@cloud-copilot/iam-data 0.19.202607031 → 0.19.202607151

package/data/actions/cloud9.json

@@ -1,7 +1,6 @@
 {
   "activateec2remote": {
     "name": "ActivateEC2Remote",
-    "isPermissionOnly": true,
     "description": "Grants permission to start the Amazon EC2 instance that your AWS Cloud9 IDE connects to",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -15,62 +14,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "createenvironmentec2": {
-    "name": "CreateEnvironmentEC2",
-    "description": "Grants permission to create an AWS Cloud9 development environment, launches an Amazon Elastic Compute Cloud (Amazon EC2) instance, and then hosts the environment on the instance",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [
-      "cloud9:EnvironmentName",
-      "cloud9:InstanceType",
-      "cloud9:SubnetId",
-      "cloud9:UserArn",
-      "cloud9:OwnerArn",
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
-    "dependentActions": [
-      "ec2:DescribeSubnets",
-      "ec2:DescribeVpcs",
-      "iam:CreateServiceLinkedRole"
-    ]
-  },
-  "createenvironmentmembership": {
-    "name": "CreateEnvironmentMembership",
-    "description": "Grants permission to add an environment member to an AWS Cloud9 development environment",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "environment",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "cloud9:UserArn",
-      "cloud9:EnvironmentId",
-      "cloud9:Permissions"
-    ],
-    "dependentActions": []
-  },
   "createenvironmentssh": {
     "name": "CreateEnvironmentSSH",
-    "isPermissionOnly": true,
     "description": "Grants permission to create an AWS Cloud9 SSH development environment",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "cloud9:EnvironmentName",
-      "cloud9:OwnerArn",
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "cloud9:EnvironmentName",
+      "cloud9:OwnerArn"
     ],
     "dependentActions": []
   },
   "createenvironmenttoken": {
     "name": "CreateEnvironmentToken",
-    "isPermissionOnly": true,
     "description": "Grants permission to create an authentication token that allows a connection between the AWS Cloud9 IDE and the user's environment",
     "accessLevel": "Read",
     "resourceTypes": [
@@ -84,10 +42,10 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deleteenvironment": {
-    "name": "DeleteEnvironment",
-    "description": "Grants permission to delete an AWS Cloud9 development environment. If the environment is hosted on an Amazon Elastic Compute Cloud (Amazon EC2) instance, also terminates the instance",
-    "accessLevel": "Write",
+  "describeec2remote": {
+    "name": "DescribeEC2Remote",
+    "description": "Grants permission to get details about the connection to the EC2 development environment, including host, user, and port",
+    "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "environment",
@@ -97,14 +55,12 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:CreateServiceLinkedRole"
-    ]
+    "dependentActions": []
   },
-  "deleteenvironmentmembership": {
-    "name": "DeleteEnvironmentMembership",
-    "description": "Grants permission to delete an environment member from an AWS Cloud9 development environment",
-    "accessLevel": "Write",
+  "describesshremote": {
+    "name": "DescribeSSHRemote",
+    "description": "Grants permission to get details about the connection to the SSH development environment, including host, user, and port",
+    "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "environment",
@@ -113,16 +69,12 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "cloud9:UserArn",
-      "cloud9:EnvironmentId"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
-  "describeec2remote": {
-    "name": "DescribeEC2Remote",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get details about the connection to the EC2 development environment, including host, user, and port",
+  "getenvironmentconfig": {
+    "name": "GetEnvironmentConfig",
+    "description": "Grants permission to get configuration information that's used to initialize the AWS Cloud9 IDE",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -135,9 +87,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describeenvironmentmemberships": {
-    "name": "DescribeEnvironmentMemberships",
-    "description": "Grants permission to get information about environment members for an AWS Cloud9 development environment",
+  "getenvironmentsettings": {
+    "name": "GetEnvironmentSettings",
+    "description": "Grants permission to get the AWS Cloud9 IDE settings for a specified development environment",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -147,15 +99,12 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "cloud9:UserArn",
-      "cloud9:EnvironmentId"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
-  "describeenvironmentstatus": {
-    "name": "DescribeEnvironmentStatus",
-    "description": "Grants permission to get status information for an AWS Cloud9 development environment",
+  "getmembershipsettings": {
+    "name": "GetMembershipSettings",
+    "description": "Grants permission to get the AWS Cloud9 IDE settings for a specified environment member",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -168,26 +117,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describeenvironments": {
-    "name": "DescribeEnvironments",
-    "description": "Grants permission to get information about AWS Cloud9 development environments",
+  "getmigrationexperiences": {
+    "name": "GetMigrationExperiences",
