@cloud-copilot/iam-data 0.19.202607021 → 0.19.202607151

package/data/actions/ivschat.json

@@ -12,8 +12,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -30,8 +30,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -48,8 +48,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -186,8 +186,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -209,7 +209,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add or update tags for a resource with a specified ARN",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Logging-Configuration",
@@ -225,15 +225,15 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags for a resource with a specified ARN",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Logging-Configuration",

package/data/actions/kafka-cluster.json

@@ -7,15 +7,14 @@
       {
         "name": "cluster",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kafka-cluster:Connect",
-      "kafka-cluster:DescribeCluster"
-    ]
+    "dependentActions": []
   },
   "alterclusterdynamicconfiguration": {
     "name": "AlterClusterDynamicConfiguration",
@@ -25,15 +24,14 @@
       {
         "name": "cluster",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kafka-cluster:Connect",
-      "kafka-cluster:DescribeClusterDynamicConfiguration"
-    ]
+    "dependentActions": []
   },
   "altergroup": {
     "name": "AlterGroup",
@@ -48,10 +46,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kafka-cluster:Connect",
-      "kafka-cluster:DescribeGroup"
-    ]
+    "dependentActions": []
   },
   "altertopic": {
     "name": "AlterTopic",
@@ -66,10 +61,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kafka-cluster:Connect",
-      "kafka-cluster:DescribeTopic"
-    ]
+    "dependentActions": []
   },
   "altertopicdynamicconfiguration": {
     "name": "AlterTopicDynamicConfiguration",
@@ -84,10 +76,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kafka-cluster:Connect",
-      "kafka-cluster:DescribeTopicDynamicConfiguration"
-    ]
+    "dependentActions": []
   },
   "altertransactionalid": {
     "name": "AlterTransactionalId",
@@ -102,11 +91,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kafka-cluster:Connect",
-      "kafka-cluster:DescribeTransactionalId",
-      "kafka-cluster:WriteData"
-    ]
+    "dependentActions": []
   },
   "connect": {
     "name": "Connect",
@@ -116,7 +101,9 @@
       {
         "name": "cluster",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -136,9 +123,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kafka-cluster:Connect"
-    ]
+    "dependentActions": []
   },
   "deletegroup": {
     "name": "DeleteGroup",
@@ -153,10 +138,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kafka-cluster:Connect",
-      "kafka-cluster:DescribeGroup"
-    ]
+    "dependentActions": []
   },
   "deletetopic": {
     "name": "DeleteTopic",
@@ -171,10 +153,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kafka-cluster:Connect",
-      "kafka-cluster:DescribeTopic"
-    ]
+    "dependentActions": []
   },
   "describecluster": {
     "name": "DescribeCluster",
@@ -184,14 +163,14 @@
       {
         "name": "cluster",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kafka-cluster:Connect"
-    ]
+    "dependentActions": []
   },
   "describeclusterdynamicconfiguration": {
     "name": "DescribeClusterDynamicConfiguration",
@@ -201,14 +180,14 @@
       {
         "name": "cluster",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kafka-cluster:Connect"
-    ]
+    "dependentActions": []
   },
   "describegroup": {
     "name": "DescribeGroup",
@@ -223,9 +202,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kafka-cluster:Connect"
-    ]
+    "dependentActions": []
   },
   "describetopic": {
     "name": "DescribeTopic",
@@ -240,9 +217,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kafka-cluster:Connect"
-    ]
+    "dependentActions": []
   },
   "describetopicdynamicconfiguration": {
     "name": "DescribeTopicDynamicConfiguration",
@@ -257,9 +232,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kafka-cluster:Connect"
-    ]
+    "dependentActions": []
   },
   "describetransactionalid": {
     "name": "DescribeTransactionalId",
@@ -274,9 +247,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kafka-cluster:Connect"
-    ]
+    "dependentActions": []
   },
   "readdata": {
     "name": "ReadData",
@@ -291,11 +262,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kafka-cluster:AlterGroup",
-      "kafka-cluster:Connect",
-      "kafka-cluster:DescribeTopic"
-    ]
+    "dependentActions": []
   },
   "writedata": {
     "name": "WriteData",
@@ -310,10 +277,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kafka-cluster:Connect",
-      "kafka-cluster:DescribeTopic"
-    ]
+    "dependentActions": []
   },
   "writedataidempotently": {
     "name": "WriteDataIdempotently",
@@ -323,14 +287,13 @@
       {
         "name": "cluster",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kafka-cluster:Connect",
-      "kafka-cluster:WriteData"
-    ]
+    "dependentActions": []
   }
 }

