@cloud-copilot/iam-data 0.19.202607021 → 0.19.202607151

package/data/actions/mediastore.json

@@ -5,8 +5,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -28,7 +28,7 @@
   "deletecontainerpolicy": {
     "name": "DeleteContainerPolicy",
     "description": "Grants permission to delete the access policy of a container",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "container",
@@ -246,7 +246,7 @@
   "putcontainerpolicy": {
     "name": "PutContainerPolicy",
     "description": "Grants permission to create or replace the access policy of a container",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "container",
@@ -331,9 +331,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "stopaccesslogging": {
     "name": "StopAccessLogging",
@@ -353,7 +351,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to a container",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "container",
@@ -363,15 +361,15 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from a container",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "container",

package/data/actions/mediatailor.json

@@ -27,9 +27,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:CreateServiceLinkedRole"
-    ]
+    "dependentActions": []
   },
   "createchannel": {
     "name": "CreateChannel",
@@ -116,7 +114,7 @@
   "deletechannelpolicy": {
     "name": "DeleteChannelPolicy",
     "description": "Grants permission to delete the IAM policy on the channel with the specified channel name",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "channel",
@@ -470,7 +468,7 @@
   "putchannelpolicy": {
     "name": "PutChannelPolicy",
     "description": "Grants permission to set the IAM policy on the channel with the specified channel name",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "channel",
@@ -526,7 +524,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to the specified playback configuration resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "channel",
@@ -568,7 +566,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from the specified playback configuration resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "channel",

package/data/actions/medical-imaging.json

@@ -80,8 +80,8 @@
       }
     ],
     "conditionKeys": [
-      "medical-imaging:StudyInstanceUID",
-      "medical-imaging:SeriesInstanceUID"
+      "medical-imaging:SeriesInstanceUID",
+      "medical-imaging:StudyInstanceUID"
     ],
     "dependentActions": []
   },
@@ -113,8 +113,8 @@
       }
     ],
     "conditionKeys": [
-      "medical-imaging:StudyInstanceUID",
-      "medical-imaging:SeriesInstanceUID"
+      "medical-imaging:SeriesInstanceUID",
+      "medical-imaging:StudyInstanceUID"
     ],
     "dependentActions": []
   },
@@ -131,8 +131,8 @@
       }
     ],
     "conditionKeys": [
-      "medical-imaging:StudyInstanceUID",
-      "medical-imaging:SeriesInstanceUID"
+      "medical-imaging:SeriesInstanceUID",
+      "medical-imaging:StudyInstanceUID"
     ],
     "dependentActions": []
   },
@@ -149,8 +149,8 @@
       }
     ],
     "conditionKeys": [
-      "medical-imaging:StudyInstanceUID",
-      "medical-imaging:SeriesInstanceUID"
+      "medical-imaging:SeriesInstanceUID",
+      "medical-imaging:StudyInstanceUID"
     ],
     "dependentActions": []
   },
@@ -167,8 +167,8 @@
       }
     ],
     "conditionKeys": [
-      "medical-imaging:StudyInstanceUID",
-      "medical-imaging:SeriesInstanceUID"
+      "medical-imaging:SeriesInstanceUID",
+      "medical-imaging:StudyInstanceUID"
     ],
     "dependentActions": []
   },
@@ -328,8 +328,8 @@
       }
     ],
     "conditionKeys": [
-      "medical-imaging:StudyInstanceUID",
-      "medical-imaging:SeriesInstanceUID"
+      "medical-imaging:SeriesInstanceUID",
+      "medical-imaging:StudyInstanceUID"
     ],
     "dependentActions": []
   },
@@ -430,7 +430,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to a medical imaging resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "datastore",
@@ -455,7 +455,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from a medical imaging resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "datastore",

