@cloud-copilot/iam-data 0.19.202607021 → 0.19.202607151

package/data/actions/aws-marketplace-management.json

@@ -1,7 +1,6 @@
 {
   "getadditionalsellernotificationrecipients": {
     "name": "GetAdditionalSellerNotificationRecipients",
-    "isPermissionOnly": true,
     "description": "Grants permission to view additional seller notification recipients",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -10,7 +9,6 @@
   },
   "getbankaccountverificationdetails": {
     "name": "GetBankAccountVerificationDetails",
-    "isPermissionOnly": true,
     "description": "Grants permission to view bank account verification status",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -19,7 +17,6 @@
   },
   "getsecondaryuserverificationdetails": {
     "name": "GetSecondaryUserVerificationDetails",
-    "isPermissionOnly": true,
     "description": "Grants permission to view secondary user account verification status",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -28,7 +25,6 @@
   },
   "getsellerverificationdetails": {
     "name": "GetSellerVerificationDetails",
-    "isPermissionOnly": true,
     "description": "Grants permission to view account verification status",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -37,7 +33,6 @@
   },
   "putadditionalsellernotificationrecipients": {
     "name": "PutAdditionalSellerNotificationRecipients",
-    "isPermissionOnly": true,
     "description": "Grants permission to update additional seller notification recipients",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -46,7 +41,6 @@
   },
   "putbankaccountverificationdetails": {
     "name": "PutBankAccountVerificationDetails",
-    "isPermissionOnly": true,
     "description": "Grants permission to update bank account verification status",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -55,7 +49,6 @@
   },
   "putsecondaryuserverificationdetails": {
     "name": "PutSecondaryUserVerificationDetails",
-    "isPermissionOnly": true,
     "description": "Grants permission to update secondary user account verification status",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -64,7 +57,6 @@
   },
   "putsellerverificationdetails": {
     "name": "PutSellerVerificationDetails",
-    "isPermissionOnly": true,
     "description": "Grants permission to update account verification status",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -73,7 +65,6 @@
   },
   "uploadfiles": {
     "name": "uploadFiles",
-    "isPermissionOnly": true,
     "description": "Allows access to the File Upload page inside the AWS Marketplace Management Portal",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -82,7 +73,6 @@
   },
   "viewmarketing": {
     "name": "viewMarketing",
-    "isPermissionOnly": true,
     "description": "Allows access to the Marketing page inside the AWS Marketplace Management Portal",
     "accessLevel": "List",
     "resourceTypes": [],
@@ -91,7 +81,6 @@
   },
   "viewreports": {
     "name": "viewReports",
-    "isPermissionOnly": true,
     "description": "Allows access to the Reports page inside the AWS Marketplace Management Portal",
     "accessLevel": "List",
     "resourceTypes": [],
@@ -100,7 +89,6 @@
   },
   "viewsettings": {
     "name": "viewSettings",
-    "isPermissionOnly": true,
     "description": "Allows access to the Settings page inside the AWS Marketplace Management Portal",
     "accessLevel": "List",
     "resourceTypes": [],
@@ -109,7 +97,6 @@
   },
   "viewsupport": {
     "name": "viewSupport",
-    "isPermissionOnly": true,
     "description": "Allows access to the Customer Support Eligibility page inside the AWS Marketplace Management Portal",
     "accessLevel": "List",
     "resourceTypes": [],

