@
     ],
     "dependentActions": []
   },
+  "createmicrovmauthtoken": {
+    "name": "CreateMicrovmAuthToken",
+    "description": "Grants permission to create an auth token for an AWS Lambda MicroVM",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "microvmImage",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createmicrovmimage": {
+    "name": "CreateMicrovmImage",
+    "description": "Grants permission to create an AWS Lambda MicroVM image",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": [
+      "iam:PassRole",
+      "lambda:PassNetworkConnector"
+    ]
+  },
+  "createmicrovmshellauthtoken": {
+    "name": "CreateMicrovmShellAuthToken",
+    "description": "Grants permission to create a shell auth token for an AWS Lambda MicroVM",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "microvmImage",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createnetworkconnector": {
+    "name": "CreateNetworkConnector",
+    "description": "Grants permission to create an AWS Lambda network connector",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "networkConnector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "iam:CreateServiceLinkedRole",
+          "iam:PassRole"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "lambda:SecurityGroupIds",
+      "lambda:SubnetIds"
+    ],
+    "dependentActions": []
+  },
   "deletealias": {
     "name": "DeleteAlias",
     "description": "Grants permission to delete an AWS Lambda function alias",
@@ -308,6 +384,51 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletemicrovmimage": {
+    "name": "DeleteMicrovmImage",
+    "description": "Grants permission to delete an AWS Lambda MicroVM image",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "microvmImage",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletemicrovmimageversion": {
+    "name": "DeleteMicrovmImageVersion",
+    "description": "Grants permission to delete a version of an AWS Lambda MicroVM image",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "microvmImage",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletenetworkconnector": {
+    "name": "DeleteNetworkConnector",
+    "description": "Grants permission to delete an AWS Lambda network connector",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "networkConnector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteprovisionedconcurrencyconfig": {
     "name": "DeleteProvisionedConcurrencyConfig",
     "description": "Grants permission to delete the provisioned concurrency configuration for an AWS Lambda function",
@@ -629,6 +750,81 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getmicrovm": {
+    "name": "GetMicrovm",
+    "description": "Grants permission to view information about an AWS Lambda MicroVM",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "microvmImage",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getmicrovmimage": {
+    "name": "GetMicrovmImage",
+    "description": "Grants permission to view information about an AWS Lambda MicroVM image",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "microvmImage",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getmicrovmimagebuild": {
+    "name": "GetMicrovmImageBuild",
+    "description": "Grants permission to view information about a build of an AWS Lambda MicroVM image version",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "microvmImage",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getmicrovmimageversion": {
+    "name": "GetMicrovmImageVersion",
+    "description": "Grants permission to view information about a version of an AWS Lambda MicroVM image",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "microvmImage",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getnetworkconnector": {
+    "name": "GetNetworkConnector",
+    "description": "Grants permission to view details about an AWS Lambda network connector",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "networkConnector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getpolicy": {
     "name": "GetPolicy",
     "description": "Grants permission to view the resource-based policy for an AWS Lambda function, version, or alias",
@@ -873,6 +1069,83 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listmanagedmicrovmimageversions": {
+    "name": "ListManagedMicrovmImageVersions",
+    "description": "Grants permission to retrieve a list of versions for a managed AWS Lambda MicroVM image",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "microvmImage",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listmanagedmicrovmimages": {
+    "name": "ListManagedMicrovmImages",
+    "description": "Grants permission to retrieve a list of managed AWS Lambda MicroVM images",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listmicrovmimagebuilds": {
+    "name": "ListMicrovmImageBuilds",
+    "description": "Grants permission to retrieve a list of builds for an AWS Lambda MicroVM image version",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "microvmImage",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listmicrovmimageversions": {
+    "name": "ListMicrovmImageVersions",
+    "description": "Grants permission to retrieve a list of versions for an AWS Lambda MicroVM image",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "microvmImage",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listmicrovmimages": {
+    "name": "ListMicrovmImages",
+    "description": "Grants permission to retrieve a list of AWS Lambda MicroVM images",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listmicrovms": {
