@cloud-copilot/iam-data 0.19.202607031 → 0.19.202607151

package/data/actions/securityhub.json

@@ -1,23 +1,29 @@
 {
-  "acceptadministratorinvitation": {
-    "name": "AcceptAdministratorInvitation",
-    "description": "Grants permission to accept Security Hub invitations to become a member account",
-    "accessLevel": "Write",
+  "allowvendedlogdeliveryforresource": {
+    "name": "AllowVendedLogDeliveryForResource",
+    "description": "Grants permission to log delivery for resources",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "hub",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "hubv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
     "dependentActions": []
   },
-  "acceptinvitation": {
-    "name": "AcceptInvitation",
-    "description": "Grants permission to accept Security Hub invitations to become a member account",
-    "accessLevel": "Write",
+  "batchgetcontrolevaluations": {
+    "name": "BatchGetControlEvaluations",
+    "description": "Grants permission to get the enablement and compliance status of controls, the findings count for controls, and the overall security score for controls on the Security Hub console",
+    "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "hub",
@@ -29,11 +35,10 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "allowvendedlogdeliveryforresource": {
-    "name": "AllowVendedLogDeliveryForResource",
-    "isPermissionOnly": true,
-    "description": "Grants permission to log delivery for resources",
-    "accessLevel": "Permissions management",
+  "getadhocinsightresults": {
+    "name": "GetAdhocInsightResults",
+    "description": "Grants permission to retrieve aggregated statistical data about the findings",
+    "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "hub",
@@ -51,6 +56,186 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getcontrolfindingsummary": {
+    "name": "GetControlFindingSummary",
+    "description": "Grants permission to retrieve a security score and counts of finding and control statuses for a security standard",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "hub",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getfreetrialenddate": {
+    "name": "GetFreeTrialEndDate",
+    "description": "Grants permission to retrieve the end date for an account's free trial of Security Hub",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "hub",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getfreetrialusage": {
+    "name": "GetFreeTrialUsage",
+    "description": "Grants permission to retrieve information about Security Hub usage during the free trial period",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "hub",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getinsightfindingtrend": {
+    "name": "GetInsightFindingTrend",
+    "description": "Grants permission to retrieve an insight finding trend from Security Hub in order to generate a graph",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "hub",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getusage": {
+    "name": "GetUsage",
+    "description": "Grants permission to retrieve information about Security Hub usage by accounts",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "hub",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getusagev2": {
+    "name": "GetUsageV2",
+    "description": "Grants permission to retrieve information about Security Hub usage for an account",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "hubv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listaccountusagev2": {
+    "name": "ListAccountUsageV2",
+    "description": "Grants permission to retrieve a list of Security Hub usage for accounts in an organization",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "hubv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listcontrolevaluationsummaries": {
+    "name": "ListControlEvaluationSummaries",
+    "description": "Grants permission to retrieve a list of controls for a standard, including the control IDs, statuses and finding counts",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "hub",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "sendfindingevents": {
+    "name": "SendFindingEvents",
+    "description": "Grants permission to use a custom action to send Security Hub findings to Amazon EventBridge",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "hub",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "sendinsightevents": {
+    "name": "SendInsightEvents",
+    "description": "Grants permission to use a custom action to send Security Hub insights to Amazon EventBridge",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "hub",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "acceptadministratorinvitation": {
+    "name": "AcceptAdministratorInvitation",
+    "description": "Grants permission to accept Security Hub invitations to become a member account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "hub",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "acceptinvitation": {
+    "name": "AcceptInvitation",
+    "description": "Grants permission to accept Security Hub invitations to become a member account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "hub",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "batchdeleteautomationrules": {
     "name": "BatchDeleteAutomationRules",
     "description": "Grants permission to delete one or more automation rules in Security Hub",
@@ -119,31 +304,13 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "batchgetcontrolevaluations": {
-    "name": "BatchGetControlEvaluations",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get the enablement and compliance status of controls, the findings count for controls, and the overall security score for controls on the Security Hub console",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "hub",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "batchgetsecuritycontrols": {
     "name": "BatchGetSecurityControls",
     "description": "Grants permission to get details about specific security controls identified by ID or ARN",
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "securityhub:DescribeStandardsControls"
-    ]
+    "dependentActions": []
   },
   "batchgetstandardscontrolassociations": {
     "name": "BatchGetStandardsControlAssociations",
@@ -151,9 +318,7 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "securityhub:DescribeStandardsControls"
-    ]
+    "dependentActions": []
   },
   "batchimportfindings": {
     "name": "BatchImportFindings",
@@ -217,9 +382,7 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "securityhub:UpdateStandardsControl"
-    ]
+    "dependentActions": []
   },
   "connectorregistrationsv2": {
     "name": "ConnectorRegistrationsV2",
