@cloud-copilot/iam-data 0.19.202607021 → 0.19.202607151

package/data/actions/s3tables.json

@@ -1,4 +1,59 @@
 {
+  "gettabledata": {
+    "name": "GetTableData",
+    "description": "Grants permission to read metadata and data objects from a table storage endpoint using S3 APIs",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3tables:namespace",
+      "s3tables:tableName"
+    ],
+    "dependentActions": []
+  },
+  "puttabledata": {
+    "name": "PutTableData",
+    "description": "Grants permission to write metadata and data objects to a table storage endpoint using S3 APIs",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3tables:namespace",
+      "s3tables:tableName"
+    ],
+    "dependentActions": []
+  },
+  "puttableencryption": {
+    "name": "PutTableEncryption",
+    "description": "Grants permission to put encryption configuration on a table",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3tables:KMSKeyArn",
+      "s3tables:SSEAlgorithm",
+      "s3tables:namespace"
+    ],
+    "dependentActions": []
+  },
   "createnamespace": {
     "name": "CreateNamespace",
     "description": "Grants permission to create a namespace",
@@ -27,13 +82,13 @@
       }
     ],
     "conditionKeys": [
-      "s3tables:namespace",
-      "s3tables:SSEAlgorithm",
-      "s3tables:KMSKeyArn",
-      "s3tables:TableBucketTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
       "aws:ResourceTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "s3tables:KMSKeyArn",
+      "s3tables:SSEAlgorithm",
+      "s3tables:TableBucketTag/${TagKey}",
+      "s3tables:namespace"
     ],
     "dependentActions": []
   },
@@ -50,12 +105,12 @@
       }
     ],
     "conditionKeys": [
-      "s3tables:SSEAlgorithm",
-      "s3tables:KMSKeyArn",
-      "s3tables:TableBucketTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
       "aws:ResourceTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "s3tables:KMSKeyArn",
+      "s3tables:SSEAlgorithm",
+      "s3tables:TableBucketTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -142,7 +197,7 @@
   "deletetablebucketpolicy": {
     "name": "DeleteTableBucketPolicy",
     "description": "Grants permission to delete a policy on a table bucket",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "TableBucket",
@@ -172,7 +227,7 @@
   "deletetablepolicy": {
     "name": "DeleteTablePolicy",
     "description": "Grants permission to delete a policy on a table",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "Table",
@@ -345,25 +400,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "gettabledata": {
-    "name": "GetTableData",
-    "isPermissionOnly": true,
-    "description": "Grants permission to read metadata and data objects from a table storage endpoint using S3 APIs",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "Table",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "s3tables:namespace",
-      "s3tables:tableName"
-    ],
-    "dependentActions": []
-  },
   "gettableencryption": {
     "name": "GetTableEncryption",
     "description": "Grants permission to retrieve encryption configuration on a table",
@@ -659,7 +695,7 @@
   "puttablebucketpolicy": {
     "name": "PutTableBucketPolicy",
     "description": "Grants permission to create or overwrite a policy on a table bucket",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "TableBucket",
@@ -703,45 +739,6 @@
     ],
     "dependentActions": []
   },
-  "puttabledata": {
-    "name": "PutTableData",
-    "isPermissionOnly": true,
-    "description": "Grants permission to write metadata and data objects to a table storage endpoint using S3 APIs",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "Table",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "s3tables:namespace",
-      "s3tables:tableName"
-    ],
-    "dependentActions": []
-  },
-  "puttableencryption": {
-    "name": "PutTableEncryption",
-    "isPermissionOnly": true,
-    "description": "Grants permission to put encryption configuration on a table",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "Table",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "s3tables:namespace",
-      "s3tables:SSEAlgorithm",
-      "s3tables:KMSKeyArn"
-    ],
-    "dependentActions": []
-  },
   "puttablemaintenanceconfiguration": {
     "name": "PutTableMaintenanceConfiguration",
     "description": "Grants permission to put a maintenance configuration on a table",
@@ -763,7 +760,7 @@
   "puttablepolicy": {
     "name": "PutTablePolicy",
     "description": "Grants permission to create or overwrite a policy on a table",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "Table",
@@ -827,9 +824,9 @@
       }
     ],
     "conditionKeys": [
+      "s3tables:StorageClass",
       "s3tables:namespace",
-      "s3tables:tableName",
-      "s3tables:StorageClass"
+      "s3tables:tableName"
     ],
     "dependentActions": []
   },
@@ -854,7 +851,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a S3 Tables resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Table",
@@ -870,9 +867,9 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
       "aws:RequestTag/${TagKey}",
       "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
       "s3tables:TableBucketTag/${TagKey}"
     ],
     "dependentActions": []
@@ -880,7 +877,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a S3 Tables resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Table",
@@ -896,8 +893,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
       "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
       "s3tables:TableBucketTag/${TagKey}"
     ],
     "dependentActions": []