+    "description": "Grants permission to get the migration experience for a cloud9 user",
     "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "environment",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describesshremote": {
-    "name": "DescribeSSHRemote",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get details about the connection to the SSH development environment, including host, user, and port",
+  "getuserpublickey": {
+    "name": "GetUserPublicKey",
+    "description": "Grants permission to get the user's public SSH key, which is used by AWS Cloud9 to connect to SSH development environments",
     "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "cloud9:UserArn"
+    ],
+    "dependentActions": []
+  },
+  "getusersettings": {
+    "name": "GetUserSettings",
+    "description": "Grants permission to get the AWS Cloud9 IDE settings for a specified user",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifytemporarycredentialsonenvironmentec2": {
+    "name": "ModifyTemporaryCredentialsOnEnvironmentEC2",
+    "description": "Grants permission to set AWS managed temporary credentials on the Amazon EC2 instance that's used by the AWS Cloud9 integrated development environment (IDE)",
+    "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "environment",
@@ -199,11 +158,10 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getenvironmentconfig": {
-    "name": "GetEnvironmentConfig",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get configuration information that's used to initialize the AWS Cloud9 IDE",
-    "accessLevel": "Read",
+  "updateenvironmentsettings": {
+    "name": "UpdateEnvironmentSettings",
+    "description": "Grants permission to update the AWS Cloud9 IDE settings for a specified development environment",
+    "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "environment",
@@ -215,11 +173,10 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getenvironmentsettings": {
-    "name": "GetEnvironmentSettings",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get the AWS Cloud9 IDE settings for a specified development environment",
-    "accessLevel": "Read",
+  "updatemembershipsettings": {
+    "name": "UpdateMembershipSettings",
+    "description": "Grants permission to update the AWS Cloud9 IDE settings for a specified environment member",
+    "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "environment",
@@ -231,11 +188,10 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getmembershipsettings": {
-    "name": "GetMembershipSettings",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get the AWS Cloud9 IDE settings for a specified environment member",
-    "accessLevel": "Read",
+  "updatesshremote": {
+    "name": "UpdateSSHRemote",
+    "description": "Grants permission to update details about the connection to the SSH development environment, including host, user, and port",
+    "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "environment",
@@ -247,47 +203,34 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getmigrationexperiences": {
-    "name": "GetMigrationExperiences",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get the migration experience for a cloud9 user",
-    "accessLevel": "Read",
+  "updateusersettings": {
+    "name": "UpdateUserSettings",
+    "description": "Grants permission to update IDE-specific settings of an AWS Cloud9 user",
+    "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getuserpublickey": {
-    "name": "GetUserPublicKey",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get the user's public SSH key, which is used by AWS Cloud9 to connect to SSH development environments",
-    "accessLevel": "Read",
+  "createenvironmentec2": {
+    "name": "CreateEnvironmentEC2",
+    "description": "Grants permission to create an AWS Cloud9 development environment, launches an Amazon Elastic Compute Cloud (Amazon EC2) instance, and then hosts the environment on the instance",
+    "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "cloud9:EnvironmentName",
+      "cloud9:InstanceType",
+      "cloud9:OwnerArn",
+      "cloud9:SubnetId",
       "cloud9:UserArn"
     ],
     "dependentActions": []
   },
-  "getusersettings": {
-    "name": "GetUserSettings",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get the AWS Cloud9 IDE settings for a specified user",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "listenvironments": {
-    "name": "ListEnvironments",
-    "description": "Grants permission to get a list of AWS Cloud9 development environment identifiers",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "listtagsforresource": {
-    "name": "ListTagsForResource",
-    "description": "Grants permission to list tags for a cloud9 environment",
-    "accessLevel": "Read",
+  "createenvironmentmembership": {
+    "name": "CreateEnvironmentMembership",
+    "description": "Grants permission to add an environment member to an AWS Cloud9 development environment",
+    "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "environment",
@@ -296,13 +239,16 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "cloud9:EnvironmentId",
+      "cloud9:Permissions",
+      "cloud9:UserArn"
+    ],
     "dependentActions": []
   },
-  "modifytemporarycredentialsonenvironmentec2": {
-    "name": "ModifyTemporaryCredentialsOnEnvironmentEC2",
-    "isPermissionOnly": true,
-    "description": "Grants permission to set AWS managed temporary credentials on the Amazon EC2 instance that's used by the AWS Cloud9 integrated development environment (IDE)",
