@cloud-copilot/iam-data 0.19.202607031 → 0.19.202607151

package/data/actions/cloudwatch.json

@@ -1,4 +1,105 @@
 {
+  "callwithbearertoken": {
+    "name": "CallWithBearerToken",
+    "description": "Grants permission to make API calls to CloudWatch using bearer token authentication",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletepipelinerule": {
+    "name": "DeletePipelineRule",
+    "description": "Grants permission to delete a pipeline rule for CloudWatch pipelines for OTel metric processing",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dataset",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getotelenrichment": {
+    "name": "GetOTelEnrichment",
+    "description": "Grants permission to retrieve the status of OTel Enrichment of vended metrics for PromQL querying",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getservicedata": {
+    "name": "GetServiceData",
+    "description": "Grants permission to retrieve service data",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "gettopologydiscoverystatus": {
+    "name": "GetTopologyDiscoveryStatus",
+    "description": "Grants permission to retrieve a CloudWatch topology discovery status",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "link": {
+    "name": "Link",
+    "description": "Grants permission to share CloudWatch resources with a monitoring account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listentitiesformetric": {
+    "name": "ListEntitiesForMetric",
+    "description": "Grants permission to retrieve all the entities that are emitting a given metric",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putpipelinerule": {
+    "name": "PutPipelineRule",
+    "description": "Grants permission to create or update a pipeline rule for CloudWatch pipelines for OTel metric processing",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dataset",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startotelenrichment": {
+    "name": "StartOTelEnrichment",
+    "description": "Grants permission to enable OTel Enrichment of vended metrics for PromQL querying",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stopotelenrichment": {
+    "name": "StopOTelEnrichment",
+    "description": "Grants permission to disable OTel Enrichment of vended metrics for PromQL querying",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "batchgetservicelevelindicatorreport": {
     "name": "BatchGetServiceLevelIndicatorReport",
     "description": "Grants permission to batch get service level indicator report",
@@ -22,15 +123,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "callwithbearertoken": {
-    "name": "CallWithBearerToken",
-    "isPermissionOnly": true,
-    "description": "Grants permission to make API calls to CloudWatch using bearer token authentication",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "createservicelevelobjective": {
     "name": "CreateServiceLevelObjective",
     "description": "Grants permission to create a service level objective",
@@ -70,11 +162,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "logs:CreateScheduledQuery",
-      "logs:DeleteScheduledQuery",
-      "logs:GetScheduledQuery"
-    ]
+    "dependentActions": []
   },
   "deleteanomalydetector": {
     "name": "DeleteAnomalyDetector",
@@ -129,22 +217,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deletepipelinerule": {
-    "name": "DeletePipelineRule",
-    "isPermissionOnly": true,
-    "description": "Grants permission to delete a pipeline rule for CloudWatch pipelines for OTel metric processing",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "dataset",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deleteservicelevelobjective": {
     "name": "DeleteServiceLevelObjective",
     "description": "Grants permission to delete a service level objective",
@@ -368,13 +440,13 @@
       {
         "name": "dataset",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "getmetricstatistics": {
@@ -408,15 +480,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getotelenrichment": {
-    "name": "GetOTelEnrichment",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve the status of OTel Enrichment of vended metrics for PromQL querying",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getservice": {
     "name": "GetService",
     "description": "Grants permission to retrieve information about a service",
@@ -432,22 +495,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getservicedata": {
-    "name": "GetServiceData",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve service data",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "service",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getservicelevelobjective": {
     "name": "GetServiceLevelObjective",
     "description": "Grants permission to retrieve information about service level objective",
@@ -463,15 +510,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "gettopologydiscoverystatus": {
-    "name": "GetTopologyDiscoveryStatus",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve a CloudWatch topology discovery status",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "gettopologymap": {
     "name": "GetTopologyMap",
     "description": "Grants permission to retrieve a CloudWatch topology map",
@@ -480,15 +518,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "link": {
-    "name": "Link",
-    "isPermissionOnly": true,
-    "description": "Grants permission to share CloudWatch resources with a monitoring account",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listalarmmuterules": {
     "name": "ListAlarmMuteRules",
     "description": "Grants permission to retrieve a list of alarm mute rules owned by the user's account",
@@ -512,15 +541,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listentitiesformetric": {
-    "name": "ListEntitiesForMetric",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve all the entities that are emitting a given metric",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listmanagedinsightrules": {
     "name": "ListManagedInsightRules",
     "description": "Grants permission to list available managed Insight Rules for a given Resource ARN",
@@ -549,13 +569,13 @@
       {
         "name": "dataset",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "listservicelevelobjectives": {
@@ -666,55 +686,55 @@
         ]
       },
       {
-        "name": "CloudWatch-Dashboard",
+        "name": "CloudWatch-InsightRule",
         "resourceTypes": [
           {
-            "name": "dashboard",
+            "name": "insight-rule",
             "required": true
           }
         ]
       },
       {
-        "name": "CloudWatch-Dataset",
+        "name": "CloudWatch-ServiceLevelObjective",
         "resourceTypes": [
           {
-            "name": "dataset",
+            "name": "slo",
             "required": true
           }
         ]
       },
       {
-        "name": "CloudWatch-InsightRule",
+        "name": "CloudWatch-Dashboard",
         "resourceTypes": [
           {
-            "name": "insight-rule",
+            "name": "dashboard",
             "required": true
           }
         ]
       },
       {