package/data/actions/s3vectors.json

@@ -12,12 +12,12 @@
       }
     ],
     "conditionKeys": [
-      "s3vectors:sseType",
-      "s3vectors:kmsKeyArn",
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
       "aws:ResourceTag/${TagKey}",
-      "s3vectors:VectorBucketTag/${TagKey}"
+      "aws:TagKeys",
+      "s3vectors:VectorBucketTag/${TagKey}",
+      "s3vectors:kmsKeyArn",
+      "s3vectors:sseType"
     ],
     "dependentActions": []
   },
@@ -34,12 +34,12 @@
       }
     ],
     "conditionKeys": [
-      "s3vectors:sseType",
-      "s3vectors:kmsKeyArn",
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
       "aws:ResourceTag/${TagKey}",
-      "s3vectors:VectorBucketTag/${TagKey}"
+      "aws:TagKeys",
+      "s3vectors:VectorBucketTag/${TagKey}",
+      "s3vectors:kmsKeyArn",
+      "s3vectors:sseType"
     ],
     "dependentActions": []
   },
@@ -82,7 +82,7 @@
   "deletevectorbucketpolicy": {
     "name": "DeleteVectorBucketPolicy",
     "description": "Grants permission to delete the IAM resource policy from a specified vector bucket",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "VectorBucket",
@@ -246,9 +246,7 @@
         "name": "Index",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "s3vectors:GetVectors"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -260,7 +258,7 @@
   "putvectorbucketpolicy": {
     "name": "PutVectorBucketPolicy",
     "description": "Grants permission to add an IAM resource policy to a specified vector bucket",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "VectorBucket",
@@ -302,9 +300,7 @@
         "name": "Index",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "s3vectors:GetVectors"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -316,7 +312,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a S3Vector resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Index",
@@ -333,8 +329,8 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
       "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
       "s3vectors:VectorBucketTag/${TagKey}"
     ],
     "dependentActions": []
@@ -342,7 +338,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a S3Vector resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Index",
@@ -358,8 +354,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
       "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
       "s3vectors:VectorBucketTag/${TagKey}"
     ],
     "dependentActions": []

package/data/actions/sagemaker-data-science-assistant.json

@@ -1,7 +1,6 @@
 {
   "sendconversation": {
     "name": "SendConversation",
-    "isPermissionOnly": true,
     "description": "Grants permission to start a conversation with SageMaker data science assistant",
     "accessLevel": "Write",
     "resourceTypes": [],

package/data/actions/sagemaker-geospatial.json

@@ -42,9 +42,7 @@
         "name": "EarthObservationJob",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -61,9 +59,7 @@
         "name": "VectorEnrichmentJob",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -118,9 +114,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "getvectorenrichmentjob": {
     "name": "GetVectorEnrichmentJob",
@@ -209,10 +203,7 @@
         "name": "EarthObservationJob",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker-geospatial:TagResource"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -230,10 +221,7 @@
         "name": "VectorEnrichmentJob",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker-geospatial:TagResource"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -279,7 +267,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag an SageMaker Geospatial resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "EarthObservationJob",
@@ -301,16 +289,16 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
       "aws:RequestTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag an SageMaker Geospatial resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "EarthObservationJob",