@cloud-copilot/iam-data 0.19.202606301 → 0.19.202607021

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -11,12 +11,123 @@
11
11
  "dependentActions": []
12
12
  }
13
13
  ],
14
+ "conditionKeys": [
15
+ "aws:RequestTag/${TagKey}",
16
+ "aws:TagKeys",
17
+ "acm:CertificateKeyPairOrigin"
18
+ ],
19
+ "dependentActions": []
20
+ },
21
+ "createacmedomainvalidation": {
22
+ "name": "CreateAcmeDomainValidation",
23
+ "description": "Grants permission to create an ACME domain validation",
24
+ "accessLevel": "Write",
25
+ "resourceTypes": [
26
+ {
27
+ "name": "acme-endpoint",
28
+ "required": true,
29
+ "conditionKeys": [
30
+ "aws:ResourceTag/${TagKey}"
31
+ ],
32
+ "dependentActions": [
33
+ "route53:ChangeResourceRecordSets",
34
+ "route53:GetHostedZone"
35
+ ]
36
+ }
37
+ ],
14
38
  "conditionKeys": [
15
39
  "aws:RequestTag/${TagKey}",
16
40
  "aws:TagKeys"
17
41
  ],
18
42
  "dependentActions": []
19
43
  },
44
+ "createacmeendpoint": {
45
+ "name": "CreateAcmeEndpoint",
46
+ "description": "Grants permission to create an ACME endpoint",
47
+ "accessLevel": "Write",
48
+ "resourceTypes": [],
49
+ "conditionKeys": [
50
+ "aws:RequestTag/${TagKey}",
51
+ "aws:TagKeys"
52
+ ],
53
+ "dependentActions": []
54
+ },
55
+ "createacmeexternalaccountbinding": {
56
+ "name": "CreateAcmeExternalAccountBinding",
57
+ "description": "Grants permission to create an ACME external account binding",
58
+ "accessLevel": "Write",
59
+ "resourceTypes": [
60
+ {
61
+ "name": "acme-endpoint",
62
+ "required": true,
63
+ "conditionKeys": [
64
+ "aws:ResourceTag/${TagKey}"
65
+ ],
66
+ "dependentActions": [
67
+ "iam:PassRole"
68
+ ]
69
+ }
70
+ ],
71
+ "conditionKeys": [
72
+ "aws:RequestTag/${TagKey}",
73
+ "aws:TagKeys"
74
+ ],
75
+ "dependentActions": []
76
+ },
77
+ "deleteacmedomainvalidation": {
78
+ "name": "DeleteAcmeDomainValidation",
79
+ "description": "Grants permission to delete an ACME domain validation",
80
+ "accessLevel": "Write",
81
+ "resourceTypes": [
82
+ {
83
+ "name": "acme-domain-validation",
84
+ "required": true,
85
+ "conditionKeys": [],
86
+ "dependentActions": []
87
+ }
88
+ ],
89
+ "conditionKeys": [
90
+ "aws:ResourceTag/${TagKey}"
91
+ ],
92
+ "dependentActions": [
93
+ "route53:ChangeResourceRecordSets",
94
+ "route53:GetChange"
95
+ ]
96
+ },
97
+ "deleteacmeendpoint": {
98
+ "name": "DeleteAcmeEndpoint",
99
+ "description": "Grants permission to delete an ACME endpoint",
100
+ "accessLevel": "Write",
101
+ "resourceTypes": [
102
+ {
103
+ "name": "acme-endpoint",
104
+ "required": true,
105
+ "conditionKeys": [],
106
+ "dependentActions": []
107
+ }
108
+ ],
109
+ "conditionKeys": [
110
+ "aws:ResourceTag/${TagKey}"
111
+ ],
112
+ "dependentActions": []
113
+ },
114
+ "deleteacmeexternalaccountbinding": {
115
+ "name": "DeleteAcmeExternalAccountBinding",
116
+ "description": "Grants permission to delete an ACME external account binding",
117
+ "accessLevel": "Write",
118
+ "resourceTypes": [
119
+ {
120
+ "name": "acme-external-account-binding",
121
+ "required": true,
122
+ "conditionKeys": [],
123
+ "dependentActions": []
124
+ }
125
+ ],
126
+ "conditionKeys": [
127
+ "aws:ResourceTag/${TagKey}"
128
+ ],
129
+ "dependentActions": []
130
+ },
20
131
  "deletecertificate": {
21
132
  "name": "DeleteCertificate",
22
133
  "description": "Grants permission to delete a certificate and its associated private key",
@@ -29,7 +140,77 @@
29
140
  "dependentActions": []
30
141
  }
31
142
  ],
32
- "conditionKeys": [],
143
+ "conditionKeys": [
144
+ "acm:CertificateKeyPairOrigin"
145
+ ],
146
