@cloud-copilot/iam-data 0.19.202607021 → 0.19.202607151

package/data/actions/sqs.json

@@ -2,7 +2,7 @@
   "addpermission": {
     "name": "AddPermission",
     "description": "Grants permission to a queue for a specific principal",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "queue",
@@ -208,7 +208,7 @@
   "removepermission": {
     "name": "RemovePermission",
     "description": "Grants permission to revoke any permissions in the queue policy that matches the specified Label parameter",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "queue",
@@ -238,7 +238,7 @@
   "setqueueattributes": {
     "name": "SetQueueAttributes",
     "description": "Grants permission to set the value of one or more queue attributes",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "queue",
@@ -268,7 +268,7 @@
   "tagqueue": {
     "name": "TagQueue",
     "description": "Grants permission to add tags to the specified SQS queue",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "queue",
@@ -286,7 +286,7 @@
   "untagqueue": {
     "name": "UntagQueue",
     "description": "Grants permission to remove tags from the specified SQS queue",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "queue",

package/data/actions/ssm-contacts.json

@@ -1,11 +1,11 @@
 {
-  "acceptpage": {
-    "name": "AcceptPage",
-    "description": "Grants permission to accept a page",
-    "accessLevel": "Write",
+  "associatecontact": {
+    "name": "AssociateContact",
+    "description": "Grants permission to use a contact in an escalation plan",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
-        "name": "page",
+        "name": "contact",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -14,13 +14,13 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "activatecontactchannel": {
-    "name": "ActivateContactChannel",
-    "description": "Grants permission to activate a contact's contact channel",
+  "acceptpage": {
+    "name": "AcceptPage",
+    "description": "Grants permission to accept a page",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "contactchannel",
+        "name": "page",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -29,14 +29,13 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "associatecontact": {
-    "name": "AssociateContact",
-    "isPermissionOnly": true,
-    "description": "Grants permission to use a contact in an escalation plan",
-    "accessLevel": "Permissions management",
+  "activatecontactchannel": {
+    "name": "ActivateContactChannel",
+    "description": "Grants permission to activate a contact's contact channel",
+    "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "contact",
+        "name": "contactchannel",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -54,14 +53,12 @@
         "name": "contact",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ssm-contacts:AssociateContact"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -93,8 +90,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -514,7 +511,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to the specified resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "contact",
@@ -530,15 +527,15 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from the specified resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "contact",
@@ -571,9 +568,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "ssm-contacts:AssociateContact"
-    ]
+    "dependentActions": []
   },
   "updatecontactchannel": {
     "name": "UpdateContactChannel",

package/data/actions/ssm-guiconnect.json

@@ -1,41 +1,22 @@
 {
   "cancelconnection": {
     "name": "CancelConnection",
-    "isPermissionOnly": true,
     "description": "Grants permission to terminate a GUI Connect connection",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deleteconnectionrecordingpreferences": {
-    "name": "DeleteConnectionRecordingPreferences",
-    "description": "Grants permission to remove GUI Connect connection recording preferences",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getconnection": {
     "name": "GetConnection",
-    "isPermissionOnly": true,
     "description": "Grants permission to get the metadata for a GUI Connect connection",
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getconnectionrecordingpreferences": {
-    "name": "GetConnectionRecordingPreferences",
-    "description": "Grants permission to get GUI Connect connection recording preferences",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listconnections": {
     "name": "ListConnections",
-    "isPermissionOnly": true,
     "description": "Grants permission to list the metadata for GUI Connect connections",
     "accessLevel": "List",
     "resourceTypes": [],
@@ -44,13 +25,28 @@
   },
   "startconnection": {
     "name": "StartConnection",
-    "isPermissionOnly": true,
     "description": "Grants permission to start a GUI Connect connection",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteconnectionrecordingpreferences": {
+    "name": "DeleteConnectionRecordingPreferences",
+    "description": "Grants permission to remove GUI Connect connection recording preferences",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getconnectionrecordingpreferences": {
+    "name": "GetConnectionRecordingPreferences",
+    "description": "Grants permission to get GUI Connect connection recording preferences",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateconnectionrecordingpreferences": {
     "name": "UpdateConnectionRecordingPreferences",
     "description": "Grants permission to update GUI Connect connection recording preferences",

package/data/actions/ssm-incidents.json

@@ -26,13 +26,10 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
-    "dependentActions": [
-      "iam:CreateServiceLinkedRole",
-      "ssm-incidents:TagResource"
-    ]
+    "dependentActions": []
   },
   "createresponseplan": {
     "name": "CreateResponsePlan",
@@ -40,13 +37,10 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
-    "dependentActions": [
-      "iam:PassRole",
-      "ssm-incidents:TagResource"
-    ]
+    "dependentActions": []
   },
   "createtimelineevent": {
     "name": "CreateTimelineEvent",
@@ -102,7 +96,7 @@
   "deleteresourcepolicy": {
     "name": "DeleteResourcePolicy",
     "description": "Grants permission to delete resource policy from a response plan",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "response-plan",
@@ -348,7 +342,7 @@
   "putresourcepolicy": {
     "name": "PutResourcePolicy",
     "description": "Grants permission to put resource policy on a response plan",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "response-plan",
@@ -378,7 +372,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to a response plan",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "incident-record",
@@ -400,15 +394,15 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from a response plan",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "incident-record",
@@ -515,15 +509,12 @@
         "name": "response-plan",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "ssm-incidents:TagResource"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },

package/data/actions/ssm-quicksetup.json

@@ -7,15 +7,15 @@
       {
         "name": "configuration-manager",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}",
-      "aws:TagKeys"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "deleteconfigurationmanager": {
@@ -120,7 +120,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to Assign key-value pairs of metadata to AWS resources",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "configuration-manager",
@@ -130,15 +130,15 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from the specified resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "configuration-manager",

package/data/actions/ssm-sap.json

@@ -10,7 +10,7 @@
   "deleteresourcepermission": {
     "name": "DeleteResourcePermission",
     "description": "Grants permission to delete the SSM for SAP level resource permissions associated with a SSM for SAP database resource",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
@@ -80,7 +80,7 @@
   "getresourcepermission": {
     "name": "GetResourcePermission",
     "description": "Grants permission to get the SSM for SAP level resource permissions associated with a SSM for SAP database resource",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
@@ -175,7 +175,7 @@
   "putresourcepermission": {
     "name": "PutResourcePermission",
     "description": "Grants permission to add the SSM for SAP level resource permissions associated with a SSM for SAP database resource",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
@@ -255,7 +255,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a specified resource ARN",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "application",
@@ -277,15 +277,15 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from a specified resource ARN",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "application",