package/data/actions/memorydb.json

@@ -1,4 +1,21 @@
 {
+  "pausemultiregionclusterreplication": {
+    "name": "PauseMultiRegionClusterReplication",
+    "description": "Grants permission to pause replication for a Multi-Region cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "multiregioncluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "batchupdatecluster": {
     "name": "BatchUpdateCluster",
     "description": "Grants permissions to apply service updates",
@@ -8,14 +25,7 @@
         "name": "cluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:CreateNetworkInterface",
-          "ec2:DeleteNetworkInterface",
-          "ec2:DescribeNetworkInterfaces",
-          "ec2:DescribeSubnets",
-          "ec2:DescribeVpcs",
-          "s3:GetObject"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -55,17 +65,12 @@
         "name": "snapshot",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "memorydb:TagResource",
-          "s3:DeleteObject",
-          "s3:GetBucketAcl",
-          "s3:PutObject"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []
@@ -79,14 +84,12 @@
         "name": "user",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "memorydb:TagResource"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []
@@ -100,44 +103,36 @@
         "name": "acl",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:CreateNetworkInterface",
-          "ec2:DeleteNetworkInterface",
-          "ec2:DescribeNetworkInterfaces",
-          "ec2:DescribeSubnets",
-          "ec2:DescribeVpcs",
-          "memorydb:TagResource",
-          "s3:GetObject"
-        ]
+        "dependentActions": []
       },
       {
-        "name": "parametergroup",
-        "required": true,
+        "name": "multiregioncluster",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "subnetgroup",
+        "name": "parametergroup",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "multiregioncluster",
+        "name": "snapshot",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "snapshot",
-        "required": false,
+        "name": "subnetgroup",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
       "memorydb:TLSEnabled"
     ],
@@ -152,14 +147,12 @@
         "name": "multiregionparametergroup",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "memorydb:TagResource"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
       "memorydb:TLSEnabled"
     ],
@@ -174,9 +167,7 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
-    "dependentActions": [
-      "memorydb:TagResource"
-    ]
+    "dependentActions": []
   },
   "createsnapshot": {
     "name": "CreateSnapshot",
@@ -187,17 +178,12 @@
         "name": "cluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "memorydb:TagResource",
-          "s3:DeleteObject",
-          "s3:GetBucketAcl",
-          "s3:PutObject"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []
@@ -211,9 +197,7 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
-    "dependentActions": [
-      "memorydb:TagResource"
-    ]
+    "dependentActions": []
   },
   "createuser": {
     "name": "CreateUser",
@@ -225,9 +209,7 @@
       "aws:TagKeys",
       "memorydb:UserAuthenticationMode"
     ],
-    "dependentActions": [
-      "memorydb:TagResource"
-    ]
+    "dependentActions": []
   },
   "deleteacl": {
     "name": "DeleteAcl",
@@ -255,13 +237,7 @@
         "name": "cluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:CreateNetworkInterface",
-          "ec2:DeleteNetworkInterface",
-          "ec2:DescribeNetworkInterfaces",
-          "ec2:DescribeSubnets",
-          "ec2:DescribeVpcs"
-        ]
+        "dependentActions": []
       },
       {
         "name": "multiregioncluster",
@@ -341,13 +317,7 @@
         "name": "subnetgroup",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:CreateNetworkInterface",
-          "ec2:DeleteNetworkInterface",
-          "ec2:DescribeNetworkInterfaces",
-          "ec2:DescribeSubnets",
-          "ec2:DescribeVpcs"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -596,13 +566,7 @@
         "name": "cluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:CreateNetworkInterface",
-          "ec2:DeleteNetworkInterface",
-          "ec2:DescribeNetworkInterfaces",
-          "ec2:DescribeSubnets",
-          "ec2:DescribeVpcs"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -697,24 +661,6 @@
     ],
     "dependentActions": []
   },
-  "pausemultiregionclusterreplication": {
-    "name": "PauseMultiRegionClusterReplication",
-    "isPermissionOnly": true,
-    "description": "Grants permission to pause replication for a Multi-Region cluster",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "multiregioncluster",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
-    "dependentActions": []
-  },
   "purchasereservednodesoffering": {
     "name": "PurchaseReservedNodesOffering",
     "description": "Grants permissions to purchase a new reserved node",
@@ -724,14 +670,12 @@
         "name": "reservednode",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "memorydb:TagResource"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []
@@ -756,7 +700,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permissions to add up to 10 cost allocation tags to the named resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "acl",
@@ -808,16 +752,16 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
       "aws:RequestTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permissions to remove the tags identified by the TagKeys list from a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "acl",
@@ -863,8 +807,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -897,20 +841,14 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "cluster",
-        "required": true,
+        "name": "acl",
+        "required": false,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:CreateNetworkInterface",
-          "ec2:DeleteNetworkInterface",
-          "ec2:DescribeNetworkInterfaces",
-          "ec2:DescribeSubnets",
-          "ec2:DescribeVpcs"
-        ]
+        "dependentActions": []
       },
       {
-        "name": "acl",
-        "required": false,
+        "name": "cluster",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       },
@@ -935,13 +873,7 @@
         "name": "multiregioncluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:CreateNetworkInterface",
-          "ec2:DeleteNetworkInterface",
-          "ec2:DescribeNetworkInterfaces",
-          "ec2:DescribeSubnets",
-          "ec2:DescribeVpcs"
-        ]
+        "dependentActions": []
       },
       {
         "name": "multiregionparametergroup",

package/data/actions/mgh.json

@@ -12,8 +12,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -560,18 +560,18 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [],
     "conditionKeys": [
       "aws:TagKeys"