+ "dependentActions": []
147
+ },
148
+ "describeacmeaccount": {
149
+ "name": "DescribeAcmeAccount",
150
+ "description": "Grants permission to retrieve details of an ACME account",
151
+ "accessLevel": "Read",
152
+ "resourceTypes": [
153
+ {
154
+ "name": "acme-endpoint",
155
+ "required": true,
156
+ "conditionKeys": [],
157
+ "dependentActions": []
158
+ }
159
+ ],
160
+ "conditionKeys": [
161
+ "aws:ResourceTag/${TagKey}"
162
+ ],
163
+ "dependentActions": []
164
+ },
165
+ "describeacmedomainvalidation": {
166
+ "name": "DescribeAcmeDomainValidation",
167
+ "description": "Grants permission to retrieve details of an ACME domain validation",
168
+ "accessLevel": "Read",
169
+ "resourceTypes": [
170
+ {
171
+ "name": "acme-domain-validation",
172
+ "required": true,
173
+ "conditionKeys": [],
174
+ "dependentActions": []
175
+ }
176
+ ],
177
+ "conditionKeys": [
178
+ "aws:ResourceTag/${TagKey}"
179
+ ],
180
+ "dependentActions": []
181
+ },
182
+ "describeacmeendpoint": {
183
+ "name": "DescribeAcmeEndpoint",
184
+ "description": "Grants permission to retrieve details of an ACME endpoint",
185
+ "accessLevel": "Read",
186
+ "resourceTypes": [
187
+ {
188
+ "name": "acme-endpoint",
189
+ "required": true,
190
+ "conditionKeys": [],
191
+ "dependentActions": []
192
+ }
193
+ ],
194
+ "conditionKeys": [
195
+ "aws:ResourceTag/${TagKey}"
196
+ ],
197
+ "dependentActions": []
198
+ },
199
+ "describeacmeexternalaccountbinding": {
200
+ "name": "DescribeAcmeExternalAccountBinding",
201
+ "description": "Grants permission to retrieve details of an ACME external account binding",
202
+ "accessLevel": "Read",
203
+ "resourceTypes": [
204
+ {
205
+ "name": "acme-external-account-binding",
206
+ "required": true,
207
+ "conditionKeys": [],
208
+ "dependentActions": []
209
+ }
210
+ ],
211
+ "conditionKeys": [
212
+ "aws:ResourceTag/${TagKey}"
213
+ ],
33
214
  "dependentActions": []
34
215
  },
35
216
  "describecertificate": {
@@ -72,6 +253,23 @@
72
253
  "conditionKeys": [],
73
254
  "dependentActions": []
74
255
  },
256
+ "getacmeexternalaccountbindingcredentials": {
257
+ "name": "GetAcmeExternalAccountBindingCredentials",
258
+ "description": "Grants permission to retrieve credentials for an ACME external account binding",
259
+ "accessLevel": "Read",
260
+ "resourceTypes": [
261
+ {
262
+ "name": "acme-external-account-binding",
263
+ "required": true,
264
+ "conditionKeys": [],
265
+ "dependentActions": []
266
+ }
267
+ ],
268
+ "conditionKeys": [
269
+ "aws:ResourceTag/${TagKey}"
270
+ ],
271
+ "dependentActions": []
272
+ },
75
273
  "getcertificate": {
76
274
  "name": "GetCertificate",
77
275
  "description": "Grants permission to retrieve a certificate and certificate chain for a certificate ARN",
@@ -105,6 +303,65 @@
105
303
  ],
106
304
  "dependentActions": []
107
305
  },
306
+ "listacmeaccounts": {
307
+ "name": "ListAcmeAccounts",
308
+ "description": "Grants permission to list ACME accounts",
309
+ "accessLevel": "List",
310
+ "resourceTypes": [
311
+ {
312
+ "name": "acme-endpoint",
313
+ "required": true,
314
+ "conditionKeys": [],
315
+ "dependentActions": []
316
+ }
317
+ ],
318
+ "conditionKeys": [
319
+ "aws:ResourceTag/${TagKey}"
320
+ ],
321
+ "dependentActions": []
322
+ },
323
+ "listacmedomainvalidations": {
324
+ "name": "ListAcmeDomainValidations",
325
+ "description": "Grants permission to list ACME domain validations",
326
+ "accessLevel": "List",
327
+ "resourceTypes": [
328
+ {
329
+ "name": "acme-endpoint",
330
+ "required": true,
331
+ "conditionKeys": [],
332