@@ -666,11 +829,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "organizations:DeregisterDelegatedAdministrator",
-      "organizations:DescribeOrganization",
-      "organizations:ListDelegatedAdministrators"
-    ]
+    "dependentActions": []
   },
   "disablesecurityhub": {
     "name": "DisableSecurityHub",
@@ -783,13 +942,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "organizations:DescribeOrganization",
-      "organizations:EnableAWSServiceAccess",
-      "organizations:ListAWSServiceAccessForOrganization",
-      "organizations:ListDelegatedAdministrators",
-      "organizations:RegisterDelegatedAdministrator"
-    ]
+    "dependentActions": []
   },
   "enablesecurityhub": {
     "name": "EnableSecurityHub",
@@ -850,28 +1003,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getadhocinsightresults": {
-    "name": "GetAdhocInsightResults",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve aggregated statistical data about the findings",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "hub",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
-      {
-        "name": "hubv2",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getadministratoraccount": {
     "name": "GetAdministratorAccount",
     "description": "Grants permission to retrieve details about the Security Hub administrator account",
@@ -970,22 +1101,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getcontrolfindingsummary": {
-    "name": "GetControlFindingSummary",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve a security score and counts of finding and control statuses for a security standard",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "hub",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getenabledstandards": {
     "name": "GetEnabledStandards",
     "description": "Grants permission to retrieve a list of the standards that are enabled in Security Hub",
@@ -1067,54 +1182,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getfreetrialenddate": {
-    "name": "GetFreeTrialEndDate",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve the end date for an account's free trial of Security Hub",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "hub",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "getfreetrialusage": {
-    "name": "GetFreeTrialUsage",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve information about Security Hub usage during the free trial period",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "hub",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "getinsightfindingtrend": {
-    "name": "GetInsightFindingTrend",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve an insight finding trend from Security Hub in order to generate a graph",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "hub",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getinsightresults": {
     "name": "GetInsightResults",
     "description": "Grants permission to retrieve insight results from Security Hub",
@@ -1256,40 +1323,6 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "securityhub:DescribeStandardsControls"
-    ]
-  },
-  "getusage": {
-    "name": "GetUsage",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve information about Security Hub usage by accounts",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "hub",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "getusagev2": {
-    "name": "GetUsageV2",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve information about Security Hub usage for an account",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "hubv2",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
     "dependentActions": []
   },
   "invitemembers": {
@@ -1307,22 +1340,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listaccountusagev2": {
-    "name": "ListAccountUsageV2",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve a list of Security Hub usage for accounts in an organization",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "hubv2",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listaggregatorsv2": {
     "name": "ListAggregatorsV2",
     "description": "Grants permission to retrieve a list of aggregatorsV2, which configures data aggregation across Regions",
@@ -1379,22 +1396,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listcontrolevaluationsummaries": {
-    "name": "ListControlEvaluationSummaries",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve a list of controls for a standard, including the control IDs, statuses and finding counts",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "hub",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listenabledproductsforimport": {
     "name": "ListEnabledProductsForImport",
     "description": "Grants permission to retrieve the Security Hub integrated products that are currently enabled",
@@ -1461,10 +1462,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "organizations:DescribeOrganization",
-      "organizations:ListDelegatedAdministrators"
-    ]
+    "dependentActions": []
   },
   "listsecuritycontroldefinitions": {
     "name": "ListSecurityControlDefinitions",
@@ -1480,9 +1478,7 @@
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "securityhub:DescribeStandardsControls"
-    ]
+    "dependentActions": []
   },
   "listtagsforresource": {
     "name": "ListTagsForResource",
@@ -1511,38 +1507,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "sendfindingevents": {
-    "name": "SendFindingEvents",
-    "isPermissionOnly": true,
-    "description": "Grants permission to use a custom action to send Security Hub findings to Amazon EventBridge",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "hub",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "sendinsightevents": {
-    "name": "SendInsightEvents",
-    "isPermissionOnly": true,
-    "description": "Grants permission to use a custom action to send Security Hub insights to Amazon EventBridge",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "hub",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "startconfigurationpolicyassociation": {
     "name": "StartConfigurationPolicyAssociation",
     "description": "Grants permission to associate a configuration policy with a member account or organizational unit in the calling account's organization",
@@ -1576,7 +1540,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to a Security Hub resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "aggregatorv2",
@@ -1633,7 +1597,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from a Security Hub resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "aggregatorv2",
@@ -1843,9 +1807,7 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "securityhub:UpdateStandardsControl"
-    ]
+    "dependentActions": []
   },
   "updatesecurityhubconfiguration": {
     "name": "UpdateSecurityHubConfiguration",