-        "name": "CloudWatch-MetricStream",
+        "name": "CloudWatch-Dataset",
         "resourceTypes": [
           {
-            "name": "metric-stream",
+            "name": "dataset",
             "required": true
           }
         ]
       },
       {
-        "name": "CloudWatch-Service",
+        "name": "CloudWatch-MetricStream",
         "resourceTypes": [
           {
-            "name": "service",
+            "name": "metric-stream",
             "required": true
           }
         ]
       },
       {
-        "name": "CloudWatch-ServiceLevelObjective",
+        "name": "CloudWatch-Service",
         "resourceTypes": [
           {
-            "name": "slo",
+            "name": "service",
             "required": true
           }
         ]
@@ -727,14 +747,14 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "alarm-mute-rule",
-        "required": true,
+        "name": "alarm",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "alarm",
-        "required": false,
+        "name": "alarm-mute-rule",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -818,13 +838,7 @@
         "name": "alarm",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "logs:CreateScheduledQuery",
-          "logs:DeleteScheduledQuery",
-          "logs:GetScheduledQuery",
-          "logs:UpdateScheduledQuery"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -910,22 +924,6 @@
     ],
     "dependentActions": []
   },
-  "putpipelinerule": {
-    "name": "PutPipelineRule",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create or update a pipeline rule for CloudWatch pipelines for OTel metric processing",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "dataset",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "setalarmstate": {
     "name": "SetAlarmState",
     "description": "Grants permission to temporarily set the state of an alarm for testing purposes",
@@ -956,15 +954,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "startotelenrichment": {
-    "name": "StartOTelEnrichment",
-    "isPermissionOnly": true,
-    "description": "Grants permission to enable OTel Enrichment of vended metrics for PromQL querying",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "stopmetricstreams": {
     "name": "StopMetricStreams",
     "description": "Grants permission to stop all CloudWatch metric streams that you specify",
@@ -980,19 +969,10 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "stopotelenrichment": {
-    "name": "StopOTelEnrichment",
-    "isPermissionOnly": true,
-    "description": "Grants permission to disable OTel Enrichment of vended metrics for PromQL querying",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to an Amazon CloudWatch resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "alarm",
@@ -1060,8 +1040,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": [],
     "scenarios": [
@@ -1084,55 +1064,55 @@
         ]
       },
       {
-        "name": "CloudWatch-Dashboard",
+        "name": "CloudWatch-InsightRule",
         "resourceTypes": [
           {
-            "name": "dashboard",
+            "name": "insight-rule",
             "required": true
           }
         ]
       },
       {
-        "name": "CloudWatch-Dataset",
+        "name": "CloudWatch-ServiceLevelObjective",
         "resourceTypes": [
           {
-            "name": "dataset",
+            "name": "slo",
             "required": true
           }
         ]
       },
       {
-        "name": "CloudWatch-InsightRule",
+        "name": "CloudWatch-Dashboard",
         "resourceTypes": [
           {
-            "name": "insight-rule",
+            "name": "dashboard",
             "required": true
           }
         ]
       },
       {
-        "name": "CloudWatch-MetricStream",
+        "name": "CloudWatch-Dataset",
         "resourceTypes": [
           {
-            "name": "metric-stream",
+            "name": "dataset",
             "required": true
           }
         ]
       },
       {
-        "name": "CloudWatch-Service",
+        "name": "CloudWatch-MetricStream",
         "resourceTypes": [
           {
-            "name": "service",
+            "name": "metric-stream",
             "required": true
           }
         ]
       },
       {
-        "name": "CloudWatch-ServiceLevelObjective",
+        "name": "CloudWatch-Service",
         "resourceTypes": [
           {
-            "name": "slo",
+            "name": "service",
             "required": true
           }
         ]
@@ -1142,7 +1122,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove a tag from an Amazon CloudWatch resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "alarm",
@@ -1233,55 +1213,55 @@
         ]
       },
       {
-        "name": "CloudWatch-Dashboard",
+        "name": "CloudWatch-InsightRule",
         "resourceTypes": [
           {
-            "name": "dashboard",
+            "name": "insight-rule",
             "required": true
           }
         ]
       },
       {
-        "name": "CloudWatch-Dataset",
+        "name": "CloudWatch-ServiceLevelObjective",
         "resourceTypes": [
           {
-            "name": "dataset",
+            "name": "slo",
             "required": true
           }
         ]
       },
       {
-        "name": "CloudWatch-InsightRule",
+        "name": "CloudWatch-Dashboard",
         "resourceTypes": [
           {
-            "name": "insight-rule",
+            "name": "dashboard",
             "required": true
           }
         ]
       },
       {
-        "name": "CloudWatch-MetricStream",
+        "name": "CloudWatch-Dataset",
         "resourceTypes": [
           {
-            "name": "metric-stream",
+            "name": "dataset",
             "required": true
           }
         ]
       },
       {
-        "name": "CloudWatch-Service",
+        "name": "CloudWatch-MetricStream",
         "resourceTypes": [
           {
-            "name": "service",
+            "name": "metric-stream",
             "required": true
           }
         ]
       },
       {
-        "name": "CloudWatch-ServiceLevelObjective",
+        "name": "CloudWatch-Service",
         "resourceTypes": [
           {
-            "name": "slo",
+            "name": "service",
             "required": true
           }
         ]

package/data/actions/codeartifact.json

@@ -101,7 +101,7 @@
   "deletedomainpermissionspolicy": {
     "name": "DeleteDomainPermissionsPolicy",
     "description": "Grants permission to delete the resource policy set on a domain",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "domain",
@@ -176,7 +176,7 @@
   "deleterepositorypermissionspolicy": {
     "name": "DeleteRepositoryPermissionsPolicy",
     "description": "Grants permission to delete the resource policy set on a repository",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "repository",
@@ -669,7 +669,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a CodeArtifact resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "domain",
@@ -699,7 +699,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove a tag from a CodeArtifact resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "domain",