@cloud-copilot/iam-data 0.19.202607031 → 0.19.202607151

package/data/actions/servicediscovery.json

@@ -1,12 +1,57 @@
 {
+  "deleteresourcepolicy": {
+    "name": "DeleteResourcePolicy",
+    "description": "Grants permission to delete the RAM access control policy for a namespace",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "namespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getresourcepolicy": {
+    "name": "GetResourcePolicy",
+    "description": "Grants permission to read the RAM access control policy for a namespace",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "namespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putresourcepolicy": {
+    "name": "PutResourcePolicy",
+    "description": "Grants permission to define the RAM access control policy for a namespace",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "namespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createhttpnamespace": {
     "name": "CreateHttpNamespace",
     "description": "Grants permission to create an HTTP namespace",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -16,8 +61,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -27,8 +72,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -51,9 +96,9 @@
       }
     ],
     "conditionKeys": [
-      "servicediscovery:NamespaceArn",
+      "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "servicediscovery:NamespaceArn"
     ],
     "dependentActions": []
   },
@@ -72,22 +117,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deleteresourcepolicy": {
-    "name": "DeleteResourcePolicy",
-    "isPermissionOnly": true,
-    "description": "Grants permission to delete the RAM access control policy for a namespace",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "namespace",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deleteservice": {
     "name": "DeleteService",
     "description": "Grants permission to delete a specified service",
@@ -258,22 +287,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getresourcepolicy": {
-    "name": "GetResourcePolicy",
-    "isPermissionOnly": true,
-    "description": "Grants permission to read the RAM access control policy for a namespace",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "namespace",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getservice": {
     "name": "GetService",
     "description": "Grants permission to get the settings for a specified service",
@@ -353,22 +366,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "putresourcepolicy": {
-    "name": "PutResourcePolicy",
-    "isPermissionOnly": true,
-    "description": "Grants permission to define the RAM access control policy for a namespace",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "namespace",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "registerinstance": {
     "name": "RegisterInstance",
     "description": "Grants permission to register an instance based on the settings in a specified service",
@@ -390,18 +387,18 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add one or more tags to the specified resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove one or more tags from the specified resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [],
     "conditionKeys": [
       "aws:TagKeys"

package/data/actions/serviceextract.json

@@ -1,7 +1,6 @@
 {
   "getconfig": {
     "name": "GetConfig",
-    "isPermissionOnly": true,
     "description": "Grants permission to get required configuration for the AWS Microservice Extractor for .NET desktop client",
     "accessLevel": "Read",
     "resourceTypes": [],

package/data/actions/servicequotas.json

@@ -5,10 +5,7 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "organizations:DescribeOrganization",
-      "organizations:EnableAWSServiceAccess"
-    ]
+    "dependentActions": []
   },
   "createsupportcase": {
     "name": "CreateSupportCase",
@@ -24,9 +21,7 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "organizations:DescribeOrganization"
-    ]
+    "dependentActions": []
   },
   "disassociateservicequotatemplate": {
     "name": "DisassociateServiceQuotaTemplate",
@@ -34,9 +29,7 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "organizations:DescribeOrganization"
-    ]
+    "dependentActions": []
   },
   "getawsdefaultservicequota": {
     "name": "GetAWSDefaultServiceQuota",
@@ -52,9 +45,7 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "organizations:DescribeOrganization"
-    ]
+    "dependentActions": []
   },
   "getautomanagementconfiguration": {
     "name": "GetAutoManagementConfiguration",
@@ -89,16 +80,7 @@
         "name": "quota",
         "required": false,
         "conditionKeys": [],
-        "dependentActions": [
-          "autoscaling:DescribeAccountLimits",
-          "cloudformation:DescribeAccountLimits",
-          "dynamodb:DescribeLimits",
-          "elasticloadbalancing:DescribeAccountLimits",
-          "iam:GetAccountSummary",
-          "kinesis:DescribeLimits",
-          "rds:DescribeAccountAttributes",
-          "route53:GetAccountLimit"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -115,9 +97,7 @@
         "name": "quota",
         "required": false,
         "conditionKeys": [],
-        "dependentActions": [
-          "organizations:DescribeOrganization"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -164,9 +144,7 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "organizations:DescribeOrganization"
-    ]
+    "dependentActions": []
   },
   "listservicequotas": {
     "name": "ListServiceQuotas",
@@ -174,16 +152,7 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "autoscaling:DescribeAccountLimits",
-      "cloudformation:DescribeAccountLimits",
-      "dynamodb:DescribeLimits",
-      "elasticloadbalancing:DescribeAccountLimits",
-      "iam:GetAccountSummary",
-      "kinesis:DescribeLimits",
-      "rds:DescribeAccountAttributes",
-      "route53:GetAccountLimit"
-    ]
+    "dependentActions": []
   },
   "listservices": {
     "name": "ListServices",
@@ -210,9 +179,7 @@
         "name": "quota",
         "required": false,
         "conditionKeys": [],
-        "dependentActions": [
-          "organizations:DescribeOrganization"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -264,7 +231,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to associate a set of tags with an existing SQ resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
@@ -275,7 +242,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove a set of tags from a SQ resource, where tags to be removed match a set of customer-supplied tag keys",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [],
     "conditionKeys": [
       "aws:TagKeys"