package/data/actions/kafka.json

@@ -12,10 +12,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kms:CreateGrant",
-      "kms:RetireGrant"
-    ]
+    "dependentActions": []
   },
   "batchdisassociatescramsecret": {
     "name": "BatchDisassociateScramSecret",
@@ -30,9 +27,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kms:RetireGrant"
-    ]
+    "dependentActions": []
   },
   "createcluster": {
     "name": "CreateCluster",
@@ -43,16 +38,7 @@
         "name": "cluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:DescribeSecurityGroups",
-          "ec2:DescribeSubnets",
-          "ec2:DescribeVpcs",
-          "iam:AttachRolePolicy",
-          "iam:CreateServiceLinkedRole",
-          "iam:PutRolePolicy",
-          "kms:CreateGrant",
-          "kms:DescribeKey"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -70,21 +56,7 @@
         "name": "cluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:CreateTags",
-          "ec2:CreateVpcEndpoint",
-          "ec2:DeleteVpcEndpoints",
-          "ec2:DescribeSecurityGroups",
-          "ec2:DescribeSubnets",
-          "ec2:DescribeVpcAttribute",
-          "ec2:DescribeVpcEndpoints",
-          "ec2:DescribeVpcs",
-          "iam:AttachRolePolicy",
-          "iam:CreateServiceLinkedRole",
-          "iam:PutRolePolicy",
-          "kms:CreateGrant",
-          "kms:DescribeKey"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -117,17 +89,7 @@
         "name": "replicator",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:DescribeSecurityGroups",
-          "ec2:DescribeSubnets",
-          "ec2:DescribeVpcs",
-          "iam:AttachRolePolicy",
-          "iam:CreateServiceLinkedRole",
-          "iam:PassRole",
-          "iam:PutRolePolicy",
-          "kafka:DescribeClusterV2",
-          "kafka:GetBootstrapBrokers"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -149,10 +111,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kafka-cluster:Connect",
-      "kafka-cluster:CreateTopic"
-    ]
+    "dependentActions": []
   },
   "createvpcconnection": {
     "name": "CreateVpcConnection",
@@ -163,18 +122,7 @@
         "name": "cluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:CreateTags",
-          "ec2:CreateVpcEndpoint",
-          "ec2:DescribeSecurityGroups",
-          "ec2:DescribeSubnets",
-          "ec2:DescribeVpcAttribute",
-          "ec2:DescribeVpcEndpoints",
-          "ec2:DescribeVpcs",
-          "iam:AttachRolePolicy",
-          "iam:CreateServiceLinkedRole",
-          "iam:PutRolePolicy"
-        ]
+        "dependentActions": []
       },
       {
         "name": "vpc-connection",
@@ -202,11 +150,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "ec2:DeleteVpcEndpoints",
-      "ec2:DescribeVpcAttribute",
-      "ec2:DescribeVpcEndpoints"
-    ]
+    "dependentActions": []
   },
   "deleteclusterpolicy": {
     "name": "DeleteClusterPolicy",
@@ -266,11 +210,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kafka-cluster:Connect",
-      "kafka-cluster:DeleteTopic",
-      "kafka-cluster:DescribeTopic"
-    ]
+    "dependentActions": []
   },
   "deletevpcconnection": {
     "name": "DeleteVpcConnection",
@@ -285,10 +225,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "ec2:DeleteVpcEndpoints",
-      "ec2:DescribeVpcEndpoints"
-    ]
+    "dependentActions": []
   },
   "describecluster": {
     "name": "DescribeCluster",
@@ -394,11 +331,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kafka-cluster:Connect",
-      "kafka-cluster:DescribeTopic",
-      "kafka-cluster:DescribeTopicDynamicConfiguration"
-    ]
+    "dependentActions": []
   },
   "describetopicpartitions": {
     "name": "DescribeTopicPartitions",
@@ -413,11 +346,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kafka-cluster:Connect",
-      "kafka-cluster:DescribeTopic",
-      "kafka-cluster:DescribeTopicDynamicConfiguration"
-    ]
+    "dependentActions": []
   },
   "describevpcconnection": {
     "name": "DescribeVpcConnection",
@@ -623,10 +552,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kafka-cluster:Connect",
-      "kafka-cluster:DescribeTopic"
-    ]
+    "dependentActions": []
   },
   "listvpcconnections": {
     "name": "ListVpcConnections",
@@ -690,7 +616,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag an MSK resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "cluster",
@@ -714,7 +640,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from an MSK resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "cluster",
@@ -839,10 +765,7 @@
         "name": "cluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:DescribeRouteTables",
-          "ec2:DescribeSubnets"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -908,9 +831,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kms:RetireGrant"
-    ]
+    "dependentActions": []
   },
   "updatestorage": {
     "name": "UpdateStorage",
@@ -940,11 +861,6 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kafka-cluster:AlterTopic",
-      "kafka-cluster:AlterTopicDynamicConfiguration",
-      "kafka-cluster:Connect",
-      "kafka-cluster:DescribeTopic"
-    ]
+    "dependentActions": []
   }
 }