package/data/actions/aws-marketplace.json

@@ -35,7 +35,7 @@
   "deleteresourcepolicy": {
     "name": "DeleteResourcePolicy",
     "description": "Grants permission to delete the resource policy of an existing entity",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "Entity",
@@ -248,7 +248,7 @@
   "putresourcepolicy": {
     "name": "PutResourcePolicy",
     "description": "Grants permission to attach a resource policy to an existing entity",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "Entity",
@@ -273,10 +273,10 @@
       }
     ],
     "conditionKeys": [
-      "catalog:ChangeType",
       "aws-marketplace:Intent",
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "catalog:ChangeType"
     ],
     "dependentActions": []
   },
@@ -318,22 +318,22 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a deployment parameter resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "DeploymentParameter",
         "required": true,
         "conditionKeys": [
-          "aws:ResourceTag/${TagKey}",
           "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
           "aws:TagKeys"
         ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []
@@ -341,7 +341,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a deployment parameter resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "DeploymentParameter",
@@ -383,18 +383,16 @@
         "name": "DeploymentParameter",
         "required": true,
         "conditionKeys": [
-          "aws:ResourceTag/${TagKey}",
           "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
           "aws:TagKeys"
         ],
-        "dependentActions": [
-          "aws-marketplace:TagResource"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []
@@ -552,7 +550,6 @@
   },
   "describebuilds": {
     "name": "DescribeBuilds",
-    "isPermissionOnly": true,
     "description": "Describes Image Builds identified by a build Id",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -561,7 +558,6 @@
   },
   "listbuilds": {
     "name": "ListBuilds",
-    "isPermissionOnly": true,
     "description": "Lists Image Builds.",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -570,7 +566,6 @@
   },
   "startbuild": {
     "name": "StartBuild",
-    "isPermissionOnly": true,
     "description": "Starts an Image Build",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -611,7 +606,6 @@
   },
   "associateproductswithprivatemarketplace": {
     "name": "AssociateProductsWithPrivateMarketplace",
-    "isPermissionOnly": true,
     "description": "Grants permission to approve a request for a product to be associated with the Private Marketplace. This action can be performed by any account in an AWS Organization, provided the user has permissions to do so, and the Organization's Service Control Policies allow it",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -620,7 +614,6 @@
   },
   "createprivatemarketplacerequests": {
     "name": "CreatePrivateMarketplaceRequests",
-    "isPermissionOnly": true,
     "description": "Grants permission to create a new request for a product or products to be associated with the Private Marketplace. This action can be performed by any account in an in an AWS Organization, provided the user has permissions to do so, and the Organization's Service Control Policies allow it",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -629,7 +622,6 @@
   },
   "describeprivatemarketplacerequests": {
     "name": "DescribePrivateMarketplaceRequests",
-    "isPermissionOnly": true,
     "description": "Grants permission to describe requests and associated products in the Private Marketplace. This action can be performed by any account in an AWS Organization, provided the user has permissions to do so, and the Organization's Service Control Policies allow it",
     "accessLevel": "List",
     "resourceTypes": [],
@@ -638,7 +630,6 @@
   },
   "disassociateproductsfromprivatemarketplace": {
     "name": "DisassociateProductsFromPrivateMarketplace",
-    "isPermissionOnly": true,
     "description": "Grants permission to decline a request for a product to be associated with the Private Marketplace. This action can be performed by any account in an AWS Organization, provided the user has permissions to do so, and the Organization's Service Control Policies allow it",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -647,7 +638,6 @@
   },
   "listprivatemarketplacerequests": {
     "name": "ListPrivateMarketplaceRequests",
-    "isPermissionOnly": true,
     "description": "Grants permission to get a queryable list for requests and associated products in the Private Marketplace. This action can be performed by any account in an AWS Organization, provided the user has permissions to do so, and the Organization's Service Control Policies allow it",
     "accessLevel": "List",
     "resourceTypes": [],
@@ -656,7 +646,6 @@
   },
   "describeprocurementsystemconfiguration": {
     "name": "DescribeProcurementSystemConfiguration",
-    "isPermissionOnly": true,
     "description": "Grants permission to describe the Procurement System integration configuration (e.g. Coupa) for the individual account, or for the entire AWS Organization if one exists. This action can only be performed by the master account if using an AWS Organization",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -665,7 +654,6 @@