+ "dependentActions": []
333
+ }
334
+ ],
335
+ "conditionKeys": [
336
+ "aws:ResourceTag/${TagKey}"
337
+ ],
338
+ "dependentActions": []
339
+ },
340
+ "listacmeendpoints": {
341
+ "name": "ListAcmeEndpoints",
342
+ "description": "Grants permission to list ACME endpoints",
343
+ "accessLevel": "List",
344
+ "resourceTypes": [],
345
+ "conditionKeys": [],
346
+ "dependentActions": []
347
+ },
348
+ "listacmeexternalaccountbindings": {
349
+ "name": "ListAcmeExternalAccountBindings",
350
+ "description": "Grants permission to list ACME external account bindings",
351
+ "accessLevel": "List",
352
+ "resourceTypes": [
353
+ {
354
+ "name": "acme-endpoint",
355
+ "required": true,
356
+ "conditionKeys": [],
357
+ "dependentActions": []
358
+ }
359
+ ],
360
+ "conditionKeys": [
361
+ "aws:ResourceTag/${TagKey}"
362
+ ],
363
+ "dependentActions": []
364
+ },
108
365
  "listcertificates": {
109
366
  "name": "ListCertificates",
110
367
  "description": "Grants permission to retrieve a list of certificates for specific certificate parameters",
@@ -128,6 +385,39 @@
128
385
  "conditionKeys": [],
129
386
  "dependentActions": []
130
387
  },
388
+ "listtagsforresource": {
389
+ "name": "ListTagsForResource",
390
+ "description": "Grants permission to list tags for a resource",
391
+ "accessLevel": "Read",
392
+ "resourceTypes": [
393
+ {
394
+ "name": "acme-domain-validation",
395
+ "required": false,
396
+ "conditionKeys": [
397
+ "aws:ResourceTag/${TagKey}"
398
+ ],
399
+ "dependentActions": []
400
+ },
401
+ {
402
+ "name": "acme-endpoint",
403
+ "required": false,
404
+ "conditionKeys": [
405
+ "aws:ResourceTag/${TagKey}"
406
+ ],
407
+ "dependentActions": []
408
+ },
409
+ {
410
+ "name": "acme-external-account-binding",
411
+ "required": false,
412
+ "conditionKeys": [
413
+ "aws:ResourceTag/${TagKey}"
414
+ ],
415
+ "dependentActions": []
416
+ }
417
+ ],
418
+ "conditionKeys": [],
419
+ "dependentActions": []
420
+ },
131
421
  "putaccountconfiguration": {
132
422
  "name": "PutAccountConfiguration",
133
423
  "description": "Grants permission to update account level configuration in AWS Certificate Manager",
@@ -182,7 +472,8 @@
182
472
  "acm:ValidationMethod",
183
473
  "acm:KeyAlgorithm",
184
474
  "acm:CertificateAuthority",
185
- "acm:Export"
475
+ "acm:Export",
476
+ "acm:CertificateKeyPairOrigin"
186
477
  ],
187
478
  "dependentActions": []
188
479
  },
@@ -201,6 +492,40 @@
201
492
  "conditionKeys": [],
202
493
  "dependentActions": []
203
494
  },
495
+ "revokeacmeaccount": {
496
+ "name": "RevokeAcmeAccount",
497
+ "description": "Grants permission to revoke an ACME account",
498
+ "accessLevel": "Write",
499
+ "resourceTypes": [
500
+ {
501
+ "name": "acme-endpoint",
502
+ "required": true,
503
+ "conditionKeys": [],
504
+ "dependentActions": []
505
+ }
506
+ ],
507
+ "conditionKeys": [
508
+ "aws:ResourceTag/${TagKey}"
509
+ ],
510
+ "dependentActions": []
511
+ },
512
+ "revokeacmeexternalaccountbinding": {
513
+ "name": "RevokeAcmeExternalAccountBinding",
514
+ "description": "Grants permission to revoke an ACME external account binding",
515
+ "accessLevel": "Write",
516
+ "resourceTypes": [
517
+ {
518
+ "name": "acme-external-account-binding",
519
+ "required": true,
520
+ "conditionKeys": [],
521
+ "dependentActions": []
522
+ }
523
+ ],
524
+ "conditionKeys": [
525
+ "aws:ResourceTag/${TagKey}"
526
+ ],
527
+ "dependentActions": []
528
+ },
204
529
  "revokecertificate": {
205
530
  "name": "RevokeCertificate",
206
531
  "description": "Grants permission to revoke an exportable certificate",