+  "deleteenvironment": {
+    "name": "DeleteEnvironment",
+    "description": "Grants permission to delete an AWS Cloud9 development environment. If the environment is hosted on an Amazon Elastic Compute Cloud (Amazon EC2) instance, also terminates the instance",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -315,10 +261,10 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "tagresource": {
-    "name": "TagResource",
-    "description": "Grants permission to add tags to a cloud9 environment",
-    "accessLevel": "Tagging",
+  "deleteenvironmentmembership": {
+    "name": "DeleteEnvironmentMembership",
+    "description": "Grants permission to delete an environment member from an AWS Cloud9 development environment",
+    "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "environment",
@@ -328,15 +274,15 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "cloud9:EnvironmentId",
+      "cloud9:UserArn"
     ],
     "dependentActions": []
   },
-  "untagresource": {
-    "name": "UntagResource",
-    "description": "Grants permission to remove tags from a cloud9 environment",
-    "accessLevel": "Tagging",
+  "describeenvironmentmemberships": {
+    "name": "DescribeEnvironmentMemberships",
+    "description": "Grants permission to get information about environment members for an AWS Cloud9 development environment",
+    "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "environment",
@@ -346,14 +292,15 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys"
+      "cloud9:EnvironmentId",
+      "cloud9:UserArn"
     ],
     "dependentActions": []
   },
-  "updateenvironment": {
-    "name": "UpdateEnvironment",
-    "description": "Grants permission to change the settings of an existing AWS Cloud9 development environment",
-    "accessLevel": "Write",
+  "describeenvironmentstatus": {
+    "name": "DescribeEnvironmentStatus",
+    "description": "Grants permission to get status information for an AWS Cloud9 development environment",
+    "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "environment",
@@ -365,10 +312,10 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "updateenvironmentmembership": {
-    "name": "UpdateEnvironmentMembership",
-    "description": "Grants permission to change the settings of an existing environment member for an AWS Cloud9 development environment",
-    "accessLevel": "Write",
+  "describeenvironments": {
+    "name": "DescribeEnvironments",
+    "description": "Grants permission to get information about AWS Cloud9 development environments",
+    "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "environment",
@@ -377,18 +324,21 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "cloud9:UserArn",
-      "cloud9:EnvironmentId",
-      "cloud9:Permissions"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
-  "updateenvironmentsettings": {
-    "name": "UpdateEnvironmentSettings",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update the AWS Cloud9 IDE settings for a specified development environment",
-    "accessLevel": "Write",
+  "listenvironments": {
+    "name": "ListEnvironments",
+    "description": "Grants permission to get a list of AWS Cloud9 development environment identifiers",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list tags for a cloud9 environment",
+    "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "environment",
@@ -400,11 +350,10 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "updatemembershipsettings": {
-    "name": "UpdateMembershipSettings",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update the AWS Cloud9 IDE settings for a specified environment member",
-    "accessLevel": "Write",
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to add tags to a cloud9 environment",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "environment",
@@ -413,13 +362,32 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
-  "updatesshremote": {
-    "name": "UpdateSSHRemote",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update details about the connection to the SSH development environment, including host, user, and port",
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to remove tags from a cloud9 environment",
+    "accessLevel": "Tagging, Write",
+    "resourceTypes": [
+      {
+        "name": "environment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "updateenvironment": {
+    "name": "UpdateEnvironment",
+    "description": "Grants permission to change the settings of an existing AWS Cloud9 development environment",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -432,13 +400,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "updateusersettings": {
-    "name": "UpdateUserSettings",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update IDE-specific settings of an AWS Cloud9 user",
+  "updateenvironmentmembership": {
+    "name": "UpdateEnvironmentMembership",
+    "description": "Grants permission to change the settings of an existing environment member for an AWS Cloud9 development environment",
     "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
+    "resourceTypes": [
+      {
+        "name": "environment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "cloud9:EnvironmentId",
+      "cloud9:Permissions",
+      "cloud9:UserArn"
+    ],
     "dependentActions": []
   }
 }

package/data/actions/clouddirectory.json

@@ -923,7 +923,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "directory",
@@ -938,7 +938,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "directory",