@cloud-copilot/iam-data 0.19.202607021 → 0.19.202607151

package/data/actions/migrationhub-orchestrator.json

@@ -382,7 +382,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "template",
@@ -398,15 +398,15 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "template",

package/data/actions/mobiletargeting.json

@@ -1,4 +1,19 @@
 {
+  "getreports": {
+    "name": "GetReports",
+    "description": "Grants permission to mobiletargeting:GetReports",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "reports",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createapp": {
     "name": "CreateApp",
     "description": "Grants permission to create an app",
@@ -13,8 +28,8 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -32,8 +47,8 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -51,8 +66,8 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -100,8 +115,8 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -119,8 +134,8 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -138,8 +153,8 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -172,8 +187,8 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -191,8 +206,8 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -210,8 +225,8 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -1130,22 +1145,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getreports": {
-    "name": "GetReports",
-    "isPermissionOnly": true,
-    "description": "Grants permission to mobiletargeting:GetReports",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "reports",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getsegment": {
     "name": "GetSegment",
     "description": "Grants permission to retrieve information about a specific segment",
@@ -1503,7 +1502,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "app",
@@ -1545,7 +1544,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "app",

package/data/actions/monitron.json

@@ -1,31 +1,23 @@
 {
   "associateprojectadminuser": {
     "name": "AssociateProjectAdminUser",
-    "isPermissionOnly": true,
     "description": "Grants permission to associate a user with the project as an administrator",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "project",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "sso-directory:DescribeUsers",
-      "sso:AssociateProfile",
-      "sso:GetManagedApplicationInstance",
-      "sso:GetProfile",
-      "sso:ListDirectoryAssociations",
-      "sso:ListProfileAssociations",
-      "sso:ListProfiles"
-    ]
+    "dependentActions": []
   },
   "createproject": {
     "name": "CreateProject",
-    "isPermissionOnly": true,
     "description": "Grants permission to create a project",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -33,112 +25,87 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
-    "dependentActions": [
-      "iam:CreateServiceLinkedRole",
-      "kms:CreateGrant",
-      "sso:CreateManagedApplicationInstance",
-      "sso:DeleteManagedApplicationInstance",
-      "sso:DescribeRegisteredRegions"
-    ]
+    "dependentActions": []
   },
   "createprojectuserassociation": {
     "name": "CreateProjectUserAssociation",
-    "isPermissionOnly": true,
     "description": "Grants permission to associate a user with the project",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "project",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "sso-directory:DescribeUsers",
-      "sso:AssociateProfile",
-      "sso:GetManagedApplicationInstance",
-      "sso:GetProfile",
-      "sso:ListDirectoryAssociations",
-      "sso:ListProfileAssociations",
-      "sso:ListProfiles"
-    ]
+    "dependentActions": []
   },
   "createuseraccessroleassociation": {
     "name": "CreateUserAccessRoleAssociation",
-    "isPermissionOnly": true,
     "description": "Grants permission to associate an access role with the user",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "project",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "sso-directory:DescribeUsers",
-      "sso:GetManagedApplicationInstance",
-      "sso:GetProfile",
-      "sso:ListDirectoryAssociations",
-      "sso:ListProfileAssociations",
-      "sso:ListProfiles"
-    ]
+    "dependentActions": []
   },
   "deleteproject": {
     "name": "DeleteProject",
-    "isPermissionOnly": true,
     "description": "Grants permission to delete a project",
     "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "project",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "sso:DeleteManagedApplicationInstance"
-    ]
+    "dependentActions": []
   },
   "deleteprojectuserassociation": {
     "name": "DeleteProjectUserAssociation",
-    "isPermissionOnly": true,
     "description": "Grants permission to disassociate a user from the project",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "project",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "sso-directory:DescribeUsers",
-      "sso:DisassociateProfile",
-      "sso:GetManagedApplicationInstance",
-      "sso:GetProfile",
-      "sso:ListDirectoryAssociations",
-      "sso:ListProfiles"
-    ]
+    "dependentActions": []
   },
   "deleteuseraccessroleassociation": {
     "name": "DeleteUserAccessRoleAssociation",
-    "isPermissionOnly": true,
     "description": "Grants permission to disassociate an access role from the user",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "project",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -147,37 +114,32 @@
   },
   "disassociateprojectadminuser": {
     "name": "DisassociateProjectAdminUser",
-    "isPermissionOnly": true,
     "description": "Grants permission to disassociate an administrator from the project",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "project",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "sso-directory:DescribeUsers",
-      "sso:DisassociateProfile",
-      "sso:GetManagedApplicationInstance",
-      "sso:GetProfile",
-      "sso:ListDirectoryAssociations",
-      "sso:ListProfiles"
-    ]
+    "dependentActions": []
   },
   "getproject": {
     "name": "GetProject",
-    "isPermissionOnly": true,
     "description": "Grants permission to get information about a project",
     "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "project",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -186,68 +148,57 @@
   },
   "getprojectadminuser": {
     "name": "GetProjectAdminUser",
-    "isPermissionOnly": true,
     "description": "Grants permission to describe an administrator who is associated with the project",
     "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "project",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "sso-directory:DescribeUsers",
-      "sso:GetManagedApplicationInstance",
-      "sso:ListProfileAssociations"
-    ]
+    "dependentActions": []
   },
   "listprojectadminusers": {
     "name": "ListProjectAdminUsers",
-    "isPermissionOnly": true,
     "description": "Grants permission to list all administrators associated with the project",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "project",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "sso-directory:DescribeUsers",
-      "sso:GetManagedApplicationInstance"
-    ]
+    "dependentActions": []
   },
   "listprojectuserassociations": {
     "name": "ListProjectUserAssociations",
-    "isPermissionOnly": true,
     "description": "Grants permission to list all users associated with the project",
     "accessLevel": "List",
     "resourceTypes": [
       {
         "name": "project",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "sso:GetManagedApplicationInstance",
-      "sso:GetProfile",
-      "sso:ListDirectoryAssociations",
-      "sso:ListProfileAssociations",
-      "sso:ListProfiles"
-    ]
+    "dependentActions": []
   },
   "listprojects": {
     "name": "ListProjects",
-    "isPermissionOnly": true,
     "description": "Grants permission to list all projects",
     "accessLevel": "List",
     "resourceTypes": [],
@@ -256,14 +207,15 @@
   },
   "listtagsforresource": {
     "name": "ListTagsForResource",
-    "isPermissionOnly": true,
     "description": "Grants permission to list all tags for a resource",
     "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "project",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -272,14 +224,15 @@
   },
   "listuseraccessroleassociations": {
     "name": "ListUserAccessRoleAssociations",
-    "isPermissionOnly": true,
     "description": "Grants permission to list all access roles associated with the user",
     "accessLevel": "List",
     "resourceTypes": [
       {
         "name": "project",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -288,51 +241,52 @@
   },
   "tagresource": {
     "name": "TagResource",
-    "isPermissionOnly": true,
     "description": "Grants permission to tag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "project",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
-    "isPermissionOnly": true,
     "description": "Grants permission to untag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "project",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:TagKeys"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "updateproject": {
     "name": "UpdateProject",
-    "isPermissionOnly": true,
     "description": "Grants permission to update a project",
     "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "project",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],