@@ -214,7 +539,8 @@
214
539
  }
215
540
  ],
216
541
  "conditionKeys": [
217
- "acm:DomainNames"
542
+ "acm:DomainNames",
543
+ "acm:CertificateKeyPairOrigin"
218
544
  ],
219
545
  "dependentActions": []
220
546
  },
@@ -226,6 +552,128 @@
226
552
  "conditionKeys": [],
227
553
  "dependentActions": []
228
554
  },
555
+ "tagresource": {
556
+ "name": "TagResource",
557
+ "description": "Grants permission to add tags to a resource",
558
+ "accessLevel": "Tagging",
559
+ "resourceTypes": [
560
+ {
561
+ "name": "acme-domain-validation",
562
+ "required": false,
563
+ "conditionKeys": [
564
+ "aws:ResourceTag/${TagKey}"
565
+ ],
566
+ "dependentActions": []
567
+ },
568
+ {
569
+ "name": "acme-endpoint",
570
+ "required": false,
571
+ "conditionKeys": [
572
+ "aws:ResourceTag/${TagKey}"
573
+ ],
574
+ "dependentActions": []
575
+ },
576
+ {
577
+ "name": "acme-external-account-binding",
578
+ "required": false,
579
+ "conditionKeys": [
580
+ "aws:ResourceTag/${TagKey}"
581
+ ],
582
+ "dependentActions": []
583
+ }
584
+ ],
585
+ "conditionKeys": [
586
+ "aws:RequestTag/${TagKey}",
587
+ "aws:TagKeys"
588
+ ],
589
+ "dependentActions": []
590
+ },
591
+ "untagresource": {
592
+ "name": "UntagResource",
593
+ "description": "Grants permission to remove tags from a resource",
594
+ "accessLevel": "Tagging",
595
+ "resourceTypes": [
596
+ {
597
+ "name": "acme-domain-validation",
598
+ "required": false,
599
+ "conditionKeys": [
600
+ "aws:ResourceTag/${TagKey}"
601
+ ],
602
+ "dependentActions": []
603
+ },
604
+ {
605
+ "name": "acme-endpoint",
606
+ "required": false,
607
+ "conditionKeys": [
608
+ "aws:ResourceTag/${TagKey}"
609
+ ],
610
+ "dependentActions": []
611
+ },
612
+ {
613
+ "name": "acme-external-account-binding",
614
+ "required": false,
615
+ "conditionKeys": [
616
+ "aws:ResourceTag/${TagKey}"
617
+ ],
618
+ "dependentActions": []
619
+ }
620
+ ],
621
+ "conditionKeys": [
622
+ "aws:TagKeys"
623
+ ],
624
+ "dependentActions": []
625
+ },
626
+ "updateacmedomainvalidation": {
627
+ "name": "UpdateAcmeDomainValidation",
628
+ "description": "Grants permission to update an ACME domain validation",
629
+ "accessLevel": "Write",
630
+ "resourceTypes": [
631
+ {
632
+ "name": "acme-domain-validation",
633
+ "required": true,
634
+ "conditionKeys": [],
635
+ "dependentActions": []
636
+ }
637
+ ],
638
+ "conditionKeys": [
639
+ "aws:ResourceTag/${TagKey}"
640
+ ],
641
+ "dependentActions": []
642
+ },
643
+ "updateacmeendpoint": {
644
+ "name": "UpdateAcmeEndpoint",
645
+ "description": "Grants permission to update an ACME endpoint",
646
+ "accessLevel": "Write",
647
+ "resourceTypes": [
648
+ {
649
+ "name": "acme-endpoint",
650
+ "required": true,
651
+ "conditionKeys": [],
652
+ "dependentActions": []
653
+ }
654
+ ],
655
+ "conditionKeys": [
656
+ "aws:ResourceTag/${TagKey}"
657
+ ],
658
+ "dependentActions": []
659
+ },
660
+ "updatecertificate": {
661
+ "name": "UpdateCertificate",
662
+ "description": "Grants permission to update a certificate",
663
+ "accessLevel": "Write",
664
+ "resourceTypes": [
665
+ {
666
+ "name": "certificate",
667
+ "required": true,
668
+ "conditionKeys": [],
669
+ "dependentActions": []
670
+ }
671
+ ],
672
+ "conditionKeys": [
673
+ "acm:CertificateKeyPairOrigin"
674
+ ],
675
+ "dependentActions": []
676
+ },
229
677
  "updatecertificateoptions": {
230
678
  "name": "UpdateCertificateOptions",
231
679
  "description": "Grants permission to update a certificate configuration. Use this to specify whether to opt in to or out of certificate transparency logging",