   },
   "putprocurementsystemconfiguration": {
     "name": "PutProcurementSystemConfiguration",
-    "isPermissionOnly": true,
     "description": "Grants permission to create or update the Procurement System integration configuration (e.g. Coupa) for the individual account, or for the entire AWS Organization if one exists. This action can only be performed by the master account if using an AWS Organization",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -716,8 +704,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws-marketplace:PartyType",
-      "aws-marketplace:AgreementType"
+      "aws-marketplace:AgreementType",
+      "aws-marketplace:PartyType"
     ],
     "dependentActions": []
   },
@@ -727,8 +715,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws-marketplace:PartyType",
-      "aws-marketplace:AgreementType"
+      "aws-marketplace:AgreementType",
+      "aws-marketplace:PartyType"
     ],
     "dependentActions": []
   },
@@ -749,8 +737,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws-marketplace:PartyType",
-      "aws-marketplace:AgreementType"
+      "aws-marketplace:AgreementType",
+      "aws-marketplace:PartyType"
     ],
     "dependentActions": []
   },
@@ -770,8 +758,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws-marketplace:PartyType",
-      "aws-marketplace:AgreementType"
+      "aws-marketplace:AgreementType",
+      "aws-marketplace:PartyType"
     ],
     "dependentActions": []
   },
@@ -781,8 +769,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws-marketplace:PartyType",
-      "aws-marketplace:AgreementType"
+      "aws-marketplace:AgreementType",
+      "aws-marketplace:PartyType"
     ],
     "dependentActions": []
   },
@@ -811,8 +799,8 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws-marketplace:PartyType",
-      "aws-marketplace:AgreementType"
+      "aws-marketplace:AgreementType",
+      "aws-marketplace:PartyType"
     ],
     "dependentActions": []
   },
@@ -830,8 +818,8 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws-marketplace:PartyType",
-      "aws-marketplace:AgreementType"
+      "aws-marketplace:AgreementType",
+      "aws-marketplace:PartyType"
     ],
     "dependentActions": []
   },
@@ -851,8 +839,8 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws-marketplace:PartyType",
-      "aws-marketplace:AgreementType"
+      "aws-marketplace:AgreementType",
+      "aws-marketplace:PartyType"
     ],
     "dependentActions": []
   },
@@ -870,8 +858,8 @@
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws-marketplace:PartyType",
-      "aws-marketplace:AgreementType"
+      "aws-marketplace:AgreementType",
+      "aws-marketplace:PartyType"
     ],
     "dependentActions": []
   },
@@ -881,8 +869,8 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws-marketplace:PartyType",
-      "aws-marketplace:AgreementType"
+      "aws-marketplace:AgreementType",
+      "aws-marketplace:PartyType"
     ],
     "dependentActions": []
   },
@@ -900,8 +888,8 @@
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws-marketplace:PartyType",
-      "aws-marketplace:AgreementType"
+      "aws-marketplace:AgreementType",
+      "aws-marketplace:PartyType"
     ],
     "dependentActions": []
   },
@@ -921,8 +909,8 @@
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws-marketplace:PartyType",
-      "aws-marketplace:AgreementType"
+      "aws-marketplace:AgreementType",
+      "aws-marketplace:PartyType"
     ],
     "dependentActions": []
   },
@@ -932,8 +920,8 @@
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws-marketplace:PartyType",
-      "aws-marketplace:AgreementType"
+      "aws-marketplace:AgreementType",
+      "aws-marketplace:PartyType"
     ],
     "dependentActions": []
   },
@@ -951,8 +939,8 @@
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws-marketplace:PartyType",
-      "aws-marketplace:AgreementType"
+      "aws-marketplace:AgreementType",
+      "aws-marketplace:PartyType"
     ],
     "dependentActions": []
   },
@@ -978,8 +966,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws-marketplace:PartyType",
-      "aws-marketplace:AgreementType"
+      "aws-marketplace:AgreementType",
+      "aws-marketplace:PartyType"
     ],
     "dependentActions": []
   },
@@ -989,8 +977,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws-marketplace:PartyType",
-      "aws-marketplace:AgreementType"
+      "aws-marketplace:AgreementType",
+      "aws-marketplace:PartyType"
     ],
     "dependentActions": []
   },
@@ -1000,8 +988,8 @@
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws-marketplace:PartyType",
-      "aws-marketplace:AgreementType"
+      "aws-marketplace:AgreementType",
+      "aws-marketplace:PartyType"
     ],
     "dependentActions": []
   },
@@ -1011,8 +999,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws-marketplace:PartyType",
-      "aws-marketplace:AgreementType"
+      "aws-marketplace:AgreementType",
+      "aws-marketplace:PartyType"
     ],
     "dependentActions": []
   },
@@ -1022,8 +1010,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws-marketplace:PartyType",
-      "aws-marketplace:AgreementType"
+      "aws-marketplace:AgreementType",
+      "aws-marketplace:PartyType"
     ],
     "dependentActions": []
   },