+    "name": "ListMicrovms",
+    "description": "Grants permission to retrieve a list of AWS Lambda MicroVMs",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnetworkconnectors": {
+    "name": "ListNetworkConnectors",
+    "description": "Grants permission to retrieve a list of AWS Lambda network connectors",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listprovisionedconcurrencyconfigs": {
     "name": "ListProvisionedConcurrencyConfigs",
     "description": "Grants permission to retrieve a list of provisioned concurrency configurations for an AWS Lambda function",
@@ -890,7 +1163,7 @@
   },
   "listtags": {
     "name": "ListTags",
-    "description": "Grants permission to retrieve a list of tags for an AWS Lambda function, event source mapping, capacity provider, or code signing configuration resource",
+    "description": "Grants permission to retrieve a list of tags for an AWS Lambda function, event source mapping, capacity provider, code signing configuration, network connector or MicroVM image resource",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -916,6 +1189,18 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "microvmImage",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "networkConnector",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -952,6 +1237,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "passnetworkconnector": {
+    "name": "PassNetworkConnector",
+    "isPermissionOnly": true,
+    "description": "Grants permission to pass an AWS Lambda network connector to a service",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "publishlayerversion": {
     "name": "PublishLayerVersion",
     "description": "Grants permission to create an AWS Lambda layer",
@@ -1134,6 +1428,39 @@
     ],
     "dependentActions": []
   },
+  "resumemicrovm": {
+    "name": "ResumeMicrovm",
+    "description": "Grants permission to resume a suspended AWS Lambda MicroVM",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "microvmImage",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "runmicrovm": {
+    "name": "RunMicrovm",
+    "description": "Grants permission to run an AWS Lambda MicroVM from a MicroVM image",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "microvmImage",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "iam:PassRole",
+      "lambda:PassNetworkConnector"
+    ]
+  },
   "senddurableexecutioncallbackfailure": {
     "name": "SendDurableExecutionCallbackFailure",
     "description": "Grants permission to send a failure response for a callback operation in an AWS Lambda durable execution",
@@ -1194,9 +1521,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "suspendmicrovm": {
+    "name": "SuspendMicrovm",
+    "description": "Grants permission to suspend an AWS Lambda MicroVM",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "microvmImage",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
-    "description": "Grants permission to add tags to an AWS Lambda function, event source mapping, capacity provider, or code signing configuration resource",
+    "description": "Grants permission to add tags to an AWS Lambda function, event source mapping, capacity provider, code signing configuration, network connector or MicroVM image resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
       {
@@ -1222,6 +1564,18 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "microvmImage",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "networkConnector",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1230,9 +1584,24 @@
     ],
     "dependentActions": []
   },
+  "terminatemicrovm": {
+    "name": "TerminateMicrovm",
+    "description": "Grants permission to terminate an AWS Lambda MicroVM",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "microvmImage",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "untagresource": {
     "name": "UntagResource",
-    "description": "Grants permission to remove tags from an AWS Lambda function, event source mapping, capacity provider, or code signing configuration resource",
+    "description": "Grants permission to remove tags from an AWS Lambda function, event source mapping, capacity provider, code signing configuration, network connector or MicroVM image resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
       {
@@ -1258,6 +1627,18 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "microvmImage",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "networkConnector",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1415,5 +1796,53 @@
       "lambda:FunctionArn"
     ],
     "dependentActions": []
+  },
+  "updatemicrovmimage": {
+    "name": "UpdateMicrovmImage",
+    "description": "Grants permission to update an AWS Lambda MicroVM image",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "microvmImage",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "iam:PassRole",
+      "lambda:PassNetworkConnector"
+    ]
+  },
+  "updatemicrovmimageversion": {
+    "name": "UpdateMicrovmImageVersion",
+    "description": "Grants permission to update a version of an AWS Lambda MicroVM image",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "microvmImage",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatenetworkconnector": {
+    "name": "UpdateNetworkConnector",
+    "description": "Grants permission to update an AWS Lambda network connector",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "networkConnector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
   }
 }