package/data/actions/kafkaconnect.json

@@ -5,25 +5,7 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "ec2:CreateNetworkInterface",
-      "ec2:DescribeSecurityGroups",
-      "ec2:DescribeSubnets",
-      "ec2:DescribeVpcs",
-      "firehose:TagDeliveryStream",
-      "iam:AttachRolePolicy",
-      "iam:CreateServiceLinkedRole",
-      "iam:PassRole",
-      "iam:PutRolePolicy",
-      "logs:CreateLogDelivery",
-      "logs:DescribeLogGroups",
-      "logs:DescribeResourcePolicies",
-      "logs:GetLogDelivery",
-      "logs:ListLogDeliveries",
-      "logs:PutResourcePolicy",
-      "s3:GetBucketPolicy",
-      "s3:PutBucketPolicy"
-    ]
+    "dependentActions": []
   },
   "createcustomplugin": {
     "name": "CreateCustomPlugin",
@@ -31,9 +13,7 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "s3:GetObject"
-    ]
+    "dependentActions": []
   },
   "createworkerconfiguration": {
     "name": "CreateWorkerConfiguration",
@@ -56,10 +36,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "logs:DeleteLogDelivery",
-      "logs:ListLogDeliveries"
-    ]
+    "dependentActions": []
   },
   "deletecustomplugin": {
     "name": "DeleteCustomPlugin",
@@ -226,15 +203,15 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag an MSK Connect resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "connector",
         "required": false,
         "conditionKeys": [
-          "aws:TagKeys",
           "aws:RequestTag/${TagKey}",
-          "aws:ResourceTag/${TagKey}"
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
         ],
         "dependentActions": []
       },
@@ -242,9 +219,9 @@
         "name": "custom plugin",
         "required": false,
         "conditionKeys": [
-          "aws:TagKeys",
           "aws:RequestTag/${TagKey}",
-          "aws:ResourceTag/${TagKey}"
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
         ],
         "dependentActions": []
       },
@@ -252,9 +229,9 @@
         "name": "worker configuration",
         "required": false,
         "conditionKeys": [
-          "aws:TagKeys",
           "aws:RequestTag/${TagKey}",
-          "aws:ResourceTag/${TagKey}"
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
         ],
         "dependentActions": []
       }
@@ -268,7 +245,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from an MSK Connect resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "connector",

package/data/actions/kendra-ranking.json

@@ -81,7 +81,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a resource with given key value pairs",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "rescore-execution-plan",
@@ -99,7 +99,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove the tag with the given key from a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "rescore-execution-plan",