package/data/actions/aws-portal.json

@@ -1,7 +1,6 @@
 {
   "getconsoleactionsetenforced": {
     "name": "GetConsoleActionSetEnforced",
-    "isPermissionOnly": true,
     "description": "Grants permission to view whether existing or fine-grained IAM actions are being used to control authorization to Billing, Cost Management, and Account consoles",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -10,7 +9,6 @@
   },
   "modifyaccount": {
     "name": "ModifyAccount",
-    "isPermissionOnly": true,
     "description": "Allow or deny IAM users permission to modify Account Settings",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -19,7 +17,6 @@
   },
   "modifybilling": {
     "name": "ModifyBilling",
-    "isPermissionOnly": true,
     "description": "Allow or deny IAM users permission to modify billing settings",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -28,7 +25,6 @@
   },
   "modifypaymentmethods": {
     "name": "ModifyPaymentMethods",
-    "isPermissionOnly": true,
     "description": "Allow or deny IAM users permission to modify payment methods",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -37,7 +33,6 @@
   },
   "updateconsoleactionsetenforced": {
     "name": "UpdateConsoleActionSetEnforced",
-    "isPermissionOnly": true,
     "description": "Grants permission to change whether existing or fine-grained IAM actions will be used to control authorization to Billing, Cost Management, and Account consoles",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -46,7 +41,6 @@
   },
   "viewaccount": {
     "name": "ViewAccount",
-    "isPermissionOnly": true,
     "description": "Allow or deny IAM users permission to view account settings",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -55,7 +49,6 @@
   },
   "viewbilling": {
     "name": "ViewBilling",
-    "isPermissionOnly": true,
     "description": "Allow or deny IAM users permission to view billing pages in the console",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -64,7 +57,6 @@
   },
   "viewpaymentmethods": {
     "name": "ViewPaymentMethods",
-    "isPermissionOnly": true,
     "description": "Allow or deny IAM users permission to view payment methods",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -73,7 +65,6 @@
   },
   "viewusage": {
     "name": "ViewUsage",
-    "isPermissionOnly": true,
     "description": "Allow or deny IAM users permission to view AWS usage reports",
     "accessLevel": "Read",
     "resourceTypes": [],

package/data/actions/awsconnector.json

@@ -1,7 +1,6 @@
 {
   "getconnectorhealth": {
     "name": "GetConnectorHealth",
-    "isPermissionOnly": true,
     "description": "Retrieves all health metrics that were published from the Server Migration Connector.",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -10,7 +9,6 @@
   },
   "registerconnector": {
     "name": "RegisterConnector",
-    "isPermissionOnly": true,
     "description": "Registers AWS Connector with AWS Connector Service.",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -19,7 +17,6 @@
   },
   "validateconnectorid": {
     "name": "ValidateConnectorId",
-    "isPermissionOnly": true,
     "description": "Validates Server Migration Connector Id that was registered with AWS Connector Service.",
     "accessLevel": "Read",
     "resourceTypes": [],

package/data/actions/b2bi.json

@@ -12,8 +12,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -36,8 +36,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -47,8 +47,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -73,8 +73,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -311,7 +311,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a B2Bi resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "capability",
@@ -339,8 +339,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -392,7 +392,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a B2Bi resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "capability",
@@ -451,14 +451,14 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "partnership",
-        "required": true,
+        "name": "capability",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "capability",
-        "required": false,
+        "name": "partnership",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }

package/data/actions/backup-gateway.json

@@ -256,9 +256,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "putmaintenancestarttime": {
     "name": "PutMaintenanceStartTime",
@@ -303,14 +301,12 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to TagResource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "gateway",
@@ -355,7 +351,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to UntagResource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "gateway",